119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.816097][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.816841][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.818110][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.818816][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.819966][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.820659][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.821303][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.821980][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.822635][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.823299][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.823954][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.825012][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.826298][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.829845][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.830603][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.832782][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.833570][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.834267][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.835777][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.837232][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.837951][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.838791][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.839481][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.840912][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.841598][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.842252][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.843036][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.843332][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.843890][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.847198][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.849393][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.887503][ T8504] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 621.887522][ T8504] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 621.900472][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.908970][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.912488][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.914853][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.917468][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.917514][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.919343][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.920187][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.920228][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.920595][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.921130][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.921828][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.922184][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.922216][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.923597][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.923634][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.924512][ T8504] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms
[ 621.926595][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.930594][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.930721][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.931063][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.931775][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.932498][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.934246][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.936397][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.939029][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.939817][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.941992][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.942722][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.944361][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.947937][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.953120][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.953838][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.955193][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.957372][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.958058][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.960205][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.962454][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
executing program
[ 621.963144][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.967255][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.968234][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.970418][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.972114][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.972155][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.972184][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.976252][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.976357][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.978867][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 621.979829][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.017950][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.020710][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.021464][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.048304][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.050851][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.084328][ T8504] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 622.091263][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.092251][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.108124][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.110364][ T8504] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[ 622.110391][ T8504] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590
[ 622.110419][ T8504] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
[ 622.110445][ T8504] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:8504 [syz-executor258] iterate_dir+0x3a5/0x580
[ 622.110479][ T8504] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[ 622.110525][ T8504] CPU: 1 UID: 0 PID: 8504 Comm: syz-executor258 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 622.110547][ T8504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 622.110558][ T8504] Call Trace:
[ 622.110567][ T8504]
[ 622.110575][ T8504] dump_stack_lvl+0xe8/0x150
[ 622.110602][ T8504] gfs2_withdraw+0xc3/0x1b0
[ 622.110625][ T8504] gfs2_dirent_scan+0x545/0x690
[ 622.110648][ T8504] ? __pfx_gfs2_dirent_gather+0x10/0x10
[ 622.110673][ T8504] gfs2_dir_read+0x78e/0x1760
[ 622.110699][ T8504] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 622.110729][ T8504] ? __pfx_inode_dio_wait+0x10/0x10
[ 622.110763][ T8504] ? __pfx_gfs2_dir_read+0x10/0x10
[ 622.110796][ T8504] ? gfs2_glock_wait+0x212/0x2a0
[ 622.110820][ T8504] gfs2_readdir+0x16c/0x1e0
[ 622.110842][ T8504] ? __pfx_gfs2_readdir+0x10/0x10
[ 622.110858][ T8504] ? down_read_killable+0x14c/0x220
[ 622.110885][ T8504] ? iterate_dir+0x3a5/0x580
[ 622.110904][ T8504] ? apparmor_file_permission+0x1f4/0x300
[ 622.110937][ T8504] iterate_dir+0x3a5/0x580
[ 622.110961][ T8504] __se_sys_getdents64+0xf1/0x280
[ 622.110984][ T8504] ? __pfx___se_sys_getdents64+0x10/0x10
[ 622.111003][ T8504] ? __pfx_filldir64+0x10/0x10
[ 622.111035][ T8504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 622.111056][ T8504] do_syscall_64+0x15f/0xf80
[ 622.111080][ T8504] ? clear_bhb_loop+0x40/0x90
[ 622.111103][ T8504] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 622.111122][ T8504] RIP: 0033:0x7f2e1378eed9
[ 622.111147][ T8504] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 622.111163][ T8504] RSP: 002b:00007f2e1375f1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 622.111184][ T8504] RAX: ffffffffffffffda RBX: 00007f2e1384ce28 RCX: 00007f2e1378eed9
[ 622.111199][ T8504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 622.111211][ T8504] RBP: 00007f2e1384ce20 R08: 38203a6b63617473 R09: 38203a6b63617473
[ 622.111224][ T8504] R10: 38203a6b63617473 R11: 0000000000000246 R12: 00007f2e1381db34
[ 622.111238][ T8504] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500
[ 622.111269][ T8504]
[ 622.111276][ T8504] gfs2: fsid=syz:syz.s: about to withdraw this file system
[ 622.111342][ T32] gfs2: fsid=syz:syz.s: file system withdrawn
[ 622.249843][ T7910] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[ 622.826186][ T8508] loop0: detected capacity change from 0 to 32768
[ 622.841397][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.842516][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.843372][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.843551][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.844453][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.846544][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.847244][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.848370][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.849048][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.850199][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.850892][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.851544][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.852256][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.852914][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.853607][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.854255][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.856815][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.858301][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.860753][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.861481][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.863662][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.864328][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.866656][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.867449][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.868216][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.868960][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.869680][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.871695][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.873350][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.874073][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.876463][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.877402][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.877722][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.878214][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.879137][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.880859][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.890257][ T8508] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 622.890277][ T8508] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 622.919375][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.932469][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.933589][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.936249][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.936548][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.936830][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.937062][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.937300][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.937549][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.945861][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.954400][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.956865][ T8508] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 2ms
[ 622.957888][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.960706][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.980524][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 622.984210][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.000171][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.002291][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.014543][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.023844][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.032347][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.035000][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.041449][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.070756][ T8508] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 623.075149][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.076989][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.080823][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.081747][ T8508] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[ 623.081765][ T8508] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590
[ 623.081793][ T8508] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
[ 623.081821][ T8508] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:8508 [syz-executor258] iterate_dir+0x3a5/0x580
[ 623.081853][ T8508] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
executing program
[ 623.081882][ T8508] CPU: 1 UID: 0 PID: 8508 Comm: syz-executor258 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 623.081904][ T8508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 623.081915][ T8508] Call Trace:
[ 623.081923][ T8508]
[ 623.081931][ T8508] dump_stack_lvl+0xe8/0x150
[ 623.081959][ T8508] gfs2_withdraw+0xc3/0x1b0
[ 623.081982][ T8508] gfs2_dirent_scan+0x545/0x690
[ 623.082007][ T8508] ? __pfx_gfs2_dirent_gather+0x10/0x10
[ 623.082031][ T8508] gfs2_dir_read+0x78e/0x1760
[ 623.082057][ T8508] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 623.082087][ T8508] ? __pfx_inode_dio_wait+0x10/0x10
[ 623.082122][ T8508] ? __pfx_gfs2_dir_read+0x10/0x10
[ 623.082154][ T8508] ? gfs2_glock_wait+0x212/0x2a0
[ 623.082179][ T8508] gfs2_readdir+0x16c/0x1e0
[ 623.082202][ T8508] ? __pfx_gfs2_readdir+0x10/0x10
[ 623.082218][ T8508] ? down_read_killable+0x14c/0x220
[ 623.082244][ T8508] ? iterate_dir+0x3a5/0x580
[ 623.082263][ T8508] ? apparmor_file_permission+0x1f4/0x300
[ 623.082296][ T8508] iterate_dir+0x3a5/0x580
[ 623.082319][ T8508] __se_sys_getdents64+0xf1/0x280
[ 623.082342][ T8508] ? __pfx___se_sys_getdents64+0x10/0x10
[ 623.082360][ T8508] ? __pfx_filldir64+0x10/0x10
[ 623.082385][ T8508] ? rcu_is_watching+0x15/0xb0
[ 623.082417][ T8508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 623.082438][ T8508] do_syscall_64+0x15f/0xf80
[ 623.082460][ T8508] ? trace_irq_disable+0x3b/0x140
[ 623.082488][ T8508] ? clear_bhb_loop+0x40/0x90
[ 623.082512][ T8508] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 623.082531][ T8508] RIP: 0033:0x7f2e1378eed9
[ 623.082548][ T8508] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 623.082564][ T8508] RSP: 002b:00007f2e1375f1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 623.082585][ T8508] RAX: ffffffffffffffda RBX: 00007f2e1384ce28 RCX: 00007f2e1378eed9
[ 623.082600][ T8508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 623.082618][ T8508] RBP: 00007f2e1384ce20 R08: 38203a6b63617473 R09: 38203a6b63617473
[ 623.082631][ T8508] R10: 38203a6b63617473 R11: 0000000000000246 R12: 00007f2e1381db34
[ 623.082645][ T8508] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500
[ 623.082676][ T8508]
[ 623.082694][ T8508] gfs2: fsid=syz:syz.s: about to withdraw this file system
[ 623.082754][ T32] gfs2: fsid=syz:syz.s: file system withdrawn
[ 623.234319][ T7910] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[ 623.736514][ T8512] loop0: detected capacity change from 0 to 32768
[ 623.738569][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.742195][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.742891][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.743629][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.744402][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.749151][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.750551][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.751899][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.752568][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.753611][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.754304][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.755719][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.757757][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.758711][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.759532][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.760185][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.760852][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.762174][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.763741][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.764423][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.767137][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.767815][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.768488][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.769135][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.769829][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.770516][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.771296][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.771970][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.773491][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.774143][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.778014][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.779595][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.779707][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.779802][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.780228][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.781815][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.883092][ T8512] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 623.883112][ T8512] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 623.903800][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.913409][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.914265][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.915942][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.916418][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.916727][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.917042][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.917378][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.917736][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.918309][ T8512] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms
[ 623.919145][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.919535][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.939409][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.940526][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.962780][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.966189][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.968943][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.982493][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 623.985098][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.021493][ T8512] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 624.027756][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.028550][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.030251][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.031602][ T8512] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[ 624.031622][ T8512] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590
[ 624.031651][ T8512] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
[ 624.031679][ T8512] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:8512 [syz-executor258] iterate_dir+0x3a5/0x580
[ 624.031713][ T8512] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[ 624.031741][ T8512] CPU: 1 UID: 0 PID: 8512 Comm: syz-executor258 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 624.031763][ T8512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 624.031775][ T8512] Call Trace:
[ 624.031788][ T8512]
[ 624.031797][ T8512] dump_stack_lvl+0xe8/0x150
[ 624.031825][ T8512] gfs2_withdraw+0xc3/0x1b0
[ 624.031849][ T8512] gfs2_dirent_scan+0x545/0x690
[ 624.031872][ T8512] ? __pfx_gfs2_dirent_gather+0x10/0x10
[ 624.031897][ T8512] gfs2_dir_read+0x78e/0x1760
[ 624.031923][ T8512] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 624.031954][ T8512] ? __pfx_inode_dio_wait+0x10/0x10
[ 624.031987][ T8512] ? __pfx_gfs2_dir_read+0x10/0x10
[ 624.032020][ T8512] ? gfs2_glock_wait+0x212/0x2a0
[ 624.032045][ T8512] gfs2_readdir+0x16c/0x1e0
[ 624.032067][ T8512] ? __pfx_gfs2_readdir+0x10/0x10
[ 624.032083][ T8512] ? down_read_killable+0x14c/0x220
[ 624.032111][ T8512] ? iterate_dir+0x3a5/0x580
[ 624.032130][ T8512] ? apparmor_file_permission+0x1f4/0x300
[ 624.032162][ T8512] iterate_dir+0x3a5/0x580
[ 624.032185][ T8512] __se_sys_getdents64+0xf1/0x280
executing program
[ 624.032208][ T8512] ? __pfx___se_sys_getdents64+0x10/0x10
[ 624.032235][ T8512] ? __pfx_filldir64+0x10/0x10
[ 624.032256][ T8512] ? rcu_is_watching+0x15/0xb0
[ 624.032288][ T8512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 624.032309][ T8512] do_syscall_64+0x15f/0xf80
[ 624.032331][ T8512] ? trace_irq_disable+0x3b/0x140
[ 624.032358][ T8512] ? clear_bhb_loop+0x40/0x90
[ 624.032382][ T8512] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 624.032401][ T8512] RIP: 0033:0x7f2e1378eed9
[ 624.032419][ T8512] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 624.032435][ T8512] RSP: 002b:00007f2e1375f1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 624.032456][ T8512] RAX: ffffffffffffffda RBX: 00007f2e1384ce28 RCX: 00007f2e1378eed9
[ 624.032471][ T8512] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 624.032481][ T8512] RBP: 00007f2e1384ce20 R08: 38203a6b63617473 R09: 38203a6b63617473
[ 624.032495][ T8512] R10: 38203a6b63617473 R11: 0000000000000246 R12: 00007f2e1381db34
[ 624.032508][ T8512] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500
[ 624.032539][ T8512]
[ 624.034212][ T8512] gfs2: fsid=syz:syz.s: about to withdraw this file system
[ 624.034287][ T32] gfs2: fsid=syz:syz.s: file system withdrawn
[ 624.240048][ T7910] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[ 624.540022][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 624.540116][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[ 624.708312][ T8516] loop0: detected capacity change from 0 to 32768
[ 624.711870][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.716213][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.718246][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.720592][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.722173][ T8516] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 624.722189][ T8516] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 624.729683][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.730555][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.732018][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.732259][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.738947][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.740814][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.740857][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.742356][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.742808][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.744581][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.745486][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.746404][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.746915][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.747390][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.747582][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.748488][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.748535][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.749541][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.750196][ T8516] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms
