qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x2ff000) Warning: Permanently added '[localhost]:52168' (ED25519) to the list of known hosts. [ 204.937655][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.940900][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 227.993124][ T1011] ata1.00: exception Emask 0x0 SAct 0x800 SErr 0x0 action 0x6 frozen [ 227.996883][ T1011] ata1.00: failed command: WRITE FPDMA QUEUED [ 227.999367][ T1011] ata1.00: cmd 61/f8:58:3e:c9:04/17:00:00:00:00/40 tag 11 ncq dma 3141632 ou [ 227.999367][ T1011] res 40/00:00:00:00:00/00:00:00:00:00/00 Emask 0x4 (timeout) [ 228.014596][ T1011] ata1.00: status: { DRDY } [ 228.017634][ T1011] ata1: hard resetting link [ 228.337766][ T1011] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 228.342327][ T1011] ata1.00: configured for UDMA/100 [ 228.346641][ T1011] ata1: EH complete 2026/04/07 09:58:46 parsed 1 programs [ 235.913174][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 239.959399][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.992864][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.187932][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.212065][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.134306][ T5371] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.146095][ T5371] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.150578][ T5371] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.155119][ T5371] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.159184][ T5371] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.262552][ T5371] Bluetooth: hci0: command tx timeout [ 251.625862][ T5643] chnl_net:caif_netlink_parms(): no params data found [ 262.539856][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.559753][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.563646][ T5643] bridge_slave_0: entered allmulticast mode [ 262.581144][ T5643] bridge_slave_0: entered promiscuous mode [ 262.618178][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.621441][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.664720][ T5643] bridge_slave_1: entered allmulticast mode [ 262.678669][ T5643] bridge_slave_1: entered promiscuous mode [ 263.594666][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.614991][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.446728][ T5643] team0: Port device team_slave_0 added [ 264.473133][ T5643] team0: Port device team_slave_1 added [ 265.243402][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.247145][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.282786][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.309090][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.312058][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.352577][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.377420][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.380808][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.487787][ T5643] hsr_slave_0: entered promiscuous mode [ 268.503153][ T5643] hsr_slave_1: entered promiscuous mode [ 271.327210][ T5643] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 271.353052][ T5643] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 271.379535][ T5643] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 271.410154][ T5643] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 271.725181][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.804532][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.855418][ T3049] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.859456][ T3049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.907383][ T3049] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.910539][ T3049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.416301][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.508629][ T5643] veth0_vlan: entered promiscuous mode [ 272.543827][ T5643] veth1_vlan: entered promiscuous mode [ 272.616071][ T5643] veth0_macvtap: entered promiscuous mode [ 272.644659][ T5643] veth1_macvtap: entered promiscuous mode [ 272.694451][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.724743][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.758392][ T3049] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.762209][ T3049] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.776421][ T3049] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.782137][ T3049] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.973236][ T4665] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.979518][ T4665] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.986349][ T4665] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.990118][ T4665] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.994391][ T4665] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.186747][ T5643] syz-executor (5643) used greatest stack depth: 16000 bytes left 2026/04/07 09:59:34 executed programs: 0 [ 279.355928][ T45] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 279.360856][ T45] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 279.369289][ T45] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 279.374846][ T5730] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 279.378900][ T5729] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 279.388409][ T5729] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 279.391735][ T5729] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 279.395773][ T5729] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 279.401843][ T5729] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 279.415546][ T5729] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.433043][ T5729] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 279.441839][ T5732] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 279.457695][ T5732] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 279.490335][ T5732] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 279.520537][ T5732] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 279.599728][ T5371] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.607018][ T5371] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.611480][ T5371] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.617216][ T5371] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.621468][ T5371] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.784145][ T5730] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.792929][ T5730] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.797252][ T5730] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.803461][ T5730] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.807523][ T5730] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.355381][ T3049] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.755684][ T3049] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.015389][ T3049] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.025615][ T5730] Bluetooth: hci0: command tx timeout [ 281.358175][ T3049] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.494623][ T5730] Bluetooth: hci2: command tx timeout [ 281.498865][ T5730] Bluetooth: hci1: command tx timeout [ 281.653853][ T5371] Bluetooth: hci4: command tx timeout [ 281.658163][ T5371] Bluetooth: hci3: command tx timeout [ 281.893562][ T5730] Bluetooth: hci5: command tx timeout [ 282.021646][ T5716] chnl_net:caif_netlink_parms(): no params data found [ 282.120120][ T3049] bridge_slave_1: left allmulticast mode [ 282.128497][ T3049] bridge_slave_1: left promiscuous mode [ 282.131305][ T3049] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.154475][ T3049] bridge_slave_0: left allmulticast mode [ 282.157113][ T3049] bridge_slave_0: left promiscuous mode [ 282.159687][ T3049] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.429113][ T3049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.445364][ T3049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.454848][ T3049] bond0 (unregistering): Released all slaves [ 282.625289][ T3049] hsr_slave_0: left promiscuous mode [ 282.630806][ T3049] hsr_slave_1: left promiscuous mode [ 282.635425][ T3049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.638766][ T3049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.644329][ T3049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.648702][ T3049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.656818][ T3049] veth1_macvtap: left promiscuous mode [ 282.659652][ T3049] veth0_macvtap: left promiscuous mode [ 282.663200][ T3049] veth1_vlan: left promiscuous mode [ 282.665995][ T3049] veth0_vlan: left promiscuous mode [ 282.878214][ T3049] team0 (unregistering): Port device team_slave_1 removed [ 282.887758][ T3049] team0 (unregistering): Port device team_slave_0 removed [ 283.093322][ T5730] Bluetooth: hci0: command tx timeout [ 283.229410][ T5716] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.234868][ T5716] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.238117][ T5716] bridge_slave_0: entered allmulticast mode [ 283.243296][ T5716] bridge_slave_0: entered promiscuous mode [ 283.295373][ T5741] chnl_net:caif_netlink_parms(): no params data found [ 283.328390][ T5716] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.342920][ T5716] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.347000][ T5716] bridge_slave_1: entered allmulticast mode [ 283.362749][ T5716] bridge_slave_1: entered promiscuous mode [ 283.572924][ T5730] Bluetooth: hci1: command tx timeout [ 283.575604][ T5730] Bluetooth: hci2: command tx timeout [ 283.656486][ T5716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.732704][ T5371] Bluetooth: hci3: command tx timeout [ 283.735477][ T5371] Bluetooth: hci4: command tx timeout [ 283.791447][ T5716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.876302][ T5725] chnl_net:caif_netlink_parms(): no params data found [ 283.973347][ T5730] Bluetooth: hci5: command tx timeout [ 284.040469][ T5726] chnl_net:caif_netlink_parms(): no params data found [ 284.058584][ T5737] chnl_net:caif_netlink_parms(): no params data found [ 284.076122][ T5716] team0: Port device team_slave_0 added [ 284.095589][ T5723] chnl_net:caif_netlink_parms(): no params data found [ 284.103612][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.107352][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.110449][ T5741] bridge_slave_0: entered allmulticast mode [ 284.115157][ T5741] bridge_slave_0: entered promiscuous mode [ 284.145012][ T5716] team0: Port device team_slave_1 added [ 284.171288][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.175015][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.178648][ T5741] bridge_slave_1: entered allmulticast mode [ 284.187282][ T5741] bridge_slave_1: entered promiscuous mode [ 284.533740][ T5716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.536748][ T5716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.582224][ T5716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.698385][ T5716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.701207][ T5716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.732735][ T5716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.777823][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.891813][ T5716] hsr_slave_0: entered promiscuous mode [ 284.905080][ T5716] hsr_slave_1: entered promiscuous mode [ 284.919635][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.984779][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.988063][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.991206][ T5725] bridge_slave_0: entered allmulticast mode [ 284.997811][ T5725] bridge_slave_0: entered promiscuous mode [ 285.028682][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.031947][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.037626][ T5737] bridge_slave_0: entered allmulticast mode [ 285.042657][ T5737] bridge_slave_0: entered promiscuous mode [ 285.058035][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.061881][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.066337][ T5725] bridge_slave_1: entered allmulticast mode [ 285.070643][ T5725] bridge_slave_1: entered promiscuous mode [ 285.093944][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.097241][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.100749][ T5723] bridge_slave_0: entered allmulticast mode [ 285.107104][ T5723] bridge_slave_0: entered promiscuous mode [ 285.123040][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.126623][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.129823][ T5737] bridge_slave_1: entered allmulticast mode [ 285.134396][ T5737] bridge_slave_1: entered promiscuous mode [ 285.138795][ T5741] team0: Port device team_slave_0 added [ 285.150461][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.153946][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.157267][ T5726] bridge_slave_0: entered allmulticast mode [ 285.161588][ T5726] bridge_slave_0: entered promiscuous mode [ 285.167317][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.170697][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.175964][ T5730] Bluetooth: hci0: command tx timeout [ 285.179775][ T5723] bridge_slave_1: entered allmulticast mode [ 285.188969][ T5723] bridge_slave_1: entered promiscuous mode [ 285.211790][ T5741] team0: Port device team_slave_1 added [ 285.222609][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.231373][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.238407][ T5726] bridge_slave_1: entered allmulticast mode [ 285.242783][ T5726] bridge_slave_1: entered promiscuous mode [ 285.273478][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.316144][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.321190][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.328346][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.331485][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.345397][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.366434][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.395603][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.430613][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.437133][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.462714][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.476861][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.497453][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.534321][ T5725] team0: Port device team_slave_0 added [ 285.544703][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.594349][ T5725] team0: Port device team_slave_1 added [ 285.652997][ T5730] Bluetooth: hci2: command tx timeout [ 285.656589][ T5730] Bluetooth: hci1: command tx timeout [ 285.760105][ T5741] hsr_slave_0: entered promiscuous mode [ 285.778379][ T5741] hsr_slave_1: entered promiscuous mode [ 285.792915][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 285.795626][ T5741] Cannot create hsr debugfs directory [ 285.801003][ T5737] team0: Port device team_slave_0 added [ 285.815283][ T5371] Bluetooth: hci4: command tx timeout [ 285.817984][ T5371] Bluetooth: hci3: command tx timeout [ 285.841377][ T5726] team0: Port device team_slave_0 added [ 285.854786][ T5723] team0: Port device team_slave_0 added [ 285.858403][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.861477][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.890792][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.905582][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.908820][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.921325][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.931818][ T5737] team0: Port device team_slave_1 added [ 285.944710][ T5726] team0: Port device team_slave_1 added [ 285.949223][ T5723] team0: Port device team_slave_1 added [ 286.052919][ T5730] Bluetooth: hci5: command tx timeout [ 286.162063][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.167656][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.181465][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.225795][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.229148][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.243062][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.250415][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.254541][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.267474][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.307979][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.311382][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.328522][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.339032][ T5725] hsr_slave_0: entered promiscuous mode [ 286.344289][ T5725] hsr_slave_1: entered promiscuous mode [ 286.347794][ T5725] debugfs: 'hsr0' already exists in 'hsr' [ 286.350180][ T5725] Cannot create hsr debugfs directory [ 286.377099][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.380472][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.400814][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.430586][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.438862][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.452253][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.697340][ T5737] hsr_slave_0: entered promiscuous mode [ 286.713002][ T5737] hsr_slave_1: entered promiscuous mode [ 286.716351][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 286.719483][ T5737] Cannot create hsr debugfs directory [ 286.757877][ T5723] hsr_slave_0: entered promiscuous mode [ 286.771930][ T5723] hsr_slave_1: entered promiscuous mode [ 286.784383][ T5723] debugfs: 'hsr0' already exists in 'hsr' [ 286.787698][ T5723] Cannot create hsr debugfs directory [ 287.133873][ T5726] hsr_slave_0: entered promiscuous mode [ 287.137015][ T5726] hsr_slave_1: entered promiscuous mode [ 287.140653][ T5726] debugfs: 'hsr0' already exists in 'hsr' [ 287.153016][ T5726] Cannot create hsr debugfs directory [ 287.256967][ T5730] Bluetooth: hci0: command tx timeout [ 287.419016][ T5716] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 287.437690][ T5716] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 287.549321][ T5716] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 287.564465][ T5716] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 287.733387][ T5730] Bluetooth: hci1: command tx timeout [ 287.735922][ T5730] Bluetooth: hci2: command tx timeout [ 287.796675][ T5741] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 287.888128][ T5741] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 287.893842][ T5371] Bluetooth: hci3: command tx timeout [ 287.896343][ T5371] Bluetooth: hci4: command tx timeout [ 287.921525][ T5741] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 287.984328][ T5741] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 288.132738][ T5730] Bluetooth: hci5: command tx timeout [ 288.411620][ T5716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.427587][ T5725] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 