Warning: Permanently added '[localhost]:43716' (ED25519) to the list of known hosts. executing program executing program executing program executing program executing program executing program [ 518.457216][ T4699] gfs2: fsid=syz:syz.0: file system withdrawn [ 518.912366][ T6415] loop0: detected capacity change from 0 to 32768 [ 518.952038][ T6415] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 518.971676][ T6415] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 519.006143][ T6415] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 519.023179][ T4699] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 519.032530][ T4699] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 519.124523][ T4699] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 91ms [ 519.139638][ T4699] gfs2: fsid=syz:syz.0: jid=0: Done [ 519.156004][ T6415] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 519.302424][ T6415] gfs2: fsid=syz:syz.0: found 1 quota changes [ 519.325447][ T6415] syz-executor335: attempt to access beyond end of device [ 519.325447][ T6415] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 519.348743][ T6415] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 519.357893][ T6415] syz-executor335: attempt to access beyond end of device [ 519.357893][ T6415] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 519.389197][ T6409] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 519.395698][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz-executor335 Not tainted syzkaller #0 PREEMPT(full) [ 519.395717][ T6409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 519.395724][ T6409] Call Trace: [ 519.395728][ T6409] [ 519.395733][ T6409] dump_stack_lvl+0xe8/0x150 [ 519.395820][ T6409] gfs2_withdraw+0xc3/0x1b0 [ 519.395871][ T6409] gfs2_ail1_empty+0x2c5/0x7b0 [ 519.395895][ T6409] gfs2_flush_revokes+0x5c/0x80 [ 519.395910][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 519.395928][ T6409] revoke_lo_before_commit+0x2f/0xea0 [ 519.395939][ T6409] ? __pfx_list_sort+0x10/0x10 [ 519.395949][ T6409] ? do_raw_spin_lock+0x12b/0x2f0 [ 519.395970][ T6409] ? do_raw_spin_unlock+0x4d/0x210 [ 519.395982][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 519.395995][ T6409] __gfs2_log_flush+0xa21/0x1d90 [ 519.396026][ T6409] ? __pfx___gfs2_log_flush+0x10/0x10 [ 519.396040][ T6409] ? down_write+0x16d/0x200 [ 519.396091][ T6409] ? __pfx_down_write+0x10/0x10 [ 519.396108][ T6409] ? call_rcu+0x64b/0x8b0 [ 519.396121][ T6409] gfs2_log_flush+0x34/0x50 [ 519.396138][ T6409] gfs2_kill_sb+0x5c/0x430 [ 519.396155][ T6409] deactivate_locked_super+0xbc/0x130 [ 519.396171][ T6409] cleanup_mnt+0x3d3/0x460 [ 519.396189][ T6409] task_work_run+0x1d9/0x270 [ 519.396209][ T6409] ? __pfx_task_work_run+0x10/0x10 [ 519.396231][ T6409] exit_to_user_mode_loop+0x1fa/0x730 [ 519.396244][ T6409] ? rcu_is_watching+0x15/0xb0 [ 519.396261][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.396274][ T6409] do_syscall_64+0x353/0x580 [ 519.396287][ T6409] ? trace_irq_disable+0x3b/0x140 [ 519.396300][ T6409] ? clear_bhb_loop+0x40/0x90 [ 519.396314][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.396325][ T6409] RIP: 0033:0x7f45ce5e00b7 [ 519.396338][ T6409] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 519.396347][ T6409] RSP: 002b:00007ffe47166488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 519.396360][ T6409] RAX: 0000000000000000 RBX: 000000000007e82b RCX: 00007f45ce5e00b7 [ 519.396367][ T6409] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe47166540 [ 519.396373][ T6409] RBP: 00007ffe47166540 R08: 00007ffe47167540 R09: 00000000ffffffff [ 519.396380][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe471675b0 [ 519.396386][ T6409] R13: 000055558a8ea760 R14: 0000000000000006 R15: 431bde82d7b634db [ 519.396401][ T6409] [ 519.396688][ T6409] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 520.876333][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.952873][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.000552][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.048332][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.277400][ T12] bridge_slave_1: left allmulticast mode [ 521.280185][ T12] bridge_slave_1: left promiscuous mode [ 521.282753][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.307736][ T12] bridge_slave_0: left allmulticast mode [ 521.310377][ T12] bridge_slave_0: left promiscuous mode [ 521.324144][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.629147][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.648051][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.653011][ T12] bond0 (unregistering): Released all slaves [ 521.661612][ T4996] 8021q: adding VLAN 0 to HW filter on device eth2 [ 521.905566][ T12] hsr_slave_0: left promiscuous mode [ 521.912989][ T12] hsr_slave_1: left promiscuous mode [ 521.922188][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.934143][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.938116][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.946415][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.962535][ T12] veth1_macvtap: left promiscuous mode [ 521.974861][ T12] veth0_macvtap: left promiscuous mode [ 521.978433][ T12] veth1_vlan: left promiscuous mode [ 521.986299][ T12] veth0_vlan: left promiscuous mode [ 522.336372][ T12] team0 (unregistering): Port device team_slave_1 removed [ 522.354737][ T12] team0 (unregistering): Port device team_slave_0 removed [ 522.492779][ T4996] 8021q: adding VLAN 0 to HW filter on device eth3 [ 522.879114][ T4996] 8021q: adding VLAN 0 to HW filter on device eth4 [ 523.089593][ T4996] 8021q: adding VLAN 0 to HW filter on device eth5 [ 524.776604][ T9] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 525.206960][ T6466] loop0: detected capacity change from 0 to 32768 [ 525.236937][ T6466] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 525.245149][ T6466] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 525.267827][ T6466] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 525.284638][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 525.289300][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 525.346040][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 56ms [ 525.351634][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 525.354615][ T6466] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 525.421945][ T6466] gfs2: fsid=syz:syz.0: found 1 quota changes [ 525.432447][ T6466] syz-executor335: attempt to access beyond end of device [ 525.432447][ T6466] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 525.440549][ T6466] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 525.445145][ T6466] syz-executor335: attempt to access beyond end of device [ 525.445145][ T6466] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 525.466220][ T6409] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 525.472645][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz-executor335 Not tainted syzkaller #0 PREEMPT(full) [ 525.472665][ T6409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 525.472673][ T6409] Call Trace: [ 525.472686][ T6409] [ 525.472691][ T6409] dump_stack_lvl+0xe8/0x150 [ 525.473984][ T6409] gfs2_withdraw+0xc3/0x1b0 [ 525.474051][ T6409] gfs2_ail1_empty+0x2c5/0x7b0 [ 525.474077][ T6409] gfs2_flush_revokes+0x5c/0x80 [ 525.474091][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 525.474101][ T6409] revoke_lo_before_commit+0x2f/0xea0 [ 525.474111][ T6409] ? __pfx_list_sort+0x10/0x10 [ 525.474120][ T6409] ? do_raw_spin_lock+0x12b/0x2f0 [ 525.474137][ T6409] ? do_raw_spin_unlock+0x4d/0x210 [ 525.474150][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 525.474163][ T6409] __gfs2_log_flush+0xa21/0x1d90 [ 525.474186][ T6409] ? __pfx___gfs2_log_flush+0x10/0x10 [ 525.474201][ T6409] ? down_write+0x16d/0x200 [ 525.474247][ T6409] ? __pfx_down_write+0x10/0x10 [ 525.474263][ T6409] ? call_rcu+0x64b/0x8b0 [ 525.474275][ T6409] gfs2_log_flush+0x34/0x50 [ 525.474288][ T6409] gfs2_kill_sb+0x5c/0x430 [ 525.474305][ T6409] deactivate_locked_super+0xbc/0x130 [ 525.474320][ T6409] cleanup_mnt+0x3d3/0x460 [ 525.474336][ T6409] task_work_run+0x1d9/0x270 [ 525.474357][ T6409] ? __pfx_task_work_run+0x10/0x10 [ 525.474376][ T6409] exit_to_user_mode_loop+0x1fa/0x730 [ 525.474389][ T6409] ? rcu_is_watching+0x15/0xb0 [ 525.474404][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.474416][ T6409] do_syscall_64+0x353/0x580 [ 525.474429][ T6409] ? trace_irq_disable+0x3b/0x140 [ 525.474442][ T6409] ? clear_bhb_loop+0x40/0x90 [ 525.474454][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.474465][ T6409] RIP: 0033:0x7f45ce5e00b7 [ 525.474482][ T6409] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 525.474491][ T6409] RSP: 002b:00007ffe47166488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 525.474503][ T6409] RAX: 0000000000000000 RBX: 00000000000801ea RCX: 00007f45ce5e00b7 [ 525.474510][ T6409] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe47166540 [ 525.474516][ T6409] RBP: 00007ffe47166540 R08: 00007ffe47167540 R09: 00000000ffffffff [ 525.474523][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe471675b0 [ 525.474529][ T6409] R13: 000055558a8ea760 R14: 0000000000000007 R15: 431bde82d7b634db [ 525.474546][ T6409] [ 525.588660][ T6409] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 530.617107][ T5713] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 531.029645][ T6478] loop0: detected capacity change from 0 to 32768 [ 531.044923][ T6478] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 531.057601][ T6478] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 531.089057][ T6478] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 531.108903][ T5713] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 531.116229][ T5713] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 531.181101][ T5713] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 64ms [ 531.192374][ T5713] gfs2: fsid=syz:syz.0: jid=0: Done [ 531.198308][ T6478] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 531.286265][ T6478] gfs2: fsid=syz:syz.0: found 1 quota changes [ 531.295366][ T6478] syz-executor335: attempt to access beyond end of device [ 531.295366][ T6478] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 531.302862][ T6478] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 531.308066][ T6478] syz-executor335: attempt to access beyond end of device [ 531.308066][ T6478] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 531.326396][ T6409] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 531.332758][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz-executor335 Not tainted syzkaller #0 PREEMPT(full) [ 531.332779][ T6409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 531.332788][ T6409] Call Trace: [ 531.332797][ T6409] [ 531.332804][ T6409] dump_stack_lvl+0xe8/0x150 [ 531.332873][ T6409] gfs2_withdraw+0xc3/0x1b0 [ 531.332929][ T6409] gfs2_ail1_empty+0x2c5/0x7b0 [ 531.332959][ T6409] gfs2_flush_revokes+0x5c/0x80 [ 531.332977][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 531.332990][ T6409] revoke_lo_before_commit+0x2f/0xea0 [ 531.333004][ T6409] ? __pfx_list_sort+0x10/0x10 [ 531.333018][ T6409] ? do_raw_spin_lock+0x12b/0x2f0 [ 531.333040][ T6409] ? do_raw_spin_unlock+0x4d/0x210 [ 531.333055][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 531.333070][ T6409] __gfs2_log_flush+0xa21/0x1d90 [ 531.333095][ T6409] ? __pfx___gfs2_log_flush+0x10/0x10 [ 531.333106][ T6409] ? down_write+0x16d/0x200 [ 531.333154][ T6409] ? __pfx_down_write+0x10/0x10 [ 531.333167][ T6409] ? call_rcu+0x64b/0x8b0 [ 531.333177][ T6409] gfs2_log_flush+0x34/0x50 [ 531.333190][ T6409] gfs2_kill_sb+0x5c/0x430 [ 531.333203][ T6409] deactivate_locked_super+0xbc/0x130 [ 531.333216][ T6409] cleanup_mnt+0x3d3/0x460 [ 531.333231][ T6409] task_work_run+0x1d9/0x270 [ 531.333252][ T6409] ? __pfx_task_work_run+0x10/0x10 [ 531.333279][ T6409] exit_to_user_mode_loop+0x1fa/0x730 [ 531.333295][ T6409] ? rcu_is_watching+0x15/0xb0 [ 531.333314][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.333331][ T6409] do_syscall_64+0x353/0x580 [ 531.333355][ T6409] ? trace_irq_disable+0x3b/0x140 [ 531.333381][ T6409] ? clear_bhb_loop+0x40/0x90 [ 531.333405][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.333425][ T6409] RIP: 0033:0x7f45ce5e00b7 [ 531.333479][ T6409] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 531.333489][ T6409] RSP: 002b:00007ffe47166488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 531.333504][ T6409] RAX: 0000000000000000 RBX: 00000000000818ab RCX: 00007f45ce5e00b7 [ 531.333512][ T6409] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe47166540 [ 531.333522][ T6409] RBP: 00007ffe47166540 R08: 00007ffe47167540 R09: 00000000ffffffff [ 531.333530][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe471675b0 [ 531.333537][ T6409] R13: 000055558a8ea760 R14: 0000000000000008 R15: 431bde82d7b634db [ 531.333559][ T6409] [ 531.444887][ T6409] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 536.456643][ T5713] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 536.889218][ T6510] loop0: detected capacity change from 0 to 32768 [ 536.906231][ T6510] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 536.909673][ T6510] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 536.947033][ T6510] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 536.957333][ T5713] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 536.962714][ T5713] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 537.027393][ T5713] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 64ms [ 537.037303][ T5713] gfs2: fsid=syz:syz.0: jid=0: Done [ 537.042701][ T6510] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 537.148246][ T6510] gfs2: fsid=syz:syz.0: found 1 quota changes [ 537.156873][ T6510] syz-executor335: attempt to access beyond end of device [ 537.156873][ T6510] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 537.165440][ T6510] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 537.170451][ T6510] syz-executor335: attempt to access beyond end of device [ 537.170451][ T6510] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 537.181424][ T6409] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 537.187553][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz-executor335 Not tainted syzkaller #0 PREEMPT(full) [ 537.187574][ T6409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 537.187581][ T6409] Call Trace: [ 537.187585][ T6409] [ 537.187591][ T6409] dump_stack_lvl+0xe8/0x150 [ 537.187660][ T6409] gfs2_withdraw+0xc3/0x1b0 [ 537.187709][ T6409] gfs2_ail1_empty+0x2c5/0x7b0 [ 537.187735][ T6409] gfs2_flush_revokes+0x5c/0x80 [ 537.187750][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 537.187762][ T6409] revoke_lo_before_commit+0x2f/0xea0 [ 537.187774][ T6409] ? __pfx_list_sort+0x10/0x10 [ 537.187785][ T6409] ? do_raw_spin_lock+0x12b/0x2f0 [ 537.187804][ T6409] ? do_raw_spin_unlock+0x4d/0x210 [ 537.187816][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 537.187829][ T6409] __gfs2_log_flush+0xa21/0x1d90 [ 537.187852][ T6409] ? __pfx___gfs2_log_flush+0x10/0x10 [ 537.187866][ T6409] ? down_write+0x16d/0x200 [ 537.187913][ T6409] ? __pfx_down_write+0x10/0x10 [ 537.187932][ T6409] ? call_rcu+0x64b/0x8b0 [ 537.187945][ T6409] gfs2_log_flush+0x34/0x50 [ 537.187962][ T6409] gfs2_kill_sb+0x5c/0x430 [ 537.187980][ T6409] deactivate_locked_super+0xbc/0x130 [ 537.187996][ T6409] cleanup_mnt+0x3d3/0x460 [ 537.188014][ T6409] task_work_run+0x1d9/0x270 [ 537.188034][ T6409] ? __pfx_task_work_run+0x10/0x10 [ 537.188057][ T6409] exit_to_user_mode_loop+0x1fa/0x730 [ 537.188072][ T6409] ? rcu_is_watching+0x15/0xb0 [ 537.188090][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.188128][ T6409] do_syscall_64+0x353/0x580 [ 537.188144][ T6409] ? trace_irq_disable+0x3b/0x140 [ 537.188158][ T6409] ? clear_bhb_loop+0x40/0x90 [ 537.188174][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.188183][ T6409] RIP: 0033:0x7f45ce5e00b7 [ 537.188197][ T6409] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 537.188208][ T6409] RSP: 002b:00007ffe47166488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 537.188221][ T6409] RAX: 0000000000000000 RBX: 0000000000082f81 RCX: 00007f45ce5e00b7 [ 537.188228][ T6409] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe47166540 [ 537.188235][ T6409] RBP: 00007ffe47166540 R08: 00007ffe47167540 R09: 00000000ffffffff [ 537.188242][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe471675b0 [ 537.188249][ T6409] R13: 000055558a8ea760 R14: 0000000000000009 R15: 431bde82d7b634db [ 537.188269][ T6409] [ 537.188319][ T6409] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 542.377475][ T5713] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 542.763815][ T6516] loop0: detected capacity change from 0 to 32768 [ 542.801434][ T6516] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 542.816594][ T6516] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 542.838520][ T6516] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 542.848313][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 542.852672][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 542.898929][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 46ms [ 542.909246][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 542.914900][ T6516] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 542.989821][ T6516] gfs2: fsid=syz:syz.0: found 1 quota changes [ 543.001818][ T6516] syz-executor335: attempt to access beyond end of device [ 543.001818][ T6516] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 543.009742][ T6516] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 543.015660][ T6516] syz-executor335: attempt to access beyond end of device [ 543.015660][ T6516] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 543.034993][ T6409] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 543.041075][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz-executor335 Not tainted syzkaller #0 PREEMPT(full) [ 543.041094][ T6409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 543.041101][ T6409] Call Trace: [ 543.041108][ T6409] [ 543.041114][ T6409] dump_stack_lvl+0xe8/0x150 [ 543.041183][ T6409] gfs2_withdraw+0xc3/0x1b0 [ 543.041231][ T6409] gfs2_ail1_empty+0x2c5/0x7b0 [ 543.041256][ T6409] gfs2_flush_revokes+0x5c/0x80 [ 543.041270][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 543.041290][ T6409] revoke_lo_before_commit+0x2f/0xea0 [ 543.041301][ T6409] ? __pfx_list_sort+0x10/0x10 [ 543.041312][ T6409] ? do_raw_spin_lock+0x12b/0x2f0 [ 543.041332][ T6409] ? do_raw_spin_unlock+0x4d/0x210 [ 543.041343][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 543.041354][ T6409] __gfs2_log_flush+0xa21/0x1d90 [ 543.041374][ T6409] ? __pfx___gfs2_log_flush+0x10/0x10 [ 543.041388][ T6409] ? down_write+0x16d/0x200 [ 543.041435][ T6409] ? __pfx_down_write+0x10/0x10 [ 543.041447][ T6409] ? call_rcu+0x64b/0x8b0 [ 543.041455][ T6409] gfs2_log_flush+0x34/0x50 [ 543.041466][ T6409] gfs2_kill_sb+0x5c/0x430 [ 543.041483][ T6409] deactivate_locked_super+0xbc/0x130 [ 543.041497][ T6409] cleanup_mnt+0x3d3/0x460 [ 543.041514][ T6409] task_work_run+0x1d9/0x270 [ 543.041533][ T6409] ? __pfx_task_work_run+0x10/0x10 [ 543.041555][ T6409] exit_to_user_mode_loop+0x1fa/0x730 [ 543.041569][ T6409] ? rcu_is_watching+0x15/0xb0 [ 543.041582][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.041592][ T6409] do_syscall_64+0x353/0x580 [ 543.041604][ T6409] ? trace_irq_disable+0x3b/0x140 [ 543.041619][ T6409] ? clear_bhb_loop+0x40/0x90 [ 543.041633][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.041643][ T6409] RIP: 0033:0x7f45ce5e00b7 [ 543.041657][ T6409] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 543.041666][ T6409] RSP: 002b:00007ffe47166488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 543.041679][ T6409] RAX: 0000000000000000 RBX: 000000000008469a RCX: 00007f45ce5e00b7 [ 543.041686][ T6409] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe47166540 [ 543.041693][ T6409] RBP: 00007ffe47166540 R08: 00007ffe47167540 R09: 00000000ffffffff [ 543.041699][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe471675b0 [ 543.041706][ T6409] R13: 000055558a8ea760 R14: 000000000000000a R15: 431bde82d7b634db [ 543.041724][ T6409] [ 543.041729][ T6409] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 548.218423][ T9] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 548.631490][ T6523] loop0: detected capacity change from 0 to 32768 [ 548.649896][ T6523] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 548.665555][ T6523] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 548.700357][ T6523] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 548.711984][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 548.717578][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 548.756937][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 39ms [ 548.760842][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 548.765417][ T6523] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 548.819012][ T6523] gfs2: fsid=syz:syz.0: found 1 quota changes [ 548.828850][ T6523] syz-executor335: attempt to access beyond end of device [ 548.828850][ T6523] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 548.837416][ T6523] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 548.841708][ T6523] syz-executor335: attempt to access beyond end of device [ 548.841708][ T6523] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 548.859229][ T6409] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 548.866399][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz-executor335 Not tainted syzkaller #0 PREEMPT(full) [ 548.866421][ T6409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 548.866429][ T6409] Call Trace: [ 548.866435][ T6409] [ 548.866441][ T6409] dump_stack_lvl+0xe8/0x150 [ 548.866481][ T6409] gfs2_withdraw+0xc3/0x1b0 [ 548.866502][ T6409] gfs2_ail1_empty+0x2c5/0x7b0 [ 548.866521][ T6409] gfs2_flush_revokes+0x5c/0x80 [ 548.866532][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 548.866542][ T6409] revoke_lo_before_commit+0x2f/0xea0 [ 548.866555][ T6409] ? __pfx_list_sort+0x10/0x10 [ 548.866605][ T6409] ? do_raw_spin_lock+0x12b/0x2f0 [ 548.866627][ T6409] ? do_raw_spin_unlock+0x4d/0x210 [ 548.866641][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 548.866656][ T6409] __gfs2_log_flush+0xa21/0x1d90 [ 548.866677][ T6409] ? __pfx___gfs2_log_flush+0x10/0x10 [ 548.866687][ T6409] ? down_write+0x16d/0x200 [ 548.866706][ T6409] ? __pfx_down_write+0x10/0x10 [ 548.866719][ T6409] ? call_rcu+0x64b/0x8b0 [ 548.866729][ T6409] gfs2_log_flush+0x34/0x50 [ 548.866744][ T6409] gfs2_kill_sb+0x5c/0x430 [ 548.866764][ T6409] deactivate_locked_super+0xbc/0x130 [ 548.866782][ T6409] cleanup_mnt+0x3d3/0x460 [ 548.866803][ T6409] task_work_run+0x1d9/0x270 [ 548.866827][ T6409] ? __pfx_task_work_run+0x10/0x10 [ 548.866849][ T6409] exit_to_user_mode_loop+0x1fa/0x730 [ 548.866864][ T6409] ? rcu_is_watching+0x15/0xb0 [ 548.866907][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.866920][ T6409] do_syscall_64+0x353/0x580 [ 548.866933][ T6409] ? trace_irq_disable+0x3b/0x140 [ 548.866949][ T6409] ? clear_bhb_loop+0x40/0x90 [ 548.866963][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.866976][ T6409] RIP: 0033:0x7f45ce5e00b7 [ 548.866991][ T6409] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 548.867002][ T6409] RSP: 002b:00007ffe47166488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 548.867018][ T6409] RAX: 0000000000000000 RBX: 0000000000085d6a