[ 624.752594][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.752715][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.753708][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.756126][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.756808][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.759194][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.760031][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.762206][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.762881][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.763513][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.764114][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.765117][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.767010][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.768436][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.769117][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.771358][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.773600][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.774300][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.775085][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.776465][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.779364][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.783427][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.784133][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.786728][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.787286][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.787810][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.789607][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.789652][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.789681][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.792973][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.797323][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.817186][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.818078][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.849094][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.851728][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.853792][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.871315][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.872859][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.908746][ T8516] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 624.910043][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.910757][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.925741][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.926740][ T8516] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block)
executing program
[ 624.926759][ T8516] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590
[ 624.926787][ T8516] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
[ 624.926816][ T8516] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:8516 [syz-executor258] iterate_dir+0x3a5/0x580
[ 624.926849][ T8516] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[ 624.926877][ T8516] CPU: 1 UID: 0 PID: 8516 Comm: syz-executor258 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 624.926899][ T8516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 624.926911][ T8516] Call Trace:
[ 624.926919][ T8516]
[ 624.926927][ T8516] dump_stack_lvl+0xe8/0x150
[ 624.926955][ T8516] gfs2_withdraw+0xc3/0x1b0
[ 624.926978][ T8516] gfs2_dirent_scan+0x545/0x690
[ 624.927060][ T8516] ? __pfx_gfs2_dirent_gather+0x10/0x10
[ 624.927086][ T8516] gfs2_dir_read+0x78e/0x1760
[ 624.927112][ T8516] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 624.927142][ T8516] ? __pfx_inode_dio_wait+0x10/0x10
[ 624.927178][ T8516] ? __pfx_gfs2_dir_read+0x10/0x10
[ 624.927219][ T8516] ? gfs2_glock_wait+0x212/0x2a0
[ 624.927244][ T8516] gfs2_readdir+0x16c/0x1e0
[ 624.927266][ T8516] ? __pfx_gfs2_readdir+0x10/0x10
[ 624.927283][ T8516] ? down_read_killable+0x14c/0x220
[ 624.927309][ T8516] ? iterate_dir+0x3a5/0x580
[ 624.927328][ T8516] ? apparmor_file_permission+0x1f4/0x300
[ 624.927365][ T8516] iterate_dir+0x3a5/0x580
[ 624.927389][ T8516] __se_sys_getdents64+0xf1/0x280
[ 624.927412][ T8516] ? __pfx___se_sys_getdents64+0x10/0x10
[ 624.927431][ T8516] ? __pfx_filldir64+0x10/0x10
[ 624.927450][ T8516] ? rcu_is_watching+0x15/0xb0
[ 624.927485][ T8516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 624.927506][ T8516] do_syscall_64+0x15f/0xf80
[ 624.927528][ T8516] ? trace_irq_disable+0x3b/0x140
[ 624.927554][ T8516] ? clear_bhb_loop+0x40/0x90
[ 624.927577][ T8516] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 624.927596][ T8516] RIP: 0033:0x7f2e1378eed9
[ 624.927615][ T8516] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 624.927632][ T8516] RSP: 002b:00007f2e1375f1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 624.927653][ T8516] RAX: ffffffffffffffda RBX: 00007f2e1384ce28 RCX: 00007f2e1378eed9
[ 624.927668][ T8516] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 624.927679][ T8516] RBP: 00007f2e1384ce20 R08: 38203a6b63617473 R09: 38203a6b63617473
[ 624.927694][ T8516] R10: 38203a6b63617473 R11: 0000000000000246 R12: 00007f2e1381db34
[ 624.927707][ T8516] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500
[ 624.927738][ T8516]
[ 624.927870][ T8516] gfs2: fsid=syz:syz.s: about to withdraw this file system
[ 624.927933][ T32] gfs2: fsid=syz:syz.s: file system withdrawn
[ 624.957510][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 624.960059][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.120417][ T7910] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[ 625.646310][ T8520] loop0: detected capacity change from 0 to 32768
[ 625.648753][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.651812][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.652309][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.652790][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.653245][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.653943][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.655650][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.656990][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.657700][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.658809][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.659543][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.662624][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.663330][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.664026][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.665466][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.666503][ T8520] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 625.666518][ T8520] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 625.678382][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.678697][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.688905][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.689774][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.690567][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.690668][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.691712][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.691940][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.692182][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.692451][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.692690][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.693582][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.694176][ T8520] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms
[ 625.697175][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.697228][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.698957][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.699789][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.702015][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.702832][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.705928][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.707867][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.710845][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.713282][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.714106][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.718263][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.719243][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.721468][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.723809][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.724575][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.728871][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.729594][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.731686][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.734065][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.735221][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.735271][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.737485][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.742081][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.747467][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.750265][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.788973][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.793471][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.795422][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.823948][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.827990][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.861268][ T8520] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 625.865725][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.866528][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.884842][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 625.886456][ T8520] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[ 625.886475][ T8520] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590
executing program
[ 625.886503][ T8520] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
[ 625.886531][ T8520] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:8520 [syz-executor258] iterate_dir+0x3a5/0x580
[ 625.886569][ T8520] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[ 625.886598][ T8520] CPU: 1 UID: 0 PID: 8520 Comm: syz-executor258 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 625.886620][ T8520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 625.886632][ T8520] Call Trace:
[ 625.886640][ T8520]
[ 625.886648][ T8520] dump_stack_lvl+0xe8/0x150
[ 625.886674][ T8520] gfs2_withdraw+0xc3/0x1b0
[ 625.886698][ T8520] gfs2_dirent_scan+0x545/0x690
[ 625.886722][ T8520] ? __pfx_gfs2_dirent_gather+0x10/0x10
[ 625.886746][ T8520] gfs2_dir_read+0x78e/0x1760
[ 625.886772][ T8520] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 625.886804][ T8520] ? __pfx_inode_dio_wait+0x10/0x10
[ 625.886838][ T8520] ? __pfx_gfs2_dir_read+0x10/0x10
[ 625.886872][ T8520] ? gfs2_glock_wait+0x212/0x2a0
[ 625.886897][ T8520] gfs2_readdir+0x16c/0x1e0
[ 625.886919][ T8520] ? __pfx_gfs2_readdir+0x10/0x10
[ 625.886936][ T8520] ? down_read_killable+0x14c/0x220
[ 625.886962][ T8520] ? iterate_dir+0x3a5/0x580
[ 625.886981][ T8520] ? apparmor_file_permission+0x1f4/0x300
[ 625.887014][ T8520] iterate_dir+0x3a5/0x580
[ 625.887038][ T8520] __se_sys_getdents64+0xf1/0x280
[ 625.887061][ T8520] ? __pfx___se_sys_getdents64+0x10/0x10
[ 625.887080][ T8520] ? __pfx_filldir64+0x10/0x10
[ 625.887101][ T8520] ? rcu_is_watching+0x15/0xb0
[ 625.887132][ T8520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 625.887153][ T8520] do_syscall_64+0x15f/0xf80
[ 625.887175][ T8520] ? trace_irq_disable+0x3b/0x140
[ 625.887203][ T8520] ? clear_bhb_loop+0x40/0x90
[ 625.887227][ T8520] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 625.887246][ T8520] RIP: 0033:0x7f2e1378eed9
[ 625.887265][ T8520] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 625.887282][ T8520] RSP: 002b:00007f2e1375f1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 625.887306][ T8520] RAX: ffffffffffffffda RBX: 00007f2e1384ce28 RCX: 00007f2e1378eed9
[ 625.887321][ T8520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 625.887334][ T8520] RBP: 00007f2e1384ce20 R08: 38203a6b63617473 R09: 38203a6b63617473
[ 625.887348][ T8520] R10: 38203a6b63617473 R11: 0000000000000246 R12: 00007f2e1381db34
[ 625.887362][ T8520] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500
[ 625.887400][ T8520]
[ 625.887421][ T8520] gfs2: fsid=syz:syz.s: about to withdraw this file system
[ 625.887497][ T32] gfs2: fsid=syz:syz.s: file system withdrawn
[ 626.042645][ T7910] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[ 626.560468][ T8524] loop0: detected capacity change from 0 to 32768
[ 626.563371][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.567267][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.568032][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.568906][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.569751][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.570454][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.571117][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.572322][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.572982][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.574345][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.577374][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.579639][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.580818][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.581913][ T8524] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 626.581929][ T8524] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 626.590571][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.595441][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.596265][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.596924][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.597685][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.599608][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.600709][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.609813][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.610622][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.611648][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.612413][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.613780][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.616157][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.617023][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.617658][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.617773][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.618084][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.618963][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.619297][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.619592][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.620018][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.620051][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.621278][ T8524] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms
[ 626.622053][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.623008][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.624571][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.626090][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.627393][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.629639][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.630882][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.632500][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.633895][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.634515][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.639096][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.639147][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.639177][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.642215][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.643016][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.652302][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.653022][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.704780][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.706015][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.708469][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.709092][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.723464][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.754740][ T8524] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 626.758551][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
executing program
[ 626.759312][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.771705][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 626.774207][ T8524] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[ 626.774233][ T8524] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590
[ 626.774275][ T8524] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
[ 626.774305][ T8524] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:8524 [syz-executor258] iterate_dir+0x3a5/0x580
[ 626.774337][ T8524] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[ 626.774366][ T8524] CPU: 1 UID: 0 PID: 8524 Comm: syz-executor258 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 626.774388][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 626.774400][ T8524] Call Trace:
[ 626.774408][ T8524]
[ 626.774416][ T8524] dump_stack_lvl+0xe8/0x150
[ 626.774443][ T8524] gfs2_withdraw+0xc3/0x1b0
[ 626.774467][ T8524] gfs2_dirent_scan+0x545/0x690
[ 626.774490][ T8524] ? __pfx_gfs2_dirent_gather+0x10/0x10
[ 626.774515][ T8524] gfs2_dir_read+0x78e/0x1760
[ 626.774541][ T8524] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 626.774572][ T8524] ? __pfx_inode_dio_wait+0x10/0x10
[ 626.774609][ T8524] ? __pfx_gfs2_dir_read+0x10/0x10
[ 626.774637][ T8524] ? gfs2_glock_wait+0x212/0x2a0
[ 626.774662][ T8524] gfs2_readdir+0x16c/0x1e0
[ 626.774684][ T8524] ? __pfx_gfs2_readdir+0x10/0x10
[ 626.774701][ T8524] ? down_read_killable+0x14c/0x220
[ 626.774727][ T8524] ? iterate_dir+0x3a5/0x580
[ 626.774746][ T8524] ? apparmor_file_permission+0x1f4/0x300
[ 626.774778][ T8524] iterate_dir+0x3a5/0x580
[ 626.774803][ T8524] __se_sys_getdents64+0xf1/0x280
[ 626.774825][ T8524] ? __pfx___se_sys_getdents64+0x10/0x10
[ 626.774845][ T8524] ? __pfx_filldir64+0x10/0x10
[ 626.774865][ T8524] ? rcu_is_watching+0x15/0xb0
[ 626.774898][ T8524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 626.774919][ T8524] do_syscall_64+0x15f/0xf80
[ 626.774941][ T8524] ? trace_irq_disable+0x3b/0x140
[ 626.774970][ T8524] ? clear_bhb_loop+0x40/0x90
[ 626.774993][ T8524] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 626.775012][ T8524] RIP: 0033:0x7f2e1378eed9
[ 626.775030][ T8524] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 626.775047][ T8524] RSP: 002b:00007f2e1375f1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 626.775068][ T8524] RAX: ffffffffffffffda RBX: 00007f2e1384ce28 RCX: 00007f2e1378eed9
[ 626.775082][ T8524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 626.775099][ T8524] RBP: 00007f2e1384ce20 R08: 38203a6b63617473 R09: 38203a6b63617473
[ 626.775113][ T8524] R10: 38203a6b63617473 R11: 0000000000000246 R12: 00007f2e1381db34
[ 626.775127][ T8524] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500
[ 626.775158][ T8524]
[ 626.780386][ T8524] gfs2: fsid=syz:syz.s: about to withdraw this file system
[ 626.780455][ T32] gfs2: fsid=syz:syz.s: file system withdrawn
[ 626.935965][ T7910] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[ 627.465919][ T8528] loop0: detected capacity change from 0 to 32768
[ 627.468099][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.474420][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.483985][ T8528] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 627.484004][ T8528] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 627.503293][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.510361][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.511235][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.511836][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.512437][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.513023][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.514073][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.515636][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.516624][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.517243][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.517833][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.518435][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.519010][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.519635][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.520233][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.520933][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.521814][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.523483][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.523522][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.524598][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.527913][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.529537][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.529837][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.530118][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.530411][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.531851][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.533393][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.533768][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.534310][ T8528] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms
[ 627.544248][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.552122][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.552157][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.566771][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.566820][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.568096][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.571422][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.572405][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.575899][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.576728][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.577449][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.580445][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.581142][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.581831][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.584367][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.584409][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.586675][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.586746][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.592636][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.595110][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.599646][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.601904][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.630493][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.631252][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.680553][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.709054][ T8528] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 627.711059][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.711820][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.715043][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 627.719859][ T8528] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[ 627.719880][ T8528] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590
[ 627.719908][ T8528] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
[ 627.719932][ T8528] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:8528 [syz-executor258] iterate_dir+0x3a5/0x580
[ 627.719959][ T8528] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[ 627.719983][ T8528] CPU: 1 UID: 0 PID: 8528 Comm: syz-executor258 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 627.720001][ T8528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 627.720013][ T8528] Call Trace:
[ 627.720020][ T8528]
[ 627.720029][ T8528] dump_stack_lvl+0xe8/0x150
[ 627.720056][ T8528] gfs2_withdraw+0xc3/0x1b0
[ 627.720079][ T8528] gfs2_dirent_scan+0x545/0x690
[ 627.720103][ T8528] ? __pfx_gfs2_dirent_gather+0x10/0x10
[ 627.720128][ T8528] gfs2_dir_read+0x78e/0x1760
[ 627.720166][ T8528] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 627.720196][ T8528] ? __pfx_inode_dio_wait+0x10/0x10
[ 627.720230][ T8528] ? __pfx_gfs2_dir_read+0x10/0x10
[ 627.720263][ T8528] ? gfs2_glock_wait+0x212/0x2a0
[ 627.720287][ T8528] gfs2_readdir+0x16c/0x1e0
[ 627.720309][ T8528] ? __pfx_gfs2_readdir+0x10/0x10
[ 627.720326][ T8528] ? down_read_killable+0x14c/0x220
[ 627.720352][ T8528] ? iterate_dir+0x3a5/0x580
[ 627.720372][ T8528] ? apparmor_file_permission+0x1f4/0x300
[ 627.720403][ T8528] iterate_dir+0x3a5/0x580
[ 627.720427][ T8528] __se_sys_getdents64+0xf1/0x280
[ 627.720451][ T8528] ? __pfx___se_sys_getdents64+0x10/0x10
[ 627.720469][ T8528] ? __pfx_filldir64+0x10/0x10
[ 627.720489][ T8528] ? rcu_is_watching+0x15/0xb0
[ 627.720522][ T8528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 627.720543][ T8528] do_syscall_64+0x15f/0xf80
[ 627.720565][ T8528] ? trace_irq_disable+0x3b/0x140
[ 627.720592][ T8528] ? clear_bhb_loop+0x40/0x90
[ 627.720616][ T8528] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 627.720635][ T8528] RIP: 0033:0x7f2e1378eed9
[ 627.720653][ T8528] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 627.720669][ T8528] RSP: 002b:00007f2e1375f1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 627.720688][ T8528] RAX: ffffffffffffffda RBX: 00007f2e1384ce28 RCX: 00007f2e1378eed9
[ 627.720703][ T8528] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 627.720714][ T8528] RBP: 00007f2e1384ce20 R08: 38203a6b63617473 R09: 38203a6b63617473
[ 627.720729][ T8528] R10: 38203a6b63617473 R11: 0000000000000246 R12: 00007f2e1381db34
[ 627.720742][ T8528] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500
[ 627.720772][ T8528]
[ 627.720794][ T8528] gfs2: fsid=syz:syz.s: about to withdraw this file system
[ 627.720860][ T32] gfs2: fsid=syz:syz.s: file system withdrawn
[ 628.239478][ T7910] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
executing program
[ 628.581943][ T8533] loop0: detected capacity change from 0 to 32768
[ 628.593780][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.599288][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.599970][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.600682][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.601345][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.602071][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.602725][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.603851][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.604588][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.606749][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.607459][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.608236][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.608899][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.609569][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.610219][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.610882][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.611660][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.612352][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.613776][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.614434][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.620163][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.620814][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.621417][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.621996][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.622602][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.623507][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.624150][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.625870][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.627440][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.628104][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.628860][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.629666][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.629961][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.630416][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.631315][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.632790][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.720202][ T8533] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 628.720221][ T8533] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 628.729803][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.739234][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.740125][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.741210][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.741533][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.741835][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.742149][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.742472][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.742844][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.743413][ T8533] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms
[ 628.744243][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.746607][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.765340][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.766886][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.784814][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.787579][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.789786][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.803972][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.807153][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.839457][ T8533] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 628.843040][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.844286][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.870305][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 628.871769][ T8533] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[ 628.871788][ T8533] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590
[ 628.871828][ T8533] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
[ 628.871856][ T8533] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:8533 [syz-executor258] iterate_dir+0x3a5/0x580
[ 628.871890][ T8533] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[ 628.871918][ T8533] CPU: 0 UID: 0 PID: 8533 Comm: syz-executor258 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 628.871940][ T8533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 628.871952][ T8533] Call Trace:
[ 628.871960][ T8533]
[ 628.871968][ T8533] dump_stack_lvl+0xe8/0x150
[ 628.871995][ T8533] gfs2_withdraw+0xc3/0x1b0
[ 628.872018][ T8533] gfs2_dirent_scan+0x545/0x690
[ 628.872042][ T8533] ? __pfx_gfs2_dirent_gather+0x10/0x10
[ 628.872066][ T8533] gfs2_dir_read+0x78e/0x1760
[ 628.872092][ T8533] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 628.872122][ T8533] ? __pfx_inode_dio_wait+0x10/0x10
executing program
[ 628.872156][ T8533] ? __pfx_gfs2_dir_read+0x10/0x10
[ 628.872190][ T8533] ? gfs2_glock_wait+0x212/0x2a0
[ 628.872215][ T8533] gfs2_readdir+0x16c/0x1e0
[ 628.872236][ T8533] ? __pfx_gfs2_readdir+0x10/0x10
[ 628.872252][ T8533] ? down_read_killable+0x14c/0x220
[ 628.872279][ T8533] ? iterate_dir+0x3a5/0x580
[ 628.872299][ T8533] ? apparmor_file_permission+0x1f4/0x300
[ 628.872329][ T8533] iterate_dir+0x3a5/0x580
[ 628.872352][ T8533] __se_sys_getdents64+0xf1/0x280
[ 628.872376][ T8533] ? __pfx___se_sys_getdents64+0x10/0x10
[ 628.872395][ T8533] ? __pfx_filldir64+0x10/0x10
[ 628.872415][ T8533] ? rcu_is_watching+0x15/0xb0
[ 628.872448][ T8533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 628.872469][ T8533] do_syscall_64+0x15f/0xf80
[ 628.872491][ T8533] ? trace_irq_disable+0x3b/0x140
[ 628.872519][ T8533] ? clear_bhb_loop+0x40/0x90
[ 628.872543][ T8533] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 628.872562][ T8533] RIP: 0033:0x7f2e1378eed9
[ 628.872578][ T8533] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 628.872595][ T8533] RSP: 002b:00007f2e1375f1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 628.872616][ T8533] RAX: ffffffffffffffda RBX: 00007f2e1384ce28 RCX: 00007f2e1378eed9
[ 628.872630][ T8533] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 628.872641][ T8533] RBP: 00007f2e1384ce20 R08: 38203a6b63617473 R09: 38203a6b63617473
[ 628.872655][ T8533] R10: 38203a6b63617473 R11: 0000000000000246 R12: 00007f2e1381db34
[ 628.872668][ T8533] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500
[ 628.872699][ T8533]
[ 628.872707][ T8533] gfs2: fsid=syz:syz.s: about to withdraw this file system
[ 628.872855][ T10] gfs2: fsid=syz:syz.s: file system withdrawn
[ 629.027606][ T7910] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[ 629.521153][ T8539] loop0: detected capacity change from 0 to 32768
[ 629.523125][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.527903][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.528698][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.529411][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.530081][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.530758][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.531618][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.532730][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.533405][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.534453][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.540774][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.541502][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.542419][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.543190][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.544763][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.545530][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.546916][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.549177][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.552170][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.553793][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.556193][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.556885][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.557600][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.558280][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.558977][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.559833][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.560628][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.561322][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.562711][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.563669][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.564318][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.566626][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.566955][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.567409][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.569130][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.570087][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.607346][ T8539] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 629.607365][ T8539] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 629.614180][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.627029][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.627865][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.630401][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.630681][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.631346][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.631775][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.634426][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.635056][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.635894][ T8539] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms
[ 629.637168][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.637279][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.651088][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.651970][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.671905][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.672783][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.684552][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.685142][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.685794][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.692025][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.723384][ T8539] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 629.725237][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.726678][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.728411][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 629.729312][ T8539] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block)
executing program
[ 629.729329][ T8539] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590
[ 629.729356][ T8539] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
[ 629.729384][ T8539] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:8539 [syz-executor258] iterate_dir+0x3a5/0x580
[ 629.729418][ T8539] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[ 629.729446][ T8539] CPU: 0 UID: 0 PID: 8539 Comm: syz-executor258 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 629.729468][ T8539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 629.729480][ T8539] Call Trace:
[ 629.729488][ T8539]
[ 629.729496][ T8539] dump_stack_lvl+0xe8/0x150
[ 629.729524][ T8539] gfs2_withdraw+0xc3/0x1b0
[ 629.729547][ T8539] gfs2_dirent_scan+0x545/0x690
[ 629.729570][ T8539] ? __pfx_gfs2_dirent_gather+0x10/0x10
[ 629.729595][ T8539] gfs2_dir_read+0x78e/0x1760
[ 629.729622][ T8539] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 629.729651][ T8539] ? __pfx_inode_dio_wait+0x10/0x10
[ 629.729686][ T8539] ? __pfx_gfs2_dir_read+0x10/0x10
[ 629.729728][ T8539] ? gfs2_glock_wait+0x212/0x2a0
[ 629.729752][ T8539] gfs2_readdir+0x16c/0x1e0
[ 629.729774][ T8539] ? __pfx_gfs2_readdir+0x10/0x10
[ 629.729791][ T8539] ? down_read_killable+0x14c/0x220
[ 629.729818][ T8539] ? iterate_dir+0x3a5/0x580
[ 629.729837][ T8539] ? apparmor_file_permission+0x1f4/0x300
[ 629.729869][ T8539] iterate_dir+0x3a5/0x580
[ 629.729897][ T8539] __se_sys_getdents64+0xf1/0x280
[ 629.729919][ T8539] ? __pfx___se_sys_getdents64+0x10/0x10
[ 629.729938][ T8539] ? __pfx_filldir64+0x10/0x10
[ 629.729958][ T8539] ? rcu_is_watching+0x15/0xb0
[ 629.729990][ T8539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 629.730011][ T8539] do_syscall_64+0x15f/0xf80
[ 629.730033][ T8539] ? trace_irq_disable+0x3b/0x140
[ 629.730061][ T8539] ? clear_bhb_loop+0x40/0x90
[ 629.730084][ T8539] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 629.730103][ T8539] RIP: 0033:0x7f2e1378eed9
[ 629.730121][ T8539] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 629.730137][ T8539] RSP: 002b:00007f2e1375f1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 629.730157][ T8539] RAX: ffffffffffffffda RBX: 00007f2e1384ce28 RCX: 00007f2e1378eed9
[ 629.730171][ T8539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 629.730183][ T8539] RBP: 00007f2e1384ce20 R08: 38203a6b63617473 R09: 38203a6b63617473
[ 629.730197][ T8539] R10: 38203a6b63617473 R11: 0000000000000246 R12: 00007f2e1381db34
[ 629.730211][ T8539] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500
[ 629.730241][ T8539]
[ 629.730260][ T8539] gfs2: fsid=syz:syz.s: about to withdraw this file system
[ 629.730319][ T10] gfs2: fsid=syz:syz.s: file system withdrawn
[ 629.881809][ T7910] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[ 630.405832][ T8544] loop0: detected capacity change from 0 to 32768
[ 630.412582][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.413379][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.416878][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.417061][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.418092][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.420486][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.421479][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.423733][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.424510][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.427208][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.427940][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.428604][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.429431][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.430140][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.430943][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.431649][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.432435][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.433297][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.433972][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.437698][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.438459][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.441072][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.441925][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.442620][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.443338][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.444090][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.445253][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.446904][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.448319][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.449889][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.450566][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.451350][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.452240][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.452553][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.453085][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.454026][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.458362][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.464244][ T8544] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 630.464263][ T8544] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 630.491851][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.515561][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.516427][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.517528][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.517772][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.518005][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.518258][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.518492][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.518798][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.519457][ T8544] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms
[ 630.521923][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.522134][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.528164][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.532432][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.570302][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.574760][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.593264][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.593987][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.597399][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.599491][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.603723][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.610091][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.611570][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.612613][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.616216][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.617674][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.619801][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.619843][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.625869][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.626354][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.626383][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.628137][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.629372][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.631715][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.632433][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.634723][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.636955][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
executing program
[ 630.642241][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.643220][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.645415][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.647308][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.650052][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.652404][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.653132][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.656819][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.658147][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.658895][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.661483][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.662801][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.662928][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.663330][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.663457][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.667152][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.671914][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.746149][ T8544] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 630.747492][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.748242][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.749866][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 630.750750][ T8544] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[ 630.750767][ T8544] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590