288.517402][ T5725] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 288.584991][ T5725] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 288.618745][ T5725] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 288.640013][ T5716] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.819484][ T158] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.823436][ T158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.861059][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.891209][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.894662][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.956479][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.980853][ T5716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 289.034175][ T5716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.069030][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.072872][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.171294][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.174560][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.336621][ T5723] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 289.432021][ T5723] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 289.514249][ T5723] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 289.529845][ T5723] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 289.729307][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.747505][ T5737] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 289.829357][ T5737] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 289.858155][ T5737] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 289.924925][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.928929][ T5737] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 289.974947][ T3049] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.978135][ T3049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.003292][ T3049] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.006939][ T3049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.059864][ T5716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.340048][ T5716] veth0_vlan: entered promiscuous mode [ 290.355830][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.398159][ T5726] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 290.427459][ T5716] veth1_vlan: entered promiscuous mode [ 290.435485][ T5726] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 290.497031][ T5726] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 290.534658][ T5726] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 290.651007][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.740637][ T5716] veth0_macvtap: entered promiscuous mode [ 290.793401][ T5716] veth1_macvtap: entered promiscuous mode [ 290.937915][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.950049][ T5716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.026143][ T5716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.075571][ T1056] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.079103][ T1056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.122278][ T1041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.163030][ T1041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.167988][ T1041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.263844][ T3049] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.267349][ T3049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.301579][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.374111][ T1041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.619637][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.637936][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.719826][ T5741] veth0_vlan: entered promiscuous mode [ 291.728990][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.741647][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.745094][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.768908][ T5726] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.810515][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.835866][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.857111][ T5741] veth1_vlan: entered promiscuous mode [ 291.905459][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.908695][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.931848][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.935383][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.953689][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.956741][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.128390][ T1056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.153306][ T1056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.239957][ T5726] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 292.287661][ T5726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.316702][ T5741] veth0_macvtap: entered promiscuous mode [ 292.360509][ T5741] veth1_macvtap: entered promiscuous mode [ 292.395341][ T5737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 2026/04/07 09:59:48 executed programs: 12 [ 292.547479][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.581942][ T5725] veth0_vlan: entered promiscuous mode [ 292.824176][ T5953] loop0: detected capacity change from 0 to 32768 [ 292.883643][ T5953] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 292.886960][ T5953] gfs2: fsid=.: Now mounting FS (format 1801)... [ 292.911164][ T5953] syz.0.16: attempt to access beyond end of device [ 292.911164][ T5953] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 292.918802][ T5953] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 292.925355][ T5953] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 292.930140][ T5953] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5953 [syz.0.16] init_journal+0x16d9/0x22b0 [ 292.936044][ T5953] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 292.939515][ T5953] CPU: 0 UID: 0 PID: 5953 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 292.939535][ T5953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 292.939543][ T5953] Call Trace: [ 292.939551][ T5953] [ 292.939557][ T5953] dump_stack_lvl+0xe8/0x150 [ 292.939578][ T5953] gfs2_withdraw+0xc3/0x1b0 [ 292.939589][ T5953] gfs2_jdesc_check+0x17d/0x2f0 [ 292.939601][ T5953] check_journal_clean+0x18d/0x360 [ 292.939611][ T5953] ? __pfx_check_journal_clean+0x10/0x10 [ 292.939620][ T5953] ? init_journal+0x16d9/0x22b0 [ 292.939631][ T5953] ? do_raw_spin_unlock+0x4d/0x210 [ 292.939642][ T5953] ? _raw_spin_unlock+0x28/0x50 [ 292.939707][ T5953] ? gfs2_jdesc_find+0xab/0xc0 [ 292.939717][ T5953] init_journal+0x16d9/0x22b0 [ 292.939755][ T5953] ? init_inodes+0xdb/0x320 [ 292.939770][ T5953] ? __pfx_init_journal+0x10/0x10 [ 292.939782][ T5953] ? vsnprintf+0xdf1/0xee0 [ 292.939809][ T5953] ? snprintf+0xe8/0x140 [ 292.939821][ T5953] ? init_inodes+0xdb/0x320 [ 292.939833][ T5953] ? __pfx_snprintf+0x10/0x10 [ 292.939844][ T5953] ? gfs2_glock_nq_num+0x13d/0x170 [ 292.939860][ T5953] init_inodes+0xdb/0x320 [ 292.939874][ T5953] gfs2_fill_super+0x1a38/0x21d0 [ 292.939894][ T5953] ? __pfx_gfs2_fill_super+0x10/0x10 [ 292.939914][ T5953] ? init_locking+0xb8/0x210 [ 292.939929][ T5953] ? sb_set_blocksize+0x155/0x240 [ 292.939944][ T5953] ? setup_bdev_super+0x4c1/0x5b0 [ 292.939958][ T5953] get_tree_bdev_flags+0x431/0x4f0 [ 292.939971][ T5953] ? __pfx_gfs2_fill_super+0x10/0x10 [ 292.939983][ T5953] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 292.939993][ T5953] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 292.940019][ T5953] gfs2_get_tree+0x51/0x1e0 [ 292.940032][ T5953] vfs_get_tree+0x92/0x2a0 [ 292.940046][ T5953] do_new_mount+0x341/0xd30 [ 292.940060][ T5953] ? apparmor_capable+0x126/0x170 [ 292.940078][ T5953] ? __pfx_do_new_mount+0x10/0x10 [ 292.940093][ T5953] ? ns_capable+0x89/0xe0 [ 292.940116][ T5953] ? user_path_at+0xd4/0x160 [ 292.940138][ T5953] __se_sys_mount+0x31d/0x420 [ 292.940158][ T5953] ? __pfx___se_sys_mount+0x10/0x10 [ 292.940179][ T5953] ? __x64_sys_mount+0x20/0xc0 [ 292.940196][ T5953] do_syscall_64+0x14d/0xf80 [ 292.940213][ T5953] ? trace_irq_disable+0x3b/0x150 [ 292.940225][ T5953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.940238][ T5953] ? clear_bhb_loop+0x40/0x90 [ 292.940252][ T5953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.940267][ T5953] RIP: 0033:0x7f69b919b30a [ 292.940365][ T5953] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.940376][ T5953] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 292.940392][ T5953] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 292.940401][ T5953] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 292.940408][ T5953] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 292.940415][ T5953] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 292.940423][ T5953] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 292.940443][ T5953] [ 292.940449][ T5953] gfs2: fsid=..s: Error checking journal for spectator mount. [ 293.166150][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.231224][ T5725] veth1_vlan: entered promiscuous mode [ 293.628559][ T1041] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.684052][ T1041] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.688312][ T1041] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.762327][ T5725] veth0_macvtap: entered promiscuous mode [ 294.241555][ T1041] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.525522][ T5969] loop0: detected capacity change from 0 to 32768 [ 294.570556][ T5969] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 294.574206][ T5969] gfs2: fsid=.: Now mounting FS (format 1801)... [ 294.583530][ T5969] syz.0.24: attempt to access beyond end of device [ 294.583530][ T5969] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 294.591859][ T5969] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 294.598126][ T5969] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:4 [ 294.601665][ T5969] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5969 [syz.0.24] init_journal+0x16d9/0x22b0 [ 294.606295][ T5969] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 294.611124][ T5969] CPU: 0 UID: 0 PID: 5969 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT(full) [ 294.611148][ T5969] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 294.611158][ T5969] Call Trace: [ 294.611169][ T5969] [ 294.611177][ T5969] dump_stack_lvl+0xe8/0x150 [ 294.611206][ T5969] gfs2_withdraw+0xc3/0x1b0 [ 294.611225][ T5969] gfs2_jdesc_check+0x17d/0x2f0 [ 294.611247][ T5969] check_journal_clean+0x18d/0x360 [ 294.611264][ T5969] ? __pfx_check_journal_clean+0x10/0x10 [ 294.611281][ T5969] ? init_journal+0x16d9/0x22b0 [ 294.611303][ T5969] ? do_raw_spin_unlock+0x4d/0x210 [ 294.611323][ T5969] ? _raw_spin_unlock+0x28/0x50 [ 294.611336][ T5969] ? gfs2_jdesc_find+0xab/0xc0 [ 294.611348][ T5969] init_journal+0x16d9/0x22b0 [ 294.611363][ T5969] ? init_inodes+0xdb/0x320 [ 294.611374][ T5969] ? __pfx_init_journal+0x10/0x10 [ 294.611384][ T5969] ? vsnprintf+0xdf1/0xee0 [ 294.611403][ T5969] ? snprintf+0xe8/0x140 [ 294.611414][ T5969] ? init_inodes+0xdb/0x320 [ 294.611423][ T5969] ? __pfx_snprintf+0x10/0x10 [ 294.611436][ T5969] ? gfs2_glock_nq_num+0x13d/0x170 [ 294.611455][ T5969] init_inodes+0xdb/0x320 [ 294.611472][ T5969] gfs2_fill_super+0x1a38/0x21d0 [ 294.611501][ T5969] ? __pfx_gfs2_fill_super+0x10/0x10 [ 294.611519][ T5969] ? init_locking+0xb8/0x210 [ 294.611532][ T5969] ? sb_set_blocksize+0x155/0x240 [ 294.611543][ T5969] ? setup_bdev_super+0x4c1/0x5b0 [ 294.611561][ T5969] get_tree_bdev_flags+0x431/0x4f0 [ 294.611575][ T5969] ? __pfx_gfs2_fill_super+0x10/0x10 [ 294.611589][ T5969] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 294.611602][ T5969] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 294.611633][ T5969] gfs2_get_tree+0x51/0x1e0 [ 294.611651][ T5969] vfs_get_tree+0x92/0x2a0 [ 294.611664][ T5969] do_new_mount+0x341/0xd30 [ 294.611677][ T5969] ? apparmor_capable+0x126/0x170 [ 294.611690][ T5969] ? __pfx_do_new_mount+0x10/0x10 [ 294.611738][ T5969] ? ns_capable+0x89/0xe0 [ 294.611767][ T5969] ? user_path_at+0xd4/0x160 [ 294.611791][ T5969] __se_sys_mount+0x31d/0x420 [ 294.611809][ T5969] ? __pfx___se_sys_mount+0x10/0x10 [ 294.611824][ T5969] ? __x64_sys_mount+0x20/0xc0 [ 294.611837][ T5969] do_syscall_64+0x14d/0xf80 [ 294.611847][ T5969] ? trace_irq_disable+0x3b/0x150 [ 294.611854][ T5969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.611862][ T5969] ? clear_bhb_loop+0x40/0x90 [ 294.611871][ T5969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.611879][ T5969] RIP: 0033:0x7f69b919b30a [ 294.611889][ T5969] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.611895][ T5969] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 294.611904][ T5969] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 294.611911][ T5969] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 294.611918][ T5969] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 294.611925][ T5969] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 294.611931][ T5969] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 294.611948][ T5969] [ 294.611953][ T5969] gfs2: fsid=..s: Error checking journal for spectator mount. [ 294.885551][ T5725] veth1_macvtap: entered promiscuous mode [ 295.262068][ T5975] loop0: detected capacity change from 0 to 32768 [ 295.300731][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.337226][ T5975] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 295.340764][ T5975] gfs2: fsid=.: Now mounting FS (format 1801)... [ 295.350704][ T5975] syz.0.25: attempt to access beyond end of device [ 295.350704][ T5975] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 295.357020][ T5975] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 295.363774][ T5975] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:4 [ 295.367278][ T5975] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5975 [syz.0.25] init_journal+0x16d9/0x22b0 [ 295.371532][ T5975] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 295.376162][ T5975] CPU: 0 UID: 0 PID: 5975 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT(full) [ 295.376183][ T5975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 295.376190][ T5975] Call Trace: [ 295.376199][ T5975] [ 295.376203][ T5975] dump_stack_lvl+0xe8/0x150 [ 295.376224][ T5975] gfs2_withdraw+0xc3/0x1b0 [ 295.376235][ T5975] gfs2_jdesc_check+0x17d/0x2f0 [ 295.376247][ T5975] check_journal_clean+0x18d/0x360 [ 295.376256][ T5975] ? __pfx_check_journal_clean+0x10/0x10 [ 295.376265][ T5975] ? init_journal+0x16d9/0x22b0 [ 295.376282][ T5975] ? do_raw_spin_unlock+0x4d/0x210 [ 295.376296][ T5975] ? _raw_spin_unlock+0x28/0x50 [ 295.376309][ T5975] ? gfs2_jdesc_find+0xab/0xc0 [ 295.376323][ T5975] init_journal+0x16d9/0x22b0 [ 295.376342][ T5975] ? init_inodes+0xdb/0x320 [ 295.376358][ T5975] ? __pfx_init_journal+0x10/0x10 [ 295.376370][ T5975] ? vsnprintf+0xdf1/0xee0 [ 295.376396][ T5975] ? snprintf+0xe8/0x140 [ 295.376407][ T5975] ? init_inodes+0xdb/0x320 [ 295.376418][ T5975] ? __pfx_snprintf+0x10/0x10 [ 295.376430][ T5975] ? gfs2_glock_nq_num+0x13d/0x170 [ 295.376447][ T5975] init_inodes+0xdb/0x320 [ 295.376461][ T5975] gfs2_fill_super+0x1a38/0x21d0 [ 295.376484][ T5975] ? __pfx_gfs2_fill_super+0x10/0x10 [ 295.376495][ T5975] ? init_locking+0xb8/0x210 [ 295.376502][ T5975] ? sb_set_blocksize+0x155/0x240 [ 295.376512][ T5975] ? setup_bdev_super+0x4c1/0x5b0 [ 295.376527][ T5975] get_tree_bdev_flags+0x431/0x4f0 [ 295.376539][ T5975] ? __pfx_gfs2_fill_super+0x10/0x10 [ 295.376550][ T5975] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 295.376560][ T5975] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 295.376586][ T5975] gfs2_get_tree+0x51/0x1e0 [ 295.376601][ T5975] vfs_get_tree+0x92/0x2a0 [ 295.376615][ T5975] do_new_mount+0x341/0xd30 [ 295.376630][ T5975] ? apparmor_capable+0x126/0x170 [ 295.376642][ T5975] ? __pfx_do_new_mount+0x10/0x10 [ 295.376652][ T5975] ? ns_capable+0x89/0xe0 [ 295.376668][ T5975] ? user_path_at+0xd4/0x160 [ 295.376680][ T5975] __se_sys_mount+0x31d/0x420 [ 295.376693][ T5975] ? __pfx___se_sys_mount+0x10/0x10 [ 295.376706][ T5975] ? __x64_sys_mount+0x20/0xc0 [ 295.376717][ T5975] do_syscall_64+0x14d/0xf80 [ 295.376727][ T5975] ? trace_irq_disable+0x3b/0x150 [ 295.376734][ T5975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.376743][ T5975] ? clear_bhb_loop+0x40/0x90 [ 295.376754][ T5975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.376766][ T5975] RIP: 0033:0x7f69b919b30a [ 295.376779][ T5975] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.376789][ T5975] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 295.376804][ T5975] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 295.376813][ T5975] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 295.376821][ T5975] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 295.376829][ T5975] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 295.376836][ T5975] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 295.376854][ T5975] [ 295.376859][ T5975] gfs2: fsid=..s: Error checking journal for spectator mount. [ 295.686568][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.990287][ T5981] loop0: detected capacity change from 0 to 32768 [ 296.056182][ T5981] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 296.060338][ T5981] gfs2: fsid=.: Now mounting FS (format 1801)... [ 296.068412][ T5981] syz.0.26: attempt to access beyond end of device [ 296.068412][ T5981] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 296.075504][ T5981] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 296.082343][ T5981] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:4 [ 296.086442][ T5981] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5981 [syz.0.26] init_journal+0x16d9/0x22b0 [ 296.090691][ T5981] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 296.095287][ T5981] CPU: 0 UID: 0 PID: 5981 Comm: syz.0.26 Not tainted syzkaller #0 PREEMPT(full) [ 296.095309][ T5981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 296.095318][ T5981] Call Trace: [ 296.095329][ T5981] [ 296.095336][ T5981] dump_stack_lvl+0xe8/0x150 [ 296.095364][ T5981] gfs2_withdraw+0xc3/0x1b0 [ 296.095381][ T5981] gfs2_jdesc_check+0x17d/0x2f0 [ 296.095401][ T5981] check_journal_clean+0x18d/0x360 [ 296.095417][ T5981] ? __pfx_check_journal_clean+0x10/0x10 [ 296.095434][ T5981] ? init_journal+0x16d9/0x22b0 [ 296.095453][ T5981] ? do_raw_spin_unlock+0x4d/0x210 [ 296.095471][ T5981] ? _raw_spin_unlock+0x28/0x50 [ 296.095487][ T5981] ? gfs2_jdesc_find+0xab/0xc0 [ 296.095505][ T5981] init_journal+0x16d9/0x22b0 [ 296.095529][ T5981] ? init_inodes+0xdb/0x320 [ 296.095547][ T5981] ? __pfx_init_journal+0x10/0x10 [ 296.095560][ T5981] ? vsnprintf+0xdf1/0xee0 [ 296.095589][ T5981] ? snprintf+0xe8/0x140 [ 296.095604][ T5981] ? init_inodes+0xdb/0x320 [ 296.095618][ T5981] ? __pfx_snprintf+0x10/0x10 [ 296.095632][ T5981] ? gfs2_glock_nq_num+0x13d/0x170 [ 296.095651][ T5981] init_inodes+0xdb/0x320 [ 296.095699][ T5981] gfs2_fill_super+0x1a38/0x21d0 [ 296.095729][ T5981] ? __pfx_gfs2_fill_super+0x10/0x10 [ 296.095745][ T5981] ? init_locking+0xb8/0x210 [ 296.095758][ T5981] ? sb_set_blocksize+0x155/0x240 [ 296.095775][ T5981] ? setup_bdev_super+0x4c1/0x5b0 [ 296.095793][ T5981] get_tree_bdev_flags+0x431/0x4f0 [ 296.095809][ T5981] ? __pfx_gfs2_fill_super+0x10/0x10 [ 296.095823][ T5981] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 296.095835][ T5981] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 296.095864][ T5981] gfs2_get_tree+0x51/0x1e0 [ 296.095880][ T5981] vfs_get_tree+0x92/0x2a0 [ 296.095896][ T5981] do_new_mount+0x341/0xd30 [ 296.095913][ T5981] ? apparmor_capable+0x126/0x170 [ 296.095930][ T5981] ? __pfx_do_new_mount+0x10/0x10 [ 296.095955][ T5981] ? ns_capable+0x89/0xe0 [ 296.096089][ T5981] ? user_path_at+0xd4/0x160 [ 296.096112][ T5981] __se_sys_mount+0x31d/0x420 [ 296.096221][ T5981] ? __pfx___se_sys_mount+0x10/0x10 [ 296.096244][ T5981] ? __x64_sys_mount+0x20/0xc0 [ 296.096262][ T5981] do_syscall_64+0x14d/0xf80 [ 296.096280][ T5981] ? trace_irq_disable+0x3b/0x150 [ 296.096293][ T5981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.096306][ T5981] ? clear_bhb_loop+0x40/0x90 [ 296.096322][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.096336][ T5981] RIP: 0033:0x7f69b919b30a [ 296.096351][ T5981] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.096362][ T5981] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 296.096377][ T5981] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 296.096386][ T5981] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 296.096394][ T5981] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 296.096402][ T5981] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 296.096411][ T5981] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 296.096429][ T5981] [ 296.096435][ T5981] gfs2: fsid=..s: Error checking journal for spectator mount. [ 296.696809][ T5986] loop0: detected capacity change from 0 to 32768 [ 296.738090][ T5986] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 296.741284][ T5986] gfs2: fsid=.: Now mounting FS (format 1801)... [ 296.749147][ T5986] syz.0.27: attempt to access beyond end of device [ 296.749147][ T5986] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 296.757196][ T5986] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 296.763371][ T5986] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:4 [ 296.767101][ T5986] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5986 [syz.0.27] init_journal+0x16d9/0x22b0 [ 296.771339][ T5986] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 296.775723][ T5986] CPU: 0 UID: 0 PID: 5986 Comm: syz.0.27 Not tainted syzkaller #0 PREEMPT(full) [ 296.775744][ T5986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 296.775753][ T5986] Call Trace: [ 296.775759][ T5986] [ 296.775764][ T5986] dump_stack_lvl+0xe8/0x150 [ 296.775787][ T5986] gfs2_withdraw+0xc3/0x1b0 [ 296.775802][ T5986] gfs2_jdesc_check+0x17d/0x2f0 [ 296.775820][ T5986] check_journal_clean+0x18d/0x360 [ 296.775833][ T5986] ? __pfx_check_journal_clean+0x10/0x10 [ 296.775846][ T5986] ? init_journal+0x16d9/0x22b0 [ 296.775862][ T5986] ? do_raw_spin_unlock+0x4d/0x210 [ 296.775877][ T5986] ? _raw_spin_unlock+0x28/0x50 [ 296.775891][ T5986] ? gfs2_jdesc_find+0xab/0xc0 [ 296.775907][ T5986] init_journal+0x16d9/0x22b0 [ 296.775926][ T5986] ? init_inodes+0xdb/0x320 [ 296.775939][ T5986] ? __pfx_init_journal+0x10/0x10 [ 296.775950][ T5986] ? vsnprintf+0xdf1/0xee0 [ 296.775982][ T5986] ? snprintf+0xe8/0x140 [ 296.775994][ T5986] ? init_inodes+0xdb/0x320 [ 296.776005][ T5986] ? __pfx_snprintf+0x10/0x10 [ 296.776016][ T5986] ? gfs2_glock_nq_num+0x13d/0x170 [ 296.776032][ T5986] init_inodes+0xdb/0x320 [ 296.776044][ T5986] gfs2_fill_super+0x1a38/0x21d0 [ 296.776066][ T5986] ? __pfx_gfs2_fill_super+0x10/0x10 [ 296.776079][ T5986] ? init_locking+0xb8/0x210 [ 296.776089][ T5986] ? sb_set_blocksize+0x155/0x240 [ 296.776104][ T5986] ? setup_bdev_super+0x4c1/0x5b0 [ 296.776118][ T5986] get_tree_bdev_flags+0x431/0x4f0 [ 296.776130][ T5986] ? __pfx_gfs2_fill_super+0x10/0x10 [ 296.776141][ T5986] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 296.776151][ T5986] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 296.776176][ T5986] gfs2_get_tree+0x51/0x1e0 [ 296.776188][ T5986] vfs_get_tree+0x92/0x2a0 [ 296.776201][ T5986] do_new_mount+0x341/0xd30 [ 296.776215][ T5986] ? apparmor_capable+0x126/0x170 [ 296.776231][ T5986] ? __pfx_do_new_mount+0x10/0x10 [ 296.776246][ T5986] ? ns_capable+0x89/0xe0 [ 296.776268][ T5986] ? user_path_at+0xd4/0x160 [ 296.776286][ T5986] __se_sys_mount+0x31d/0x420 [ 296.776305][ T5986] ? __pfx___se_sys_mount+0x10/0x10 [ 296.776324][ T5986] ? __x64_sys_mount+0x20/0xc0 [ 296.776340][ T5986] do_syscall_64+0x14d/0xf80 [ 296.776354][ T5986] ? trace_irq_disable+0x3b/0x150 [ 296.776364][ T5986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.776375][ T5986] ? clear_bhb_loop+0x40/0x90 [ 296.776390][ T5986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.776401][ T5986] RIP: 0033:0x7f69b919b30a [ 296.776415][ T5986] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.776424][ T5986] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 296.776437][ T5986] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 296.776445][ T5986] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 296.776453][ T5986] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 296.776460][ T5986] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 296.776467][ T5986] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 296.776485][ T5986] [ 296.776490][ T5986] gfs2: fsid=..s: Error checking journal for spectator mount. [ 296.965918][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.021937][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.463615][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 2026/04/07 09:59:53 executed programs: 20 [ 297.896935][ T158] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.243473][ T158] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.266689][ T5998] loop0: detected capacity change from 0 to 32768 [ 298.357372][ T5998] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 298.361342][ T5998] gfs2: fsid=.: Now mounting FS (format 1801)... [ 298.374899][ T5998] syz.0.30: attempt to access beyond end of device [ 298.374899][ T5998] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 298.381777][ T5998] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 298.388876][ T5998] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 298.392285][ T5998] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5998 [syz.0.30] init_journal+0x16d9/0x22b0 [ 298.396508][ T5998] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 298.400629][ T5998] CPU: 0 UID: 0 PID: 5998 Comm: syz.0.30 Not tainted syzkaller #0 PREEMPT(full) [ 298.400652][ T5998] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 298.400661][ T5998] Call Trace: [ 298.400671][ T5998] [ 298.400679][ T5998] dump_stack_lvl+0xe8/0x150 [ 298.400707][ T5998] gfs2_withdraw+0xc3/0x1b0 [ 298.400724][ T5998] gfs2_jdesc_check+0x17d/0x2f0 [ 298.400746][ T5998] check_journal_clean+0x18d/0x360 [ 298.400763][ T5998] ? __pfx_check_journal_clean+0x10/0x10 [ 298.400779][ T5998] ? init_journal+0x16d9/0x22b0 [ 298.400799][ T5998] ? do_raw_spin_unlock+0x4d/0x210 [ 298.400817][ T5998] ? _raw_spin_unlock+0x28/0x50 [ 298.400892][ T5998] ? gfs2_jdesc_find+0xab/0xc0 [ 298.400909][ T5998] init_journal+0x16d9/0x22b0 [ 298.400931][ T5998] ? init_inodes+0xdb/0x320 [ 298.400956][ T5998] ? __pfx_init_journal+0x10/0x10 [ 298.400969][ T5998] ? vsnprintf+0xdf1/0xee0 [ 298.400996][ T5998] ? snprintf+0xe8/0x140 [ 298.401015][ T5998] ? init_inodes+0xdb/0x320 [ 298.401030][ T5998] ? __pfx_snprintf+0x10/0x10 [ 298.401046][ T5998] ? gfs2_glock_nq_num+0x13d/0x170 [ 298.401064][ T5998] init_inodes+0xdb/0x320 [ 298.401075][ T5998] gfs2_fill_super+0x1a38/0x21d0 [ 298.401090][ T5998] ? __pfx_gfs2_fill_super+0x10/0x10 [ 298.401102][ T5998] ? init_locking+0xb8/0x210 [ 298.401114][ T5998] ? sb_set_blocksize+0x155/0x240 [ 298.401129][ T5998] ? setup_bdev_super+0x4c1/0x5b0 [ 298.401146][ T5998] get_tree_bdev_flags+0x431/0x4f0 [ 298.401162][ T5998] ? __pfx_gfs2_fill_super+0x10/0x10 [ 298.401176][ T5998] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 298.401188][ T5998] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 298.401216][ T5998] gfs2_get_tree+0x51/0x1e0 [ 298.401226][ T5998] vfs_get_tree+0x92/0x2a0 [ 298.401237][ T5998] do_new_mount+0x341/0xd30 [ 298.401249][ T5998] ? apparmor_capable+0x126/0x170 [ 298.401261][ T5998] ? __pfx_do_new_mount+0x10/0x10 [ 298.401272][ T5998] ? ns_capable+0x89/0xe0 [ 298.401289][ T5998] ? user_path_at+0xd4/0x160 [ 298.401304][ T5998] __se_sys_mount+0x31d/0x420 [ 298.401318][ T5998] ? __pfx___se_sys_mount+0x10/0x10 [ 298.401333][ T5998] ? __x64_sys_mount+0x20/0xc0 [ 298.401345][ T5998] do_syscall_64+0x14d/0xf80 [ 298.401357][ T5998] ? trace_irq_disable+0x3b/0x150 [ 298.401365][ T5998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.401375][ T5998] ? clear_bhb_loop+0x40/0x90 [ 298.401386][ T5998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.401396][ T5998] RIP: 0033:0x7f69b919b30a [ 298.401406][ T5998] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.401414][ T5998] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 298.401425][ T5998] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 298.401432][ T5998] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 298.401438][ T5998] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 298.401444][ T5998] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 298.401450][ T5998] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 298.401467][ T5998] [ 298.401474][ T5998] gfs2: fsid=..s: Error checking journal for spectator mount. [ 299.043809][ T6003] loop0: detected capacity change from 0 to 32768 [ 299.058233][ T74] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.069562][ T74] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.079025][ T6003] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 299.082762][ T6003] gfs2: fsid=.: Now mounting FS (format 1801)... [ 299.094895][ T6003] syz.0.31: attempt to access beyond end of device [ 299.094895][ T6003] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 299.101709][ T6003] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 299.108817][ T6003] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:4 [ 299.113003][ T6003] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6003 [syz.0.31] init_journal+0x16d9/0x22b0 [ 299.117216][ T6003] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 299.121216][ T6003] CPU: 0 UID: 0 PID: 6003 Comm: syz.0.31 Not tainted syzkaller #0 PREEMPT(full) [ 299.121238][ T6003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 299.121247][ T6003] Call Trace: [ 299.121257][ T6003] [ 299.121264][ T6003] dump_stack_lvl+0xe8/0x150 [ 299.121291][ T6003] gfs2_withdraw+0xc3/0x1b0 [ 299.121308][ T6003] gfs2_jdesc_check+0x17d/0x2f0 [ 299.121328][ T6003] check_journal_clean+0x18d/0x360 [ 299.121344][ T6003] ? __pfx_check_journal_clean+0x10/0x10 [ 299.121360][ T6003] ? init_journal+0x16d9/0x22b0 [ 299.121379][ T6003] ? do_raw_spin_unlock+0x4d/0x210 [ 299.121397][ T6003] ? _raw_spin_unlock+0x28/0x50 [ 299.121412][ T6003] ? gfs2_jdesc_find+0xab/0xc0 [ 299.121428][ T6003] init_journal+0x16d9/0x22b0 [ 299.121450][ T6003] ? init_inodes+0xdb/0x320 [ 299.121467][ T6003] ? __pfx_init_journal+0x10/0x10 [ 299.121481][ T6003] ? vsnprintf+0xdf1/0xee0 [ 299.121508][ T6003] ? snprintf+0xe8/0x140 [ 299.121522][ T6003] ? init_inodes+0xdb/0x320 [ 299.121535][ T6003] ? __pfx_snprintf+0x10/0x10 [ 299.121549][ T6003] ? gfs2_glock_nq_num+0x13d/0x170 [ 299.121567][ T6003] init_inodes+0xdb/0x320 [ 299.121581][ T6003] gfs2_fill_super+0x1a38/0x21d0 [ 299.121604][ T6003] ? __pfx_gfs2_fill_super+0x10/0x10 [ 299.121620][ T6003] ? init_locking+0xb8/0x210 [ 299.121632][ T6003] ? sb_set_blocksize+0x155/0x240 [ 299.121649][ T6003] ? setup_bdev_super+0x4c1/0x5b0 [ 299.121664][ T6003] get_tree_bdev_flags+0x431/0x4f0 [ 299.121679][ T6003] ? __pfx_gfs2_fill_super+0x10/0x10 [ 299.121693][ T6003] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 299.121704][ T6003] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 299.121732][ T6003] gfs2_get_tree+0x51/0x1e0 [ 299.121748][ T6003] vfs_get_tree+0x92/0x2a0 [ 299.121763][ T6003] do_new_mount+0x341/0xd30 [ 299.121779][ T6003] ? apparmor_capable+0x126/0x170 [ 299.121798][ T6003] ? __pfx_do_new_mount+0x10/0x10 [ 299.121814][ T6003] ? ns_capable+0x89/0xe0 [ 299.121834][ T6003] ? user_path_at+0xd4/0x160 [ 299.121853][ T6003] __se_sys_mount+0x31d/0x420 [ 299.121874][ T6003] ? __pfx___se_sys_mount+0x10/0x10 [ 299.121896][ T6003] ? __x64_sys_mount+0x20/0xc0 [ 299.121914][ T6003] do_syscall_64+0x14d/0xf80 [ 299.121931][ T6003] ? trace_irq_disable+0x3b/0x150 [ 299.121948][ T6003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.121957][ T6003] ? clear_bhb_loop+0x40/0x90 [ 299.121968][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.121977][ T6003] RIP: 0033:0x7f69b919b30a [ 299.121989][ T6003] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.121996][ T6003] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 299.122007][ T6003] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 299.122013][ T6003] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 299.122019][ T6003] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 299.122024][ T6003] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 299.122030][ T6003] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 299.122043][ T6003] [ 299.122047][ T6003] gfs2: fsid=..s: Error checking journal for spectator mount. [ 299.433947][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.438288][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.489151][ T5723] veth0_vlan: entered promiscuous mode [ 299.741997][ T6008] loop0: detected capacity change from 0 to 32768 [ 299.795958][ T5726] veth0_vlan: entered promiscuous mode [ 299.812088][ T6008] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 299.816634][ T6008] gfs2: fsid=.: Now mounting FS (format 1801)... [ 299.827123][ T6008] syz.0.32: attempt to access beyond end of device [ 299.827123][ T6008] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 299.834506][ T6008] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 299.841274][ T6008] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 299.845520][ T6008] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6008 [syz.0.32] init_journal+0x16d9/0x22b0 [ 299.850417][ T6008] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 299.855295][ T6008] CPU: 0 UID: 0 PID: 6008 Comm: syz.0.32 Not tainted syzkaller #0 PREEMPT(full) [ 299.855319][ T6008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 299.855329][ T6008] Call Trace: [ 299.855335][ T6008] [ 299.855341][ T6008] dump_stack_lvl+0xe8/0x150 [ 299.855369][ T6008] gfs2_withdraw+0xc3/0x1b0 [ 299.855388][ T6008] gfs2_jdesc_check+0x17d/0x2f0 [ 299.855411][ T6008] check_journal_clean+0x18d/0x360 [ 299.855429][ T6008] ? __pfx_check_journal_clean+0x10/0x10 [ 299.855445][ T6008] ? init_journal+0x16d9/0x22b0 [ 299.855468][ T6008] ? do_raw_spin_unlock+0x4d/0x210 [ 299.855487][ T6008] ? _raw_spin_unlock+0x28/0x50 [ 299.855503][ T6008] ? gfs2_jdesc_find+0xab/0xc0 [ 299.855520][ T6008] init_journal+0x16d9/0x22b0 [ 299.855542][ T6008] ? init_inodes+0xdb/0x320 [ 299.855561][ T6008] ? __pfx_init_journal+0x10/0x10 [ 299.855576][ T6008] ? vsnprintf+0xdf1/0xee0 [ 299.855647][ T6008] ? snprintf+0xe8/0x140 [ 299.855662][ T6008] ? init_inodes+0xdb/0x320 [ 299.855676][ T6008] ? __pfx_snprintf+0x10/0x10 [ 299.855689][ T6008] ? gfs2_glock_nq_num+0x13d/0x170 [ 299.855706][ T6008] init_inodes+0xdb/0x320 [ 299.855720][ T6008] gfs2_fill_super+0x1a38/0x21d0 [ 299.855745][ T6008] ? __pfx_gfs2_fill_super+0x10/0x10 [ 299.855761][ T6008] ? init_locking+0xb8/0x210 [ 299.855772][ T6008] ? sb_set_blocksize+0x155/0x240 [ 299.855787][ T6008] ? setup_bdev_super+0x4c1/0x5b0 [ 299.855804][ T6008] get_tree_bdev_flags+0x431/0x4f0 [ 299.855818][ T6008] ? __pfx_gfs2_fill_super+0x10/0x10 [ 299.855830][ T6008] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 299.855842][ T6008] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 299.855871][ T6008] gfs2_get_tree+0x51/0x1e0 [ 299.855886][ T6008] vfs_get_tree+0x92/0x2a0 [ 299.855901][ T6008] do_new_mount+0x341/0xd30 [ 299.855916][ T6008] ? apparmor_capable+0x126/0x170 [ 299.855932][ T6008] ? __pfx_do_new_mount+0x10/0x10 [ 299.855947][ T6008] ? ns_capable+0x89/0xe0 [ 299.855970][ T6008] ? user_path_at+0xd4/0x160 [ 299.855990][ T6008] __se_sys_mount+0x31d/0x420 [ 299.856009][ T6008] ? __pfx___se_sys_mount+0x10/0x10 [ 299.856029][ T6008] ? __x64_sys_mount+0x20/0xc0 [ 299.856047][ T6008] do_syscall_64+0x14d/0xf80 [ 299.856063][ T6008] ? trace_irq_disable+0x3b/0x150 [ 299.856074][ T6008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.856087][ T6008] ? clear_bhb_loop+0x40/0x90 [ 299.856099][ T6008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.856108][ T6008] RIP: 0033:0x7f69b919b30a [ 299.856119][ T6008] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.856127][ T6008] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 299.856139][ T6008] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 299.856147][ T6008] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 299.856155][ T6008] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 299.856163][ T6008] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 299.856170][ T6008] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 299.856189][ T6008] [ 299.856195][ T6008] gfs2: fsid=..s: Error checking journal for spectator mount. [ 300.494422][ T6014] loop0: detected capacity change from 0 to 32768 [ 300.554965][ T6014] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 300.558554][ T6014] gfs2: fsid=.: Now mounting FS (format 1801)... [ 300.581473][ T6014] syz.0.33: attempt to access beyond end of device [ 300.581473][ T6014] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 300.588344][ T6014] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 300.595552][ T6014] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:4 [ 300.599372][ T6014] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6014 [syz.0.33] init_journal+0x16d9/0x22b0 [ 300.604586][ T6014] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 300.608586][ T6014] CPU: 0 UID: 0 PID: 6014 Comm: syz.0.33 Not tainted syzkaller #0 PREEMPT(full) [ 300.608607][ T6014] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 300.608614][ T6014] Call Trace: [ 300.608623][ T6014] [ 300.608630][ T6014] dump_stack_lvl+0xe8/0x150 [ 300.608649][ T6014] gfs2_withdraw+0xc3/0x1b0 [ 300.608661][ T6014] gfs2_jdesc_check+0x17d/0x2f0 [ 300.608678][ T6014] check_journal_clean+0x18d/0x360 [ 300.608692][ T6014] ? __pfx_check_journal_clean+0x10/0x10 [ 300.608705][ T6014] ? init_journal+0x16d9/0x22b0 [ 300.608722][ T6014] ? do_raw_spin_unlock+0x4d/0x210 [ 300.608737][ T6014] ? _raw_spin_unlock+0x28/0x50 [ 300.608770][ T6014] ? gfs2_jdesc_find+0xab/0xc0 [ 300.608784][ T6014] init_journal+0x16d9/0x22b0 [ 300.608803][ T6014] ? init_inodes+0xdb/0x320 [ 300.608819][ T6014] ? __pfx_init_journal+0x10/0x10 [ 300.608831][ T6014] ? vsnprintf+0xdf1/0xee0 [ 300.608855][ T6014] ? snprintf+0xe8/0x140 [ 300.608868][ T6014] ? init_inodes+0xdb/0x320 [ 300.608879][ T6014] ? __pfx_snprintf+0x10/0x10 [ 300.608887][ T6014] ? gfs2_glock_nq_num+0x13d/0x170 [ 300.608898][ T6014] init_inodes+0xdb/0x320 [ 300.608907][ T6014] gfs2_fill_super+0x1a38/0x21d0 [ 300.608920][ T6014] ? __pfx_gfs2_fill_super+0x10/0x10 [ 300.608929][ T6014] ? init_locking+0xb8/0x210 [ 300.608935][ T6014] ? sb_set_blocksize+0x155/0x240 [ 300.608949][ T6014] ? setup_bdev_super+0x4c1/0x5b0 [ 300.608963][ T6014] get_tree_bdev_flags+0x431/0x4f0 [ 300.608994][ T6014] ? __pfx_gfs2_fill_super+0x10/0x10 [ 300.609004][ T6014] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 300.609014][ T6014] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 300.609040][ T6014] gfs2_get_tree+0x51/0x1e0 [ 300.609055][ T6014] vfs_get_tree+0x92/0x2a0 [ 300.609068][ T6014] do_new_mount+0x341/0xd30 [ 300.609083][ T6014] ? apparmor_capable+0x126/0x170 [ 300.609097][ T6014] ? __pfx_do_new_mount+0x10/0x10 [ 300.609112][ T6014] ? ns_capable+0x89/0xe0 [ 300.609134][ T6014] ? user_path_at+0xd4/0x160 [ 300.609152][ T6014] __se_sys_mount+0x31d/0x420 [ 300.609171][ T6014] ? __pfx___se_sys_mount+0x10/0x10 [ 300.609190][ T6014] ? __x64_sys_mount+0x20/0xc0 [ 300.609205][ T6014] do_syscall_64+0x14d/0xf80 [ 300.609223][ T6014] ? trace_irq_disable+0x3b/0x150 [ 300.609234][ T6014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.609251][ T6014] ? clear_bhb_loop+0x40/0x90 [ 300.609268][ T6014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.609280][ T6014] RIP: 0033:0x7f69b919b30a [ 300.609293][ T6014] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.609302][ T6014] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 300.609317][ T6014] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 300.609326][ T6014] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 300.609333][ T6014] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 300.609341][ T6014] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 300.609348][ T6014] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 300.609364][ T6014] [ 300.609369][ T6014] gfs2: fsid=..s: Error checking journal for spectator mount. [ 300.816364][ T5726] veth1_vlan: entered promiscuous mode [ 300.880540][ T1041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.894629][ T5723] veth1_vlan: entered promiscuous mode [ 300.914637][ T1041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.984454][ T6026] loop0: detected capacity change from 0 to 32768 [ 302.045928][ T6026] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 302.049499][ T6026] gfs2: fsid=.: Now mounting FS (format 1801)... [ 302.059420][ T6026] syz.0.36: attempt to access beyond end of device [ 302.059420][ T6026] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 302.066707][ T6026] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 302.073388][ T6026] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:4 [ 302.077106][ T6026] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6026 [syz.0.36] init_journal+0x16d9/0x22b0 [ 302.081254][ T6026] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 302.085424][ T6026] CPU: 0 UID: 0 PID: 6026 Comm: syz.0.36 Not tainted syzkaller #0 PREEMPT(full) [ 302.085445][ T6026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 302.085454][ T6026] Call Trace: [ 302.085464][ T6026] [ 302.085472][ T6026] dump_stack_lvl+0xe8/0x150 [ 302.085499][ T6026] gfs2_withdraw+0xc3/0x1b0 [ 302.085517][ T6026] gfs2_jdesc_check+0x17d/0x2f0 [ 302.085537][ T6026] check_journal_clean+0x18d/0x360 [ 302.085552][ T6026] ? __pfx_check_journal_clean+0x10/0x10 [ 302.085566][ T6026] ? init_journal+0x16d9/0x22b0 [ 302.085585][ T6026] ? do_raw_spin_unlock+0x4d/0x210 [ 302.085601][ T6026] ? _raw_spin_unlock+0x28/0x50 [ 302.085631][ T6026] ? gfs2_jdesc_find+0xab/0xc0 [ 302.085646][ T6026] init_journal+0x16d9/0x22b0 [ 302.085667][ T6026] ? init_inodes+0xdb/0x320 [ 302.085682][ T6026] ? __pfx_init_journal+0x10/0x10 [ 302.085694][ T6026] ? vsnprintf+0xdf1/0xee0 [ 302.085719][ T6026] ? snprintf+0xe8/0x140 [ 302.085732][ T6026] ? init_inodes+0xdb/0x320 [ 302.085744][ T6026] ? __pfx_snprintf+0x10/0x10 [ 302.085757][ T6026] ? gfs2_glock_nq_num+0x13d/0x170 [ 302.085774][ T6026] init_inodes+0xdb/0x320 [ 302.085788][ T6026] gfs2_fill_super+0x1a38/0x21d0 [ 302.085811][ T6026] ? __pfx_gfs2_fill_super+0x10/0x10 [ 302.085826][ T6026] ? init_locking+0xb8/0x210 [ 302.085836][ T6026] ? sb_set_blocksize+0x155/0x240 [ 302.085853][ T6026] ? setup_bdev_super+0x4c1/0x5b0 [ 302.085868][ T6026] get_tree_bdev_flags+0x431/0x4f0 [ 302.085882][ T6026] ? __pfx_gfs2_fill_super+0x10/0x10 [ 302.085892][ T6026] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 302.085904][ T6026] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 302.085925][ T6026] gfs2_get_tree+0x51/0x1e0 [ 302.085938][ T6026] vfs_get_tree+0x92/0x2a0 [ 302.085949][ T6026] do_new_mount+0x341/0xd30 [ 302.085966][ T6026] ? apparmor_capable+0x126/0x170 [ 302.085982][ T6026] ? __pfx_do_new_mount+0x10/0x10 [ 302.085998][ T6026] ? ns_capable+0x89/0xe0 [ 302.086022][ T6026] ? user_path_at+0xd4/0x160 [ 302.086041][ T6026] __se_sys_mount+0x31d/0x420 [ 302.086062][ T6026] ? __pfx___se_sys_mount+0x10/0x10 [ 302.086083][ T6026] ? __x64_sys_mount+0x20/0xc0 [ 302.086100][ T6026] do_syscall_64+0x14d/0xf80 [ 302.086116][ T6026] ? trace_irq_disable+0x3b/0x150 [ 302.086126][ T6026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.086139][ T6026] ? clear_bhb_loop+0x40/0x90 [ 302.086154][ T6026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.086168][ T6026] RIP: 0033:0x7f69b919b30a [ 302.086183][ T6026] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.086194][ T6026] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 302.086209][ T6026] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 302.086218][ T6026] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 302.086226][ T6026] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 302.086234][ T6026] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 302.086241][ T6026] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 302.086261][ T6026] [ 302.086280][ T6026] gfs2: fsid=..s: Error checking journal for spectator mount. [ 302.487075][ T5726] veth0_macvtap: entered promiscuous mode [ 302.738860][ T6031] loop0: detected capacity change from 0 to 32768 [ 302.785230][ T6031] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 302.788449][ T6031] gfs2: fsid=.: Now mounting FS (format 1801)... [ 302.796896][ T6031] syz.0.37: attempt to access beyond end of device [ 302.796896][ T6031] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 302.804057][ T6031] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 302.810973][ T6031] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:4 [ 302.815895][ T6031] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6031 [syz.0.37] init_journal+0x16d9/0x22b0 [ 302.820004][ T6031] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 302.823523][ T6031] CPU: 0 UID: 0 PID: 6031 Comm: syz.0.37 Not tainted syzkaller #0 PREEMPT(full) [ 302.823568][ T6031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 302.823577][ T6031] Call Trace: [ 302.823585][ T6031] [ 302.823593][ T6031] dump_stack_lvl+0xe8/0x150 [ 302.823617][ T6031] gfs2_withdraw+0xc3/0x1b0 [ 302.823631][ T6031] gfs2_jdesc_check+0x17d/0x2f0 [ 302.823648][ T6031] check_journal_clean+0x18d/0x360 [ 302.823662][ T6031] ? __pfx_check_journal_clean+0x10/0x10 [ 302.823675][ T6031] ? init_journal+0x16d9/0x22b0 [ 302.823691][ T6031] ? do_raw_spin_unlock+0x4d/0x210 [ 302.823706][ T6031] ? _raw_spin_unlock+0x28/0x50 [ 302.823721][ T6031] ? gfs2_jdesc_find+0xab/0xc0 [ 302.823735][ T6031] init_journal+0x16d9/0x22b0 [ 302.823752][ T6031] ? init_inodes+0xdb/0x320 [ 302.823763][ T6031] ? __pfx_init_journal+0x10/0x10 [ 302.823774][ T6031] ? vsnprintf+0xdf1/0xee0 [ 302.823798][ T6031] ? snprintf+0xe8/0x140 [ 302.823810][ T6031] ? init_inodes+0xdb/0x320 [ 302.823821][ T6031] ? __pfx_snprintf+0x10/0x10 [ 302.823832][ T6031] ? gfs2_glock_nq_num+0x13d/0x170 [ 302.823845][ T6031] init_inodes+0xdb/0x320 [ 302.823859][ T6031] gfs2_fill_super+0x1a38/0x21d0 [ 302.823875][ T6031] ? __pfx_gfs2_fill_super+0x10/0x10 [ 302.823888][ T6031] ? init_locking+0xb8/0x210 [ 302.823897][ T6031] ? sb_set_blocksize+0x155/0x240 [ 302.823911][ T6031] ? setup_bdev_super+0x4c1/0x5b0 [ 302.823925][ T6031] get_tree_bdev_flags+0x431/0x4f0 [ 302.823936][ T6031] ? __pfx_gfs2_fill_super+0x10/0x10 [ 302.823947][ T6031] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 302.823957][ T6031] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 302.823981][ T6031] gfs2_get_tree+0x51/0x1e0 [ 302.823995][ T6031] vfs_get_tree+0x92/0x2a0 [ 302.824008][ T6031] do_new_mount+0x341/0xd30 [ 302.824023][ T6031] ? apparmor_capable+0x126/0x170 [ 302.824039][ T6031] ? __pfx_do_new_mount+0x10/0x10 [ 302.824052][ T6031] ? ns_capable+0x89/0xe0 [ 302.824075][ T6031] ? user_path_at+0xd4/0x160 [ 302.824094][ T6031] __se_sys_mount+0x31d/0x420 [ 302.824112][ T6031] ? __pfx___se_sys_mount+0x10/0x10 [ 302.824130][ T6031] ? __x64_sys_mount+0x20/0xc0 [ 302.824147][ T6031] do_syscall_64+0x14d/0xf80 [ 302.824162][ T6031] ? trace_irq_disable+0x3b/0x150 [ 302.824174][ T6031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.824185][ T6031] ? clear_bhb_loop+0x40/0x90 [ 302.824200][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.824211][ T6031] RIP: 0033:0x7f69b919b30a [ 302.824225][ T6031] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.824235][ T6031] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 302.824250][ T6031] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 302.824257][ T6031] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 302.824264][ T6031] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 302.824272][ T6031] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 302.824278][ T6031] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 302.824297][ T6031] [ 302.824302][ T6031] gfs2: fsid=..s: Error checking journal for spectator mount. [ 303.105358][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.109409][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.132688][ T1056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.136473][ T1056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.154015][ T5726] veth1_macvtap: entered promiscuous mode [ 303.187813][ T5723] veth0_macvtap: entered promiscuous mode 2026/04/07 09:59:58 executed programs: 29 [ 303.464833][ T6036] loop0: detected capacity change from 0 to 32768 [ 303.529350][ T6036] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 303.532586][ T6036] gfs2: fsid=.: Now mounting FS (format 1801)... [ 303.539818][ T6036] syz.0.38: attempt to access beyond end of device [ 303.539818][ T6036] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 303.549045][ T6036] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 303.555117][ T6036] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:4 [ 303.558923][ T6036] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6036 [syz.0.38] init_journal+0x16d9/0x22b0 [ 303.563133][ T6036] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 303.566927][ T6036] CPU: 0 UID: 0 PID: 6036 Comm: syz.0.38 Not tainted syzkaller #0 PREEMPT(full) [ 303.566951][ T6036] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 303.566959][ T6036] Call Trace: [ 303.566971][ T6036] [ 303.566979][ T6036] dump_stack_lvl+0xe8/0x150 [ 303.567012][ T6036] gfs2_withdraw+0xc3/0x1b0 [ 303.567028][ T6036] gfs2_jdesc_check+0x17d/0x2f0 [ 303.567045][ T6036] check_journal_clean+0x18d/0x360 [ 303.567058][ T6036] ? __pfx_check_journal_clean+0x10/0x10 [ 303.567071][ T6036] ? init_journal+0x16d9/0x22b0 [ 303.567087][ T6036] ? do_raw_spin_unlock+0x4d/0x210 [ 303.567103][ T6036] ? _raw_spin_unlock+0x28/0x50 [ 303.567117][ T6036] ? gfs2_jdesc_find+0xab/0xc0 [ 303.567129][ T6036] init_journal+0x16d9/0x22b0 [ 303.567147][ T6036] ? init_inodes+0xdb/0x320 [ 303.567160][ T6036] ? __pfx_init_journal+0x10/0x10 [ 303.567171][ T6036] ? vsnprintf+0xdf1/0xee0 [ 303.567195][ T6036] ? snprintf+0xe8/0x140 [ 303.567207][ T6036] ? init_inodes+0xdb/0x320 [ 303.567219][ T6036] ? __pfx_snprintf+0x10/0x10 [ 303.567231][ T6036] ? gfs2_glock_nq_num+0x13d/0x170 [ 303.567248][ T6036] init_inodes+0xdb/0x320 [ 303.567260][ T6036] gfs2_fill_super+0x1a38/0x21d0 [ 303.567280][ T6036] ? __pfx_gfs2_fill_super+0x10/0x10 [ 303.567294][ T6036] ? init_locking+0xb8/0x210 [ 303.567304][ T6036] ? sb_set_blocksize+0x155/0x240 [ 303.567319][ T6036] ? setup_bdev_super+0x4c1/0x5b0 [ 303.567335][ T6036] get_tree_bdev_flags+0x431/0x4f0 [ 303.567348][ T6036] ? __pfx_gfs2_fill_super+0x10/0x10 [ 303.567360][ T6036] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 303.567369][ T6036] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 303.567392][ T6036] gfs2_get_tree+0x51/0x1e0 [ 303.567406][ T6036] vfs_get_tree+0x92/0x2a0 [ 303.567419][ T6036] do_new_mount+0x341/0xd30 [ 303.567438][ T6036] ? apparmor_capable+0x126/0x170 [ 303.567454][ T6036] ? __pfx_do_new_mount+0x10/0x10 [ 303.567468][ T6036] ? ns_capable+0x89/0xe0 [ 303.567491][ T6036] ? user_path_at+0xd4/0x160 [ 303.567509][ T6036] __se_sys_mount+0x31d/0x420 [ 303.567557][ T6036] ? __pfx___se_sys_mount+0x10/0x10 [ 303.567579][ T6036] ? __x64_sys_mount+0x20/0xc0 [ 303.567595][ T6036] do_syscall_64+0x14d/0xf80 [ 303.567610][ T6036] ? trace_irq_disable+0x3b/0x150 [ 303.567622][ T6036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.567632][ T6036] ? clear_bhb_loop+0x40/0x90 [ 303.567641][ T6036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.567650][ T6036] RIP: 0033:0x7f69b919b30a [ 303.567662][ T6036] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.567670][ T6036] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 303.567680][ T6036] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 303.567686][ T6036] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 303.567690][ T6036] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 303.567695][ T6036] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 303.567700][ T6036] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 303.567710][ T6036] [ 303.567714][ T6036] gfs2: fsid=..s: Error checking journal for spectator mount. [ 303.867211][ T5723] veth1_macvtap: entered promiscuous mode [ 304.178251][ T6041] loop0: detected capacity change from 0 to 32768 [ 304.245906][ T6041] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 304.249450][ T6041] gfs2: fsid=.: Now mounting FS (format 1801)... [ 304.266681][ T6041] syz.0.39: attempt to access beyond end of device [ 304.266681][ T6041] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 304.274523][ T6041] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 304.280783][ T6041] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 304.285129][ T6041] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6041 [syz.0.39] init_journal+0x16d9/0x22b0 [ 304.291658][ T6041] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 304.295687][ T6041] CPU: 0 UID: 0 PID: 6041 Comm: syz.0.39 Not tainted syzkaller #0 PREEMPT(full) [ 304.295710][ T6041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 304.295717][ T6041] Call Trace: [ 304.295723][ T6041] [ 304.295728][ T6041] dump_stack_lvl+0xe8/0x150 [ 304.295752][ T6041] gfs2_withdraw+0xc3/0x1b0 [ 304.295767][ T6041] gfs2_jdesc_check+0x17d/0x2f0 [ 304.295784][ T6041] check_journal_clean+0x18d/0x360 [ 304.295798][ T6041] ? __pfx_check_journal_clean+0x10/0x10 [ 304.295811][ T6041] ? init_journal+0x16d9/0x22b0 [ 304.295827][ T6041] ? do_raw_spin_unlock+0x4d/0x210 [ 304.295842][ T6041] ? _raw_spin_unlock+0x28/0x50 [ 304.295873][ T6041] ? gfs2_jdesc_find+0xab/0xc0 [ 304.295888][ T6041] init_journal+0x16d9/0x22b0 [ 304.295906][ T6041] ? init_inodes+0xdb/0x320 [ 304.295919][ T6041] ? __pfx_init_journal+0x10/0x10 [ 304.295930][ T6041] ? vsnprintf+0xdf1/0xee0 [ 304.295953][ T6041] ? snprintf+0xe8/0x140 [ 304.295965][ T6041] ? init_inodes+0xdb/0x320 [ 304.295976][ T6041] ? __pfx_snprintf+0x10/0x10 [ 304.295987][ T6041] ? gfs2_glock_nq_num+0x13d/0x170 [ 304.296003][ T6041] init_inodes+0xdb/0x320 [ 304.296014][ T6041] gfs2_fill_super+0x1a38/0x21d0 [ 304.296033][ T6041] ? __pfx_gfs2_fill_super+0x10/0x10 [ 304.296045][ T6041] ? init_locking+0xb8/0x210 [ 304.296055][ T6041] ? sb_set_blocksize+0x155/0x240 [ 304.296068][ T6041] ? setup_bdev_super+0x4c1/0x5b0 [ 304.296082][ T6041] get_tree_bdev_flags+0x431/0x4f0 [ 304.296094][ T6041] ? __pfx_gfs2_fill_super+0x10/0x10 [ 304.296104][ T6041] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 304.296114][ T6041] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 304.296132][ T6041] gfs2_get_tree+0x51/0x1e0 [ 304.296140][ T6041] vfs_get_tree+0x92/0x2a0 [ 304.296148][ T6041] do_new_mount+0x341/0xd30 [ 304.296158][ T6041] ? apparmor_capable+0x126/0x170 [ 304.296167][ T6041] ? __pfx_do_new_mount+0x10/0x10 [ 304.296181][ T6041] ? ns_capable+0x89/0xe0 [ 304.296202][ T6041] ? user_path_at+0xd4/0x160 [ 304.296220][ T6041] __se_sys_mount+0x31d/0x420 [ 304.296238][ T6041] ? __pfx___se_sys_mount+0x10/0x10 [ 304.296256][ T6041] ? __x64_sys_mount+0x20/0xc0 [ 304.296266][ T6041] do_syscall_64+0x14d/0xf80 [ 304.296275][ T6041] ? trace_irq_disable+0x3b/0x150 [ 304.296282][ T6041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.296290][ T6041] ? clear_bhb_loop+0x40/0x90 [ 304.296299][ T6041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.296306][ T6041] RIP: 0033:0x7f69b919b30a [ 304.296315][ T6041] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.296327][ T6041] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 304.296336][ T6041] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 304.296341][ T6041] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 304.296346][ T6041] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 304.296351][ T6041] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 304.296355][ T6041] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 304.296366][ T6041] [ 304.296369][ T6041] gfs2: fsid=..s: Error checking journal for spectator mount. [ 304.496227][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.583668][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.021763][ T5737] veth0_vlan: entered promiscuous mode [ 305.726629][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.779034][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.831585][ T1088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.096213][ T6054] loop0: detected capacity change from 0 to 32768 [ 306.447352][ T1088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 