Warning: Permanently added '[localhost]:54330' (ED25519) to the list of known hosts. 2025/08/15 06:39:16 ignoring optional flag "sandboxArg"="0" 2025/08/15 06:39:17 parsed 1 programs [ 133.006623][ T5582] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 137.171499][ T4708] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 137.175781][ T4708] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 137.179750][ T4708] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 137.184913][ T4708] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 137.189584][ T4708] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 138.014934][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.017972][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.153096][ T5644] chnl_net:caif_netlink_parms(): no params data found [ 140.282769][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.286593][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.289921][ T5644] bridge_slave_0: entered allmulticast mode [ 140.302017][ T5644] bridge_slave_0: entered promiscuous mode [ 140.312506][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.316515][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.320039][ T5644] bridge_slave_1: entered allmulticast mode [ 140.332686][ T5644] bridge_slave_1: entered promiscuous mode [ 140.363570][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.371802][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.395469][ T5644] team0: Port device team_slave_0 added [ 140.400877][ T5644] team0: Port device team_slave_1 added [ 140.423354][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.426667][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.439380][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.446349][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.449661][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.463057][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.504240][ T5644] hsr_slave_0: entered promiscuous mode [ 140.508141][ T5644] hsr_slave_1: entered promiscuous mode [ 141.007831][ T5644] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 141.027005][ T5644] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 141.044981][ T5644] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 141.064031][ T5644] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 141.122466][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.126500][ T5644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.129869][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.133110][ T5644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.165263][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.169122][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.282354][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.318137][ T5644] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.337244][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.340534][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.359486][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.362628][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.435649][ T5644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.732620][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.819222][ T5644] veth0_vlan: entered promiscuous mode [ 141.839787][ T5644] veth1_vlan: entered promiscuous mode [ 141.894429][ T5644] veth0_macvtap: entered promiscuous mode [ 141.899805][ T5644] veth1_macvtap: entered promiscuous mode [ 141.934360][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.955039][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.984020][ T3045] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.989081][ T3045] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.001519][ T3045] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.014139][ T3045] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.227456][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.321771][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.404019][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.822510][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.825976][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.895057][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.901118][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.122700][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/08/15 06:39:33 executed programs: 0 [ 144.479802][ T5405] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.484534][ T5405] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.488211][ T5405] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.497627][ T5405] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.509981][ T5405] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.634670][ T31] bridge_slave_1: left allmulticast mode [ 144.637407][ T31] bridge_slave_1: left promiscuous mode [ 144.642994][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.649709][ T31] bridge_slave_0: left allmulticast mode [ 144.672681][ T31] bridge_slave_0: left promiscuous mode [ 144.677769][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.104024][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.110059][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.115621][ T31] bond0 (unregistering): Released all slaves [ 145.201911][ T31] hsr_slave_0: left promiscuous mode [ 145.221748][ T31] hsr_slave_1: left promiscuous mode [ 145.229373][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.239496][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.251963][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.260693][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.284392][ T31] veth1_macvtap: left promiscuous mode [ 145.286986][ T31] veth0_macvtap: left promiscuous mode [ 145.289554][ T31] veth1_vlan: left promiscuous mode [ 145.303206][ T31] veth0_vlan: left promiscuous mode [ 145.932737][ T31] team0 (unregistering): Port device team_slave_1 removed [ 145.977858][ T31] team0 (unregistering): Port device team_slave_0 removed [ 146.571086][ T5405] Bluetooth: hci0: command tx timeout [ 146.959802][ T5723] chnl_net:caif_netlink_parms(): no params data found [ 147.347374][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.361342][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.364655][ T5723] bridge_slave_0: entered allmulticast mode [ 147.383601][ T5723] bridge_slave_0: entered promiscuous mode [ 147.397942][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.411021][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.414397][ T5723] bridge_slave_1: entered allmulticast mode [ 147.426503][ T5723] bridge_slave_1: entered promiscuous mode [ 147.489759][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.512695][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.562382][ T5723] team0: Port device team_slave_0 added [ 147.572148][ T5723] team0: Port device team_slave_1 added [ 147.614239][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.617927][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.642460][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.661141][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.664326][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.686007][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.773648][ T5723] hsr_slave_0: entered promiscuous mode [ 147.777321][ T5723] hsr_slave_1: entered promiscuous mode [ 148.339396][ T5723] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 148.361512][ T5723] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 148.367782][ T5723] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 148.381411][ T5723] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 148.555679][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.595054][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.616792][ T3045] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.620184][ T3045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.652635][ T5405] Bluetooth: hci0: command tx timeout [ 148.656840][ T3045] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.660787][ T3045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.735747][ T5723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.070358][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.151705][ T5723] veth0_vlan: entered promiscuous mode [ 149.174874][ T5723] veth1_vlan: entered promiscuous mode [ 149.224028][ T5723] veth0_macvtap: entered promiscuous mode [ 149.241444][ T5723] veth1_macvtap: entered promiscuous mode [ 149.282860][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.297195][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.327545][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.345786][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.349613][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.377813][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.485053][ T1049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.489209][ T1049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.570012][ T3045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.575711][ T3045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/08/15 06:39:38 executed programs: 2 [ 150.089760][ T5803] loop0: detected capacity change from 0 to 32768 [ 150.117134][ T5803] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 150.134272][ T5803] gfs2: fsid=.: Now mounting FS (format 1801)... [ 150.175467][ T5803] syz.0.16: attempt to access beyond end of device [ 150.175467][ T5803] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 150.192240][ T5803] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 150.198613][ T5803] gfs2: fsid=..s: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 150.213099][ T5803] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5803 [syz.0.16] init_journal+0x17f8/0x2260 [ 150.217524][ T5803] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 150.234060][ T5803] gfs2: fsid=..s: about to withdraw this file system [ 150.237338][ T5803] gfs2: fsid=..s: Journal recovery skipped for jid 0 until next mount. [ 150.253444][ T5803] gfs2: fsid=..s: Glock dequeues delayed: 0 [ 150.264369][ T5803] gfs2: fsid=..s: File system withdrawn [ 150.266861][ T5803] CPU: 0 UID: 0 PID: 5803 Comm: syz.0.16 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 150.266877][ T5803] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 150.266885][ T5803] Call Trace: [ 150.266890][ T5803] [ 150.266896][ T5803] dump_stack_lvl+0x189/0x250 [ 150.266916][ T5803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.266929][ T5803] ? __pfx__printk+0x10/0x10 [ 150.266944][ T5803] ? kobject_uevent_env+0x36b/0x8c0 [ 150.267023][ T5803] gfs2_withdraw+0xb30/0x1430 [ 150.267045][ T5803] ? __pfx_gfs2_withdraw+0x10/0x10 [ 150.267059][ T5803] ? __pfx_wake_up_bit+0x10/0x10 [ 150.267079][ T5803] ? gfs2_consist_inode_i+0xf5/0x110 [ 150.267093][ T5803] gfs2_jdesc_check+0x17d/0x2f0 [ 150.267111][ T5803] check_journal_clean+0x158/0x310 [ 150.267125][ T5803] ? __pfx_check_journal_clean+0x10/0x10 [ 150.267139][ T5803] ? init_journal+0x17f8/0x2260 [ 150.267156][ T5803] ? do_raw_spin_unlock+0x4d/0x240 [ 150.267172][ T5803] ? _raw_spin_unlock+0x28/0x50 [ 150.267183][ T5803] ? gfs2_jdesc_find+0xab/0xc0 [ 150.267198][ T5803] init_journal+0x17f8/0x2260 [ 150.267217][ T5803] ? init_inodes+0xdb/0x320 [ 150.267231][ T5803] ? __pfx_init_journal+0x10/0x10 [ 150.267242][ T5803] ? vsnprintf+0xe11/0xf00 [ 150.267259][ T5803] ? snprintf+0xda/0x120 [ 150.267272][ T5803] ? init_inodes+0xdb/0x320 [ 150.267283][ T5803] ? __pfx_snprintf+0x10/0x10 [ 150.267293][ T5803] ? gfs2_glock_nq_num+0x13d/0x170 [ 150.267308][ T5803] init_inodes+0xdb/0x320 [ 150.267321][ T5803] gfs2_fill_super+0x1923/0x20d0 [ 150.267344][ T5803] ? __pfx_gfs2_fill_super+0x10/0x10 [ 150.267357][ T5803] ? init_locking+0xb8/0x210 [ 150.267367][ T5803] ? sb_set_blocksize+0x104/0x180 [ 150.267384][ T5803] ? setup_bdev_super+0x4c1/0x5b0 [ 150.267400][ T5803] get_tree_bdev_flags+0x40b/0x4d0 [ 150.267412][ T5803] ? __pfx_gfs2_fill_super+0x10/0x10 [ 150.267425][ T5803] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 150.267444][ T5803] gfs2_get_tree+0x51/0x1e0 [ 150.267458][ T5803] vfs_get_tree+0x8f/0x2b0 [ 150.267472][ T5803] do_new_mount+0x2a2/0x9e0 [ 150.267488][ T5803] ? ns_capable+0x8a/0xf0 [ 150.267499][ T5803] ? __pfx_do_new_mount+0x10/0x10 [ 150.267513][ T5803] ? path_mount+0x61c/0xfe0 [ 150.267525][ T5803] ? user_path_at+0x44/0x60 [ 150.267543][ T5803] __se_sys_mount+0x317/0x410 [ 150.267560][ T5803] ? __pfx___se_sys_mount+0x10/0x10 [ 150.267571][ T5803] ? do_syscall_64+0xbe/0x3b0 [ 150.267580][ T5803] ? __x64_sys_mount+0x20/0xc0 [ 150.267589][ T5803] do_syscall_64+0xfa/0x3b0 [ 150.267598][ T5803] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.267606][ T5803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.267613][ T5803] ? clear_bhb_loop+0x60/0xb0 [ 150.267622][ T5803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.267629][ T5803] RIP: 0033:0x7f7a21d900ca [ 150.267638][ T5803] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.267644][ T5803] RSP: 002b:00007f7a22cb9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 150.267656][ T5803] RAX: ffffffffffffffda RBX: 00007f7a22cb9ef0 RCX: 00007f7a21d900ca [ 150.267664][ T5803] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f7a22cb9eb0 [ 150.267670][ T5803] RBP: 0000200000000000 R08: 00007f7a22cb9ef0 R09: 0000000000208c1b [ 150.267677][ T5803] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 150.267683][ T5803] R13: 00007f7a22cb9eb0 R14: 0000000000012754 R15: 00002000000128c0 [ 150.267702][ T5803] [ 150.267707][ T5803] gfs2: fsid=..s: Error checking journal for spectator mount. [ 150.730652][ T5405] Bluetooth: hci0: command tx timeout [ 150.944191][ T5810] loop0: detected capacity change from 0 to 32768 [ 150.978734][ T5810] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 150.992053][ T5810] gfs2: fsid=.: Now mounting FS (format 1801)... [ 151.010265][ T5810] syz.0.17: attempt to access beyond end of device [ 151.010265][ T5810] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 151.023398][ T5810] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 151.029518][ T5810] gfs2: fsid=..s: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 151.051722][ T5810] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5810 [syz.0.17] init_journal+0x17f8/0x2260 [ 151.055942][ T5810] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 151.059551][ T5810] gfs2: fsid=..s: about to withdraw this file system [ 151.068166][ T5810] gfs2: fsid=..s: Journal recovery skipped for jid 0 until next mount. [ 151.073502][ T5810] gfs2: fsid=..s: Glock dequeues delayed: 0 [ 151.078455][ T5810] gfs2: fsid=..s: File system withdrawn [ 151.082441][ T5810] CPU: 0 UID: 0 PID: 5810 Comm: syz.0.17 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 151.082458][ T5810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 151.082464][ T5810] Call Trace: [ 151.082470][ T5810] [ 151.082475][ T5810] dump_stack_lvl+0x189/0x250 [ 151.082494][ T5810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.082506][ T5810] ? __pfx__printk+0x10/0x10 [ 151.082521][ T5810] ? kobject_uevent_env+0x36b/0x8c0 [ 151.082588][ T5810] gfs2_withdraw+0xb30/0x1430 [ 151.082605][ T5810] ? __pfx_gfs2_withdraw+0x10/0x10 [ 151.082614][ T5810] ? __pfx_wake_up_bit+0x10/0x10 [ 151.082626][ T5810] ? gfs2_consist_inode_i+0xf5/0x110 [ 151.082637][ T5810] gfs2_jdesc_check+0x17d/0x2f0 [ 151.082655][ T5810] check_journal_clean+0x158/0x310 [ 151.082669][ T5810] ? __pfx_check_journal_clean+0x10/0x10 [ 151.082683][ T5810] ? init_journal+0x17f8/0x2260 [ 151.082699][ T5810] ? do_raw_spin_unlock+0x4d/0x240 [ 151.082713][ T5810] ? _raw_spin_unlock+0x28/0x50 [ 151.082726][ T5810] ? gfs2_jdesc_find+0xab/0xc0 [ 151.082739][ T5810] init_journal+0x17f8/0x2260 [ 151.082788][ T5810] ? init_inodes+0xdb/0x320 [ 151.082804][ T5810] ? __pfx_init_journal+0x10/0x10 [ 151.082816][ T5810] ? vsnprintf+0xe11/0xf00 [ 151.082836][ T5810] ? snprintf+0xda/0x120 [ 151.082846][ T5810] ? init_inodes+0xdb/0x320 [ 151.082857][ T5810] ? __pfx_snprintf+0x10/0x10 [ 151.082869][ T5810] ? gfs2_glock_nq_num+0x13d/0x170 [ 151.082886][ T5810] init_inodes+0xdb/0x320 [ 151.082900][ T5810] gfs2_fill_super+0x1923/0x20d0 [ 151.082923][ T5810] ? __pfx_gfs2_fill_super+0x10/0x10 [ 151.082937][ T5810] ? init_locking+0xb8/0x210 [ 151.082948][ T5810] ? sb_set_blocksize+0x104/0x180 [ 151.082962][ T5810] ? setup_bdev_super+0x4c1/0x5b0 [ 151.082977][ T5810] get_tree_bdev_flags+0x40b/0x4d0 [ 151.082990][ T5810] ? __pfx_gfs2_fill_super+0x10/0x10 [ 151.083001][ T5810] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 151.083021][ T5810] gfs2_get_tree+0x51/0x1e0 [ 151.083036][ T5810] vfs_get_tree+0x8f/0x2b0 [ 151.083050][ T5810] do_new_mount+0x2a2/0x9e0 [ 151.083067][ T5810] ? ns_capable+0x8a/0xf0 [ 151.083078][ T5810] ? __pfx_do_new_mount+0x10/0x10 [ 151.083090][ T5810] ? path_mount+0x61c/0xfe0 [ 151.083102][ T5810] ? user_path_at+0x44/0x60 [ 151.083118][ T5810] __se_sys_mount+0x317/0x410 [ 151.083135][ T5810] ? __pfx___se_sys_mount+0x10/0x10 [ 151.083152][ T5810] ? do_syscall_64+0xbe/0x3b0 [ 151.083165][ T5810] ? __x64_sys_mount+0x20/0xc0 [ 151.083179][ T5810] do_syscall_64+0xfa/0x3b0 [ 151.083192][ T5810] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.083206][ T5810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.083217][ T5810] ? clear_bhb_loop+0x60/0xb0 [ 151.083231][ T5810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.083241][ T5810] RIP: 0033:0x7f7a21d900ca [ 151.083252][ T5810] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.083260][ T5810] RSP: 002b:00007f7a22cb9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 151.083269][ T5810] RAX: ffffffffffffffda RBX: 00007f7a22cb9ef0 RCX: 00007f7a21d900ca [ 151.083274][ T5810] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f7a22cb9eb0 [ 151.083279][ T5810] RBP: 0000200000000000 R08: 00007f7a22cb9ef0 R09: 0000000000208c1b [ 151.083285][ T5810] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 151.083291][ T5810] R13: 00007f7a22cb9eb0 R14: 0000000000012754 R15: 00002000000128c0 [ 151.083307][ T5810] [ 151.083312][ T5810] gfs2: fsid=..s: Error checking journal for spectator mount. [ 151.660131][ T5814] loop0: detected capacity change from 0 to 32768 [ 151.675399][ T5814] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 151.678599][ T5814] gfs2: fsid=.: Now mounting FS (format 1801)... [ 151.697653][ T5814] syz.0.18: attempt to access beyond end of device [ 151.697653][ T5814] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 151.722493][ T5814] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 151.728301][ T5814] gfs2: fsid=..s: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 151.741173][ T5814] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5814 [syz.0.18] init_journal+0x17f8/0x2260 [ 151.745396][ T5814] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 151.749037][ T5814] gfs2: fsid=..s: about to withdraw this file system [ 151.759105][ T5814] gfs2: fsid=..s: Journal recovery skipped for jid 0 until next mount. [ 151.764321][ T5814] gfs2: fsid=..s: Glock dequeues delayed: 0 [ 151.769102][ T5814] gfs2: fsid=..s: File system withdrawn [ 151.773795][ T5814] CPU: 0 UID: 0 PID: 5814 Comm: syz.0.18 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 151.773812][ T5814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 151.773819][ T5814] Call Trace: [ 151.773825][ T5814] [ 151.773830][ T5814] dump_stack_lvl+0x189/0x250 [ 151.773853][ T5814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.773868][ T5814] ? __pfx__printk+0x10/0x10 [ 151.773885][ T5814] ? kobject_uevent_env+0x36b/0x8c0 [ 151.773910][ T5814] gfs2_withdraw+0xb30/0x1430 [ 151.773934][ T5814] ? __pfx_gfs2_withdraw+0x10/0x10 [ 151.773949][ T5814] ? __pfx_wake_up_bit+0x10/0x10 [ 151.773971][ T5814] ? gfs2_consist_inode_i+0xf5/0x110 [ 151.773986][ T5814] gfs2_jdesc_check+0x17d/0x2f0 [ 151.774006][ T5814] check_journal_clean+0x158/0x310 [ 151.774022][ T5814] ? __pfx_check_journal_clean+0x10/0x10 [ 151.774036][ T5814] ? init_journal+0x17f8/0x2260 [ 151.774054][ T5814] ? do_raw_spin_unlock+0x4d/0x240 [ 151.774069][ T5814] ? _raw_spin_unlock+0x28/0x50 [ 151.774083][ T5814] ? gfs2_jdesc_find+0xab/0xc0 [ 151.774097][ T5814] init_journal+0x17f8/0x2260 [ 151.774118][ T5814] ? init_inodes+0xdb/0x320 [ 151.774132][ T5814] ? __pfx_init_journal+0x10/0x10 [ 151.774144][ T5814] ? vsnprintf+0xe11/0xf00 [ 151.774163][ T5814] ? snprintf+0xda/0x120 [ 151.774175][ T5814] ? init_inodes+0xdb/0x320 [ 151.774187][ T5814] ? __pfx_snprintf+0x10/0x10 [ 151.774199][ T5814] ? gfs2_glock_nq_num+0x13d/0x170 [ 151.774215][ T5814] init_inodes+0xdb/0x320 [ 151.774229][ T5814] gfs2_fill_super+0x1923/0x20d0 [ 151.774249][ T5814] ? __pfx_gfs2_fill_super+0x10/0x10 [ 151.774263][ T5814] ? init_locking+0xb8/0x210 [ 151.774274][ T5814] ? sb_set_blocksize+0x104/0x180 [ 151.774289][ T5814] ? setup_bdev_super+0x4c1/0x5b0 [ 151.774306][ T5814] get_tree_bdev_flags+0x40b/0x4d0 [ 151.774318][ T5814] ? __pfx_gfs2_fill_super+0x10/0x10 [ 151.774330][ T5814] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 151.774351][ T5814] gfs2_get_tree+0x51/0x1e0 [ 151.774365][ T5814] vfs_get_tree+0x8f/0x2b0 [ 151.774380][ T5814] do_new_mount+0x2a2/0x9e0 [ 151.774398][ T5814] ? ns_capable+0x8a/0xf0 [ 151.774410][ T5814] ? __pfx_do_new_mount+0x10/0x10 [ 151.774423][ T5814] ? path_mount+0x61c/0xfe0 [ 151.774435][ T5814] ? user_path_at+0x44/0x60 [ 151.774452][ T5814] __se_sys_mount+0x317/0x410 [ 151.774470][ T5814] ? __pfx___se_sys_mount+0x10/0x10 [ 151.774488][ T5814] ? do_syscall_64+0xbe/0x3b0 [ 151.774501][ T5814] ? __x64_sys_mount+0x20/0xc0 [ 151.774548][ T5814] do_syscall_64+0xfa/0x3b0 [ 151.774567][ T5814] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.774581][ T5814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.774592][ T5814] ? clear_bhb_loop+0x60/0xb0 [ 151.774605][ T5814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.774616][ T5814] RIP: 0033:0x7f7a21d900ca [ 151.774629][ T5814] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.774638][ T5814] RSP: 002b:00007f7a22cb9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 151.774651][ T5814] RAX: ffffffffffffffda RBX: 00007f7a22cb9ef0 RCX: 00007f7a21d900ca [ 151.774658][ T5814] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f7a22cb9eb0 [ 151.774665][ T5814] RBP: 0000200000000000 R08: 00007f7a22cb9ef0 R09: 0000000000208c1b [ 151.774671][ T5814] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 151.774678][ T5814] R13: 00007f7a22cb9eb0 R14: 0000000000012754 R15: 00002000000128c0 [ 151.774696][ T5814] [ 151.774701][ T5814] gfs2: fsid=..s: Error checking journal for spectator mount. [ 152.404504][ T5818] loop0: detected capacity change from 0 to 32768 [ 152.422552][ T5818] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 152.425788][ T5818] gfs2: fsid=.: Now mounting FS (format 1801)... [ 152.445298][ T5818] syz.0.19: attempt to access beyond end of device [ 152.445298][ T5818] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 152.462120][ T5818] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 152.468137][ T5818] gfs2: fsid=..s: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 152.495069][ T5818] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5818 [syz.0.19] init_journal+0x17f8/0x2260 [ 152.499123][ T5818] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 152.508602][ T5818] gfs2: fsid=..s: about to withdraw this file system [ 152.512968][ T5818] gfs2: fsid=..s: Journal recovery skipped for jid 0 until next mount. [ 152.516529][ T5818] gfs2: fsid=..s: Glock dequeues delayed: 0 [ 152.521699][ T5818] gfs2: fsid=..s: File system withdrawn [ 152.525802][ T5818] CPU: 0 UID: 0 PID: 5818 Comm: syz.0.19 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 152.525820][ T5818] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 152.525827][ T5818] Call Trace: [ 152.525832][ T5818] [ 152.525837][ T5818] dump_stack_lvl+0x189/0x250 [ 152.525858][ T5818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.525872][ T5818] ? __pfx__printk+0x10/0x10 [ 152.525887][ T5818] ? kobject_uevent_env+0x36b/0x8c0 [ 152.525911][ T5818] gfs2_withdraw+0xb30/0x1430 [ 152.525934][ T5818] ? __pfx_gfs2_withdraw+0x10/0x10 [ 152.525947][ T5818] ? __pfx_wake_up_bit+0x10/0x10 [ 152.525967][ T5818] ? gfs2_consist_inode_i+0xf5/0x110 [ 152.525981][ T5818] gfs2_jdesc_check+0x17d/0x2f0 [ 152.526000][ T5818] check_journal_clean+0x158/0x310 [ 152.526013][ T5818] ? __pfx_check_journal_clean+0x10/0x10 [ 152.526027][ T5818] ? init_journal+0x17f8/0x2260 [ 152.526051][ T5818] ? do_raw_spin_unlock+0x4d/0x240 [ 152.526067][ T5818] ? _raw_spin_unlock+0x28/0x50 [ 152.526085][ T5818] ? gfs2_jdesc_find+0xab/0xc0 [ 152.526099][ T5818] init_journal+0x17f8/0x2260 [ 152.526119][ T5818] ? init_inodes+0xdb/0x320 [ 152.526133][ T5818] ? __pfx_init_journal+0x10/0x10 [ 152.526145][ T5818] ? vsnprintf+0xe11/0xf00 [ 152.526164][ T5818] ? snprintf+0xda/0x120 [ 152.526176][ T5818] ? init_inodes+0xdb/0x320 [ 152.526189][ T5818] ? __pfx_snprintf+0x10/0x10 [ 152.526201][ T5818] ? gfs2_glock_nq_num+0x13d/0x170 [ 152.526221][ T5818] init_inodes+0xdb/0x320 [ 152.526234][ T5818] gfs2_fill_super+0x1923/0x20d0 [ 152.526257][ T5818] ? __pfx_gfs2_fill_super+0x10/0x10 [ 152.526271][ T5818] ? init_locking+0xb8/0x210 [ 152.526282][ T5818] ? sb_set_blocksize+0x104/0x180 [ 152.526296][ T5818] ? setup_bdev_super+0x4c1/0x5b0 [ 152.526318][ T5818] get_tree_bdev_flags+0x40b/0x4d0 [ 152.526332][ T5818] ? __pfx_gfs2_fill_super+0x10/0x10 [ 152.526344][ T5818] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 152.526368][ T5818] gfs2_get_tree+0x51/0x1e0 [ 152.526383][ T5818] vfs_get_tree+0x8f/0x2b0 [ 152.526398][ T5818] do_new_mount+0x2a2/0x9e0 [ 152.526415][ T5818] ? ns_capable+0x8a/0xf0 [ 152.526425][ T5818] ? __pfx_do_new_mount+0x10/0x10 [ 152.526439][ T5818] ? path_mount+0x61c/0xfe0 [ 152.526455][ T5818] ? user_path_at+0x44/0x60 [ 152.526471][ T5818] __se_sys_mount+0x317/0x410 [ 152.526490][ T5818] ? __pfx___se_sys_mount+0x10/0x10 [ 152.526508][ T5818] ? do_syscall_64+0xbe/0x3b0 [ 152.526557][ T5818] ? __x64_sys_mount+0x20/0xc0 [ 152.526574][ T5818] do_syscall_64+0xfa/0x3b0 [ 152.526586][ T5818] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.526600][ T5818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.526612][ T5818] ? clear_bhb_loop+0x60/0xb0 [ 152.526626][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.526636][ T5818] RIP: 0033:0x7f7a21d900ca [ 152.526648][ T5818] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.526657][ T5818] RSP: 002b:00007f7a22cb9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 152.526670][ T5818] RAX: ffffffffffffffda RBX: 00007f7a22cb9ef0 RCX: 00007f7a21d900ca [ 152.526678][ T5818] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f7a22cb9eb0 [ 152.526685][ T5818] RBP: 0000200000000000 R08: 00007f7a22cb9ef0 R09: 0000000000208c1b [ 152.526691][ T5818] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 152.526697][ T5818] R13: 00007f7a22cb9eb0 R14: 0000000000012754 R15: 00002000000128c0 [ 152.526715][ T5818] [ 152.526721][ T5818] gfs2: fsid=..s: Error checking journal for spectator mount. [ 152.810684][ T5405] Bluetooth: hci0: command tx timeout [ 153.084405][ T5822] loop0: detected capacity change from 0 to 32768 [ 153.113918][ T5822] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 153.117128][ T5822] gfs2: fsid=.: Now mounting FS (format 1801)... [ 153.135289][ T5822] syz.0.20: attempt to access beyond end of device [ 153.135289][ T5822] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 153.161691][ T5822] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 153.167425][ T5822] gfs2: fsid=..s: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 153.180634][ T5822] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5822 [syz.0.20] init_journal+0x17f8/0x2260 [ 153.184560][ T5822] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 153.188345][ T5822] gfs2: fsid=..s: about to withdraw this file system [ 153.195725][ T5822] gfs2: fsid=..s: Journal recovery skipped for jid 0 until next mount. [ 153.199235][ T5822] gfs2: fsid=..s: Glock dequeues delayed: 0 [ 153.204558][ T5822] gfs2: fsid=..s: File system withdrawn [ 153.207041][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: syz.0.20 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 153.207055][ T5822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 153.207062][ T5822] Call Trace: [ 153.207068][ T5822] [ 153.207073][ T5822] dump_stack_lvl+0x189/0x250 [ 153.207093][ T5822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.207106][ T5822] ? __pfx__printk+0x10/0x10 [ 153.207122][ T5822] ? kobject_uevent_env+0x36b/0x8c0 [ 153.207145][ T5822] gfs2_withdraw+0xb30/0x1430 [ 153.207163][ T5822] ? __pfx_gfs2_withdraw+0x10/0x10 [ 153.207172][ T5822] ? __pfx_wake_up_bit+0x10/0x10 [ 153.207184][ T5822] ? gfs2_consist_inode_i+0xf5/0x110 [ 153.207193][ T5822] gfs2_jdesc_check+0x17d/0x2f0 [ 153.207204][ T5822] check_journal_clean+0x158/0x310 [ 153.207216][ T5822] ? __pfx_check_journal_clean+0x10/0x10 [ 153.207230][ T5822] ? init_journal+0x17f8/0x2260 [ 153.207247][ T5822] ? do_raw_spin_unlock+0x4d/0x240 [ 153.207262][ T5822] ? _raw_spin_unlock+0x28/0x50 [ 153.207274][ T5822] ? gfs2_jdesc_find+0xab/0xc0 [ 153.207289][ T5822] init_journal+0x17f8/0x2260 [ 153.207306][ T5822] ? init_inodes+0xdb/0x320 [ 153.207320][ T5822] ? __pfx_init_journal+0x10/0x10 [ 153.207333][ T5822] ? vsnprintf+0xe11/0xf00 [ 153.207351][ T5822] ? snprintf+0xda/0x120 [ 153.207364][ T5822] ? init_inodes+0xdb/0x320 [ 153.207375][ T5822] ? __pfx_snprintf+0x10/0x10 [ 153.207388][ T5822] ? gfs2_glock_nq_num+0x13d/0x170 [ 153.207403][ T5822] init_inodes+0xdb/0x320 [ 153.207417][ T5822] gfs2_fill_super+0x1923/0x20d0 [ 153.207439][ T5822] ? __pfx_gfs2_fill_super+0x10/0x10 [ 153.207454][ T5822] ? init_locking+0xb8/0x210 [ 153.207464][ T5822] ? sb_set_blocksize+0x104/0x180 [ 153.207479][ T5822] ? setup_bdev_super+0x4c1/0x5b0 [ 153.207495][ T5822] get_tree_bdev_flags+0x40b/0x4d0 [ 153.207508][ T5822] ? __pfx_gfs2_fill_super+0x10/0x10 [ 153.207521][ T5822] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 153.207541][ T5822] gfs2_get_tree+0x51/0x1e0 [ 153.207556][ T5822] vfs_get_tree+0x8f/0x2b0 [ 153.207570][ T5822] do_new_mount+0x2a2/0x9e0 [ 153.207588][ T5822] ? ns_capable+0x8a/0xf0 [ 153.207599][ T5822] ? __pfx_do_new_mount+0x10/0x10 [ 153.207610][ T5822] ? path_mount+0x61c/0xfe0 [ 153.207622][ T5822] ? user_path_at+0x44/0x60 [ 153.207639][ T5822] __se_sys_mount+0x317/0x410 [ 153.207656][ T5822] ? __pfx___se_sys_mount+0x10/0x10 [ 153.207673][ T5822] ? do_syscall_64+0xbe/0x3b0 [ 153.207687][ T5822] ? __x64_sys_mount+0x20/0xc0 [ 153.207703][ T5822] do_syscall_64+0xfa/0x3b0 [ 153.207716][ T5822] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.207729][ T5822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.207741][ T5822] ? clear_bhb_loop+0x60/0xb0 [ 153.207762][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.207773][ T5822] RIP: 0033:0x7f7a21d900ca [ 153.207785][ T5822] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.207794][ T5822] RSP: 002b:00007f7a22cb9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 153.207807][ T5822] RAX: ffffffffffffffda RBX: 00007f7a22cb9ef0 RCX: 00007f7a21d900ca [ 153.207814][ T5822] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f7a22cb9eb0 [ 153.207821][ T5822] RBP: 0000200000000000 R08: 00007f7a22cb9ef0 R09: 0000000000208c1b [ 153.207827][ T5822] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 153.207834][ T5822] R13: 00007f7a22cb9eb0 R14: 0000000000012754 R15: 00002000000128c0 [ 153.207851][ T5822] [ 153.207856][ T5822] gfs2: fsid=..s: Error checking journal for spectator mount. [ 153.768177][ T5826] loop0: detected capacity change from 0 to 32768 [ 153.780793][ T5826] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 153.784003][ T5826] gfs2: fsid=.: Now mounting FS (format 1801)... [ 153.803660][ T5826] syz.0.21: attempt to access beyond end of device [ 153.803660][ T5826] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 153.822129][ T5826] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 153.827973][ T5826] gfs2: fsid=..s: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 153.841051][ T5826] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5826 [syz.0.21] init_journal+0x17f8/0x2260 [ 153.845132][ T5826] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 153.848739][ T5826] gfs2: fsid=..s: about to withdraw this file system [ 153.864327][ T5826] gfs2: fsid=..s: Journal recovery skipped for jid 0 until next mount. [ 153.868051][ T5826] gfs2: fsid=..s: Glock dequeues delayed: 0 [ 153.874027][ T5826] gfs2: fsid=..s: File system withdrawn [ 153.876517][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: syz.0.21 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 153.876533][ T5826] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 153.876540][ T5826] Call Trace: [ 153.876545][ T5826] [ 153.876551][ T5826] dump_stack_lvl+0x189/0x250 [ 153.876572][ T5826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.876585][ T5826] ? __pfx__printk+0x10/0x10 [ 153.876600][ T5826] ? kobject_uevent_env+0x36b/0x8c0 [ 153.876623][ T5826] gfs2_withdraw+0xb30/0x1430 [ 153.876648][ T5826] ? __pfx_gfs2_withdraw+0x10/0x10 [ 153.876662][ T5826] ? __pfx_wake_up_bit+0x10/0x10 [ 153.876681][ T5826] ? gfs2_consist_inode_i+0xf5/0x110 [ 153.876696][ T5826] gfs2_jdesc_check+0x17d/0x2f0 [ 153.876712][ T5826] check_journal_clean+0x158/0x310 [ 153.876726][ T5826] ? __pfx_check_journal_clean+0x10/0x10 [ 153.876739][ T5826] ? init_journal+0x17f8/0x2260 [ 153.876755][ T5826] ? do_raw_spin_unlock+0x4d/0x240 [ 153.876771][ T5826] ? _raw_spin_unlock+0x28/0x50 [ 153.876783][ T5826] ? gfs2_jdesc_find+0xab/0xc0 [ 153.876798][ T5826] init_journal+0x17f8/0x2260 [ 153.876823][ T5826] ? init_inodes+0xdb/0x320 [ 153.876837][ T5826] ? __pfx_init_journal+0x10/0x10 [ 153.876848][ T5826] ? vsnprintf+0xe11/0xf00 [ 153.876867][ T5826] ? snprintf+0xda/0x120 [ 153.876878][ T5826] ? init_inodes+0xdb/0x320 [ 153.876890][ T5826] ? __pfx_snprintf+0x10/0x10 [ 153.876902][ T5826] ? gfs2_glock_nq_num+0x13d/0x170 [ 153.876919][ T5826] init_inodes+0xdb/0x320 [ 153.876933][ T5826] gfs2_fill_super+0x1923/0x20d0 [ 153.876953][ T5826] ? __pfx_gfs2_fill_super+0x10/0x10 [ 153.876968][ T5826] ? init_locking+0xb8/0x210 [ 153.876979][ T5826] ? sb_set_blocksize+0x104/0x180 [ 153.876994][ T5826] ? setup_bdev_super+0x4c1/0x5b0 [ 153.877009][ T5826] get_tree_bdev_flags+0x40b/0x4d0 [ 153.877021][ T5826] ? __pfx_gfs2_fill_super+0x10/0x10 [ 153.877034][ T5826] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 153.877054][ T5826] gfs2_get_tree+0x51/0x1e0 [ 153.877069][ T5826] vfs_get_tree+0x8f/0x2b0 [ 153.877082][ T5826] do_new_mount+0x2a2/0x9e0 [ 153.877093][ T5826] ? ns_capable+0x8a/0xf0 [ 153.877100][ T5826] ? __pfx_do_new_mount+0x10/0x10 [ 153.877111][ T5826] ? path_mount+0x61c/0xfe0 [ 153.877123][ T5826] ? user_path_at+0x44/0x60 [ 153.877140][ T5826] __se_sys_mount+0x317/0x410 [ 153.877158][ T5826] ? __pfx___se_sys_mount+0x10/0x10 [ 153.877177][ T5826] ? do_syscall_64+0xbe/0x3b0 [ 153.877190][ T5826] ? __x64_sys_mount+0x20/0xc0 [ 153.877204][ T5826] do_syscall_64+0xfa/0x3b0 [ 153.877217][ T5826] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.877230][ T5826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.877241][ T5826] ? clear_bhb_loop+0x60/0xb0 [ 153.877254][ T5826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.877264][ T5826] RIP: 0033:0x7f7a21d900ca [ 153.877276][ T5826] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.877285][ T5826] RSP: 002b:00007f7a22cb9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 153.877298][ T5826] RAX: ffffffffffffffda RBX: 00007f7a22cb9ef0 RCX: 00007f7a21d900ca [ 153.877306][ T5826] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f7a22cb9eb0 [ 153.877313][ T5826] RBP: 0000200000000000 R08: 00007f7a22cb9ef0 R09: 0000000000208c1b [ 153.877320][ T5826] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 153.877324][ T5826] R13: 00007f7a22cb9eb0 R14: 0000000000012754 R15: 00002000000128c0 [ 153.877335][ T5826] [ 153.877340][ T5826] gfs2: fsid=..s: Error checking journal for spectator mount. [ 154.428351][ T5830] loop0: detected capacity change from 0 to 32768 [ 154.442369][ T5830] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 154.449309][ T5830] gfs2: fsid=.: Now mounting FS (format 1801)... [ 154.464250][ T5830] syz.0.22: attempt to access beyond end of device [ 154.464250][ T5830] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 154.481906][ T5830] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 154.487820][ T5830] gfs2: fsid=..s: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 154.511956][ T5830] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5830 [syz.0.22] init_journal+0x17f8/0x2260 [ 154.516161][ T5830] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 154.519616][ T5830] gfs2: fsid=..s: about to withdraw this file system [ 154.532224][ T5830] gfs2: fsid=..s: Journal recovery skipped for jid 0 until next mount. [ 154.535793][ T5830] gfs2: fsid=..s: Glock dequeues delayed: 0 [ 154.539785][ T5830] gfs2: fsid=..s: File system withdrawn [ 154.543306][ T5830] CPU: 0 UID: 0 PID: 5830 Comm: syz.0.22 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 