RCX: 00007f45ce5e00b7 [ 548.867027][ T6409] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe47166540 [ 548.867034][ T6409] RBP: 00007ffe47166540 R08: 00007ffe47167540 R09: 00000000ffffffff [ 548.867041][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe471675b0 [ 548.867046][ T6409] R13: 000055558a8ea760 R14: 000000000000000b R15: 431bde82d7b634db [ 548.867059][ T6409] [ 548.867373][ T6409] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 554.057380][ T9] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 554.459455][ T6530] loop0: detected capacity change from 0 to 32768 [ 554.501645][ T6530] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 554.514769][ T6530] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 554.544247][ T6530] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 554.555769][ T5713] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 554.562255][ T5713] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 554.618597][ T5713] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 56ms [ 554.624023][ T5713] gfs2: fsid=syz:syz.0: jid=0: Done [ 554.627923][ T6530] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 554.688711][ T6530] gfs2: fsid=syz:syz.0: found 1 quota changes [ 554.698740][ T6530] syz-executor335: attempt to access beyond end of device [ 554.698740][ T6530] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 554.706673][ T6530] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 554.711689][ T6530] syz-executor335: attempt to access beyond end of device [ 554.711689][ T6530] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 554.732911][ T6409] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 554.739608][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz-executor335 Not tainted syzkaller #0 PREEMPT(full) [ 554.739628][ T6409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 554.739635][ T6409] Call Trace: [ 554.739640][ T6409] [ 554.739646][ T6409] dump_stack_lvl+0xe8/0x150 [ 554.739747][ T6409] gfs2_withdraw+0xc3/0x1b0 [ 554.739801][ T6409] gfs2_ail1_empty+0x2c5/0x7b0 [ 554.739830][ T6409] gfs2_flush_revokes+0x5c/0x80 [ 554.739843][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 554.739855][ T6409] revoke_lo_before_commit+0x2f/0xea0 [ 554.739866][ T6409] ? __pfx_list_sort+0x10/0x10 [ 554.739884][ T6409] ? do_raw_spin_lock+0x12b/0x2f0 [ 554.739902][ T6409] ? do_raw_spin_unlock+0x4d/0x210 [ 554.739914][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 554.739926][ T6409] __gfs2_log_flush+0xa21/0x1d90 [ 554.739950][ T6409] ? __pfx___gfs2_log_flush+0x10/0x10 [ 554.739965][ T6409] ? down_write+0x16d/0x200 [ 554.740016][ T6409] ? __pfx_down_write+0x10/0x10 [ 554.740034][ T6409] ? call_rcu+0x64b/0x8b0 [ 554.740047][ T6409] gfs2_log_flush+0x34/0x50 [ 554.740065][ T6409] gfs2_kill_sb+0x5c/0x430 [ 554.740085][ T6409] deactivate_locked_super+0xbc/0x130 [ 554.740101][ T6409] cleanup_mnt+0x3d3/0x460 [ 554.740120][ T6409] task_work_run+0x1d9/0x270 [ 554.740138][ T6409] ? __pfx_task_work_run+0x10/0x10 [ 554.740162][ T6409] exit_to_user_mode_loop+0x1fa/0x730 [ 554.740176][ T6409] ? rcu_is_watching+0x15/0xb0 [ 554.740195][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.740211][ T6409] do_syscall_64+0x353/0x580 [ 554.740226][ T6409] ? trace_irq_disable+0x3b/0x140 [ 554.740242][ T6409] ? clear_bhb_loop+0x40/0x90 [ 554.740258][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.740270][ T6409] RIP: 0033:0x7f45ce5e00b7 [ 554.740283][ T6409] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 554.740295][ T6409] RSP: 002b:00007ffe47166488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 554.740310][ T6409] RAX: 0000000000000000 RBX: 0000000000087435 RCX: 00007f45ce5e00b7 [ 554.740319][ T6409] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe47166540 [ 554.740325][ T6409] RBP: 00007ffe47166540 R08: 00007ffe47167540 R09: 00000000ffffffff [ 554.740332][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe471675b0 [ 554.740339][ T6409] R13: 000055558a8ea760 R14: 000000000000000c R15: 431bde82d7b634db [ 554.740358][ T6409] [ 554.740668][ T6409] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 559.897214][ T5713] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 560.310902][ T6537] loop0: detected capacity change from 0 to 32768 [ 560.331287][ T6537] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 560.349332][ T6537] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 560.371651][ T6537] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 560.385149][ T5713] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 560.390666][ T5713] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 560.442526][ T5713] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 51ms [ 560.447870][ T5713] gfs2: fsid=syz:syz.0: jid=0: Done [ 560.450988][ T6537] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 560.509855][ T6537] gfs2: fsid=syz:syz.0: found 1 quota changes [ 560.528950][ T6537] syz-executor335: attempt to access beyond end of device [ 560.528950][ T6537] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 560.536107][ T6537] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 560.541364][ T6537] syz-executor335: attempt to access beyond end of device [ 560.541364][ T6537] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 560.559426][ T6409] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 560.566040][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz-executor335 Not tainted syzkaller #0 PREEMPT(full) [ 560.566081][ T6409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 560.566088][ T6409] Call Trace: [ 560.566093][ T6409] [ 560.566098][ T6409] dump_stack_lvl+0xe8/0x150 [ 560.566169][ T6409] gfs2_withdraw+0xc3/0x1b0 [ 560.566218][ T6409] gfs2_ail1_empty+0x2c5/0x7b0 [ 560.566248][ T6409] gfs2_flush_revokes+0x5c/0x80 [ 560.566262][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 560.566311][ T6409] revoke_lo_before_commit+0x2f/0xea0 [ 560.566324][ T6409] ? __pfx_list_sort+0x10/0x10 [ 560.566336][ T6409] ? do_raw_spin_lock+0x12b/0x2f0 [ 560.566354][ T6409] ? do_raw_spin_unlock+0x4d/0x210 [ 560.566366][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 560.566379][ T6409] __gfs2_log_flush+0xa21/0x1d90 [ 560.566404][ T6409] ? __pfx___gfs2_log_flush+0x10/0x10 [ 560.566417][ T6409] ? down_write+0x16d/0x200 [ 560.566465][ T6409] ? __pfx_down_write+0x10/0x10 [ 560.566514][ T6409] ? call_rcu+0x64b/0x8b0 [ 560.566528][ T6409] gfs2_log_flush+0x34/0x50 [ 560.566545][ T6409] gfs2_kill_sb+0x5c/0x430 [ 560.566565][ T6409] deactivate_locked_super+0xbc/0x130 [ 560.566582][ T6409] cleanup_mnt+0x3d3/0x460 [ 560.566599][ T6409] task_work_run+0x1d9/0x270 [ 560.566620][ T6409] ? __pfx_task_work_run+0x10/0x10 [ 560.566643][ T6409] exit_to_user_mode_loop+0x1fa/0x730 [ 560.566659][ T6409] ? rcu_is_watching+0x15/0xb0 [ 560.566677][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.566690][ T6409] do_syscall_64+0x353/0x580 [ 560.566704][ T6409] ? trace_irq_disable+0x3b/0x140 [ 560.566720][ T6409] ? clear_bhb_loop+0x40/0x90 [ 560.566734][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.566746][ T6409] RIP: 0033:0x7f45ce5e00b7 [ 560.566761][ T6409] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 560.566771][ T6409] RSP: 002b:00007ffe47166488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 560.566786][ T6409] RAX: 0000000000000000 RBX: 0000000000088b0c RCX: 00007f45ce5e00b7 [ 560.566794][ T6409] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe47166540 [ 560.566801][ T6409] RBP: 00007ffe47166540 R08: 00007ffe47167540 R09: 00000000ffffffff [ 560.566808][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe471675b0 [ 560.566815][ T6409] R13: 000055558a8ea760 R14: 000000000000000d R15: 431bde82d7b634db [ 560.566835][ T6409] [ 560.567169][ T6409] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 565.736911][ T5713] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 566.141788][ T6545] loop0: detected capacity change from 0 to 32768 [ 566.164207][ T6545] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 566.173104][ T6545] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 566.197553][ T6545] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 566.210620][ T5713] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 566.215360][ T5713] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 566.273307][ T5713] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 57ms [ 566.279000][ T5713] gfs2: fsid=syz:syz.0: jid=0: Done [ 566.281397][ T6545] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 566.333218][ T6545] gfs2: fsid=syz:syz.0: found 1 quota changes [ 566.343337][ T6545] syz-executor335: attempt to access beyond end of device [ 566.343337][ T6545] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 566.352610][ T6545] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 566.357617][ T6545] syz-executor335: attempt to access beyond end of device [ 566.357617][ T6545] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 566.376563][ T6409] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 566.382289][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz-executor335 Not tainted syzkaller #0 PREEMPT(full) [ 566.382308][ T6409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 566.382315][ T6409] Call Trace: [ 566.382322][ T6409] [ 566.382329][ T6409] dump_stack_lvl+0xe8/0x150 [ 566.382386][ T6409] gfs2_withdraw+0xc3/0x1b0 [ 566.382411][ T6409] gfs2_ail1_empty+0x2c5/0x7b0 [ 566.382515][ T6409] gfs2_flush_revokes+0x5c/0x80 [ 566.382528][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 566.382540][ T6409] revoke_lo_before_commit+0x2f/0xea0 [ 566.382552][ T6409] ? __pfx_list_sort+0x10/0x10 [ 566.382563][ T6409] ? do_raw_spin_lock+0x12b/0x2f0 [ 566.382581][ T6409] ? do_raw_spin_unlock+0x4d/0x210 [ 566.382593][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 566.382606][ T6409] __gfs2_log_flush+0xa21/0x1d90 [ 566.382628][ T6409] ? __pfx___gfs2_log_flush+0x10/0x10 [ 566.382642][ T6409] ? down_write+0x16d/0x200 [ 566.382666][ T6409] ? __pfx_down_write+0x10/0x10 [ 566.382682][ T6409] ? call_rcu+0x64b/0x8b0 [ 566.382695][ T6409] gfs2_log_flush+0x34/0x50 [ 566.382711][ T6409] gfs2_kill_sb+0x5c/0x430 [ 566.382730][ T6409] deactivate_locked_super+0xbc/0x130 [ 566.382746][ T6409] cleanup_mnt+0x3d3/0x460 [ 566.382763][ T6409] task_work_run+0x1d9/0x270 [ 566.382782][ T6409] ? __pfx_task_work_run+0x10/0x10 [ 566.382802][ T6409] exit_to_user_mode_loop+0x1fa/0x730 [ 566.382816][ T6409] ? rcu_is_watching+0x15/0xb0 [ 566.382833][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.382845][ T6409] do_syscall_64+0x353/0x580 [ 566.382878][ T6409] ? trace_irq_disable+0x3b/0x140 [ 566.382892][ T6409] ? clear_bhb_loop+0x40/0x90 [ 566.382904][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.382915][ T6409] RIP: 0033:0x7f45ce5e00b7 [ 566.382928][ T6409] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 566.382936][ T6409] RSP: 002b:00007ffe47166488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 566.382950][ T6409] RAX: 0000000000000000 RBX: 000000000008a1dd RCX: 00007f45ce5e00b7 [ 566.382957][ T6409] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe47166540 [ 566.382964][ T6409] RBP: 00007ffe47166540 R08: 00007ffe47167540 R09: 00000000ffffffff [ 566.382971][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe471675b0 [ 566.382978][ T6409] R13: 000055558a8ea760 R14: 000000000000000e R15: 431bde82d7b634db [ 566.382996][ T6409] [ 566.383063][ T6409] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 571.576244][ T5713] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 571.999338][ T6553] loop0: detected capacity change from 0 to 32768 [ 572.028859][ T6553] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 572.039448][ T6553] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 572.059051][ T6553] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 572.077788][ T5713] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 572.080842][ T5713] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 572.171365][ T5713] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 90ms [ 572.186187][ T5713] gfs2: fsid=syz:syz.0: jid=0: Done [ 572.192606][ T6553] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 572.283156][ T6553] gfs2: fsid=syz:syz.0: found 1 quota changes [ 572.296960][ T6553] syz-executor335: attempt to access beyond end of device [ 572.296960][ T6553] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 572.304240][ T6553] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 572.308918][ T6553] syz-executor335: attempt to access beyond end of device [ 572.308918][ T6553] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 572.326797][ T6409] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 572.333069][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz-executor335 Not tainted syzkaller #0 PREEMPT(full) [ 572.333092][ T6409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 572.333101][ T6409] Call Trace: [ 572.333111][ T6409] [ 572.333120][ T6409] dump_stack_lvl+0xe8/0x150 [ 572.333210][ T6409] gfs2_withdraw+0xc3/0x1b0 [ 572.333275][ T6409] gfs2_ail1_empty+0x2c5/0x7b0 [ 572.333311][ T6409] gfs2_flush_revokes+0x5c/0x80 [ 572.333329][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 572.333345][ T6409] revoke_lo_before_commit+0x2f/0xea0 [ 572.333361][ T6409] ? __pfx_list_sort+0x10/0x10 [ 572.333375][ T6409] ? do_raw_spin_lock+0x12b/0x2f0 [ 572.333402][ T6409] ? do_raw_spin_unlock+0x4d/0x210 [ 572.333417][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 572.333460][ T6409] __gfs2_log_flush+0xa21/0x1d90 [ 572.333493][ T6409] ? __pfx___gfs2_log_flush+0x10/0x10 [ 572.333511][ T6409] ? down_write+0x16d/0x200 [ 572.333572][ T6409] ? __pfx_down_write+0x10/0x10 [ 572.333594][ T6409] ? call_rcu+0x64b/0x8b0 [ 572.333611][ T6409] gfs2_log_flush+0x34/0x50 [ 572.333631][ T6409] gfs2_kill_sb+0x5c/0x430 [ 572.333654][ T6409] deactivate_locked_super+0xbc/0x130 [ 572.333674][ T6409] cleanup_mnt+0x3d3/0x460 [ 572.333698][ T6409] task_work_run+0x1d9/0x270 [ 572.333728][ T6409] ? __pfx_task_work_run+0x10/0x10 [ 572.333764][ T6409] exit_to_user_mode_loop+0x1fa/0x730 [ 572.333782][ T6409] ? rcu_is_watching+0x15/0xb0 [ 572.333805][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.333820][ T6409] do_syscall_64+0x353/0x580 [ 572.333838][ T6409] ? trace_irq_disable+0x3b/0x140 [ 572.333855][ T6409] ? clear_bhb_loop+0x40/0x90 [ 572.333873][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.333888][ T6409] RIP: 0033:0x7f45ce5e00b7 [ 572.333904][ T6409] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 572.333921][ T6409] RSP: 002b:00007ffe47166488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 572.333938][ T6409] RAX: 0000000000000000 RBX: 000000000008b8b1 RCX: 00007f45ce5e00b7 [ 572.333947][ T6409] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe47166540 [ 572.333955][ T6409] RBP: 00007ffe47166540 R08: 00007ffe47167540 R09: 00000000ffffffff [ 572.333964][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe471675b0 [ 572.333971][ T6409] R13: 000055558a8ea760 R14: 000000000000000f R15: 431bde82d7b634db [ 572.333994][ T6409] [ 572.449679][ T6409] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 573.336522][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.339788][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 577.496834][ T5713] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 577.921416][ T6560] loop0: detected capacity change from 0 to 32768 [ 577.936833][ T6560] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 577.951322][ T6560] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 577.979833][ T6560] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 577.991189][ T5713] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 578.003814][ T5713] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 578.074419][ T5713] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 70ms [ 578.084285][ T5713] gfs2: fsid=syz:syz.0: jid=0: Done [ 578.091376][ T6560] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 578.176126][ T6560] gfs2: fsid=syz:syz.0: found 1 quota changes [ 578.186093][ T6560] syz-executor335: attempt to access beyond end of device [ 578.186093][ T6560] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 578.192894][ T6560] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 578.198616][ T6560] syz-executor335: attempt to access beyond end of device [ 578.198616][ T6560] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 578.216268][ T6409] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 578.221885][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz-executor335 Not tainted syzkaller #0 PREEMPT(full) [ 578.221899][ T6409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 578.221903][ T6409] Call Trace: [ 578.221909][ T6409] [ 578.221914][ T6409] dump_stack_lvl+0xe8/0x150 [ 578.221973][ T6409] gfs2_withdraw+0xc3/0x1b0 [ 578.222016][ T6409] gfs2_ail1_empty+0x2c5/0x7b0 [ 578.222040][ T6409] gfs2_flush_revokes+0x5c/0x80 [ 578.222054][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 578.222072][ T6409] revoke_lo_before_commit+0x2f/0xea0 [ 578.222084][ T6409] ? __pfx_list_sort+0x10/0x10 [ 578.222094][ T6409] ? do_raw_spin_lock+0x12b/0x2f0 [ 578.222108][ T6409] ? do_raw_spin_unlock+0x4d/0x210 [ 578.222116][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 578.222124][ T6409] __gfs2_log_flush+0xa21/0x1d90 [ 578.222137][ T6409] ? __pfx___gfs2_log_flush+0x10/0x10 [ 578.222146][ T6409] ? down_write+0x16d/0x200 [ 578.222194][ T6409] ? __pfx_down_write+0x10/0x10 [ 578.222212][ T6409] ? call_rcu+0x64b/0x8b0 [ 578.222225][ T6409] gfs2_log_flush+0x34/0x50 [ 578.222240][ T6409] gfs2_kill_sb+0x5c/0x430 [ 578.222253][ T6409] deactivate_locked_super+0xbc/0x130 [ 578.222265][ T6409] cleanup_mnt+0x3d3/0x460 [ 578.222281][ T6409] task_work_run+0x1d9/0x270 [ 578.222300][ T6409] ? __pfx_task_work_run+0x10/0x10 [ 578.222322][ T6409] exit_to_user_mode_loop+0x1fa/0x730 [ 578.222362][ T6409] ? rcu_is_watching+0x15/0xb0 [ 578.222379][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.222390][ T6409] do_syscall_64+0x353/0x580 [ 578.222403][ T6409] ? trace_irq_disable+0x3b/0x140 [ 578.222415][ T6409] ? clear_bhb_loop+0x40/0x90 [ 578.222429][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.222441][ T6409] RIP: 0033:0x7f45ce5e00b7 [ 578.222453][ T6409] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 578.222461][ T6409] RSP: 002b:00007ffe47166488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 578.222475][ T6409] RAX: 0000000000000000 RBX: 000000000008cfd5 RCX: 00007f45ce5e00b7 [ 578.222480][ T6409] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe47166540 [ 578.222484][ T6409] RBP: 00007ffe47166540 R08: 00007ffe47167540 R09: 00000000ffffffff [ 578.222489][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe471675b0 [ 578.222493][ T6409] R13: 000055558a8ea760 R14: 0000000000000010 R15: 431bde82d7b634db [ 578.222504][ T6409] [ 578.222507][ T6409] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 583.416633][ T5713] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 584.025217][ T6567] loop0: detected capacity change from 0 to 32768 [ 584.060354][ T6567] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 584.079134][ T6567] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 584.102990][ T6567] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 584.121470][ T5713] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 584.132056][ T5713] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 584.227808][ T5713] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 95ms [ 584.242925][ T5713] gfs2: fsid=syz:syz.0: jid=0: Done [ 584.258260][ T6567] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 584.389715][ T6567] gfs2: fsid=syz:syz.0: found 1 quota changes [ 584.416424][ T6567] syz-executor335: attempt to access beyond end of device [ 584.416424][ T6567] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 584.433775][ T6567] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 584.438412][ T6567] syz-executor335: attempt to access beyond end of device [ 584.438412][ T6567] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 584.460877][ T6409] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 584.467304][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz-executor335 Not tainted syzkaller #0 PREEMPT(full) [ 584.467324][ T6409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 584.467331][ T6409] Call Trace: [ 584.467336][ T6409] [ 584.467342][ T6409] dump_stack_lvl+0xe8/0x150 [ 584.467417][ T6409] gfs2_withdraw+0xc3/0x1b0 [ 584.467467][ T6409] gfs2_ail1_empty+0x2c5/0x7b0 [ 584.467492][ T6409] gfs2_flush_revokes+0x5c/0x80 [ 584.467504][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 584.467515][ T6409] revoke_lo_before_commit+0x2f/0xea0 [ 584.467526][ T6409] ? __pfx_list_sort+0x10/0x10 [ 584.467536][ T6409] ? do_raw_spin_lock+0x12b/0x2f0 [ 584.467555][ T6409] ? do_raw_spin_unlock+0x4d/0x210 [ 584.467566][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 584.467579][ T6409] __gfs2_log_flush+0xa21/0x1d90 [ 584.467600][ T6409] ? __pfx___gfs2_log_flush+0x10/0x10 [ 584.467615][ T6409] ? down_write+0x16d/0x200 [ 584.467672][ T6409] ? __pfx_down_write+0x10/0x10 [ 584.467689][ T6409] ? call_rcu+0x64b/0x8b0 [ 584.467701][ T6409] gfs2_log_flush+0x34/0x50 [ 584.467717][ T6409] gfs2_kill_sb+0x5c/0x430 [ 584.467735][ T6409] deactivate_locked_super+0xbc/0x130 [ 584.467752][ T6409] cleanup_mnt+0x3d3/0x460 [ 584.467769][ T6409] task_work_run+0x1d9/0x270 [ 584.467787][ T6409] ? __pfx_task_work_run+0x10/0x10 [ 584.467808][ T6409] exit_to_user_mode_loop+0x1fa/0x730 [ 584.467822][ T6409] ? rcu_is_watching+0x15/0xb0 [ 584.467837][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.467850][ T6409] do_syscall_64+0x353/0x580 [ 584.467885][ T6409] ? trace_irq_disable+0x3b/0x140 [ 584.467900][ T6409] ? clear_bhb_loop+0x40/0x90 [ 584.467913][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.467924][ T6409] RIP: 0033:0x7f45ce5e00b7 [ 584.467937][ T6409] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 584.467947][ T6409] RSP: 002b:00007ffe47166488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 584.467959][ T6409] RAX: 0000000000000000 RBX: 000000000008e6f9 RCX: 00007f45ce5e00b7 [ 584.467966][ T6409] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe47166540 [ 584.467972][ T6409] RBP: 00007ffe47166540 R08: 00007ffe47167540 R09: 00000000ffffffff [ 584.467979][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe471675b0 [ 584.467985][ T6409] R13: 000055558a8ea760 R14: 0000000000000011 R15: 431bde82d7b634db [ 584.468003][ T6409] [ 584.468056][ T6409] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 589.737516][ T5713] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 590.585268][ T6584] loop0: detected capacity change from 0 to 32768 [ 590.660657][ T6584] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 590.677316][ T6584] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 590.716581][ T6584] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 590.730627][ T5713] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 590.745672][ T5713] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 590.919619][ T5713] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 173ms [ 590.940679][ T5713] gfs2: fsid=syz:syz.0: jid=0: Done [ 590.946526][ T6584] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 591.042844][ T6584] gfs2: fsid=syz:syz.0: found 1 quota changes [ 591.053037][ T6584] syz-executor335: attempt to access beyond end of device [ 591.053037][ T6584] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 