2026/04/07 10:00:03 executed programs: 36 [ 309.047508][ T6054] workqueue: Failed to create a rescuer kthread for wq "gfs2-glock/.": -EINTR [ 309.140224][ T1088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.495818][ T1088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.556959][ T5737] veth1_vlan: entered promiscuous mode [ 310.326136][ T1088] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.349122][ T1088] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.607513][ T6075] loop0: detected capacity change from 0 to 32768 [ 310.860636][ T6075] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 310.863969][ T6075] gfs2: fsid=.: Now mounting FS (format 1801)... [ 310.871018][ T6075] syz.0.50: attempt to access beyond end of device [ 310.871018][ T6075] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 310.880826][ T6075] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 310.886838][ T6075] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:4 [ 310.890448][ T6075] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6075 [syz.0.50] init_journal+0x16d9/0x22b0 [ 310.894531][ T6075] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 310.898635][ T6075] CPU: 0 UID: 0 PID: 6075 Comm: syz.0.50 Not tainted syzkaller #0 PREEMPT(full) [ 310.898663][ T6075] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 310.898674][ T6075] Call Trace: [ 310.898686][ T6075] [ 310.898694][ T6075] dump_stack_lvl+0xe8/0x150 [ 310.898726][ T6075] gfs2_withdraw+0xc3/0x1b0 [ 310.898748][ T6075] gfs2_jdesc_check+0x17d/0x2f0 [ 310.898771][ T6075] check_journal_clean+0x18d/0x360 [ 310.898791][ T6075] ? __pfx_check_journal_clean+0x10/0x10 [ 310.898810][ T6075] ? init_journal+0x16d9/0x22b0 [ 310.898831][ T6075] ? do_raw_spin_unlock+0x4d/0x210 [ 310.898853][ T6075] ? _raw_spin_unlock+0x28/0x50 [ 310.898886][ T6075] ? gfs2_jdesc_find+0xab/0xc0 [ 310.898906][ T6075] init_journal+0x16d9/0x22b0 [ 310.898935][ T6075] ? init_inodes+0xdb/0x320 [ 310.898955][ T6075] ? __pfx_init_journal+0x10/0x10 [ 310.898971][ T6075] ? vsnprintf+0xdf1/0xee0 [ 310.899006][ T6075] ? snprintf+0xe8/0x140 [ 310.899035][ T6075] ? init_inodes+0xdb/0x320 [ 310.899050][ T6075] ? __pfx_snprintf+0x10/0x10 [ 310.899065][ T6075] ? gfs2_glock_nq_num+0x13d/0x170 [ 310.899087][ T6075] init_inodes+0xdb/0x320 [ 310.899105][ T6075] gfs2_fill_super+0x1a38/0x21d0 [ 310.899138][ T6075] ? __pfx_gfs2_fill_super+0x10/0x10 [ 310.899158][ T6075] ? init_locking+0xb8/0x210 [ 310.899172][ T6075] ? sb_set_blocksize+0x155/0x240 [ 310.899191][ T6075] ? setup_bdev_super+0x4c1/0x5b0 [ 310.899213][ T6075] get_tree_bdev_flags+0x431/0x4f0 [ 310.899233][ T6075] ? __pfx_gfs2_fill_super+0x10/0x10 [ 310.899248][ T6075] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 310.899263][ T6075] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 310.899297][ T6075] gfs2_get_tree+0x51/0x1e0 [ 310.899316][ T6075] vfs_get_tree+0x92/0x2a0 [ 310.899334][ T6075] do_new_mount+0x341/0xd30 [ 310.899356][ T6075] ? apparmor_capable+0x126/0x170 [ 310.899381][ T6075] ? __pfx_do_new_mount+0x10/0x10 [ 310.899447][ T6075] ? ns_capable+0x89/0xe0 [ 310.899482][ T6075] ? user_path_at+0xd4/0x160 [ 310.899513][ T6075] __se_sys_mount+0x31d/0x420 [ 310.899543][ T6075] ? __pfx___se_sys_mount+0x10/0x10 [ 310.899573][ T6075] ? __x64_sys_mount+0x20/0xc0 [ 310.899597][ T6075] do_syscall_64+0x14d/0xf80 [ 310.899620][ T6075] ? trace_irq_disable+0x3b/0x150 [ 310.899635][ T6075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.899654][ T6075] ? clear_bhb_loop+0x40/0x90 [ 310.899676][ T6075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.899692][ T6075] RIP: 0033:0x7f69b919b30a [ 310.899712][ T6075] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.899727][ T6075] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 310.899748][ T6075] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 310.899759][ T6075] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 310.899769][ T6075] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 310.899779][ T6075] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 310.899790][ T6075] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 310.899817][ T6075] [ 310.899827][ T6075] gfs2: fsid=..s: Error checking journal for spectator mount. [ 311.290713][ T1088] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.315734][ T1088] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.719280][ T6086] loop0: detected capacity change from 0 to 32768 [ 312.774535][ T5737] veth0_macvtap: entered promiscuous mode [ 312.793570][ T6086] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 312.796762][ T6086] gfs2: fsid=.: Now mounting FS (format 1801)... [ 312.820967][ T1056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.847100][ T6086] syz.0.52: attempt to access beyond end of device [ 312.847100][ T6086] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 312.854145][ T6086] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 312.859983][ T6086] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 312.865217][ T6086] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6086 [syz.0.52] init_journal+0x16d9/0x22b0 [ 312.869326][ T6086] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 312.872947][ T6086] CPU: 0 UID: 0 PID: 6086 Comm: syz.0.52 Not tainted syzkaller #0 PREEMPT(full) [ 312.872964][ T6086] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 312.872971][ T6086] Call Trace: [ 312.872981][ T6086] [ 312.872987][ T6086] dump_stack_lvl+0xe8/0x150 [ 312.873009][ T6086] gfs2_withdraw+0xc3/0x1b0 [ 312.873022][ T6086] gfs2_jdesc_check+0x17d/0x2f0 [ 312.873041][ T6086] check_journal_clean+0x18d/0x360 [ 312.873053][ T6086] ? __pfx_check_journal_clean+0x10/0x10 [ 312.873066][ T6086] ? init_journal+0x16d9/0x22b0 [ 312.873081][ T6086] ? do_raw_spin_unlock+0x4d/0x210 [ 312.873095][ T6086] ? _raw_spin_unlock+0x28/0x50 [ 312.873108][ T6086] ? gfs2_jdesc_find+0xab/0xc0 [ 312.873122][ T6086] init_journal+0x16d9/0x22b0 [ 312.873142][ T6086] ? init_inodes+0xdb/0x320 [ 312.873155][ T6086] ? __pfx_init_journal+0x10/0x10 [ 312.873166][ T6086] ? vsnprintf+0xdf1/0xee0 [ 312.873188][ T6086] ? snprintf+0xe8/0x140 [ 312.873200][ T6086] ? init_inodes+0xdb/0x320 [ 312.873211][ T6086] ? __pfx_snprintf+0x10/0x10 [ 312.873223][ T6086] ? gfs2_glock_nq_num+0x13d/0x170 [ 312.873238][ T6086] init_inodes+0xdb/0x320 [ 312.873252][ T6086] gfs2_fill_super+0x1a38/0x21d0 [ 312.873265][ T6086] ? __pfx_gfs2_fill_super+0x10/0x10 [ 312.873276][ T6086] ? init_locking+0xb8/0x210 [ 312.873286][ T6086] ? sb_set_blocksize+0x155/0x240 [ 312.873299][ T6086] ? setup_bdev_super+0x4c1/0x5b0 [ 312.873312][ T6086] get_tree_bdev_flags+0x431/0x4f0 [ 312.873323][ T6086] ? __pfx_gfs2_fill_super+0x10/0x10 [ 312.873335][ T6086] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 312.873345][ T6086] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 312.873370][ T6086] gfs2_get_tree+0x51/0x1e0 [ 312.873383][ T6086] vfs_get_tree+0x92/0x2a0 [ 312.873394][ T6086] do_new_mount+0x341/0xd30 [ 312.873409][ T6086] ? apparmor_capable+0x126/0x170 [ 312.873424][ T6086] ? __pfx_do_new_mount+0x10/0x10 [ 312.873439][ T6086] ? ns_capable+0x89/0xe0 [ 312.873459][ T6086] ? user_path_at+0xd4/0x160 [ 312.873478][ T6086] __se_sys_mount+0x31d/0x420 [ 312.873497][ T6086] ? __pfx___se_sys_mount+0x10/0x10 [ 312.873515][ T6086] ? __x64_sys_mount+0x20/0xc0 [ 312.873531][ T6086] do_syscall_64+0x14d/0xf80 [ 312.873545][ T6086] ? trace_irq_disable+0x3b/0x150 [ 312.873555][ T6086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.873567][ T6086] ? clear_bhb_loop+0x40/0x90 [ 312.873577][ T6086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.873585][ T6086] RIP: 0033:0x7f69b919b30a [ 312.873595][ T6086] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.873601][ T6086] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 312.873611][ T6086] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 312.873619][ T6086] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 312.873627][ T6086] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 312.873633][ T6086] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 312.873640][ T6086] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 312.873658][ T6086] [ 312.873663][ T6086] gfs2: fsid=..s: Error checking journal for spectator mount. [ 313.088442][ T1056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.130551][ T5737] veth1_macvtap: entered promiscuous mode 2026/04/07 10:00:09 executed programs: 42 [ 314.916416][ T1056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.920046][ T1056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.047339][ T3049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.051491][ T3049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.661620][ T6108] loop0: detected capacity change from 0 to 32768 [ 317.032154][ T6108] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 317.037569][ T6108] gfs2: fsid=.: Now mounting FS (format 1801)... [ 317.047734][ T6108] syz.0.62: attempt to access beyond end of device [ 317.047734][ T6108] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 317.055668][ T6108] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 317.062149][ T6108] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:4 [ 317.066245][ T6108] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6108 [syz.0.62] init_journal+0x16d9/0x22b0 [ 317.071158][ T6108] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 317.075411][ T6108] CPU: 0 UID: 0 PID: 6108 Comm: syz.0.62 Not tainted syzkaller #0 PREEMPT(full) [ 317.075433][ T6108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 317.075440][ T6108] Call Trace: [ 317.075450][ T6108] [ 317.075458][ T6108] dump_stack_lvl+0xe8/0x150 [ 317.075483][ T6108] gfs2_withdraw+0xc3/0x1b0 [ 317.075499][ T6108] gfs2_jdesc_check+0x17d/0x2f0 [ 317.075516][ T6108] check_journal_clean+0x18d/0x360 [ 317.075530][ T6108] ? __pfx_check_journal_clean+0x10/0x10 [ 317.075543][ T6108] ? init_journal+0x16d9/0x22b0 [ 317.075558][ T6108] ? do_raw_spin_unlock+0x4d/0x210 [ 317.075573][ T6108] ? _raw_spin_unlock+0x28/0x50 [ 317.075649][ T6108] ? gfs2_jdesc_find+0xab/0xc0 [ 317.075663][ T6108] init_journal+0x16d9/0x22b0 [ 317.075682][ T6108] ? init_inodes+0xdb/0x320 [ 317.075694][ T6108] ? __pfx_init_journal+0x10/0x10 [ 317.075705][ T6108] ? vsnprintf+0xdf1/0xee0 [ 317.075728][ T6108] ? snprintf+0xe8/0x140 [ 317.075743][ T6108] ? init_inodes+0xdb/0x320 [ 317.075754][ T6108] ? __pfx_snprintf+0x10/0x10 [ 317.075765][ T6108] ? gfs2_glock_nq_num+0x13d/0x170 [ 317.075780][ T6108] init_inodes+0xdb/0x320 [ 317.075793][ T6108] gfs2_fill_super+0x1a38/0x21d0 [ 317.075812][ T6108] ? __pfx_gfs2_fill_super+0x10/0x10 [ 317.075825][ T6108] ? init_locking+0xb8/0x210 [ 317.075835][ T6108] ? sb_set_blocksize+0x155/0x240 [ 317.075850][ T6108] ? setup_bdev_super+0x4c1/0x5b0 [ 317.075864][ T6108] get_tree_bdev_flags+0x431/0x4f0 [ 317.075876][ T6108] ? __pfx_gfs2_fill_super+0x10/0x10 [ 317.075887][ T6108] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 317.075897][ T6108] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 317.075922][ T6108] gfs2_get_tree+0x51/0x1e0 [ 317.075936][ T6108] vfs_get_tree+0x92/0x2a0 [ 317.075965][ T6108] do_new_mount+0x341/0xd30 [ 317.075982][ T6108] ? apparmor_capable+0x126/0x170 [ 317.075998][ T6108] ? __pfx_do_new_mount+0x10/0x10 [ 317.076013][ T6108] ? ns_capable+0x89/0xe0 [ 317.076035][ T6108] ? user_path_at+0xd4/0x160 [ 317.076054][ T6108] __se_sys_mount+0x31d/0x420 [ 317.076072][ T6108] ? __pfx___se_sys_mount+0x10/0x10 [ 317.076090][ T6108] ? __x64_sys_mount+0x20/0xc0 [ 317.076105][ T6108] do_syscall_64+0x14d/0xf80 [ 317.076121][ T6108] ? trace_irq_disable+0x3b/0x150 [ 317.076131][ T6108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.076143][ T6108] ? clear_bhb_loop+0x40/0x90 [ 317.076156][ T6108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.076169][ T6108] RIP: 0033:0x7f69b919b30a [ 317.076184][ T6108] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.076193][ T6108] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 317.076208][ T6108] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 317.076215][ T6108] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 317.076222][ T6108] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 317.076229][ T6108] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 317.076235][ T6108] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 317.076252][ T6108] [ 317.076258][ T6108] gfs2: fsid=..s: Error checking journal for spectator mount. [ 317.328575][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.496326][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.623150][ T158] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.654432][ T158] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.659156][ T158] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.714472][ T158] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.011169][ T1041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.295234][ T6119] loop0: detected capacity change from 0 to 32768 [ 318.329789][ T1041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.360345][ T6119] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 318.363846][ T6119] gfs2: fsid=.: Now mounting FS (format 1801)... [ 318.381651][ T6119] syz.0.65: attempt to access beyond end of device [ 318.381651][ T6119] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 318.389287][ T6119] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 318.396150][ T6119] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:4 [ 318.400207][ T6119] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6119 [syz.0.65] init_journal+0x16d9/0x22b0 [ 318.404657][ T6119] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 318.409229][ T6119] CPU: 0 UID: 0 PID: 6119 Comm: syz.0.65 Not tainted syzkaller #0 PREEMPT(full) [ 318.409255][ T6119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 318.409265][ T6119] Call Trace: [ 318.409275][ T6119] [ 318.409283][ T6119] dump_stack_lvl+0xe8/0x150 [ 318.409310][ T6119] gfs2_withdraw+0xc3/0x1b0 [ 318.409329][ T6119] gfs2_jdesc_check+0x17d/0x2f0 [ 318.409352][ T6119] check_journal_clean+0x18d/0x360 [ 318.409370][ T6119] ? __pfx_check_journal_clean+0x10/0x10 [ 318.409386][ T6119] ? init_journal+0x16d9/0x22b0 [ 318.409407][ T6119] ? do_raw_spin_unlock+0x4d/0x210 [ 318.409426][ T6119] ? _raw_spin_unlock+0x28/0x50 [ 318.409442][ T6119] ? gfs2_jdesc_find+0xab/0xc0 [ 318.409460][ T6119] init_journal+0x16d9/0x22b0 [ 318.409482][ T6119] ? init_inodes+0xdb/0x320 [ 318.409500][ T6119] ? __pfx_init_journal+0x10/0x10 [ 318.409514][ T6119] ? vsnprintf+0xdf1/0xee0 [ 318.409544][ T6119] ? snprintf+0xe8/0x140 [ 318.409559][ T6119] ? init_inodes+0xdb/0x320 [ 318.409572][ T6119] ? __pfx_snprintf+0x10/0x10 [ 318.409596][ T6119] ? gfs2_glock_nq_num+0x13d/0x170 [ 318.409615][ T6119] init_inodes+0xdb/0x320 [ 318.409631][ T6119] gfs2_fill_super+0x1a38/0x21d0 [ 318.409657][ T6119] ? __pfx_gfs2_fill_super+0x10/0x10 [ 318.409674][ T6119] ? init_locking+0xb8/0x210 [ 318.409686][ T6119] ? sb_set_blocksize+0x155/0x240 [ 318.409704][ T6119] ? setup_bdev_super+0x4c1/0x5b0 [ 318.409721][ T6119] get_tree_bdev_flags+0x431/0x4f0 [ 318.409737][ T6119] ? __pfx_gfs2_fill_super+0x10/0x10 [ 318.409752][ T6119] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 318.409765][ T6119] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 318.409795][ T6119] gfs2_get_tree+0x51/0x1e0 [ 318.409812][ T6119] vfs_get_tree+0x92/0x2a0 [ 318.409829][ T6119] do_new_mount+0x341/0xd30 [ 318.409847][ T6119] ? apparmor_capable+0x126/0x170 [ 318.409867][ T6119] ? __pfx_do_new_mount+0x10/0x10 [ 318.409885][ T6119] ? ns_capable+0x89/0xe0 [ 318.409912][ T6119] ? user_path_at+0xd4/0x160 [ 318.409934][ T6119] __se_sys_mount+0x31d/0x420 [ 318.409957][ T6119] ? __pfx___se_sys_mount+0x10/0x10 [ 318.409981][ T6119] ? __x64_sys_mount+0x20/0xc0 [ 318.410000][ T6119] do_syscall_64+0x14d/0xf80 [ 318.410018][ T6119] ? trace_irq_disable+0x3b/0x150 [ 318.410031][ T6119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.410047][ T6119] ? clear_bhb_loop+0x40/0x90 [ 318.410066][ T6119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.410081][ T6119] RIP: 0033:0x7f69b919b30a [ 318.410098][ T6119] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.410109][ T6119] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 318.410126][ T6119] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 318.410137][ T6119] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 318.410146][ T6119] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 318.410155][ T6119] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 318.410164][ T6119] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 318.410187][ T6119] [ 318.410193][ T6119] gfs2: fsid=..s: Error checking journal for spectator mount. [ 318.766660][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.770547][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/07 10:00:15 executed programs: 55 [ 320.504792][ T6132] loop0: detected capacity change from 0 to 32768 [ 320.529469][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.576943][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.500899][ T6132] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 321.504181][ T6132] gfs2: fsid=.: Now mounting FS (format 1801)... [ 321.520887][ T6132] syz.0.68: attempt to access beyond end of device [ 321.520887][ T6132] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 321.528141][ T6132] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 321.534999][ T6132] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:4 [ 321.539124][ T6132] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6132 [syz.0.68] init_journal+0x16d9/0x22b0 [ 321.543768][ T6132] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 321.547410][ T6132] CPU: 0 UID: 0 PID: 6132 Comm: syz.0.68 Not tainted syzkaller #0 PREEMPT(full) [ 321.547433][ T6132] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 321.547440][ T6132] Call Trace: [ 321.547479][ T6132] [ 321.547487][ T6132] dump_stack_lvl+0xe8/0x150 [ 321.547509][ T6132] gfs2_withdraw+0xc3/0x1b0 [ 321.547523][ T6132] gfs2_jdesc_check+0x17d/0x2f0 [ 321.547540][ T6132] check_journal_clean+0x18d/0x360 [ 321.547554][ T6132] ? __pfx_check_journal_clean+0x10/0x10 [ 321.547566][ T6132] ? init_journal+0x16d9/0x22b0 [ 321.547583][ T6132] ? do_raw_spin_unlock+0x4d/0x210 [ 321.547596][ T6132] ? _raw_spin_unlock+0x28/0x50 [ 321.547622][ T6132] ? gfs2_jdesc_find+0xab/0xc0 [ 321.547635][ T6132] init_journal+0x16d9/0x22b0 [ 321.547652][ T6132] ? init_inodes+0xdb/0x320 [ 321.547666][ T6132] ? __pfx_init_journal+0x10/0x10 [ 321.547677][ T6132] ? vsnprintf+0xdf1/0xee0 [ 321.547700][ T6132] ? snprintf+0xe8/0x140 [ 321.547711][ T6132] ? init_inodes+0xdb/0x320 [ 321.547719][ T6132] ? __pfx_snprintf+0x10/0x10 [ 321.547726][ T6132] ? gfs2_glock_nq_num+0x13d/0x170 [ 321.547736][ T6132] init_inodes+0xdb/0x320 [ 321.547744][ T6132] gfs2_fill_super+0x1a38/0x21d0 [ 