154.543322][ T5830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 154.543329][ T5830] Call Trace: [ 154.543334][ T5830] [ 154.543339][ T5830] dump_stack_lvl+0x189/0x250 [ 154.543408][ T5830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.543422][ T5830] ? __pfx__printk+0x10/0x10 [ 154.543437][ T5830] ? kobject_uevent_env+0x36b/0x8c0 [ 154.543495][ T5830] gfs2_withdraw+0xb30/0x1430 [ 154.543519][ T5830] ? __pfx_gfs2_withdraw+0x10/0x10 [ 154.543533][ T5830] ? __pfx_wake_up_bit+0x10/0x10 [ 154.543551][ T5830] ? gfs2_consist_inode_i+0xf5/0x110 [ 154.543565][ T5830] gfs2_jdesc_check+0x17d/0x2f0 [ 154.543583][ T5830] check_journal_clean+0x158/0x310 [ 154.543597][ T5830] ? __pfx_check_journal_clean+0x10/0x10 [ 154.543610][ T5830] ? init_journal+0x17f8/0x2260 [ 154.543630][ T5830] ? do_raw_spin_unlock+0x4d/0x240 [ 154.543645][ T5830] ? _raw_spin_unlock+0x28/0x50 [ 154.543657][ T5830] ? gfs2_jdesc_find+0xab/0xc0 [ 154.543672][ T5830] init_journal+0x17f8/0x2260 [ 154.543691][ T5830] ? init_inodes+0xdb/0x320 [ 154.543706][ T5830] ? __pfx_init_journal+0x10/0x10 [ 154.543722][ T5830] ? vsnprintf+0xe11/0xf00 [ 154.543741][ T5830] ? snprintf+0xda/0x120 [ 154.543753][ T5830] ? init_inodes+0xdb/0x320 [ 154.543765][ T5830] ? __pfx_snprintf+0x10/0x10 [ 154.543777][ T5830] ? gfs2_glock_nq_num+0x13d/0x170 [ 154.543801][ T5830] init_inodes+0xdb/0x320 [ 154.543816][ T5830] gfs2_fill_super+0x1923/0x20d0 [ 154.543837][ T5830] ? __pfx_gfs2_fill_super+0x10/0x10 [ 154.543852][ T5830] ? init_locking+0xb8/0x210 [ 154.543863][ T5830] ? sb_set_blocksize+0x104/0x180 [ 154.543878][ T5830] ? setup_bdev_super+0x4c1/0x5b0 [ 154.543894][ T5830] get_tree_bdev_flags+0x40b/0x4d0 [ 154.543907][ T5830] ? __pfx_gfs2_fill_super+0x10/0x10 [ 154.543918][ T5830] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 154.543939][ T5830] gfs2_get_tree+0x51/0x1e0 [ 154.543954][ T5830] vfs_get_tree+0x8f/0x2b0 [ 154.543968][ T5830] do_new_mount+0x2a2/0x9e0 [ 154.543986][ T5830] ? ns_capable+0x8a/0xf0 [ 154.543997][ T5830] ? __pfx_do_new_mount+0x10/0x10 [ 154.544009][ T5830] ? path_mount+0x61c/0xfe0 [ 154.544022][ T5830] ? user_path_at+0x44/0x60 [ 154.544038][ T5830] __se_sys_mount+0x317/0x410 [ 154.544057][ T5830] ? __pfx___se_sys_mount+0x10/0x10 [ 154.544074][ T5830] ? do_syscall_64+0xbe/0x3b0 [ 154.544088][ T5830] ? __x64_sys_mount+0x20/0xc0 [ 154.544103][ T5830] do_syscall_64+0xfa/0x3b0 [ 154.544116][ T5830] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.544129][ T5830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.544140][ T5830] ? clear_bhb_loop+0x60/0xb0 [ 154.544153][ T5830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.544164][ T5830] RIP: 0033:0x7f7a21d900ca [ 154.544175][ T5830] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.544184][ T5830] RSP: 002b:00007f7a22cb9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 154.544197][ T5830] RAX: ffffffffffffffda RBX: 00007f7a22cb9ef0 RCX: 00007f7a21d900ca [ 154.544204][ T5830] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f7a22cb9eb0 [ 154.544211][ T5830] RBP: 0000200000000000 R08: 00007f7a22cb9ef0 R09: 0000000000208c1b [ 154.544218][ T5830] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 154.544225][ T5830] R13: 00007f7a22cb9eb0 R14: 0000000000012754 R15: 00002000000128c0 [ 154.544242][ T5830] [ 154.544247][ T5830] gfs2: fsid=..s: Error checking journal for spectator mount. 2025/08/15 06:39:43 executed programs: 9 [ 155.098698][ T5834] loop0: detected capacity change from 0 to 32768 [ 155.113443][ T5834] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 155.120735][ T5834] gfs2: fsid=.: Now mounting FS (format 1801)... [ 155.136543][ T5834] syz.0.23: attempt to access beyond end of device [ 155.136543][ T5834] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 155.159721][ T5834] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 155.169853][ T5834] gfs2: fsid=..s: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 155.180021][ T5834] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5834 [syz.0.23] init_journal+0x17f8/0x2260 [ 155.185029][ T5834] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 155.194366][ T5834] gfs2: fsid=..s: about to withdraw this file system [ 155.197276][ T5834] gfs2: fsid=..s: Journal recovery skipped for jid 0 until next mount. [ 155.201998][ T5834] gfs2: fsid=..s: Glock dequeues delayed: 0 [ 155.206136][ T5834] gfs2: fsid=..s: File system withdrawn [ 155.208531][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: syz.0.23 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 155.208548][ T5834] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.208555][ T5834] Call Trace: [ 155.208561][ T5834] [ 155.208566][ T5834] dump_stack_lvl+0x189/0x250 [ 155.208588][ T5834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.208604][ T5834] ? __pfx__printk+0x10/0x10 [ 155.208621][ T5834] ? kobject_uevent_env+0x36b/0x8c0 [ 155.208646][ T5834] gfs2_withdraw+0xb30/0x1430 [ 155.208672][ T5834] ? __pfx_gfs2_withdraw+0x10/0x10 [ 155.208688][ T5834] ? __pfx_wake_up_bit+0x10/0x10 [ 155.208710][ T5834] ? gfs2_consist_inode_i+0xf5/0x110 [ 155.208726][ T5834] gfs2_jdesc_check+0x17d/0x2f0 [ 155.208744][ T5834] check_journal_clean+0x158/0x310 [ 155.208759][ T5834] ? __pfx_check_journal_clean+0x10/0x10 [ 155.208776][ T5834] ? init_journal+0x17f8/0x2260 [ 155.208795][ T5834] ? do_raw_spin_unlock+0x4d/0x240 [ 155.208813][ T5834] ? _raw_spin_unlock+0x28/0x50 [ 155.208826][ T5834] ? gfs2_jdesc_find+0xab/0xc0 [ 155.208843][ T5834] init_journal+0x17f8/0x2260 [ 155.208864][ T5834] ? init_inodes+0xdb/0x320 [ 155.208880][ T5834] ? __pfx_init_journal+0x10/0x10 [ 155.208894][ T5834] ? vsnprintf+0xe11/0xf00 [ 155.208914][ T5834] ? snprintf+0xda/0x120 [ 155.208928][ T5834] ? init_inodes+0xdb/0x320 [ 155.208940][ T5834] ? __pfx_snprintf+0x10/0x10 [ 155.208954][ T5834] ? gfs2_glock_nq_num+0x13d/0x170 [ 155.208972][ T5834] init_inodes+0xdb/0x320 [ 155.208992][ T5834] gfs2_fill_super+0x1923/0x20d0 [ 155.209018][ T5834] ? __pfx_gfs2_fill_super+0x10/0x10 [ 155.209034][ T5834] ? init_locking+0xb8/0x210 [ 155.209046][ T5834] ? sb_set_blocksize+0x104/0x180 [ 155.209064][ T5834] ? setup_bdev_super+0x4c1/0x5b0 [ 155.209082][ T5834] get_tree_bdev_flags+0x40b/0x4d0 [ 155.209096][ T5834] ? __pfx_gfs2_fill_super+0x10/0x10 [ 155.209109][ T5834] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 155.209131][ T5834] gfs2_get_tree+0x51/0x1e0 [ 155.209147][ T5834] vfs_get_tree+0x8f/0x2b0 [ 155.209163][ T5834] do_new_mount+0x2a2/0x9e0 [ 155.209181][ T5834] ? ns_capable+0x8a/0xf0 [ 155.209193][ T5834] ? __pfx_do_new_mount+0x10/0x10 [ 155.209207][ T5834] ? path_mount+0x61c/0xfe0 [ 155.209221][ T5834] ? user_path_at+0x44/0x60 [ 155.209239][ T5834] __se_sys_mount+0x317/0x410 [ 155.209259][ T5834] ? __pfx___se_sys_mount+0x10/0x10 [ 155.209278][ T5834] ? do_syscall_64+0xbe/0x3b0 [ 155.209292][ T5834] ? __x64_sys_mount+0x20/0xc0 [ 155.209310][ T5834] do_syscall_64+0xfa/0x3b0 [ 155.209324][ T5834] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.209338][ T5834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.209350][ T5834] ? clear_bhb_loop+0x60/0xb0 [ 155.209364][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.209376][ T5834] RIP: 0033:0x7f7a21d900ca [ 155.209388][ T5834] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.209398][ T5834] RSP: 002b:00007f7a22cb9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 155.209413][ T5834] RAX: ffffffffffffffda RBX: 00007f7a22cb9ef0 RCX: 00007f7a21d900ca [ 155.209421][ T5834] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f7a22cb9eb0 [ 155.209429][ T5834] RBP: 0000200000000000 R08: 00007f7a22cb9ef0 R09: 0000000000208c1b [ 155.209437][ T5834] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 155.209444][ T5834] R13: 00007f7a22cb9eb0 R14: 0000000000012754 R15: 00002000000128c0 [ 155.209464][ T5834] [ 155.209469][ T5834] gfs2: fsid=..s: Error checking journal for spectator mount. [ 155.774523][ T5838] loop0: detected capacity change from 0 to 32768 [ 155.789352][ T5838] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 155.796106][ T5838] gfs2: fsid=.: Now mounting FS (format 1801)... [ 155.812078][ T5838] syz.0.24: attempt to access beyond end of device [ 155.812078][ T5838] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 155.830935][ T5838] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 155.836894][ T5838] gfs2: fsid=..s: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 155.851250][ T5838] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5838 [syz.0.24] init_journal+0x17f8/0x2260 [ 155.855184][ T5838] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 155.858648][ T5838] gfs2: fsid=..s: about to withdraw this file system [ 155.867275][ T5838] gfs2: fsid=..s: Journal recovery skipped for jid 0 until next mount. [ 155.872191][ T5838] gfs2: fsid=..s: Glock dequeues delayed: 0 [ 155.876358][ T5838] gfs2: fsid=..s: File system withdrawn [ 155.878828][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: syz.0.24 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 155.878846][ T5838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.878852][ T5838] Call Trace: [ 155.878858][ T5838] [ 155.878864][ T5838] dump_stack_lvl+0x189/0x250 [ 155.878885][ T5838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.878898][ T5838] ? __pfx__printk+0x10/0x10 [ 155.878914][ T5838] ? kobject_uevent_env+0x36b/0x8c0 [ 155.878950][ T5838] gfs2_withdraw+0xb30/0x1430 [ 155.878973][ T5838] ? __pfx_gfs2_withdraw+0x10/0x10 [ 155.878987][ T5838] ? __pfx_wake_up_bit+0x10/0x10 [ 155.879012][ T5838] ? gfs2_consist_inode_i+0xf5/0x110 [ 155.879026][ T5838] gfs2_jdesc_check+0x17d/0x2f0 [ 155.879044][ T5838] check_journal_clean+0x158/0x310 [ 155.879058][ T5838] ? __pfx_check_journal_clean+0x10/0x10 [ 155.879073][ T5838] ? init_journal+0x17f8/0x2260 [ 155.879089][ T5838] ? do_raw_spin_unlock+0x4d/0x240 [ 155.879104][ T5838] ? _raw_spin_unlock+0x28/0x50 [ 155.879117][ T5838] ? gfs2_jdesc_find+0xab/0xc0 [ 155.879132][ T5838] init_journal+0x17f8/0x2260 [ 155.879152][ T5838] ? init_inodes+0xdb/0x320 [ 155.879167][ T5838] ? __pfx_init_journal+0x10/0x10 [ 155.879180][ T5838] ? vsnprintf+0xe11/0xf00 [ 155.879198][ T5838] ? snprintf+0xda/0x120 [ 155.879210][ T5838] ? init_inodes+0xdb/0x320 [ 155.879221][ T5838] ? __pfx_snprintf+0x10/0x10 [ 155.879232][ T5838] ? gfs2_glock_nq_num+0x13d/0x170 [ 155.879248][ T5838] init_inodes+0xdb/0x320 [ 155.879262][ T5838] gfs2_fill_super+0x1923/0x20d0 [ 155.879284][ T5838] ? __pfx_gfs2_fill_super+0x10/0x10 [ 155.879299][ T5838] ? init_locking+0xb8/0x210 [ 155.879310][ T5838] ? sb_set_blocksize+0x104/0x180 [ 155.879324][ T5838] ? setup_bdev_super+0x4c1/0x5b0 [ 155.879341][ T5838] get_tree_bdev_flags+0x40b/0x4d0 [ 155.879354][ T5838] ? __pfx_gfs2_fill_super+0x10/0x10 [ 155.879365][ T5838] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 155.879385][ T5838] gfs2_get_tree+0x51/0x1e0 [ 155.879398][ T5838] vfs_get_tree+0x8f/0x2b0 [ 155.879412][ T5838] do_new_mount+0x2a2/0x9e0 [ 155.879429][ T5838] ? ns_capable+0x8a/0xf0 [ 155.879440][ T5838] ? __pfx_do_new_mount+0x10/0x10 [ 155.879452][ T5838] ? path_mount+0x61c/0xfe0 [ 155.879464][ T5838] ? user_path_at+0x44/0x60 [ 155.879482][ T5838] __se_sys_mount+0x317/0x410 [ 155.879500][ T5838] ? __pfx___se_sys_mount+0x10/0x10 [ 155.879517][ T5838] ? do_syscall_64+0xbe/0x3b0 [ 155.879530][ T5838] ? __x64_sys_mount+0x20/0xc0 [ 155.879546][ T5838] do_syscall_64+0xfa/0x3b0 [ 155.879560][ T5838] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.879573][ T5838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.879584][ T5838] ? clear_bhb_loop+0x60/0xb0 [ 155.879597][ T5838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.879608][ T5838] RIP: 0033:0x7f7a21d900ca [ 155.879619][ T5838] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.879628][ T5838] RSP: 002b:00007f7a22cb9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 155.879641][ T5838] RAX: ffffffffffffffda RBX: 00007f7a22cb9ef0 RCX: 00007f7a21d900ca [ 155.879649][ T5838] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f7a22cb9eb0 [ 155.879655][ T5838] RBP: 0000200000000000 R08: 00007f7a22cb9ef0 R09: 0000000000208c1b [ 155.879662][ T5838] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 155.879668][ T5838] R13: 00007f7a22cb9eb0 R14: 0000000000012754 R15: 00002000000128c0 [ 155.879686][ T5838] [ 155.879691][ T5838] gfs2: fsid=..s: Error checking journal for spectator mount. [ 156.443997][ T5842] loop0: detected capacity change