[ 630.750794][ T8544] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
[ 630.750822][ T8544] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:8544 [syz-executor258] iterate_dir+0x3a5/0x580
[ 630.750854][ T8544] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[ 630.750883][ T8544] CPU: 0 UID: 0 PID: 8544 Comm: syz-executor258 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 630.750905][ T8544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 630.750916][ T8544] Call Trace:
[ 630.750924][ T8544]
[ 630.750931][ T8544] dump_stack_lvl+0xe8/0x150
[ 630.750959][ T8544] gfs2_withdraw+0xc3/0x1b0
[ 630.750983][ T8544] gfs2_dirent_scan+0x545/0x690
[ 630.751006][ T8544] ? __pfx_gfs2_dirent_gather+0x10/0x10
[ 630.751031][ T8544] gfs2_dir_read+0x78e/0x1760
[ 630.751057][ T8544] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 630.751088][ T8544] ? __pfx_inode_dio_wait+0x10/0x10
[ 630.751120][ T8544] ? __pfx_gfs2_dir_read+0x10/0x10
[ 630.751151][ T8544] ? gfs2_glock_wait+0x212/0x2a0
[ 630.751177][ T8544] gfs2_readdir+0x16c/0x1e0
[ 630.751198][ T8544] ? __pfx_gfs2_readdir+0x10/0x10
[ 630.751215][ T8544] ? down_read_killable+0x14c/0x220
[ 630.751245][ T8544] ? iterate_dir+0x3a5/0x580
[ 630.751265][ T8544] ? apparmor_file_permission+0x1f4/0x300
[ 630.751297][ T8544] iterate_dir+0x3a5/0x580
[ 630.751321][ T8544] __se_sys_getdents64+0xf1/0x280
[ 630.751343][ T8544] ? __pfx___se_sys_getdents64+0x10/0x10
[ 630.751362][ T8544] ? __pfx_filldir64+0x10/0x10
[ 630.751383][ T8544] ? rcu_is_watching+0x15/0xb0
[ 630.751415][ T8544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 630.751436][ T8544] do_syscall_64+0x15f/0xf80
[ 630.751465][ T8544] ? trace_irq_disable+0x3b/0x140
[ 630.751494][ T8544] ? clear_bhb_loop+0x40/0x90
[ 630.751517][ T8544] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 630.751536][ T8544] RIP: 0033:0x7f2e1378eed9
[ 630.751554][ T8544] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 630.751570][ T8544] RSP: 002b:00007f2e1375f1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 630.751590][ T8544] RAX: ffffffffffffffda RBX: 00007f2e1384ce28 RCX: 00007f2e1378eed9
[ 630.751604][ T8544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 630.751616][ T8544] RBP: 00007f2e1384ce20 R08: 38203a6b63617473 R09: 38203a6b63617473
[ 630.751630][ T8544] R10: 38203a6b63617473 R11: 0000000000000246 R12: 00007f2e1381db34
[ 630.751643][ T8544] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500
[ 630.751680][ T8544]
[ 630.751698][ T8544] gfs2: fsid=syz:syz.s: about to withdraw this file system
[ 630.751759][ T10] gfs2: fsid=syz:syz.s: file system withdrawn
[ 630.904153][ T7910] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[ 631.473831][ T8550] loop0: detected capacity change from 0 to 32768
[ 631.482329][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.488491][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.489240][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.489950][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.490581][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.492880][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.493523][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.497038][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.499377][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.502557][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.503425][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.504778][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.507052][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.508250][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.509073][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.509764][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.510504][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.511185][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.512632][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.513420][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.519777][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.520480][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.521154][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.522986][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.523756][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.527285][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.529943][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.531530][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.533086][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.535464][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.537082][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.539589][ T8550] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 631.539607][ T8550] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 631.542997][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.543335][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.543441][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.549791][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.551178][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.551630][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.567607][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.569907][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.571048][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.571369][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.573186][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.573529][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.573911][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.575404][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.577777][ T8550] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms
[ 631.578991][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.581870][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.583548][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.587054][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.615466][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.618456][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.650504][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.651783][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.658377][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.658427][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.659343][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.661502][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.662163][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.663145][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.666645][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.669656][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.670769][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.672943][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.673712][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.675213][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.677798][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.679800][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.680483][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.681157][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.682092][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.684848][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.686135][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.688634][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.689569][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.696417][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.697157][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.697898][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.700000][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.705288][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
executing program
[ 631.706226][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.707150][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.708571][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.710565][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.711261][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.713171][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.713213][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.713242][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.717230][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.720800][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.760387][ T8550] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 631.762810][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.766440][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.770261][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 631.772636][ T8550] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[ 631.772656][ T8550] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590
[ 631.772683][ T8550] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
[ 631.772711][ T8550] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:8550 [syz-executor258] iterate_dir+0x3a5/0x580
[ 631.772744][ T8550] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[ 631.772885][ T8550] CPU: 0 UID: 0 PID: 8550 Comm: syz-executor258 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 631.772907][ T8550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 631.772918][ T8550] Call Trace:
[ 631.772926][ T8550]
[ 631.772934][ T8550] dump_stack_lvl+0xe8/0x150
[ 631.772965][ T8550] gfs2_withdraw+0xc3/0x1b0
[ 631.772988][ T8550] gfs2_dirent_scan+0x545/0x690
[ 631.773012][ T8550] ? __pfx_gfs2_dirent_gather+0x10/0x10
[ 631.773037][ T8550] gfs2_dir_read+0x78e/0x1760
[ 631.773063][ T8550] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 631.773094][ T8550] ? __pfx_inode_dio_wait+0x10/0x10
[ 631.773128][ T8550] ? __pfx_gfs2_dir_read+0x10/0x10
[ 631.773161][ T8550] ? gfs2_glock_wait+0x212/0x2a0
[ 631.773186][ T8550] gfs2_readdir+0x16c/0x1e0
[ 631.773208][ T8550] ? __pfx_gfs2_readdir+0x10/0x10
[ 631.773225][ T8550] ? down_read_killable+0x14c/0x220
[ 631.773252][ T8550] ? iterate_dir+0x3a5/0x580
[ 631.773271][ T8550] ? apparmor_file_permission+0x1f4/0x300
[ 631.773304][ T8550] iterate_dir+0x3a5/0x580
[ 631.773327][ T8550] __se_sys_getdents64+0xf1/0x280
[ 631.773350][ T8550] ? __pfx___se_sys_getdents64+0x10/0x10
[ 631.773369][ T8550] ? __pfx_filldir64+0x10/0x10
[ 631.773390][ T8550] ? rcu_is_watching+0x15/0xb0
[ 631.773422][ T8550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 631.773443][ T8550] do_syscall_64+0x15f/0xf80
[ 631.773465][ T8550] ? trace_irq_disable+0x3b/0x140
[ 631.773493][ T8550] ? clear_bhb_loop+0x40/0x90
[ 631.773516][ T8550] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 631.773534][ T8550] RIP: 0033:0x7f2e1378eed9
[ 631.773552][ T8550] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 631.773569][ T8550] RSP: 002b:00007f2e1375f1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 631.773589][ T8550] RAX: ffffffffffffffda RBX: 00007f2e1384ce28 RCX: 00007f2e1378eed9
[ 631.773603][ T8550] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 631.773615][ T8550] RBP: 00007f2e1384ce20 R08: 38203a6b63617473 R09: 38203a6b63617473
[ 631.773629][ T8550] R10: 38203a6b63617473 R11: 0000000000000246 R12: 00007f2e1381db34
[ 631.773642][ T8550] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500
[ 631.773673][ T8550]
[ 631.773680][ T8550] gfs2: fsid=syz:syz.s: about to withdraw this file system
[ 631.773741][ T10] gfs2: fsid=syz:syz.s: file system withdrawn
[ 631.969264][ T7910] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[ 632.529029][ T8554] loop0: detected capacity change from 0 to 32768
[ 632.535122][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.535779][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.536416][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.537005][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.537623][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.538199][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.539250][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.539840][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.540781][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.541904][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.545077][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.546930][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.547779][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.547932][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.548805][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.549507][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.550193][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.550912][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.551613][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.552309][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.552993][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.553826][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.554498][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.557077][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.558676][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.559359][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.560142][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.560804][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.561494][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.562211][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.562918][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.563706][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.570516][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.572685][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.575067][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.576406][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.577041][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.579754][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.579825][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.582883][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.592684][ T8554] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 632.592704][ T8554] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 632.605457][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.621999][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.622058][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.622896][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.624136][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.628000][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.628511][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.628811][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.629056][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.629294][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.629576][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.630146][ T8554] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms
[ 632.633267][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.633386][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.652335][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.653331][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.678539][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.680808][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.686780][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.688982][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.691672][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.692425][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.693483][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.696317][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.697513][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.699610][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.701746][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.702500][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.704070][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.705427][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.706763][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.709920][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.710298][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
executing program
[ 632.711181][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.712104][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.713762][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.714562][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.715368][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.719774][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.720537][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.724398][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.727021][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.727082][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.727585][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.730107][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.730830][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.733410][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.734188][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.736749][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.739682][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.740435][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.742543][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.743362][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.745780][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.745826][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.748151][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.750144][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.805535][ T8554] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 632.811013][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.811853][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.815693][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 632.820366][ T8554] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[ 632.820387][ T8554] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590
[ 632.820421][ T8554] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
[ 632.820450][ T8554] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:8554 [syz-executor258] iterate_dir+0x3a5/0x580
[ 632.820483][ T8554] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[ 632.820512][ T8554] CPU: 0 UID: 0 PID: 8554 Comm: syz-executor258 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 632.820534][ T8554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 632.820546][ T8554] Call Trace:
[ 632.820553][ T8554]
[ 632.820561][ T8554] dump_stack_lvl+0xe8/0x150
[ 632.820589][ T8554] gfs2_withdraw+0xc3/0x1b0
[ 632.820612][ T8554] gfs2_dirent_scan+0x545/0x690
[ 632.820636][ T8554] ? __pfx_gfs2_dirent_gather+0x10/0x10
[ 632.820660][ T8554] gfs2_dir_read+0x78e/0x1760
[ 632.820693][ T8554] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 632.820725][ T8554] ? __pfx_inode_dio_wait+0x10/0x10
[ 632.820759][ T8554] ? __pfx_gfs2_dir_read+0x10/0x10
[ 632.820793][ T8554] ? gfs2_glock_wait+0x212/0x2a0
[ 632.820818][ T8554] gfs2_readdir+0x16c/0x1e0
[ 632.820840][ T8554] ? __pfx_gfs2_readdir+0x10/0x10
[ 632.820857][ T8554] ? down_read_killable+0x14c/0x220
[ 632.820883][ T8554] ? iterate_dir+0x3a5/0x580
[ 632.820903][ T8554] ? apparmor_file_permission+0x1f4/0x300
[ 632.820936][ T8554] iterate_dir+0x3a5/0x580
[ 632.820959][ T8554] __se_sys_getdents64+0xf1/0x280
[ 632.820982][ T8554] ? __pfx___se_sys_getdents64+0x10/0x10
[ 632.821002][ T8554] ? __pfx_filldir64+0x10/0x10
[ 632.821022][ T8554] ? rcu_is_watching+0x15/0xb0
[ 632.821054][ T8554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 632.821075][ T8554] do_syscall_64+0x15f/0xf80
[ 632.821095][ T8554] ? trace_irq_disable+0x3b/0x140
[ 632.821123][ T8554] ? clear_bhb_loop+0x40/0x90
[ 632.821146][ T8554] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 632.821165][ T8554] RIP: 0033:0x7f2e1378eed9
[ 632.821183][ T8554] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 632.821199][ T8554] RSP: 002b:00007f2e1375f1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 632.821220][ T8554] RAX: ffffffffffffffda RBX: 00007f2e1384ce28 RCX: 00007f2e1378eed9
[ 632.821234][ T8554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 632.821246][ T8554] RBP: 00007f2e1384ce20 R08: 38203a6b63617473 R09: 38203a6b63617473
[ 632.821260][ T8554] R10: 38203a6b63617473 R11: 0000000000000246 R12: 00007f2e1381db34
[ 632.821273][ T8554] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500
[ 632.821304][ T8554]
[ 632.821312][ T8554] gfs2: fsid=syz:syz.s: about to withdraw this file system
[ 632.821382][ T10] gfs2: fsid=syz:syz.s: file system withdrawn
[ 632.983913][ T7910] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[ 633.556978][ T8558] loop0: detected capacity change from 0 to 32768
[ 633.562618][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x1, refcnt=2
[ 633.563794][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x1, refcnt=2
[ 633.564479][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x1, refcnt=2
[ 633.565289][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x1, refcnt=2
[ 633.566441][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x1, refcnt=2
[ 633.567389][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x1, refcnt=2
[ 633.568447][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x1, refcnt=2
