[ 132.922568][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.929323][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '10.128.1.233' (ED25519) to the list of known hosts. 2025/07/08 09:32:12 ignoring optional flag "sandboxArg"="0" 2025/07/08 09:32:13 parsed 1 programs [ 141.670483][ T6292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 145.164345][ T5921] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.177281][ T5921] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.185956][ T5921] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.196132][ T5921] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.204227][ T5921] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.003293][ T6348] chnl_net:caif_netlink_parms(): no params data found [ 147.080806][ T6348] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.088077][ T6348] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.095562][ T6348] bridge_slave_0: entered allmulticast mode [ 147.103466][ T6348] bridge_slave_0: entered promiscuous mode [ 147.113710][ T6348] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.121566][ T6348] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.129171][ T6348] bridge_slave_1: entered allmulticast mode [ 147.136461][ T6348] bridge_slave_1: entered promiscuous mode [ 147.173195][ T6348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.185337][ T6348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.222081][ T6348] team0: Port device team_slave_0 added [ 147.230251][ T6348] team0: Port device team_slave_1 added [ 147.260616][ T6348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.267587][ T6348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.293620][ T6348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.306632][ T6348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.313886][ T6348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.340309][ T6348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.386552][ T6348] hsr_slave_0: entered promiscuous mode [ 147.393144][ T6348] hsr_slave_1: entered promiscuous mode [ 148.038771][ T6348] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 148.054977][ T6348] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 148.071699][ T6348] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 148.083955][ T6348] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 148.203539][ T6348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.232550][ T6348] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.247283][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.255121][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.304338][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.311755][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.397230][ T6348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.760983][ T6348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.857588][ T6348] veth0_vlan: entered promiscuous mode [ 148.885027][ T6348] veth1_vlan: entered promiscuous mode [ 148.960510][ T6348] veth0_macvtap: entered promiscuous mode [ 148.993548][ T6348] veth1_macvtap: entered promiscuous mode [ 149.027517][ T6348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.043709][ T6348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.067612][ T3470] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.092539][ T3470] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.110774][ T3470] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.135578][ T3470] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.292554][ T3470] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.367299][ T3470] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.454611][ T3470] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.596073][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.615996][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.657272][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.665538][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/07/08 09:32:28 executed programs: 0 [ 151.371860][ T5166] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 151.384643][ T5166] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 151.394075][ T5166] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 151.402587][ T5166] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 151.412010][ T5166] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 151.492707][ T3470] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.734095][ T6470] chnl_net:caif_netlink_parms(): no params data found [ 151.952917][ T3470] bridge_slave_1: left allmulticast mode [ 151.960773][ T3470] bridge_slave_1: left promiscuous mode [ 151.966617][ T3470] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.977402][ T3470] bridge_slave_0: left allmulticast mode [ 151.985237][ T3470] bridge_slave_0: left promiscuous mode [ 151.991506][ T3470] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.345663][ T3470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.358143][ T3470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.369242][ T3470] bond0 (unregistering): Released all slaves [ 152.409103][ T6470] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.416356][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.423992][ T6470] bridge_slave_0: entered allmulticast mode [ 152.435124][ T6470] bridge_slave_0: entered promiscuous mode [ 152.452101][ T6470] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.461155][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.472795][ T6470] bridge_slave_1: entered allmulticast mode [ 152.481151][ T6470] bridge_slave_1: entered promiscuous mode [ 152.514202][ T3470] hsr_slave_0: left promiscuous mode [ 152.522727][ T3470] hsr_slave_1: left promiscuous mode [ 152.528977][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.536428][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.545460][ T3470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.553266][ T3470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.575892][ T3470] veth1_macvtap: left promiscuous mode [ 152.581725][ T3470] veth0_macvtap: left promiscuous mode [ 152.587596][ T3470] veth1_vlan: left promiscuous mode [ 152.595224][ T3470] veth0_vlan: left promiscuous mode [ 153.096680][ T3470] team0 (unregistering): Port device team_slave_1 removed [ 153.138095][ T3470] team0 (unregistering): Port device team_slave_0 removed [ 153.478391][ T5166] Bluetooth: hci0: command tx timeout [ 153.592260][ T6470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.616145][ T6470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.684674][ T6470] team0: Port device team_slave_0 added [ 153.700644][ T6470] team0: Port device team_slave_1 added [ 153.752000][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.759294][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.787367][ T6470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.811726][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.818907][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.851920][ T6470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.941842][ T6470] hsr_slave_0: entered promiscuous mode [ 153.954877][ T6470] hsr_slave_1: entered promiscuous mode [ 154.841194][ T6470] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 154.856574][ T6470] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 154.872155][ T6470] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 154.885668][ T6470] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 155.006763][ T6470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.032529][ T6470] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.052173][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.059418][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.074346][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.081597][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.374533][ T6470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.449539][ T6470] veth0_vlan: entered promiscuous mode [ 155.466507][ T6470] veth1_vlan: entered promiscuous mode [ 155.508137][ T6470] veth0_macvtap: entered promiscuous mode [ 155.524524][ T6470] veth1_macvtap: entered promiscuous mode [ 155.553642][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.558807][ T5166] Bluetooth: hci0: command tx timeout [ 155.573795][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.591167][ T3470] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.602247][ T3470] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.631618][ T3470] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.642778][ T3470] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.722239][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.742713][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.790636][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.805405][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.347790][ T6585] loop0: detected capacity change from 0 to 32768 [ 156.391943][ T6585] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 156.420453][ T6585] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 156.465413][ T6585] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 156.608846][ T6585] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 156.630593][ T6585] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 156.641879][ T6585] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 156.656729][ T6585] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 156.667851][ T6585] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6585 [syz.0.16] iterate_dir+0x5ac/0x770 [ 156.678494][ T6585] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 156.687847][ T6585] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 156.697896][ T6585] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 156.709440][ T6585] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 156.720392][ T6585] gfs2: fsid=syz:syz.s: File system withdrawn [ 156.726784][ T6585] CPU: 1 UID: 0 PID: 6585 Comm: syz.0.16 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 156.726814][ T6585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.726835][ T6585] Call Trace: [ 156.726844][ T6585] [ 156.726853][ T6585] dump_stack_lvl+0x189/0x250 [ 156.726887][ T6585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.726913][ T6585] ? __pfx__printk+0x10/0x10 [ 156.726944][ T6585] ? kobject_uevent_env+0x36b/0x8c0 [ 156.726974][ T6585] gfs2_withdraw+0x111e/0x14f0 [ 156.727021][ T6585] ? __pfx_gfs2_withdraw+0x10/0x10 [ 156.727058][ T6585] ? __pfx__printk+0x10/0x10 [ 156.727095][ T6585] ? gfs2_consist_inode_i+0xf5/0x110 [ 156.727133][ T6585] gfs2_dirent_scan+0x545/0x690 [ 156.727169][ T6585] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 156.727217][ T6585] gfs2_dir_read+0x806/0x1780 [ 156.727260][ T6585] ? __pfx_inode_dio_wait+0x10/0x10 [ 156.727286][ T6585] ? __pfx___might_resched+0x10/0x10 [ 156.727309][ T6585] ? __pfx_gfs2_dir_read+0x10/0x10 [ 156.727341][ T6585] ? gfs2_glock_nq+0x10bb/0x1900 [ 156.727375][ T6585] ? gfs2_glock_wait+0x20f/0x2a0 [ 156.727398][ T6585] gfs2_readdir+0x14c/0x1b0 [ 156.727427][ T6585] ? iterate_dir+0x49f/0x770 [ 156.727450][ T6585] ? __pfx_gfs2_readdir+0x10/0x10 [ 156.727484][ T6585] ? iterate_dir+0x5ac/0x770 [ 156.727507][ T6585] ? iterate_dir+0x49f/0x770 [ 156.727528][ T6585] ? down_read_killable+0x1d1/0x350 [ 156.727567][ T6585] iterate_dir+0x5ac/0x770 [ 156.727597][ T6585] __se_sys_getdents64+0xe4/0x260 [ 156.727625][ T6585] ? __pfx___se_sys_getdents64+0x10/0x10 [ 156.727647][ T6585] ? __pfx_filldir64+0x10/0x10 [ 156.727673][ T6585] ? rcu_is_watching+0x15/0xb0 [ 156.727702][ T6585] ? do_syscall_64+0xbe/0x3b0 [ 156.727736][ T6585] do_syscall_64+0xfa/0x3b0 [ 156.727764][ T6585] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.727798][ T6585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.727820][ T6585] ? clear_bhb_loop+0x60/0xb0 [ 156.727846][ T6585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.727867][ T6585] RIP: 0033:0x7fce42f8e929 [ 156.727897][ T6585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.727916][ T6585] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 156.727946][ T6585] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 156.727962][ T6585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 156.727974][ T6585] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 156.727987][ T6585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.727999][ T6585] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 156.728033][ T6585] 2025/07/08 09:32:34 executed programs: 3 [ 157.638490][ T5166] Bluetooth: hci0: command tx timeout [ 157.703103][ T6616] loop0: detected capacity change from 0 to 32768 [ 157.729756][ T6616] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 157.737964][ T6616] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 157.772089][ T6616] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 157.938365][ T6616] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 157.965255][ T6616] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 157.977499][ T6616] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 157.992010][ T6616] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 158.001250][ T6616] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6616 [syz.0.17] iterate_dir+0x5ac/0x770 [ 158.013809][ T6616] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 158.023273][ T6616] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 158.031032][ T6616] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 158.040693][ T6616] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 158.047459][ T6616] gfs2: fsid=syz:syz.s: File system withdrawn [ 158.055890][ T6616] CPU: 0 UID: 0 PID: 6616 Comm: syz.0.17 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 158.055921][ T6616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.055934][ T6616] Call Trace: [ 158.055942][ T6616] [ 158.055951][ T6616] dump_stack_lvl+0x189/0x250 [ 158.055986][ T6616] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.056012][ T6616] ? __pfx__printk+0x10/0x10 [ 158.056042][ T6616] ? kobject_uevent_env+0x36b/0x8c0 [ 158.056074][ T6616] gfs2_withdraw+0x111e/0x14f0 [ 158.056125][ T6616] ? __pfx_gfs2_withdraw+0x10/0x10 [ 158.056162][ T6616] ? __pfx__printk+0x10/0x10 [ 158.056199][ T6616] ? gfs2_consist_inode_i+0xf5/0x110 [ 158.056236][ T6616] gfs2_dirent_scan+0x545/0x690 [ 158.056272][ T6616] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 158.056318][ T6616] gfs2_dir_read+0x806/0x1780 [ 158.056361][ T6616] ? __pfx_inode_dio_wait+0x10/0x10 [ 158.056387][ T6616] ? __pfx___might_resched+0x10/0x10 [ 158.056411][ T6616] ? __pfx_gfs2_dir_read+0x10/0x10 [ 158.056442][ T6616] ? gfs2_glock_nq+0x10bb/0x1900 [ 158.056477][ T6616] ? gfs2_glock_wait+0x20f/0x2a0 [ 158.056500][ T6616] gfs2_readdir+0x14c/0x1b0 [ 158.056541][ T6616] ? iterate_dir+0x49f/0x770 [ 158.056564][ T6616] ? __pfx_gfs2_readdir+0x10/0x10 [ 158.056598][ T6616] ? iterate_dir+0x5ac/0x770 [ 158.056620][ T6616] ? iterate_dir+0x49f/0x770 [ 158.056641][ T6616] ? down_read_killable+0x1d1/0x350 [ 158.056678][ T6616] iterate_dir+0x5ac/0x770 [ 158.056708][ T6616] __se_sys_getdents64+0xe4/0x260 [ 158.056736][ T6616] ? __pfx___se_sys_getdents64+0x10/0x10 [ 158.056758][ T6616] ? __pfx_filldir64+0x10/0x10 [ 158.056785][ T6616] ? rcu_is_watching+0x15/0xb0 [ 158.056813][ T6616] ? do_syscall_64+0xbe/0x3b0 [ 158.056846][ T6616] do_syscall_64+0xfa/0x3b0 [ 158.056873][ T6616] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.056899][ T6616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.056920][ T6616] ? clear_bhb_loop+0x60/0xb0 [ 158.056950][ T6616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.056970][ T6616] RIP: 0033:0x7fce42f8e929 [ 158.056989][ T6616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.057006][ T6616] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 158.057027][ T6616] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 158.057042][ T6616] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 158.057054][ T6616] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 158.057067][ T6616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.057079][ T6616] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 158.057112][ T6616] [ 158.991129][ T6642] loop0: detected capacity change from 0 to 32768 [ 159.046733][ T6642] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 159.078333][ T6642] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 159.103033][ T6642] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 159.222946][ T6642] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 159.242030][ T6642] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 159.252610][ T6642] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 159.269217][ T6642] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 159.280632][ T6642] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6642 [syz.0.18] iterate_dir+0x5ac/0x770 [ 159.291511][ T6642] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 159.299067][ T6662] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 159.300543][ T6642] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 159.314189][ T6662] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 159.320657][ T6642] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 159.336407][ T6642] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 159.344895][ T6642] gfs2: fsid=syz:syz.s: File system withdrawn [ 159.353422][ T6642] CPU: 1 UID: 0 PID: 6642 Comm: syz.0.18 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 159.353452][ T6642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.353465][ T6642] Call Trace: [ 159.353473][ T6642] [ 159.353482][ T6642] dump_stack_lvl+0x189/0x250 [ 159.353516][ T6642] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.353543][ T6642] ? __pfx__printk+0x10/0x10 [ 159.353572][ T6642] ? kobject_uevent_env+0x36b/0x8c0 [ 159.353603][ T6642] gfs2_withdraw+0x111e/0x14f0 [ 159.353662][ T6642] ? __pfx_gfs2_withdraw+0x10/0x10 [ 159.353698][ T6642] ? __pfx__printk+0x10/0x10 [ 159.353735][ T6642] ? gfs2_consist_inode_i+0xf5/0x110 [ 159.353773][ T6642] gfs2_dirent_scan+0x545/0x690 [ 159.353810][ T6642] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 159.353847][ T6642] gfs2_dir_read+0x806/0x1780 [ 159.353890][ T6642] ? __pfx_inode_dio_wait+0x10/0x10 [ 159.353956][ T6642] ? __pfx___might_resched+0x10/0x10 [ 159.353981][ T6642] ? __pfx_gfs2_dir_read+0x10/0x10 [ 159.354012][ T6642] ? gfs2_glock_nq+0x10bb/0x1900 [ 159.354047][ T6642] ? gfs2_glock_wait+0x20f/0x2a0 [ 159.354070][ T6642] gfs2_readdir+0x14c/0x1b0 [ 159.354100][ T6642] ? iterate_dir+0x49f/0x770 [ 159.354125][ T6642] ? __pfx_gfs2_readdir+0x10/0x10 [ 159.354158][ T6642] ? iterate_dir+0x5ac/0x770 [ 159.354182][ T6642] ? iterate_dir+0x49f/0x770 [ 159.354203][ T6642] ? down_read_killable+0x1d1/0x350 [ 159.354242][ T6642] iterate_dir+0x5ac/0x770 [ 159.354273][ T6642] __se_sys_getdents64+0xe4/0x260 [ 159.354301][ T6642] ? __pfx___se_sys_getdents64+0x10/0x10 [ 159.354325][ T6642] ? __pfx_filldir64+0x10/0x10 [ 159.354352][ T6642] ? rcu_is_watching+0x15/0xb0 [ 159.354381][ T6642] ? do_syscall_64+0xbe/0x3b0 [ 159.354416][ T6642] do_syscall_64+0xfa/0x3b0 [ 159.354445][ T6642] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.354473][ T6642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.354495][ T6642] ? clear_bhb_loop+0x60/0xb0 [ 159.354522][ T6642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.354543][ T6642] RIP: 0033:0x7fce42f8e929 [ 159.354563][ T6642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.354581][ T6642] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 159.354603][ T6642] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 159.354619][ T6642] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 159.354631][ T6642] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 159.354644][ T6642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.354657][ T6642] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 159.354690][ T6642] [ 159.355621][ T6662] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6662 [syz.0.18] iterate_dir+0x5ac/0x770 [ 159.641204][ T6662] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 159.718771][ T5166] Bluetooth: hci0: command tx timeout [ 160.407160][ T6678] loop0: detected capacity change from 0 to 32768 [ 160.432940][ T6678] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 160.456787][ T6678] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 160.490304][ T6678] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 160.649123][ T6678] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 160.670461][ T6678] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 160.687700][ T6678] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 160.702991][ T6678] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 160.712408][ T6678] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6678 [syz.0.19] iterate_dir+0x5ac/0x770 [ 160.721861][ T6678] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 160.730891][ T6678] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 160.738216][ T6678] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 160.747277][ T6678] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 160.753981][ T6678] gfs2: fsid=syz:syz.s: File system withdrawn [ 160.762412][ T6678] CPU: 0 UID: 0 PID: 6678 Comm: syz.0.19 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 160.762443][ T6678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.762456][ T6678] Call Trace: [ 160.762464][ T6678] [ 160.762472][ T6678] dump_stack_lvl+0x189/0x250 [ 160.762507][ T6678] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.762533][ T6678] ? __pfx__printk+0x10/0x10 [ 160.762562][ T6678] ? kobject_uevent_env+0x36b/0x8c0 [ 160.762593][ T6678] gfs2_withdraw+0x111e/0x14f0 [ 160.762643][ T6678] ? __pfx_gfs2_withdraw+0x10/0x10 [ 160.762679][ T6678] ? __pfx__printk+0x10/0x10 [ 160.762716][ T6678] ? gfs2_consist_inode_i+0xf5/0x110 [ 160.762753][ T6678] gfs2_dirent_scan+0x545/0x690 [ 160.762789][ T6678] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 160.762822][ T6678] gfs2_dir_read+0x806/0x1780 [ 160.762865][ T6678] ? __pfx_inode_dio_wait+0x10/0x10 [ 160.762908][ T6678] ? __pfx___might_resched+0x10/0x10 [ 160.762931][ T6678] ? __pfx_gfs2_dir_read+0x10/0x10 [ 160.762963][ T6678] ? gfs2_glock_nq+0x10bb/0x1900 [ 160.762997][ T6678] ? gfs2_glock_wait+0x20f/0x2a0 [ 160.763021][ T6678] gfs2_readdir+0x14c/0x1b0 [ 160.763057][ T6678] ? iterate_dir+0x49f/0x770 [ 160.763080][ T6678] ? __pfx_gfs2_readdir+0x10/0x10 [ 160.763118][ T6678] ? iterate_dir+0x5ac/0x770 [ 160.763141][ T6678] ? iterate_dir+0x49f/0x770 [ 160.763161][ T6678] ? down_read_killable+0x1d1/0x350 [ 160.763199][ T6678] iterate_dir+0x5ac/0x770 [ 160.763229][ T6678] __se_sys_getdents64+0xe4/0x260 [ 160.763258][ T6678] ? __pfx___se_sys_getdents64+0x10/0x10 [ 160.763281][ T6678] ? __pfx_filldir64+0x10/0x10 [ 160.763309][ T6678] ? rcu_is_watching+0x15/0xb0 [ 160.763338][ T6678] ? do_syscall_64+0xbe/0x3b0 [ 160.763373][ T6678] do_syscall_64+0xfa/0x3b0 [ 160.763401][ T6678] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.763429][ T6678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.763451][ T6678] ? clear_bhb_loop+0x60/0xb0 [ 160.763478][ T6678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.763498][ T6678] RIP: 0033:0x7fce42f8e929 [ 160.763517][ T6678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.763535][ T6678] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 160.763558][ T6678] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 160.763574][ T6678] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 160.763586][ T6678] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 160.763600][ T6678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.763612][ T6678] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 160.763646][ T6678] [ 161.654587][ T6704] loop0: detected capacity change from 0 to 32768 [ 161.690123][ T6704] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 161.704246][ T6704] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 161.732634][ T6704] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 4ms [ 161.890929][ T6704] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 161.907497][ T6704] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 161.917744][ T6704] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 161.936276][ T6704] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 161.946391][ T6704] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6704 [syz.0.20] iterate_dir+0x5ac/0x770 [ 161.957829][ T6704] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 161.967045][ T6704] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 161.976561][ T6704] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 161.985884][ T6704] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 161.993773][ T6704] gfs2: fsid=syz:syz.s: File system withdrawn [ 162.002383][ T6704] CPU: 0 UID: 0 PID: 6704 Comm: syz.0.20 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 162.002420][ T6704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.002433][ T6704] Call Trace: [ 162.002441][ T6704] [ 162.002450][ T6704] dump_stack_lvl+0x189/0x250 [ 162.002484][ T6704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.002510][ T6704] ? __pfx__printk+0x10/0x10 [ 162.002540][ T6704] ? kobject_uevent_env+0x36b/0x8c0 [ 162.002573][ T6704] gfs2_withdraw+0x111e/0x14f0 [ 162.002624][ T6704] ? __pfx_gfs2_withdraw+0x10/0x10 [ 162.002660][ T6704] ? __pfx__printk+0x10/0x10 [ 162.002706][ T6704] ? gfs2_consist_inode_i+0xf5/0x110 [ 162.002744][ T6704] gfs2_dirent_scan+0x545/0x690 [ 162.002780][ T6704] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 162.002817][ T6704] gfs2_dir_read+0x806/0x1780 [ 162.002860][ T6704] ? __pfx_inode_dio_wait+0x10/0x10 [ 162.002885][ T6704] ? __pfx___might_resched+0x10/0x10 [ 162.002909][ T6704] ? __pfx_gfs2_dir_read+0x10/0x10 [ 162.002940][ T6704] ? gfs2_glock_nq+0x10bb/0x1900 [ 162.002975][ T6704] ? gfs2_glock_wait+0x20f/0x2a0 [ 162.002998][ T6704] gfs2_readdir+0x14c/0x1b0 [ 162.003028][ T6704] ? iterate_dir+0x49f/0x770 [ 162.003056][ T6704] ? __pfx_gfs2_readdir+0x10/0x10 [ 162.003090][ T6704] ? iterate_dir+0x5ac/0x770 [ 162.003114][ T6704] ? iterate_dir+0x49f/0x770 [ 162.003135][ T6704] ? down_read_killable+0x1d1/0x350 [ 162.003173][ T6704] iterate_dir+0x5ac/0x770 [ 162.003203][ T6704] __se_sys_getdents64+0xe4/0x260 [ 162.003232][ T6704] ? __pfx___se_sys_getdents64+0x10/0x10 [ 162.003255][ T6704] ? __pfx_filldir64+0x10/0x10 [ 162.003282][ T6704] ? rcu_is_watching+0x15/0xb0 [ 162.003311][ T6704] ? do_syscall_64+0xbe/0x3b0 [ 162.003345][ T6704] do_syscall_64+0xfa/0x3b0 [ 162.003374][ T6704] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.003401][ T6704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.003428][ T6704] ? clear_bhb_loop+0x60/0xb0 [ 162.003455][ T6704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.003475][ T6704] RIP: 0033:0x7fce42f8e929 [ 162.003494][ T6704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.003512][ T6704] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 162.003534][ T6704] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 162.003550][ T6704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 162.003562][ T6704] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 162.003575][ T6704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.003586][ T6704] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 162.003619][ T6704] 2025/07/08 09:32:39 executed programs: 7 [ 162.944631][ T6737] loop0: detected capacity change from 0 to 32768 [ 162.981880][ T6737] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 162.999565][ T6737] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 163.017801][ T6737] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 163.195993][ T6737] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 163.212949][ T6737] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 163.223651][ T6737] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 163.238767][ T6737] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 163.249725][ T6737] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6737 [syz.0.21] iterate_dir+0x5ac/0x770 [ 163.260422][ T6737] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 163.270509][ T6756] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 163.280236][ T6737] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 163.287569][ T6737] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 163.297681][ T6756] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 163.310725][ T6756] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6737 [syz.0.21] iterate_dir+0x5ac/0x770 [ 163.321979][ T6737] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 163.329786][ T6737] gfs2: fsid=syz:syz.s: File system withdrawn [ 163.336695][ T6756] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6756 [syz.0.21] iterate_dir+0x5ac/0x770 [ 163.346791][ T6737] CPU: 1 UID: 0 PID: 6737 Comm: syz.0.21 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 163.346819][ T6737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.346832][ T6737] Call Trace: [ 163.346841][ T6737] [ 163.346850][ T6737] dump_stack_lvl+0x189/0x250 [ 163.346885][ T6737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.346909][ T6737] ? __pfx__printk+0x10/0x10 [ 163.346940][ T6737] ? kobject_uevent_env+0x36b/0x8c0 [ 163.346970][ T6737] gfs2_withdraw+0x111e/0x14f0 [ 163.347022][ T6737] ? __pfx_gfs2_withdraw+0x10/0x10 [ 163.347057][ T6737] ? __pfx__printk+0x10/0x10 [ 163.347094][ T6737] ? gfs2_consist_inode_i+0xf5/0x110 [ 163.347131][ T6737] gfs2_dirent_scan+0x545/0x690 [ 163.347167][ T6737] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 163.347204][ T6737] gfs2_dir_read+0x806/0x1780 [ 163.347244][ T6737] ? __pfx_inode_dio_wait+0x10/0x10 [ 163.347268][ T6737] ? __pfx___might_resched+0x10/0x10 [ 163.347290][ T6737] ? __pfx_gfs2_dir_read+0x10/0x10 [ 163.347321][ T6737] ? gfs2_glock_nq+0x10bb/0x1900 [ 163.347355][ T6737] ? gfs2_glock_wait+0x20f/0x2a0 [ 163.347378][ T6737] gfs2_readdir+0x14c/0x1b0 [ 163.347407][ T6737] ? iterate_dir+0x49f/0x770 [ 163.347430][ T6737] ? __pfx_gfs2_readdir+0x10/0x10 [ 163.347464][ T6737] ? iterate_dir+0x5ac/0x770 [ 163.347488][ T6737] ? iterate_dir+0x49f/0x770 [ 163.347509][ T6737] ? down_read_killable+0x1d1/0x350 [ 163.347555][ T6737] iterate_dir+0x5ac/0x770 [ 163.347584][ T6737] __se_sys_getdents64+0xe4/0x260 [ 163.347611][ T6737] ? __pfx___se_sys_getdents64+0x10/0x10 [ 163.347634][ T6737] ? __pfx_filldir64+0x10/0x10 [ 163.347660][ T6737] ? rcu_is_watching+0x15/0xb0 [ 163.347690][ T6737] ? do_syscall_64+0xbe/0x3b0 [ 163.347724][ T6737] do_syscall_64+0xfa/0x3b0 [ 163.347752][ T6737] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.347780][ T6737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.347801][ T6737] ? clear_bhb_loop+0x60/0xb0 [ 163.347833][ T6737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.347854][ T6737] RIP: 0033:0x7fce42f8e929 [ 163.347873][ T6737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.347891][ T6737] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 163.347913][ T6737] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 163.347929][ T6737] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 163.347941][ T6737] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 163.347954][ T6737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.347967][ T6737] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 163.348000][ T6737] [ 163.348200][ T6756] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 164.293027][ T6770] loop0: detected capacity change from 0 to 32768 [ 164.320484][ T6770] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 164.329166][ T6770] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 164.343780][ T6770] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 164.460489][ T6770] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 164.472220][ T6770] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 164.482614][ T6770] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 164.499639][ T6770] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 164.510213][ T6770] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6770 [syz.0.22] iterate_dir+0x5ac/0x770 [ 164.520149][ T6770] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 164.529168][ T6770] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 164.536456][ T6770] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 164.545953][ T6770] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 164.552620][ T6770] gfs2: fsid=syz:syz.s: File system withdrawn [ 164.558788][ T6770] CPU: 1 UID: 0 PID: 6770 Comm: syz.0.22 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 164.558819][ T6770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.558830][ T6770] Call Trace: [ 164.558838][ T6770] [ 164.558846][ T6770] dump_stack_lvl+0x189/0x250 [ 164.558878][ T6770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.558902][ T6770] ? __pfx__printk+0x10/0x10 [ 164.558931][ T6770] ? kobject_uevent_env+0x36b/0x8c0 [ 164.558963][ T6770] gfs2_withdraw+0x111e/0x14f0 [ 164.559017][ T6770] ? __pfx_gfs2_withdraw+0x10/0x10 [ 164.559055][ T6770] ? __pfx__printk+0x10/0x10 [ 164.559093][ T6770] ? gfs2_consist_inode_i+0xf5/0x110 [ 164.559132][ T6770] gfs2_dirent_scan+0x545/0x690 [ 164.559168][ T6770] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 164.559206][ T6770] gfs2_dir_read+0x806/0x1780 [ 164.559248][ T6770] ? __pfx_inode_dio_wait+0x10/0x10 [ 164.559274][ T6770] ? __pfx___might_resched+0x10/0x10 [ 164.559297][ T6770] ? __pfx_gfs2_dir_read+0x10/0x10 [ 164.559329][ T6770] ? gfs2_glock_nq+0x10bb/0x1900 [ 164.559364][ T6770] ? gfs2_glock_wait+0x20f/0x2a0 [ 164.559387][ T6770] gfs2_readdir+0x14c/0x1b0 [ 164.559417][ T6770] ? iterate_dir+0x49f/0x770 [ 164.559441][ T6770] ? __pfx_gfs2_readdir+0x10/0x10 [ 164.559484][ T6770] ? iterate_dir+0x5ac/0x770 [ 164.559508][ T6770] ? iterate_dir+0x49f/0x770 [ 164.559529][ T6770] ? down_read_killable+0x1d1/0x350 [ 164.559568][ T6770] iterate_dir+0x5ac/0x770 [ 164.559598][ T6770] __se_sys_getdents64+0xe4/0x260 [ 164.559627][ T6770] ? __pfx___se_sys_getdents64+0x10/0x10 [ 164.559650][ T6770] ? __pfx_filldir64+0x10/0x10 [ 164.559678][ T6770] ? rcu_is_watching+0x15/0xb0 [ 164.559706][ T6770] ? do_syscall_64+0xbe/0x3b0 [ 164.559741][ T6770] do_syscall_64+0xfa/0x3b0 [ 164.559770][ T6770] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.559798][ T6770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.559819][ T6770] ? clear_bhb_loop+0x60/0xb0 [ 164.559846][ T6770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.559867][ T6770] RIP: 0033:0x7fce42f8e929 [ 164.559886][ T6770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.559904][ T6770] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 164.559927][ T6770] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 164.559942][ T6770] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 164.559955][ T6770] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 164.559968][ T6770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.559980][ T6770] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 164.560013][ T6770] [ 165.221871][ T6780] loop0: detected capacity change from 0 to 32768 [ 165.245119][ T6780] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 165.254528][ T6780] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 165.270767][ T6780] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 165.362362][ T6780] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 165.378042][ T6780] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 165.390023][ T6780] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 165.405110][ T6780] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 165.415437][ T6780] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6780 [syz.0.23] iterate_dir+0x5ac/0x770 [ 165.426663][ T6780] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 165.429898][ T6783] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 165.435603][ T6780] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 165.446188][ T6783] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 165.451943][ T6780] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 165.462427][ T6783] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6780 [syz.0.23] iterate_dir+0x5ac/0x770 [ 165.470080][ T6780] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 165.480865][ T6783] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6783 [syz.0.23] iterate_dir+0x5ac/0x770 [ 165.489633][ T6780] gfs2: fsid=syz:syz.s: File system withdrawn [ 165.495711][ T6783] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 165.501581][ T6780] CPU: 0 UID: 0 PID: 6780 Comm: syz.0.23 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 165.501613][ T6780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.501628][ T6780] Call Trace: [ 165.501638][ T6780] [ 165.501648][ T6780] dump_stack_lvl+0x189/0x250 [ 165.501698][ T6780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.501727][ T6780] ? __pfx__printk+0x10/0x10 [ 165.501764][ T6780] ? kobject_uevent_env+0x36b/0x8c0 [ 165.501799][ T6780] gfs2_withdraw+0x111e/0x14f0 [ 165.501858][ T6780] ? __pfx_gfs2_withdraw+0x10/0x10 [ 165.501897][ T6780] ? __pfx__printk+0x10/0x10 [ 165.501937][ T6780] ? gfs2_consist_inode_i+0xf5/0x110 [ 165.501977][ T6780] gfs2_dirent_scan+0x545/0x690 [ 165.502018][ T6780] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 165.502058][ T6780] gfs2_dir_read+0x806/0x1780 [ 165.502104][ T6780] ? __pfx_inode_dio_wait+0x10/0x10 [ 165.502133][ T6780] ? __pfx___might_resched+0x10/0x10 [ 165.502160][ T6780] ? __pfx_gfs2_dir_read+0x10/0x10 [ 165.502195][ T6780] ? gfs2_glock_nq+0x10bb/0x1900 [ 165.502232][ T6780] ? gfs2_glock_wait+0x20f/0x2a0 [ 165.502258][ T6780] gfs2_readdir+0x14c/0x1b0 [ 165.502290][ T6780] ? iterate_dir+0x49f/0x770 [ 165.502317][ T6780] ? __pfx_gfs2_readdir+0x10/0x10 [ 165.502354][ T6780] ? iterate_dir+0x5ac/0x770 [ 165.502380][ T6780] ? iterate_dir+0x49f/0x770 [ 165.502403][ T6780] ? down_read_killable+0x1d1/0x350 [ 165.502445][ T6780] iterate_dir+0x5ac/0x770 [ 165.502478][ T6780] __se_sys_getdents64+0xe4/0x260 [ 165.502509][ T6780] ? __pfx___se_sys_getdents64+0x10/0x10 [ 165.502535][ T6780] ? __pfx_filldir64+0x10/0x10 [ 165.502565][ T6780] ? rcu_is_watching+0x15/0xb0 [ 165.502596][ T6780] ? do_syscall_64+0xbe/0x3b0 [ 165.502641][ T6780] do_syscall_64+0xfa/0x3b0 [ 165.502671][ T6780] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.502708][ T6780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.502733][ T6780] ? clear_bhb_loop+0x60/0xb0 [ 165.502762][ T6780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.502784][ T6780] RIP: 0033:0x7fce42f8e929 [ 165.502804][ T6780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.502824][ T6780] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 165.502849][ T6780] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 165.502867][ T6780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 165.502879][ T6780] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 165.502894][ T6780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.502907][ T6780] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 165.502944][ T6780] [ 166.195154][ T6785] loop0: detected capacity change from 0 to 32768 [ 166.213071][ T6785] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 166.221902][ T6785] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 166.240380][ T6785] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 166.336869][ T6785] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 166.353054][ T6785] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 166.362974][ T6785] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 166.379408][ T6785] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 166.388922][ T6785] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6785 [syz.0.24] iterate_dir+0x5ac/0x770 [ 166.398480][ T6785] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 166.406962][ T6785] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 166.414239][ T6785] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 166.423114][ T6785] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 166.429931][ T6785] gfs2: fsid=syz:syz.s: File system withdrawn [ 166.436662][ T6785] CPU: 1 UID: 0 PID: 6785 Comm: syz.0.24 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 166.436690][ T6785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.436703][ T6785] Call Trace: [ 166.436712][ T6785] [ 166.436721][ T6785] dump_stack_lvl+0x189/0x250 [ 166.436751][ T6785] ? kobject_uevent_env+0x36b/0x8c0 [ 166.436773][ T6785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.436798][ T6785] ? __pfx__printk+0x10/0x10 [ 166.436829][ T6785] ? kobject_uevent_env+0x36b/0x8c0 [ 166.436860][ T6785] gfs2_withdraw+0x111e/0x14f0 [ 166.436910][ T6785] ? __pfx_gfs2_withdraw+0x10/0x10 [ 166.436937][ T6785] ? __pfx__printk+0x10/0x10 [ 166.436963][ T6785] ? gfs2_consist_inode_i+0xf5/0x110 [ 166.436989][ T6785] gfs2_dirent_scan+0x545/0x690 [ 166.437015][ T6785] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 166.437042][ T6785] gfs2_dir_read+0x806/0x1780 [ 166.437071][ T6785] ? __pfx_inode_dio_wait+0x10/0x10 [ 166.437091][ T6785] ? __pfx___might_resched+0x10/0x10 [ 166.437116][ T6785] ? __pfx_gfs2_dir_read+0x10/0x10 [ 166.437147][ T6785] ? gfs2_glock_nq+0x10bb/0x1900 [ 166.437181][ T6785] ? gfs2_glock_wait+0x20f/0x2a0 [ 166.437204][ T6785] gfs2_readdir+0x14c/0x1b0 [ 166.437226][ T6785] ? iterate_dir+0x49f/0x770 [ 166.437243][ T6785] ? __pfx_gfs2_readdir+0x10/0x10 [ 166.437267][ T6785] ? iterate_dir+0x5ac/0x770 [ 166.437283][ T6785] ? iterate_dir+0x49f/0x770 [ 166.437299][ T6785] ? down_read_killable+0x1d1/0x350 [ 166.437328][ T6785] iterate_dir+0x5ac/0x770 [ 166.437349][ T6785] __se_sys_getdents64+0xe4/0x260 [ 166.437368][ T6785] ? __pfx___se_sys_getdents64+0x10/0x10 [ 166.437385][ T6785] ? __pfx_filldir64+0x10/0x10 [ 166.437404][ T6785] ? rcu_is_watching+0x15/0xb0 [ 166.437424][ T6785] ? do_syscall_64+0xbe/0x3b0 [ 166.437448][ T6785] do_syscall_64+0xfa/0x3b0 [ 166.437468][ T6785] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.437488][ T6785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.437503][ T6785] ? clear_bhb_loop+0x60/0xb0 [ 166.437521][ T6785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.437536][ T6785] RIP: 0033:0x7fce42f8e929 [ 166.437562][ T6785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.437575][ T6785] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 166.437591][ T6785] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 166.437602][ T6785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 166.437611][ T6785] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 166.437620][ T6785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.437628][ T6785] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 166.437651][ T6785] [ 167.127885][ T6790] loop0: detected capacity change from 0 to 32768 [ 167.155079][ T6790] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 167.164404][ T6790] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 167.186057][ T6790] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 167.282854][ T6790] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 167.294949][ T6790] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 167.306131][ T6790] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 167.323011][ T6790] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 167.332970][ T6790] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6790 [syz.0.25] iterate_dir+0x5ac/0x770 [ 167.342570][ T6790] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 167.347214][ T6793] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 167.351833][ T6790] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 167.363380][ T6793] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 167.368060][ T6790] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 167.377691][ T6793] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6790 [syz.0.25] iterate_dir+0x5ac/0x770 [ 167.387899][ T6790] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 167.402664][ T6793] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6793 [syz.0.25] iterate_dir+0x5ac/0x770 [ 167.405401][ T6790] gfs2: fsid=syz:syz.s: File system withdrawn [ 167.413005][ T6793] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 167.419433][ T6790] CPU: 0 UID: 0 PID: 6790 Comm: syz.0.25 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 167.419468][ T6790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.419482][ T6790] Call Trace: [ 167.419491][ T6790] [ 167.419503][ T6790] dump_stack_lvl+0x189/0x250 [ 167.419541][ T6790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.419570][ T6790] ? __pfx__printk+0x10/0x10 [ 167.419604][ T6790] ? kobject_uevent_env+0x36b/0x8c0 [ 167.419640][ T6790] gfs2_withdraw+0x111e/0x14f0 [ 167.419698][ T6790] ? __pfx_gfs2_withdraw+0x10/0x10 [ 167.419738][ T6790] ? __pfx__printk+0x10/0x10 [ 167.419781][ T6790] ? gfs2_consist_inode_i+0xf5/0x110 [ 167.419821][ T6790] gfs2_dirent_scan+0x545/0x690 [ 167.419862][ T6790] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 167.419902][ T6790] gfs2_dir_read+0x806/0x1780 [ 167.419949][ T6790] ? __pfx_inode_dio_wait+0x10/0x10 [ 167.419979][ T6790] ? __pfx___might_resched+0x10/0x10 [ 167.420003][ T6790] ? __pfx_gfs2_dir_read+0x10/0x10 [ 167.420038][ T6790] ? gfs2_glock_nq+0x10bb/0x1900 [ 167.420076][ T6790] ? gfs2_glock_wait+0x20f/0x2a0 [ 167.420102][ T6790] gfs2_readdir+0x14c/0x1b0 [ 167.420134][ T6790] ? iterate_dir+0x49f/0x770 [ 167.420160][ T6790] ? __pfx_gfs2_readdir+0x10/0x10 [ 167.420205][ T6790] ? iterate_dir+0x5ac/0x770 [ 167.420231][ T6790] ? iterate_dir+0x49f/0x770 [ 167.420254][ T6790] ? down_read_killable+0x1d1/0x350 [ 167.420297][ T6790] iterate_dir+0x5ac/0x770 [ 167.420330][ T6790] __se_sys_getdents64+0xe4/0x260 [ 167.420362][ T6790] ? __pfx___se_sys_getdents64+0x10/0x10 [ 167.420386][ T6790] ? __pfx_filldir64+0x10/0x10 [ 167.420418][ T6790] ? rcu_is_watching+0x15/0xb0 [ 167.420447][ T6790] ? do_syscall_64+0xbe/0x3b0 [ 167.420485][ T6790] do_syscall_64+0xfa/0x3b0 [ 167.420518][ T6790] ? lockdep_hardirqs_on+0x9c/0x150 [ 167.420547][ T6790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.420572][ T6790] ? clear_bhb_loop+0x60/0xb0 [ 167.420600][ T6790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.420623][ T6790] RIP: 0033:0x7fce42f8e929 [ 167.420644][ T6790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.420663][ T6790] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 167.420689][ T6790] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 167.420707][ T6790] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 167.420719][ T6790] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 167.420734][ T6790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.420747][ T6790] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 167.420784][ T6790] 2025/07/08 09:32:45 executed programs: 12 [ 168.112381][ T6795] loop0: detected capacity change from 0 to 32768 [ 168.136608][ T6795] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 168.145136][ T6795] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 168.162228][ T6795] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 168.251401][ T6795] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 168.267204][ T6795] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 168.278000][ T6795] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 168.292631][ T6795] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 168.304175][ T6795] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6795 [syz.0.26] iterate_dir+0x5ac/0x770 [ 168.313664][ T6795] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 168.322533][ T6795] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 168.330193][ T6795] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 168.339959][ T6795] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 168.346706][ T6795] gfs2: fsid=syz:syz.s: File system withdrawn [ 168.353417][ T6795] CPU: 1 UID: 0 PID: 6795 Comm: syz.0.26 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 168.353447][ T6795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.353460][ T6795] Call Trace: [ 168.353468][ T6795] [ 168.353478][ T6795] dump_stack_lvl+0x189/0x250 [ 168.353503][ T6795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.353522][ T6795] ? __pfx__printk+0x10/0x10 [ 168.353544][ T6795] ? kobject_uevent_env+0x36b/0x8c0 [ 168.353567][ T6795] gfs2_withdraw+0x111e/0x14f0 [ 168.353604][ T6795] ? __pfx_gfs2_withdraw+0x10/0x10 [ 168.353630][ T6795] ? __pfx__printk+0x10/0x10 [ 168.353656][ T6795] ? gfs2_consist_inode_i+0xf5/0x110 [ 168.353682][ T6795] gfs2_dirent_scan+0x545/0x690 [ 168.353708][ T6795] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 168.353734][ T6795] gfs2_dir_read+0x806/0x1780 [ 168.353764][ T6795] ? __pfx_inode_dio_wait+0x10/0x10 [ 168.353782][ T6795] ? __pfx___might_resched+0x10/0x10 [ 168.353799][ T6795] ? __pfx_gfs2_dir_read+0x10/0x10 [ 168.353821][ T6795] ? gfs2_glock_nq+0x10bb/0x1900 [ 168.353845][ T6795] ? gfs2_glock_wait+0x20f/0x2a0 [ 168.353861][ T6795] gfs2_readdir+0x14c/0x1b0 [ 168.353882][ T6795] ? iterate_dir+0x49f/0x770 [ 168.353899][ T6795] ? __pfx_gfs2_readdir+0x10/0x10 [ 168.353923][ T6795] ? iterate_dir+0x5ac/0x770 [ 168.353940][ T6795] ? iterate_dir+0x49f/0x770 [ 168.353955][ T6795] ? down_read_killable+0x1d1/0x350 [ 168.353982][ T6795] iterate_dir+0x5ac/0x770 [ 168.354003][ T6795] __se_sys_getdents64+0xe4/0x260 [ 168.354024][ T6795] ? __pfx___se_sys_getdents64+0x10/0x10 [ 168.354040][ T6795] ? __pfx_filldir64+0x10/0x10 [ 168.354059][ T6795] ? rcu_is_watching+0x15/0xb0 [ 168.354079][ T6795] ? do_syscall_64+0xbe/0x3b0 [ 168.354104][ T6795] do_syscall_64+0xfa/0x3b0 [ 168.354126][ T6795] ? lockdep_hardirqs_on+0x9c/0x150 [ 168.354145][ T6795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.354160][ T6795] ? clear_bhb_loop+0x60/0xb0 [ 168.354185][ T6795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.354200][ T6795] RIP: 0033:0x7fce42f8e929 [ 168.354214][ T6795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.354226][ T6795] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 168.354242][ T6795] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 168.354253][ T6795] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 168.354262][ T6795] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 168.354271][ T6795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.354280][ T6795] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 168.354303][ T6795] [ 169.041707][ T6800] loop0: detected capacity change from 0 to 32768 [ 169.055228][ T6800] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 169.064039][ T6800] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 169.077967][ T6800] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 169.164981][ T6800] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 169.176029][ T6800] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 169.185801][ T6800] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 169.200966][ T6800] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 169.210719][ T6800] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6800 [syz.0.27] iterate_dir+0x5ac/0x770 [ 169.220968][ T6800] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 169.229457][ T6800] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 169.237101][ T6800] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 169.245966][ T6800] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 169.252983][ T6800] gfs2: fsid=syz:syz.s: File system withdrawn [ 169.259190][ T6800] CPU: 0 UID: 0 PID: 6800 Comm: syz.0.27 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 169.259219][ T6800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.259232][ T6800] Call Trace: [ 169.259241][ T6800] [ 169.259250][ T6800] dump_stack_lvl+0x189/0x250 [ 169.259285][ T6800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.259308][ T6800] ? __pfx__printk+0x10/0x10 [ 169.259337][ T6800] ? kobject_uevent_env+0x36b/0x8c0 [ 169.259368][ T6800] gfs2_withdraw+0x111e/0x14f0 [ 169.259419][ T6800] ? __pfx_gfs2_withdraw+0x10/0x10 [ 169.259456][ T6800] ? __pfx__printk+0x10/0x10 [ 169.259493][ T6800] ? gfs2_consist_inode_i+0xf5/0x110 [ 169.259531][ T6800] gfs2_dirent_scan+0x545/0x690 [ 169.259567][ T6800] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 169.259605][ T6800] gfs2_dir_read+0x806/0x1780 [ 169.259649][ T6800] ? __pfx_inode_dio_wait+0x10/0x10 [ 169.259675][ T6800] ? __pfx___might_resched+0x10/0x10 [ 169.259700][ T6800] ? __pfx_gfs2_dir_read+0x10/0x10 [ 169.259731][ T6800] ? gfs2_glock_nq+0x10bb/0x1900 [ 169.259766][ T6800] ? gfs2_glock_wait+0x20f/0x2a0 [ 169.259790][ T6800] gfs2_readdir+0x14c/0x1b0 [ 169.259820][ T6800] ? iterate_dir+0x49f/0x770 [ 169.259843][ T6800] ? __pfx_gfs2_readdir+0x10/0x10 [ 169.259879][ T6800] ? iterate_dir+0x5ac/0x770 [ 169.259902][ T6800] ? iterate_dir+0x49f/0x770 [ 169.259924][ T6800] ? down_read_killable+0x1d1/0x350 [ 169.259962][ T6800] iterate_dir+0x5ac/0x770 [ 169.259991][ T6800] __se_sys_getdents64+0xe4/0x260 [ 169.260018][ T6800] ? __pfx___se_sys_getdents64+0x10/0x10 [ 169.260040][ T6800] ? __pfx_filldir64+0x10/0x10 [ 169.260076][ T6800] ? rcu_is_watching+0x15/0xb0 [ 169.260105][ T6800] ? do_syscall_64+0xbe/0x3b0 [ 169.260139][ T6800] do_syscall_64+0xfa/0x3b0 [ 169.260168][ T6800] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.260195][ T6800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.260217][ T6800] ? clear_bhb_loop+0x60/0xb0 [ 169.260244][ T6800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.260265][ T6800] RIP: 0033:0x7fce42f8e929 [ 169.260284][ T6800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.260302][ T6800] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 169.260325][ T6800] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 169.260341][ T6800] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 169.260353][ T6800] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 169.260366][ T6800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.260378][ T6800] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 169.260412][ T6800] [ 169.936603][ T6805] loop0: detected capacity change from 0 to 32768 [ 169.953951][ T6805] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 169.969706][ T6805] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 169.986578][ T6805] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 170.082141][ T6805] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 170.096415][ T6805] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 170.107231][ T6805] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 170.124356][ T6805] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 170.134085][ T6805] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6805 [syz.0.28] iterate_dir+0x5ac/0x770 [ 170.143507][ T6805] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 170.152106][ T6805] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 170.159669][ T6805] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 170.168597][ T6805] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 170.175195][ T6805] gfs2: fsid=syz:syz.s: File system withdrawn [ 170.181629][ T6805] CPU: 0 UID: 0 PID: 6805 Comm: syz.0.28 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 170.181658][ T6805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 170.181671][ T6805] Call Trace: [ 170.181679][ T6805] [ 170.181688][ T6805] dump_stack_lvl+0x189/0x250 [ 170.181722][ T6805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.181753][ T6805] ? __pfx__printk+0x10/0x10 [ 170.181784][ T6805] ? kobject_uevent_env+0x36b/0x8c0 [ 170.181816][ T6805] gfs2_withdraw+0x111e/0x14f0 [ 170.181867][ T6805] ? __pfx_gfs2_withdraw+0x10/0x10 [ 170.181903][ T6805] ? __pfx__printk+0x10/0x10 [ 170.181939][ T6805] ? gfs2_consist_inode_i+0xf5/0x110 [ 170.181983][ T6805] gfs2_dirent_scan+0x545/0x690 [ 170.182019][ T6805] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 170.182055][ T6805] gfs2_dir_read+0x806/0x1780 [ 170.182097][ T6805] ? __pfx_inode_dio_wait+0x10/0x10 [ 170.182123][ T6805] ? __pfx___might_resched+0x10/0x10 [ 170.182145][ T6805] ? __pfx_gfs2_dir_read+0x10/0x10 [ 170.182176][ T6805] ? gfs2_glock_nq+0x10bb/0x1900 [ 170.182210][ T6805] ? gfs2_glock_wait+0x20f/0x2a0 [ 170.182229][ T6805] gfs2_readdir+0x14c/0x1b0 [ 170.182251][ T6805] ? iterate_dir+0x49f/0x770 [ 170.182268][ T6805] ? __pfx_gfs2_readdir+0x10/0x10 [ 170.182292][ T6805] ? iterate_dir+0x5ac/0x770 [ 170.182309][ T6805] ? iterate_dir+0x49f/0x770 [ 170.182324][ T6805] ? down_read_killable+0x1d1/0x350 [ 170.182351][ T6805] iterate_dir+0x5ac/0x770 [ 170.182372][ T6805] __se_sys_getdents64+0xe4/0x260 [ 170.182392][ T6805] ? __pfx___se_sys_getdents64+0x10/0x10 [ 170.182408][ T6805] ? __pfx_filldir64+0x10/0x10 [ 170.182427][ T6805] ? rcu_is_watching+0x15/0xb0 [ 170.182447][ T6805] ? do_syscall_64+0xbe/0x3b0 [ 170.182471][ T6805] do_syscall_64+0xfa/0x3b0 [ 170.182491][ T6805] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.182511][ T6805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.182526][ T6805] ? clear_bhb_loop+0x60/0xb0 [ 170.182544][ T6805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.182559][ T6805] RIP: 0033:0x7fce42f8e929 [ 170.182572][ T6805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.182584][ T6805] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 170.182600][ T6805] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 170.182612][ T6805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 170.182620][ T6805] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 170.182630][ T6805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.182638][ T6805] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 170.182661][ T6805] [ 170.856778][ T6810] loop0: detected capacity change from 0 to 32768 [ 170.880179][ T6810] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 170.893138][ T6810] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 170.907590][ T6810] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 171.010433][ T6810] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 171.027072][ T6810] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 171.037801][ T6810] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 171.053829][ T6810] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 171.063310][ T6810] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6810 [syz.0.29] iterate_dir+0x5ac/0x770 [ 171.072876][ T6810] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 171.081657][ T6810] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 171.091314][ T6810] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 171.100163][ T6810] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 171.106754][ T6810] gfs2: fsid=syz:syz.s: File system withdrawn [ 171.113175][ T6810] CPU: 0 UID: 0 PID: 6810 Comm: syz.0.29 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 171.113203][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.113217][ T6810] Call Trace: [ 171.113225][ T6810] [ 171.113234][ T6810] dump_stack_lvl+0x189/0x250 [ 171.113267][ T6810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.113293][ T6810] ? __pfx__printk+0x10/0x10 [ 171.113324][ T6810] ? kobject_uevent_env+0x36b/0x8c0 [ 171.113357][ T6810] gfs2_withdraw+0x111e/0x14f0 [ 171.113408][ T6810] ? __pfx_gfs2_withdraw+0x10/0x10 [ 171.113444][ T6810] ? __pfx__printk+0x10/0x10 [ 171.113480][ T6810] ? gfs2_consist_inode_i+0xf5/0x110 [ 171.113517][ T6810] gfs2_dirent_scan+0x545/0x690 [ 171.113553][ T6810] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 171.113589][ T6810] gfs2_dir_read+0x806/0x1780 [ 171.113630][ T6810] ? __pfx_inode_dio_wait+0x10/0x10 [ 171.113656][ T6810] ? __pfx___might_resched+0x10/0x10 [ 171.113679][ T6810] ? __pfx_gfs2_dir_read+0x10/0x10 [ 171.113710][ T6810] ? gfs2_glock_nq+0x10bb/0x1900 [ 171.113744][ T6810] ? gfs2_glock_wait+0x20f/0x2a0 [ 171.113766][ T6810] gfs2_readdir+0x14c/0x1b0 [ 171.113796][ T6810] ? iterate_dir+0x49f/0x770 [ 171.113819][ T6810] ? __pfx_gfs2_readdir+0x10/0x10 [ 171.113847][ T6810] ? iterate_dir+0x5ac/0x770 [ 171.113864][ T6810] ? iterate_dir+0x49f/0x770 [ 171.113879][ T6810] ? down_read_killable+0x1d1/0x350 [ 171.113913][ T6810] iterate_dir+0x5ac/0x770 [ 171.113938][ T6810] __se_sys_getdents64+0xe4/0x260 [ 171.113958][ T6810] ? __pfx___se_sys_getdents64+0x10/0x10 [ 171.113975][ T6810] ? __pfx_filldir64+0x10/0x10 [ 171.113994][ T6810] ? rcu_is_watching+0x15/0xb0 [ 171.114014][ T6810] ? do_syscall_64+0xbe/0x3b0 [ 171.114038][ T6810] do_syscall_64+0xfa/0x3b0 [ 171.114058][ T6810] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.114078][ T6810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.114093][ T6810] ? clear_bhb_loop+0x60/0xb0 [ 171.114111][ T6810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.114126][ T6810] RIP: 0033:0x7fce42f8e929 [ 171.114140][ T6810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.114152][ T6810] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 171.114168][ T6810] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 171.114179][ T6810] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 171.114188][ T6810] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 171.114197][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.114205][ T6810] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 171.114228][ T6810] [ 171.793691][ T6815] loop0: detected capacity change from 0 to 32768 [ 171.818225][ T6815] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 171.827268][ T6815] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 171.842153][ T6815] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 171.918406][ T6815] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 171.932384][ T6815] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 171.942031][ T6815] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 171.956902][ T6815] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 171.966334][ T6815] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6815 [syz.0.30] iterate_dir+0x5ac/0x770 [ 171.975749][ T6815] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 171.984486][ T6815] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 171.992106][ T6815] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 172.000983][ T6815] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 172.007576][ T6815] gfs2: fsid=syz:syz.s: File system withdrawn [ 172.013705][ T6815] CPU: 0 UID: 0 PID: 6815 Comm: syz.0.30 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 172.013734][ T6815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.013746][ T6815] Call Trace: [ 172.013754][ T6815] [ 172.013762][ T6815] dump_stack_lvl+0x189/0x250 [ 172.013804][ T6815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.013829][ T6815] ? __pfx__printk+0x10/0x10 [ 172.013859][ T6815] ? kobject_uevent_env+0x36b/0x8c0 [ 172.013890][ T6815] gfs2_withdraw+0x111e/0x14f0 [ 172.013942][ T6815] ? __pfx_gfs2_withdraw+0x10/0x10 [ 172.013980][ T6815] ? __pfx__printk+0x10/0x10 [ 172.014018][ T6815] ? gfs2_consist_inode_i+0xf5/0x110 [ 172.014056][ T6815] gfs2_dirent_scan+0x545/0x690 [ 172.014093][ T6815] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 172.014130][ T6815] gfs2_dir_read+0x806/0x1780 [ 172.014172][ T6815] ? __pfx_inode_dio_wait+0x10/0x10 [ 172.014199][ T6815] ? __pfx___might_resched+0x10/0x10 [ 172.014222][ T6815] ? __pfx_gfs2_dir_read+0x10/0x10 [ 172.014254][ T6815] ? gfs2_glock_nq+0x10bb/0x1900 [ 172.014288][ T6815] ? gfs2_glock_wait+0x20f/0x2a0 [ 172.014312][ T6815] gfs2_readdir+0x14c/0x1b0 [ 172.014342][ T6815] ? iterate_dir+0x49f/0x770 [ 172.014366][ T6815] ? __pfx_gfs2_readdir+0x10/0x10 [ 172.014400][ T6815] ? iterate_dir+0x5ac/0x770 [ 172.014424][ T6815] ? iterate_dir+0x49f/0x770 [ 172.014445][ T6815] ? down_read_killable+0x1d1/0x350 [ 172.014484][ T6815] iterate_dir+0x5ac/0x770 [ 172.014515][ T6815] __se_sys_getdents64+0xe4/0x260 [ 172.014544][ T6815] ? __pfx___se_sys_getdents64+0x10/0x10 [ 172.014568][ T6815] ? __pfx_filldir64+0x10/0x10 [ 172.014594][ T6815] ? __pfx___se_sys_chdir+0x10/0x10 [ 172.014621][ T6815] ? rcu_is_watching+0x15/0xb0 [ 172.014650][ T6815] ? do_syscall_64+0xbe/0x3b0 [ 172.014685][ T6815] do_syscall_64+0xfa/0x3b0 [ 172.014713][ T6815] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.014741][ T6815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.014763][ T6815] ? clear_bhb_loop+0x60/0xb0 [ 172.014798][ T6815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.014820][ T6815] RIP: 0033:0x7fce42f8e929 [ 172.014838][ T6815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.014857][ T6815] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 172.014878][ T6815] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 172.014894][ T6815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 172.014907][ T6815] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 172.014920][ T6815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.014932][ T6815] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 172.014966][ T6815] [ 172.708026][ T6820] loop0: detected capacity change from 0 to 32768 [ 172.728901][ T6820] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 172.739048][ T6820] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 172.752920][ T6820] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 172.845003][ T6820] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 172.864809][ T6820] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 172.875148][ T6820] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 172.891026][ T6820] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 172.900241][ T6820] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6820 [syz.0.31] iterate_dir+0x5ac/0x770 [ 172.909615][ T6820] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 172.918082][ T6820] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 172.925702][ T6820] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 172.934543][ T6820] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 172.941221][ T6820] gfs2: fsid=syz:syz.s: File system withdrawn [ 172.947311][ T6820] CPU: 1 UID: 0 PID: 6820 Comm: syz.0.31 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 172.947332][ T6820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.947341][ T6820] Call Trace: [ 172.947348][ T6820] [ 172.947355][ T6820] dump_stack_lvl+0x189/0x250 [ 172.947379][ T6820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.947398][ T6820] ? __pfx__printk+0x10/0x10 [ 172.947420][ T6820] ? kobject_uevent_env+0x36b/0x8c0 [ 172.947443][ T6820] gfs2_withdraw+0x111e/0x14f0 [ 172.947479][ T6820] ? __pfx_gfs2_withdraw+0x10/0x10 [ 172.947505][ T6820] ? __pfx__printk+0x10/0x10 [ 172.947531][ T6820] ? gfs2_consist_inode_i+0xf5/0x110 [ 172.947557][ T6820] gfs2_dirent_scan+0x545/0x690 [ 172.947583][ T6820] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 172.947610][ T6820] gfs2_dir_read+0x806/0x1780 [ 172.947639][ T6820] ? __pfx_inode_dio_wait+0x10/0x10 [ 172.947657][ T6820] ? __pfx___might_resched+0x10/0x10 [ 172.947674][ T6820] ? __pfx_gfs2_dir_read+0x10/0x10 [ 172.947800][ T6820] ? gfs2_glock_nq+0x10bb/0x1900 [ 172.947840][ T6820] ? gfs2_glock_wait+0x20f/0x2a0 [ 172.947859][ T6820] gfs2_readdir+0x14c/0x1b0 [ 172.947885][ T6820] ? iterate_dir+0x49f/0x770 [ 172.947904][ T6820] ? __pfx_gfs2_readdir+0x10/0x10 [ 172.947933][ T6820] ? iterate_dir+0x5ac/0x770 [ 172.947952][ T6820] ? iterate_dir+0x49f/0x770 [ 172.947969][ T6820] ? down_read_killable+0x1d1/0x350 [ 172.948000][ T6820] iterate_dir+0x5ac/0x770 [ 172.948024][ T6820] __se_sys_getdents64+0xe4/0x260 [ 172.948046][ T6820] ? __pfx___se_sys_getdents64+0x10/0x10 [ 172.948065][ T6820] ? __pfx_filldir64+0x10/0x10 [ 172.948086][ T6820] ? rcu_is_watching+0x15/0xb0 [ 172.948108][ T6820] ? do_syscall_64+0xbe/0x3b0 [ 172.948144][ T6820] do_syscall_64+0xfa/0x3b0 [ 172.948181][ T6820] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.948212][ T6820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.948241][ T6820] ? clear_bhb_loop+0x60/0xb0 [ 172.948270][ T6820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.948293][ T6820] RIP: 0033:0x7fce42f8e929 [ 172.948314][ T6820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.948332][ T6820] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 172.948357][ T6820] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 172.948375][ T6820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 172.948388][ T6820] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 172.948409][ T6820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.948422][ T6820] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 172.948461][ T6820] 2025/07/08 09:32:50 executed programs: 18 [ 173.639813][ T6825] loop0: detected capacity change from 0 to 32768 [ 173.654821][ T6825] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 173.663690][ T6825] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 173.676726][ T6825] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 173.779825][ T6825] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 173.796245][ T6825] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 173.807683][ T6825] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 173.822259][ T6825] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 173.831450][ T6825] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6825 [syz.0.32] iterate_dir+0x5ac/0x770 [ 173.841372][ T6825] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 173.848216][ T6828] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 173.849857][ T6825] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 173.859955][ T6828] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 173.866573][ T6825] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 173.877200][ T6828] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6825 [syz.0.32] iterate_dir+0x5ac/0x770 [ 173.885089][ T6825] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 173.895963][ T6828] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6828 [syz.0.32] iterate_dir+0x5ac/0x770 [ 173.900726][ T6825] gfs2: fsid=syz:syz.s: File system withdrawn [ 173.911833][ T6828] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 173.926095][ T6825] CPU: 1 UID: 0 PID: 6825 Comm: syz.0.32 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 173.926127][ T6825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.926148][ T6825] Call Trace: [ 173.926157][ T6825] [ 173.926166][ T6825] dump_stack_lvl+0x189/0x250 [ 173.926201][ T6825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.926227][ T6825] ? __pfx__printk+0x10/0x10 [ 173.926258][ T6825] ? kobject_uevent_env+0x36b/0x8c0 [ 173.926290][ T6825] gfs2_withdraw+0x111e/0x14f0 [ 173.926349][ T6825] ? __pfx_gfs2_withdraw+0x10/0x10 [ 173.926385][ T6825] ? __pfx__printk+0x10/0x10 [ 173.926421][ T6825] ? gfs2_consist_inode_i+0xf5/0x110 [ 173.926458][ T6825] gfs2_dirent_scan+0x545/0x690 [ 173.926493][ T6825] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 173.926530][ T6825] gfs2_dir_read+0x806/0x1780 [ 173.926581][ T6825] ? __pfx_inode_dio_wait+0x10/0x10 [ 173.926607][ T6825] ? __pfx___might_resched+0x10/0x10 [ 173.926630][ T6825] ? __pfx_gfs2_dir_read+0x10/0x10 [ 173.926661][ T6825] ? gfs2_glock_nq+0x10bb/0x1900 [ 173.926694][ T6825] ? gfs2_glock_wait+0x20f/0x2a0 [ 173.926717][ T6825] gfs2_readdir+0x14c/0x1b0 [ 173.926746][ T6825] ? iterate_dir+0x49f/0x770 [ 173.926769][ T6825] ? __pfx_gfs2_readdir+0x10/0x10 [ 173.926808][ T6825] ? iterate_dir+0x5ac/0x770 [ 173.926831][ T6825] ? iterate_dir+0x49f/0x770 [ 173.926852][ T6825] ? down_read_killable+0x1d1/0x350 [ 173.926891][ T6825] iterate_dir+0x5ac/0x770 [ 173.926923][ T6825] __se_sys_getdents64+0xe4/0x260 [ 173.926952][ T6825] ? __pfx___se_sys_getdents64+0x10/0x10 [ 173.926977][ T6825] ? __pfx_filldir64+0x10/0x10 [ 173.927004][ T6825] ? rcu_is_watching+0x15/0xb0 [ 173.927030][ T6825] ? do_syscall_64+0xbe/0x3b0 [ 173.927064][ T6825] do_syscall_64+0xfa/0x3b0 [ 173.927098][ T6825] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.927125][ T6825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.927147][ T6825] ? clear_bhb_loop+0x60/0xb0 [ 173.927174][ T6825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.927195][ T6825] RIP: 0033:0x7fce42f8e929 [ 173.927214][ T6825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.927232][ T6825] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 173.927254][ T6825] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 173.927269][ T6825] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 173.927282][ T6825] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 173.927295][ T6825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.927307][ T6825] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 173.927341][ T6825] [ 174.620221][ T6830] loop0: detected capacity change from 0 to 32768 [ 174.647733][ T6830] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 174.657189][ T6830] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 174.670858][ T6830] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 174.782097][ T6830] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 174.794026][ T6830] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 174.804109][ T6830] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 174.818529][ T6830] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 174.827655][ T6830] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6830 [syz.0.33] iterate_dir+0x5ac/0x770 [ 174.837810][ T6830] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 174.849936][ T6830] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 174.857544][ T6830] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 174.867459][ T6830] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 174.875397][ T6830] gfs2: fsid=syz:syz.s: File system withdrawn [ 174.881693][ T6830] CPU: 1 UID: 0 PID: 6830 Comm: syz.0.33 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 174.881714][ T6830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.881724][ T6830] Call Trace: [ 174.881730][ T6830] [ 174.881736][ T6830] dump_stack_lvl+0x189/0x250 [ 