from 0 to 32768 [ 156.455722][ T5842] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 156.458847][ T5842] gfs2: fsid=.: Now mounting FS (format 1801)... [ 156.476101][ T5842] syz.0.25: attempt to access beyond end of device [ 156.476101][ T5842] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 156.490376][ T5842] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 156.497548][ T5842] gfs2: fsid=..s: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 156.511480][ T5842] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5842 [syz.0.25] init_journal+0x17f8/0x2260 [ 156.515828][ T5842] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 156.530762][ T5842] gfs2: fsid=..s: about to withdraw this file system [ 156.534280][ T5842] gfs2: fsid=..s: Journal recovery skipped for jid 0 until next mount. [ 156.537700][ T5842] gfs2: fsid=..s: Glock dequeues delayed: 0 [ 156.546953][ T5842] gfs2: fsid=..s: File system withdrawn [ 156.549316][ T5842] CPU: 0 UID: 0 PID: 5842 Comm: syz.0.25 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 156.549335][ T5842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 156.549341][ T5842] Call Trace: [ 156.549347][ T5842] [ 156.549353][ T5842] dump_stack_lvl+0x189/0x250 [ 156.549374][ T5842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.549387][ T5842] ? __pfx__printk+0x10/0x10 [ 156.549402][ T5842] ? kobject_uevent_env+0x36b/0x8c0 [ 156.549426][ T5842] gfs2_withdraw+0xb30/0x1430 [ 156.549450][ T5842] ? __pfx_gfs2_withdraw+0x10/0x10 [ 156.549463][ T5842] ? __pfx_wake_up_bit+0x10/0x10 [ 156.549477][ T5842] ? gfs2_consist_inode_i+0xf5/0x110 [ 156.549491][ T5842] gfs2_jdesc_check+0x17d/0x2f0 [ 156.549510][ T5842] check_journal_clean+0x158/0x310 [ 156.549524][ T5842] ? __pfx_check_journal_clean+0x10/0x10 [ 156.549547][ T5842] ? init_journal+0x17f8/0x2260 [ 156.549561][ T5842] ? do_raw_spin_unlock+0x4d/0x240 [ 156.549575][ T5842] ? _raw_spin_unlock+0x28/0x50 [ 156.549587][ T5842] ? gfs2_jdesc_find+0xab/0xc0 [ 156.549604][ T5842] init_journal+0x17f8/0x2260 [ 156.549623][ T5842] ? init_inodes+0xdb/0x320 [ 156.549638][ T5842] ? __pfx_init_journal+0x10/0x10 [ 156.549650][ T5842] ? vsnprintf+0xe11/0xf00 [ 156.549669][ T5842] ? snprintf+0xda/0x120 [ 156.549681][ T5842] ? init_inodes+0xdb/0x320 [ 156.549692][ T5842] ? __pfx_snprintf+0x10/0x10 [ 156.549710][ T5842] ? gfs2_glock_nq_num+0x13d/0x170 [ 156.549727][ T5842] init_inodes+0xdb/0x320 [ 156.549741][ T5842] gfs2_fill_super+0x1923/0x20d0 [ 156.549764][ T5842] ? __pfx_gfs2_fill_super+0x10/0x10 [ 156.549779][ T5842] ? init_locking+0xb8/0x210 [ 156.549789][ T5842] ? sb_set_blocksize+0x104/0x180 [ 156.549802][ T5842] ? setup_bdev_super+0x4c1/0x5b0 [ 156.549813][ T5842] get_tree_bdev_flags+0x40b/0x4d0 [ 156.549821][ T5842] ? __pfx_gfs2_fill_super+0x10/0x10 [ 156.549829][ T5842] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 156.549841][ T5842] gfs2_get_tree+0x51/0x1e0 [ 156.549850][ T5842] vfs_get_tree+0x8f/0x2b0 [ 156.549860][ T5842] do_new_mount+0x2a2/0x9e0 [ 156.549871][ T5842] ? ns_capable+0x8a/0xf0 [ 156.549878][ T5842] ? __pfx_do_new_mount+0x10/0x10 [ 156.549887][ T5842] ? path_mount+0x61c/0xfe0 [ 156.549899][ T5842] ? user_path_at+0x44/0x60 [ 156.549915][ T5842] __se_sys_mount+0x317/0x410 [ 156.549933][ T5842] ? __pfx___se_sys_mount+0x10/0x10 [ 156.549951][ T5842] ? do_syscall_64+0xbe/0x3b0 [ 156.549963][ T5842] ? __x64_sys_mount+0x20/0xc0 [ 156.549986][ T5842] do_syscall_64+0xfa/0x3b0 [ 156.549999][ T5842] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.550012][ T5842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.550021][ T5842] ? clear_bhb_loop+0x60/0xb0 [ 156.550034][ T5842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.550045][ T5842] RIP: 0033:0x7f7a21d900ca [ 156.550056][ T5842] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.550065][ T5842] RSP: 002b:00007f7a22cb9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 156.550078][ T5842] RAX: ffffffffffffffda RBX: 00007f7a22cb9ef0 RCX: 00007f7a21d900ca [ 156.550086][ T5842] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f7a22cb9eb0 [ 156.550093][ T5842] RBP: 0000200000000000 R08: 00007f7a22cb9ef0 R09: 0000000000208c1b [ 156.550098][ T5842] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 156.550102][ T5842] R13: 00007f7a22cb9eb0 R14: 0000000000012754 R15: 00002000000128c0 [ 156.550113][ T5842] [ 156.550117][ T5842] gfs2: fsid=..s: Error checking journal for spectator mount. [ 157.113334][ T5846] loop0: detected capacity change from 0 to 32768 [ 157.125230][ T5846] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 157.137207][ T5846] gfs2: fsid=.: Now mounting FS (format 1801)... [ 157.152319][ T5846] syz.0.26: attempt to access beyond end of device [ 157.152319][ T5846] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 157.170680][ T5846] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 157.176521][ T5846] gfs2: fsid=..s: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 157.179950][ T5846] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5846 [syz.0.26] init_journal+0x17f8/0x2260 [ 157.197154][ T5846] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 157.201093][ T5846] gfs2: fsid=..s: about to withdraw this file system [ 157.203802][ T5846] gfs2: fsid=..s: Journal recovery skipped for jid 0 until next mount. [ 157.207039][ T5846] gfs2: fsid=..s: Glock dequeues delayed: 0 [ 157.221612][ T5846] gfs2: fsid=..s: File system withdrawn [ 157.223933][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz.0.26 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 157.223951][ T5846] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.223958][ T5846] Call Trace: [ 157.223963][ T5846] [ 157.223968][ T5846] dump_stack_lvl+0x189/0x250 [ 157.223990][ T5846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.224003][ T5846] ? __pfx__printk+0x10/0x10 [ 157.224018][ T5846] ? kobject_uevent_env+0x36b/0x8c0 [ 157.224050][ T5846] gfs2_withdraw+0xb30/0x1430 [ 157.224072][ T5846] ? __pfx_gfs2_withdraw+0x10/0x10 [ 157.224086][ T5846] ? __pfx_wake_up_bit+0x10/0x10 [ 157.224104][ T5846] ? gfs2_consist_inode_i+0xf5/0x110 [ 157.224119][ T5846] gfs2_jdesc_check+0x17d/0x2f0 [ 157.224137][ T5846] check_journal_clean+0x158/0x310 [ 157.224151][ T5846] ? __pfx_check_journal_clean+0x10/0x10 [ 157.224165][ T5846] ? init_journal+0x17f8/0x2260 [ 157.224183][ T5846] ? do_raw_spin_unlock+0x4d/0x240 [ 157.224197][ T5846] ? _raw_spin_unlock+0x28/0x50 [ 157.224208][ T5846] ? gfs2_jdesc_find+0xab/0xc0 [ 157.224223][ T5846] init_journal+0x17f8/0x2260 [ 157.224243][ T5846] ? init_inodes+0xdb/0x320 [ 157.224258][ T5846] ? __pfx_init_journal+0x10/0x10 [ 157.224269][ T5846] ? vsnprintf+0xe11/0xf00 [ 157.224281][ T5846] ? snprintf+0xda/0x120 [ 157.224289][ T5846] ? init_inodes+0xdb/0x320 [ 157.224297][ T5846] ? __pfx_snprintf+0x10/0x10 [ 157.224307][ T5846] ? gfs2_glock_nq_num+0x13d/0x170 [ 157.224322][ T5846] init_inodes+0xdb/0x320 [ 157.224336][ T5846] gfs2_fill_super+0x1923/0x20d0 [ 157.224360][ T5846] ? __pfx_gfs2_fill_super+0x10/0x10 [ 157.224375][ T5846] ? init_locking+0xb8/0x210 [ 157.224385][ T5846] ? sb_set_blocksize+0x104/0x180 [ 157.224396][ T5846] ? setup_bdev_super+0x4c1/0x5b0 [ 157.224410][ T5846] get_tree_bdev_flags+0x40b/0x4d0 [ 157.224422][ T5846] ? __pfx_gfs2_fill_super+0x10/0x10 [ 157.224434][ T5846] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 157.224455][ T5846] gfs2_get_tree+0x51/0x1e0 [ 157.224470][ T5846] vfs_get_tree+0x8f/0x2b0 [ 157.224484][ T5846] do_new_mount+0x2a2/0x9e0 [ 157.224500][ T5846] ? ns_capable+0x8a/0xf0 [ 157.224510][ T5846] ? __pfx_do_new_mount+0x10/0x10 [ 157.224523][ T5846] ? path_mount+0x61c/0xfe0 [ 157.224536][ T5846] ? user_path_at+0x44/0x60 [ 157.224553][ T5846] __se_sys_mount+0x317/0x410 [ 157.224569][ T5846] ? __pfx___se_sys_mount+0x10/0x10 [ 157.224580][ T5846] ? do_syscall_64+0xbe/0x3b0 [ 157.224589][ T5846] ? __x64_sys_mount+0x20/0xc0 [ 157.224599][ T5846] do_syscall_64+0xfa/0x3b0 [ 157.224607][ T5846] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.224615][ T5846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.224622][ T5846] ? clear_bhb_loop+0x60/0xb0 [ 157.224631][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.224638][ T5846] RIP: 0033:0x7f7a21d900ca [ 157.224651][ T5846] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.224659][ T5846] RSP: 002b:00007f7a22cb9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 157.224672][ T5846] RAX: ffffffffffffffda RBX: 00007f7a22cb9ef0 RCX: 00007f7a21d900ca [ 157.224678][ T5846] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f7a22cb9eb0 [ 157.224685][ T5846] RBP: 0000200000000000 R08: 00007f7a22cb9ef0 R09: 0000000000208c1b [ 157.224712][ T5846] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 157.224717][ T5846] R13: 00007f7a22cb9eb0 R14: 0000000000012754 R15: 00002000000128c0 [ 157.224733][ T5846] [ 157.224737][ T5846] gfs2: fsid=..s: Error checking journal for spectator mount. [ 157.754436][ T5850] loop0: detected capacity change from 0 to 32768 [ 157.789550][ T5850] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 157.798126][ T5850] gfs2: fsid=.: Now mounting FS (format 1801)... [ 157.813812][ T5850] syz.0.27: attempt to access beyond end of device [ 157.813812][ T5850] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 157.831445][ T5850] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 157.837929][ T5850] gfs2: fsid=..s: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 157.861964][ T5850] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5850 [syz.0.27] init_journal+0x17f8/0x2260 [ 157.866026][ T5850] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 157.869525][ T5850] gfs2: fsid=..s: about to withdraw this file system [ 157.882143][ T5850] gfs2: fsid=..s: Journal recovery skipped for jid 0 until next mount. [ 157.885885][ T5850] gfs2: fsid=..s: Glock dequeues delayed: 0 [ 157.901141][ T5850] gfs2: fsid=..s: File system withdrawn [ 157.903677][ T5850] CPU: 0 UID: 0 PID: 5850 Comm: syz.0.27 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 157.903694][ T5850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 157.903701][ T5850] Call Trace: [ 157.903713][ T5850] [ 157.903719][ T5850] dump_stack_lvl+0x189/0x250 [ 157.903740][ T5850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.903753][ T5850] ? __pfx__printk+0x10/0x10 [ 157.903769][ T5850] ? kobject_uevent_env+0x36b/0x8c0 [ 157.903802][ T5850] gfs2_withdraw+0xb30/0x1430 [ 157.903824][ T5850] ? __pfx_gfs2_withdraw+0x10/0x10 [ 157.903837][ T5850] ? __pfx_wake_up_bit+0x10/0x10 [ 157.903855][ T5850] ? gfs2_consist_inode_i+0xf5/0x110 [ 157.903871][ T5850] gfs2_jdesc_check+0x17d/0x2f0 [ 157.903889][ T5850] check_journal_clean+0x158/0x310 [ 157.903903][ T5850] ? __pfx_check_journal_clean+0x10/0x10 [ 157.903916][ T5850] ? init_journal+0x17f8/0x2260 [ 157.903928][ T5850] ? do_raw_spin_unlock+0x4d/0x240 [ 157.903939][ T5850] ? _raw_spin_unlock+0x28/0x50 [ 157.903947][ T5850] ? gfs2_jdesc_find+0xab/0xc0 [ 157.903958][ T5850] init_journal+0x17f8/0x2260 [ 157.903970][ T5850] ? init_inodes+0xdb/0x320 [ 157.903979][ T5850] ? __pfx_init_journal+0x10/0x10 [ 157.903987][ T5850] ? vsnprintf+0xe11/0xf00 [ 157.903998][ T5850] ? snprintf+0xda/0x120 [ 157.904006][ T5850] ? init_inodes+0xdb/0x320 [ 157.904013][ T5850] ? __pfx_snprintf+0x10/0x10 [ 157.904021][ T5850] ? gfs2_glock_nq_num+0x13d/0x170 [ 157.904032][ T5850] init_inodes+0xdb/0x320 [ 157.904041][ T5850] gfs2_fill_super+0x1923/0x20d0 [ 157.904058][ T5850] ? __pfx_gfs2_fill_super+0x10/0x10 [ 157.904072][ T5850] ? init_locking+0xb8/0x210 [ 157.904081][ T5850] ? sb_set_blocksize+0x104/0x180 [ 157.904095][ T5850] ? setup_bdev_super+0x4c1/0x5b0 [ 157.904104][ T5850] get_tree_bdev_flags+0x40b/0x4d0 [ 157.904112][ T5850] ? __pfx_gfs2_fill_super+0x10/0x10 [ 157.904120][ T5850] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 157.904132][ T5850] gfs2_get_tree+0x51/0x1e0 [ 157.904141][ T5850] vfs_get_tree+0x8f/0x2b0 [ 157.904153][ T5850] do_new_mount+0x2a2/0x9e0 [ 157.904169][ T5850] ? ns_capable+0x8a/0xf0 [ 157.904180][ T5850] ? __pfx_do_new_mount+0x10/0x10 [ 157.904192][ T5850] ? path_mount+0x61c/0xfe0 [ 157.904199][ T5850] ? user_path_at+0x44/0x60 [ 157.904211][ T5850] __se_sys_mount+0x317/0x410 [ 157.904228][ T5850] ? __pfx___se_sys_mount+0x10/0x10 [ 157.904245][ T5850] ? do_syscall_64+0xbe/0x3b0 [ 157.904259][ T5850] ? __x64_sys_mount+0x20/0xc0 [ 157.904271][ T5850] do_syscall_64+0xfa/0x3b0 [ 157.904280][ T5850] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.904288][ T5850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.904295][ T5850] ? clear_bhb_loop+0x60/0xb0 [ 157.904303][ T5850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.904310][ T5850] RIP: 0033:0x7f7a21d900ca [ 157.904320][ T5850] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.904326][ T5850] RSP: 002b:00007f7a22cb9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 157.904335][ T5850] RAX: ffffffffffffffda RBX: 00007f7a22cb9ef0 RCX: 00007f7a21d900ca [ 157.904340][ T5850] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f7a22cb9eb0 [ 157.904344][ T5850] RBP: 0000200000000000 R08: 00007f7a22cb9ef0 R09: 0000000000208c1b [ 157.904349][ T5850] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 157.904353][ T5850] R13: 00007f7a22cb9eb0 R14: 0000000000012754 R15: 00002000000128c0 [ 157.904368][ T5850] [ 157.904373][ T5850] gfs2: fsid=..s: Error checking journal for spectator mount. [ 158.489254][ T5854] loop0: detected capacity change from 0 to 32768 [ 158.503256][ T5854] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 158.507580][ T5854] gfs2: fsid=.: Now mounting FS (format 1801)... [ 158.526298][ T5854] syz.0.28: attempt to access beyond end of device [ 158.526298][ T5854] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 158.542652][ T5854] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 158.548471][ T5854] gfs2: fsid=..s: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 158.565918][ T5854] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5854 [syz.0.28] init_journal+0x17f8/0x2260 [ 158.569794][ T5854] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 158.580272][ T5854] gfs2: fsid=..s: about to withdraw this file system [ 158.584735][ T5854] gfs2: fsid=..s: Journal recovery skipped for jid 0 until next mount. [ 158.588081][ T5854] gfs2: fsid=..s: Glock dequeues delayed: 0 [ 158.592877][ T5854] gfs2: fsid=..s: File system withdrawn [ 158.596735][ T5854] CPU: 0 UID: 0 PID: 5854 Comm: syz.0.28 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 158.596754][ T5854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 158.596761][ T5854] Call Trace: [ 158.596768][ T5854] [ 158.596774][ T5854] dump_stack_lvl+0x189/0x250 [ 158.596793][ T5854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.596806][ T5854] ? __pfx__printk+0x10/0x10 [ 158.596822][ T5854] ? kobject_uevent_env+0x36b/0x8c0 [ 158.596844][ T5854] gfs2_withdraw+0xb30/0x1430 [ 158.596868][ T5854] ? __pfx_gfs2_withdraw+0x10/0x10 [ 158.596881][ T5854] ? __pfx_wake_up_bit+0x10/0x10 [ 158.596900][ T5854] ? gfs2_consist_inode_i+0xf5/0x110 [ 158.596915][ T5854] gfs2_jdesc_check+0x17d/0x2f0 [ 158.596933][ T5854] check_journal_clean+0x158/0x310 [ 158.596947][ T5854] ? __pfx_check_journal_clean+0x10/0x10 [ 158.596960][ T5854] ? init_journal+0x17f8/0x2260 [ 158.596982][ T5854] ? do_raw_spin_unlock+0x4d/0x240 [ 158.596997][ T5854] ? _raw_spin_unlock+0x28/0x50 [ 158.597010][ T5854] ? gfs2_jdesc_find+0xab/0xc0 [ 158.597038][ T5854] init_journal+0x17f8/0x2260 [ 158.597058][ T5854] ? init_inodes+0xdb/0x320 [ 158.597073][ T5854] ? __pfx_init_journal+0x10/0x10 [ 158.597084][ T5854] ? vsnprintf+0xe11/0xf00 [ 158.597102][ T5854] ? snprintf+0xda/0x120 [ 158.597114][ T5854] ? init_inodes+0xdb/0x320 [ 158.597125][ T5854] ? __pfx_snprintf+0x10/0x10 [ 158.597137][ T5854] ? gfs2_glock_nq_num+0x13d/0x170 [ 158.597153][ T5854] init_inodes+0xdb/0x320 [ 158.597167][ T5854] gfs2_fill_super+0x1923/0x20d0 [ 158.597190][ T5854] ? __pfx_gfs2_fill_super+0x10/0x10 [ 158.597204][ T5854] ? init_locking+0xb8/0x210 [ 158.597214][ T5854] ? sb_set_blocksize+0x104/0x180 [ 158.597230][ T5854] ? setup_bdev_super+0x4c1/0x5b0 [ 158.597246][ T5854] get_tree_bdev_flags+0x40b/0x4d0 [ 158.597259][ T5854] ? __pfx_gfs2_fill_super+0x10/0x10 [ 158.597273][ T5854] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 158.597293][ T5854] gfs2_get_tree+0x51/0x1e0 [ 158.597308][ T5854] vfs_get_tree+0x8f/0x2b0 [ 158.597324][ T5854] do_new_mount+0x2a2/0x9e0 [ 158.597343][ T5854] ? ns_capable+0x8a/0xf0 [ 158.597355][ T5854] ? __pfx_do_new_mount+0x10/0x10 [ 158.597368][ T5854] ? path_mount+0x61c/0xfe0 [ 158.597382][ T5854] ? user_path_at+0x44/0x60 [ 158.597400][ T5854] __se_sys_mount+0x317/0x410 [ 158.597420][ T5854] ? __pfx___se_sys_mount+0x10/0x10 [ 158.597438][ T5854] ? do_syscall_64+0xbe/0x3b0 [ 158.597453][ T5854] ? __x64_sys_mount+0x20/0xc0 [ 158.597469][ T5854] do_syscall_64+0xfa/0x3b0 [ 158.597483][ T5854] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.597498][ T5854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.597510][ T5854] ? clear_bhb_loop+0x60/0xb0 [ 158.597524][ T5854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.597534][ T5854] RIP: 0033:0x7f7a21d900ca [ 158.597546][ T5854] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.597555][ T5854] RSP: 002b:00007f7a22cb9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 158.597568][ T5854] RAX: ffffffffffffffda RBX: 00007f7a22cb9ef0 RCX: 00007f7a21d900ca [ 158.597575][ T5854] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f7a22cb9eb0 [ 158.597582][ T5854] RBP: 0000200000000000 R08: 00007f7a22cb9ef0 R09: 0000000000208c1b [ 158.597589][ T5854] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 158.597596][ T5854] R13: 00007f7a22cb9eb0 R14: 0000000000012754 R15: 00002000000128c0 [ 158.597612][ T5854] [ 158.597618][ T5854] gfs2: fsid=..s: Error checking journal for spectator mount. [ 159.169520][ T5858] loop0: detected capacity change from 0 to 32768 [ 159.188038][ T5858] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 159.196998][ T5858] gfs2: fsid=.: Now mounting FS (format 1801)... [ 159.214918][ T5858] syz.0.29: attempt to access beyond end of device [ 159.214918][ T5858] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 159.232125][ T5858] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 159.238168][ T5858] gfs2: fsid=..s: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 159.261166][ T5858] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5858 [syz.0.29] init_journal+0x17f8/0x2260 [ 159.265338][ T5858] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 159.268925][ T5858] gfs2: fsid=..s: about to withdraw this file system [ 159.274760][ T5858] gfs2: fsid=..s: Journal recovery skipped for jid 0 until next mount. [ 159.278242][ T5858] gfs2: fsid=..s: Glock dequeues delayed: 0 [ 159.284343][ T5858] gfs2: fsid=..s: File system withdrawn [ 159.287013][ T5858] CPU: 0 UID: 0 PID: 5858 Comm: syz.0.29 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 159.287031][ T5858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.287038][ T5858] Call Trace: [ 159.287045][ T5858] [ 159.287050][ T5858] dump_stack_lvl+0x189/0x250 [ 159.287071][ T5858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.287084][ T5858] ? __pfx__printk+0x10/0x10 [ 159.287099][ T5858] ? kobject_uevent_env+0x36b/0x8c0 [ 159.287135][ T5858] gfs2_withdraw+0xb30/0x1430 [ 159.287158][ T5858] ? __pfx_gfs2_withdraw+0x10/0x10 [ 159.287169][ T5858] ? __pfx_wake_up_bit+0x10/0x10 [ 159.287187][ T5858] ? gfs2_consist_inode_i+0xf5/0x110 [ 159.287201][ T5858] gfs2_jdesc_check+0x17d/0x2f0 [ 159.287219][ T5858] check_journal_clean+0x158/0x310 [ 159.287233][ T5858] ? __pfx_check_journal_clean+0x10/0x10 [ 159.287247][ T5858] ? init_journal+0x17f8/0x2260 [ 159.287265][ T5858] ? do_raw_spin_unlock+0x4d/0x240 [ 159.287279][ T5858] ? _raw_spin_unlock+0x28/0x50 [ 159.287291][ T5858] ? gfs2_jdesc_find+0xab/0xc0 [ 159.287306][ T5858] init_journal+0x17f8/0x2260 [ 159.287325][ T5858] ? init_inodes+0xdb/0x320 [ 159.287340][ T5858] ? __pfx_init_journal+0x10/0x10 [ 159.287352][ T5858] ? vsnprintf+0xe11/0xf00 [ 159.287369][ T5858] ? snprintf+0xda/0x120 [ 159.287381][ T5858] ? init_inodes+0xdb/0x320 [ 159.287393][ T5858] ? __pfx_snprintf+0x10/0x10 [ 159.287406][ T5858] ? gfs2_glock_nq_num+0x13d/0x170 [ 159.287421][ T5858] init_inodes+0xdb/0x320 [ 159.287433][ T5858] gfs2_fill_super+0x1923/0x20d0 [ 159.287456][ T5858] ? __pfx_gfs2_fill_super+0x10/0x10 [ 159.287470][ T5858] ? init_locking+0xb8/0x210 [ 159.287481][ T5858] ? sb_set_blocksize+0x104/0x180 [ 159.287495][ T5858] ? setup_bdev_super+0x4c1/0x5b0 [ 159.287510][ T5858] get_tree_bdev_flags+0x40b/0x4d0 [ 159.287523][ T5858] ? __pfx_gfs2_fill_super+0x10/0x10 [ 159.287534][ T5858] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 159.287553][ T5858] gfs2_get_tree+0x51/0x1e0 [ 159.287566][ T5858] vfs_get_tree+0x8f/0x2b0 [ 159.287581][ T5858] do_new_mount+0x2a2/0x9e0 [ 159.287598][ T5858] ? ns_capable+0x8a/0xf0 [ 159.287608][ T5858] ? __pfx_do_new_mount+0x10/0x10 [ 159.287622][ T5858] ? path_mount+0x61c/0xfe0 [ 159.287633][ T5858] ? user_path_at+0x44/0x60 [ 159.287646][ T5858] __se_sys_mount+0x317/0x410 [ 159.287664][ T5858] ? __pfx___se_sys_mount+0x10/0x10 [ 159.287681][ T5858] ? do_syscall_64+0xbe/0x3b0 [ 159.287694][ T5858] ? __x64_sys_mount+0x20/0xc0 [ 159.287714][ T5858] do_syscall_64+0xfa/0x3b0 [ 159.287727][ T5858] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.287740][ T5858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.287750][ T5858] ? clear_bhb_loop+0x60/0xb0 [ 159.287764][ T5858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.287774][ T5858] RIP: 0033:0x7f7a21d900ca [ 159.287785][ T5858] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.287794][ T5858] RSP: 002b:00007f7a22cb9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 159.287807][ T5858] RAX: ffffffffffffffda RBX: 00007f7a22cb9ef0 RCX: 00007f7a21d900ca [ 159.287815][ T5858] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f7a22cb9eb0 [ 159.287822][ T5858] RBP: 0000200000000000 R08: 00007f7a22cb9ef0 R09: 0000000000208c1b [ 159.287830][ T5858] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 159.287837][ T5858] R13: 00007f7a22cb9eb0 R14: 0000000000012754 R15: 00002000000128c0 [ 159.287854][ T5858] [ 159.287859][ T5858] gfs2: fsid=..s: Error checking journal for spectator mount. [ 159.850173][ T5862] loop0: detected capacity change from 0 to 32768 [ 159.865827][ T5862] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 159.873259][ T5862] gfs2: fsid=.: Now mounting FS (format 1801)... [ 159.887838][ T5862] syz.0.30: attempt to access beyond end of device [ 159.887838][ T5862] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 159.911072][ T5862] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 159.916882][ T5862] gfs2: fsid=..s: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 159.934357][ T5862] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5862 [syz.0.30] init_journal+0x17f8/0x2260 [ 159.938427][ T5862] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 159.947056][ T5862] gfs2: fsid=..s: about to withdraw this file system [ 159.950073][ T5862] gfs2: fsid=..s: Journal recovery skipped for jid 0 until next mount. [ 159.955391][ T5862] gfs2: fsid=..s: Glock dequeues delayed: 0 [ 159.959892][ T5862] gfs2: fsid=..s: File system withdrawn [ 159.963300][ T5862] CPU: 0 UID: 0 PID: 5862 Comm: syz.0.30 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 159.963318][ T5862] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.963325][ T5862] Call Trace: [ 159.963329][ T5862] [ 159.963334][ T5862] dump_stack_lvl+0x189/0x250 [ 159.963356][ T5862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.963369][ T5862] ? __pfx__printk+0x10/0x10 [ 159.963384][ T5862] ? kobject_uevent_env+0x36b/0x8c0 [ 159.963410][ T5862] gfs2_withdraw+0xb30/0x1430 [ 159.963434][ T5862] ? __pfx_gfs2_withdraw+0x10/0x10 [ 159.963447][ T5862] ? __pfx_wake_up_bit+0x10/0x10 [ 159.963467][ T5862] ? gfs2_consist_inode_i+0xf5/0x110 [ 159.963481][ T5862] gfs2_jdesc_check+0x17d/0x2f0 [ 159.963500][ T5862] check_journal_clean+0x158/0x310 [ 159.963514][ T5862] ? __pfx_check_journal_clean+0x10/0x10 [ 159.963528][ T5862] ? init_journal+0x17f8/0x2260 [ 159.963546][ T5862] ? do_raw_spin_unlock+0x4d/0x240 [ 159.963560][ T5862] ? _raw_spin_unlock+0x28/0x50 [ 159.963573][ T5862] ? gfs2_jdesc_find+0xab/0xc0 [ 159.963588][ T5862] init_journal+0x17f8/0x2260 [ 159.963608][ T5862] ? init_inodes+0xdb/0x320 [ 159.963623][ T5862] ? __pfx_init_journal+0x10/0x10 [ 159.963635][ T5862] ? vsnprintf+0xe11/0xf00 [ 159.963653][ T5862] ? snprintf+0xda/0x120 [ 159.963665][ T5862] ? init_inodes+0xdb/0x320 [ 159.963676][ T5862] ? __pfx_snprintf+0x10/0x10 [ 159.963688][ T5862] ? gfs2_glock_nq_num+0x13d/0x170 [ 159.963704][ T5862] init_inodes+0xdb/0x320 [ 159.963719][ T5862] gfs2_fill_super+0x1923/0x20d0 [ 159.963753][ T5862] ? __pfx_gfs2_fill_super+0x10/0x10 [ 159.963767][ T5862] ? init_locking+0xb8/0x210 [ 159.963777][ T5862] ? sb_set_blocksize+0x104/0x180 [ 159.963791][ T5862] ? setup_bdev_super+0x4c1/0x5b0 [ 159.963805][ T5862] get_tree_bdev_flags+0x40b/0x4d0 [ 159.963818][ T5862] ? __pfx_gfs2_fill_super+0x10/0x10 [ 159.963830][ T5862] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 159.963849][ T5862] gfs2_get_tree+0x51/0x1e0 [ 159.963863][ T5862] vfs_get_tree+0x8f/0x2b0 [ 159.963878][ T5862] do_new_mount+0x2a2/0x9e0 [ 159.963895][ T5862] ? ns_capable+0x8a/0xf0 [ 159.963906][ T5862] ? __pfx_do_new_mount+0x10/0x10 [ 159.963920][ T5862] ? path_mount+0x61c/0xfe0 [ 159.963932][ T5862] ? user_path_at+0x44/0x60 [ 159.963948][ T5862] __se_sys_mount+0x317/0x410 [ 159.963967][ T5862] ? __pfx___se_sys_mount+0x10/0x10 [ 159.963984][ T5862] ? do_syscall_64+0xbe/0x3b0 [ 159.963999][ T5862] ? __x64_sys_mount+0x20/0xc0 [ 159.964014][ T5862] do_syscall_64+0xfa/0x3b0 [ 159.964028][ T5862] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.964041][ T5862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.964052][ T5862] ? clear_bhb_loop+0x60/0xb0 [ 159.964066][ T5862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.964076][ T5862] RIP: 0033:0x7f7a21d900ca [ 159.964089][ T5862] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.964098][ T5862] RSP: 002b:00007f7a22cb9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 159.964111][ T5862] RAX: ffffffffffffffda RBX: 00007f7a22cb9ef0 RCX: 00007f7a21d900ca [ 159.964119][ T5862] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f7a22cb9eb0 [ 159.964126][ T5862] RBP: 0000200000000000 R08: 00007f7a22cb9ef0 R09: 0000000000208c1b [ 159.964133][ T5862] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 159.964140][ T5862] R13: 00007f7a22cb9eb0 R14: 0000000000012754 R15: 00002000000128c0 [ 159.964157][ T5862] [ 159.964163][ T5862] gfs2: fsid=..s: Error checking journal for spectator mount. 2025/08/15 06:39:49 executed programs: 17 [ 160.532764][ T5866] loop0: detected capacity change from 0 to 32768 [ 160.562523][ T5866] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 160.565865][ T5866] gfs2: fsid=.: Now mounting FS (format 1801)... [ 160.585882][ T5866] syz.0.31: attempt to access beyond end of device [ 160.585882][ T5866] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 160.604157][ T5866] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 160.609938][ T5866] gfs2: fsid=..s: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 160.628541][ T5866] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5866 [syz.0.31] init_journal+0x17f8/0x2260 [ 160.634163][ T5866] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 160.637596][ T5866] gfs2: fsid=..s: about to withdraw this file system [ 160.641059][ T5866] gfs2: fsid=..s: Journal recovery skipped for jid 0 until next mount. [ 160.644398][ T5866] gfs2: fsid=..s: Glock dequeues delayed: 0 [ 160.648615][ T5866] gfs2: fsid=..s: File system withdrawn [ 160.652757][ T5866] CPU: 0 UID: 0 PID: 5866 Comm: syz.0.31 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 160.652774][ T5866] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 160.652782][ T5866] Call Trace: [ 160.652787][ T5866] [ 160.652792][ T5866] dump_stack_lvl+0x189/0x250 [ 160.652818][ T5866] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.652833][ T5866] ? __pfx__printk+0x10/0x10 [ 160.652851][ T5866] ? kobject_uevent_env+0x36b/0x8c0 [ 160.652877][ T5866] gfs2_withdraw+0xb30/0x1430 [ 160.652900][ T5866] ? __pfx_gfs2_withdraw+0x10/0x10 [ 160.652913][ T5866] ? __pfx_wake_up_bit+0x10/0x10 [ 160.652931][ T5866] ? gfs2_consist_inode_i+0xf5/0x110 [ 160.652946][ T5866] gfs2_jdesc_check+0x17d/0x2f0 [ 160.652963][ T5866] check_journal_clean+0x158/0x310 [ 160.652978][ T5866] ? __pfx_check_journal_clean+0x10/0x10 [ 160.652993][ T5866] ? init_journal+0x17f8/0x2260 [ 160.653011][ T5866] ? do_raw_spin_unlock+0x4d/0x240 [ 160.653027][ T5866] ? _raw_spin_unlock+0x28/0x50 [ 160.653041][ T5866] ? gfs2_jdesc_find+0xab/0xc0 [ 160.653056][ T5866] init_journal+0x17f8/0x2260 [ 160.653077][ T5866] ? init_inodes+0xdb/0x320 [ 160.653093][ T5866] ? __pfx_init_journal+0x10/0x10 [ 160.653106][ T5866] ? vsnprintf+0xe11/0xf00 [ 160.653125][ T5866] ? snprintf+0xda/0x120 [ 160.653138][ T5866] ? init_inodes+0xdb/0x320 [ 160.653151][ T5866] ? __pfx_snprintf+0x10/0x10 [ 160.653163][ T5866] ? gfs2_glock_nq_num+0x13d/0x170 [ 160.653181][ T5866] init_inodes+0xdb/0x320 [ 160.653196][ T5866] gfs2_fill_super+0x1923/0x20d0 [ 160.653220][ T5866] ? __pfx_gfs2_fill_super+0x10/0x10 [ 160.653235][ T5866] ? init_locking+0xb8/0x210 [ 160.653248][ T5866] ? sb_set_blocksize+0x104/0x180 [ 160.653265][ T5866] ? setup_bdev_super+0x4c1/0x5b0 [ 160.653281][ T5866] get_tree_bdev_flags+0x40b/0x4d0 [ 160.653295][ T5866] ? __pfx_gfs2_fill_super+0x10/0x10 [ 160.653309][ T5866] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 160.653330][ T5866] gfs2_get_tree+0x51/0x1e0 [ 160.653346][ T5866] vfs_get_tree+0x8f/0x2b0 [ 160.653362][ T5866] do_new_mount+0x2a2/0x9e0 [ 160.653380][ T5866] ? ns_capable+0x8a/0xf0 [ 160.653392][ T5866] ? __pfx_do_new_mount+0x10/0x10 [ 160.653406][ T5866] ? path_mount+0x61c/0xfe0 [ 160.653420][ T5866] ? user_path_at+0x44/0x60 [ 160.653438][ T5866] __se_sys_mount+0x317/0x410 [ 160.653458][ T5866] ? __pfx___se_sys_mount+0x10/0x10 [ 160.653477][ T5866] ? do_syscall_64+0xbe/0x3b0 [ 160.653492][ T5866] ? __x64_sys_mount+0x20/0xc0 [ 160.653509][ T5866] do_syscall_64+0xfa/0x3b0 [ 160.653524][ T5866] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.653538][ T5866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.653551][ T5866] ? clear_bhb_loop+0x60/0xb0 [ 160.653564][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.653576][ T5866] RIP: 0033:0x7f7a21d900ca [ 160.653589][ T5866] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.653598][ T5866] RSP: 002b:00007f7a22cb9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 160.653611][ T5866] RAX: ffffffffffffffda RBX: 00007f7a22cb9ef0 RCX: 00007f7a21d900ca [ 160.653619][ T5866] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f7a22cb9eb0 [ 160.653626][ T5866] RBP: 0000200000000000 R08: 00007f7a22cb9ef0 R09: 0000000000208c1b [ 160.653632][ T5866] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 160.653639][ T5866] R13: 00007f7a22cb9eb0 R14: 0000000000012754 R15: 00002000000128c0 [ 160.653657][ T5866] [ 160.653663][ T5866] gfs2: fsid=..s: Error checking journal for spectator mount. [ 161.201899][ T5870] loop0: detected capacity change from 0 to 32768 [ 161.223060][ T5870] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 161.231935][ T5870] gfs2: fsid=.: Now mounting FS (format 1801)... [ 161.249194][ T5870] syz.0.32: attempt to access beyond end of device [ 161.249194][ T5870] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 161.265875][ T5870] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 161.281393][ T5870] gfs2: fsid=..s: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 161.285113][ T5870] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5870 [syz.0.32] init_journal+0x17f8/0x2260 [ 161.289109][ T5870] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 161.308982][ T5870] gfs2: fsid=..s: about to withdraw this file system [ 161.316349][ T5870] gfs2: fsid=..s: Journal recovery skipped for jid 0 until next mount. [ 161.325070][ T5870] gfs2: fsid=..s: Glock dequeues delayed: 0 [ 161.335344][ T5870] gfs2: fsid=..s: File system withdrawn [ 161.337873][ T5870] CPU: 0 UID: 0 PID: 5870 Comm: syz.0.32 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 161.337892][ T5870] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.337899][ T5870] Call Trace: [ 161.337905][ T5870] [ 161.337911][ T5870] dump_stack_lvl+0x189/0x250 [ 161.337933][ T5870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.337946][ T5870] ? __pfx__printk+0x10/0x10 [ 161.337961][ T5870] ? kobject_uevent_env+0x36b/0x8c0 [ 161.337985][ T5870] gfs2_withdraw+0xb30/0x1430 [ 161.338008][ T5870] ? __pfx_gfs2_withdraw+0x10/0x10 [ 161.338021][ T5870] ? __pfx_wake_up_bit+0x10/0x10 [ 161.338041][ T5870] ? gfs2_consist_inode_i+0xf5/0x110 [ 161.338055][ T5870] gfs2_jdesc_check+0x17d/0x2f0 [ 161.338074][ T5870] check_journal_clean+0x158/0x310 [ 161.338089][ T5870] ? __pfx_check_journal_clean+0x10/0x10 [ 161.338103][ T5870] ? init_journal+0x17f8/0x2260 [ 161.338120][ T5870] ? do_raw_spin_unlock+0x4d/0x240 [ 161.338136][ T5870] ? _raw_spin_unlock+0x28/0x50 [ 161.338148][ T5870] ? gfs2_jdesc_find+0xab/0xc0 [ 161.338162][ T5870] init_journal+0x17f8/0x2260 [ 161.338180][ T5870] ? init_inodes+0xdb/0x320 [ 161.338195][ T5870] ? __pfx_init_journal+0x10/0x10 [ 161.338207][ T5870] ? vsnprintf+0xe11/0xf00 [ 161.338226][ T5870] ? snprintf+0xda/0x120 [ 161.338238][ T5870] ? init_inodes+0xdb/0x320 [ 161.338250][ T5870] ? __pfx_snprintf+0x10/0x10 [ 161.338263][ T5870] ? gfs2_glock_nq_num+0x13d/0x170 [ 161.338281][ T5870] init_inodes+0xdb/0x320 [ 161.338295][ T5870] gfs2_fill_super+0x1923/0x20d0 [ 161.338319][ T5870] ? __pfx_gfs2_fill_super+0x10/0x10 [ 161.338334][ T5870] ? init_locking+0xb8/0x210 [ 161.338345][ T5870] ? sb_set_blocksize+0x104/0x180 [ 161.338359][ T5870] ? setup_bdev_super+0x4c1/0x5b0 [ 161.338380][ T5870] get_tree_bdev_flags+0x40b/0x4d0 [ 161.338393][ T5870] ? __pfx_gfs2_fill_super+0x10/0x10 [ 161.338405][ T5870] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 161.338426][ T5870] gfs2_get_tree+0x51/0x1e0 [ 161.338473][ T5870] vfs_get_tree+0x8f/0x2b0 [ 161.338490][ T5870] do_new_mount+0x2a2/0x9e0 [ 161.338508][ T5870] ? ns_capable+0x8a/0xf0 [ 161.338519][ T5870] ? __pfx_do_new_mount+0x10/0x10 [ 161.338531][ T5870] ? path_mount+0x61c/0xfe0 [ 161.338543][ T5870] ? user_path_at+0x44/0x60 [ 161.338561][ T5870] __se_sys_mount+0x317/0x410 [ 161.338579][ T5870] ? __pfx___se_sys_mount+0x10/0x10 [ 161.338597][ T5870] ? do_syscall_64+0xbe/0x3b0 [ 161.338611][ T5870] ? __x64_sys_mount+0x20/0xc0 [ 161.338626][ T5870] do_syscall_64+0xfa/0x3b0 [ 161.338640][ T5870] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.338653][ T5870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.338664][ T5870] ? clear_bhb_loop+0x60/0xb0 [ 161.338677][ T5870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.338687][ T5870] RIP: 0033:0x7f7a21d900ca [ 161.338700][ T5870] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.338709][ T5870] RSP: 002b:00007f7a22cb9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 161.338722][ T5870] RAX: ffffffffffffffda RBX: 00007f7a22cb9ef0 RCX: 00007f7a21d900ca [ 161.338730][ T5870] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f7a22cb9eb0 [ 161.338737][ T5870] RBP: 0000200000000000 R08: 00007f7a22cb9ef0 R09: 0000000000208c1b [ 161.338744][ T5870] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 161.338751][ T5870] R13: 00007f7a22cb9eb0 R14: 0000000000012754 R15: 00002000000128c0 [ 161.338774][ T5870] [ 161.338780][ T5870] gfs2: fsid=..s: Error checking journal for spectator mount. [ 161.971549][ T5874] loop0: detected capacity change from 0 to 32768 [ 161.985695][ T5874] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 161.993492][ T5874] gfs2: fsid=.: Now mounting FS (format 1801)... [ 162.007066][ T5874] syz.0.33: attempt to access beyond end of device [ 162.007066][ T5874] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 162.031462][ T5874] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 162.037336][ T5874] gfs2: fsid=..s: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 162.061187][ T5874] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5874 [syz.0.33] init_journal+0x17f8/0x2260 [ 162.065081][ T5874] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 162.068480][ T5874] gfs2: fsid=..s: about to withdraw this file system [ 162.076740][ T5874] gfs2: fsid=..s: Journal recovery skipped for jid 0 until next mount. [ 162.080311][ T5874] gfs2: fsid=..s: Glock dequeues delayed: 0 [ 162.084892][ T5874] gfs2: fsid=..s: File system withdrawn [ 162.087452][ T5874] CPU: 0 UID: 0 PID: 5874 Comm: syz.0.33 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 162.087470][ T5874] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 162.087477][ T5874] Call Trace: [ 162.087483][ T5874] [ 162.087490][ T5874] dump_stack_lvl+0x189/0x250 [ 162.087512][ T5874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.087526][ T5874] ? __pfx__printk+0x10/0x10 [ 162.087543][ T5874] ? kobject_uevent_env+0x36b/0x8c0 [ 162.087568][ T5874] gfs2_withdraw+0xb30/0x1430 [ 