[ 633.575996][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.577287][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.577981][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.578671][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.579825][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.580764][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.581524][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.582144][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.582738][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.583323][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.588890][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.589787][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.594323][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.595485][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.596708][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.599714][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.599959][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.601139][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.601934][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.602644][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.603665][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.604384][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.606915][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.607772][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.608591][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.609507][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.610360][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.610722][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.611378][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.612213][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.613763][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.629752][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.654113][ T8558] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 633.654135][ T8558] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 633.672125][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.681116][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.682000][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.683212][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.683543][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.683912][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.684185][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.684516][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.685826][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.686430][ T8558] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms
[ 633.687280][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.687653][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.699642][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
executing program
[ 633.700816][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.711122][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.711916][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.722609][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.725240][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.731700][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.733893][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.741796][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.743445][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.771243][ T8558] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 633.775495][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.776273][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.779587][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 633.781387][ T8558] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[ 633.781405][ T8558] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590
[ 633.781433][ T8558] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
[ 633.781462][ T8558] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:8558 [syz-executor258] iterate_dir+0x3a5/0x580
[ 633.781495][ T8558] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[ 633.781523][ T8558] CPU: 0 UID: 0 PID: 8558 Comm: syz-executor258 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 633.781545][ T8558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 633.781557][ T8558] Call Trace:
[ 633.781565][ T8558]
[ 633.781573][ T8558] dump_stack_lvl+0xe8/0x150
[ 633.781600][ T8558] gfs2_withdraw+0xc3/0x1b0
[ 633.781623][ T8558] gfs2_dirent_scan+0x545/0x690
[ 633.781647][ T8558] ? __pfx_gfs2_dirent_gather+0x10/0x10
[ 633.781680][ T8558] gfs2_dir_read+0x78e/0x1760
[ 633.781706][ T8558] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 633.781736][ T8558] ? __pfx_inode_dio_wait+0x10/0x10
[ 633.781770][ T8558] ? __pfx_gfs2_dir_read+0x10/0x10
[ 633.781804][ T8558] ? gfs2_glock_wait+0x212/0x2a0
[ 633.781828][ T8558] gfs2_readdir+0x16c/0x1e0
[ 633.781850][ T8558] ? __pfx_gfs2_readdir+0x10/0x10
[ 633.781867][ T8558] ? down_read_killable+0x14c/0x220
[ 633.781894][ T8558] ? iterate_dir+0x3a5/0x580
[ 633.781913][ T8558] ? apparmor_file_permission+0x1f4/0x300
[ 633.781945][ T8558] iterate_dir+0x3a5/0x580
[ 633.781968][ T8558] __se_sys_getdents64+0xf1/0x280
[ 633.781991][ T8558] ? __pfx___se_sys_getdents64+0x10/0x10
[ 633.782010][ T8558] ? __pfx_filldir64+0x10/0x10
[ 633.782029][ T8558] ? rcu_is_watching+0x15/0xb0
[ 633.782062][ T8558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 633.782084][ T8558] do_syscall_64+0x15f/0xf80
[ 633.782105][ T8558] ? trace_irq_disable+0x3b/0x140
[ 633.782133][ T8558] ? clear_bhb_loop+0x40/0x90
[ 633.782160][ T8558] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 633.782179][ T8558] RIP: 0033:0x7f2e1378eed9
[ 633.782196][ T8558] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 633.782212][ T8558] RSP: 002b:00007f2e1375f1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 633.782233][ T8558] RAX: ffffffffffffffda RBX: 00007f2e1384ce28 RCX: 00007f2e1378eed9
[ 633.782247][ T8558] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 633.782258][ T8558] RBP: 00007f2e1384ce20 R08: 38203a6b63617473 R09: 38203a6b63617473
[ 633.782273][ T8558] R10: 38203a6b63617473 R11: 0000000000000246 R12: 00007f2e1381db34
[ 633.782286][ T8558] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500
[ 633.782317][ T8558]
[ 633.782335][ T8558] gfs2: fsid=syz:syz.s: about to withdraw this file system
[ 633.782398][ T10] gfs2: fsid=syz:syz.s: file system withdrawn
[ 633.921502][ T7910] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[ 634.488546][ T8562] loop0: detected capacity change from 0 to 32768
[ 634.502061][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.502738][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.503458][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.504084][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.505847][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.506624][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.507964][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.508167][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.509001][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.509684][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.510752][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.511458][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.512099][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.512877][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.513593][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.514257][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.515706][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.517171][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.518821][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.520277][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.521003][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.521685][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.522482][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.523512][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.525740][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.527115][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.527843][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.528500][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.529195][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.529888][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.530586][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.531245][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.532664][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.533330][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.533992][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.535689][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.536385][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.537554][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.539407][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.540883][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.560839][ T8562] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 634.560857][ T8562] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 634.569888][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.584472][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.586453][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.589243][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.589564][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.589839][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.590120][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.590420][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.590758][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.591320][ T8562] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms
[ 634.592833][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.592953][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.623300][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.626499][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.642534][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.645752][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.647851][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.659972][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.662591][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.697209][ T8562] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 634.698490][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.699246][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.700906][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.701806][ T8562] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[ 634.701824][ T8562] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590
[ 634.701851][ T8562] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
[ 634.701880][ T8562] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:8562 [syz-executor258] iterate_dir+0x3a5/0x580
[ 634.701914][ T8562] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[ 634.701942][ T8562] CPU: 0 UID: 0 PID: 8562 Comm: syz-executor258 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 634.701964][ T8562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 634.701976][ T8562] Call Trace:
[ 634.701984][ T8562]
[ 634.701992][ T8562] dump_stack_lvl+0xe8/0x150
[ 634.702019][ T8562] gfs2_withdraw+0xc3/0x1b0
[ 634.702042][ T8562] gfs2_dirent_scan+0x545/0x690
[ 634.702066][ T8562] ? __pfx_gfs2_dirent_gather+0x10/0x10
[ 634.702091][ T8562] gfs2_dir_read+0x78e/0x1760
[ 634.702117][ T8562] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 634.702146][ T8562] ? __pfx_inode_dio_wait+0x10/0x10
[ 634.702180][ T8562] ? __pfx_gfs2_dir_read+0x10/0x10
[ 634.702214][ T8562] ? gfs2_glock_wait+0x212/0x2a0
[ 634.702239][ T8562] gfs2_readdir+0x16c/0x1e0
executing program
[ 634.702260][ T8562] ? __pfx_gfs2_readdir+0x10/0x10
[ 634.702277][ T8562] ? down_read_killable+0x14c/0x220
[ 634.702304][ T8562] ? iterate_dir+0x3a5/0x580
[ 634.702323][ T8562] ? apparmor_file_permission+0x1f4/0x300
[ 634.702362][ T8562] iterate_dir+0x3a5/0x580
[ 634.702386][ T8562] __se_sys_getdents64+0xf1/0x280
[ 634.702412][ T8562] ? __pfx___se_sys_getdents64+0x10/0x10
[ 634.702431][ T8562] ? __pfx_filldir64+0x10/0x10
[ 634.702451][ T8562] ? rcu_is_watching+0x15/0xb0
[ 634.702484][ T8562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 634.702505][ T8562] do_syscall_64+0x15f/0xf80
[ 634.702526][ T8562] ? trace_irq_disable+0x3b/0x140
[ 634.702554][ T8562] ? clear_bhb_loop+0x40/0x90
[ 634.702577][ T8562] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 634.702596][ T8562] RIP: 0033:0x7f2e1378eed9
[ 634.702614][ T8562] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 634.702630][ T8562] RSP: 002b:00007f2e1375f1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 634.702651][ T8562] RAX: ffffffffffffffda RBX: 00007f2e1384ce28 RCX: 00007f2e1378eed9
[ 634.702664][ T8562] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 634.702676][ T8562] RBP: 00007f2e1384ce20 R08: 38203a6b63617473 R09: 38203a6b63617473
[ 634.702690][ T8562] R10: 38203a6b63617473 R11: 0000000000000246 R12: 00007f2e1381db34
[ 634.702702][ T8562] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500
[ 634.702731][ T8562]
[ 634.702750][ T8562] gfs2: fsid=syz:syz.s: about to withdraw this file system
[ 634.702811][ T10] gfs2: fsid=syz:syz.s: file system withdrawn
[ 634.732387][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.733082][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.733797][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.734454][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.736536][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.738032][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.739406][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.740329][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.741493][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.742163][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.742855][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.743556][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.744223][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.746266][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.748510][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.750699][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.751415][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.754355][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.756515][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.794563][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.798911][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.799713][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.800377][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.801113][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.803356][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.804231][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.805857][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.809087][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.811527][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.812246][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.815858][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.815905][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.815935][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.817606][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 634.820128][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.009241][ T7910] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[ 635.588080][ T8566] loop0: detected capacity change from 0 to 32768
[ 635.598845][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.600766][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.601438][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.602116][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.602798][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.603588][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.604244][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.607850][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.608551][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.609620][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.611113][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.611812][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.612472][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.613132][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.614022][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.615812][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.617193][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.617938][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.619289][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.619900][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.624862][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.626650][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.628670][ T8566] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 635.628687][ T8566] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 635.632271][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.638747][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.640888][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.641091][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.650300][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.651117][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.653171][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.653454][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.653685][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.653925][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.654160][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.654521][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.656184][ T8566] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms
[ 635.658418][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.658533][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.661627][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.663841][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.665094][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.665864][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.667979][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.668815][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.671018][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.671788][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.676138][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.676186][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.676221][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.680363][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.680897][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.682664][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.704282][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.708004][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.710787][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.713648][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.727597][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.728134][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.741247][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.741844][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.741877][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.757772][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.758452][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.788177][ T8566] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 635.791833][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.793103][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.797767][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 635.798687][ T8566] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[ 635.798705][ T8566] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590
[ 635.798733][ T8566] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
[ 635.798761][ T8566] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:8566 [syz-executor258] iterate_dir+0x3a5/0x580
[ 635.798795][ T8566] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[ 635.798823][ T8566] CPU: 0 UID: 0 PID: 8566 Comm: syz-executor258 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 635.798846][ T8566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 635.798857][ T8566] Call Trace:
[ 635.798865][ T8566]
[ 635.798873][ T8566] dump_stack_lvl+0xe8/0x150
[ 635.798900][ T8566] gfs2_withdraw+0xc3/0x1b0
[ 635.798923][ T8566] gfs2_dirent_scan+0x545/0x690
[ 635.798947][ T8566] ? __pfx_gfs2_dirent_gather+0x10/0x10
[ 635.798972][ T8566] gfs2_dir_read+0x78e/0x1760
[ 635.798998][ T8566] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 635.799029][ T8566] ? __pfx_inode_dio_wait+0x10/0x10
executing program
[ 635.799061][ T8566] ? __pfx_gfs2_dir_read+0x10/0x10
[ 635.799092][ T8566] ? gfs2_glock_wait+0x212/0x2a0
[ 635.799116][ T8566] gfs2_readdir+0x16c/0x1e0
[ 635.799137][ T8566] ? __pfx_gfs2_readdir+0x10/0x10
[ 635.799155][ T8566] ? down_read_killable+0x14c/0x220
[ 635.799185][ T8566] ? iterate_dir+0x3a5/0x580
[ 635.799203][ T8566] ? apparmor_file_permission+0x1f4/0x300
[ 635.799236][ T8566] iterate_dir+0x3a5/0x580
[ 635.799260][ T8566] __se_sys_getdents64+0xf1/0x280
[ 635.799282][ T8566] ? __pfx___se_sys_getdents64+0x10/0x10
[ 635.799301][ T8566] ? __pfx_filldir64+0x10/0x10
[ 635.799322][ T8566] ? rcu_is_watching+0x15/0xb0
[ 635.799355][ T8566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 635.799376][ T8566] do_syscall_64+0x15f/0xf80
[ 635.799397][ T8566] ? trace_irq_disable+0x3b/0x140
[ 635.799433][ T8566] ? clear_bhb_loop+0x40/0x90
[ 635.799456][ T8566] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 635.799476][ T8566] RIP: 0033:0x7f2e1378eed9
[ 635.799494][ T8566] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 635.799511][ T8566] RSP: 002b:00007f2e1375f1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 635.799531][ T8566] RAX: ffffffffffffffda RBX: 00007f2e1384ce28 RCX: 00007f2e1378eed9
[ 635.799545][ T8566] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 635.799557][ T8566] RBP: 00007f2e1384ce20 R08: 38203a6b63617473 R09: 38203a6b63617473
[ 635.799571][ T8566] R10: 38203a6b63617473 R11: 0000000000000246 R12: 00007f2e1381db34
[ 635.799584][ T8566] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500
[ 635.799615][ T8566]
[ 635.799633][ T8566] gfs2: fsid=syz:syz.s: about to withdraw this file system
[ 635.799695][ T10] gfs2: fsid=syz:syz.s: file system withdrawn
[ 636.112161][ T7910] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[ 636.696565][ T8570] loop0: detected capacity change from 0 to 32768