591.060578][ T6584] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 591.065605][ T6584] syz-executor335: attempt to access beyond end of device [ 591.065605][ T6584] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 591.076545][ T6409] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 591.083006][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz-executor335 Not tainted syzkaller #0 PREEMPT(full) [ 591.083027][ T6409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 591.083035][ T6409] Call Trace: [ 591.083042][ T6409] [ 591.083049][ T6409] dump_stack_lvl+0xe8/0x150 [ 591.083131][ T6409] gfs2_withdraw+0xc3/0x1b0 [ 591.083187][ T6409] gfs2_ail1_empty+0x2c5/0x7b0 [ 591.083216][ T6409] gfs2_flush_revokes+0x5c/0x80 [ 591.083232][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 591.083285][ T6409] revoke_lo_before_commit+0x2f/0xea0 [ 591.083300][ T6409] ? __pfx_list_sort+0x10/0x10 [ 591.083313][ T6409] ? do_raw_spin_lock+0x12b/0x2f0 [ 591.083335][ T6409] ? do_raw_spin_unlock+0x4d/0x210 [ 591.083344][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 591.083354][ T6409] __gfs2_log_flush+0xa21/0x1d90 [ 591.083371][ T6409] ? __pfx___gfs2_log_flush+0x10/0x10 [ 591.083384][ T6409] ? down_write+0x16d/0x200 [ 591.083460][ T6409] ? __pfx_down_write+0x10/0x10 [ 591.083483][ T6409] ? call_rcu+0x64b/0x8b0 [ 591.083492][ T6409] gfs2_log_flush+0x34/0x50 [ 591.083505][ T6409] gfs2_kill_sb+0x5c/0x430 [ 591.083519][ T6409] deactivate_locked_super+0xbc/0x130 [ 591.083532][ T6409] cleanup_mnt+0x3d3/0x460 [ 591.083545][ T6409] task_work_run+0x1d9/0x270 [ 591.083559][ T6409] ? __pfx_task_work_run+0x10/0x10 [ 591.083581][ T6409] exit_to_user_mode_loop+0x1fa/0x730 [ 591.083596][ T6409] ? rcu_is_watching+0x15/0xb0 [ 591.083613][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.083627][ T6409] do_syscall_64+0x353/0x580 [ 591.083642][ T6409] ? trace_irq_disable+0x3b/0x140 [ 591.083657][ T6409] ? clear_bhb_loop+0x40/0x90 [ 591.083674][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.083687][ T6409] RIP: 0033:0x7f45ce5e00b7 [ 591.083701][ T6409] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 591.083711][ T6409] RSP: 002b:00007ffe47166488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 591.083726][ T6409] RAX: 0000000000000000 RBX: 0000000000090002 RCX: 00007f45ce5e00b7 [ 591.083734][ T6409] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe47166540 [ 591.083742][ T6409] RBP: 00007ffe47166540 R08: 00007ffe47167540 R09: 00000000ffffffff [ 591.083751][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe471675b0 [ 591.083759][ T6409] R13: 000055558a8ea760 R14: 0000000000000012 R15: 431bde82d7b634db [ 591.083779][ T6409] [ 591.200485][ T6409] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 596.217086][ T5713] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 596.623994][ T6593] loop0: detected capacity change from 0 to 32768 [ 596.652175][ T6593] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 596.663345][ T6593] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 596.684862][ T6593] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 596.696360][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 596.702719][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 596.767129][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 64ms [ 596.776725][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 596.784297][ T6593] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 596.875696][ T6593] gfs2: fsid=syz:syz.0: found 1 quota changes [ 596.884672][ T6593] syz-executor335: attempt to access beyond end of device [ 596.884672][ T6593] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 596.892535][ T6593] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 596.897812][ T6593] syz-executor335: attempt to access beyond end of device [ 596.897812][ T6593] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 596.916372][ T6409] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 596.922839][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz-executor335 Not tainted syzkaller #0 PREEMPT(full) [ 596.922860][ T6409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 596.922868][ T6409] Call Trace: [ 596.922875][ T6409] [ 596.922882][ T6409] dump_stack_lvl+0xe8/0x150 [ 596.922932][ T6409] gfs2_withdraw+0xc3/0x1b0 [ 596.922965][ T6409] gfs2_ail1_empty+0x2c5/0x7b0 [ 596.922997][ T6409] gfs2_flush_revokes+0x5c/0x80 [ 596.923012][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 596.923024][ T6409] revoke_lo_before_commit+0x2f/0xea0 [ 596.923036][ T6409] ? __pfx_list_sort+0x10/0x10 [ 596.923051][ T6409] ? do_raw_spin_lock+0x12b/0x2f0 [ 596.923077][ T6409] ? do_raw_spin_unlock+0x4d/0x210 [ 596.923094][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 596.923113][ T6409] __gfs2_log_flush+0xa21/0x1d90 [ 596.923146][ T6409] ? __pfx___gfs2_log_flush+0x10/0x10 [ 596.923164][ T6409] ? down_write+0x16d/0x200 [ 596.923198][ T6409] ? __pfx_down_write+0x10/0x10 [ 596.923225][ T6409] ? call_rcu+0x64b/0x8b0 [ 596.923242][ T6409] gfs2_log_flush+0x34/0x50 [ 596.923265][ T6409] gfs2_kill_sb+0x5c/0x430 [ 596.923288][ T6409] deactivate_locked_super+0xbc/0x130 [ 596.923311][ T6409] cleanup_mnt+0x3d3/0x460 [ 596.923336][ T6409] task_work_run+0x1d9/0x270 [ 596.923363][ T6409] ? __pfx_task_work_run+0x10/0x10 [ 596.923395][ T6409] exit_to_user_mode_loop+0x1fa/0x730 [ 596.923414][ T6409] ? rcu_is_watching+0x15/0xb0 [ 596.923465][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.923484][ T6409] do_syscall_64+0x353/0x580 [ 596.923504][ T6409] ? trace_irq_disable+0x3b/0x140 [ 596.923525][ T6409] ? clear_bhb_loop+0x40/0x90 [ 596.923545][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.923561][ T6409] RIP: 0033:0x7f45ce5e00b7 [ 596.923578][ T6409] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 596.923592][ T6409] RSP: 002b:00007ffe47166488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 596.923608][ T6409] RAX: 0000000000000000 RBX: 00000000000918e9 RCX: 00007f45ce5e00b7 [ 596.923618][ T6409] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe47166540 [ 596.923627][ T6409] RBP: 00007ffe47166540 R08: 00007ffe47167540 R09: 00000000ffffffff [ 596.923636][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe471675b0 [ 596.923645][ T6409] R13: 000055558a8ea760 R14: 0000000000000013 R15: 431bde82d7b634db [ 596.923676][ T6409] [ 597.037512][ T6409] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 602.056955][ T9] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 602.492392][ T6599] loop0: detected capacity change from 0 to 32768 [ 602.521136][ T6599] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 602.533334][ T6599] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 602.565030][ T6599] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 602.577239][ T5713] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 602.583837][ T5713] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 602.670286][ T5713] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 86ms [ 602.680786][ T5713] gfs2: fsid=syz:syz.0: jid=0: Done [ 602.687851][ T6599] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 602.779482][ T6599] gfs2: fsid=syz:syz.0: found 1 quota changes [ 602.789705][ T6599] syz-executor335: attempt to access beyond end of device [ 602.789705][ T6599] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 602.797533][ T6599] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 602.802909][ T6599] syz-executor335: attempt to access beyond end of device [ 602.802909][ T6599] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 602.815006][ T6409] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 602.821513][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz-executor335 Not tainted syzkaller #0 PREEMPT(full) [ 602.821532][ T6409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 602.821540][ T6409] Call Trace: [ 602.821548][ T6409] [ 602.821554][ T6409] dump_stack_lvl+0xe8/0x150 [ 602.821632][ T6409] gfs2_withdraw+0xc3/0x1b0 [ 602.821688][ T6409] gfs2_ail1_empty+0x2c5/0x7b0 [ 602.821721][ T6409] gfs2_flush_revokes+0x5c/0x80 [ 602.821738][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 602.821760][ T6409] revoke_lo_before_commit+0x2f/0xea0 [ 602.821775][ T6409] ? __pfx_list_sort+0x10/0x10 [ 602.821787][ T6409] ? do_raw_spin_lock+0x12b/0x2f0 [ 602.821809][ T6409] ? do_raw_spin_unlock+0x4d/0x210 [ 602.821823][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 602.821839][ T6409] __gfs2_log_flush+0xa21/0x1d90 [ 602.821868][ T6409] ? __pfx___gfs2_log_flush+0x10/0x10 [ 602.821885][ T6409] ? down_write+0x16d/0x200 [ 602.821941][ T6409] ? __pfx_down_write+0x10/0x10 [ 602.821964][ T6409] ? call_rcu+0x64b/0x8b0 [ 602.821979][ T6409] gfs2_log_flush+0x34/0x50 [ 602.821999][ T6409] gfs2_kill_sb+0x5c/0x430 [ 602.822021][ T6409] deactivate_locked_super+0xbc/0x130 [ 602.822042][ T6409] cleanup_mnt+0x3d3/0x460 [ 602.822064][ T6409] task_work_run+0x1d9/0x270 [ 602.822087][ T6409] ? __pfx_task_work_run+0x10/0x10 [ 602.822114][ T6409] exit_to_user_mode_loop+0x1fa/0x730 [ 602.822132][ T6409] ? rcu_is_watching+0x15/0xb0 [ 602.822184][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.822199][ T6409] do_syscall_64+0x353/0x580 [ 602.822217][ T6409] ? trace_irq_disable+0x3b/0x140 [ 602.822234][ T6409] ? clear_bhb_loop+0x40/0x90 [ 602.822251][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.822265][ T6409] RIP: 0033:0x7f45ce5e00b7 [ 602.822279][ T6409] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 602.822292][ T6409] RSP: 002b:00007ffe47166488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 602.822308][ T6409] RAX: 0000000000000000 RBX: 0000000000092fbb RCX: 00007f45ce5e00b7 [ 602.822318][ T6409] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe47166540 [ 602.822326][ T6409] RBP: 00007ffe47166540 R08: 00007ffe47167540 R09: 00000000ffffffff [ 602.822334][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe471675b0 [ 602.822342][ T6409] R13: 000055558a8ea760 R14: 0000000000000014 R15: 431bde82d7b634db [ 602.822364][ T6409] [ 602.822370][ T6409] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 607.976970][ T5713] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 608.692461][ T6607] loop0: detected capacity change from 0 to 32768 [ 608.727713][ T6607] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 608.738025][ T6607] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 608.764957][ T6607] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 608.777367][ T5713] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 608.780370][ T5713] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 608.945027][ T5713] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 164ms [ 608.948577][ T5713] gfs2: fsid=syz:syz.0: jid=0: Done [ 608.958787][ T6607] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 609.051064][ T6607] gfs2: fsid=syz:syz.0: found 1 quota changes [ 609.067274][ T6607] syz-executor335: attempt to access beyond end of device [ 609.067274][ T6607] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 609.083068][ T6607] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 609.088042][ T6607] syz-executor335: attempt to access beyond end of device [ 609.088042][ T6607] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 609.108008][ T6409] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 609.114276][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz-executor335 Not tainted syzkaller #0 PREEMPT(full) [ 609.114297][ T6409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 609.114304][ T6409] Call Trace: [ 609.114310][ T6409] [ 609.114315][ T6409] dump_stack_lvl+0xe8/0x150 [ 609.114351][ T6409] gfs2_withdraw+0xc3/0x1b0 [ 609.114369][ T6409] gfs2_ail1_empty+0x2c5/0x7b0 [ 609.114411][ T6409] gfs2_flush_revokes+0x5c/0x80 [ 