321.547760][ T6132] ? __pfx_gfs2_fill_super+0x10/0x10 [ 321.547772][ T6132] ? init_locking+0xb8/0x210 [ 321.547782][ T6132] ? sb_set_blocksize+0x155/0x240 [ 321.547796][ T6132] ? setup_bdev_super+0x4c1/0x5b0 [ 321.547810][ T6132] get_tree_bdev_flags+0x431/0x4f0 [ 321.547822][ T6132] ? __pfx_gfs2_fill_super+0x10/0x10 [ 321.547833][ T6132] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 321.547843][ T6132] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 321.547862][ T6132] gfs2_get_tree+0x51/0x1e0 [ 321.547871][ T6132] vfs_get_tree+0x92/0x2a0 [ 321.547879][ T6132] do_new_mount+0x341/0xd30 [ 321.547890][ T6132] ? apparmor_capable+0x126/0x170 [ 321.547900][ T6132] ? __pfx_do_new_mount+0x10/0x10 [ 321.547909][ T6132] ? ns_capable+0x89/0xe0 [ 321.547922][ T6132] ? user_path_at+0xd4/0x160 [ 321.547934][ T6132] __se_sys_mount+0x31d/0x420 [ 321.547946][ T6132] ? __pfx___se_sys_mount+0x10/0x10 [ 321.547958][ T6132] ? __x64_sys_mount+0x20/0xc0 [ 321.547968][ T6132] do_syscall_64+0x14d/0xf80 [ 321.547978][ T6132] ? trace_irq_disable+0x3b/0x150 [ 321.547988][ T6132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.547999][ T6132] ? clear_bhb_loop+0x40/0x90 [ 321.548013][ T6132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.548026][ T6132] RIP: 0033:0x7f69b919b30a [ 321.548039][ T6132] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.548048][ T6132] RSP: 002b:00007f69b9f96e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 321.548063][ T6132] RAX: ffffffffffffffda RBX: 00007f69b9f96ee0 RCX: 00007f69b919b30a [ 321.548071][ T6132] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9f96ea0 [ 321.548078][ T6132] RBP: 0000200000000000 R08: 00007f69b9f96ee0 R09: 0000000000208c1b [ 321.548085][ T6132] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 321.548092][ T6132] R13: 00007f69b9f96ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 321.548107][ T6132] [ 321.548111][ T6132] gfs2: fsid=..s: Error checking journal for spectator mount. [ 323.432157][ T6147] loop0: detected capacity change from 0 to 32768 [ 324.548487][ T6147] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 324.552184][ T6147] gfs2: fsid=.: Now mounting FS (format 1801)... [ 324.562534][ T6147] syz.0.72: attempt to access beyond end of device [ 324.562534][ T6147] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 324.573598][ T6147] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 324.579558][ T6147] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 324.583621][ T6147] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6147 [syz.0.72] init_journal+0x16d9/0x22b0 [ 324.588033][ T6147] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 324.592012][ T6147] CPU: 0 UID: 0 PID: 6147 Comm: syz.0.72 Not tainted syzkaller #0 PREEMPT(full) [ 324.592033][ T6147] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 324.592042][ T6147] Call Trace: [ 324.592051][ T6147] [ 324.592058][ T6147] dump_stack_lvl+0xe8/0x150 [ 324.592083][ T6147] gfs2_withdraw+0xc3/0x1b0 [ 324.592099][ T6147] gfs2_jdesc_check+0x17d/0x2f0 [ 324.592118][ T6147] check_journal_clean+0x18d/0x360 [ 324.592133][ T6147] ? __pfx_check_journal_clean+0x10/0x10 [ 324.592149][ T6147] ? init_journal+0x16d9/0x22b0 [ 324.592169][ T6147] ? do_raw_spin_unlock+0x4d/0x210 [ 324.592187][ T6147] ? _raw_spin_unlock+0x28/0x50 [ 324.592212][ T6147] ? gfs2_jdesc_find+0xab/0xc0 [ 324.592228][ T6147] init_journal+0x16d9/0x22b0 [ 324.592250][ T6147] ? init_inodes+0xdb/0x320 [ 324.592266][ T6147] ? __pfx_init_journal+0x10/0x10 [ 324.592279][ T6147] ? vsnprintf+0xdf1/0xee0 [ 324.592300][ T6147] ? snprintf+0xe8/0x140 [ 324.592313][ T6147] ? init_inodes+0xdb/0x320 [ 324.592326][ T6147] ? __pfx_snprintf+0x10/0x10 [ 324.592339][ T6147] ? gfs2_glock_nq_num+0x13d/0x170 [ 324.592357][ T6147] init_inodes+0xdb/0x320 [ 324.592397][ T6147] gfs2_fill_super+0x1a38/0x21d0 [ 324.592422][ T6147] ? __pfx_gfs2_fill_super+0x10/0x10 [ 324.592438][ T6147] ? init_locking+0xb8/0x210 [ 324.592449][ T6147] ? sb_set_blocksize+0x155/0x240 [ 324.592465][ T6147] ? setup_bdev_super+0x4c1/0x5b0 [ 324.592482][ T6147] get_tree_bdev_flags+0x431/0x4f0 [ 324.592495][ T6147] ? __pfx_gfs2_fill_super+0x10/0x10 [ 324.592507][ T6147] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 324.592519][ T6147] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 324.592547][ T6147] gfs2_get_tree+0x51/0x1e0 [ 324.592563][ T6147] vfs_get_tree+0x92/0x2a0 [ 324.592578][ T6147] do_new_mount+0x341/0xd30 [ 324.592594][ T6147] ? apparmor_capable+0x126/0x170 [ 324.592612][ T6147] ? __pfx_do_new_mount+0x10/0x10 [ 324.592628][ T6147] ? ns_capable+0x89/0xe0 [ 324.592653][ T6147] ? user_path_at+0xd4/0x160 [ 324.592674][ T6147] __se_sys_mount+0x31d/0x420 [ 324.592696][ T6147] ? __pfx___se_sys_mount+0x10/0x10 [ 324.592717][ T6147] ? __x64_sys_mount+0x20/0xc0 [ 324.592736][ T6147] do_syscall_64+0x14d/0xf80 [ 324.592759][ T6147] ? trace_irq_disable+0x3b/0x150 [ 324.592771][ T6147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.592784][ T6147] ? clear_bhb_loop+0x40/0x90 [ 324.592800][ T6147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.592813][ T6147] RIP: 0033:0x7f69b919b30a [ 324.592829][ T6147] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.592840][ T6147] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 324.592855][ T6147] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 324.592865][ T6147] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 324.592873][ T6147] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 324.592882][ T6147] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 324.592889][ T6147] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 324.592910][ T6147] [ 324.751757][ T6147] gfs2: fsid=..s: Error checking journal for spectator mount. 2026/04/07 10:00:21 executed programs: 59 [ 326.490601][ T6159] loop0: detected capacity change from 0 to 32768 [ 326.685295][ T6159] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 326.689218][ T6159] gfs2: fsid=.: Now mounting FS (format 1801)... [ 326.698079][ T6159] syz.0.75: attempt to access beyond end of device [ 326.698079][ T6159] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 326.706353][ T6159] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 326.714017][ T6159] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 326.721187][ T6159] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6159 [syz.0.75] init_journal+0x16d9/0x22b0 [ 326.726591][ T6159] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 326.729916][ T6159] CPU: 0 UID: 0 PID: 6159 Comm: syz.0.75 Not tainted syzkaller #0 PREEMPT(full) [ 326.729936][ T6159] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 326.729942][ T6159] Call Trace: [ 326.729948][ T6159] [ 326.729953][ T6159] dump_stack_lvl+0xe8/0x150 [ 326.729973][ T6159] gfs2_withdraw+0xc3/0x1b0 [ 326.729988][ T6159] gfs2_jdesc_check+0x17d/0x2f0 [ 326.730006][ T6159] check_journal_clean+0x18d/0x360 [ 326.730019][ T6159] ? __pfx_check_journal_clean+0x10/0x10 [ 326.730032][ T6159] ? init_journal+0x16d9/0x22b0 [ 326.730048][ T6159] ? do_raw_spin_unlock+0x4d/0x210 [ 326.730057][ T6159] ? _raw_spin_unlock+0x28/0x50 [ 326.730066][ T6159] ? gfs2_jdesc_find+0xab/0xc0 [ 326.730075][ T6159] init_journal+0x16d9/0x22b0 [ 326.730086][ T6159] ? init_inodes+0xdb/0x320 [ 326.730094][ T6159] ? __pfx_init_journal+0x10/0x10 [ 326.730104][ T6159] ? vsnprintf+0xdf1/0xee0 [ 326.730126][ T6159] ? snprintf+0xe8/0x140 [ 326.730138][ T6159] ? init_inodes+0xdb/0x320 [ 326.730149][ T6159] ? __pfx_snprintf+0x10/0x10 [ 326.730159][ T6159] ? gfs2_glock_nq_num+0x13d/0x170 [ 326.730174][ T6159] init_inodes+0xdb/0x320 [ 326.730186][ T6159] gfs2_fill_super+0x1a38/0x21d0 [ 326.730207][ T6159] ? __pfx_gfs2_fill_super+0x10/0x10 [ 326.730220][ T6159] ? init_locking+0xb8/0x210 [ 326.730230][ T6159] ? sb_set_blocksize+0x155/0x240 [ 326.730243][ T6159] ? setup_bdev_super+0x4c1/0x5b0 [ 326.730256][ T6159] get_tree_bdev_flags+0x431/0x4f0 [ 326.730264][ T6159] ? __pfx_gfs2_fill_super+0x10/0x10 [ 326.730271][ T6159] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 326.730277][ T6159] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 326.730298][ T6159] gfs2_get_tree+0x51/0x1e0 [ 326.730311][ T6159] vfs_get_tree+0x92/0x2a0 [ 326.730323][ T6159] do_new_mount+0x341/0xd30 [ 326.730337][ T6159] ? apparmor_capable+0x126/0x170 [ 326.730352][ T6159] ? __pfx_do_new_mount+0x10/0x10 [ 326.730365][ T6159] ? ns_capable+0x89/0xe0 [ 326.730386][ T6159] ? user_path_at+0xd4/0x160 [ 326.730405][ T6159] __se_sys_mount+0x31d/0x420 [ 326.730423][ T6159] ? __pfx___se_sys_mount+0x10/0x10 [ 326.730437][ T6159] ? __x64_sys_mount+0x20/0xc0 [ 326.730447][ T6159] do_syscall_64+0x14d/0xf80 [ 326.730457][ T6159] ? trace_irq_disable+0x3b/0x150 [ 326.730463][ T6159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.730471][ T6159] ? clear_bhb_loop+0x40/0x90 [ 326.730480][ T6159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.730488][ T6159] RIP: 0033:0x7f69b919b30a [ 326.730497][ T6159] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.730510][ T6159] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 326.730522][ T6159] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 326.730529][ T6159] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 326.730536][ T6159] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 326.730542][ T6159] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 326.730549][ T6159] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 326.730566][ T6159] [ 326.730572][ T6159] gfs2: fsid=..s: Error checking journal for spectator mount. [ 328.040744][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.048818][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.883147][ T6175] loop0: detected capacity change from 0 to 32768 [ 328.951195][ T6175] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 328.957584][ T6175] gfs2: fsid=.: Now mounting FS (format 1801)... [ 328.976183][ T6175] syz.0.80: attempt to access beyond end of device [ 328.976183][ T6175] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 328.984685][ T6175] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 328.990382][ T6175] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:4 [ 328.994669][ T6175] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6175 [syz.0.80] init_journal+0x16d9/0x22b0 [ 328.999101][ T6175] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 329.003524][ T6175] CPU: 0 UID: 0 PID: 6175 Comm: syz.0.80 Not tainted syzkaller #0 PREEMPT(full) [ 329.003547][ T6175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 329.003555][ T6175] Call Trace: [ 329.003562][ T6175] [ 329.003569][ T6175] dump_stack_lvl+0xe8/0x150 [ 329.003591][ T6175] gfs2_withdraw+0xc3/0x1b0 [ 329.003609][ T6175] gfs2_jdesc_check+0x17d/0x2f0 [ 329.003629][ T6175] check_journal_clean+0x18d/0x360 [ 329.003643][ T6175] ? __pfx_check_journal_clean+0x10/0x10 [ 329.003658][ T6175] ? init_journal+0x16d9/0x22b0 [ 329.003675][ T6175] ? do_raw_spin_unlock+0x4d/0x210 [ 329.003691][ T6175] ? _raw_spin_unlock+0x28/0x50 [ 329.003706][ T6175] ? gfs2_jdesc_find+0xab/0xc0 [ 329.003723][ T6175] init_journal+0x16d9/0x22b0 [ 329.003739][ T6175] ? init_inodes+0xdb/0x320 [ 329.003749][ T6175] ? __pfx_init_journal+0x10/0x10 [ 329.003761][ T6175] ? vsnprintf+0xdf1/0xee0 [ 329.003788][ T6175] ? snprintf+0xe8/0x140 [ 329.003801][ T6175] ? init_inodes+0xdb/0x320 [ 329.003816][ T6175] ? __pfx_snprintf+0x10/0x10 [ 329.003829][ T6175] ? gfs2_glock_nq_num+0x13d/0x170 [ 329.003841][ T6175] init_inodes+0xdb/0x320 [ 329.003851][ T6175] gfs2_fill_super+0x1a38/0x21d0 [ 329.003867][ T6175] ? __pfx_gfs2_fill_super+0x10/0x10 [ 329.003881][ T6175] ? init_locking+0xb8/0x210 [ 329.003893][ T6175] ? sb_set_blocksize+0x155/0x240 [ 329.003909][ T6175] ? setup_bdev_super+0x4c1/0x5b0 [ 329.003927][ T6175] get_tree_bdev_flags+0x431/0x4f0 [ 329.003942][ T6175] ? __pfx_gfs2_fill_super+0x10/0x10 [ 329.003956][ T6175] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 329.003965][ T6175] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 329.003984][ T6175] gfs2_get_tree+0x51/0x1e0 [ 329.003998][ T6175] vfs_get_tree+0x92/0x2a0 [ 329.004012][ T6175] do_new_mount+0x341/0xd30 [ 329.004030][ T6175] ? apparmor_capable+0x126/0x170 [ 329.004047][ T6175] ? __pfx_do_new_mount+0x10/0x10 [ 329.004064][ T6175] ? ns_capable+0x89/0xe0 [ 329.004092][ T6175] ? user_path_at+0xd4/0x160 [ 329.004112][ T6175] __se_sys_mount+0x31d/0x420 [ 329.004137][ T6175] ? __pfx___se_sys_mount+0x10/0x10 [ 329.004159][ T6175] ? __x64_sys_mount+0x20/0xc0 [ 329.004181][ T6175] do_syscall_64+0x14d/0xf80 [ 329.004197][ T6175] ? trace_irq_disable+0x3b/0x150 [ 329.004209][ T6175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.004222][ T6175] ? clear_bhb_loop+0x40/0x90 [ 329.004241][ T6175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.004256][ T6175] RIP: 0033:0x7f69b919b30a [ 329.004270][ T6175] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.004282][ T6175] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 329.004298][ T6175] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 329.004308][ T6175] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 329.004318][ T6175] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 329.004326][ T6175] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 329.004335][ T6175] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 329.004355][ T6175] [ 329.004361][ T6175] gfs2: fsid=..s: Error checking journal for spectator mount. 2026/04/07 10:00:27 executed programs: 72 [ 334.628127][ T6212] loop0: detected capacity change from 0 to 32768 [ 335.037625][ T6212] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 335.040789][ T6212] gfs2: fsid=.: Now mounting FS (format 1801)... [ 335.050021][ T6212] syz.0.96: attempt to access beyond end of device [ 335.050021][ T6212] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 335.056682][ T6212] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 335.062916][ T6212] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:4 [ 335.067068][ T6212] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6212 [syz.0.96] init_journal+0x16d9/0x22b0 [ 335.071991][ T6212] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 335.075913][ T6212] CPU: 0 UID: 0 PID: 6212 Comm: syz.0.96 Not tainted syzkaller #0 PREEMPT(full) [ 335.075935][ T6212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 335.075943][ T6212] Call Trace: [ 335.075975][ T6212] [ 335.075982][ T6212] dump_stack_lvl+0xe8/0x150 [ 335.076005][ T6212] gfs2_withdraw+0xc3/0x1b0 [ 335.076021][ T6212] gfs2_jdesc_check+0x17d/0x2f0 [ 335.076036][ T6212] check_journal_clean+0x18d/0x360 [ 335.076049][ T6212] ? __pfx_check_journal_clean+0x10/0x10 [ 335.076062][ T6212] ? init_journal+0x16d9/0x22b0 [ 335.076079][ T6212] ? do_raw_spin_unlock+0x4d/0x210 [ 335.076095][ T6212] ? _raw_spin_unlock+0x28/0x50 [ 335.076115][ T6212] ? gfs2_jdesc_find+0xab/0xc0 [ 335.076126][ T6212] init_journal+0x16d9/0x22b0 [ 335.076138][ T6212] ? init_inodes+0xdb/0x320 [ 335.076146][ T6212] ? __pfx_init_journal+0x10/0x10 [ 335.076154][ T6212] ? vsnprintf+0xdf1/0xee0 [ 335.076174][ T6212] ? snprintf+0xe8/0x140 [ 335.076186][ T6212] ? init_inodes+0xdb/0x320 [ 335.076196][ T6212] ? __pfx_snprintf+0x10/0x10 [ 335.076208][ T6212] ? gfs2_glock_nq_num+0x13d/0x170 [ 335.076224][ T6212] init_inodes+0xdb/0x320 [ 335.076237][ T6212] gfs2_fill_super+0x1a38/0x21d0 [ 335.076258][ T6212] ? __pfx_gfs2_fill_super+0x10/0x10 [ 335.076271][ T6212] ? init_locking+0xb8/0x210 [ 335.076282][ T6212] ? sb_set_blocksize+0x155/0x240 [ 335.076296][ T6212] ? setup_bdev_super+0x4c1/0x5b0 [ 335.076311][ T6212] get_tree_bdev_flags+0x431/0x4f0 [ 335.076322][ T6212] ? __pfx_gfs2_fill_super+0x10/0x10 [ 335.076333][ T6212] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 335.076344][ T6212] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 335.076366][ T6212] gfs2_get_tree+0x51/0x1e0 [ 335.076380][ T6212] vfs_get_tree+0x92/0x2a0 [ 335.076393][ T6212] do_new_mount+0x341/0xd30 [ 335.076408][ T6212] ? apparmor_capable+0x126/0x170 [ 335.076423][ T6212] ? __pfx_do_new_mount+0x10/0x10 [ 335.076437][ T6212] ? ns_capable+0x89/0xe0 [ 335.076459][ T6212] ? user_path_at+0xd4/0x160 [ 335.076477][ T6212] __se_sys_mount+0x31d/0x420 [ 335.076496][ T6212] ? __pfx___se_sys_mount+0x10/0x10 [ 335.076514][ T6212] ? __x64_sys_mount+0x20/0xc0 [ 335.076529][ T6212] do_syscall_64+0x14d/0xf80 [ 335.076544][ T6212] ? trace_irq_disable+0x3b/0x150 [ 335.076553][ T6212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.076572][ T6212] ? clear_bhb_loop+0x40/0x90 [ 335.076586][ T6212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.076598][ T6212] RIP: 0033:0x7f69b919b30a [ 335.076612][ T6212] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.076621][ T6212] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 335.076635][ T6212] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 335.076643][ T6212] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 335.076650][ T6212] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 335.076657][ T6212] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 335.076665][ T6212] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 335.076681][ T6212] [ 335.076686][ T6212] gfs2: fsid=..s: Error checking journal for spectator mount. 