Warning: Permanently added '10.128.0.160' (ED25519) to the list of known hosts. Setting up swapspace version 1, size = 127995904 bytes [ 56.534896][ T5073] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k executing program [ 56.826422][ T5080] loop0: detected capacity change from 0 to 32768 [ 56.840172][ T5080] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 56.848610][ T5080] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 56.866399][ T5080] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 56.879124][ T25] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 56.885976][ T25] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 56.923473][ T25] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 37ms [ 56.932968][ T25] gfs2: fsid=syz:syz.0: jid=0: Done [ 56.938454][ T5080] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 56.952105][ T5080] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 56.961869][ T5080] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 56.976274][ T5080] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 56.985338][ T5080] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5080 [syz-executor201] iterate_dir+0x57a/0x810 [ 56.995398][ T5080] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 57.003867][ T5080] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 57.011320][ T5080] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 57.020117][ T5080] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 57.027028][ T5080] gfs2: fsid=syz:syz.0: File system withdrawn [ 57.033194][ T5080] CPU: 0 PID: 5080 Comm: syz-executor201 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 57.043704][ T5080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 57.053756][ T5080] Call Trace: [ 57.057039][ T5080] [ 57.059958][ T5080] dump_stack_lvl+0x241/0x360 [ 57.064641][ T5080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 57.069829][ T5080] ? __pfx__printk+0x10/0x10 [ 57.074406][ T5080] ? kobject_uevent_env+0x54d/0x8e0 [ 57.079593][ T5080] gfs2_withdraw+0xefa/0x1460 [ 57.084269][ T5080] ? __pfx_gfs2_withdraw+0x10/0x10 [ 57.089368][ T5080] ? gfs2_dirent_scan+0x27c/0x670 [ 57.094387][ T5080] ? __pfx__printk+0x10/0x10 [ 57.098972][ T5080] ? gfs2_consist_inode_i+0xf5/0x110 [ 57.104254][ T5080] gfs2_dirent_scan+0x52b/0x670 [ 57.109108][ T5080] ? gfs2_dir_read+0x73e/0x1af0 [ 57.113957][ T5080] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 57.119504][ T5080] gfs2_dir_read+0x82f/0x1af0 [ 57.124175][ T5080] ? inode_dio_wait+0x2ae/0x340 [ 57.129012][ T5080] ? __pfx_inode_dio_wait+0x10/0x10 [ 57.134196][ T5080] ? __pfx_gfs2_dir_read+0x10/0x10 [ 57.139293][ T5080] ? gfs2_glock_nq+0x1250/0x1ab0 [ 57.144219][ T5080] ? inode_go_held+0xea/0x200 [ 57.148883][ T5080] ? gfs2_glock_wait+0x21a/0x2b0 [ 57.153803][ T5080] gfs2_readdir+0x14e/0x1b0 [ 57.158290][ T5080] ? __pfx_gfs2_readdir+0x10/0x10 [ 57.163295][ T5080] ? iterate_dir+0x57a/0x810 [ 57.167872][ T5080] ? __fget_files+0x29/0x470 [ 57.172443][ T5080] ? __fget_files+0x3f6/0x470 [ 57.177100][ T5080] ? bpf_lsm_file_permission+0x9/0x10 [ 57.182457][ T5080] iterate_dir+0x57a/0x810 [ 57.186862][ T5080] __se_sys_getdents+0x1ef/0x4d0 [ 57.191792][ T5080] ? __pfx___se_sys_getdents+0x10/0x10 [ 57.197238][ T5080] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 57.203197][ T5080] ? __pfx_filldir+0x10/0x10 [ 57.207771][ T5080] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 57.214090][ T5080] ? do_syscall_64+0x100/0x230 [ 57.218844][ T5080] ? do_syscall_64+0xb6/0x230 [ 57.223505][ T5080] do_syscall_64+0xf3/0x230 [ 57.227992][ T5080] ? clear_bhb_loop+0x35/0x90 [ 57.232653][ T5080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.238540][ T5080] RIP: 0033:0x7fc9a7de9779 [ 57.242943][ T5080] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 1f 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 57.262535][ T5080] RSP: 002b:00007fc9a7d96168 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 57.270930][ T5080] RAX: ffffffffffffffda RBX: 00007fc9a7e7d6c8 RCX: 00007fc9a7de9779 [ 57.278896][ T5080] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 57.286855][ T5080] RBP: 00007fc9a7e7d6c0 R08: 00007fc9a7d966c0 R09: 0000000000000000 [ 57.294812][ T5080] R10: 00007fc9a7d966c0 R11: 0000000000000246 R12: 00007fc9a7e7d6cc [ 57.302767][ T5080] R13: 0000000000000006 R14: 00007ffc076d7a00 R15: 00007ffc076d7ae8 [ 57.310734][ T5080] executing program [ 57.700640][ T5084] loop0: detected capacity change from 0 to 32768 [ 57.710719][ T5084] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 57.718979][ T5084] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 57.732786][ T5084] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 57.742109][ T25] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 57.749089][ T25] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 57.786272][ T25] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 37ms [ 57.793893][ T25] gfs2: fsid=syz:syz.0: jid=0: Done [ 57.799161][ T5084] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 57.811016][ T5084] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 57.820659][ T5084] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 57.835030][ T5084] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 57.844084][ T5084] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5084 [syz-executor201] iterate_dir+0x57a/0x810 [ 57.854038][ T5084] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 57.862503][ T5084] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 57.869755][ T5084] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 57.878570][ T5084] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 57.885858][ T5084] gfs2: fsid=syz:syz.0: File system withdrawn [ 57.892040][ T5084] CPU: 0 PID: 5084 Comm: syz-executor201 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 57.902540][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 57.912579][ T5084] Call Trace: [ 57.915844][ T5084] [ 57.918761][ T5084] dump_stack_lvl+0x241/0x360 [ 57.923453][ T5084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 57.928644][ T5084] ? __pfx__printk+0x10/0x10 [ 57.933236][ T5084] ? kobject_uevent_env+0x54d/0x8e0 [ 57.938423][ T5084] gfs2_withdraw+0xefa/0x1460 [ 57.943095][ T5084] ? __pfx_gfs2_withdraw+0x10/0x10 [ 57.948192][ T5084] ? gfs2_dirent_scan+0x27c/0x670 [ 57.953207][ T5084] ? __pfx__printk+0x10/0x10 [ 57.957810][ T5084] ? gfs2_consist_inode_i+0xf5/0x110 [ 57.963091][ T5084] gfs2_dirent_scan+0x52b/0x670 [ 57.967925][ T5084] ? gfs2_dir_read+0x73e/0x1af0 [ 57.972756][ T5084] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 57.978286][ T5084] gfs2_dir_read+0x82f/0x1af0 [ 57.982957][ T5084] ? inode_dio_wait+0x2ae/0x340 [ 57.987799][ T5084] ? __pfx_inode_dio_wait+0x10/0x10 [ 57.992997][ T5084] ? __pfx_gfs2_dir_read+0x10/0x10 [ 57.998098][ T5084] ? gfs2_glock_nq+0x1250/0x1ab0 [ 58.003035][ T5084] ? inode_go_held+0xea/0x200 [ 58.007701][ T5084] ? gfs2_glock_wait+0x21a/0x2b0 [ 58.012631][ T5084] gfs2_readdir+0x14e/0x1b0 [ 58.017126][ T5084] ? __pfx_gfs2_readdir+0x10/0x10 [ 58.022139][ T5084] ? iterate_dir+0x57a/0x810 [ 58.026721][ T5084] ? __fget_files+0x29/0x470 [ 58.031305][ T5084] ? __fget_files+0x3f6/0x470 [ 58.035968][ T5084] ? bpf_lsm_file_permission+0x9/0x10 [ 58.041329][ T5084] iterate_dir+0x57a/0x810 [ 58.045742][ T5084] __se_sys_getdents+0x1ef/0x4d0 [ 58.050681][ T5084] ? __pfx___se_sys_getdents+0x10/0x10 [ 58.056132][ T5084] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 58.062098][ T5084] ? __pfx_filldir+0x10/0x10 [ 58.066676][ T5084] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 58.072993][ T5084] ? do_syscall_64+0x100/0x230 [ 58.077754][ T5084] ? do_syscall_64+0xb6/0x230 [ 58.082429][ T5084] do_syscall_64+0xf3/0x230 [ 58.086929][ T5084] ? clear_bhb_loop+0x35/0x90 [ 58.091609][ T5084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.097495][ T5084] RIP: 0033:0x7fc9a7de9779 [ 58.101910][ T5084] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 1f 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 58.121502][ T5084] RSP: 002b:00007fc9a7d96168 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 58.129928][ T5084] RAX: ffffffffffffffda RBX: 00007fc9a7e7d6c8 RCX: 00007fc9a7de9779 [ 58.137889][ T5084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 58.145847][ T5084] RBP: 00007fc9a7e7d6c0 R08: 00007fc9a7d966c0 R09: 0000000000000000 [ 58.153810][ T5084] R10: 00007fc9a7d966c0 R11: 0000000000000246 R12: 00007fc9a7e7d6cc [ 58.161771][ T5084] R13: 0000000000000016 R14: 00007ffc076d7a00 R15: 00007ffc076d7ae8 [ 58.169744][ T5084] executing program [ 58.533181][ T5088] loop0: detected capacity change from 0 to 32768 [ 58.543936][ T5088] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 58.552273][ T5088] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 58.565781][ T5088] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 58.574979][ T25] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 58.581867][ T25] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 58.618027][ T25] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 36ms [ 58.625522][ T25] gfs2: fsid=syz:syz.0: jid=0: Done [ 58.631275][ T5088] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 58.643227][ T5088] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 58.652793][ T5088] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 58.667160][ T5088] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 58.676249][ T5088] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5088 [syz-executor201] iterate_dir+0x57a/0x810 [ 58.686207][ T5088] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 58.694657][ T5088] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 58.701883][ T5088] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 58.710683][ T5088] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 58.717254][ T5088] gfs2: fsid=syz:syz.0: File system withdrawn [ 58.723355][ T5088] CPU: 1 PID: 5088 Comm: syz-executor201 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 58.733852][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 58.743889][ T5088] Call Trace: [ 58.747154][ T5088] [ 58.750077][ T5088] dump_stack_lvl+0x241/0x360 [ 58.754749][ T5088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 58.759934][ T5088] ? __pfx__printk+0x10/0x10 [ 58.764513][ T5088] ? kobject_uevent_env+0x54d/0x8e0 [ 58.769733][ T5088] gfs2_withdraw+0xefa/0x1460 [ 58.774418][ T5088] ? __pfx_gfs2_withdraw+0x10/0x10 [ 58.779514][ T5088] ? gfs2_dirent_scan+0x27c/0x670 [ 58.784524][ T5088] ? __pfx__printk+0x10/0x10 [ 58.789104][ T5088] ? gfs2_consist_inode_i+0xf5/0x110 [ 58.794377][ T5088] gfs2_dirent_scan+0x52b/0x670 [ 58.799215][ T5088] ? gfs2_dir_read+0x73e/0x1af0 [ 58.804050][ T5088] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 58.809586][ T5088] gfs2_dir_read+0x82f/0x1af0 [ 58.814255][ T5088] ? inode_dio_wait+0x2ae/0x340 [ 58.819101][ T5088] ? __pfx_inode_dio_wait+0x10/0x10 [ 58.824295][ T5088] ? __pfx_gfs2_dir_read+0x10/0x10 [ 58.829401][ T5088] ? gfs2_glock_nq+0x1250/0x1ab0 [ 58.834334][ T5088] ? inode_go_held+0xea/0x200 [ 58.839003][ T5088] ? gfs2_glock_wait+0x21a/0x2b0 [ 58.843935][ T5088] gfs2_readdir+0x14e/0x1b0 [ 58.848432][ T5088] ? __pfx_gfs2_readdir+0x10/0x10 [ 58.853884][ T5088] ? iterate_dir+0x57a/0x810 [ 58.858466][ T5088] ? __fget_files+0x29/0x470 [ 58.863048][ T5088] ? __fget_files+0x3f6/0x470 [ 58.867716][ T5088] ? bpf_lsm_file_permission+0x9/0x10 [ 58.873081][ T5088] iterate_dir+0x57a/0x810 [ 58.877493][ T5088] __se_sys_getdents+0x1ef/0x4d0 [ 58.882430][ T5088] ? __pfx___se_sys_getdents+0x10/0x10 [ 58.887882][ T5088] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 58.893849][ T5088] ? __pfx_filldir+0x10/0x10 [ 58.898430][ T5088] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 58.904746][ T5088] ? do_syscall_64+0x100/0x230 [ 58.909506][ T5088] ? do_syscall_64+0xb6/0x230 [ 58.914178][ T5088] do_syscall_64+0xf3/0x230 [ 58.918676][ T5088] ? clear_bhb_loop+0x35/0x90 [ 58.923347][ T5088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.929233][ T5088] RIP: 0033:0x7fc9a7de9779 [ 58.933723][ T5088] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 1f 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 58.953344][ T5088] RSP: 002b:00007fc9a7d96168 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 58.961753][ T5088] RAX: ffffffffffffffda RBX: 00007fc9a7e7d6c8 RCX: 00007fc9a7de9779 [ 58.969718][ T5088] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 58.977675][ T5088] RBP: 00007fc9a7e7d6c0 R08: 00007fc9a7d966c0 R09: 0000000000000000 [ 58.985634][ T5088] R10: 00007fc9a7d966c0 R11: 0000000000000246 R12: 00007fc9a7e7d6cc [ 58.993598][ T5088] R13: 0000000000000016 R14: 00007ffc076d7a00 R15: 00007ffc076d7ae8 [ 59.001571][ T5088] executing program [ 59.348427][ T5093] loop0: detected capacity change from 0 to 32768 [ 59.357991][ T5093] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 59.366176][ T5093] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 59.379975][ T5093] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 59.389729][ T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 59.396487][ T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 59.433132][ T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 36ms [ 59.440760][ T8] gfs2: fsid=syz:syz.0: jid=0: Done [ 59.445988][ T5093] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 59.458017][ T5093] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 59.467608][ T5093] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 59.482437][ T5093] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 59.491894][ T5093] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5093 [syz-executor201] iterate_dir+0x57a/0x810 [ 59.502064][ T5093] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 59.509812][ T5095] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 59.510595][ T5093] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 59.520724][ T5095] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:4 m:20 p:1 [ 59.527306][ T5093] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 59.536648][ T5095] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5093 [syz-executor201] iterate_dir+0x57a/0x810 [ 59.545113][ T5093] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 59.545290][ T5093] gfs2: fsid=syz:syz.0: File system withdrawn [ 59.555623][ T5095] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5095 [syz-executor201] __gfs2_lookup+0xa4/0x280 [ 59.564513][ T5093] CPU: 0 PID: 5093 Comm: syz-executor201 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 59.568150][ T5095] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 59.577578][ T5093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 59.577592][ T5093] Call Trace: [ 59.577601][ T5093] [ 59.577610][ T5093] dump_stack_lvl+0x241/0x360 [ 59.617349][ T5093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 59.622536][ T5093] ? __pfx__printk+0x10/0x10 [ 59.627288][ T5093] ? kobject_uevent_env+0x54d/0x8e0 [ 59.632475][ T5093] gfs2_withdraw+0xefa/0x1460 [ 59.637148][ T5093] ? __pfx_gfs2_withdraw+0x10/0x10 [ 59.642246][ T5093] ? gfs2_dirent_scan+0x27c/0x670 [ 59.647255][ T5093] ? __pfx__printk+0x10/0x10 [ 59.651847][ T5093] ? gfs2_consist_inode_i+0xf5/0x110 [ 59.657146][ T5093] gfs2_dirent_scan+0x52b/0x670 [ 59.661986][ T5093] ? gfs2_dir_read+0x73e/0x1af0 [ 59.666820][ T5093] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 59.672351][ T5093] gfs2_dir_read+0x82f/0x1af0 [ 59.677017][ T5093] ? inode_dio_wait+0x2ae/0x340 [ 59.681854][ T5093] ? __pfx_inode_dio_wait+0x10/0x10 [ 59.687051][ T5093] ? __pfx_gfs2_dir_read+0x10/0x10 [ 59.692151][ T5093] ? gfs2_glock_nq+0x1250/0x1ab0 [ 59.697086][ T5093] ? inode_go_held+0xea/0x200 [ 59.701761][ T5093] ? gfs2_glock_wait+0x21a/0x2b0 [ 59.706680][ T5093] gfs2_readdir+0x14e/0x1b0 [ 59.711168][ T5093] ? __pfx_gfs2_readdir+0x10/0x10 [ 59.716172][ T5093] ? iterate_dir+0x57a/0x810 [ 59.720743][ T5093] ? __fget_files+0x29/0x470 [ 59.725309][ T5093] ? __fget_files+0x3f6/0x470 [ 59.729972][ T5093] ? bpf_lsm_file_permission+0x9/0x10 [ 59.735326][ T5093] iterate_dir+0x57a/0x810 [ 59.739741][ T5093] __se_sys_getdents+0x1ef/0x4d0 [ 59.744680][ T5093] ? __pfx___se_sys_getdents+0x10/0x10 [ 59.750122][ T5093] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 59.756083][ T5093] ? __pfx_filldir+0x10/0x10 [ 59.760651][ T5093] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 59.766957][ T5093] ? do_syscall_64+0x100/0x230 [ 59.771709][ T5093] ? do_syscall_64+0xb6/0x230 [ 59.776367][ T5093] do_syscall_64+0xf3/0x230 [ 59.780852][ T5093] ? clear_bhb_loop+0x35/0x90 [ 59.785513][ T5093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.791388][ T5093] RIP: 0033:0x7fc9a7de9779 [ 59.795782][ T5093] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 1f 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 59.815376][ T5093] RSP: 002b:00007fc9a7d96168 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 59.823777][ T5093] RAX: ffffffffffffffda RBX: 00007fc9a7e7d6c8 RCX: 00007fc9a7de9779 [ 59.831734][ T5093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 59.839687][ T5093] RBP: 00007fc9a7e7d6c0 R08: 00007fc9a7d966c0 R09: 0000000000000000 [ 59.847638][ T5093] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9a7e7d6cc [ 59.855591][ T5093] R13: 0000000000000016 R14: 00007ffc076d7a00 R15: 00007ffc076d7ae8 [ 59.863556][ T5093] executing program [ 60.203088][ T5098] loop0: detected capacity change from 0 to 32768 [ 60.216249][ T5098] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 60.224494][ T5098] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 60.236693][ T5098] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 60.245906][ T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 60.253201][ T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 60.289833][ T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 36ms [ 60.297329][ T8] gfs2: fsid=syz:syz.0: jid=0: Done [ 60.302666][ T5098] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 60.314234][ T5098] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 60.323884][ T5098] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 60.338259][ T5098] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 60.347302][ T5098] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5098 [syz-executor201] iterate_dir+0x57a/0x810 [ 60.357267][ T5098] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 60.365797][ T5098] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 60.373325][ T5098] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 60.382434][ T5098] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 60.389394][ T5098] gfs2: fsid=syz:syz.0: File system withdrawn [ 60.395491][ T5098] CPU: 1 PID: 5098 Comm: syz-executor201 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 60.405985][ T5098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 60.416041][ T5098] Call Trace: [ 60.419307][ T5098] [ 60.422222][ T5098] dump_stack_lvl+0x241/0x360 [ 60.426890][ T5098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 60.432079][ T5098] ? __pfx__printk+0x10/0x10 [ 60.436660][ T5098] ? kobject_uevent_env+0x54d/0x8e0 [ 60.441850][ T5098] gfs2_withdraw+0xefa/0x1460 [ 60.446536][ T5098] ? __pfx_gfs2_withdraw+0x10/0x10 [ 60.451647][ T5098] ? gfs2_dirent_scan+0x27c/0x670 [ 60.456659][ T5098] ? __pfx__printk+0x10/0x10 [ 60.461243][ T5098] ? gfs2_consist_inode_i+0xf5/0x110 [ 60.466527][ T5098] gfs2_dirent_scan+0x52b/0x670 [ 60.471380][ T5098] ? gfs2_dir_read+0x73e/0x1af0 [ 60.476218][ T5098] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 60.481752][ T5098] gfs2_dir_read+0x82f/0x1af0 [ 60.486426][ T5098] ? inode_dio_wait+0x2ae/0x340 [ 60.491268][ T5098] ? __pfx_inode_dio_wait+0x10/0x10 [ 60.496461][ T5098] ? __pfx_gfs2_dir_read+0x10/0x10 [ 60.501560][ T5098] ? gfs2_glock_nq+0x1250/0x1ab0 [ 60.506484][ T5098] ? inode_go_held+0xea/0x200 [ 60.511144][ T5098] ? gfs2_glock_wait+0x21a/0x2b0 [ 60.516064][ T5098] gfs2_readdir+0x14e/0x1b0 [ 60.520554][ T5098] ? __pfx_gfs2_readdir+0x10/0x10 [ 60.525564][ T5098] ? iterate_dir+0x57a/0x810 [ 60.530143][ T5098] ? __fget_files+0x29/0x470 [ 60.534717][ T5098] ? __fget_files+0x3f6/0x470 [ 60.539463][ T5098] ? bpf_lsm_file_permission+0x9/0x10 [ 60.544821][ T5098] iterate_dir+0x57a/0x810 [ 60.549229][ T5098] __se_sys_getdents+0x1ef/0x4d0 [ 60.554163][ T5098] ? __pfx___se_sys_getdents+0x10/0x10 [ 60.559612][ T5098] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 60.565569][ T5098] ? __pfx_filldir+0x10/0x10 [ 60.570144][ T5098] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 60.576451][ T5098] ? do_syscall_64+0x100/0x230 [ 60.581208][ T5098] ? do_syscall_64+0xb6/0x230 [ 60.585870][ T5098] do_syscall_64+0xf3/0x230 [ 60.590361][ T5098] ? clear_bhb_loop+0x35/0x90 [ 60.595026][ T5098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.600920][ T5098] RIP: 0033:0x7fc9a7de9779 [ 60.605317][ T5098] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 1f 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 60.624906][ T5098] RSP: 002b:00007fc9a7d96168 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 60.633913][ T5098] RAX: ffffffffffffffda RBX: 00007fc9a7e7d6c8 RCX: 00007fc9a7de9779 [ 60.641870][ T5098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 60.649996][ T5098] RBP: 00007fc9a7e7d6c0 R08: 00007fc9a7d966c0 R09: 0000000000000000 [ 60.657952][ T5098] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9a7e7d6cc [ 60.665900][ T5098] R13: 0000000000000016 R14: 00007ffc076d7a00 R15: 00007ffc076d7ae8 [ 60.673865][ T5098] executing program [ 61.023290][ T5103] loop0: detected capacity change from 0 to 32768 [ 61.032692][ T5103] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 61.041003][ T5103] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 61.052788][ T5103] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 61.062150][ T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 61.068990][ T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 61.105086][ T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 36ms [ 61.112655][ T8] gfs2: fsid=syz:syz.0: jid=0: Done [ 61.118028][ T5103] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 61.130223][ T5103] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 61.139872][ T5103] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 61.154400][ T5103] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 61.163598][ T5103] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5103 [syz-executor201] iterate_dir+0x57a/0x810 [ 61.173769][ T5103] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 61.182283][ T5103] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 61.189580][ T5103] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 61.198374][ T5103] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 61.205204][ T5103] gfs2: fsid=syz:syz.0: File system withdrawn [ 61.211327][ T5103] CPU: 1 PID: 5103 Comm: syz-executor201 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 61.221824][ T5103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 61.231864][ T5103] Call Trace: [ 61.235131][ T5103] [ 61.238050][ T5103] dump_stack_lvl+0x241/0x360 [ 61.242721][ T5103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 61.247914][ T5103] ? __pfx__printk+0x10/0x10 [ 61.252490][ T5103] ? kobject_uevent_env+0x54d/0x8e0 [ 61.257679][ T5103] gfs2_withdraw+0xefa/0x1460 [ 61.262350][ T5103] ? __pfx_gfs2_withdraw+0x10/0x10 [ 61.267449][ T5103] ? gfs2_dirent_scan+0x27c/0x670 [ 61.272473][ T5103] ? __pfx__printk+0x10/0x10 [ 61.277071][ T5103] ? gfs2_consist_inode_i+0xf5/0x110 [ 61.282356][ T5103] gfs2_dirent_scan+0x52b/0x670 [ 61.287203][ T5103] ? gfs2_dir_read+0x73e/0x1af0 [ 61.292054][ T5103] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 61.297601][ T5103] gfs2_dir_read+0x82f/0x1af0 [ 61.302280][ T5103] ? inode_dio_wait+0x2ae/0x340 [ 61.307125][ T5103] ? __pfx_inode_dio_wait+0x10/0x10 [ 61.312320][ T5103] ? __pfx_gfs2_dir_read+0x10/0x10 [ 61.317427][ T5103] ? gfs2_glock_nq+0x1250/0x1ab0 [ 61.322364][ T5103] ? inode_go_held+0xea/0x200 [ 61.327033][ T5103] ? gfs2_glock_wait+0x21a/0x2b0 [ 61.331965][ T5103] gfs2_readdir+0x14e/0x1b0 [ 61.336551][ T5103] ? __pfx_gfs2_readdir+0x10/0x10 [ 61.341570][ T5103] ? iterate_dir+0x57a/0x810 [ 61.346154][ T5103] ? __fget_files+0x29/0x470 [ 61.350736][ T5103] ? __fget_files+0x3f6/0x470 [ 61.355402][ T5103] ? bpf_lsm_file_permission+0x9/0x10 [ 61.360768][ T5103] iterate_dir+0x57a/0x810 [ 61.365183][ T5103] __se_sys_getdents+0x1ef/0x4d0 [ 61.370123][ T5103] ? __pfx___se_sys_getdents+0x10/0x10 [ 61.375574][ T5103] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 61.381550][ T5103] ? __pfx_filldir+0x10/0x10 [ 61.386127][ T5103] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 61.392444][ T5103] ? do_syscall_64+0x100/0x230 [ 61.397206][ T5103] ? do_syscall_64+0xb6/0x230 [ 61.401879][ T5103] do_syscall_64+0xf3/0x230 [ 61.406379][ T5103] ? clear_bhb_loop+0x35/0x90 [ 61.411051][ T5103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.416937][ T5103] RIP: 0033:0x7fc9a7de9779 [ 61.421342][ T5103] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 1f 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 61.440935][ T5103] RSP: 002b:00007fc9a7d96168 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 61.449340][ T5103] RAX: ffffffffffffffda RBX: 00007fc9a7e7d6c8 RCX: 00007fc9a7de9779 [ 61.457299][ T5103] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 61.465259][ T5103] RBP: 00007fc9a7e7d6c0 R08: 00007fc9a7d966c0 R09: 0000000000000000 [ 61.473218][ T5103] R10: 00007fc9a7d966c0 R11: 0000000000000246 R12: 00007fc9a7e7d6cc [ 61.481178][ T5103] R13: 0000000000000016 R14: 00007ffc076d7a00 R15: 00007ffc076d7ae8 [ 61.489150][ T5103] executing program [ 61.851643][ T5107] loop0: detected capacity change from 0 to 32768 [ 61.861357][ T5107] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 61.869650][ T5107] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 61.881862][ T5107] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 61.890847][ T8] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 61.897614][ T8] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 61.929934][ T8] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 32ms [ 61.937427][ T8] gfs2: fsid=syz:syz.0: jid=0: Done [ 61.943036][ T5107] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 61.954551][ T5107] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 61.964254][ T5107] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 61.978762][ T5107] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 61.987955][ T5107] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5107 [syz-executor201] iterate_dir+0x57a/0x810 [ 61.998044][ T5107] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 62.006494][ T5107] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 62.013730][ T5107] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 62.022517][ T5107] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 62.029496][ T5107] gfs2: fsid=syz:syz.0: File system withdrawn [ 62.035579][ T5107] CPU: 1 PID: 5107 Comm: syz-executor201 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 62.046063][ T5107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 62.056104][ T5107] Call Trace: [ 62.059373][ T5107] [ 62.062294][ T5107] dump_stack_lvl+0x241/0x360 [ 62.066971][ T5107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 62.072163][ T5107] ? __pfx__printk+0x10/0x10 [ 62.076742][ T5107] ? kobject_uevent_env+0x54d/0x8e0 [ 62.081929][ T5107] gfs2_withdraw+0xefa/0x1460 [ 62.086600][ T5107] ? __pfx_gfs2_withdraw+0x10/0x10 [ 62.091702][ T5107] ? gfs2_dirent_scan+0x27c/0x670 [ 62.096713][ T5107] ? __pfx__printk+0x10/0x10 [ 62.101296][ T5107] ? gfs2_consist_inode_i+0xf5/0x110 [ 62.106696][ T5107] gfs2_dirent_scan+0x52b/0x670 [ 62.111536][ T5107] ? gfs2_dir_read+0x73e/0x1af0 [ 62.116372][ T5107] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 62.121906][ T5107] gfs2_dir_read+0x82f/0x1af0 [ 62.126593][ T5107] ? inode_dio_wait+0x2ae/0x340 [ 62.131436][ T5107] ? __pfx_inode_dio_wait+0x10/0x10 [ 62.136620][ T5107] ? __pfx_gfs2_dir_read+0x10/0x10 [ 62.141716][ T5107] ? gfs2_glock_nq+0x1250/0x1ab0 [ 62.146670][ T5107] ? inode_go_held+0xea/0x200 [ 62.151334][ T5107] ? gfs2_glock_wait+0x21a/0x2b0 [ 62.156254][ T5107] gfs2_readdir+0x14e/0x1b0 [ 62.160743][ T5107] ? __pfx_gfs2_readdir+0x10/0x10 [ 62.165751][ T5107] ? iterate_dir+0x57a/0x810 [ 62.170346][ T5107] ? __fget_files+0x29/0x470 [ 62.174932][ T5107] ? __fget_files+0x3f6/0x470 [ 62.179675][ T5107] ? bpf_lsm_file_permission+0x9/0x10 [ 62.185033][ T5107] iterate_dir+0x57a/0x810 [ 62.189442][ T5107] __se_sys_getdents+0x1ef/0x4d0 [ 62.194373][ T5107] ? __pfx___se_sys_getdents+0x10/0x10 [ 62.199830][ T5107] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 62.205998][ T5107] ? __pfx_filldir+0x10/0x10 [ 62.210668][ T5107] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 62.216990][ T5107] ? do_syscall_64+0x100/0x230 [ 62.221743][ T5107] ? do_syscall_64+0xb6/0x230 [ 62.226406][ T5107] do_syscall_64+0xf3/0x230 [ 62.230920][ T5107] ? clear_bhb_loop+0x35/0x90 [ 62.235594][ T5107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.241478][ T5107] RIP: 0033:0x7fc9a7de9779 [ 62.245878][ T5107] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 1f 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 62.265472][ T5107] RSP: 002b:00007fc9a7d96168 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 62.273875][ T5107] RAX: ffffffffffffffda RBX: 00007fc9a7e7d6c8 RCX: 00007fc9a7de9779 [ 62.281831][ T5107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 62.289783][ T5107] RBP: 00007fc9a7e7d6c0 R08: 00007fc9a7d966c0 R09: 0000000000000000 [ 62.297736][ T5107] R10: 00007fc9a7d966c0 R11: 0000000000000246 R12: 00007fc9a7e7d6cc [ 62.305703][ T5107] R13: 0000000000000016 R14: 00007ffc076d7a00 R15: 00007ffc076d7ae8 [ 62.313670][ T5107] executing program [ 62.659682][ T5111] loop0: detected capacity