609.114429][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 609.114442][ T6409] revoke_lo_before_commit+0x2f/0xea0 [ 609.114454][ T6409] ? __pfx_list_sort+0x10/0x10 [ 609.114465][ T6409] ? do_raw_spin_lock+0x12b/0x2f0 [ 609.114486][ T6409] ? do_raw_spin_unlock+0x4d/0x210 [ 609.114498][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 609.114512][ T6409] __gfs2_log_flush+0xa21/0x1d90 [ 609.114537][ T6409] ? __pfx___gfs2_log_flush+0x10/0x10 [ 609.114555][ T6409] ? down_write+0x16d/0x200 [ 609.114581][ T6409] ? __pfx_down_write+0x10/0x10 [ 609.114603][ T6409] ? call_rcu+0x64b/0x8b0 [ 609.114616][ T6409] gfs2_log_flush+0x34/0x50 [ 609.114633][ T6409] gfs2_kill_sb+0x5c/0x430 [ 609.114653][ T6409] deactivate_locked_super+0xbc/0x130 [ 609.114671][ T6409] cleanup_mnt+0x3d3/0x460 [ 609.114691][ T6409] task_work_run+0x1d9/0x270 [ 609.114711][ T6409] ? __pfx_task_work_run+0x10/0x10 [ 609.114738][ T6409] exit_to_user_mode_loop+0x1fa/0x730 [ 609.114754][ T6409] ? rcu_is_watching+0x15/0xb0 [ 609.114774][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.114791][ T6409] do_syscall_64+0x353/0x580 [ 609.114806][ T6409] ? trace_irq_disable+0x3b/0x140 [ 609.114829][ T6409] ? clear_bhb_loop+0x40/0x90 [ 609.114847][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.114859][ T6409] RIP: 0033:0x7f45ce5e00b7 [ 609.114871][ T6409] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 609.114884][ T6409] RSP: 002b:00007ffe47166488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 609.114899][ T6409] RAX: 0000000000000000 RBX: 00000000000946e0 RCX: 00007f45ce5e00b7 [ 609.114908][ T6409] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe47166540 [ 609.114915][ T6409] RBP: 00007ffe47166540 R08: 00007ffe47167540 R09: 00000000ffffffff [ 609.114924][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe471675b0 [ 609.114931][ T6409] R13: 000055558a8ea760 R14: 0000000000000015 R15: 431bde82d7b634db [ 609.114955][ T6409] [ 609.115281][ T6409] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 614.296834][ T5713] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 614.678765][ T6613] loop0: detected capacity change from 0 to 32768 [ 614.699587][ T6613] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 614.712795][ T6613] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 614.735435][ T6613] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 614.749782][ T5713] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 614.753040][ T5713] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 614.808196][ T5713] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 55ms [ 614.812682][ T5713] gfs2: fsid=syz:syz.0: jid=0: Done [ 614.817047][ T6613] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 614.875620][ T6613] gfs2: fsid=syz:syz.0: found 1 quota changes [ 614.888440][ T6613] syz-executor335: attempt to access beyond end of device [ 614.888440][ T6613] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 614.896592][ T6613] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 614.900664][ T6613] syz-executor335: attempt to access beyond end of device [ 614.900664][ T6613] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 614.920914][ T6409] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 614.927368][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz-executor335 Not tainted syzkaller #0 PREEMPT(full) [ 614.927388][ T6409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 614.927396][ T6409] Call Trace: [ 614.927401][ T6409] [ 614.927407][ T6409] dump_stack_lvl+0xe8/0x150 [ 614.927511][ T6409] gfs2_withdraw+0xc3/0x1b0 [ 614.927564][ T6409] gfs2_ail1_empty+0x2c5/0x7b0 [ 614.927588][ T6409] gfs2_flush_revokes+0x5c/0x80 [ 614.927602][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 614.927624][ T6409] revoke_lo_before_commit+0x2f/0xea0 [ 614.927637][ T6409] ? __pfx_list_sort+0x10/0x10 [ 614.927648][ T6409] ? do_raw_spin_lock+0x12b/0x2f0 [ 614.927666][ T6409] ? do_raw_spin_unlock+0x4d/0x210 [ 614.927679][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 614.927692][ T6409] __gfs2_log_flush+0xa21/0x1d90 [ 614.927715][ T6409] ? __pfx___gfs2_log_flush+0x10/0x10 [ 614.927730][ T6409] ? down_write+0x16d/0x200 [ 614.927780][ T6409] ? __pfx_down_write+0x10/0x10 [ 614.927838][ T6409] ? call_rcu+0x64b/0x8b0 [ 614.927851][ T6409] gfs2_log_flush+0x34/0x50 [ 614.927868][ T6409] gfs2_kill_sb+0x5c/0x430 [ 614.927887][ T6409] deactivate_locked_super+0xbc/0x130 [ 614.927904][ T6409] cleanup_mnt+0x3d3/0x460 [ 614.927922][ T6409] task_work_run+0x1d9/0x270 [ 614.927943][ T6409] ? __pfx_task_work_run+0x10/0x10 [ 614.927965][ T6409] exit_to_user_mode_loop+0x1fa/0x730 [ 614.927980][ T6409] ? rcu_is_watching+0x15/0xb0 [ 614.927998][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.928011][ T6409] do_syscall_64+0x353/0x580 [ 614.928023][ T6409] ? trace_irq_disable+0x3b/0x140 [ 614.928038][ T6409] ? clear_bhb_loop+0x40/0x90 [ 614.928051][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.928063][ T6409] RIP: 0033:0x7f45ce5e00b7 [ 614.928077][ T6409] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 614.928086][ T6409] RSP: 002b:00007ffe47166488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 614.928101][ T6409] RAX: 0000000000000000 RBX: 0000000000095f72 RCX: 00007f45ce5e00b7 [ 614.928109][ T6409] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe47166540 [ 614.928116][ T6409] RBP: 00007ffe47166540 R08: 00007ffe47167540 R09: 00000000ffffffff [ 614.928124][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe471675b0 [ 614.928131][ T6409] R13: 000055558a8ea760 R14: 0000000000000016 R15: 431bde82d7b634db [ 614.928151][ T6409] [ 614.928482][ T6409] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 620.136641][ T5713] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 620.532640][ T6620] loop0: detected capacity change from 0 to 32768 [ 620.558467][ T6620] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 620.570956][ T6620] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 620.602889][ T6620] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 620.615578][ T5713] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 620.624659][ T5713] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 620.664325][ T5713] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 39ms [ 620.668299][ T5713] gfs2: fsid=syz:syz.0: jid=0: Done [ 620.673107][ T6620] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 620.731487][ T6620] gfs2: fsid=syz:syz.0: found 1 quota changes [ 620.742041][ T6620] syz-executor335: attempt to access beyond end of device [ 620.742041][ T6620] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 620.749921][ T6620] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 620.755256][ T6620] syz-executor335: attempt to access beyond end of device [ 620.755256][ T6620] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 620.772886][ T6409] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 620.780009][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz-executor335 Not tainted syzkaller #0 PREEMPT(full) [ 620.780031][ T6409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 620.780039][ T6409] Call Trace: [ 620.780045][ T6409] [ 620.780052][ T6409] dump_stack_lvl+0xe8/0x150 [ 620.780091][ T6409] gfs2_withdraw+0xc3/0x1b0 [ 620.780115][ T6409] gfs2_ail1_empty+0x2c5/0x7b0 [ 620.780143][ T6409] gfs2_flush_revokes+0x5c/0x80 [ 620.780157][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 620.780170][ T6409] revoke_lo_before_commit+0x2f/0xea0 [ 620.780181][ T6409] ? __pfx_list_sort+0x10/0x10 [ 620.780192][ T6409] ? do_raw_spin_lock+0x12b/0x2f0 [ 620.780209][ T6409] ? do_raw_spin_unlock+0x4d/0x210 [ 620.780221][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 620.780233][ T6409] __gfs2_log_flush+0xa21/0x1d90 [ 620.780257][ T6409] ? __pfx___gfs2_log_flush+0x10/0x10 [ 620.780271][ T6409] ? down_write+0x16d/0x200 [ 620.780295][ T6409] ? __pfx_down_write+0x10/0x10 [ 620.780313][ T6409] ? call_rcu+0x64b/0x8b0 [ 620.780325][ T6409] gfs2_log_flush+0x34/0x50 [ 620.780341][ T6409] gfs2_kill_sb+0x5c/0x430 [ 620.780360][ T6409] deactivate_locked_super+0xbc/0x130 [ 620.780378][ T6409] cleanup_mnt+0x3d3/0x460 [ 620.780396][ T6409] task_work_run+0x1d9/0x270 [ 620.780415][ T6409] ? __pfx_task_work_run+0x10/0x10 [ 620.780438][ T6409] exit_to_user_mode_loop+0x1fa/0x730 [ 620.780452][ T6409] ? rcu_is_watching+0x15/0xb0 [ 620.780469][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.780481][ T6409] do_syscall_64+0x353/0x580 [ 620.780494][ T6409] ? trace_irq_disable+0x3b/0x140 [ 620.780508][ T6409] ? clear_bhb_loop+0x40/0x90 [ 620.780521][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.780533][ T6409] RIP: 0033:0x7f45ce5e00b7 [ 620.780546][ T6409] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 620.780556][ T6409] RSP: 002b:00007ffe47166488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 620.780570][ T6409] RAX: 0000000000000000 RBX: 000000000009764f RCX: 00007f45ce5e00b7 [ 620.780577][ T6409] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe47166540 [ 620.780583][ T6409] RBP: 00007ffe47166540 R08: 00007ffe47167540 R09: 00000000ffffffff [ 620.780590][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe471675b0 [ 620.780597][ T6409] R13: 000055558a8ea760 R14: 0000000000000017 R15: 431bde82d7b634db [ 620.780616][ T6409] [ 620.780621][ T6409] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 625.977278][ T5713] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 626.654800][ T6627] loop0: detected capacity change from 0 to 32768 [ 626.685405][ T6627] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 626.700620][ T6627] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 626.726964][ T6627] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 626.744456][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 626.751187][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 626.884501][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 133ms [ 626.897411][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 626.911570][ T6627] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 627.024780][ T6627] gfs2: fsid=syz:syz.0: found 1 quota changes [ 627.040513][ T6627] syz-executor335: attempt to access beyond end of device [ 627.040513][ T6627] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 627.049421][ T6627] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 627.054408][ T6627] syz-executor335: attempt to access beyond end of device [ 627.054408][ T6627] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 627.072449][ T6409] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 627.078728][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz-executor335 Not tainted syzkaller #0 PREEMPT(full) [ 627.078747][ T6409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 627.078753][ T6409] Call Trace: [ 627.078758][ T6409] [ 627.078762][ T6409] dump_stack_lvl+0xe8/0x150 [ 627.078854][ T6409] gfs2_withdraw+0xc3/0x1b0 [ 627.078910][ T6409] gfs2_ail1_empty+0x2c5/0x7b0 [ 627.078935][ T6409] gfs2_flush_revokes+0x5c/0x80 [ 627.078949][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 627.078996][ T6409] revoke_lo_before_commit+0x2f/0xea0 [ 627.079007][ T6409] ? __pfx_list_sort+0x10/0x10 [ 627.079018][ T6409] ? do_raw_spin_lock+0x12b/0x2f0 [ 627.079037][ T6409] ? do_raw_spin_unlock+0x4d/0x210 [ 627.079049][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 627.079061][ T6409] __gfs2_log_flush+0xa21/0x1d90 [ 627.079085][ T6409] ? __pfx___gfs2_log_flush+0x10/0x10 [ 627.079099][ T6409] ? down_write+0x16d/0x200 [ 627.079148][ T6409] ? __pfx_down_write+0x10/0x10 [ 627.079164][ T6409] ? call_rcu+0x64b/0x8b0 [ 627.079176][ T6409] gfs2_log_flush+0x34/0x50 [ 627.079192][ T6409] gfs2_kill_sb+0x5c/0x430 [ 627.079209][ T6409] deactivate_locked_super+0xbc/0x130 [ 627.079226][ T6409] cleanup_mnt+0x3d3/0x460 [ 627.079243][ T6409] task_work_run+0x1d9/0x270 [ 627.079269][ T6409] ? __pfx_task_work_run+0x10/0x10 [ 627.079291][ T6409] exit_to_user_mode_loop+0x1fa/0x730 [ 627.079304][ T6409] ? rcu_is_watching+0x15/0xb0 [ 627.079321][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.079334][ T6409] do_syscall_64+0x353/0x580 [ 627.079347][ T6409] ? trace_irq_disable+0x3b/0x140 [ 627.079361][ T6409] ? clear_bhb_loop+0x40/0x90 [ 627.079374][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.079383][ T6409] RIP: 0033:0x7f45ce5e00b7 [ 627.079396][ T6409] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 627.079406][ T6409] RSP: 002b:00007ffe47166488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 627.079419][ T6409] RAX: 0000000000000000 RBX: 0000000000098d1f RCX: 00007f45ce5e00b7 [ 627.079426][ T6409] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe47166540 [ 627.079432][ T6409] RBP: 00007ffe47166540 R08: 00007ffe47167540 R09: 00000000ffffffff [ 627.079439][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe471675b0 [ 627.079445][ T6409] R13: 000055558a8ea760 R14: 0000000000000018 R15: 431bde82d7b634db [ 627.079460][ T6409] [ 627.079508][ T6409] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 632.217383][ T5713] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 632.658052][ T6635] loop0: detected capacity change from 0 to 32768 [ 632.689226][ T6635] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 632.699683][ T6635] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 632.722015][ T6635] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 632.738827][ T5713] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 632.744365][ T5713] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 632.782257][ T5713] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 37ms [ 632.787576][ T5713] gfs2: fsid=syz:syz.0: jid=0: Done [ 632.790336][ T6635] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 632.849325][ T6635] gfs2: fsid=syz:syz.0: found 1 quota changes [ 632.862855][ T6635] syz-executor335: attempt to access beyond end of device [ 632.862855][ T6635] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 632.869964][ T6635] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 632.875671][ T6635] syz-executor335: attempt to access beyond end of device [ 632.875671][ T6635] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 632.893427][ T6409] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 632.899924][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz-executor335 Not tainted syzkaller #0 PREEMPT(full) [ 632.899945][ T6409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 632.899952][ T6409] Call Trace: [ 632.899961][ T6409] [ 632.899968][ T6409] dump_stack_lvl+0xe8/0x150 [ 632.900007][ T6409] gfs2_withdraw+0xc3/0x1b0 [ 632.900033][ T6409] gfs2_ail1_empty+0x2c5/0x7b0 [ 632.900062][ T6409] gfs2_flush_revokes+0x5c/0x80 [ 632.900078][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 632.900092][ T6409] revoke_lo_before_commit+0x2f/0xea0 [ 632.900107][ T6409] ? __pfx_list_sort+0x10/0x10 [ 632.900120][ T6409] ? do_raw_spin_lock+0x12b/0x2f0 [ 632.900144][ T6409] ? do_raw_spin_unlock+0x4d/0x210 [ 632.900157][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 632.900170][ T6409] __gfs2_log_flush+0xa21/0x1d90 [ 632.900198][ T6409] ? __pfx___gfs2_log_flush+0x10/0x10 [ 632.900214][ T6409] ? down_write+0x16d/0x200 [ 632.900240][ T6409] ? __pfx_down_write+0x10/0x10 [ 632.900260][ T6409] ? call_rcu+0x64b/0x8b0 [ 632.900276][ T6409] gfs2_log_flush+0x34/0x50 [ 632.900295][ T6409] gfs2_kill_sb+0x5c/0x430 [ 632.900319][ T6409] deactivate_locked_super+0xbc/0x130 [ 632.900338][ T6409] cleanup_mnt+0x3d3/0x460 [ 632.900358][ T6409] task_work_run+0x1d9/0x270 [ 632.900377][ T6409] ? __pfx_task_work_run+0x10/0x10 [ 632.900400][ T6409] exit_to_user_mode_loop+0x1fa/0x730 [ 632.900415][ T6409] ? rcu_is_watching+0x15/0xb0 [ 632.900433][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.900446][ T6409] do_syscall_64+0x353/0x580 [ 632.900464][ T6409] ? trace_irq_disable+0x3b/0x140 [ 632.900479][ T6409] ? clear_bhb_loop+0x40/0x90 [ 632.900494][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.900505][ T6409] RIP: 0033:0x7f45ce5e00b7 [ 632.900518][ T6409] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 632.900528][ T6409] RSP: 002b:00007ffe47166488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 632.900542][ T6409] RAX: 0000000000000000 RBX: 000000000009a59a RCX: 00007f45ce5e00b7 [ 632.900552][ T6409] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe47166540 [ 632.900559][ T6409] RBP: 00007ffe47166540 R08: 00007ffe47167540 R09: 00000000ffffffff [ 632.900567][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe471675b0 [ 632.900575][ T6409] R13: 000055558a8ea760 R14: 0000000000000019 R15: 431bde82d7b634db [ 632.900597][ T6409] [ 632.900603][ T6409] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 634.777205][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.780838][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 638.057002][ T5713] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 638.457477][ T6641] loop0: detected capacity change from 0 to 32768 [ 638.475868][ T6641] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 638.491340][ T6641] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 638.518057][ T6641] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 638.528384][ T6369] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 638.533330][ T6369] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 638.589756][ T6369] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 56ms [ 638.595908][ T6369] gfs2: fsid=syz:syz.0: jid=0: Done [ 638.601299][ T6641] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 638.664744][ T6641] gfs2: fsid=syz:syz.0: found 1 quota changes [ 638.675350][ T6641] syz-executor335: attempt to access beyond end of device [ 638.675350][ T6641] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 638.682557][ T6641] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 638.688397][ T6641] syz-executor335: attempt to access beyond end of device [ 638.688397][ T6641] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 638.707548][ T6409] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 638.713333][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz-executor335 Not tainted syzkaller #0 PREEMPT(full) [ 638.713354][ T6409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 638.713362][ T6409] Call Trace: [ 638.713366][ T6409] [ 638.713370][ T6409] dump_stack_lvl+0xe8/0x150 [ 638.713397][ T6409] gfs2_withdraw+0xc3/0x1b0 [ 638.713414][ T6409] gfs2_ail1_empty+0x2c5/0x7b0 [ 638.713428][ T6409] gfs2_flush_revokes+0x5c/0x80 [ 638.713460][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 638.713472][ T6409] revoke_lo_before_commit+0x2f/0xea0 [ 638.713483][ T6409] ? __pfx_list_sort+0x10/0x10 [ 638.713494][ T6409] ? do_raw_spin_lock+0x12b/0x2f0 [ 638.713513][ T6409] ? do_raw_spin_unlock+0x4d/0x210 [ 638.713525][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 638.713534][ T6409] __gfs2_log_flush+0xa21/0x1d90 [ 638.713547][ T6409] ? __pfx___gfs2_log_flush+0x10/0x10 [ 638.713556][ T6409] ? down_write+0x16d/0x200 [ 638.713577][ T6409] ? __pfx_down_write+0x10/0x10 [ 638.713594][ T6409] ? call_rcu+0x64b/0x8b0 [ 638.713607][ T6409] gfs2_log_flush+0x34/0x50 [ 638.713623][ T6409] gfs2_kill_sb+0x5c/0x430 [ 638.713640][ T6409] deactivate_locked_super+0xbc/0x130 [ 638.713654][ T6409] cleanup_mnt+0x3d3/0x460 [ 638.713670][ T6409] task_work_run+0x1d9/0x270 [ 638.713695][ T6409] ? __pfx_task_work_run+0x10/0x10 [ 638.713715][ T6409] exit_to_user_mode_loop+0x1fa/0x730 [ 638.713729][ T6409] ? rcu_is_watching+0x15/0xb0 [ 638.713746][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.713759][ T6409] do_syscall_64+0x353/0x580 [ 638.713772][ T6409] ? trace_irq_disable+0x3b/0x140 [ 638.713785][ T6409] ? clear_bhb_loop+0x40/0x90 [ 638.713798][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.713808][ T6409] RIP: 0033:0x7f45ce5e00b7 [ 638.713819][ T6409] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 638.713828][ T6409] RSP: 002b:00007ffe47166488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 638.713841][ T6409] RAX: 0000000000000000 RBX: 000000000009bc50 RCX: 00007f45ce5e00b7 [ 638.713848][ T6409] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe47166540 [ 638.713853][ T6409] RBP: 00007ffe47166540 R08: 00007ffe47167540 R09: 00000000ffffffff [ 638.713860][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe471675b0 [ 638.713895][ T6409] R13: 000055558a8ea760 R14: 000000000000001a R15: 431bde82d7b634db [ 638.713912][ T6409] [ 638.828986][ T6409] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 643.897375][ T6369] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 644.717245][ T6648] loop0: detected capacity change from 0 to 32768 [ 644.755044][ T6648] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 644.769283][ T6648] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 644.799053][ T6648] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 644.811137][ T6369] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 644.815207][ T6369] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 644.959333][ T6369] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 144ms [ 644.969328][ T6369] gfs2: fsid=syz:syz.0: jid=0: Done [ 644.985046][ T6648] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 645.058742][ T6648] gfs2: fsid=syz:syz.0: found 1 quota changes [ 645.067529][ T6648] syz-executor335: attempt to access beyond end of device [ 645.067529][ T6648] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 645.075578][ T6648] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 645.079809][ T6648] syz-executor335: attempt to access beyond end of device [ 645.079809][ T6648] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 645.100880][ T6409] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 645.108545][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz-executor335 Not tainted syzkaller #0 PREEMPT(full) [ 645.108563][ T6409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 645.108571][ T6409] Call Trace: [ 645.108603][ T6409] [ 645.108610][ T6409] dump_stack_lvl+0xe8/0x150 [ 645.108689][ T6409] gfs2_withdraw+0xc3/0x1b0 [ 645.108742][ T6409] gfs2_ail1_empty+0x2c5/0x7b0 [ 645.108769][ T6409] gfs2_flush_revokes+0x5c/0x80 [ 645.108783][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 645.108829][ T6409] revoke_lo_before_commit+0x2f/0xea0 [ 645.108842][ T6409] ? __pfx_list_sort+0x10/0x10 [ 645.108854][ T6409] ? do_raw_spin_lock+0x12b/0x2f0 [ 645.108873][ T6409] ? do_raw_spin_unlock+0x4d/0x210 [ 645.108885][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 645.108897][ T6409] __gfs2_log_flush+0xa21/0x1d90 [ 645.108921][ T6409] ? __pfx___gfs2_log_flush+0x10/0x10 [ 645.108935][ T6409] ? down_write+0x16d/0x200 [ 645.108988][ T6409] ? __pfx_down_write+0x10/0x10 [ 645.109013][ T6409] ? call_rcu+0x64b/0x8b0 [ 645.109025][ T6409] gfs2_log_flush+0x34/0x50 [ 645.109040][ T6409] gfs2_kill_sb+0x5c/0x430 [ 645.109059][ T6409] deactivate_locked_super+0xbc/0x130 [ 645.109074][ T6409] cleanup_mnt+0x3d3/0x460 [ 645.109091][ T6409] task_work_run+0x1d9/0x270 [ 645.109111][ T6409] ? __pfx_task_work_run+0x10/0x10 [ 645.109133][ T6409] exit_to_user_mode_loop+0x1fa/0x730 [ 645.109148][ T6409] ? rcu_is_watching+0x15/0xb0 [ 645.109166][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.109178][ T6409] do_syscall_64+0x353/0x580 [ 645.109192][ T6409] ? trace_irq_disable+0x3b/0x140 [ 645.109207][ T6409] ? clear_bhb_loop+0x40/0x90 [ 645.109222][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.109233][ T6409] RIP: 0033:0x7f45ce5e00b7 [ 645.109246][ T6409] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 