174.881759][ T6830] ? kobject_uevent_env+0x36b/0x8c0 [ 174.881775][ T6830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.881793][ T6830] ? __pfx__printk+0x10/0x10 [ 174.881817][ T6830] ? kobject_uevent_env+0x36b/0x8c0 [ 174.881838][ T6830] gfs2_withdraw+0x111e/0x14f0 [ 174.881875][ T6830] ? __pfx_gfs2_withdraw+0x10/0x10 [ 174.881900][ T6830] ? __pfx__printk+0x10/0x10 [ 174.881926][ T6830] ? gfs2_consist_inode_i+0xf5/0x110 [ 174.881953][ T6830] gfs2_dirent_scan+0x545/0x690 [ 174.881979][ T6830] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 174.882005][ T6830] gfs2_dir_read+0x806/0x1780 [ 174.882035][ T6830] ? __pfx_inode_dio_wait+0x10/0x10 [ 174.882053][ T6830] ? __pfx___might_resched+0x10/0x10 [ 174.882069][ T6830] ? __pfx_gfs2_dir_read+0x10/0x10 [ 174.882091][ T6830] ? gfs2_glock_nq+0x10bb/0x1900 [ 174.882115][ T6830] ? gfs2_glock_wait+0x20f/0x2a0 [ 174.882131][ T6830] gfs2_readdir+0x14c/0x1b0 [ 174.882152][ T6830] ? iterate_dir+0x49f/0x770 [ 174.882169][ T6830] ? __pfx_gfs2_readdir+0x10/0x10 [ 174.882193][ T6830] ? iterate_dir+0x5ac/0x770 [ 174.882209][ T6830] ? iterate_dir+0x49f/0x770 [ 174.882224][ T6830] ? down_read_killable+0x1d1/0x350 [ 174.882252][ T6830] iterate_dir+0x5ac/0x770 [ 174.882272][ T6830] __se_sys_getdents64+0xe4/0x260 [ 174.882292][ T6830] ? __pfx___se_sys_getdents64+0x10/0x10 [ 174.882309][ T6830] ? __pfx_filldir64+0x10/0x10 [ 174.882327][ T6830] ? rcu_is_watching+0x15/0xb0 [ 174.882347][ T6830] ? do_syscall_64+0xbe/0x3b0 [ 174.882371][ T6830] do_syscall_64+0xfa/0x3b0 [ 174.882391][ T6830] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.882411][ T6830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.882426][ T6830] ? clear_bhb_loop+0x60/0xb0 [ 174.882445][ T6830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.882459][ T6830] RIP: 0033:0x7fce42f8e929 [ 174.882472][ T6830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.882504][ T6830] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 174.882521][ T6830] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 174.882532][ T6830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 174.882541][ T6830] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 174.882557][ T6830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.882566][ T6830] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 174.882589][ T6830] [ 175.575266][ T6835] loop0: detected capacity change from 0 to 32768 [ 175.601787][ T6835] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 175.610254][ T6835] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 175.626751][ T6835] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 175.717870][ T6835] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 175.731217][ T6835] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 175.741106][ T6835] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 175.755630][ T6835] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 175.765092][ T6835] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6835 [syz.0.34] iterate_dir+0x5ac/0x770 [ 175.774677][ T6835] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 175.783206][ T6835] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 175.790625][ T6835] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 175.800702][ T6835] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 175.808626][ T6835] gfs2: fsid=syz:syz.s: File system withdrawn [ 175.814766][ T6835] CPU: 0 UID: 0 PID: 6835 Comm: syz.0.34 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 175.814795][ T6835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.814808][ T6835] Call Trace: [ 175.814817][ T6835] [ 175.814827][ T6835] dump_stack_lvl+0x189/0x250 [ 175.814854][ T6835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.814873][ T6835] ? __pfx__printk+0x10/0x10 [ 175.814895][ T6835] ? kobject_uevent_env+0x36b/0x8c0 [ 175.814917][ T6835] gfs2_withdraw+0x111e/0x14f0 [ 175.814960][ T6835] ? __pfx_gfs2_withdraw+0x10/0x10 [ 175.814986][ T6835] ? __pfx__printk+0x10/0x10 [ 175.815012][ T6835] ? gfs2_consist_inode_i+0xf5/0x110 [ 175.815039][ T6835] gfs2_dirent_scan+0x545/0x690 [ 175.815070][ T6835] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 175.815108][ T6835] gfs2_dir_read+0x806/0x1780 [ 175.815148][ T6835] ? __pfx_inode_dio_wait+0x10/0x10 [ 175.815167][ T6835] ? __pfx___might_resched+0x10/0x10 [ 175.815184][ T6835] ? __pfx_gfs2_dir_read+0x10/0x10 [ 175.815206][ T6835] ? gfs2_glock_nq+0x10bb/0x1900 [ 175.815229][ T6835] ? gfs2_glock_wait+0x20f/0x2a0 [ 175.815245][ T6835] gfs2_readdir+0x14c/0x1b0 [ 175.815266][ T6835] ? iterate_dir+0x49f/0x770 [ 175.815284][ T6835] ? __pfx_gfs2_readdir+0x10/0x10 [ 175.815308][ T6835] ? iterate_dir+0x5ac/0x770 [ 175.815324][ T6835] ? iterate_dir+0x49f/0x770 [ 175.815339][ T6835] ? down_read_killable+0x1d1/0x350 [ 175.815366][ T6835] iterate_dir+0x5ac/0x770 [ 175.815387][ T6835] __se_sys_getdents64+0xe4/0x260 [ 175.815407][ T6835] ? __pfx___se_sys_getdents64+0x10/0x10 [ 175.815430][ T6835] ? __pfx_filldir64+0x10/0x10 [ 175.815448][ T6835] ? __pfx___se_sys_chdir+0x10/0x10 [ 175.815467][ T6835] ? rcu_is_watching+0x15/0xb0 [ 175.815487][ T6835] ? do_syscall_64+0xbe/0x3b0 [ 175.815512][ T6835] do_syscall_64+0xfa/0x3b0 [ 175.815532][ T6835] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.815552][ T6835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.815567][ T6835] ? clear_bhb_loop+0x60/0xb0 [ 175.815585][ T6835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.815600][ T6835] RIP: 0033:0x7fce42f8e929 [ 175.815614][ T6835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.815626][ T6835] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 175.815642][ T6835] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 175.815653][ T6835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 175.815662][ T6835] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 175.815671][ T6835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.815681][ T6835] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 175.815704][ T6835] [ 176.504169][ T6840] loop0: detected capacity change from 0 to 32768 [ 176.540142][ T6840] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 176.552676][ T6840] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 176.567625][ T6840] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 176.656032][ T6840] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 176.672666][ T6840] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 176.682669][ T6840] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 176.697575][ T6840] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 176.706831][ T6840] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6840 [syz.0.35] iterate_dir+0x5ac/0x770 [ 176.717183][ T6840] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 176.725235][ T6843] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 176.727692][ T6840] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 176.737082][ T6843] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 176.742662][ T6840] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 176.742680][ T6840] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 176.754618][ T6843] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6840 [syz.0.35] iterate_dir+0x5ac/0x770 [ 176.764393][ T6840] gfs2: fsid=syz:syz.s: File system withdrawn [ 176.767710][ T6843] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6843 [syz.0.35] iterate_dir+0x5ac/0x770 [ 176.777418][ T6840] CPU: 1 UID: 0 PID: 6840 Comm: syz.0.35 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 176.777453][ T6840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 176.777468][ T6840] Call Trace: [ 176.777478][ T6840] [ 176.777488][ T6840] dump_stack_lvl+0x189/0x250 [ 176.777526][ T6840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.777555][ T6840] ? __pfx__printk+0x10/0x10 [ 176.777588][ T6840] ? kobject_uevent_env+0x36b/0x8c0 [ 176.777626][ T6840] gfs2_withdraw+0x111e/0x14f0 [ 176.777683][ T6840] ? __pfx_gfs2_withdraw+0x10/0x10 [ 176.777722][ T6840] ? __pfx__printk+0x10/0x10 [ 176.777764][ T6840] ? gfs2_consist_inode_i+0xf5/0x110 [ 176.777805][ T6840] gfs2_dirent_scan+0x545/0x690 [ 176.777844][ T6840] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 176.777885][ T6840] gfs2_dir_read+0x806/0x1780 [ 176.777931][ T6840] ? __pfx_inode_dio_wait+0x10/0x10 [ 176.777959][ T6840] ? __pfx___might_resched+0x10/0x10 [ 176.777986][ T6840] ? __pfx_gfs2_dir_read+0x10/0x10 [ 176.778019][ T6840] ? gfs2_glock_nq+0x10bb/0x1900 [ 176.778059][ T6840] ? gfs2_glock_wait+0x20f/0x2a0 [ 176.778085][ T6840] gfs2_readdir+0x14c/0x1b0 [ 176.778118][ T6840] ? iterate_dir+0x49f/0x770 [ 176.778145][ T6840] ? __pfx_gfs2_readdir+0x10/0x10 [ 176.778184][ T6840] ? iterate_dir+0x5ac/0x770 [ 176.778209][ T6840] ? iterate_dir+0x49f/0x770 [ 176.778237][ T6840] ? down_read_killable+0x1d1/0x350 [ 176.778280][ T6840] iterate_dir+0x5ac/0x770 [ 176.778313][ T6840] __se_sys_getdents64+0xe4/0x260 [ 176.778350][ T6840] ? __pfx___se_sys_getdents64+0x10/0x10 [ 176.778377][ T6840] ? __pfx_filldir64+0x10/0x10 [ 176.778406][ T6840] ? rcu_is_watching+0x15/0xb0 [ 176.778439][ T6840] ? do_syscall_64+0xbe/0x3b0 [ 176.778476][ T6840] do_syscall_64+0xfa/0x3b0 [ 176.778507][ T6840] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.778536][ T6840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.778559][ T6840] ? clear_bhb_loop+0x60/0xb0 [ 176.778588][ T6840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.778612][ T6840] RIP: 0033:0x7fce42f8e929 [ 176.778633][ T6840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.778652][ T6840] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 176.778678][ T6840] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 176.778695][ T6840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 176.778708][ T6840] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 176.778723][ T6840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.778736][ T6840] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 176.778773][ T6840] [ 177.062205][ T6843] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 177.502830][ T6845] loop0: detected capacity change from 0 to 32768 [ 177.520051][ T6845] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 177.528782][ T6845] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 177.542303][ T6845] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 177.644272][ T6845] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 177.666139][ T6845] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 177.676360][ T6845] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 177.691598][ T6845] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 177.701741][ T6845] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6845 [syz.0.36] iterate_dir+0x5ac/0x770 [ 177.711979][ T6845] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 177.721673][ T6845] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 177.729058][ T6845] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 177.737837][ T6845] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 177.745456][ T6845] gfs2: fsid=syz:syz.s: File system withdrawn [ 177.751796][ T6845] CPU: 0 UID: 0 PID: 6845 Comm: syz.0.36 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 177.751817][ T6845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.751827][ T6845] Call Trace: [ 177.751833][ T6845] [ 177.751839][ T6845] dump_stack_lvl+0x189/0x250 [ 177.751864][ T6845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.751882][ T6845] ? __pfx__printk+0x10/0x10 [ 177.751904][ T6845] ? kobject_uevent_env+0x36b/0x8c0 [ 177.751927][ T6845] gfs2_withdraw+0x111e/0x14f0 [ 177.751963][ T6845] ? __pfx_gfs2_withdraw+0x10/0x10 [ 177.751989][ T6845] ? __pfx__printk+0x10/0x10 [ 177.752015][ T6845] ? gfs2_consist_inode_i+0xf5/0x110 [ 177.752041][ T6845] gfs2_dirent_scan+0x545/0x690 [ 177.752073][ T6845] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 177.752099][ T6845] gfs2_dir_read+0x806/0x1780 [ 177.752129][ T6845] ? __pfx_inode_dio_wait+0x10/0x10 [ 177.752148][ T6845] ? __pfx___might_resched+0x10/0x10 [ 177.752164][ T6845] ? __pfx_gfs2_dir_read+0x10/0x10 [ 177.752186][ T6845] ? gfs2_glock_nq+0x10bb/0x1900 [ 177.752210][ T6845] ? gfs2_glock_wait+0x20f/0x2a0 [ 177.752226][ T6845] gfs2_readdir+0x14c/0x1b0 [ 177.752247][ T6845] ? iterate_dir+0x49f/0x770 [ 177.752266][ T6845] ? __pfx_gfs2_readdir+0x10/0x10 [ 177.752294][ T6845] ? iterate_dir+0x5ac/0x770 [ 177.752313][ T6845] ? iterate_dir+0x49f/0x770 [ 177.752328][ T6845] ? down_read_killable+0x1d1/0x350 [ 177.752356][ T6845] iterate_dir+0x5ac/0x770 [ 177.752376][ T6845] __se_sys_getdents64+0xe4/0x260 [ 177.752396][ T6845] ? __pfx___se_sys_getdents64+0x10/0x10 [ 177.752413][ T6845] ? __pfx_filldir64+0x10/0x10 [ 177.752431][ T6845] ? rcu_is_watching+0x15/0xb0 [ 177.752451][ T6845] ? do_syscall_64+0xbe/0x3b0 [ 177.752476][ T6845] do_syscall_64+0xfa/0x3b0 [ 177.752496][ T6845] ? lockdep_hardirqs_on+0x9c/0x150 [ 177.752521][ T6845] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.752536][ T6845] ? clear_bhb_loop+0x60/0xb0 [ 177.752555][ T6845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.752570][ T6845] RIP: 0033:0x7fce42f8e929 [ 177.752583][ T6845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.752600][ T6845] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 177.752617][ T6845] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 177.752628][ T6845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 177.752636][ T6845] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 177.752645][ T6845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.752654][ T6845] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 177.752677][ T6845] [ 178.425838][ T6850] loop0: detected capacity change from 0 to 32768 [ 178.450791][ T6850] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 178.459582][ T6850] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 178.473456][ T6850] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 178.585417][ T6850] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 178.601979][ T6850] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 178.613264][ T6850] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 178.630134][ T6850] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 178.639643][ T6850] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6850 [syz.0.37] iterate_dir+0x5ac/0x770 [ 178.649263][ T6850] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 178.657711][ T6850] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 178.665118][ T6850] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 178.674256][ T6850] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 178.682268][ T6850] gfs2: fsid=syz:syz.s: File system withdrawn [ 178.688495][ T6850] CPU: 0 UID: 0 PID: 6850 Comm: syz.0.37 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 178.688524][ T6850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.688537][ T6850] Call Trace: [ 178.688546][ T6850] [ 178.688555][ T6850] dump_stack_lvl+0x189/0x250 2025/07/08 09:32:56 executed programs: 24 [ 178.688589][ T6850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.688615][ T6850] ? __pfx__printk+0x10/0x10 [ 178.688645][ T6850] ? kobject_uevent_env+0x36b/0x8c0 [ 178.688678][ T6850] gfs2_withdraw+0x111e/0x14f0 [ 178.688730][ T6850] ? __pfx_gfs2_withdraw+0x10/0x10 [ 178.688766][ T6850] ? __pfx__printk+0x10/0x10 [ 178.688803][ T6850] ? gfs2_consist_inode_i+0xf5/0x110 [ 178.688840][ T6850] gfs2_dirent_scan+0x545/0x690 [ 178.688876][ T6850] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 178.688913][ T6850] gfs2_dir_read+0x806/0x1780 [ 178.688954][ T6850] ? __pfx_inode_dio_wait+0x10/0x10 [ 178.688979][ T6850] ? __pfx___might_resched+0x10/0x10 [ 178.689003][ T6850] ? __pfx_gfs2_dir_read+0x10/0x10 [ 178.689034][ T6850] ? gfs2_glock_nq+0x10bb/0x1900 [ 178.689068][ T6850] ? gfs2_glock_wait+0x20f/0x2a0 [ 178.689091][ T6850] gfs2_readdir+0x14c/0x1b0 [ 178.689121][ T6850] ? iterate_dir+0x49f/0x770 [ 178.689144][ T6850] ? __pfx_gfs2_readdir+0x10/0x10 [ 178.689184][ T6850] ? iterate_dir+0x5ac/0x770 [ 178.689207][ T6850] ? iterate_dir+0x49f/0x770 [ 178.689238][ T6850] ? down_read_killable+0x1d1/0x350 [ 178.689276][ T6850] iterate_dir+0x5ac/0x770 [ 178.689299][ T6850] __se_sys_getdents64+0xe4/0x260 [ 178.689319][ T6850] ? __pfx___se_sys_getdents64+0x10/0x10 [ 178.689336][ T6850] ? __pfx_filldir64+0x10/0x10 [ 178.689355][ T6850] ? rcu_is_watching+0x15/0xb0 [ 178.689374][ T6850] ? do_syscall_64+0xbe/0x3b0 [ 178.689399][ T6850] do_syscall_64+0xfa/0x3b0 [ 178.689426][ T6850] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.689447][ T6850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.689461][ T6850] ? clear_bhb_loop+0x60/0xb0 [ 178.689480][ T6850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.689495][ T6850] RIP: 0033:0x7fce42f8e929 [ 178.689508][ T6850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.689521][ T6850] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 178.689537][ T6850] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 178.689549][ T6850] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 178.689557][ T6850] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 178.689566][ T6850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.689575][ T6850] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 178.689598][ T6850] [ 179.362227][ T6855] loop0: detected capacity change from 0 to 32768 [ 179.383126][ T6855] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 179.391470][ T6855] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 179.413643][ T6855] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 179.492834][ T6855] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 179.506040][ T6855] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 179.515872][ T6855] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 179.530512][ T6855] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 179.540833][ T6855] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6855 [syz.0.38] iterate_dir+0x5ac/0x770 [ 179.550716][ T6855] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 179.558207][ T6858] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 179.566145][ T6855] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 179.571206][ T6858] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 179.576446][ T6855] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 179.586046][ T6858] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6855 [syz.0.38] iterate_dir+0x5ac/0x770 [ 179.594507][ T6855] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 179.594738][ T6855] gfs2: fsid=syz:syz.s: File system withdrawn [ 179.608545][ T6858] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6858 [syz.0.38] iterate_dir+0x5ac/0x770 [ 179.610448][ T6855] CPU: 0 UID: 0 PID: 6855 Comm: syz.0.38 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 179.610480][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 179.610493][ T6855] Call Trace: [ 179.610503][ T6855] [ 179.610515][ T6855] dump_stack_lvl+0x189/0x250 [ 179.610550][ T6855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.610580][ T6855] ? __pfx__printk+0x10/0x10 [ 179.610612][ T6855] ? kobject_uevent_env+0x36b/0x8c0 [ 179.610649][ T6855] gfs2_withdraw+0x111e/0x14f0 [ 179.610705][ T6855] ? __pfx_gfs2_withdraw+0x10/0x10 [ 179.610745][ T6855] ? __pfx__printk+0x10/0x10 [ 179.610785][ T6855] ? gfs2_consist_inode_i+0xf5/0x110 [ 179.610827][ T6855] gfs2_dirent_scan+0x545/0x690 [ 179.610866][ T6855] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 179.610908][ T6855] gfs2_dir_read+0x806/0x1780 [ 179.610954][ T6855] ? __pfx_inode_dio_wait+0x10/0x10 [ 179.610982][ T6855] ? __pfx___might_resched+0x10/0x10 [ 179.611007][ T6855] ? __pfx_gfs2_dir_read+0x10/0x10 [ 179.611042][ T6855] ? gfs2_glock_nq+0x10bb/0x1900 [ 179.611079][ T6855] ? gfs2_glock_wait+0x20f/0x2a0 [ 179.611104][ T6855] gfs2_readdir+0x14c/0x1b0 [ 179.611136][ T6855] ? iterate_dir+0x49f/0x770 [ 179.611162][ T6855] ? __pfx_gfs2_readdir+0x10/0x10 [ 179.611199][ T6855] ? iterate_dir+0x5ac/0x770 [ 179.611225][ T6855] ? iterate_dir+0x49f/0x770 [ 179.611247][ T6855] ? down_read_killable+0x1d1/0x350 [ 179.611289][ T6855] iterate_dir+0x5ac/0x770 [ 179.611323][ T6855] __se_sys_getdents64+0xe4/0x260 [ 179.611362][ T6855] ? __pfx___se_sys_getdents64+0x10/0x10 [ 179.611388][ T6855] ? __pfx_filldir64+0x10/0x10 [ 179.611417][ T6855] ? __pfx___se_sys_chdir+0x10/0x10 [ 179.611446][ T6855] ? rcu_is_watching+0x15/0xb0 [ 179.611478][ T6855] ? do_syscall_64+0xbe/0x3b0 [ 179.611516][ T6855] do_syscall_64+0xfa/0x3b0 [ 179.611546][ T6855] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.611577][ T6855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.611600][ T6855] ? clear_bhb_loop+0x60/0xb0 [ 179.611630][ T6855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.611654][ T6855] RIP: 0033:0x7fce42f8e929 [ 179.611674][ T6855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.611693][ T6855] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 179.611719][ T6855] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 179.611736][ T6855] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 179.611749][ T6855] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 179.611764][ T6855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.611777][ T6855] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 179.611816][ T6855] [ 179.904448][ T6858] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 180.332615][ T6860] loop0: detected capacity change from 0 to 32768 [ 180.349595][ T6860] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 180.357897][ T6860] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 180.373234][ T6860] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 180.458204][ T6860] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 180.473355][ T6860] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 180.483118][ T6860] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 180.498914][ T6860] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 180.508084][ T6860] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6860 [syz.0.39] iterate_dir+0x5ac/0x770 [ 180.517901][ T6860] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 180.526674][ T6860] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 180.536599][ T6860] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 180.545864][ T6860] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 180.553109][ T6860] gfs2: fsid=syz:syz.s: File system withdrawn [ 180.559382][ T6860] CPU: 0 UID: 0 PID: 6860 Comm: syz.0.39 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 180.559410][ T6860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.559423][ T6860] Call Trace: [ 180.559430][ T6860] [ 180.559439][ T6860] dump_stack_lvl+0x189/0x250 [ 180.559471][ T6860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.559495][ T6860] ? __pfx__printk+0x10/0x10 [ 180.559526][ T6860] ? kobject_uevent_env+0x36b/0x8c0 [ 180.559560][ T6860] gfs2_withdraw+0x111e/0x14f0 [ 180.559613][ T6860] ? __pfx_gfs2_withdraw+0x10/0x10 [ 180.559648][ T6860] ? __pfx__printk+0x10/0x10 [ 180.559683][ T6860] ? gfs2_consist_inode_i+0xf5/0x110 [ 180.559717][ T6860] gfs2_dirent_scan+0x545/0x690 [ 180.559751][ T6860] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 180.559786][ T6860] gfs2_dir_read+0x806/0x1780 [ 180.559826][ T6860] ? __pfx_inode_dio_wait+0x10/0x10 [ 180.559850][ T6860] ? __pfx___might_resched+0x10/0x10 [ 180.559872][ T6860] ? __pfx_gfs2_dir_read+0x10/0x10 [ 180.559902][ T6860] ? gfs2_glock_nq+0x10bb/0x1900 [ 180.559935][ T6860] ? gfs2_glock_wait+0x20f/0x2a0 [ 180.559958][ T6860] gfs2_readdir+0x14c/0x1b0 [ 180.559986][ T6860] ? iterate_dir+0x49f/0x770 [ 180.560019][ T6860] ? __pfx_gfs2_readdir+0x10/0x10 [ 180.560051][ T6860] ? iterate_dir+0x5ac/0x770 [ 180.560073][ T6860] ? iterate_dir+0x49f/0x770 [ 180.560093][ T6860] ? down_read_killable+0x1d1/0x350 [ 180.560131][ T6860] iterate_dir+0x5ac/0x770 [ 180.560161][ T6860] __se_sys_getdents64+0xe4/0x260 [ 180.560189][ T6860] ? __pfx___se_sys_getdents64+0x10/0x10 [ 180.560212][ T6860] ? __pfx_filldir64+0x10/0x10 [ 180.560238][ T6860] ? rcu_is_watching+0x15/0xb0 [ 180.560267][ T6860] ? do_syscall_64+0xbe/0x3b0 [ 180.560301][ T6860] do_syscall_64+0xfa/0x3b0 [ 180.560328][ T6860] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.560354][ T6860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.560375][ T6860] ? clear_bhb_loop+0x60/0xb0 [ 180.560401][ T6860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.560421][ T6860] RIP: 0033:0x7fce42f8e929 [ 180.560440][ T6860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.560457][ T6860] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 180.560479][ T6860] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 180.560495][ T6860] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 180.560507][ T6860] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 180.560521][ T6860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.560534][ T6860] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 180.560567][ T6860] [ 181.242538][ T6865] loop0: detected capacity change from 0 to 32768 [ 181.269624][ T6865] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 181.278001][ T6865] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 181.293555][ T6865] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 181.401618][ T6865] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 181.417411][ T6865] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 181.427960][ T6865] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 181.442505][ T6865] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 181.451990][ T6865] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6865 [syz.0.40] iterate_dir+0x5ac/0x770 [ 181.461420][ T6865] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 181.470963][ T6865] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 181.478196][ T6865] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 181.487106][ T6865] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 181.493791][ T6865] gfs2: fsid=syz:syz.s: File system withdrawn [ 181.499990][ T6865] CPU: 0 UID: 0 PID: 6865 Comm: syz.0.40 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 181.500020][ T6865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.500033][ T6865] Call Trace: [ 181.500041][ T6865] [ 181.500050][ T6865] dump_stack_lvl+0x189/0x250 [ 181.500083][ T6865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.500108][ T6865] ? __pfx__printk+0x10/0x10 [ 181.500138][ T6865] ? kobject_uevent_env+0x36b/0x8c0 [ 181.500172][ T6865] gfs2_withdraw+0x111e/0x14f0 [ 181.500226][ T6865] ? __pfx_gfs2_withdraw+0x10/0x10 [ 181.500263][ T6865] ? __pfx__printk+0x10/0x10 [ 181.500301][ T6865] ? gfs2_consist_inode_i+0xf5/0x110 [ 181.500339][ T6865] gfs2_dirent_scan+0x545/0x690 [ 181.500375][ T6865] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 181.500414][ T6865] gfs2_dir_read+0x806/0x1780 [ 181.500457][ T6865] ? __pfx_inode_dio_wait+0x10/0x10 [ 181.500483][ T6865] ? __pfx___might_resched+0x10/0x10 [ 181.500507][ T6865] ? __pfx_gfs2_dir_read+0x10/0x10 [ 181.500537][ T6865] ? gfs2_glock_nq+0x10bb/0x1900 [ 181.500572][ T6865] ? gfs2_glock_wait+0x20f/0x2a0 [ 181.500595][ T6865] gfs2_readdir+0x14c/0x1b0 [ 181.500626][ T6865] ? iterate_dir+0x49f/0x770 [ 181.500649][ T6865] ? __pfx_gfs2_readdir+0x10/0x10 [ 181.500684][ T6865] ? iterate_dir+0x5ac/0x770 [ 181.500708][ T6865] ? iterate_dir+0x49f/0x770 [ 181.500731][ T6865] ? down_read_killable+0x1d1/0x350 [ 181.500769][ T6865] iterate_dir+0x5ac/0x770 [ 181.500800][ T6865] __se_sys_getdents64+0xe4/0x260 [ 181.500830][ T6865] ? __pfx___se_sys_getdents64+0x10/0x10 [ 181.500853][ T6865] ? __pfx_filldir64+0x10/0x10 [ 181.500881][ T6865] ? rcu_is_watching+0x15/0xb0 [ 181.500910][ T6865] ? do_syscall_64+0xbe/0x3b0 [ 181.500945][ T6865] do_syscall_64+0xfa/0x3b0 [ 181.500982][ T6865] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.501010][ T6865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.501032][ T6865] ? clear_bhb_loop+0x60/0xb0 [ 181.501059][ T6865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.501081][ T6865] RIP: 0033:0x7fce42f8e929 [ 181.501100][ T6865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.501119][ T6865] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 181.501140][ T6865] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 181.501156][ T6865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 181.501169][ T6865] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 181.501183][ T6865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.501196][ T6865] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 181.501230][ T6865] [ 182.192689][ T6870] loop0: detected capacity change from 0 to 32768 [ 182.213233][ T6870] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 182.227425][ T6870] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 182.241926][ T6870] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 182.344739][ T6870] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 182.357530][ T6870] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 182.367698][ T6870] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 182.383157][ T6870] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 182.392413][ T6870] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6870 [syz.0.41] iterate_dir+0x5ac/0x770 [ 182.401910][ T6870] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 182.410434][ T6870] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 182.417668][ T6870] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 182.426767][ T6870] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 182.433487][ T6870] gfs2: fsid=syz:syz.s: File system withdrawn [ 182.439672][ T6870] CPU: 0 UID: 0 PID: 6870 Comm: syz.0.41 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 182.439702][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.439715][ T6870] Call Trace: [ 182.439724][ T6870] [ 182.439733][ T6870] dump_stack_lvl+0x189/0x250 [ 182.439767][ T6870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.439794][ T6870] ? __pfx__printk+0x10/0x10 [ 182.439825][ T6870] ? kobject_uevent_env+0x36b/0x8c0 [ 182.439857][ T6870] gfs2_withdraw+0x111e/0x14f0 [ 182.439909][ T6870] ? __pfx_gfs2_withdraw+0x10/0x10 [ 182.439945][ T6870] ? __pfx__printk+0x10/0x10 [ 182.439981][ T6870] ? gfs2_consist_inode_i+0xf5/0x110 [ 182.440019][ T6870] gfs2_dirent_scan+0x545/0x690 [ 182.440055][ T6870] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 182.440092][ T6870] gfs2_dir_read+0x806/0x1780 [ 182.440148][ T6870] ? __pfx_inode_dio_wait+0x10/0x10 [ 182.440174][ T6870] ? __pfx___might_resched+0x10/0x10 [ 182.440197][ T6870] ? __pfx_gfs2_dir_read+0x10/0x10 [ 182.440229][ T6870] ? gfs2_glock_nq+0x10bb/0x1900 [ 182.440263][ T6870] ? gfs2_glock_wait+0x20f/0x2a0 [ 182.440287][ T6870] gfs2_readdir+0x14c/0x1b0 [ 182.440316][ T6870] ? iterate_dir+0x49f/0x770 [ 182.440341][ T6870] ? __pfx_gfs2_readdir+0x10/0x10 [ 182.440375][ T6870] ? iterate_dir+0x5ac/0x770 [ 182.440398][ T6870] ? iterate_dir+0x49f/0x770 [ 182.440420][ T6870] ? down_read_killable+0x1d1/0x350 [ 182.440458][ T6870] iterate_dir+0x5ac/0x770 [ 182.440489][ T6870] __se_sys_getdents64+0xe4/0x260 [ 182.440517][ T6870] ? __pfx___se_sys_getdents64+0x10/0x10 [ 182.440541][ T6870] ? __pfx_filldir64+0x10/0x10 [ 182.440567][ T6870] ? rcu_is_watching+0x15/0xb0 [ 182.440596][ T6870] ? do_syscall_64+0xbe/0x3b0 [ 182.440630][ T6870] do_syscall_64+0xfa/0x3b0 [ 182.440658][ T6870] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.440684][ T6870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.440706][ T6870] ? clear_bhb_loop+0x60/0xb0 [ 182.440733][ T6870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.440754][ T6870] RIP: 0033:0x7fce42f8e929 [ 182.440773][ T6870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.440791][ T6870] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 182.440814][ T6870] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 182.440830][ T6870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 182.440843][ T6870] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 182.440855][ T6870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.440869][ T6870] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 182.440902][ T6870] [ 183.125249][ T6875] loop0: detected capacity change from 0 to 32768 [ 183.147259][ T6875] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 183.158154][ T6875] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 183.172582][ T6875] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 183.264784][ T6875] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 183.281311][ T6875] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 183.291533][ T6875] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 183.307000][ T6875] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 183.317360][ T6875] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6875 [syz.0.42] iterate_dir+0x5ac/0x770 [ 183.326959][ T6875] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 183.336850][ T6878] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 183.337380][ T6875] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 183.346906][ T6878] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 183.354740][ T6875] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 183.363625][ T6878] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6875 [syz.0.42] iterate_dir+0x5ac/0x770 [ 183.372637][ T6875] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 183.381604][ T6878] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6878 [syz.0.42] iterate_dir+0x5ac/0x770 [ 183.390181][ T6875] gfs2: fsid=syz:syz.s: File system withdrawn [ 183.401089][ T6878] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 183.403380][ T6875] CPU: 1 UID: 0 PID: 6875 Comm: syz.0.42 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 183.403414][ T6875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.403428][ T6875] Call Trace: [ 183.403438][ T6875] [ 183.403448][ T6875] dump_stack_lvl+0x189/0x250 [ 183.403488][ T6875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.403516][ T6875] ? __pfx__printk+0x10/0x10 [ 183.403550][ T6875] ? kobject_uevent_env+0x36b/0x8c0 [ 183.403586][ T6875] gfs2_withdraw+0x111e/0x14f0 [ 183.403643][ T6875] ? __pfx_gfs2_withdraw+0x10/0x10 [ 183.403683][ T6875] ? __pfx__printk+0x10/0x10 [ 183.403724][ T6875] ? gfs2_consist_inode_i+0xf5/0x110 [ 183.403765][ T6875] gfs2_dirent_scan+0x545/0x690 [ 183.403805][ T6875] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 183.403856][ T6875] gfs2_dir_read+0x806/0x1780 [ 183.403903][ T6875] ? __pfx_inode_dio_wait+0x10/0x10 [ 183.403932][ T6875] ? __pfx___might_resched+0x10/0x10 [ 183.403958][ T6875] ? __pfx_gfs2_dir_read+0x10/0x10 [ 183.403992][ T6875] ? gfs2_glock_nq+0x10bb/0x1900 [ 183.404031][ T6875] ? gfs2_glock_wait+0x20f/0x2a0 [ 183.404057][ T6875] gfs2_readdir+0x14c/0x1b0 [ 183.404089][ T6875] ? iterate_dir+0x49f/0x770 [ 183.404117][ T6875] ? __pfx_gfs2_readdir+0x10/0x10 [ 183.404155][ T6875] ? iterate_dir+0x5ac/0x770 [ 183.404181][ T6875] ? iterate_dir+0x49f/0x770 [ 183.404206][ T6875] ? down_read_killable+0x1d1/0x350 [ 183.404247][ T6875] iterate_dir+0x5ac/0x770 [ 183.404282][ T6875] __se_sys_getdents64+0xe4/0x260 [ 183.404313][ T6875] ? __pfx___se_sys_getdents64+0x10/0x10 [ 183.404339][ T6875] ? __pfx_filldir64+0x10/0x10 [ 183.404369][ T6875] ? rcu_is_watching+0x15/0xb0 [ 183.404400][ T6875] ? do_syscall_64+0xbe/0x3b0 [ 183.404440][ T6875] do_syscall_64+0xfa/0x3b0 [ 183.404471][ T6875] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.404502][ T6875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.404527][ T6875] ? clear_bhb_loop+0x60/0xb0 [ 183.404556][ T6875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.404581][ T6875] RIP: 0033:0x7fce42f8e929 [ 183.404601][ T6875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.404622][ T6875] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 183.404648][ T6875] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 183.404666][ T6875] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 183.404680][ T6875] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 183.404696][ T6875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.404710][ T6875] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 183.404748][ T6875] [ 184.096147][ T6880] loop0: detected capacity change from 0 to 32768 [ 184.120934][ T6880] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 184.130037][ T6880] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 184.142385][ T6880] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 184.236832][ T6880] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 184.252507][ T6880] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 184.262586][ T6880] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 184.280396][ T6880] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 184.289675][ T6880] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6880 [syz.0.43] iterate_dir+0x5ac/0x770 [ 184.299141][ T6880] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 184.307694][ T6880] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 184.315045][ T6880] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 184.324011][ T6880] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 184.331837][ T6880] gfs2: fsid=syz:syz.s: File system withdrawn [ 184.338076][ T6880] CPU: 1 UID: 0 PID: 6880 Comm: syz.0.43 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 184.338109][ T6880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.338120][ T6880] Call Trace: [ 184.338128][ T6880] [ 184.338135][ T6880] dump_stack_lvl+0x189/0x250 [ 184.338164][ T6880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.338185][ T6880] ? __pfx__printk+0x10/0x10 [ 184.338210][ T6880] ? kobject_uevent_env+0x36b/0x8c0 [ 184.338244][ T6880] gfs2_withdraw+0x111e/0x14f0 [ 184.338301][ T6880] ? __pfx_gfs2_withdraw+0x10/0x10 [ 184.338340][ T6880] ? __pfx__printk+0x10/0x10 [ 184.338381][ T6880] ? gfs2_consist_inode_i+0xf5/0x110 [ 184.338424][ T6880] gfs2_dirent_scan+0x545/0x690 [ 184.338466][ T6880] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 184.338511][ T6880] gfs2_dir_read+0x806/0x1780 [ 184.338559][ T6880] ? __pfx_inode_dio_wait+0x10/0x10 [ 184.338588][ T6880] ? __pfx___might_resched+0x10/0x10 [ 184.338612][ T6880] ? __pfx_gfs2_dir_read+0x10/0x10 [ 184.338646][ T6880] ? gfs2_glock_nq+0x10bb/0x1900 [ 184.338684][ T6880] ? gfs2_glock_wait+0x20f/0x2a0 [ 184.338708][ T6880] gfs2_readdir+0x14c/0x1b0 [ 184.338741][ T6880] ? iterate_dir+0x49f/0x770 [ 184.338769][ T6880] ? __pfx_gfs2_readdir+0x10/0x10 [ 184.338808][ T6880] ? iterate_dir+0x5ac/0x770 [ 184.338835][ T6880] ? iterate_dir+0x49f/0x770 [ 184.338860][ T6880] ? down_read_killable+0x1d1/0x350 [ 184.338911][ T6880] iterate_dir+0x5ac/0x770 [ 184.338947][ T6880] __se_sys_getdents64+0xe4/0x260 [ 184.338980][ T6880] ? __pfx___se_sys_getdents64+0x10/0x10 [ 184.339007][ T6880] ? __pfx_filldir64+0x10/0x10 [ 184.339038][ T6880] ? rcu_is_watching+0x15/0xb0 [ 184.339070][ T6880] ? do_syscall_64+0xbe/0x3b0 [ 184.339110][ T6880] do_syscall_64+0xfa/0x3b0 [ 184.339142][ T6880] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.339174][ T6880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.339199][ T6880] ? clear_bhb_loop+0x60/0xb0 [ 184.339229][ T6880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.339253][ T6880] RIP: 0033:0x7fce42f8e929 [ 184.339274][ T6880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.339294][ T6880] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 184.339320][ T6880] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 184.339338][ T6880] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 184.339352][ T6880] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 184.339368][ T6880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.339381][ T6880] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 184.339420][ T6880] 2025/07/08 09:33:02 executed programs: 30 [ 185.030363][ T6885] loop0: detected capacity change from 0 to 32768 [ 185.051573][ T6885] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 185.060045][ T6885] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 185.074415][ T6885] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 185.177732][ T6885] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 185.195272][ T6885] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 185.205696][ T6885] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 185.220623][ T6885] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 185.230457][ T6885] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6885 [syz.0.44] iterate_dir+0x5ac/0x770 [ 185.239960][ T6885] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 185.248450][ T6885] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 185.255658][ T6885] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 185.264512][ T6885] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 185.271154][ T6885] gfs2: fsid=syz:syz.s: File system withdrawn [ 185.277248][ T6885] CPU: 0 UID: 0 PID: 6885 Comm: syz.0.44 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 185.277268][ T6885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.277278][ T6885] Call Trace: [ 185.277284][ T6885] [ 185.277290][ T6885] dump_stack_lvl+0x189/0x250 [ 185.277314][ T6885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.277333][ T6885] ? __pfx__printk+0x10/0x10 [ 185.277354][ T6885] ? kobject_uevent_env+0x36b/0x8c0 [ 185.277394][ T6885] gfs2_withdraw+0x111e/0x14f0 [ 185.277431][ T6885] ? __pfx_gfs2_withdraw+0x10/0x10 [ 185.277457][ T6885] ? __pfx__printk+0x10/0x10 [ 185.277483][ T6885] ? gfs2_consist_inode_i+0xf5/0x110 [ 185.277510][ T6885] gfs2_dirent_scan+0x545/0x690 [ 185.277536][ T6885] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 185.277562][ T6885] gfs2_dir_read+0x806/0x1780 [ 185.277594][ T6885] ? __pfx_inode_dio_wait+0x10/0x10 [ 185.277612][ T6885] ? __pfx___might_resched+0x10/0x10 [ 185.277629][ T6885] ? __pfx_gfs2_dir_read+0x10/0x10 [ 185.277652][ T6885] ? gfs2_glock_nq+0x10bb/0x1900 [ 185.277676][ T6885] ? gfs2_glock_wait+0x20f/0x2a0 [ 185.277692][ T6885] gfs2_readdir+0x14c/0x1b0 [ 185.277714][ T6885] ? iterate_dir+0x49f/0x770 [ 185.277731][ T6885] ? __pfx_gfs2_readdir+0x10/0x10 [ 185.277755][ T6885] ? iterate_dir+0x5ac/0x770 [ 185.277772][ T6885] ? iterate_dir+0x49f/0x770 [ 185.277787][ T6885] ? down_read_killable+0x1d1/0x350 [ 185.277814][ T6885] iterate_dir+0x5ac/0x770 [ 185.277841][ T6885] __se_sys_getdents64+0xe4/0x260 [ 185.277861][ T6885] ? __pfx___se_sys_getdents64+0x10/0x10 [ 185.277878][ T6885] ? __pfx_filldir64+0x10/0x10 [ 185.277897][ T6885] ? rcu_is_watching+0x15/0xb0 [ 185.277916][ T6885] ? do_syscall_64+0xbe/0x3b0 [ 185.277941][ T6885] do_syscall_64+0xfa/0x3b0 [ 185.277962][ T6885] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.277981][ T6885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.277997][ T6885] ? clear_bhb_loop+0x60/0xb0 [ 185.278015][ T6885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.278030][ T6885] RIP: 0033:0x7fce42f8e929 [ 185.278044][ T6885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.278058][ T6885] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 185.278074][ T6885] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 185.278090][ T6885] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 185.278102][ T6885] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 185.278116][ T6885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.278129][ T6885] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 185.278163][ T6885] [ 185.963201][ T6890] loop0: detected capacity change from 0 to 32768 [ 185.980971][ T6890] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 185.991711][ T6890] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 186.005384][ T6890] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 186.114460][ T6890] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 186.131056][ T6890] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 186.141842][ T6890] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 186.157064][ T6890] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 186.166373][ T6890] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6890 [syz.0.45] iterate_dir+0x5ac/0x770 [ 186.175761][ T6890] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 186.184251][ T6890] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 186.191524][ T6890] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 186.200350][ T6890] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 186.206946][ T6890] gfs2: fsid=syz:syz.s: File system withdrawn [ 186.213256][ T6890] CPU: 0 UID: 0 PID: 6890 Comm: syz.0.45 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 186.213286][ T6890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.213299][ T6890] Call Trace: [ 186.213307][ T6890] [ 186.213315][ T6890] dump_stack_lvl+0x189/0x250 [ 186.213348][ T6890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.213374][ T6890] ? __pfx__printk+0x10/0x10 [ 186.213405][ T6890] ? kobject_uevent_env+0x36b/0x8c0 [ 186.213435][ T6890] gfs2_withdraw+0x111e/0x14f0 [ 186.213485][ T6890] ? __pfx_gfs2_withdraw+0x10/0x10 [ 186.213544][ T6890] ? __pfx__printk+0x10/0x10 [ 186.213580][ T6890] ? gfs2_consist_inode_i+0xf5/0x110 [ 186.213616][ T6890] gfs2_dirent_scan+0x545/0x690 [ 186.213651][ T6890] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 186.213688][ T6890] gfs2_dir_read+0x806/0x1780 [ 186.213730][ T6890] ? __pfx_inode_dio_wait+0x10/0x10 [ 186.213755][ T6890] ? __pfx___might_resched+0x10/0x10 [ 186.213778][ T6890] ? __pfx_gfs2_dir_read+0x10/0x10 [ 186.213808][ T6890] ? gfs2_glock_nq+0x10bb/0x1900 [ 186.213839][ T6890] ? gfs2_glock_wait+0x20f/0x2a0 [ 186.213861][ T6890] gfs2_readdir+0x14c/0x1b0 [ 186.213888][ T6890] ? iterate_dir+0x49f/0x770 [ 186.213912][ T6890] ? __pfx_gfs2_readdir+0x10/0x10 [ 186.213947][ T6890] ? iterate_dir+0x5ac/0x770 [ 186.213969][ T6890] ? iterate_dir+0x49f/0x770 [ 186.213991][ T6890] ? down_read_killable+0x1d1/0x350 [ 186.214026][ T6890] iterate_dir+0x5ac/0x770 [ 186.214055][ T6890] __se_sys_getdents64+0xe4/0x260 [ 186.214081][ T6890] ? __pfx___se_sys_getdents64+0x10/0x10 [ 186.214103][ T6890] ? __pfx_filldir64+0x10/0x10 [ 186.214129][ T6890] ? rcu_is_watching+0x15/0xb0 [ 186.214157][ T6890] ? do_syscall_64+0xbe/0x3b0 [ 186.214192][ T6890] do_syscall_64+0xfa/0x3b0 [ 186.214220][ T6890] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.214248][ T6890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.214270][ T6890] ? clear_bhb_loop+0x60/0xb0 [ 186.214297][ T6890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.214319][ T6890] RIP: 0033:0x7fce42f8e929 [ 186.214338][ T6890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.214356][ T6890] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 186.214379][ T6890] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 186.214395][ T6890] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 186.214408][ T6890] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 186.214422][ T6890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.214435][ T6890] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 186.214469][ T6890] [ 186.884245][ T6895] loop0: detected capacity change from 0 to 32768 [ 186.906814][ T6895] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 186.916939][ T6895] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 186.932553][ T6895] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 187.033598][ T6895] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 187.047868][ T6895] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 187.057680][ T6895] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 187.073247][ T6895] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 187.082953][ T6895] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6895 [syz.0.46] iterate_dir+0x5ac/0x770 [ 187.092475][ T6895] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 187.100970][ T6895] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 187.108201][ T6895] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 187.117561][ T6895] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 187.124373][ T6895] gfs2: fsid=syz:syz.s: File system withdrawn [ 187.130500][ T6895] CPU: 1 UID: 0 PID: 6895 Comm: syz.0.46 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 187.130522][ T6895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.130532][ T6895] Call Trace: [ 187.130538][ T6895] [ 187.130545][ T6895] dump_stack_lvl+0x189/0x250 [ 187.130571][ T6895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.130590][ T6895] ? __pfx__printk+0x10/0x10 [ 187.130612][ T6895] ? kobject_uevent_env+0x36b/0x8c0 [ 187.130635][ T6895] gfs2_withdraw+0x111e/0x14f0 [ 187.130672][ T6895] ? __pfx_gfs2_withdraw+0x10/0x10 [ 187.130698][ T6895] ? __pfx__printk+0x10/0x10 [ 187.130726][ T6895] ? gfs2_consist_inode_i+0xf5/0x110 [ 187.130753][ T6895] gfs2_dirent_scan+0x545/0x690 [ 187.130779][ T6895] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 187.130806][ T6895] gfs2_dir_read+0x806/0x1780 [ 187.130835][ T6895] ? __pfx_inode_dio_wait+0x10/0x10 [ 187.130854][ T6895] ? __pfx___might_resched+0x10/0x10 [ 187.130871][ T6895] ? __pfx_gfs2_dir_read+0x10/0x10 [ 187.130893][ T6895] ? gfs2_glock_nq+0x10bb/0x1900 [ 187.130917][ T6895] ? gfs2_glock_wait+0x20f/0x2a0 [ 187.130933][ T6895] gfs2_readdir+0x14c/0x1b0 [ 187.130955][ T6895] ? iterate_dir+0x49f/0x770 [ 187.130972][ T6895] ? __pfx_gfs2_readdir+0x10/0x10 [ 187.130997][ T6895] ? iterate_dir+0x5ac/0x770 [ 187.131013][ T6895] ? iterate_dir+0x49f/0x770 [ 187.131029][ T6895] ? down_read_killable+0x1d1/0x350 [ 187.131056][ T6895] iterate_dir+0x5ac/0x770 [ 187.131078][ T6895] __se_sys_getdents64+0xe4/0x260 [ 187.131098][ T6895] ? __pfx___se_sys_getdents64+0x10/0x10 [ 187.131114][ T6895] ? __pfx_filldir64+0x10/0x10 [ 187.131133][ T6895] ? rcu_is_watching+0x15/0xb0 [ 187.131153][ T6895] ? do_syscall_64+0xbe/0x3b0 [ 187.131178][ T6895] do_syscall_64+0xfa/0x3b0 [ 187.131199][ T6895] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.131218][ T6895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.131233][ T6895] ? clear_bhb_loop+0x60/0xb0 [ 187.131252][ T6895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.131267][ T6895] RIP: 0033:0x7fce42f8e929 [ 187.131281][ T6895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.131294][ T6895] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 187.131311][ T6895] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 187.131323][ T6895] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 187.131333][ T6895] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 187.131348][ T6895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.131361][ T6895] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 187.131394][ T6895] [ 187.809107][ T6900] loop0: detected capacity change from 0 to 32768 [ 187.830005][ T6900] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 187.838221][ T6900] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 187.859358][ T6900] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 187.974326][ T6900] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 187.994011][ T6900] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 188.005238][ T6900] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 188.022201][ T6900] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 188.032223][ T6900] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6900 [syz.0.47] iterate_dir+0x5ac/0x770 [ 188.041753][ T6900] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 188.050495][ T6900] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 188.057828][ T6900] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 188.066925][ T6900] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 188.073749][ T6900] gfs2: fsid=syz:syz.s: File system withdrawn [ 188.079947][ T6900] CPU: 0 UID: 0 PID: 6900 Comm: syz.0.47 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 188.079978][ T6900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.079992][ T6900] Call Trace: [ 188.080000][ T6900] [ 188.080010][ T6900] dump_stack_lvl+0x189/0x250 [ 188.080045][ T6900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.080072][ T6900] ? __pfx__printk+0x10/0x10 [ 188.080104][ T6900] ? kobject_uevent_env+0x36b/0x8c0 [ 188.080136][ T6900] gfs2_withdraw+0x111e/0x14f0 [ 188.080188][ T6900] ? __pfx_gfs2_withdraw+0x10/0x10 [ 188.080225][ T6900] ? __pfx__printk+0x10/0x10 [ 188.080263][ T6900] ? gfs2_consist_inode_i+0xf5/0x110 [ 188.080301][ T6900] gfs2_dirent_scan+0x545/0x690 [ 188.080385][ T6900] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 188.080424][ T6900] gfs2_dir_read+0x806/0x1780 [ 188.080468][ T6900] ? __pfx_inode_dio_wait+0x10/0x10 [ 188.080494][ T6900] ? __pfx___might_resched+0x10/0x10 [ 188.080519][ T6900] ? __pfx_gfs2_dir_read+0x10/0x10 [ 188.080551][ T6900] ? gfs2_glock_nq+0x10bb/0x1900 [ 188.080584][ T6900] ? gfs2_glock_wait+0x20f/0x2a0 [ 188.080607][ T6900] gfs2_readdir+0x14c/0x1b0 [ 188.080635][ T6900] ? iterate_dir+0x49f/0x770 [ 188.080656][ T6900] ? __pfx_gfs2_readdir+0x10/0x10 [ 188.080690][ T6900] ? iterate_dir+0x5ac/0x770 [ 188.080711][ T6900] ? iterate_dir+0x49f/0x770 [ 188.080731][ T6900] ? down_read_killable+0x1d1/0x350 [ 188.080766][ T6900] iterate_dir+0x5ac/0x770 [ 188.080796][ T6900] __se_sys_getdents64+0xe4/0x260 [ 188.080822][ T6900] ? __pfx___se_sys_getdents64+0x10/0x10 [ 188.080845][ T6900] ? __pfx_filldir64+0x10/0x10 [ 188.080871][ T6900] ? rcu_is_watching+0x15/0xb0 [ 188.080900][ T6900] ? do_syscall_64+0xbe/0x3b0 [ 188.080934][ T6900] do_syscall_64+0xfa/0x3b0 [ 188.080962][ T6900] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.080988][ T6900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.081009][ T6900] ? clear_bhb_loop+0x60/0xb0 [ 188.081036][ T6900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.081057][ T6900] RIP: 0033:0x7fce42f8e929 [ 188.081075][ T6900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.081094][ T6900] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 188.081117][ T6900] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 188.081132][ T6900] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 188.081145][ T6900] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 188.081159][ T6900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.081170][ T6900] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 188.081203][ T6900] [ 188.770700][ T6907] loop0: detected capacity change from 0 to 32768 [ 188.791774][ T6907] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 188.800121][ T6907] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 188.820723][ T6907] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 188.916153][ T6907] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 188.932372][ T6907] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 188.942528][ T6907] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 188.957970][ T6907] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 188.968664][ T6907] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6907 [syz.0.48] iterate_dir+0x5ac/0x770 [ 188.978061][ T6907] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 188.986785][ T6907] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 188.994078][ T6907] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 189.003111][ T6907] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 189.009812][ T6907] gfs2: fsid=syz:syz.s: File system withdrawn [ 189.015903][ T6907] CPU: 0 UID: 0 PID: 6907 Comm: syz.0.48 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 