2026/04/07 10:00:32 executed programs: 87 [ 337.037306][ T6227] loop0: detected capacity change from 0 to 32768 [ 337.110396][ T6227] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 337.114341][ T6227] gfs2: fsid=.: Now mounting FS (format 1801)... [ 337.122767][ T6227] syz.0.102: attempt to access beyond end of device [ 337.122767][ T6227] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 337.129883][ T6227] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 337.136484][ T6227] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:4 [ 337.140480][ T6227] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6227 [syz.0.102] init_journal+0x16d9/0x22b0 [ 337.145900][ T6227] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 337.149465][ T6227] CPU: 0 UID: 0 PID: 6227 Comm: syz.0.102 Not tainted syzkaller #0 PREEMPT(full) [ 337.149485][ T6227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 337.149493][ T6227] Call Trace: [ 337.149502][ T6227] [ 337.149508][ T6227] dump_stack_lvl+0xe8/0x150 [ 337.149536][ T6227] gfs2_withdraw+0xc3/0x1b0 [ 337.149550][ T6227] gfs2_jdesc_check+0x17d/0x2f0 [ 337.149567][ T6227] check_journal_clean+0x18d/0x360 [ 337.149581][ T6227] ? __pfx_check_journal_clean+0x10/0x10 [ 337.149594][ T6227] ? init_journal+0x16d9/0x22b0 [ 337.149611][ T6227] ? do_raw_spin_unlock+0x4d/0x210 [ 337.149624][ T6227] ? _raw_spin_unlock+0x28/0x50 [ 337.149675][ T6227] ? gfs2_jdesc_find+0xab/0xc0 [ 337.149684][ T6227] init_journal+0x16d9/0x22b0 [ 337.149696][ T6227] ? init_inodes+0xdb/0x320 [ 337.149707][ T6227] ? __pfx_init_journal+0x10/0x10 [ 337.149718][ T6227] ? vsnprintf+0xdf1/0xee0 [ 337.149740][ T6227] ? snprintf+0xe8/0x140 [ 337.149753][ T6227] ? init_inodes+0xdb/0x320 [ 337.149763][ T6227] ? __pfx_snprintf+0x10/0x10 [ 337.149775][ T6227] ? gfs2_glock_nq_num+0x13d/0x170 [ 337.149791][ T6227] init_inodes+0xdb/0x320 [ 337.149803][ T6227] gfs2_fill_super+0x1a38/0x21d0 [ 337.149816][ T6227] ? __pfx_gfs2_fill_super+0x10/0x10 [ 337.149825][ T6227] ? init_locking+0xb8/0x210 [ 337.149831][ T6227] ? sb_set_blocksize+0x155/0x240 [ 337.149841][ T6227] ? setup_bdev_super+0x4c1/0x5b0 [ 337.149850][ T6227] get_tree_bdev_flags+0x431/0x4f0 [ 337.149858][ T6227] ? __pfx_gfs2_fill_super+0x10/0x10 [ 337.149865][ T6227] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 337.149872][ T6227] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 337.149888][ T6227] gfs2_get_tree+0x51/0x1e0 [ 337.149896][ T6227] vfs_get_tree+0x92/0x2a0 [ 337.149905][ T6227] do_new_mount+0x341/0xd30 [ 337.149914][ T6227] ? apparmor_capable+0x126/0x170 [ 337.149925][ T6227] ? __pfx_do_new_mount+0x10/0x10 [ 337.149935][ T6227] ? ns_capable+0x89/0xe0 [ 337.149948][ T6227] ? user_path_at+0xd4/0x160 [ 337.149959][ T6227] __se_sys_mount+0x31d/0x420 [ 337.149971][ T6227] ? __pfx___se_sys_mount+0x10/0x10 [ 337.149982][ T6227] ? __x64_sys_mount+0x20/0xc0 [ 337.149992][ T6227] do_syscall_64+0x14d/0xf80 [ 337.150002][ T6227] ? trace_irq_disable+0x3b/0x150 [ 337.150009][ T6227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.150017][ T6227] ? clear_bhb_loop+0x40/0x90 [ 337.150026][ T6227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.150038][ T6227] RIP: 0033:0x7f69b919b30a [ 337.150051][ T6227] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.150061][ T6227] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 337.150074][ T6227] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 337.150080][ T6227] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 337.150085][ T6227] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 337.150090][ T6227] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 337.150097][ T6227] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 337.150112][ T6227] [ 337.150117][ T6227] gfs2: fsid=..s: Error checking journal for spectator mount. [ 339.081857][ T6241] loop0: detected capacity change from 0 to 32768 [ 339.452938][ T6241] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 339.456320][ T6241] gfs2: fsid=.: Now mounting FS (format 1801)... [ 339.833597][ T6241] syz.0.107: attempt to access beyond end of device [ 339.833597][ T6241] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 339.840689][ T6241] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 339.847673][ T6241] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 339.851497][ T6241] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6241 [syz.0.107] init_journal+0x16d9/0x22b0 [ 339.856482][ T6241] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 339.860418][ T6241] CPU: 0 UID: 0 PID: 6241 Comm: syz.0.107 Not tainted syzkaller #0 PREEMPT(full) [ 339.860438][ T6241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 339.860447][ T6241] Call Trace: [ 339.860479][ T6241] [ 339.860486][ T6241] dump_stack_lvl+0xe8/0x150 [ 339.860511][ T6241] gfs2_withdraw+0xc3/0x1b0 [ 339.860527][ T6241] gfs2_jdesc_check+0x17d/0x2f0 [ 339.860547][ T6241] check_journal_clean+0x18d/0x360 [ 339.860561][ T6241] ? __pfx_check_journal_clean+0x10/0x10 [ 339.860574][ T6241] ? init_journal+0x16d9/0x22b0 [ 339.860590][ T6241] ? do_raw_spin_unlock+0x4d/0x210 [ 339.860607][ T6241] ? _raw_spin_unlock+0x28/0x50 [ 339.860627][ T6241] ? gfs2_jdesc_find+0xab/0xc0 [ 339.860642][ T6241] init_journal+0x16d9/0x22b0 [ 339.860663][ T6241] ? init_inodes+0xdb/0x320 [ 339.860677][ T6241] ? __pfx_init_journal+0x10/0x10 [ 339.860689][ T6241] ? vsnprintf+0xdf1/0xee0 [ 339.860714][ T6241] ? snprintf+0xe8/0x140 [ 339.860727][ T6241] ? init_inodes+0xdb/0x320 [ 339.860738][ T6241] ? __pfx_snprintf+0x10/0x10 [ 339.860749][ T6241] ? gfs2_glock_nq_num+0x13d/0x170 [ 339.860767][ T6241] init_inodes+0xdb/0x320 [ 339.860782][ T6241] gfs2_fill_super+0x1a38/0x21d0 [ 339.860802][ T6241] ? __pfx_gfs2_fill_super+0x10/0x10 [ 339.860816][ T6241] ? init_locking+0xb8/0x210 [ 339.860826][ T6241] ? sb_set_blocksize+0x155/0x240 [ 339.860843][ T6241] ? setup_bdev_super+0x4c1/0x5b0 [ 339.860858][ T6241] get_tree_bdev_flags+0x431/0x4f0 [ 339.860871][ T6241] ? __pfx_gfs2_fill_super+0x10/0x10 [ 339.860884][ T6241] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 339.860895][ T6241] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 339.860921][ T6241] gfs2_get_tree+0x51/0x1e0 [ 339.860937][ T6241] vfs_get_tree+0x92/0x2a0 [ 339.860949][ T6241] do_new_mount+0x341/0xd30 [ 339.860962][ T6241] ? apparmor_capable+0x126/0x170 [ 339.860975][ T6241] ? __pfx_do_new_mount+0x10/0x10 [ 339.860990][ T6241] ? ns_capable+0x89/0xe0 [ 339.861011][ T6241] ? user_path_at+0xd4/0x160 [ 339.861027][ T6241] __se_sys_mount+0x31d/0x420 [ 339.861043][ T6241] ? __pfx___se_sys_mount+0x10/0x10 [ 339.861059][ T6241] ? __x64_sys_mount+0x20/0xc0 [ 339.861072][ T6241] do_syscall_64+0x14d/0xf80 [ 339.861087][ T6241] ? trace_irq_disable+0x3b/0x150 [ 339.861099][ T6241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.861112][ T6241] ? clear_bhb_loop+0x40/0x90 [ 339.861128][ T6241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.861140][ T6241] RIP: 0033:0x7f69b919b30a [ 339.861155][ T6241] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.861167][ T6241] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 339.861182][ T6241] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 339.861191][ T6241] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 339.861200][ T6241] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 339.861208][ T6241] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 339.861217][ T6241] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 339.861236][ T6241] [ 339.861242][ T6241] gfs2: fsid=..s: Error checking journal for spectator mount. 2026/04/07 10:00:38 executed programs: 101 [ 342.919446][ T6264] loop0: detected capacity change from 0 to 32768 [ 342.948793][ T6264] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 342.954307][ T6264] gfs2: fsid=.: Now mounting FS (format 1801)... [ 342.965435][ T6264] syz.0.117: attempt to access beyond end of device [ 342.965435][ T6264] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 342.971994][ T6264] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 342.978407][ T6264] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 342.982231][ T6264] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6264 [syz.0.117] init_journal+0x16d9/0x22b0 [ 342.987406][ T6264] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 342.991874][ T6264] CPU: 0 UID: 0 PID: 6264 Comm: syz.0.117 Not tainted syzkaller #0 PREEMPT(full) [ 342.991896][ T6264] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 342.991903][ T6264] Call Trace: [ 342.991913][ T6264] [ 342.991921][ T6264] dump_stack_lvl+0xe8/0x150 [ 342.991944][ T6264] gfs2_withdraw+0xc3/0x1b0 [ 342.991960][ T6264] gfs2_jdesc_check+0x17d/0x2f0 [ 342.991978][ T6264] check_journal_clean+0x18d/0x360 [ 342.991991][ T6264] ? __pfx_check_journal_clean+0x10/0x10 [ 342.992005][ T6264] ? init_journal+0x16d9/0x22b0 [ 342.992022][ T6264] ? do_raw_spin_unlock+0x4d/0x210 [ 342.992036][ T6264] ? _raw_spin_unlock+0x28/0x50 [ 342.992069][ T6264] ? gfs2_jdesc_find+0xab/0xc0 [ 342.992083][ T6264] init_journal+0x16d9/0x22b0 [ 342.992102][ T6264] ? init_inodes+0xdb/0x320 [ 342.992122][ T6264] ? __pfx_init_journal+0x10/0x10 [ 342.992133][ T6264] ? vsnprintf+0xdf1/0xee0 [ 342.992157][ T6264] ? snprintf+0xe8/0x140 [ 342.992169][ T6264] ? init_inodes+0xdb/0x320 [ 342.992181][ T6264] ? __pfx_snprintf+0x10/0x10 [ 342.992192][ T6264] ? gfs2_glock_nq_num+0x13d/0x170 [ 342.992207][ T6264] init_inodes+0xdb/0x320 [ 342.992221][ T6264] gfs2_fill_super+0x1a38/0x21d0 [ 342.992242][ T6264] ? __pfx_gfs2_fill_super+0x10/0x10 [ 342.992254][ T6264] ? init_locking+0xb8/0x210 [ 342.992264][ T6264] ? sb_set_blocksize+0x155/0x240 [ 342.992279][ T6264] ? setup_bdev_super+0x4c1/0x5b0 [ 342.992292][ T6264] get_tree_bdev_flags+0x431/0x4f0 [ 342.992304][ T6264] ? __pfx_gfs2_fill_super+0x10/0x10 [ 342.992315][ T6264] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 342.992325][ T6264] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 342.992347][ T6264] gfs2_get_tree+0x51/0x1e0 [ 342.992383][ T6264] vfs_get_tree+0x92/0x2a0 [ 342.992399][ T6264] do_new_mount+0x341/0xd30 [ 342.992414][ T6264] ? apparmor_capable+0x126/0x170 [ 342.992431][ T6264] ? __pfx_do_new_mount+0x10/0x10 [ 342.992444][ T6264] ? ns_capable+0x89/0xe0 [ 342.992468][ T6264] ? user_path_at+0xd4/0x160 [ 342.992485][ T6264] __se_sys_mount+0x31d/0x420 [ 342.992505][ T6264] ? __pfx___se_sys_mount+0x10/0x10 [ 342.992523][ T6264] ? __x64_sys_mount+0x20/0xc0 [ 342.992540][ T6264] do_syscall_64+0x14d/0xf80 [ 342.992553][ T6264] ? trace_irq_disable+0x3b/0x150 [ 342.992564][ T6264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.992575][ T6264] ? clear_bhb_loop+0x40/0x90 [ 342.992588][ T6264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.992601][ T6264] RIP: 0033:0x7f69b919b30a [ 342.992615][ T6264] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.992625][ T6264] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 342.992639][ T6264] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 342.992647][ T6264] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 342.992655][ T6264] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 342.992662][ T6264] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 342.992669][ T6264] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 342.992687][ T6264] [ 343.146266][ T6264] gfs2: fsid=..s: Error checking journal for spectator mount. [ 344.281178][ T6272] loop0: detected capacity change from 0 to 32768 [ 344.331637][ T6272] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 344.335651][ T6272] gfs2: fsid=.: Now mounting FS (format 1801)... [ 344.352103][ T6272] syz.0.120: attempt to access beyond end of device [ 344.352103][ T6272] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 344.360329][ T6272] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 344.366969][ T6272] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 344.371054][ T6272] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6272 [syz.0.120] init_journal+0x16d9/0x22b0 [ 344.375406][ T6272] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 344.379169][ T6272] CPU: 0 UID: 0 PID: 6272 Comm: syz.0.120 Not tainted syzkaller #0 PREEMPT(full) [ 344.379192][ T6272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 344.379201][ T6272] Call Trace: [ 344.379210][ T6272] [ 344.379217][ T6272] dump_stack_lvl+0xe8/0x150 [ 344.379240][ T6272] gfs2_withdraw+0xc3/0x1b0 [ 344.379256][ T6272] gfs2_jdesc_check+0x17d/0x2f0 [ 344.379275][ T6272] check_journal_clean+0x18d/0x360 [ 344.379291][ T6272] ? __pfx_check_journal_clean+0x10/0x10 [ 344.379306][ T6272] ? init_journal+0x16d9/0x22b0 [ 344.379320][ T6272] ? do_raw_spin_unlock+0x4d/0x210 [ 344.379331][ T6272] ? _raw_spin_unlock+0x28/0x50 [ 344.379353][ T6272] ? gfs2_jdesc_find+0xab/0xc0 [ 344.379367][ T6272] init_journal+0x16d9/0x22b0 [ 344.379386][ T6272] ? init_inodes+0xdb/0x320 [ 344.379400][ T6272] ? __pfx_init_journal+0x10/0x10 [ 344.379413][ T6272] ? vsnprintf+0xdf1/0xee0 [ 344.379440][ T6272] ? snprintf+0xe8/0x140 [ 344.379453][ T6272] ? init_inodes+0xdb/0x320 [ 344.379462][ T6272] ? __pfx_snprintf+0x10/0x10 [ 344.379470][ T6272] ? gfs2_glock_nq_num+0x13d/0x170 [ 344.379482][ T6272] init_inodes+0xdb/0x320 [ 344.379491][ T6272] gfs2_fill_super+0x1a38/0x21d0 [ 344.379505][ T6272] ? __pfx_gfs2_fill_super+0x10/0x10 [ 344.379515][ T6272] ? init_locking+0xb8/0x210 [ 344.379526][ T6272] ? sb_set_blocksize+0x155/0x240 [ 344.379541][ T6272] ? setup_bdev_super+0x4c1/0x5b0 [ 344.379557][ T6272] get_tree_bdev_flags+0x431/0x4f0 [ 344.379571][ T6272] ? __pfx_gfs2_fill_super+0x10/0x10 [ 344.379584][ T6272] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 344.379595][ T6272] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 344.379619][ T6272] gfs2_get_tree+0x51/0x1e0 [ 344.379633][ T6272] vfs_get_tree+0x92/0x2a0 [ 344.379648][ T6272] do_new_mount+0x341/0xd30 [ 344.379663][ T6272] ? apparmor_capable+0x126/0x170 [ 344.379681][ T6272] ? __pfx_do_new_mount+0x10/0x10 [ 344.379695][ T6272] ? ns_capable+0x89/0xe0 [ 344.379717][ T6272] ? user_path_at+0xd4/0x160 [ 344.379738][ T6272] __se_sys_mount+0x31d/0x420 [ 344.379758][ T6272] ? __pfx___se_sys_mount+0x10/0x10 [ 344.379779][ T6272] ? __x64_sys_mount+0x20/0xc0 [ 344.379794][ T6272] do_syscall_64+0x14d/0xf80 [ 344.379805][ T6272] ? trace_irq_disable+0x3b/0x150 [ 344.379813][ T6272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.379822][ T6272] ? clear_bhb_loop+0x40/0x90 [ 344.379833][ T6272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.379845][ T6272] RIP: 0033:0x7f69b919b30a [ 344.379861][ T6272] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.379873][ T6272] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 344.379889][ T6272] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 344.379899][ T6272] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 344.379908][ T6272] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 344.379918][ T6272] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 344.379927][ T6272] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 344.379947][ T6272] [ 344.379953][ T6272] gfs2: fsid=..s: Error checking journal for spectator mount. [ 345.393911][ T6279] loop0: detected capacity change from 0 to 32768 [ 345.869890][ T6279] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 345.873140][ T6279] gfs2: fsid=.: Now mounting FS (format 1801)... [ 345.883992][ T6279] syz.0.122: attempt to access beyond end of device [ 345.883992][ T6279] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 345.891196][ T6279] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 345.898213][ T6279] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:4 [ 345.902728][ T6279] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6279 [syz.0.122] init_journal+0x16d9/0x22b0 [ 345.907758][ T6279] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 345.911204][ T6279] CPU: 0 UID: 0 PID: 6279 Comm: syz.0.122 Not tainted syzkaller #0 PREEMPT(full) [ 345.911218][ T6279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 345.911223][ T6279] Call Trace: [ 345.911230][ T6279] [ 345.911234][ T6279] dump_stack_lvl+0xe8/0x150 [ 345.911251][ T6279] gfs2_withdraw+0xc3/0x1b0 [ 345.911263][ T6279] gfs2_jdesc_check+0x17d/0x2f0 [ 345.911275][ T6279] check_journal_clean+0x18d/0x360 [ 345.911283][ T6279] ? __pfx_check_journal_clean+0x10/0x10 [ 345.911292][ T6279] ? init_journal+0x16d9/0x22b0 [ 345.911303][ T6279] ? do_raw_spin_unlock+0x4d/0x210 [ 345.911313][ T6279] ? _raw_spin_unlock+0x28/0x50 [ 345.911322][ T6279] ? gfs2_jdesc_find+0xab/0xc0 [ 345.911331][ T6279] init_journal+0x16d9/0x22b0 [ 345.911342][ T6279] ? init_inodes+0xdb/0x320 [ 345.911351][ T6279] ? __pfx_init_journal+0x10/0x10 [ 345.911367][ T6279] ? vsnprintf+0xdf1/0xee0 [ 345.911390][ T6279] ? snprintf+0xe8/0x140 [ 345.911401][ T6279] ? init_inodes+0xdb/0x320 [ 345.911408][ T6279] ? __pfx_snprintf+0x10/0x10 [ 345.911415][ T6279] ? gfs2_glock_nq_num+0x13d/0x170 [ 345.911425][ T6279] init_inodes+0xdb/0x320 [ 345.911434][ T6279] gfs2_fill_super+0x1a38/0x21d0 [ 345.911447][ T6279] ? __pfx_gfs2_fill_super+0x10/0x10 [ 345.911455][ T6279] ? init_locking+0xb8/0x210 [ 345.911461][ T6279] ? sb_set_blocksize+0x155/0x240 [ 345.911470][ T6279] ? setup_bdev_super+0x4c1/0x5b0 [ 345.911480][ T6279] get_tree_bdev_flags+0x431/0x4f0 [ 345.911488][ T6279] ? __pfx_gfs2_fill_super+0x10/0x10 [ 345.911495][ T6279] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 345.911501][ T6279] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 345.911517][ T6279] gfs2_get_tree+0x51/0x1e0 [ 345.911526][ T6279] vfs_get_tree+0x92/0x2a0 [ 345.911534][ T6279] do_new_mount+0x341/0xd30 [ 345.911543][ T6279] ? apparmor_capable+0x126/0x170 [ 345.911554][ T6279] ? __pfx_do_new_mount+0x10/0x10 [ 345.911563][ T6279] ? ns_capable+0x89/0xe0 [ 345.911576][ T6279] ? user_path_at+0xd4/0x160 [ 345.911588][ T6279] __se_sys_mount+0x31d/0x420 [ 345.911599][ T6279] ? __pfx___se_sys_mount+0x10/0x10 [ 345.911610][ T6279] ? __x64_sys_mount+0x20/0xc0 [ 345.911621][ T6279] do_syscall_64+0x14d/0xf80 [ 345.911630][ T6279] ? trace_irq_disable+0x3b/0x150 [ 345.911637][ T6279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.911645][ T6279] ? clear_bhb_loop+0x40/0x90 [ 345.911654][ T6279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.911662][ T6279] RIP: 0033:0x7f69b919b30a [ 345.911672][ T6279] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.911679][ T6279] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 345.911688][ T6279] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 345.911694][ T6279] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 345.911699][ T6279] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 345.911704][ T6279] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 345.911708][ T6279] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 345.911719][ T6279] [ 345.911726][ T6279] gfs2: fsid=..s: Error checking journal for spectator mount. [ 347.970193][ T6293] loop0: detected capacity change from 0 to 32768 [ 348.280256][ T6293] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 348.283879][ T6293] gfs2: fsid=.: Now mounting FS (format 1801)... [ 348.297181][ T6293] syz.0.128: attempt to access beyond end of device [ 348.297181][ T6293] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 348.304827][ T6293] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 348.310986][ T6293] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 348.314926][ T6293] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6293 [syz.0.128] init_journal+0x16d9/0x22b0 [ 348.319133][ T6293] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 348.325794][ T6293] CPU: 0 UID: 0 PID: 6293 Comm: syz.0.128 Not tainted syzkaller #0 PREEMPT(full) [ 348.325818][ T6293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 348.325826][ T6293] Call Trace: [ 348.325832][ T6293] [ 348.325838][ T6293] dump_stack_lvl+0xe8/0x150 [ 348.325865][ T6293] gfs2_withdraw+0xc3/0x1b0 [ 348.325882][ T6293] gfs2_jdesc_check+0x17d/0x2f0 [ 348.325902][ T6293] check_journal_clean+0x18d/0x360 [ 348.325916][ T6293] ? __pfx_check_journal_clean+0x10/0x10 [ 348.325930][ T6293] ? init_journal+0x16d9/0x22b0 [ 348.325950][ T6293] ? do_raw_spin_unlock+0x4d/0x210 [ 348.325967][ T6293] ? _raw_spin_unlock+0x28/0x50 [ 348.325982][ T6293] ? gfs2_jdesc_find+0xab/0xc0 [ 348.325998][ T6293] init_journal+0x16d9/0x22b0 [ 348.326018][ T6293] ? init_inodes+0xdb/0x320 [ 348.326033][ T6293] ? __pfx_init_journal+0x10/0x10 [ 348.326045][ T6293] ? vsnprintf+0xdf1/0xee0 [ 348.326071][ T6293] ? snprintf+0xe8/0x140 [ 348.326084][ T6293] ? init_inodes+0xdb/0x320 [ 348.326096][ T6293] ? __pfx_snprintf+0x10/0x10 [ 348.326109][ T6293] ? gfs2_glock_nq_num+0x13d/0x170 [ 348.326125][ T6293] init_inodes+0xdb/0x320 [ 348.326139][ T6293] gfs2_fill_super+0x1a38/0x21d0 [ 348.326162][ T6293] ? __pfx_gfs2_fill_super+0x10/0x10 [ 348.326176][ T6293] ? init_locking+0xb8/0x210 [ 348.326186][ T6293] ? sb_set_blocksize+0x155/0x240 [ 348.326202][ T6293] ? setup_bdev_super+0x4c1/0x5b0 [ 348.326217][ T6293] get_tree_bdev_flags+0x431/0x4f0 [ 348.326231][ T6293] ? __pfx_gfs2_fill_super+0x10/0x10 [ 348.326243][ T6293] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 348.326254][ T6293] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 348.326279][ T6293] gfs2_get_tree+0x51/0x1e0 [ 348.326294][ T6293] vfs_get_tree+0x92/0x2a0 [ 348.326308][ T6293] do_new_mount+0x341/0xd30 [ 348.326322][ T6293] ? apparmor_capable+0x126/0x170 [ 348.326339][ T6293] ? __pfx_do_new_mount+0x10/0x10 [ 348.326355][ T6293] ? ns_capable+0x89/0xe0 [ 348.326379][ T6293] ? user_path_at+0xd4/0x160 [ 348.326398][ T6293] __se_sys_mount+0x31d/0x420 [ 348.326417][ T6293] ? __pfx___se_sys_mount+0x10/0x10 [ 348.326443][ T6293] ? __x64_sys_mount+0x20/0xc0 [ 348.326460][ T6293] do_syscall_64+0x14d/0xf80 [ 348.326475][ T6293] ? trace_irq_disable+0x3b/0x150 [ 348.326486][ T6293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.326499][ T6293] ? clear_bhb_loop+0x40/0x90 [ 348.326514][ T6293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.326526][ T6293] RIP: 0033:0x7f69b919b30a [ 348.326542][ T6293] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.326552][ T6293] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 348.326569][ T6293] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 348.326577][ T6293] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 348.326585][ T6293] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 348.326593][ T6293] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 348.326601][ T6293] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 348.326621][ T6293] [ 348.326627][ T6293] gfs2: fsid=..s: Error checking journal for spectator mount. 