[ 636.699667][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.707420][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.708132][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.708778][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.709361][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.709952][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.710532][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.711691][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.712376][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.713397][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.714073][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.715954][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.717894][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.718716][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.719468][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.720154][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.720802][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.721491][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.723067][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.723769][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.727189][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.727918][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.728625][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.729282][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.729979][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.730649][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.731333][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.732096][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.733492][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.734157][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.735590][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.737261][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.737300][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.738104][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.738997][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.740488][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.773681][ T8570] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 636.773701][ T8570] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 636.792891][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.805115][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.806968][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.811019][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.812225][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.812521][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.812775][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.813020][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.813323][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.813919][ T8570] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms
[ 636.823092][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.823230][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.835101][ T1025] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.837144][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.840128][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.840889][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.843187][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.843894][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.847113][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.849329][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.850999][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.853266][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.854963][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.856298][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.858173][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.860359][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.861034][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.861728][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.865200][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.868232][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.869628][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.872060][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.874214][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.878753][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.879466][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.881638][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.882429][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
executing program
[ 636.884904][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.885723][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.888650][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.889371][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.892329][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.893167][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.895373][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.898344][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.898659][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.901240][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.901300][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.904569][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.915193][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.916504][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.920788][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.952318][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 636.953777][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.000012][ T8570] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 637.004077][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.005291][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.009455][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.010887][ T8570] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[ 637.010906][ T8570] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590
[ 637.010934][ T8570] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
[ 637.010962][ T8570] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:8570 [syz-executor258] iterate_dir+0x3a5/0x580
[ 637.010996][ T8570] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[ 637.011025][ T8570] CPU: 0 UID: 0 PID: 8570 Comm: syz-executor258 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 637.011047][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 637.011058][ T8570] Call Trace:
[ 637.011065][ T8570]
[ 637.011073][ T8570] dump_stack_lvl+0xe8/0x150
[ 637.011101][ T8570] gfs2_withdraw+0xc3/0x1b0
[ 637.011124][ T8570] gfs2_dirent_scan+0x545/0x690
[ 637.011148][ T8570] ? __pfx_gfs2_dirent_gather+0x10/0x10
[ 637.011173][ T8570] gfs2_dir_read+0x78e/0x1760
[ 637.011200][ T8570] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 637.011231][ T8570] ? __pfx_inode_dio_wait+0x10/0x10
[ 637.011265][ T8570] ? __pfx_gfs2_dir_read+0x10/0x10
[ 637.011298][ T8570] ? gfs2_glock_wait+0x212/0x2a0
[ 637.011333][ T8570] gfs2_readdir+0x16c/0x1e0
[ 637.011354][ T8570] ? __pfx_gfs2_readdir+0x10/0x10
[ 637.011371][ T8570] ? down_read_killable+0x14c/0x220
[ 637.011398][ T8570] ? iterate_dir+0x3a5/0x580
[ 637.011417][ T8570] ? apparmor_file_permission+0x1f4/0x300
[ 637.011450][ T8570] iterate_dir+0x3a5/0x580
[ 637.011473][ T8570] __se_sys_getdents64+0xf1/0x280
[ 637.011496][ T8570] ? __pfx___se_sys_getdents64+0x10/0x10
[ 637.011520][ T8570] ? __pfx_filldir64+0x10/0x10
[ 637.011540][ T8570] ? rcu_is_watching+0x15/0xb0
[ 637.011573][ T8570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 637.011593][ T8570] do_syscall_64+0x15f/0xf80
[ 637.011615][ T8570] ? trace_irq_disable+0x3b/0x140
[ 637.011643][ T8570] ? clear_bhb_loop+0x40/0x90
[ 637.011666][ T8570] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 637.011685][ T8570] RIP: 0033:0x7f2e1378eed9
[ 637.011702][ T8570] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 637.011718][ T8570] RSP: 002b:00007f2e1375f1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 637.011739][ T8570] RAX: ffffffffffffffda RBX: 00007f2e1384ce28 RCX: 00007f2e1378eed9
[ 637.011753][ T8570] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 637.011765][ T8570] RBP: 00007f2e1384ce20 R08: 38203a6b63617473 R09: 38203a6b63617473
[ 637.011779][ T8570] R10: 38203a6b63617473 R11: 0000000000000246 R12: 00007f2e1381db34
[ 637.011792][ T8570] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500
[ 637.011824][ T8570]
[ 637.011854][ T8570] gfs2: fsid=syz:syz.s: about to withdraw this file system
[ 637.011920][ T10] gfs2: fsid=syz:syz.s: file system withdrawn
[ 637.164879][ T7910] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[ 637.730355][ T8574] loop0: detected capacity change from 0 to 32768
[ 637.747739][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.748467][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.749729][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.750447][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.751736][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.753623][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.754492][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.754531][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.757390][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.759529][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.761152][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.763146][ T8574] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 637.763163][ T8574] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 637.771491][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.772421][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.773021][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.773622][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.774198][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.775550][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.776170][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.776780][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.777513][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.778280][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.779069][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.779183][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.788675][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.790813][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.791743][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.792591][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.792963][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.795882][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.796216][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.796525][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.797392][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.797867][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.799336][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.799382][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.801357][ T8574] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms
[ 637.802397][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.803505][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.804740][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.804858][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.807045][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.809452][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.810416][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.812503][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.815267][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.817136][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.819454][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.820137][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.820784][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.823825][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.823864][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.823893][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.824488][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.829830][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.850483][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.851388][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.886931][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.890231][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.891871][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.910337][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.912547][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
executing program
[ 637.950732][ T8574] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 637.956429][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.957212][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.960199][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 637.961153][ T8574] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[ 637.961170][ T8574] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590
[ 637.961197][ T8574] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
[ 637.961226][ T8574] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:8574 [syz-executor258] iterate_dir+0x3a5/0x580
[ 637.961257][ T8574] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[ 637.961285][ T8574] CPU: 0 UID: 0 PID: 8574 Comm: syz-executor258 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 637.961307][ T8574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 637.961318][ T8574] Call Trace:
[ 637.961326][ T8574]
[ 637.961334][ T8574] dump_stack_lvl+0xe8/0x150
[ 637.961362][ T8574] gfs2_withdraw+0xc3/0x1b0
[ 637.961384][ T8574] gfs2_dirent_scan+0x545/0x690
[ 637.961409][ T8574] ? __pfx_gfs2_dirent_gather+0x10/0x10
[ 637.961434][ T8574] gfs2_dir_read+0x78e/0x1760
[ 637.961460][ T8574] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 637.961490][ T8574] ? __pfx_inode_dio_wait+0x10/0x10
[ 637.961524][ T8574] ? __pfx_gfs2_dir_read+0x10/0x10
[ 637.961558][ T8574] ? gfs2_glock_wait+0x212/0x2a0
[ 637.961582][ T8574] gfs2_readdir+0x16c/0x1e0
[ 637.961604][ T8574] ? __pfx_gfs2_readdir+0x10/0x10
[ 637.961620][ T8574] ? down_read_killable+0x14c/0x220
[ 637.961647][ T8574] ? iterate_dir+0x3a5/0x580
[ 637.961666][ T8574] ? apparmor_file_permission+0x1f4/0x300
[ 637.961698][ T8574] iterate_dir+0x3a5/0x580
[ 637.961721][ T8574] __se_sys_getdents64+0xf1/0x280
[ 637.961748][ T8574] ? __pfx___se_sys_getdents64+0x10/0x10
[ 637.961766][ T8574] ? __pfx_filldir64+0x10/0x10
[ 637.961787][ T8574] ? rcu_is_watching+0x15/0xb0
[ 637.961819][ T8574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 637.961840][ T8574] do_syscall_64+0x15f/0xf80
[ 637.961861][ T8574] ? trace_irq_disable+0x3b/0x140
[ 637.961889][ T8574] ? clear_bhb_loop+0x40/0x90
[ 637.961912][ T8574] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 637.961930][ T8574] RIP: 0033:0x7f2e1378eed9
[ 637.961947][ T8574] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 637.961964][ T8574] RSP: 002b:00007f2e1375f1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 637.961991][ T8574] RAX: ffffffffffffffda RBX: 00007f2e1384ce28 RCX: 00007f2e1378eed9
[ 637.962005][ T8574] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 637.962017][ T8574] RBP: 00007f2e1384ce20 R08: 38203a6b63617473 R09: 38203a6b63617473
[ 637.962031][ T8574] R10: 38203a6b63617473 R11: 0000000000000246 R12: 00007f2e1381db34
[ 637.962044][ T8574] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500
[ 637.962076][ T8574]
[ 637.962095][ T8574] gfs2: fsid=syz:syz.s: about to withdraw this file system
[ 637.962155][ T10] gfs2: fsid=syz:syz.s: file system withdrawn
[ 638.124389][ T7910] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[ 638.645869][ T8578] loop0: detected capacity change from 0 to 32768
[ 638.649105][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.653999][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.655801][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.657870][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.659688][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.660513][ T8578] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 638.660529][ T8578] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 638.667137][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.667778][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.675837][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.676774][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.677427][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.678121][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.679082][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.679703][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.680288][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.680885][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.681458][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.683431][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.684452][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.687461][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.687584][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.688544][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.690289][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.690475][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.690772][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.691111][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.691403][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.691714][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.692225][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.692791][ T8578] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms
[ 638.694257][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.694369][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.694394][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.696915][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.700980][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.703228][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.704343][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.708267][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.710516][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.711190][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.713336][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.714014][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.717337][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.718135][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.719389][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.721138][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.721658][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.725472][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.727026][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.729596][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.733380][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.733423][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.733452][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.733852][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.736827][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.764152][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.767970][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.785076][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.785864][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.809252][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.869402][ T8578] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 638.870690][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.871486][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.885847][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 638.886726][ T8578] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[ 638.886743][ T8578] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590
[ 638.886771][ T8578] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
executing program
[ 638.886799][ T8578] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:8578 [syz-executor258] iterate_dir+0x3a5/0x580
[ 638.886832][ T8578] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[ 638.886860][ T8578] CPU: 0 UID: 0 PID: 8578 Comm: syz-executor258 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 638.886883][ T8578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 638.886894][ T8578] Call Trace:
[ 638.886902][ T8578]
[ 638.886910][ T8578] dump_stack_lvl+0xe8/0x150
[ 638.886940][ T8578] gfs2_withdraw+0xc3/0x1b0
[ 638.886963][ T8578] gfs2_dirent_scan+0x545/0x690
[ 638.886988][ T8578] ? __pfx_gfs2_dirent_gather+0x10/0x10
[ 638.887012][ T8578] gfs2_dir_read+0x78e/0x1760
[ 638.887039][ T8578] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 638.887070][ T8578] ? __pfx_inode_dio_wait+0x10/0x10
[ 638.887103][ T8578] ? __pfx_gfs2_dir_read+0x10/0x10
[ 638.887136][ T8578] ? gfs2_glock_wait+0x212/0x2a0
[ 638.887168][ T8578] gfs2_readdir+0x16c/0x1e0
[ 638.887190][ T8578] ? __pfx_gfs2_readdir+0x10/0x10
[ 638.887207][ T8578] ? down_read_killable+0x14c/0x220
[ 638.887233][ T8578] ? iterate_dir+0x3a5/0x580
[ 638.887252][ T8578] ? apparmor_file_permission+0x1f4/0x300
[ 638.887285][ T8578] iterate_dir+0x3a5/0x580
[ 638.887308][ T8578] __se_sys_getdents64+0xf1/0x280
[ 638.887331][ T8578] ? __pfx___se_sys_getdents64+0x10/0x10
[ 638.887350][ T8578] ? __pfx_filldir64+0x10/0x10
[ 638.887370][ T8578] ? rcu_is_watching+0x15/0xb0
[ 638.887404][ T8578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 638.887424][ T8578] do_syscall_64+0x15f/0xf80
[ 638.887444][ T8578] ? trace_irq_disable+0x3b/0x140
[ 638.887473][ T8578] ? clear_bhb_loop+0x40/0x90
[ 638.887496][ T8578] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 638.887515][ T8578] RIP: 0033:0x7f2e1378eed9
[ 638.887532][ T8578] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 638.887548][ T8578] RSP: 002b:00007f2e1375f1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 638.887568][ T8578] RAX: ffffffffffffffda RBX: 00007f2e1384ce28 RCX: 00007f2e1378eed9
[ 638.887583][ T8578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 638.887594][ T8578] RBP: 00007f2e1384ce20 R08: 38203a6b63617473 R09: 38203a6b63617473
[ 638.887608][ T8578] R10: 38203a6b63617473 R11: 0000000000000246 R12: 00007f2e1381db34
[ 638.887621][ T8578] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500
[ 638.887652][ T8578]
[ 638.887670][ T8578] gfs2: fsid=syz:syz.s: about to withdraw this file system
[ 638.887732][ T10] gfs2: fsid=syz:syz.s: file system withdrawn
[ 638.916945][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.074739][ T7910] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[ 639.566614][ T8582] loop0: detected capacity change from 0 to 32768