189.015924][ T6907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 189.015934][ T6907] Call Trace: [ 189.015941][ T6907] [ 189.015947][ T6907] dump_stack_lvl+0x189/0x250 [ 189.015973][ T6907] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.015991][ T6907] ? __pfx__printk+0x10/0x10 [ 189.016014][ T6907] ? kobject_uevent_env+0x36b/0x8c0 [ 189.016036][ T6907] gfs2_withdraw+0x111e/0x14f0 [ 189.016073][ T6907] ? __pfx_gfs2_withdraw+0x10/0x10 [ 189.016100][ T6907] ? __pfx__printk+0x10/0x10 [ 189.016127][ T6907] ? gfs2_consist_inode_i+0xf5/0x110 [ 189.016153][ T6907] gfs2_dirent_scan+0x545/0x690 [ 189.016180][ T6907] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 189.016206][ T6907] gfs2_dir_read+0x806/0x1780 [ 189.016236][ T6907] ? __pfx_inode_dio_wait+0x10/0x10 [ 189.016255][ T6907] ? __pfx___might_resched+0x10/0x10 [ 189.016277][ T6907] ? __pfx_gfs2_dir_read+0x10/0x10 [ 189.016300][ T6907] ? gfs2_glock_nq+0x10bb/0x1900 [ 189.016324][ T6907] ? gfs2_glock_wait+0x20f/0x2a0 [ 189.016342][ T6907] gfs2_readdir+0x14c/0x1b0 [ 189.016385][ T6907] ? iterate_dir+0x49f/0x770 [ 189.016408][ T6907] ? __pfx_gfs2_readdir+0x10/0x10 [ 189.016460][ T6907] ? iterate_dir+0x5ac/0x770 [ 189.016481][ T6907] ? iterate_dir+0x49f/0x770 [ 189.016496][ T6907] ? down_read_killable+0x1d1/0x350 [ 189.016526][ T6907] iterate_dir+0x5ac/0x770 [ 189.016548][ T6907] __se_sys_getdents64+0xe4/0x260 [ 189.016568][ T6907] ? __pfx___se_sys_getdents64+0x10/0x10 [ 189.016585][ T6907] ? __pfx_filldir64+0x10/0x10 [ 189.016604][ T6907] ? rcu_is_watching+0x15/0xb0 [ 189.016624][ T6907] ? do_syscall_64+0xbe/0x3b0 [ 189.016648][ T6907] do_syscall_64+0xfa/0x3b0 [ 189.016669][ T6907] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.016689][ T6907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.016704][ T6907] ? clear_bhb_loop+0x60/0xb0 [ 189.016723][ T6907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.016739][ T6907] RIP: 0033:0x7fce42f8e929 [ 189.016752][ T6907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.016765][ T6907] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 189.016783][ T6907] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 189.016794][ T6907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 189.016804][ T6907] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 189.016813][ T6907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.016823][ T6907] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 189.016846][ T6907] [ 189.697990][ T6912] loop0: detected capacity change from 0 to 32768 [ 189.719388][ T6912] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 189.727590][ T6912] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 189.746602][ T6912] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 189.846030][ T6912] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 189.868690][ T6912] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 189.882207][ T6912] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 189.897120][ T6912] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 189.906625][ T6912] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6912 [syz.0.49] iterate_dir+0x5ac/0x770 [ 189.916032][ T6912] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 189.924835][ T6912] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 189.932084][ T6912] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 189.940918][ T6912] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 189.947594][ T6912] gfs2: fsid=syz:syz.s: File system withdrawn [ 189.953833][ T6912] CPU: 0 UID: 0 PID: 6912 Comm: syz.0.49 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 189.953863][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 189.953876][ T6912] Call Trace: [ 189.953884][ T6912] [ 189.953893][ T6912] dump_stack_lvl+0x189/0x250 [ 189.953926][ T6912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.953952][ T6912] ? __pfx__printk+0x10/0x10 [ 189.953983][ T6912] ? kobject_uevent_env+0x36b/0x8c0 [ 189.954016][ T6912] gfs2_withdraw+0x111e/0x14f0 [ 189.954070][ T6912] ? __pfx_gfs2_withdraw+0x10/0x10 [ 189.954107][ T6912] ? __pfx__printk+0x10/0x10 [ 189.954144][ T6912] ? gfs2_consist_inode_i+0xf5/0x110 [ 189.954182][ T6912] gfs2_dirent_scan+0x545/0x690 [ 189.954235][ T6912] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 189.954272][ T6912] gfs2_dir_read+0x806/0x1780 [ 189.954316][ T6912] ? __pfx_inode_dio_wait+0x10/0x10 [ 189.954342][ T6912] ? __pfx___might_resched+0x10/0x10 [ 189.954367][ T6912] ? __pfx_gfs2_dir_read+0x10/0x10 [ 189.954399][ T6912] ? gfs2_glock_nq+0x10bb/0x1900 [ 189.954433][ T6912] ? gfs2_glock_wait+0x20f/0x2a0 [ 189.954456][ T6912] gfs2_readdir+0x14c/0x1b0 [ 189.954486][ T6912] ? iterate_dir+0x49f/0x770 [ 189.954511][ T6912] ? __pfx_gfs2_readdir+0x10/0x10 [ 189.954546][ T6912] ? iterate_dir+0x5ac/0x770 [ 189.954570][ T6912] ? iterate_dir+0x49f/0x770 [ 189.954591][ T6912] ? down_read_killable+0x1d1/0x350 [ 189.954630][ T6912] iterate_dir+0x5ac/0x770 [ 189.954661][ T6912] __se_sys_getdents64+0xe4/0x260 [ 189.954689][ T6912] ? __pfx___se_sys_getdents64+0x10/0x10 [ 189.954714][ T6912] ? __pfx_filldir64+0x10/0x10 [ 189.954741][ T6912] ? rcu_is_watching+0x15/0xb0 [ 189.954770][ T6912] ? do_syscall_64+0xbe/0x3b0 [ 189.954805][ T6912] do_syscall_64+0xfa/0x3b0 [ 189.954834][ T6912] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.954862][ T6912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.954885][ T6912] ? clear_bhb_loop+0x60/0xb0 [ 189.954912][ T6912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.954934][ T6912] RIP: 0033:0x7fce42f8e929 [ 189.954952][ T6912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.954972][ T6912] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 189.954994][ T6912] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 2025/07/08 09:33:07 executed programs: 36 [ 189.955011][ T6912] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 189.955024][ T6912] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 189.955037][ T6912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.955050][ T6912] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 189.955084][ T6912] [ 190.659173][ T6919] loop0: detected capacity change from 0 to 32768 [ 190.680006][ T6919] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 190.688222][ T6919] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 190.705664][ T6919] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 190.792097][ T6919] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 190.807288][ T6919] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 190.817654][ T6919] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 589 [ 190.832289][ T6919] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 190.842499][ T6919] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6919 [syz.0.50] iterate_dir+0x5ac/0x770 [ 190.859806][ T6919] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 190.861149][ T6924] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 190.868456][ T6919] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 190.885759][ T6919] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 190.894968][ T6919] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 190.901834][ T6924] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 190.901875][ T6924] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6919 [syz.0.50] iterate_dir+0x5ac/0x770 [ 190.921867][ T6919] gfs2: fsid=syz:syz.s: File system withdrawn [ 190.921890][ T6919] CPU: 0 UID: 0 PID: 6919 Comm: syz.0.50 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 190.921919][ T6919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.921932][ T6919] Call Trace: [ 190.921941][ T6919] [ 190.921950][ T6919] dump_stack_lvl+0x189/0x250 [ 190.921985][ T6919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.922011][ T6919] ? __pfx__printk+0x10/0x10 [ 190.922042][ T6919] ? kobject_uevent_env+0x36b/0x8c0 [ 190.922075][ T6919] gfs2_withdraw+0x111e/0x14f0 [ 190.922140][ T6919] ? __pfx_gfs2_withdraw+0x10/0x10 [ 190.922177][ T6919] ? __pfx__printk+0x10/0x10 [ 190.922214][ T6919] ? gfs2_consist_inode_i+0xf5/0x110 [ 190.922251][ T6919] gfs2_dirent_scan+0x545/0x690 [ 190.922293][ T6919] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 190.922346][ T6919] gfs2_dir_read+0x806/0x1780 [ 190.922393][ T6919] ? __pfx_inode_dio_wait+0x10/0x10 [ 190.922423][ T6919] ? __pfx___might_resched+0x10/0x10 [ 190.922449][ T6919] ? __pfx_gfs2_dir_read+0x10/0x10 [ 190.922511][ T6919] ? gfs2_glock_nq+0x10bb/0x1900 [ 190.922549][ T6919] ? gfs2_glock_wait+0x20f/0x2a0 [ 190.922576][ T6919] gfs2_readdir+0x14c/0x1b0 [ 190.922608][ T6919] ? iterate_dir+0x49f/0x770 [ 190.922635][ T6919] ? __pfx_gfs2_readdir+0x10/0x10 [ 190.922673][ T6919] ? iterate_dir+0x5ac/0x770 [ 190.922700][ T6919] ? iterate_dir+0x49f/0x770 [ 190.922725][ T6919] ? down_read_killable+0x1d1/0x350 [ 190.922769][ T6919] iterate_dir+0x5ac/0x770 [ 190.922802][ T6919] __se_sys_getdents64+0xe4/0x260 [ 190.922835][ T6919] ? __pfx___se_sys_getdents64+0x10/0x10 [ 190.922860][ T6919] ? __pfx_filldir64+0x10/0x10 [ 190.922891][ T6919] ? rcu_is_watching+0x15/0xb0 [ 190.922921][ T6919] ? do_syscall_64+0xbe/0x3b0 [ 190.922959][ T6919] do_syscall_64+0xfa/0x3b0 [ 190.922992][ T6919] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.923022][ T6919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.923045][ T6919] ? clear_bhb_loop+0x60/0xb0 [ 190.923075][ T6919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.923098][ T6919] RIP: 0033:0x7fce42f8e929 [ 190.923120][ T6919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.923140][ T6919] RSP: 002b:00007fce43d9d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 190.923166][ T6919] RAX: ffffffffffffffda RBX: 00007fce431b5fa0 RCX: 00007fce42f8e929 [ 190.923185][ T6919] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 190.923198][ T6919] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 190.923214][ T6919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.923227][ T6919] R13: 0000000000000000 R14: 00007fce431b5fa0 R15: 00007ffe277e5bf8 [ 190.923266][ T6919] [ 191.201960][ T6924] ================================================================== [ 191.210046][ T6924] BUG: KASAN: global-out-of-bounds in pid_task+0x5a/0x140 [ 191.217171][ T6924] Read of size 8 at addr ffffffff92a9f8f8 by task syz.0.50/6924 [ 191.224813][ T6924] [ 191.227145][ T6924] CPU: 0 UID: 0 PID: 6924 Comm: syz.0.50 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 191.227168][ T6924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.227179][ T6924] Call Trace: [ 191.227186][ T6924] [ 191.227194][ T6924] dump_stack_lvl+0x189/0x250 [ 191.227217][ T6924] ? __virt_addr_valid+0x1c8/0x5c0 [ 191.227237][ T6924] ? rcu_is_watching+0x15/0xb0 [ 191.227253][ T6924] ? __kasan_check_byte+0x12/0x40 [ 191.227286][ T6924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.227304][ T6924] ? rcu_is_watching+0x15/0xb0 [ 191.227320][ T6924] ? lock_release+0x4b/0x3e0 [ 191.227351][ T6924] ? __virt_addr_valid+0x1c8/0x5c0 [ 191.227370][ T6924] ? __virt_addr_valid+0x4a5/0x5c0 [ 191.227391][ T6924] print_report+0xd2/0x2b0 [ 191.227406][ T6924] ? pid_task+0x5a/0x140 [ 191.227424][ T6924] kasan_report+0x118/0x150 [ 191.227445][ T6924] ? pid_task+0x5a/0x140 [ 191.227466][ T6924] ? gfs2_dump_glock+0xf83/0x1c50 [ 191.227491][ T6924] pid_task+0x5a/0x140 [ 191.227510][ T6924] gfs2_dump_glock+0x112c/0x1c50 [ 191.227536][ T6924] ? gfs2_dump_glock+0xf83/0x1c50 [ 191.227562][ T6924] ? __pfx_gfs2_dump_glock+0x10/0x10 [ 191.227590][ T6924] ? vprintk_emit+0x444/0x7a0 [ 191.227621][ T6924] ? __pfx__printk+0x10/0x10 [ 191.227646][ T6924] gfs2_consist_inode_i+0xf5/0x110 [ 191.227673][ T6924] gfs2_dirent_scan+0x545/0x690 [ 191.227698][ T6924] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 191.227723][ T6924] gfs2_dir_read+0x806/0x1780 [ 191.227751][ T6924] ? __pfx_inode_dio_wait+0x10/0x10 [ 191.227768][ T6924] ? __pfx___might_resched+0x10/0x10 [ 191.227784][ T6924] ? __pfx_gfs2_dir_read+0x10/0x10 [ 191.227807][ T6924] ? gfs2_glock_nq+0x10bb/0x1900 [ 191.227827][ T6924] ? gfs2_glock_wait+0x20f/0x2a0 [ 191.227843][ T6924] gfs2_readdir+0x14c/0x1b0 [ 191.227865][ T6924] ? iterate_dir+0x49f/0x770 [ 191.227882][ T6924] ? __pfx_gfs2_readdir+0x10/0x10 [ 191.227906][ T6924] ? iterate_dir+0x5ac/0x770 [ 191.227922][ T6924] ? iterate_dir+0x49f/0x770 [ 191.227938][ T6924] ? down_read_killable+0x1d1/0x350 [ 191.227965][ T6924] iterate_dir+0x5ac/0x770 [ 191.227984][ T6924] __se_sys_getdents+0xe4/0x250 [ 191.228002][ T6924] ? __pfx___se_sys_getdents+0x10/0x10 [ 191.228020][ T6924] ? __pfx_filldir+0x10/0x10 [ 191.228038][ T6924] ? rcu_is_watching+0x15/0xb0 [ 191.228056][ T6924] ? do_syscall_64+0xbe/0x3b0 [ 191.228080][ T6924] do_syscall_64+0xfa/0x3b0 [ 191.228103][ T6924] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.228124][ T6924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.228140][ T6924] ? clear_bhb_loop+0x60/0xb0 [ 191.228158][ T6924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.228174][ T6924] RIP: 0033:0x7fce42f8e929 [ 191.228190][ T6924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.228205][ T6924] RSP: 002b:00007fce43d7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 191.228222][ T6924] RAX: ffffffffffffffda RBX: 00007fce431b6080 RCX: 00007fce42f8e929 [ 191.228237][ T6924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 191.228249][ T6924] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 191.228262][ T6924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.228274][ T6924] R13: 0000000000000000 R14: 00007fce431b6080 R15: 00007ffe277e5bf8 [ 191.228293][ T6924] [ 191.228299][ T6924] [ 191.560550][ T6924] The buggy address belongs to the variable: [ 191.566531][ T6924] copy_signal.__key.110+0x18/0x20 [ 191.571838][ T6924] [ 191.574251][ T6924] The buggy address belongs to the physical page: [ 191.580669][ T6924] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12a9f [ 191.589451][ T6924] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 191.597380][ T6924] raw: 00fff00000002000 ffffea00004aa7c8 ffffea00004aa7c8 0000000000000000 [ 191.605970][ T6924] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 191.614741][ T6924] page dumped because: kasan: bad access detected [ 191.621173][ T6924] page_owner info is not present (never set?) [ 191.627242][ T6924] [ 191.629581][ T6924] Memory state around the buggy address: [ 191.635220][ T6924] ffffffff92a9f780: 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 [ 191.643381][ T6924] ffffffff92a9f800: 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 [ 191.651467][ T6924] >ffffffff92a9f880: 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 [ 191.659527][ T6924] ^ [ 191.667514][ T6924] ffffffff92a9f900: 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 [ 191.675577][ T6924] ffffffff92a9f980: 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 00 00 f9 f9 [ 191.683637][ T6924] ================================================================== [ 191.696260][ T6924] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 191.703503][ T6924] CPU: 1 UID: 0 PID: 6924 Comm: syz.0.50 Not tainted 6.16.0-rc4-next-20250704-syzkaller-07381-g26ffb3d6f02c #0 PREEMPT(full) [ 191.716564][ T6924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 191.726708][ T6924] Call Trace: [ 191.730009][ T6924] [ 191.732940][ T6924] dump_stack_lvl+0x99/0x250 [ 191.737553][ T6924] ? __asan_memcpy+0x40/0x70 [ 191.742158][ T6924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.747386][ T6924] ? __pfx__printk+0x10/0x10 [ 191.751989][ T6924] panic+0x2db/0x790 [ 191.755893][ T6924] ? __pfx_panic+0x10/0x10 [ 191.760339][ T6924] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 191.766238][ T6924] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 191.772572][ T6924] ? print_memory_metadata+0x314/0x400 [ 191.778062][ T6924] ? pid_task+0x5a/0x140 [ 191.782311][ T6924] check_panic_on_warn+0x89/0xb0 [ 191.787275][ T6924] ? pid_task+0x5a/0x140 [ 191.791532][ T6924] end_report+0x78/0x160 [ 191.795801][ T6924] kasan_report+0x129/0x150 [ 191.800309][ T6924] ? pid_task+0x5a/0x140 [ 191.804847][ T6924] ? gfs2_dump_glock+0xf83/0x1c50 [ 191.810238][ T6924] pid_task+0x5a/0x140 [ 191.814323][ T6924] gfs2_dump_glock+0x112c/0x1c50 [ 191.819274][ T6924] ? gfs2_dump_glock+0xf83/0x1c50 [ 191.824745][ T6924] ? __pfx_gfs2_dump_glock+0x10/0x10 [ 191.830050][ T6924] ? vprintk_emit+0x444/0x7a0 [ 191.834827][ T6924] ? __pfx__printk+0x10/0x10 [ 191.839512][ T6924] gfs2_consist_inode_i+0xf5/0x110 [ 191.844655][ T6924] gfs2_dirent_scan+0x545/0x690 [ 191.849527][ T6924] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 191.855123][ T6924] gfs2_dir_read+0x806/0x1780 [ 191.859985][ T6924] ? __pfx_inode_dio_wait+0x10/0x10 [ 191.865198][ T6924] ? __pfx___might_resched+0x10/0x10 [ 191.870672][ T6924] ? __pfx_gfs2_dir_read+0x10/0x10 [ 191.875817][ T6924] ? gfs2_glock_nq+0x10bb/0x1900 [ 191.880768][ T6924] ? gfs2_glock_wait+0x20f/0x2a0 [ 191.885706][ T6924] gfs2_readdir+0x14c/0x1b0 [ 191.890226][ T6924] ? iterate_dir+0x49f/0x770 [ 191.894911][ T6924] ? __pfx_gfs2_readdir+0x10/0x10 [ 191.899948][ T6924] ? iterate_dir+0x5ac/0x770 [ 191.904556][ T6924] ? iterate_dir+0x49f/0x770 [ 191.909162][ T6924] ? down_read_killable+0x1d1/0x350 [ 191.914413][ T6924] iterate_dir+0x5ac/0x770 [ 191.918869][ T6924] __se_sys_getdents+0xe4/0x250 [ 191.923816][ T6924] ? __pfx___se_sys_getdents+0x10/0x10 [ 191.929295][ T6924] ? __pfx_filldir+0x10/0x10 [ 191.933919][ T6924] ? rcu_is_watching+0x15/0xb0 [ 191.939393][ T6924] ? do_syscall_64+0xbe/0x3b0 [ 191.944185][ T6924] do_syscall_64+0xfa/0x3b0 [ 191.948702][ T6924] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.953920][ T6924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.960181][ T6924] ? clear_bhb_loop+0x60/0xb0 [ 191.964866][ T6924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.970767][ T6924] RIP: 0033:0x7fce42f8e929 [ 191.975367][ T6924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.995065][ T6924] RSP: 002b:00007fce43d7c038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 192.003572][ T6924] RAX: ffffffffffffffda RBX: 00007fce431b6080 RCX: 00007fce42f8e929 [ 192.011547][ T6924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 192.019543][ T6924] RBP: 00007fce43010b39 R08: 0000000000000000 R09: 0000000000000000 [ 192.027510][ T6924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.035477][ T6924] R13: 0000000000000000 R14: 00007fce431b6080 R15: 00007ffe277e5bf8 [ 192.043455][ T6924] [ 192.046857][ T6924] Kernel Offset: disabled [ 192.051194][ T6924] Rebooting in 86400 seconds..