2026/04/07 10:00:46 executed programs: 114 [ 350.686933][ T6317] loop0: detected capacity change from 0 to 32768 [ 351.080757][ T6317] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 351.086226][ T6317] gfs2: fsid=.: Now mounting FS (format 1801)... [ 351.105011][ T6317] syz.0.130: attempt to access beyond end of device [ 351.105011][ T6317] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 351.113783][ T6317] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 351.120159][ T6317] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 351.124233][ T6317] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6317 [syz.0.130] init_journal+0x16d9/0x22b0 [ 351.128274][ T6317] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 351.131357][ T6317] CPU: 0 UID: 0 PID: 6317 Comm: syz.0.130 Not tainted syzkaller #0 PREEMPT(full) [ 351.131378][ T6317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 351.131385][ T6317] Call Trace: [ 351.131395][ T6317] [ 351.131401][ T6317] dump_stack_lvl+0xe8/0x150 [ 351.131425][ T6317] gfs2_withdraw+0xc3/0x1b0 [ 351.131439][ T6317] gfs2_jdesc_check+0x17d/0x2f0 [ 351.131459][ T6317] check_journal_clean+0x18d/0x360 [ 351.131473][ T6317] ? __pfx_check_journal_clean+0x10/0x10 [ 351.131486][ T6317] ? init_journal+0x16d9/0x22b0 [ 351.131505][ T6317] ? do_raw_spin_unlock+0x4d/0x210 [ 351.131520][ T6317] ? _raw_spin_unlock+0x28/0x50 [ 351.131533][ T6317] ? gfs2_jdesc_find+0xab/0xc0 [ 351.131547][ T6317] init_journal+0x16d9/0x22b0 [ 351.131566][ T6317] ? init_inodes+0xdb/0x320 [ 351.131579][ T6317] ? __pfx_init_journal+0x10/0x10 [ 351.131592][ T6317] ? vsnprintf+0xdf1/0xee0 [ 351.131616][ T6317] ? snprintf+0xe8/0x140 [ 351.131628][ T6317] ? init_inodes+0xdb/0x320 [ 351.131639][ T6317] ? __pfx_snprintf+0x10/0x10 [ 351.131651][ T6317] ? gfs2_glock_nq_num+0x13d/0x170 [ 351.131669][ T6317] init_inodes+0xdb/0x320 [ 351.131682][ T6317] gfs2_fill_super+0x1a38/0x21d0 [ 351.131703][ T6317] ? __pfx_gfs2_fill_super+0x10/0x10 [ 351.131715][ T6317] ? init_locking+0xb8/0x210 [ 351.131727][ T6317] ? sb_set_blocksize+0x155/0x240 [ 351.131740][ T6317] ? setup_bdev_super+0x4c1/0x5b0 [ 351.131754][ T6317] get_tree_bdev_flags+0x431/0x4f0 [ 351.131767][ T6317] ? __pfx_gfs2_fill_super+0x10/0x10 [ 351.131778][ T6317] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 351.131788][ T6317] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 351.131814][ T6317] gfs2_get_tree+0x51/0x1e0 [ 351.131827][ T6317] vfs_get_tree+0x92/0x2a0 [ 351.131839][ T6317] do_new_mount+0x341/0xd30 [ 351.131854][ T6317] ? apparmor_capable+0x126/0x170 [ 351.131870][ T6317] ? __pfx_do_new_mount+0x10/0x10 [ 351.131885][ T6317] ? ns_capable+0x89/0xe0 [ 351.131907][ T6317] ? user_path_at+0xd4/0x160 [ 351.131927][ T6317] __se_sys_mount+0x31d/0x420 [ 351.131945][ T6317] ? __pfx___se_sys_mount+0x10/0x10 [ 351.131963][ T6317] ? __x64_sys_mount+0x20/0xc0 [ 351.131979][ T6317] do_syscall_64+0x14d/0xf80 [ 351.131993][ T6317] ? trace_irq_disable+0x3b/0x150 [ 351.132004][ T6317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.132015][ T6317] ? clear_bhb_loop+0x40/0x90 [ 351.132029][ T6317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.132042][ T6317] RIP: 0033:0x7f69b919b30a [ 351.132055][ T6317] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.132066][ T6317] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 351.132080][ T6317] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 351.132088][ T6317] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 351.132096][ T6317] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 351.132104][ T6317] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 351.132110][ T6317] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 351.132126][ T6317] [ 351.132130][ T6317] gfs2: fsid=..s: Error checking journal for spectator mount. [ 353.103310][ T6331] loop0: detected capacity change from 0 to 32768 [ 353.163650][ T6331] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 353.166691][ T6331] gfs2: fsid=.: Now mounting FS (format 1801)... [ 353.199549][ T6331] syz.0.136: attempt to access beyond end of device [ 353.199549][ T6331] loop0: rw=8400896, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 353.209498][ T6331] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 353.216655][ T6331] gfs2: fsid=..s: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:4 [ 353.220799][ T6331] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:6331 [syz.0.136] init_journal+0x16d9/0x22b0 [ 353.225821][ T6331] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 353.229666][ T6331] CPU: 0 UID: 0 PID: 6331 Comm: syz.0.136 Not tainted syzkaller #0 PREEMPT(full) [ 353.229687][ T6331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 353.229695][ T6331] Call Trace: [ 353.229703][ T6331] [ 353.229710][ T6331] dump_stack_lvl+0xe8/0x150 [ 353.229732][ T6331] gfs2_withdraw+0xc3/0x1b0 [ 353.229748][ T6331] gfs2_jdesc_check+0x17d/0x2f0 [ 353.229765][ T6331] check_journal_clean+0x18d/0x360 [ 353.229779][ T6331] ? __pfx_check_journal_clean+0x10/0x10 [ 353.229794][ T6331] ? init_journal+0x16d9/0x22b0 [ 353.229811][ T6331] ? do_raw_spin_unlock+0x4d/0x210 [ 353.229827][ T6331] ? _raw_spin_unlock+0x28/0x50 [ 353.229852][ T6331] ? gfs2_jdesc_find+0xab/0xc0 [ 353.229867][ T6331] init_journal+0x16d9/0x22b0 [ 353.229887][ T6331] ? init_inodes+0xdb/0x320 [ 353.229901][ T6331] ? __pfx_init_journal+0x10/0x10 [ 353.229914][ T6331] ? vsnprintf+0xdf1/0xee0 [ 353.229938][ T6331] ? snprintf+0xe8/0x140 [ 353.229950][ T6331] ? init_inodes+0xdb/0x320 [ 353.229962][ T6331] ? __pfx_snprintf+0x10/0x10 [ 353.229981][ T6331] ? gfs2_glock_nq_num+0x13d/0x170 [ 353.229997][ T6331] init_inodes+0xdb/0x320 [ 353.230010][ T6331] gfs2_fill_super+0x1a38/0x21d0 [ 353.230032][ T6331] ? __pfx_gfs2_fill_super+0x10/0x10 [ 353.230047][ T6331] ? init_locking+0xb8/0x210 [ 353.230058][ T6331] ? sb_set_blocksize+0x155/0x240 [ 353.230073][ T6331] ? setup_bdev_super+0x4c1/0x5b0 [ 353.230087][ T6331] get_tree_bdev_flags+0x431/0x4f0 [ 353.230101][ T6331] ? __pfx_gfs2_fill_super+0x10/0x10 [ 353.230112][ T6331] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 353.230124][ T6331] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 353.230150][ T6331] gfs2_get_tree+0x51/0x1e0 [ 353.230163][ T6331] vfs_get_tree+0x92/0x2a0 [ 353.230177][ T6331] do_new_mount+0x341/0xd30 [ 353.230192][ T6331] ? apparmor_capable+0x126/0x170 [ 353.230207][ T6331] ? __pfx_do_new_mount+0x10/0x10 [ 353.230222][ T6331] ? ns_capable+0x89/0xe0 [ 353.230244][ T6331] ? user_path_at+0xd4/0x160 [ 353.230263][ T6331] __se_sys_mount+0x31d/0x420 [ 353.230282][ T6331] ? __pfx___se_sys_mount+0x10/0x10 [ 353.230301][ T6331] ? __x64_sys_mount+0x20/0xc0 [ 353.230318][ T6331] do_syscall_64+0x14d/0xf80 [ 353.230332][ T6331] ? trace_irq_disable+0x3b/0x150 [ 353.230342][ T6331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.230354][ T6331] ? clear_bhb_loop+0x40/0x90 [ 353.230368][ T6331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.230380][ T6331] RIP: 0033:0x7f69b919b30a [ 353.230393][ T6331] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.230404][ T6331] RSP: 002b:00007f69b9fb7e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 353.230418][ T6331] RAX: ffffffffffffffda RBX: 00007f69b9fb7ee0 RCX: 00007f69b919b30a [ 353.230426][ T6331] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f69b9fb7ea0 [ 353.230433][ T6331] RBP: 0000200000000000 R08: 00007f69b9fb7ee0 R09: 0000000000208c1b [ 353.230441][ T6331] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 353.230448][ T6331] R13: 00007f69b9fb7ea0 R14: 0000000000012754 R15: 00002000000128c0 [ 353.230466][ T6331] [ 353.230471][ T6331] gfs2: fsid=..s: Error checking journal for spectator mount. [ 353.876415][ T29] ================================================================== [ 353.880624][ T29] BUG: KASAN: use-after-free in move_to_new_folio+0x145/0x470 [ 353.884146][ T29] Read of size 8 at addr ffff88803f7d0910 by task kcompactd1/29 [ 353.888759][ T29] [ 353.889926][ T29] CPU: 0 UID: 0 PID: 29 Comm: kcompactd1 Not tainted syzkaller #0 PREEMPT(full) [ 353.889946][ T29] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 353.889954][ T29] Call Trace: [ 353.889963][ T29] [ 353.889969][ T29] dump_stack_lvl+0xe8/0x150 [ 353.889994][ T29] print_report+0xba/0x230 [ 353.890011][ T29] ? move_to_new_folio+0x145/0x470 [ 353.890029][ T29] kasan_report+0x117/0x150 [ 353.890040][ T29] ? __free_frozen_pages+0x706/0xdb0 [ 353.890049][ T29] ? move_to_new_folio+0x145/0x470 [ 353.890061][ T29] kasan_check_range+0x264/0x2c0 [ 353.890071][ T29] move_to_new_folio+0x145/0x470 [ 353.890082][ T29] migrate_pages_batch+0x2b80/0x4d80 [ 353.890095][ T29] ? __pfx_compaction_free+0x10/0x10 [ 353.890112][ T29] ? __pfx_migrate_pages_batch+0x10/0x10 [ 353.890126][ T29] ? kvm_sched_clock_read+0x11/0x20 [ 353.890142][ T29] ? sched_clock+0x3f/0x60 [ 353.890157][ T29] ? sched_clock_cpu+0x74/0x440 [ 353.890186][ T29] ? lockdep_hardirqs_on+0x7a/0x110 [ 353.890201][ T29] ? __pfx_remove_migration_pte+0x10/0x10 [ 353.890216][ T29] ? rcu_is_watching+0x15/0xb0 [ 353.890234][ T29] ? trace_sched_exit_tp+0x3a/0x150 [ 353.890248][ T29] ? css_rstat_updated+0x23a/0x530 [ 353.890262][ T29] ? __pfx_css_rstat_updated+0x10/0x10 [ 353.890279][ T29] ? __pfx_compaction_free+0x10/0x10 [ 353.890291][ T29] migrate_pages+0x1c74/0x2a70 [ 353.890310][ T29] ? __pfx_compaction_free+0x10/0x10 [ 353.890321][ T29] ? __pfx_compaction_alloc+0x10/0x10 [ 353.890331][ T29] ? __pfx_migrate_pages+0x10/0x10 [ 353.890341][ T29] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 353.890351][ T29] ? rcu_is_watching+0x15/0xb0 [ 353.890367][ T29] ? isolate_migratepages_block+0x3ba3/0x4460 [ 353.890395][ T29] compact_zone+0x26cd/0x4850 [ 353.890427][ T29] ? __pfx_compact_zone+0x10/0x10 [ 353.890445][ T29] ? do_raw_spin_lock+0x12b/0x2f0 [ 353.890460][ T29] ? __mutex_trylock_common+0x158/0x260 [ 353.890483][ T29] compact_node+0x21a/0x320 [ 353.890498][ T29] ? __pfx_compact_node+0x10/0x10 [ 353.890519][ T29] ? fragmentation_score_node+0x391/0x3b0 [ 353.890533][ T29] kcompactd+0xc20/0x1330 [ 353.890550][ T29] ? lock_acquire+0xf0/0x2e0 [ 353.890569][ T29] ? __pfx_kcompactd+0x10/0x10 [ 353.890629][ T29] ? __pfx_autoremove_wake_function+0x10/0x10 [ 353.890646][ T29] ? __kthread_parkme+0x7a/0x1f0 [ 353.890665][ T29] kthread+0x388/0x470 [ 353.890678][ T29] ? __pfx_kcompactd+0x10/0x10 [ 353.890695][ T29] ? __pfx_kthread+0x10/0x10 [ 353.890708][ T29] ret_from_fork+0x51e/0xb90 [ 353.890726][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 353.890742][ T29] ? __switch_to+0xc7d/0x1450 [ 353.890758][ T29] ? __pfx_kthread+0x10/0x10 [ 353.890769][ T29] ret_from_fork_asm+0x1a/0x30 [ 353.890793][ T29] [ 353.890798][ T29] [ 354.025171][ T29] The buggy address belongs to the physical page: [ 354.028008][ T29] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803f7d0a90 pfn:0x3f7d0 [ 354.032633][ T29] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 354.036391][ T29] page_type: f0(buddy) [ 354.038909][ T29] raw: 04fff00000000000 ffffea00010f2e08 ffffea000133f008 0000000000000000 [ 354.043526][ T29] raw: ffff88803f7d0a90 0000000000000002 00000000f0000000 0000000000000000 [ 354.047342][ T29] page dumped because: kasan: bad access detected [ 354.050105][ T29] page_owner tracks the page as freed [ 354.052697][ T29] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6212, tgid 6211 (syz.0.96), ts 335049165468, free_ts 344648072494 [ 354.062621][ T29] post_alloc_hook+0x231/0x280 [ 354.065151][ T29] get_page_from_freelist+0x24dc/0x2580 [ 354.067774][ T29] __alloc_frozen_pages_noprof+0x18d/0x380 [ 354.070444][ T29] allocate_slab+0x77/0x660 [ 354.072734][ T29] refill_objects+0x331/0x3c0 [ 354.075223][ T29] __pcs_replace_empty_main+0x2e6/0x730 [ 354.077776][ T29] kmem_cache_alloc_noprof+0x37d/0x650 [ 354.080290][ T29] gfs2_glock_get+0x27b/0xf40 [ 354.082457][ T29] gfs2_inode_lookup+0x29f/0xc50 [ 354.085069][ T29] gfs2_dir_search+0x168/0x220 [ 354.087582][ T29] gfs2_lookupi+0x45b/0x640 [ 354.090087][ T29] init_journal+0x592/0x22b0 [ 354.092749][ T29] init_inodes+0xdb/0x320 [ 354.094738][ T29] gfs2_fill_super+0x1a38/0x21d0 [ 354.097048][ T29] get_tree_bdev_flags+0x431/0x4f0 [ 354.099485][ T29] gfs2_get_tree+0x51/0x1e0 [ 354.101572][ T29] page last free pid 4703 tgid 4703 stack trace: [ 354.104686][ T29] __free_frozen_pages+0xc2b/0xdb0 [ 354.107288][ T29] __slab_free+0x263/0x2b0 [ 354.109991][ T29] qlist_free_all+0x97/0x100 [ 354.112325][ T29] kasan_quarantine_reduce+0x148/0x160 [ 354.114770][ T29] __kasan_slab_alloc+0x22/0x80 [ 354.116954][ T29] kmem_cache_alloc_node_noprof+0x384/0x690 [ 354.119647][ T29] __alloc_skb+0x1d0/0x7d0 [ 354.121664][ T29] alloc_skb_with_frags+0xca/0x890 [ 354.124011][ T29] sock_alloc_send_pskb+0x878/0x990 [ 354.126733][ T29] unix_dgram_sendmsg+0x4fb/0x18d0 [ 354.129510][ T29] __sys_sendto+0x672/0x710 [ 354.132105][ T29] __x64_sys_sendto+0xde/0x100 [ 354.134255][ T29] do_syscall_64+0x14d/0xf80 [ 354.136228][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.138797][ T29] [ 354.139919][ T29] Memory state around the buggy address: [ 354.142700][ T29] ffff88803f7d0800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 354.147275][ T29] ffff88803f7d0880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 354.151143][ T29] >ffff88803f7d0900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 354.154737][ T29] ^ [ 354.156938][ T29] ffff88803f7d0980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 354.161020][ T29] ffff88803f7d0a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 354.165903][ T29] ================================================================== [ 355.076801][ T6342] loop0: detected capacity change from 0 to 32768 [ 355.734100][ T29] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 355.737608][ T29] CPU: 0 UID: 0 PID: 29 Comm: kcompactd1 Not tainted syzkaller #0 PREEMPT(full) [ 355.741909][ T29] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 355.747245][ T29] Call Trace: [ 355.748961][ T29] [ 355.750264][ T29] vpanic+0x56c/0xa60 [ 355.752162][ T29] ? __pfx_vpanic+0x10/0x10 [ 355.754210][ T29] ? __pfx___schedule+0x10/0x10 [ 355.756432][ T29] panic+0xc5/0xd0 [ 355.758250][ T29] ? __pfx_panic+0x10/0x10 [ 355.761228][ T29] ? preempt_schedule_common+0x82/0xd0 [ 355.765273][ T29] ? move_to_new_folio+0x145/0x470 [ 355.767795][ T29] check_panic_on_warn+0x89/0xb0 [ 355.770006][ T29] ? move_to_new_folio+0x145/0x470 [ 355.772324][ T29] end_report+0x73/0x180 [ 355.774195][ T29] ? move_to_new_folio+0x145/0x470 [ 355.776555][ T29] kasan_report+0x128/0x150 [ 355.778691][ T29] ? __free_frozen_pages+0x706/0xdb0 [ 355.781083][ T29] ? move_to_new_folio+0x145/0x470 [ 355.783621][ T29] kasan_check_range+0x264/0x2c0 [ 355.786770][ T29] move_to_new_folio+0x145/0x470 [ 355.789479][ T29] migrate_pages_batch+0x2b80/0x4d80 [ 355.792029][ T29] ? __pfx_compaction_free+0x10/0x10 [ 355.794435][ T29] ? __pfx_migrate_pages_batch+0x10/0x10 [ 355.796993][ T29] ? kvm_sched_clock_read+0x11/0x20 [ 355.799424][ T29] ? sched_clock+0x3f/0x60 [ 355.802007][ T29] ? sched_clock_cpu+0x74/0x440 [ 355.804885][ T29] ? lockdep_hardirqs_on+0x7a/0x110 [ 355.807224][ T29] ? __pfx_remove_migration_pte+0x10/0x10 [ 355.809788][ T29] ? rcu_is_watching+0x15/0xb0 [ 355.812357][ T29] ? trace_sched_exit_tp+0x3a/0x150 [ 355.815064][ T29] ? css_rstat_updated+0x23a/0x530 [ 355.817781][ T29] ? __pfx_css_rstat_updated+0x10/0x10 [ 355.820689][ T29] ? __pfx_compaction_free+0x10/0x10 [ 355.823272][ T29] migrate_pages+0x1c74/0x2a70 [ 355.825529][ T29] ? __pfx_compaction_free+0x10/0x10 [ 355.828027][ T29] ? __pfx_compaction_alloc+0x10/0x10 [ 355.830638][ T29] ? __pfx_migrate_pages+0x10/0x10 [ 355.833909][ T29] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 355.836721][ T29] ? rcu_is_watching+0x15/0xb0 [ 355.838953][ T29] ? isolate_migratepages_block+0x3ba3/0x4460 [ 355.841954][ T29] compact_zone+0x26cd/0x4850 [ 355.844425][ T29] ? __pfx_compact_zone+0x10/0x10 [ 355.846907][ T29] ? do_raw_spin_lock+0x12b/0x2f0 [ 355.849228][ T29] ? __mutex_trylock_common+0x158/0x260 [ 355.852009][ T29] compact_node+0x21a/0x320 [ 355.854394][ T29] ? __pfx_compact_node+0x10/0x10 [ 355.857153][ T29] ? fragmentation_score_node+0x391/0x3b0 [ 355.859861][ T29] kcompactd+0xc20/0x1330 [ 355.861873][ T29] ? lock_acquire+0xf0/0x2e0 [ 355.864347][ T29] ? __pfx_kcompactd+0x10/0x10 [ 355.866948][ T29] ? __pfx_autoremove_wake_function+0x10/0x10 [ 355.870174][ T29] ? __kthread_parkme+0x7a/0x1f0 [ 355.872748][ T29] kthread+0x388/0x470 [ 355.874649][ T29] ? __pfx_kcompactd+0x10/0x10 [ 355.876897][ T29] ? __pfx_kthread+0x10/0x10 [ 355.879062][ T29] ret_from_fork+0x51e/0xb90 [ 355.881380][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 355.884668][ T29] ? __switch_to+0xc7d/0x1450 [ 355.886947][ T29] ? __pfx_kthread+0x10/0x10 [ 355.889059][ T29] ret_from_fork_asm+0x1a/0x30 [ 355.891285][ T29] [ 355.893092][ T29] Kernel Offset: disabled [ 355.895267][ T29] Rebooting in 86400 seconds..