[ 639.579611][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.581365][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.582038][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.582721][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.583503][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.584166][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.585833][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.586994][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.587656][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.588691][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.589387][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.590053][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.591497][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.592172][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.592851][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.593504][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.594175][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.597507][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.601771][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.602601][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.605560][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.606292][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.607042][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.607700][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.608397][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.609083][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.609768][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.610443][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.611873][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.612627][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.613401][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.614228][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.614531][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.618366][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.620009][ T8582] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 639.620024][ T8582] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 639.623512][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.627703][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.628469][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.645051][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.646569][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.657873][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.659249][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.659530][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.664701][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.665103][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.665389][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.665664][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.666014][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.666854][ T8582] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms
[ 639.667838][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.669385][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.691363][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.692316][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.710706][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.713331][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.722890][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.724896][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.729413][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.731386][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.737136][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.737884][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.766375][ T8582] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 639.839202][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.839948][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.841615][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.842500][ T8582] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[ 639.842517][ T8582] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590
[ 639.842543][ T8582] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
[ 639.842571][ T8582] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:8582 [syz-executor258] iterate_dir+0x3a5/0x580
[ 639.842603][ T8582] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[ 639.842633][ T8582] CPU: 0 UID: 0 PID: 8582 Comm: syz-executor258 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 639.842651][ T8582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 639.842663][ T8582] Call Trace:
[ 639.842671][ T8582]
[ 639.842679][ T8582] dump_stack_lvl+0xe8/0x150
executing program
[ 639.842706][ T8582] gfs2_withdraw+0xc3/0x1b0
[ 639.842730][ T8582] gfs2_dirent_scan+0x545/0x690
[ 639.842755][ T8582] ? __pfx_gfs2_dirent_gather+0x10/0x10
[ 639.842780][ T8582] gfs2_dir_read+0x78e/0x1760
[ 639.842805][ T8582] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 639.842835][ T8582] ? __pfx_inode_dio_wait+0x10/0x10
[ 639.842869][ T8582] ? __pfx_gfs2_dir_read+0x10/0x10
[ 639.842903][ T8582] ? gfs2_glock_wait+0x212/0x2a0
[ 639.842928][ T8582] gfs2_readdir+0x16c/0x1e0
[ 639.842996][ T8582] ? __pfx_gfs2_readdir+0x10/0x10
[ 639.843015][ T8582] ? down_read_killable+0x14c/0x220
[ 639.843041][ T8582] ? iterate_dir+0x3a5/0x580
[ 639.843069][ T8582] ? apparmor_file_permission+0x1f4/0x300
[ 639.843106][ T8582] iterate_dir+0x3a5/0x580
[ 639.843130][ T8582] __se_sys_getdents64+0xf1/0x280
[ 639.843153][ T8582] ? __pfx___se_sys_getdents64+0x10/0x10
[ 639.843172][ T8582] ? __pfx_filldir64+0x10/0x10
[ 639.843192][ T8582] ? rcu_is_watching+0x15/0xb0
[ 639.843226][ T8582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 639.843247][ T8582] do_syscall_64+0x15f/0xf80
[ 639.843267][ T8582] ? trace_irq_disable+0x3b/0x140
[ 639.843295][ T8582] ? clear_bhb_loop+0x40/0x90
[ 639.843318][ T8582] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 639.843337][ T8582] RIP: 0033:0x7f2e1378eed9
[ 639.843356][ T8582] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 639.843372][ T8582] RSP: 002b:00007f2e1375f1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 639.843393][ T8582] RAX: ffffffffffffffda RBX: 00007f2e1384ce28 RCX: 00007f2e1378eed9
[ 639.843407][ T8582] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 639.843419][ T8582] RBP: 00007f2e1384ce20 R08: 38203a6b63617473 R09: 38203a6b63617473
[ 639.843432][ T8582] R10: 38203a6b63617473 R11: 0000000000000246 R12: 00007f2e1381db34
[ 639.843446][ T8582] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500
[ 639.843477][ T8582]
[ 639.843554][ T8582] gfs2: fsid=syz:syz.s: about to withdraw this file system
[ 639.843617][ T10] gfs2: fsid=syz:syz.s: file system withdrawn
[ 639.868111][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.868799][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.869493][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.870195][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.871240][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.872388][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.873073][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.874108][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.875537][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.876461][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.877096][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.878246][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.879470][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.880141][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.880803][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.881527][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.882956][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.883633][ T2119] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.886538][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.887526][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.888459][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.890427][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.892968][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.893678][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.896538][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.900004][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.902376][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.927662][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.930981][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.931024][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.931059][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.935136][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 639.940096][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.023657][ T7910] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[ 640.595805][ T8586] loop0: detected capacity change from 0 to 32768
[ 640.613200][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.613885][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.614549][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.616091][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.616762][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.617424][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.618035][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.619170][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.619793][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.620785][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.621412][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.622031][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.622825][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.623857][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.628948][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.629846][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.632069][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.632937][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.637053][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.639451][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.648610][ T8586] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 640.648630][ T8586] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 640.656347][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.657254][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.657294][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.662263][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.669042][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.669096][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.670272][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.671407][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.671451][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.678339][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.679121][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.682786][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.685862][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.687944][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.688159][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.688536][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.688846][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.689095][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.689330][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.689662][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.690811][ T8586] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms
[ 640.693264][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.693309][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.693413][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.698873][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.702871][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.704090][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.704137][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.707476][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.710574][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.730138][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.732526][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.740575][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.745978][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.748088][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.769533][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.771658][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.788785][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.789646][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.790020][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.801131][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.802118][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.805699][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.808037][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.808166][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.811107][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.813306][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.814401][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.817437][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.818194][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.819643][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
executing program
[ 640.821216][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.823394][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.824088][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.825510][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.828844][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.832110][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.834325][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.896133][ T8586] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 640.901341][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.902151][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.908168][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 640.910537][ T8586] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[ 640.910557][ T8586] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590
[ 640.910586][ T8586] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
[ 640.910613][ T8586] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:8586 [syz-executor258] iterate_dir+0x3a5/0x580
[ 640.910646][ T8586] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[ 640.910675][ T8586] CPU: 0 UID: 0 PID: 8586 Comm: syz-executor258 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 640.910697][ T8586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 640.910709][ T8586] Call Trace:
[ 640.910723][ T8586]
[ 640.910731][ T8586] dump_stack_lvl+0xe8/0x150
[ 640.910758][ T8586] gfs2_withdraw+0xc3/0x1b0
[ 640.910782][ T8586] gfs2_dirent_scan+0x545/0x690
[ 640.910805][ T8586] ? __pfx_gfs2_dirent_gather+0x10/0x10
[ 640.910830][ T8586] gfs2_dir_read+0x78e/0x1760
[ 640.910856][ T8586] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 640.910886][ T8586] ? __pfx_inode_dio_wait+0x10/0x10
[ 640.910920][ T8586] ? __pfx_gfs2_dir_read+0x10/0x10
[ 640.910954][ T8586] ? gfs2_glock_wait+0x212/0x2a0
[ 640.910978][ T8586] gfs2_readdir+0x16c/0x1e0
[ 640.911000][ T8586] ? __pfx_gfs2_readdir+0x10/0x10
[ 640.911016][ T8586] ? down_read_killable+0x14c/0x220
[ 640.911042][ T8586] ? iterate_dir+0x3a5/0x580
[ 640.911062][ T8586] ? apparmor_file_permission+0x1f4/0x300
[ 640.911095][ T8586] iterate_dir+0x3a5/0x580
[ 640.911118][ T8586] __se_sys_getdents64+0xf1/0x280
[ 640.911141][ T8586] ? __pfx___se_sys_getdents64+0x10/0x10
[ 640.911160][ T8586] ? __pfx_filldir64+0x10/0x10
[ 640.911181][ T8586] ? rcu_is_watching+0x15/0xb0
[ 640.911213][ T8586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 640.911234][ T8586] do_syscall_64+0x15f/0xf80
[ 640.911260][ T8586] ? trace_irq_disable+0x3b/0x140
[ 640.911288][ T8586] ? clear_bhb_loop+0x40/0x90
[ 640.911311][ T8586] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 640.911330][ T8586] RIP: 0033:0x7f2e1378eed9
[ 640.911349][ T8586] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 640.911365][ T8586] RSP: 002b:00007f2e1375f1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 640.911385][ T8586] RAX: ffffffffffffffda RBX: 00007f2e1384ce28 RCX: 00007f2e1378eed9
[ 640.911400][ T8586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 640.911411][ T8586] RBP: 00007f2e1384ce20 R08: 38203a6b63617473 R09: 38203a6b63617473
[ 640.911424][ T8586] R10: 38203a6b63617473 R11: 0000000000000246 R12: 00007f2e1381db34
[ 640.911437][ T8586] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500
[ 640.911468][ T8586]
[ 640.911496][ T8586] gfs2: fsid=syz:syz.s: about to withdraw this file system
[ 640.911566][ T10] gfs2: fsid=syz:syz.s: file system withdrawn
[ 641.081886][ T7910] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[ 641.638209][ T8590] loop0: detected capacity change from 0 to 32768
[ 641.646945][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.647611][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.648913][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.649653][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.650255][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.650958][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.651538][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.652647][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.654242][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.656064][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.656794][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.657458][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.658139][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.659537][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.660208][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.660882][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.661629][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.662339][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.663753][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.664430][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.668813][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.669540][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.670214][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.670927][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.671623][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.672308][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.673017][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.673688][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.679384][ T8590] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 641.679402][ T8590] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 641.682956][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.687388][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.689531][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.689578][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.701096][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.701912][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.704332][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.705015][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.706135][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.706430][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.706758][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.708557][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.709033][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.710845][ T8590] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms
[ 641.713314][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.715226][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.731139][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.733954][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.753774][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.758882][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.792882][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.795925][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.798077][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.810139][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.812788][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.853950][ T8590] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 641.856041][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.856786][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.867836][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.868775][ T8590] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[ 641.868793][ T8590] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590
[ 641.868820][ T8590] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
[ 641.868849][ T8590] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:8590 [syz-executor258] iterate_dir+0x3a5/0x580
[ 641.868882][ T8590] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[ 641.868910][ T8590] CPU: 0 UID: 0 PID: 8590 Comm: syz-executor258 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
executing program
[ 641.868931][ T8590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 641.868943][ T8590] Call Trace:
[ 641.868951][ T8590]
[ 641.868957][ T8590] dump_stack_lvl+0xe8/0x150
[ 641.868983][ T8590] gfs2_withdraw+0xc3/0x1b0
[ 641.869006][ T8590] gfs2_dirent_scan+0x545/0x690
[ 641.869029][ T8590] ? __pfx_gfs2_dirent_gather+0x10/0x10
[ 641.869054][ T8590] gfs2_dir_read+0x78e/0x1760
[ 641.869084][ T8590] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 641.869115][ T8590] ? __pfx_inode_dio_wait+0x10/0x10
[ 641.869149][ T8590] ? __pfx_gfs2_dir_read+0x10/0x10
[ 641.869182][ T8590] ? gfs2_glock_wait+0x212/0x2a0
[ 641.869208][ T8590] gfs2_readdir+0x16c/0x1e0
[ 641.869230][ T8590] ? __pfx_gfs2_readdir+0x10/0x10
[ 641.869247][ T8590] ? down_read_killable+0x14c/0x220
[ 641.869273][ T8590] ? iterate_dir+0x3a5/0x580
[ 641.869292][ T8590] ? apparmor_file_permission+0x1f4/0x300
[ 641.869325][ T8590] iterate_dir+0x3a5/0x580
[ 641.869349][ T8590] __se_sys_getdents64+0xf1/0x280
[ 641.869371][ T8590] ? __pfx___se_sys_getdents64+0x10/0x10
[ 641.869394][ T8590] ? __pfx_filldir64+0x10/0x10
[ 641.869414][ T8590] ? rcu_is_watching+0x15/0xb0
[ 641.869447][ T8590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 641.869468][ T8590] do_syscall_64+0x15f/0xf80
[ 641.869489][ T8590] ? trace_irq_disable+0x3b/0x140
[ 641.869517][ T8590] ? clear_bhb_loop+0x40/0x90
[ 641.869540][ T8590] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 641.869559][ T8590] RIP: 0033:0x7f2e1378eed9
[ 641.869578][ T8590] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 641.869594][ T8590] RSP: 002b:00007f2e1375f1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 641.869621][ T8590] RAX: ffffffffffffffda RBX: 00007f2e1384ce28 RCX: 00007f2e1378eed9
[ 641.869635][ T8590] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 641.869647][ T8590] RBP: 00007f2e1384ce20 R08: 38203a6b63617473 R09: 38203a6b63617473
[ 641.869661][ T8590] R10: 38203a6b63617473 R11: 0000000000000246 R12: 00007f2e1381db34
[ 641.869674][ T8590] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500
[ 641.869705][ T8590]
[ 641.869723][ T8590] gfs2: fsid=syz:syz.s: about to withdraw this file system
[ 641.869784][ T10] gfs2: fsid=syz:syz.s: file system withdrawn
[ 641.911557][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.912273][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.914388][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.922748][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.923506][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.925451][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.962089][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.963208][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.966356][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.967199][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.968512][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.975109][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.976433][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.978643][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.980112][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.980946][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.992916][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.993655][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 641.994400][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.078911][ T7910] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[ 642.613546][ T8594] loop0: detected capacity change from 0 to 32768