645.109255][ T6409] RSP: 002b:00007ffe47166488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 645.109269][ T6409] RAX: 0000000000000000 RBX: 000000000009d333 RCX: 00007f45ce5e00b7 [ 645.109277][ T6409] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe47166540 [ 645.109283][ T6409] RBP: 00007ffe47166540 R08: 00007ffe47167540 R09: 00000000ffffffff [ 645.109290][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe471675b0 [ 645.109297][ T6409] R13: 000055558a8ea760 R14: 000000000000001b R15: 431bde82d7b634db [ 645.109316][ T6409] [ 645.109634][ T6409] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 650.296822][ T6369] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 650.720698][ T6658] loop0: detected capacity change from 0 to 32768 [ 650.744658][ T6658] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 650.758200][ T6658] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 650.784677][ T6658] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 650.797528][ T6369] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 650.807312][ T6369] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 650.872596][ T6369] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 65ms [ 650.883111][ T6369] gfs2: fsid=syz:syz.0: jid=0: Done [ 650.892510][ T6658] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 650.972634][ T6658] gfs2: fsid=syz:syz.0: found 1 quota changes [ 650.983353][ T6658] syz-executor335: attempt to access beyond end of device [ 650.983353][ T6658] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 650.992252][ T6658] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 650.996980][ T6658] syz-executor335: attempt to access beyond end of device [ 650.996980][ T6658] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 651.015476][ T6409] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 651.021489][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz-executor335 Not tainted syzkaller #0 PREEMPT(full) [ 651.021514][ T6409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 651.021521][ T6409] Call Trace: [ 651.021528][ T6409] [ 651.021534][ T6409] dump_stack_lvl+0xe8/0x150 [ 651.021567][ T6409] gfs2_withdraw+0xc3/0x1b0 [ 651.021592][ T6409] gfs2_ail1_empty+0x2c5/0x7b0 [ 651.021618][ T6409] gfs2_flush_revokes+0x5c/0x80 [ 651.021631][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 651.021642][ T6409] revoke_lo_before_commit+0x2f/0xea0 [ 651.021654][ T6409] ? __pfx_list_sort+0x10/0x10 [ 651.021664][ T6409] ? do_raw_spin_lock+0x12b/0x2f0 [ 651.021682][ T6409] ? do_raw_spin_unlock+0x4d/0x210 [ 651.021694][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 651.021707][ T6409] __gfs2_log_flush+0xa21/0x1d90 [ 651.021727][ T6409] ? __pfx___gfs2_log_flush+0x10/0x10 [ 651.021741][ T6409] ? down_write+0x16d/0x200 [ 651.021762][ T6409] ? __pfx_down_write+0x10/0x10 [ 651.021807][ T6409] ? call_rcu+0x64b/0x8b0 [ 651.021819][ T6409] gfs2_log_flush+0x34/0x50 [ 651.021835][ T6409] gfs2_kill_sb+0x5c/0x430 [ 651.021853][ T6409] deactivate_locked_super+0xbc/0x130 [ 651.021869][ T6409] cleanup_mnt+0x3d3/0x460 [ 651.021886][ T6409] task_work_run+0x1d9/0x270 [ 651.021905][ T6409] ? __pfx_task_work_run+0x10/0x10 [ 651.021926][ T6409] exit_to_user_mode_loop+0x1fa/0x730 [ 651.021942][ T6409] ? rcu_is_watching+0x15/0xb0 [ 651.021958][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.021969][ T6409] do_syscall_64+0x353/0x580 [ 651.021985][ T6409] ? trace_irq_disable+0x3b/0x140 [ 651.022000][ T6409] ? clear_bhb_loop+0x40/0x90 [ 651.022014][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.022027][ T6409] RIP: 0033:0x7f45ce5e00b7 [ 651.022040][ T6409] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 651.022051][ T6409] RSP: 002b:00007ffe47166488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 651.022064][ T6409] RAX: 0000000000000000 RBX: 000000000009ec3e RCX: 00007f45ce5e00b7 [ 651.022071][ T6409] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe47166540 [ 651.022081][ T6409] RBP: 00007ffe47166540 R08: 00007ffe47167540 R09: 00000000ffffffff [ 651.022089][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe471675b0 [ 651.022096][ T6409] R13: 000055558a8ea760 R14: 000000000000001c R15: 431bde82d7b634db [ 651.022114][ T6409] [ 651.022120][ T6409] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 656.216726][ T6369] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 656.620002][ T6670] loop0: detected capacity change from 0 to 32768 [ 656.643316][ T6670] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 656.660643][ T6670] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 656.681265][ T6670] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 656.698156][ T6369] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 656.702320][ T6369] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 656.758161][ T6369] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 55ms [ 656.767739][ T6369] gfs2: fsid=syz:syz.0: jid=0: Done [ 656.776019][ T6670] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 656.855240][ T6670] gfs2: fsid=syz:syz.0: found 1 quota changes [ 656.866219][ T6670] syz-executor335: attempt to access beyond end of device [ 656.866219][ T6670] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 656.873321][ T6670] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 656.879963][ T6670] syz-executor335: attempt to access beyond end of device [ 656.879963][ T6670] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 656.899009][ T6409] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 656.906696][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz-executor335 Not tainted syzkaller #0 PREEMPT(full) [ 656.906715][ T6409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 656.906722][ T6409] Call Trace: [ 656.906727][ T6409] [ 656.906732][ T6409] dump_stack_lvl+0xe8/0x150 [ 656.906818][ T6409] gfs2_withdraw+0xc3/0x1b0 [ 656.906867][ T6409] gfs2_ail1_empty+0x2c5/0x7b0 [ 656.906892][ T6409] gfs2_flush_revokes+0x5c/0x80 [ 656.906905][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 656.906980][ T6409] revoke_lo_before_commit+0x2f/0xea0 [ 656.906992][ T6409] ? __pfx_list_sort+0x10/0x10 [ 656.907002][ T6409] ? do_raw_spin_lock+0x12b/0x2f0 [ 656.907019][ T6409] ? do_raw_spin_unlock+0x4d/0x210 [ 656.907031][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 656.907043][ T6409] __gfs2_log_flush+0xa21/0x1d90 [ 656.907065][ T6409] ? __pfx___gfs2_log_flush+0x10/0x10 [ 656.907084][ T6409] ? down_write+0x16d/0x200 [ 656.907136][ T6409] ? __pfx_down_write+0x10/0x10 [ 656.907154][ T6409] ? call_rcu+0x64b/0x8b0 [ 656.907167][ T6409] gfs2_log_flush+0x34/0x50 [ 656.907182][ T6409] gfs2_kill_sb+0x5c/0x430 [ 656.907200][ T6409] deactivate_locked_super+0xbc/0x130 [ 656.907215][ T6409] cleanup_mnt+0x3d3/0x460 [ 656.907233][ T6409] task_work_run+0x1d9/0x270 [ 656.907252][ T6409] ? __pfx_task_work_run+0x10/0x10 [ 656.907270][ T6409] exit_to_user_mode_loop+0x1fa/0x730 [ 656.907283][ T6409] ? rcu_is_watching+0x15/0xb0 [ 656.907301][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.907313][ T6409] do_syscall_64+0x353/0x580 [ 656.907327][ T6409] ? trace_irq_disable+0x3b/0x140 [ 656.907342][ T6409] ? clear_bhb_loop+0x40/0x90 [ 656.907354][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.907363][ T6409] RIP: 0033:0x7f45ce5e00b7 [ 656.907372][ T6409] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 656.907378][ T6409] RSP: 002b:00007ffe47166488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 656.907387][ T6409] RAX: 0000000000000000 RBX: 00000000000a0349 RCX: 00007f45ce5e00b7 [ 656.907392][ T6409] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe47166540 [ 656.907396][ T6409] RBP: 00007ffe47166540 R08: 00007ffe47167540 R09: 00000000ffffffff [ 656.907401][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe471675b0 [ 656.907405][ T6409] R13: 000055558a8ea760 R14: 000000000000001d R15: 431bde82d7b634db [ 656.907416][ T6409] [ 656.907701][ T6409] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 662.057131][ T6369] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 662.498889][ T6676] loop0: detected capacity change from 0 to 32768 [ 662.518110][ T6676] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 662.531873][ T6676] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 662.557962][ T6676] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 662.576282][ T6369] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 662.586658][ T6369] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 662.664157][ T6369] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 77ms [ 662.674079][ T6369] gfs2: fsid=syz:syz.0: jid=0: Done [ 662.679913][ T6676] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 662.768185][ T6676] gfs2: fsid=syz:syz.0: found 1 quota changes [ 662.781749][ T6676] syz-executor335: attempt to access beyond end of device [ 662.781749][ T6676] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 662.789655][ T6676] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 662.794810][ T6676] syz-executor335: attempt to access beyond end of device [ 662.794810][ T6676] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 662.813949][ T6409] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 662.820535][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz-executor335 Not tainted syzkaller #0 PREEMPT(full) [ 662.820556][ T6409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 662.820564][ T6409] Call Trace: [ 662.820573][ T6409] [ 662.820581][ T6409] dump_stack_lvl+0xe8/0x150 [ 662.820663][ T6409] gfs2_withdraw+0xc3/0x1b0 [ 662.820724][ T6409] gfs2_ail1_empty+0x2c5/0x7b0 [ 662.820755][ T6409] gfs2_flush_revokes+0x5c/0x80 [ 662.820773][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 662.820822][ T6409] revoke_lo_before_commit+0x2f/0xea0 [ 662.820831][ T6409] ? __pfx_list_sort+0x10/0x10 [ 662.820840][ T6409] ? do_raw_spin_lock+0x12b/0x2f0 [ 662.820854][ T6409] ? do_raw_spin_unlock+0x4d/0x210 [ 662.820863][ T6409] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 662.820878][ T6409] __gfs2_log_flush+0xa21/0x1d90 [ 662.820904][ T6409] ? __pfx___gfs2_log_flush+0x10/0x10 [ 662.820921][ T6409] ? down_write+0x16d/0x200 [ 662.820977][ T6409] ? __pfx_down_write+0x10/0x10 [ 662.820991][ T6409] ? call_rcu+0x64b/0x8b0 [ 662.821000][ T6409] gfs2_log_flush+0x34/0x50 [ 662.821013][ T6409] gfs2_kill_sb+0x5c/0x430 [ 662.821027][ T6409] deactivate_locked_super+0xbc/0x130 [ 662.821042][ T6409] cleanup_mnt+0x3d3/0x460 [ 662.821055][ T6409] task_work_run+0x1d9/0x270 [ 662.821070][ T6409] ? __pfx_task_work_run+0x10/0x10 [ 662.821087][ T6409] exit_to_user_mode_loop+0x1fa/0x730 [ 662.821098][ T6409] ? rcu_is_watching+0x15/0xb0 [ 662.821111][ T6409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.821121][ T6409] do_syscall_64+0x353/0x580 [ 662.821133][ T6409] ? trace_irq_disable+0x3b/0x140 [ 662.821150][ T6409] ? clear_bhb_loop+0x40/0x90 [ 662.821166][ T6409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.821181][ T6409] RIP: 0033:0x7f45ce5e00b7 [ 662.821195][ T6409] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 d4 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 662.821207][ T6409] RSP: 002b:00007ffe47166488 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 662.821222][ T6409] RAX: 0000000000000000 RBX: 00000000000a1a25 RCX: 00007f45ce5e00b7 [ 662.821230][ T6409] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe47166540 [ 662.821238][ T6409] RBP: 00007ffe47166540 R08: 00007ffe47167540 R09: 00000000ffffffff [ 662.821247][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffe471675b0 [ 662.821254][ T6409] R13: 000055558a8ea760 R14: 000000000000001e R15: 431bde82d7b634db [ 662.821274][ T6409] [ 662.821280][ T6409] gfs2: fsid=syz:syz.0: about to withdraw this file system [host] Command execution timed out after 2m30s