change from 0 to 32768 [ 62.669676][ T5111] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 62.677965][ T5111] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 62.690596][ T5111] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 62.699826][ T5090] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 62.706597][ T5090] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 62.738300][ T5090] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 31ms [ 62.746630][ T5090] gfs2: fsid=syz:syz.0: jid=0: Done [ 62.751943][ T5111] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 62.763660][ T5111] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 62.773394][ T5111] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 62.787883][ T5111] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 62.796925][ T5111] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5111 [syz-executor201] iterate_dir+0x57a/0x810 [ 62.806892][ T5111] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 62.814578][ T5113] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 62.815339][ T5111] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 62.825273][ T5113] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:4 m:20 p:1 [ 62.832146][ T5111] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 62.841490][ T5113] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5111 [syz-executor201] iterate_dir+0x57a/0x810 [ 62.849899][ T5111] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 62.860888][ T5113] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5113 [syz-executor201] __gfs2_lookup+0xa4/0x280 [ 62.867061][ T5111] gfs2: fsid=syz:syz.0: File system withdrawn [ 62.879248][ T5113] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 62.883004][ T5111] CPU: 0 PID: 5111 Comm: syz-executor201 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 62.901887][ T5111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 62.911923][ T5111] Call Trace: [ 62.915185][ T5111] [ 62.918102][ T5111] dump_stack_lvl+0x241/0x360 [ 62.922769][ T5111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 62.927954][ T5111] ? __pfx__printk+0x10/0x10 [ 62.932529][ T5111] ? kobject_uevent_env+0x54d/0x8e0 [ 62.937715][ T5111] gfs2_withdraw+0xefa/0x1460 [ 62.942396][ T5111] ? __pfx_gfs2_withdraw+0x10/0x10 [ 62.947499][ T5111] ? gfs2_dirent_scan+0x27c/0x670 [ 62.952514][ T5111] ? __pfx__printk+0x10/0x10 [ 62.957101][ T5111] ? gfs2_consist_inode_i+0xf5/0x110 [ 62.962379][ T5111] gfs2_dirent_scan+0x52b/0x670 [ 62.967235][ T5111] ? gfs2_dir_read+0x73e/0x1af0 [ 62.972081][ T5111] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 62.977620][ T5111] gfs2_dir_read+0x82f/0x1af0 [ 62.982293][ T5111] ? inode_dio_wait+0x2ae/0x340 [ 62.987137][ T5111] ? __pfx_inode_dio_wait+0x10/0x10 [ 62.992331][ T5111] ? __pfx_gfs2_dir_read+0x10/0x10 [ 62.997435][ T5111] ? gfs2_glock_nq+0x1250/0x1ab0 [ 63.002397][ T5111] ? inode_go_held+0xea/0x200 [ 63.007064][ T5111] ? gfs2_glock_wait+0x21a/0x2b0 [ 63.011993][ T5111] gfs2_readdir+0x14e/0x1b0 [ 63.016488][ T5111] ? __pfx_gfs2_readdir+0x10/0x10 [ 63.021504][ T5111] ? iterate_dir+0x57a/0x810 [ 63.026087][ T5111] ? __fget_files+0x29/0x470 [ 63.030668][ T5111] ? __fget_files+0x3f6/0x470 [ 63.035336][ T5111] ? bpf_lsm_file_permission+0x9/0x10 [ 63.040699][ T5111] iterate_dir+0x57a/0x810 [ 63.045111][ T5111] __se_sys_getdents+0x1ef/0x4d0 [ 63.050050][ T5111] ? __pfx___se_sys_getdents+0x10/0x10 [ 63.055500][ T5111] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 63.061471][ T5111] ? __pfx_filldir+0x10/0x10 [ 63.066049][ T5111] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 63.072375][ T5111] ? do_syscall_64+0x100/0x230 [ 63.077147][ T5111] ? do_syscall_64+0xb6/0x230 [ 63.081820][ T5111] do_syscall_64+0xf3/0x230 [ 63.086316][ T5111] ? clear_bhb_loop+0x35/0x90 [ 63.090988][ T5111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.096873][ T5111] RIP: 0033:0x7fc9a7de9779 [ 63.101279][ T5111] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 1f 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 63.120870][ T5111] RSP: 002b:00007fc9a7d96168 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 63.129274][ T5111] RAX: ffffffffffffffda RBX: 00007fc9a7e7d6c8 RCX: 00007fc9a7de9779 [ 63.137231][ T5111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 63.145191][ T5111] RBP: 00007fc9a7e7d6c0 R08: 00007fc9a7d966c0 R09: 0000000000000000 [ 63.153151][ T5111] R10: 00007fc9a7d966c0 R11: 0000000000000246 R12: 00007fc9a7e7d6cc [ 63.161212][ T5111] R13: 0000000000000016 R14: 00007ffc076d7a00 R15: 00007ffc076d7ae8 [ 63.169192][ T5111] executing program [ 63.527509][ T5115] loop0: detected capacity change from 0 to 32768 [ 63.537700][ T5115] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 63.546187][ T5115] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 63.568660][ T5115] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 63.577346][ T5090] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 63.584325][ T5090] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 63.616018][ T5090] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 31ms [ 63.623665][ T5090] gfs2: fsid=syz:syz.0: jid=0: Done [ 63.629804][ T5115] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 63.641983][ T5115] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 63.651644][ T5115] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 63.666156][ T5115] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 63.675236][ T5115] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5115 [syz-executor201] iterate_dir+0x57a/0x810 [ 63.685192][ T5115] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 63.693669][ T5115] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 63.700901][ T5115] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 63.709694][ T5115] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 63.716209][ T5115] gfs2: fsid=syz:syz.0: File system withdrawn [ 63.722332][ T5115] CPU: 0 PID: 5115 Comm: syz-executor201 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 63.732851][ T5115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 63.742892][ T5115] Call Trace: [ 63.746179][ T5115] [ 63.749096][ T5115] dump_stack_lvl+0x241/0x360 [ 63.753766][ T5115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 63.758952][ T5115] ? __pfx__printk+0x10/0x10 [ 63.763530][ T5115] ? kobject_uevent_env+0x54d/0x8e0 [ 63.768717][ T5115] gfs2_withdraw+0xefa/0x1460 [ 63.773390][ T5115] ? __pfx_gfs2_withdraw+0x10/0x10 [ 63.778489][ T5115] ? gfs2_dirent_scan+0x27c/0x670 [ 63.783499][ T5115] ? __pfx__printk+0x10/0x10 [ 63.788089][ T5115] ? gfs2_consist_inode_i+0xf5/0x110 [ 63.793361][ T5115] gfs2_dirent_scan+0x52b/0x670 [ 63.798198][ T5115] ? gfs2_dir_read+0x73e/0x1af0 [ 63.803041][ T5115] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 63.808575][ T5115] gfs2_dir_read+0x82f/0x1af0 [ 63.813245][ T5115] ? inode_dio_wait+0x2ae/0x340 [ 63.818083][ T5115] ? __pfx_inode_dio_wait+0x10/0x10 [ 63.823268][ T5115] ? __pfx_gfs2_dir_read+0x10/0x10 [ 63.828369][ T5115] ? gfs2_glock_nq+0x1250/0x1ab0 [ 63.833305][ T5115] ? inode_go_held+0xea/0x200 [ 63.837968][ T5115] ? gfs2_glock_wait+0x21a/0x2b0 [ 63.842891][ T5115] gfs2_readdir+0x14e/0x1b0 [ 63.847381][ T5115] ? __pfx_gfs2_readdir+0x10/0x10 [ 63.852406][ T5115] ? iterate_dir+0x57a/0x810 [ 63.856980][ T5115] ? __fget_files+0x29/0x470 [ 63.861551][ T5115] ? __fget_files+0x3f6/0x470 [ 63.866216][ T5115] ? bpf_lsm_file_permission+0x9/0x10 [ 63.871571][ T5115] iterate_dir+0x57a/0x810 [ 63.875984][ T5115] __se_sys_getdents+0x1ef/0x4d0 [ 63.880915][ T5115] ? __pfx___se_sys_getdents+0x10/0x10 [ 63.886358][ T5115] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 63.892320][ T5115] ? __pfx_filldir+0x10/0x10 [ 63.896910][ T5115] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 63.903221][ T5115] ? do_syscall_64+0x100/0x230 [ 63.907991][ T5115] ? do_syscall_64+0xb6/0x230 [ 63.912657][ T5115] do_syscall_64+0xf3/0x230 [ 63.917146][ T5115] ? clear_bhb_loop+0x35/0x90 [ 63.921808][ T5115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.927687][ T5115] RIP: 0033:0x7fc9a7de9779 [ 63.932085][ T5115] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 1f 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 63.951673][ T5115] RSP: 002b:00007fc9a7d96168 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 63.960158][ T5115] RAX: ffffffffffffffda RBX: 00007fc9a7e7d6c8 RCX: 00007fc9a7de9779 [ 63.968120][ T5115] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 63.976072][ T5115] RBP: 00007fc9a7e7d6c0 R08: 00007fc9a7d966c0 R09: 0000000000000000 [ 63.984025][ T5115] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9a7e7d6cc [ 63.991976][ T5115] R13: 0000000000000016 R14: 00007ffc076d7a00 R15: 00007ffc076d7ae8 [ 63.999938][ T5115] executing program [ 64.359371][ T5119] loop0: detected capacity change from 0 to 32768 [ 64.373059][ T5119] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 64.381406][ T5119] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 64.406225][ T5119] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 64.414756][ T5090] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 64.421587][ T5090] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 64.457479][ T5090] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 35ms [ 64.465112][ T5090] gfs2: fsid=syz:syz.0: jid=0: Done [ 64.470503][ T5119] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 64.483331][ T5119] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 64.492911][ T5119] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 64.507420][ T5119] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 64.516597][ T5119] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5119 [syz-executor201] iterate_dir+0x57a/0x810 [ 64.526595][ T5119] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 64.534813][ T5121] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 64.535265][ T5119] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 64.544649][ T5121] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:4 m:20 p:1 [ 64.551785][ T5119] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 64.570066][ T5119] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 64.571598][ T5121] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5119 [syz-executor201] iterate_dir+0x57a/0x810 [ 64.576645][ T5119] gfs2: fsid=syz:syz.0: File system withdrawn [ 64.588423][ T5121] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5121 [syz-executor201] __gfs2_lookup+0xa4/0x280 [ 64.594202][ T5119] CPU: 0 PID: 5119 Comm: syz-executor201 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 64.603149][ T5121] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 64.613124][ T5119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 64.613139][ T5119] Call Trace: [ 64.613148][ T5119] [ 64.613156][ T5119] dump_stack_lvl+0x241/0x360 [ 64.613187][ T5119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 64.613212][ T5119] ? __pfx__printk+0x10/0x10 [ 64.613236][ T5119] ? kobject_uevent_env+0x54d/0x8e0 [ 64.613266][ T5119] gfs2_withdraw+0xefa/0x1460 [ 64.613302][ T5119] ? __pfx_gfs2_withdraw+0x10/0x10 [ 64.613324][ T5119] ? gfs2_dirent_scan+0x27c/0x670 [ 64.613345][ T5119] ? __pfx__printk+0x10/0x10 [ 64.613374][ T5119] ? gfs2_consist_inode_i+0xf5/0x110 [ 64.682467][ T5119] gfs2_dirent_scan+0x52b/0x670 [ 64.687319][ T5119] ? gfs2_dir_read+0x73e/0x1af0 [ 64.692160][ T5119] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 64.697700][ T5119] gfs2_dir_read+0x82f/0x1af0 [ 64.702380][ T5119] ? inode_dio_wait+0x2ae/0x340 [ 64.707230][ T5119] ? __pfx_inode_dio_wait+0x10/0x10 [ 64.712426][ T5119] ? __pfx_gfs2_dir_read+0x10/0x10 [ 64.717528][ T5119] ? gfs2_glock_nq+0x1250/0x1ab0 [ 64.722465][ T5119] ? inode_go_held+0xea/0x200 [ 64.727137][ T5119] ? gfs2_glock_wait+0x21a/0x2b0 [ 64.732072][ T5119] gfs2_readdir+0x14e/0x1b0 [ 64.736570][ T5119] ? __pfx_gfs2_readdir+0x10/0x10 [ 64.741585][ T5119] ? iterate_dir+0x57a/0x810 [ 64.746168][ T5119] ? __fget_files+0x29/0x470 [ 64.750750][ T5119] ? __fget_files+0x3f6/0x470 [ 64.755417][ T5119] ? bpf_lsm_file_permission+0x9/0x10 [ 64.760784][ T5119] iterate_dir+0x57a/0x810 [ 64.765220][ T5119] __se_sys_getdents+0x1ef/0x4d0 [ 64.770171][ T5119] ? __pfx___se_sys_getdents+0x10/0x10 [ 64.775626][ T5119] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 64.781596][ T5119] ? __pfx_filldir+0x10/0x10 [ 64.786174][ T5119] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 64.792496][ T5119] ? do_syscall_64+0x100/0x230 [ 64.797259][ T5119] ? do_syscall_64+0xb6/0x230 [ 64.801934][ T5119] do_syscall_64+0xf3/0x230 [ 64.806435][ T5119] ? clear_bhb_loop+0x35/0x90 [ 64.811112][ T5119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.817267][ T5119] RIP: 0033:0x7fc9a7de9779 [ 64.821671][ T5119] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 1f 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 64.841266][ T5119] RSP: 002b:00007fc9a7d96168 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 64.849677][ T5119] RAX: ffffffffffffffda RBX: 00007fc9a7e7d6c8 RCX: 00007fc9a7de9779 [ 64.857642][ T5119] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 64.866008][ T5119] RBP: 00007fc9a7e7d6c0 R08: 00007fc9a7d966c0 R09: 0000000000000000 [ 64.874005][ T5119] R10: 00007fc9a7d966c0 R11: 0000000000000246 R12: 00007fc9a7e7d6cc [ 64.881979][ T5119] R13: 0000000000000016 R14: 00007ffc076d7a00 R15: 00007ffc076d7ae8 [ 64.889959][ T5119] executing program [ 65.269684][ T5123] loop0: detected capacity change from 0 to 32768 [ 65.290952][ T5123] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 65.299258][ T5123] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 65.310353][ T5123] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 65.319104][ T5090] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 65.325872][ T5090] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 65.362055][ T5090] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 36ms [ 65.369659][ T5090] gfs2: fsid=syz:syz.0: jid=0: Done [ 65.374912][ T5123] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 65.386605][ T5123] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 65.396242][ T5123] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 65.410611][ T5123] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 65.419665][ T5123] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5123 [syz-executor201] iterate_dir+0x57a/0x810 [ 65.429637][ T5123] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 65.437963][ T5125] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 65.438110][ T5123] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 65.454833][ T5123] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 65.455079][ T5125] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:4 m:20 p:1 [ 65.463618][ T5123] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 65.463826][ T5123] gfs2: fsid=syz:syz.0: File system withdrawn [ 65.485247][ T5123] CPU: 0 PID: 5123 Comm: syz-executor201 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 65.495741][ T5123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 65.505785][ T5123] Call Trace: [ 65.509055][ T5123] [ 65.511974][ T5123] dump_stack_lvl+0x241/0x360 [ 65.516650][ T5123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 65.521841][ T5123] ? __pfx__printk+0x10/0x10 [ 65.526424][ T5123] ? kobject_uevent_env+0x54d/0x8e0 [ 65.531618][ T5123] gfs2_withdraw+0xefa/0x1460 [ 65.536299][ T5123] ? __pfx_gfs2_withdraw+0x10/0x10 [ 65.541401][ T5123] ? gfs2_dirent_scan+0x27c/0x670 [ 65.546418][ T5123] ? __pfx__printk+0x10/0x10 [ 65.551008][ T5123] ? gfs2_consist_inode_i+0xf5/0x110 [ 65.556287][ T5123] gfs2_dirent_scan+0x52b/0x670 [ 65.561127][ T5123] ? gfs2_dir_read+0x73e/0x1af0 [ 65.565967][ T5123] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 65.571506][ T5123] gfs2_dir_read+0x82f/0x1af0 [ 65.576181][ T5123] ? inode_dio_wait+0x2ae/0x340 [ 65.581023][ T5123] ? __pfx_inode_dio_wait+0x10/0x10 [ 65.586216][ T5123] ? __pfx_gfs2_dir_read+0x10/0x10 [ 65.591326][ T5123] ? gfs2_glock_nq+0x1250/0x1ab0 [ 65.596263][ T5123] ? inode_go_held+0xea/0x200 [ 65.600932][ T5123] ? gfs2_glock_wait+0x21a/0x2b0 [ 65.605861][ T5123] gfs2_readdir+0x14e/0x1b0 [ 65.610358][ T5123] ? __pfx_gfs2_readdir+0x10/0x10 [ 65.615373][ T5123] ? iterate_dir+0x57a/0x810 [ 65.619958][ T5123] ? __fget_files+0x29/0x470 [ 65.624538][ T5123] ? __fget_files+0x3f6/0x470 [ 65.629202][ T5123] ? bpf_lsm_file_permission+0x9/0x10 [ 65.634565][ T5123] iterate_dir+0x57a/0x810 [ 65.638984][ T5123] __se_sys_getdents+0x1ef/0x4d0 [ 65.643922][ T5123] ? __pfx___se_sys_getdents+0x10/0x10 [ 65.649374][ T5123] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 65.655342][ T5123] ? __pfx_filldir+0x10/0x10 [ 65.659922][ T5123] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 65.666239][ T5123] ? do_syscall_64+0x100/0x230 [ 65.670997][ T5123] ? do_syscall_64+0xb6/0x230 [ 65.675668][ T5123] do_syscall_64+0xf3/0x230 [ 65.680166][ T5123] ? clear_bhb_loop+0x35/0x90 [ 65.684837][ T5123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.690722][ T5123] RIP: 0033:0x7fc9a7de9779 [ 65.695127][ T5123] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 1f 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 65.714721][ T5123] RSP: 002b:00007fc9a7d96168 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 65.723122][ T5123] RAX: ffffffffffffffda RBX: 00007fc9a7e7d6c8 RCX: 00007fc9a7de9779 [ 65.731084][ T5123] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 65.739044][ T5123] RBP: 00007fc9a7e7d6c0 R08: 00007fc9a7d966c0 R09: 0000000000000000 [ 65.747006][ T5123] R10: 00007fc9a7d966c0 R11: 0000000000000246 R12: 00007fc9a7e7d6cc [ 65.754966][ T5123] R13: 0000000000000016 R14: 00007ffc076d7a00 R15: 00007ffc076d7ae8 [ 65.762936][ T5123] [ 65.765973][ T5125] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:5123 [syz-executor201] iterate_dir+0x57a/0x810 [ 65.776160][ T5125] ================================================================== [ 65.784217][ T5125] BUG: KASAN: stack-out-of-bounds in gfs2_dump_glock+0x15b1/0x1bb0 [ 65.792088][ T5125] Read of size 8 at addr ffffc900034a7ca0 by task syz-executor201/5125 [ 65.800299][ T5125] [ 65.802599][ T5125] CPU: 0 PID: 5125 Comm: syz-executor201 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 65.813070][ T5125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 65.823104][ T5125] Call Trace: [ 65.826362][ T5125] [ 65.829274][ T5125] dump_stack_lvl+0x241/0x360 [ 65.833941][ T5125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 65.839120][ T5125] ? __pfx__printk+0x10/0x10 [ 65.843691][ T5125] ? _printk+0xd5/0x120 [ 65.847833][ T5125] print_report+0x169/0x550 [ 65.852310][ T5125] ? rcu_read_unlock_special+0x470/0x550 [ 65.857927][ T5125] ? __virt_addr_valid+0xbd/0x520 [ 65.862930][ T5125] ? gfs2_dump_glock+0x15b1/0x1bb0 [ 65.868020][ T5125] kasan_report+0x143/0x180 [ 65.872506][ T5125] ? gfs2_dump_glock+0x15b1/0x1bb0 [ 65.877597][ T5125] ? gfs2_dump_glock+0xe5a/0x1bb0 [ 65.882601][ T5125] gfs2_dump_glock+0x15b1/0x1bb0 [ 65.887516][ T5125] ? gfs2_dump_glock+0xe5a/0x1bb0 [ 65.892521][ T5125] ? __pfx_gfs2_dump_glock+0x10/0x10 [ 65.897788][ T5125] ? __irq_work_queue_local+0x137/0x410 [ 65.903348][ T5125] ? irq_work_queue+0xca/0x150 [ 65.908091][ T5125] ? __wake_up_klogd+0xd5/0x110 [ 65.912927][ T5125] ? vprintk_emit+0x631/0x770 [ 65.917585][ T5125] ? gfs2_dirent_scan+0x27c/0x670 [ 65.922589][ T5125] ? __pfx__printk+0x10/0x10 [ 65.927161][ T5125] gfs2_consist_inode_i+0xf5/0x110 [ 65.932252][ T5125] gfs2_dirent_scan+0x52b/0x670 [ 65.937081][ T5125] ? gfs2_permission+0x275/0x450 [ 65.941999][ T5125] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 65.947352][ T5125] gfs2_dirent_search+0x30e/0x8c0 [ 65.952358][ T5125] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 65.957709][ T5125] ? generic_permission+0x1e0/0x550 [ 65.962888][ T5125] ? __pfx_gfs2_dirent_search+0x10/0x10 [ 65.968427][ T5125] ? gfs2_permission+0x37c/0x450 [ 65.973354][ T5125] ? __pfx___might_resched+0x10/0x10 [ 65.978623][ T5125] gfs2_dir_search+0xb2/0x2f0 [ 65.983285][ T5125] ? __pfx_gfs2_dir_search+0x10/0x10 [ 65.988564][ T5125] ? inode_go_held+0xea/0x200 [ 65.993245][ T5125] ? gfs2_glock_wait+0x21a/0x2b0 [ 65.998166][ T5125] gfs2_lookupi+0x461/0x5e0 [ 66.002654][ T5125] ? __pfx_gfs2_lookupi+0x10/0x10 [ 66.007659][ T5125] ? d_alloc_parallel+0x14ab/0x1600 [ 66.012841][ T5125] ? __gfs2_lookup+0xa4/0x280 [ 66.017500][ T5125] __gfs2_lookup+0xa4/0x280 [ 66.021986][ T5125] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 66.027774][ T5125] ? __pfx___gfs2_lookup+0x10/0x10 [ 66.032898][ T5125] ? __init_waitqueue_head+0xae/0x150 [ 66.038247][ T5125] __lookup_slow+0x28c/0x3f0 [ 66.042824][ T5125] ? __pfx___lookup_slow+0x10/0x10 [ 66.047921][ T5125] lookup_slow+0x53/0x70 [ 66.052145][ T5125] link_path_walk+0x9ea/0xea0 [ 66.056801][ T5125] ? __pfx_link_path_walk+0x10/0x10 [ 66.061983][ T5125] __filename_parentat+0x263/0x6f0 [ 66.067079][ T5125] ? __pfx___filename_parentat+0x10/0x10 [ 66.072696][ T5125] ? __virt_addr_valid+0x183/0x520 [ 66.077795][ T5125] filename_create+0xf6/0x540 [ 66.082469][ T5125] ? __pfx_filename_create+0x10/0x10 [ 66.087735][ T5125] ? __pfx_lock_release+0x10/0x10 [ 66.092740][ T5125] ? __virt_addr_valid+0x183/0x520 [ 66.097839][ T5125] do_mknodat+0x18b/0x5b0 [ 66.102153][ T5125] ? __pfx_do_mknodat+0x10/0x10 [ 66.106983][ T5125] ? getname_flags+0x1fe/0x4f0 [ 66.111739][ T5125] __x64_sys_mknod+0x8e/0xa0 [ 66.116307][ T5125] do_syscall_64+0xf3/0x230 [ 66.120792][ T5125] ? clear_bhb_loop+0x35/0x90 [ 66.125448][ T5125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.131321][ T5125] RIP: 0033:0x7fc9a7de9779 [ 66.135713][ T5125] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 1f 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 66.155294][ T5125] RSP: 002b:00007fc9a7d75168 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 66.163685][ T5125] RAX: ffffffffffffffda RBX: 00007fc9a7e7d6d8 RCX: 00007fc9a7de9779 [ 66.171637][ T5125] RDX: 0000000000000701 RSI: 0000000000000000 RDI: 0000000020000680 [ 66.179588][ T5125] RBP: 00007fc9a7e7d6d0 R08: 00007ffc076d7ae7 R09: 0000000000000000 [ 66.187557][ T5125] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9a7e7d6dc [ 66.195509][ T5125] R13: 000000000000006e R14: 00007ffc076d7a00 R15: 00007ffc076d7ae8 [ 66.203472][ T5125] [ 66.206474][ T5125] [ 66.208782][ T5125] The buggy address belongs to the virtual mapping at [ 66.208782][ T5125] [ffffc900034a0000, ffffc900034a9000) created by: [ 66.208782][ T5125] copy_process+0x5d1/0x3dc0 [ 66.226384][ T5125] [ 66.228711][ T5125] The buggy address belongs to the physical page: [ 66.235104][ T5125] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802c96fd80 pfn:0x2c96f [ 66.245165][ T5125] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 66.252262][ T5125] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 66.260821][ T5125] raw: ffff88802c96fd80 0000000000000000 00000001ffffffff 0000000000000000 [ 66.269384][ T5125] page dumped because: kasan: bad access detected [ 66.275871][ T5125] page_owner tracks the page as allocated [ 66.281564][ T5125] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 5106, tgid 5106 (syz-executor201), ts 62007196465, free_ts 61954421151 [ 66.301001][ T5125] post_alloc_hook+0x1f3/0x230 [ 66.305753][ T5125] get_page_from_freelist+0x2e4c/0x2f10 [ 66.311280][ T5125] __alloc_pages_noprof+0x256/0x6c0 [ 66.316462][ T5125] alloc_pages_mpol_noprof+0x3e8/0x680 [ 66.321900][ T5125] __vmalloc_node_range_noprof+0x971/0x1460 [ 66.327793][ T5125] dup_task_struct+0x444/0x8c0 [ 66.332551][ T5125] copy_process+0x5d1/0x3dc0 [ 66.337118][ T5125] kernel_clone+0x223/0x870 [ 66.341601][ T5125] __se_sys_clone3+0x2cb/0x350 [ 66.346348][ T5125] do_syscall_64+0xf3/0x230 [ 66.350833][ T5125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.356709][ T5125] page last free pid 5074 tgid 5074 stack trace: [ 66.363031][ T5125] free_unref_page+0xd19/0xea0 [ 66.367775][ T5125] __put_partials+0xeb/0x130 [ 66.372358][ T5125] put_cpu_partial+0x17c/0x250 [ 66.377101][ T5125] __slab_free+0x2ea/0x3d0 [ 66.381495][ T5125] qlist_free_all+0x9e/0x140 [ 66.386063][ T5125] kasan_quarantine_reduce+0x14f/0x170 [ 66.391587][ T5125] __kasan_slab_alloc+0x23/0x80 [ 66.396421][ T5125] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 66.402291][ T5125] __alloc_skb+0x1c3/0x440 [ 66.406686][ T5125] netlink_sendmsg+0x631/0xcb0 [ 66.411430][ T5125] __sock_sendmsg+0x221/0x270 [ 66.416258][ T5125] ____sys_sendmsg+0x525/0x7d0 [ 66.421004][ T5125] __sys_sendmsg+0x2b0/0x3a0 [ 66.425571][ T5125] do_syscall_64+0xf3/0x230 [ 66.430056][ T5125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.436017][ T5125] [ 66.438317][ T5125] Memory state around the buggy address: [ 66.443920][ T5125] ffffc900034a7b80: 00 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.451955][ T5125] ffffc900034a7c00: 00 00 00 00 f1 f1 f1 f1 00 00 00 00 00 00 00 00 [ 66.459993][ T5125] >ffffc900034a7c80: 00 f3 f3 f3 f3 f3 f3 f3 00 00 00 00 00 00 00 00 [ 66.468029][ T5125] ^ [ 66.473115][ T5125] ffffc900034a7d00: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 [ 66.481152][ T5125] ffffc900034a7d80: 04 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.489184][ T5125] ================================================================== [ 66.498550][ T5125] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 66.505756][ T5125] CPU: 1 PID: 5125 Comm: syz-executor201 Not tainted 6.10.0-rc6-syzkaller-00069-g795c58e4c7fc #0 [ 66.516255][ T5125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 66.526283][ T5125] Call Trace: [ 66.529539][ T5125] [ 66.532445][ T5125] dump_stack_lvl+0x241/0x360 [ 66.537104][ T5125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 66.542279][ T5125] ? __pfx__printk+0x10/0x10 [ 66.546847][ T5125] ? preempt_schedule+0xe1/0xf0 [ 66.551670][ T5125] ? vscnprintf+0x5d/0x90 [ 66.556060][ T5125] panic+0x349/0x860 [ 66.559933][ T5125] ? check_panic_on_warn+0x21/0xb0 [ 66.565036][ T5125] ? __pfx_panic+0x10/0x10 [ 66.569430][ T5125] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 66.575388][ T5125] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 66.581691][ T5125] ? print_report+0x502/0x550 [ 66.586356][ T5125] check_panic_on_warn+0x86/0xb0 [ 66.591290][ T5125] ? gfs2_dump_glock+0x15b1/0x1bb0 [ 66.596444][ T5125] end_report+0x77/0x160 [ 66.600671][ T5125] kasan_report+0x154/0x180 [ 66.605169][ T5125] ? gfs2_dump_glock+0x15b1/0x1bb0 [ 66.610259][ T5125] ? gfs2_dump_glock+0xe5a/0x1bb0 [ 66.615258][ T5125] gfs2_dump_glock+0x15b1/0x1bb0 [ 66.620173][ T5125] ? gfs2_dump_glock+0xe5a/0x1bb0 [ 66.625176][ T5125] ? __pfx_gfs2_dump_glock+0x10/0x10 [ 66.630444][ T5125] ? __irq_work_queue_local+0x137/0x410 [ 66.635972][ T5125] ? irq_work_queue+0xca/0x150 [ 66.640712][ T5125] ? __wake_up_klogd+0xd5/0x110 [ 66.645541][ T5125] ? vprintk_emit+0x631/0x770 [ 66.650202][ T5125] ? gfs2_dirent_scan+0x27c/0x670 [ 66.655205][ T5125] ? __pfx__printk+0x10/0x10 [ 66.659773][ T5125] gfs2_consist_inode_i+0xf5/0x110 [ 66.664864][ T5125] gfs2_dirent_scan+0x52b/0x670 [ 66.669688][ T5125] ? gfs2_permission+0x275/0x450 [ 66.674600][ T5125] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 66.679954][ T5125] gfs2_dirent_search+0x30e/0x8c0 [ 66.685042][ T5125] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 66.690389][ T5125] ? generic_permission+0x1e0/0x550 [ 66.695563][ T5125] ? __pfx_gfs2_dirent_search+0x10/0x10 [ 66.701086][ T5125] ? gfs2_permission+0x37c/0x450 [ 66.705999][ T5125] ? __pfx___might_resched+0x10/0x10 [ 66.711259][ T5125] gfs2_dir_search+0xb2/0x2f0 [ 66.715909][ T5125] ? __pfx_gfs2_dir_search+0x10/0x10 [ 66.721164][ T5125] ? inode_go_held+0xea/0x200 [ 66.725836][ T5125] ? gfs2_glock_wait+0x21a/0x2b0 [ 66.730747][ T5125] gfs2_lookupi+0x461/0x5e0 [ 66.735227][ T5125] ? __pfx_gfs2_lookupi+0x10/0x10 [ 66.740238][ T5125] ? d_alloc_parallel+0x14ab/0x1600 [ 66.745412][ T5125] ? __gfs2_lookup+0xa4/0x280 [ 66.750068][ T5125] __gfs2_lookup+0xa4/0x280 [ 66.754548][ T5125] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 66.760325][ T5125] ? __pfx___gfs2_lookup+0x10/0x10 [ 66.765434][ T5125] ? __init_waitqueue_head+0xae/0x150 [ 66.770778][ T5125] __lookup_slow+0x28c/0x3f0 [ 66.775344][ T5125] ? __pfx___lookup_slow+0x10/0x10 [ 66.780433][ T5125] lookup_slow+0x53/0x70 [ 66.784652][ T5125] link_path_walk+0x9ea/0xea0 [ 66.789307][ T5125] ? __pfx_link_path_walk+0x10/0x10 [ 66.794481][ T5125] __filename_parentat+0x263/0x6f0 [ 66.799569][ T5125] ? __pfx___filename_parentat+0x10/0x10 [ 66.805178][ T5125] ? __virt_addr_valid+0x183/0x520 [ 66.810268][ T5125] filename_create+0xf6/0x540 [ 66.814924][ T5125] ? __pfx_filename_create+0x10/0x10 [ 66.820189][ T5125] ? __pfx_lock_release+0x10/0x10 [ 66.825187][ T5125] ? __virt_addr_valid+0x183/0x520 [ 66.830273][ T5125] do_mknodat+0x18b/0x5b0 [ 66.834581][ T5125] ? __pfx_do_mknodat+0x10/0x10 [ 66.839407][ T5125] ? getname_flags+0x1fe/0x4f0 [ 66.844144][ T5125] __x64_sys_mknod+0x8e/0xa0 [ 66.848711][ T5125] do_syscall_64+0xf3/0x230 [ 66.853193][ T5125] ? clear_bhb_loop+0x35/0x90 [ 66.857848][ T5125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.863715][ T5125] RIP: 0033:0x7fc9a7de9779 [ 66.868105][ T5125] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 1f 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 66.887772][ T5125] RSP: 002b:00007fc9a7d75168 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 66.896158][ T5125] RAX: ffffffffffffffda RBX: 00007fc9a7e7d6d8 RCX: 00007fc9a7de9779 [ 66.904102][ T5125] RDX: 0000000000000701 RSI: 0000000000000000 RDI: 0000000020000680 [ 66.912058][ T5125] RBP: 00007fc9a7e7d6d0 R08: 00007ffc076d7ae7 R09: 0000000000000000 [ 66.920015][ T5125] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9a7e7d6dc [ 66.927961][ T5125] R13: 000000000000006e R14: 00007ffc076d7a00 R15: 00007ffc076d7ae8 [ 66.935911][ T5125] [ 66.939181][ T5125] Kernel Offset: disabled [ 66.943486][ T5125] Rebooting in 86400 seconds..