[ 642.626075][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.628542][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.629017][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.629518][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.629979][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.630427][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.630907][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.631710][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.632159][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.632835][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.633284][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.633737][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.634186][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.641609][ T8594] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 642.641643][ T8594] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 642.653024][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.653079][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.653966][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.654915][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.671904][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.672206][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.675021][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.675904][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.677025][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.677139][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.677363][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.677613][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.677861][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.678095][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.678380][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.678947][ T8594] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms
[ 642.680047][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.680884][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.680923][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.683235][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.686413][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.687133][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.687783][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.690776][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.693282][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.694102][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.696531][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.697299][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.699479][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.700191][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.701747][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.704950][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.705010][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.705534][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.708505][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.709283][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.712321][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.712365][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.712393][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.715621][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.718728][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.743569][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.748154][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.763881][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.764754][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.781236][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.801200][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.805079][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.807776][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.808548][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.811025][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.811772][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.813904][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
executing program
[ 642.815368][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.816013][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.816568][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.817158][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.849228][ T8594] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 642.850959][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.852458][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.856155][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 642.860678][ T8594] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[ 642.860697][ T8594] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590
[ 642.860741][ T8594] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
[ 642.860769][ T8594] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:8594 [syz-executor258] iterate_dir+0x3a5/0x580
[ 642.860803][ T8594] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[ 642.860833][ T8594] CPU: 1 UID: 0 PID: 8594 Comm: syz-executor258 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 642.860855][ T8594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 642.860867][ T8594] Call Trace:
[ 642.860875][ T8594]
[ 642.860883][ T8594] dump_stack_lvl+0xe8/0x150
[ 642.860910][ T8594] gfs2_withdraw+0xc3/0x1b0
[ 642.860933][ T8594] gfs2_dirent_scan+0x545/0x690
[ 642.860957][ T8594] ? __pfx_gfs2_dirent_gather+0x10/0x10
[ 642.860981][ T8594] gfs2_dir_read+0x78e/0x1760
[ 642.861007][ T8594] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 642.861037][ T8594] ? __pfx_inode_dio_wait+0x10/0x10
[ 642.861071][ T8594] ? __pfx_gfs2_dir_read+0x10/0x10
[ 642.861105][ T8594] ? gfs2_glock_wait+0x212/0x2a0
[ 642.861130][ T8594] gfs2_readdir+0x16c/0x1e0
[ 642.861150][ T8594] ? __pfx_gfs2_readdir+0x10/0x10
[ 642.861167][ T8594] ? down_read_killable+0x14c/0x220
[ 642.861194][ T8594] ? iterate_dir+0x3a5/0x580
[ 642.861213][ T8594] ? apparmor_file_permission+0x1f4/0x300
[ 642.861245][ T8594] iterate_dir+0x3a5/0x580
[ 642.861269][ T8594] __se_sys_getdents64+0xf1/0x280
[ 642.861292][ T8594] ? __pfx___se_sys_getdents64+0x10/0x10
[ 642.861310][ T8594] ? __pfx_filldir64+0x10/0x10
[ 642.861330][ T8594] ? rcu_is_watching+0x15/0xb0
[ 642.861363][ T8594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 642.861384][ T8594] do_syscall_64+0x15f/0xf80
[ 642.861406][ T8594] ? trace_irq_disable+0x3b/0x140
[ 642.861434][ T8594] ? clear_bhb_loop+0x40/0x90
[ 642.861457][ T8594] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 642.861476][ T8594] RIP: 0033:0x7f2e1378eed9
[ 642.861494][ T8594] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 642.861511][ T8594] RSP: 002b:00007f2e1375f1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 642.861531][ T8594] RAX: ffffffffffffffda RBX: 00007f2e1384ce28 RCX: 00007f2e1378eed9
[ 642.861545][ T8594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 642.861557][ T8594] RBP: 00007f2e1384ce20 R08: 38203a6b63617473 R09: 38203a6b63617473
[ 642.861571][ T8594] R10: 38203a6b63617473 R11: 0000000000000246 R12: 00007f2e1381db34
[ 642.861591][ T8594] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500
[ 642.861621][ T8594]
[ 642.861629][ T8594] gfs2: fsid=syz:syz.s: about to withdraw this file system
[ 642.861692][ T32] gfs2: fsid=syz:syz.s: file system withdrawn
[ 643.025189][ T7910] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[ 643.563893][ T8598] loop0: detected capacity change from 0 to 32768
[ 643.567528][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.575806][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.577014][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.579187][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.579889][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.580735][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.582829][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.587323][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.589533][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.590690][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.592834][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.593592][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.594247][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.595655][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.596660][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.597275][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.597874][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.598601][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.600629][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.601302][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.604552][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.606152][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.606985][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.607678][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.608376][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.609063][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.609736][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.610410][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.612054][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.612730][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.613406][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.614206][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.614506][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.617398][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.617467][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.620336][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.732879][ T8598] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 643.732899][ T8598] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 643.744949][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.755945][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.756764][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.757905][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.758216][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.758540][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.758860][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.759185][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.759544][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.760104][ T8598] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms
[ 643.760955][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.761342][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.783472][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.787119][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.803227][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.805864][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.808059][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.820763][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.823638][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.856041][ T8598] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 643.859913][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.860741][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.865591][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 643.866661][ T8598] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[ 643.866679][ T8598] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590
[ 643.866755][ T8598] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
[ 643.866784][ T8598] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:8598 [syz-executor258] iterate_dir+0x3a5/0x580
[ 643.866817][ T8598] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[ 643.866845][ T8598] CPU: 1 UID: 0 PID: 8598 Comm: syz-executor258 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 643.866867][ T8598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 643.866879][ T8598] Call Trace:
[ 643.866887][ T8598]
[ 643.866895][ T8598] dump_stack_lvl+0xe8/0x150
[ 643.866923][ T8598] gfs2_withdraw+0xc3/0x1b0
[ 643.866945][ T8598] gfs2_dirent_scan+0x545/0x690
[ 643.866970][ T8598] ? __pfx_gfs2_dirent_gather+0x10/0x10
[ 643.866995][ T8598] gfs2_dir_read+0x78e/0x1760
[ 643.867020][ T8598] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 643.867050][ T8598] ? __pfx_inode_dio_wait+0x10/0x10
executing program
[ 643.867085][ T8598] ? __pfx_gfs2_dir_read+0x10/0x10
[ 643.867117][ T8598] ? gfs2_glock_wait+0x212/0x2a0
[ 643.867142][ T8598] gfs2_readdir+0x16c/0x1e0
[ 643.867164][ T8598] ? __pfx_gfs2_readdir+0x10/0x10
[ 643.867181][ T8598] ? down_read_killable+0x14c/0x220
[ 643.867207][ T8598] ? iterate_dir+0x3a5/0x580
[ 643.867227][ T8598] ? apparmor_file_permission+0x1f4/0x300
[ 643.867259][ T8598] iterate_dir+0x3a5/0x580
[ 643.867283][ T8598] __se_sys_getdents64+0xf1/0x280
[ 643.867305][ T8598] ? __pfx___se_sys_getdents64+0x10/0x10
[ 643.867324][ T8598] ? __pfx_filldir64+0x10/0x10
[ 643.867344][ T8598] ? rcu_is_watching+0x15/0xb0
[ 643.867377][ T8598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 643.867398][ T8598] do_syscall_64+0x15f/0xf80
[ 643.867419][ T8598] ? trace_irq_disable+0x3b/0x140
[ 643.867447][ T8598] ? clear_bhb_loop+0x40/0x90
[ 643.867470][ T8598] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 643.867489][ T8598] RIP: 0033:0x7f2e1378eed9
[ 643.867508][ T8598] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 643.867524][ T8598] RSP: 002b:00007f2e1375f1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 643.867544][ T8598] RAX: ffffffffffffffda RBX: 00007f2e1384ce28 RCX: 00007f2e1378eed9
[ 643.867559][ T8598] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 643.867571][ T8598] RBP: 00007f2e1384ce20 R08: 38203a6b63617473 R09: 38203a6b63617473
[ 643.867585][ T8598] R10: 38203a6b63617473 R11: 0000000000000246 R12: 00007f2e1381db34
[ 643.867598][ T8598] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500
[ 643.867629][ T8598]
[ 643.867636][ T8598] gfs2: fsid=syz:syz.s: about to withdraw this file system
[ 643.867706][ T32] gfs2: fsid=syz:syz.s: file system withdrawn
[ 644.001776][ T7910] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[ 644.475945][ T8602] loop0: detected capacity change from 0 to 32768
[ 644.479030][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.481197][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.481895][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.482618][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.482864][ T8602] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 644.482878][ T8602] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 644.483264][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.483845][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.484428][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.493733][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.500111][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.501210][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.502381][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.502629][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.502882][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.503148][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.503443][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.503790][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.504489][ T8602] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms
[ 644.505614][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.507282][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.512063][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.513000][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.515491][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.516639][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.517360][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.517960][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.518566][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.519167][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.519778][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.520363][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.521073][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.521706][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.523776][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.524473][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.526835][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.532087][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.532139][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.532848][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.542135][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.542777][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.544392][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.549432][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.550175][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.552337][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.553319][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.554016][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.555873][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.556644][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.559299][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.562389][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.563706][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.564726][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.566372][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.566412][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.566441][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.571026][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.571845][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.582017][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.584498][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.587097][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.608275][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.612057][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
executing program
[ 644.660381][ T8602] gfs2: fsid=syz:syz.s: first mount done, others may mount
[ 644.664235][ T1007] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.666373][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.669117][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 644.671965][ T8602] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block)
[ 644.671984][ T8602] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590
[ 644.672010][ T8602] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1
[ 644.672038][ T8602] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:8602 [syz-executor258] iterate_dir+0x3a5/0x580
[ 644.672068][ T8602] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0
[ 644.672104][ T8602] CPU: 1 UID: 0 PID: 8602 Comm: syz-executor258 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 644.672126][ T8602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 644.672138][ T8602] Call Trace:
[ 644.672146][ T8602]
[ 644.672154][ T8602] dump_stack_lvl+0xe8/0x150
[ 644.672180][ T8602] gfs2_withdraw+0xc3/0x1b0
[ 644.672204][ T8602] gfs2_dirent_scan+0x545/0x690
[ 644.672227][ T8602] ? __pfx_gfs2_dirent_gather+0x10/0x10
[ 644.672251][ T8602] gfs2_dir_read+0x78e/0x1760
[ 644.672277][ T8602] ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 644.672308][ T8602] ? __pfx_inode_dio_wait+0x10/0x10
[ 644.672342][ T8602] ? __pfx_gfs2_dir_read+0x10/0x10
[ 644.672374][ T8602] ? gfs2_glock_wait+0x212/0x2a0
[ 644.672399][ T8602] gfs2_readdir+0x16c/0x1e0
[ 644.672421][ T8602] ? __pfx_gfs2_readdir+0x10/0x10
[ 644.672438][ T8602] ? down_read_killable+0x14c/0x220
[ 644.672468][ T8602] ? iterate_dir+0x3a5/0x580
[ 644.672487][ T8602] ? apparmor_file_permission+0x1f4/0x300
[ 644.672519][ T8602] iterate_dir+0x3a5/0x580
[ 644.672543][ T8602] __se_sys_getdents64+0xf1/0x280
[ 644.672566][ T8602] ? __pfx___se_sys_getdents64+0x10/0x10
[ 644.672585][ T8602] ? __pfx_filldir64+0x10/0x10
[ 644.672605][ T8602] ? rcu_is_watching+0x15/0xb0
[ 644.672644][ T8602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 644.672664][ T8602] do_syscall_64+0x15f/0xf80
[ 644.672687][ T8602] ? trace_irq_disable+0x3b/0x140
[ 644.672714][ T8602] ? clear_bhb_loop+0x40/0x90
[ 644.672738][ T8602] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 644.672757][ T8602] RIP: 0033:0x7f2e1378eed9
[ 644.672775][ T8602] Code: c0 79 93 eb d5 48 8d 7c 1d 00 eb 99 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 644.672792][ T8602] RSP: 002b:00007f2e1375f1d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 644.672813][ T8602] RAX: ffffffffffffffda RBX: 00007f2e1384ce28 RCX: 00007f2e1378eed9
[ 644.672827][ T8602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 644.672838][ T8602] RBP: 00007f2e1384ce20 R08: 38203a6b63617473 R09: 38203a6b63617473
[ 644.672852][ T8602] R10: 38203a6b63617473 R11: 0000000000000246 R12: 00007f2e1381db34
[ 644.672865][ T8602] R13: 0000200000000000 R14: 0030656c69662f2e R15: 0000200000000500
[ 644.672896][ T8602]
[ 644.672914][ T8602] gfs2: fsid=syz:syz.s: about to withdraw this file system
[ 644.672978][ T32] gfs2: fsid=syz:syz.s: file system withdrawn
[ 644.812203][ T7910] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1
[ 645.365979][ T8606] loop0: detected capacity change from 0 to 32768
[ 645.368050][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 645.371404][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 645.372176][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 645.373077][ T8606] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 645.373096][ T8606] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 645.374108][ T13] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 645.380695][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 645.381405][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 645.382070][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 645.383618][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 645.385575][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 645.387136][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 645.387904][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 645.388594][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 645.389304][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 645.389967][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 645.390668][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1
[ 645.391573][ T43] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1