162.087593][ T5874] ? __pfx_gfs2_withdraw+0x10/0x10 [ 162.087607][ T5874] ? __pfx_wake_up_bit+0x10/0x10 [ 162.087628][ T5874] ? gfs2_consist_inode_i+0xf5/0x110 [ 162.087643][ T5874] gfs2_jdesc_check+0x17d/0x2f0 [ 162.087662][ T5874] check_journal_clean+0x158/0x310 [ 162.087682][ T5874] ? __pfx_check_journal_clean+0x10/0x10 [ 162.087697][ T5874] ? init_journal+0x17f8/0x2260 [ 162.087715][ T5874] ? do_raw_spin_unlock+0x4d/0x240 [ 162.087730][ T5874] ? _raw_spin_unlock+0x28/0x50 [ 162.087744][ T5874] ? gfs2_jdesc_find+0xab/0xc0 [ 162.087759][ T5874] init_journal+0x17f8/0x2260 [ 162.087782][ T5874] ? init_inodes+0xdb/0x320 [ 162.087798][ T5874] ? __pfx_init_journal+0x10/0x10 [ 162.087811][ T5874] ? vsnprintf+0xe11/0xf00 [ 162.087831][ T5874] ? snprintf+0xda/0x120 [ 162.087843][ T5874] ? init_inodes+0xdb/0x320 [ 162.087856][ T5874] ? __pfx_snprintf+0x10/0x10 [ 162.087869][ T5874] ? gfs2_glock_nq_num+0x13d/0x170 [ 162.087886][ T5874] init_inodes+0xdb/0x320 [ 162.087901][ T5874] gfs2_fill_super+0x1923/0x20d0 [ 162.087923][ T5874] ? __pfx_gfs2_fill_super+0x10/0x10 [ 162.087945][ T5874] ? init_locking+0xb8/0x210 [ 162.087957][ T5874] ? sb_set_blocksize+0x104/0x180 [ 162.087974][ T5874] ? setup_bdev_super+0x4c1/0x5b0 [ 162.087990][ T5874] get_tree_bdev_flags+0x40b/0x4d0 [ 162.088003][ T5874] ? __pfx_gfs2_fill_super+0x10/0x10 [ 162.088015][ T5874] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 162.088036][ T5874] gfs2_get_tree+0x51/0x1e0 [ 162.088051][ T5874] vfs_get_tree+0x8f/0x2b0 [ 162.088066][ T5874] do_new_mount+0x2a2/0x9e0 [ 162.088084][ T5874] ? ns_capable+0x8a/0xf0 [ 162.088096][ T5874] ? __pfx_do_new_mount+0x10/0x10 [ 162.088109][ T5874] ? path_mount+0x61c/0xfe0 [ 162.088122][ T5874] ? user_path_at+0x44/0x60 [ 162.088141][ T5874] __se_sys_mount+0x317/0x410 [ 162.088161][ T5874] ? __pfx___se_sys_mount+0x10/0x10 [ 162.088180][ T5874] ? do_syscall_64+0xbe/0x3b0 [ 162.088195][ T5874] ? __x64_sys_mount+0x20/0xc0 [ 162.088212][ T5874] do_syscall_64+0xfa/0x3b0 [ 162.088226][ T5874] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.088240][ T5874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.088251][ T5874] ? clear_bhb_loop+0x60/0xb0 [ 162.088266][ T5874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.088277][ T5874] RIP: 0033:0x7f7a21d900ca [ 162.088289][ T5874] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.088299][ T5874] RSP: 002b:00007f7a22cb9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 162.088312][ T5874] RAX: ffffffffffffffda RBX: 00007f7a22cb9ef0 RCX: 00007f7a21d900ca [ 162.088321][ T5874] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f7a22cb9eb0 [ 162.088328][ T5874] RBP: 0000200000000000 R08: 00007f7a22cb9ef0 R09: 0000000000208c1b [ 162.088336][ T5874] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 162.088343][ T5874] R13: 00007f7a22cb9eb0 R14: 0000000000012754 R15: 00002000000128c0 [ 162.088363][ T5874] [ 162.088368][ T5874] gfs2: fsid=..s: Error checking journal for spectator mount. [ 162.695825][ T5878] loop0: detected capacity change from 0 to 32768 [ 162.712130][ T5878] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 162.719294][ T5878] gfs2: fsid=.: Now mounting FS (format 1801)... [ 162.735347][ T5878] syz.0.34: attempt to access beyond end of device [ 162.735347][ T5878] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 162.757717][ T5878] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 162.771424][ T5878] gfs2: fsid=..s: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 162.775577][ T5878] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5878 [syz.0.34] init_journal+0x17f8/0x2260 [ 162.779662][ T5878] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 162.794860][ T5878] gfs2: fsid=..s: about to withdraw this file system [ 162.797811][ T5878] gfs2: fsid=..s: Journal recovery skipped for jid 0 until next mount. [ 162.801857][ T5878] gfs2: fsid=..s: Glock dequeues delayed: 0 [ 162.805061][ T5878] gfs2: fsid=..s: File system withdrawn [ 162.807611][ T5878] CPU: 0 UID: 0 PID: 5878 Comm: syz.0.34 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 162.807630][ T5878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 162.807638][ T5878] Call Trace: [ 162.807644][ T5878] [ 162.807650][ T5878] dump_stack_lvl+0x189/0x250 [ 162.807673][ T5878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.807688][ T5878] ? __pfx__printk+0x10/0x10 [ 162.807705][ T5878] ? kobject_uevent_env+0x36b/0x8c0 [ 162.807742][ T5878] gfs2_withdraw+0xb30/0x1430 [ 162.807767][ T5878] ? __pfx_gfs2_withdraw+0x10/0x10 [ 162.807783][ T5878] ? __pfx_wake_up_bit+0x10/0x10 [ 162.807802][ T5878] ? gfs2_consist_inode_i+0xf5/0x110 [ 162.807818][ T5878] gfs2_jdesc_check+0x17d/0x2f0 [ 162.807837][ T5878] check_journal_clean+0x158/0x310 [ 162.807852][ T5878] ? __pfx_check_journal_clean+0x10/0x10 [ 162.807867][ T5878] ? init_journal+0x17f8/0x2260 [ 162.807887][ T5878] ? do_raw_spin_unlock+0x4d/0x240 [ 162.807904][ T5878] ? _raw_spin_unlock+0x28/0x50 [ 162.807917][ T5878] ? gfs2_jdesc_find+0xab/0xc0 [ 162.807932][ T5878] init_journal+0x17f8/0x2260 [ 162.807952][ T5878] ? init_inodes+0xdb/0x320 [ 162.807976][ T5878] ? __pfx_init_journal+0x10/0x10 [ 162.807987][ T5878] ? vsnprintf+0xe11/0xf00 [ 162.808007][ T5878] ? snprintf+0xda/0x120 [ 162.808021][ T5878] ? init_inodes+0xdb/0x320 [ 162.808041][ T5878] ? __pfx_snprintf+0x10/0x10 [ 162.808059][ T5878] ? gfs2_glock_nq_num+0x13d/0x170 [ 162.808077][ T5878] init_inodes+0xdb/0x320 [ 162.808092][ T5878] gfs2_fill_super+0x1923/0x20d0 [ 162.808117][ T5878] ? __pfx_gfs2_fill_super+0x10/0x10 [ 162.808134][ T5878] ? init_locking+0xb8/0x210 [ 162.808146][ T5878] ? sb_set_blocksize+0x104/0x180 [ 162.808162][ T5878] ? setup_bdev_super+0x4c1/0x5b0 [ 162.808179][ T5878] get_tree_bdev_flags+0x40b/0x4d0 [ 162.808194][ T5878] ? __pfx_gfs2_fill_super+0x10/0x10 [ 162.808209][ T5878] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 162.808232][ T5878] gfs2_get_tree+0x51/0x1e0 [ 162.808248][ T5878] vfs_get_tree+0x8f/0x2b0 [ 162.808264][ T5878] do_new_mount+0x2a2/0x9e0 [ 162.808282][ T5878] ? ns_capable+0x8a/0xf0 [ 162.808296][ T5878] ? __pfx_do_new_mount+0x10/0x10 [ 162.808310][ T5878] ? path_mount+0x61c/0xfe0 [ 162.808324][ T5878] ? user_path_at+0x44/0x60 [ 162.808345][ T5878] __se_sys_mount+0x317/0x410 [ 162.808366][ T5878] ? __pfx___se_sys_mount+0x10/0x10 [ 162.808388][ T5878] ? do_syscall_64+0xbe/0x3b0 [ 162.808403][ T5878] ? __x64_sys_mount+0x20/0xc0 [ 162.808421][ T5878] do_syscall_64+0xfa/0x3b0 [ 162.808438][ T5878] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.808453][ T5878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.808466][ T5878] ? clear_bhb_loop+0x60/0xb0 [ 162.808487][ T5878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.808500][ T5878] RIP: 0033:0x7f7a21d900ca [ 162.808513][ T5878] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.808523][ T5878] RSP: 002b:00007f7a22cb9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 162.808538][ T5878] RAX: ffffffffffffffda RBX: 00007f7a22cb9ef0 RCX: 00007f7a21d900ca [ 162.808546][ T5878] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f7a22cb9eb0 [ 162.808555][ T5878] RBP: 0000200000000000 R08: 00007f7a22cb9ef0 R09: 0000000000208c1b [ 162.808563][ T5878] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 162.808571][ T5878] R13: 00007f7a22cb9eb0 R14: 0000000000012754 R15: 00002000000128c0 [ 162.808592][ T5878] [ 162.808597][ T5878] gfs2: fsid=..s: Error checking journal for spectator mount. [ 163.429385][ T5882] loop0: detected capacity change from 0 to 32768 [ 163.449719][ T5882] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 163.457000][ T5882] gfs2: fsid=.: Now mounting FS (format 1801)... [ 163.471801][ T5882] syz.0.35: attempt to access beyond end of device [ 163.471801][ T5882] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 163.491521][ T5882] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 163.497645][ T5882] gfs2: fsid=..s: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 163.512339][ T5882] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5882 [syz.0.35] init_journal+0x17f8/0x2260 [ 163.516515][ T5882] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 163.520056][ T5882] gfs2: fsid=..s: about to withdraw this file system [ 163.532859][ T5882] gfs2: fsid=..s: Journal recovery skipped for jid 0 until next mount. [ 163.536418][ T5882] gfs2: fsid=..s: Glock dequeues delayed: 0 [ 163.541110][ T5882] gfs2: fsid=..s: File system withdrawn [ 163.544055][ T5882] CPU: 0 UID: 0 PID: 5882 Comm: syz.0.35 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 163.544074][ T5882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.544082][ T5882] Call Trace: [ 163.544089][ T5882] [ 163.544100][ T5882] dump_stack_lvl+0x189/0x250 [ 163.544127][ T5882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.544143][ T5882] ? __pfx__printk+0x10/0x10 [ 163.544161][ T5882] ? kobject_uevent_env+0x36b/0x8c0 [ 163.544240][ T5882] gfs2_withdraw+0xb30/0x1430 [ 163.544269][ T5882] ? __pfx_gfs2_withdraw+0x10/0x10 [ 163.544285][ T5882] ? __pfx_wake_up_bit+0x10/0x10 [ 163.544309][ T5882] ? gfs2_consist_inode_i+0xf5/0x110 [ 163.544328][ T5882] gfs2_jdesc_check+0x17d/0x2f0 [ 163.544350][ T5882] check_journal_clean+0x158/0x310 [ 163.544367][ T5882] ? __pfx_check_journal_clean+0x10/0x10 [ 163.544385][ T5882] ? init_journal+0x17f8/0x2260 [ 163.544407][ T5882] ? do_raw_spin_unlock+0x4d/0x240 [ 163.544427][ T5882] ? _raw_spin_unlock+0x28/0x50 [ 163.544441][ T5882] ? gfs2_jdesc_find+0xab/0xc0 [ 163.544460][ T5882] init_journal+0x17f8/0x2260 [ 163.544484][ T5882] ? init_inodes+0xdb/0x320 [ 163.544502][ T5882] ? __pfx_init_journal+0x10/0x10 [ 163.544517][ T5882] ? vsnprintf+0xe11/0xf00 [ 163.544539][ T5882] ? snprintf+0xda/0x120 [ 163.544555][ T5882] ? init_inodes+0xdb/0x320 [ 163.544569][ T5882] ? __pfx_snprintf+0x10/0x10 [ 163.544585][ T5882] ? gfs2_glock_nq_num+0x13d/0x170 [ 163.544604][ T5882] init_inodes+0xdb/0x320 [ 163.544622][ T5882] gfs2_fill_super+0x1923/0x20d0 [ 163.544671][ T5882] ? __pfx_gfs2_fill_super+0x10/0x10 [ 163.544696][ T5882] ? init_locking+0xb8/0x210 [ 163.544708][ T5882] ? sb_set_blocksize+0x104/0x180 [ 163.544727][ T5882] ? setup_bdev_super+0x4c1/0x5b0 [ 163.544747][ T5882] get_tree_bdev_flags+0x40b/0x4d0 [ 163.544763][ T5882] ? __pfx_gfs2_fill_super+0x10/0x10 [ 163.544778][ T5882] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 163.544802][ T5882] gfs2_get_tree+0x51/0x1e0 [ 163.544821][ T5882] vfs_get_tree+0x8f/0x2b0 [ 163.544838][ T5882] do_new_mount+0x2a2/0x9e0 [ 163.544860][ T5882] ? ns_capable+0x8a/0xf0 [ 163.544873][ T5882] ? __pfx_do_new_mount+0x10/0x10 [ 163.544889][ T5882] ? path_mount+0x61c/0xfe0 [ 163.544905][ T5882] ? user_path_at+0x44/0x60 [ 163.544925][ T5882] __se_sys_mount+0x317/0x410 [ 163.544954][ T5882] ? __pfx___se_sys_mount+0x10/0x10 [ 163.544975][ T5882] ? do_syscall_64+0xbe/0x3b0 [ 163.544991][ T5882] ? __x64_sys_mount+0x20/0xc0 [ 163.545011][ T5882] do_syscall_64+0xfa/0x3b0 [ 163.545027][ T5882] ? lockdep_hardirqs_on+0x9c/0x150 [ 163.545043][ T5882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.545056][ T5882] ? clear_bhb_loop+0x60/0xb0 [ 163.545073][ T5882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.545087][ T5882] RIP: 0033:0x7f7a21d900ca [ 163.545100][ T5882] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.545112][ T5882] RSP: 002b:00007f7a22cb9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 163.545126][ T5882] RAX: ffffffffffffffda RBX: 00007f7a22cb9ef0 RCX: 00007f7a21d900ca [ 163.545136][ T5882] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f7a22cb9eb0 [ 163.545144][ T5882] RBP: 0000200000000000 R08: 00007f7a22cb9ef0 R09: 0000000000208c1b [ 163.545152][ T5882] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 163.545160][ T5882] R13: 00007f7a22cb9eb0 R14: 0000000000012754 R15: 00002000000128c0 [ 163.545182][ T5882] [ 163.545188][ T5882] gfs2: fsid=..s: Error checking journal for spectator mount. [ 164.132024][ T5886] loop0: detected capacity change from 0 to 32768 [ 164.146001][ T5886] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 164.148955][ T5886] gfs2: fsid=.: Now mounting FS (format 1801)... [ 164.177286][ T5886] syz.0.36: attempt to access beyond end of device [ 164.177286][ T5886] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 164.195079][ T5886] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 164.210629][ T5886] gfs2: fsid=..s: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 164.214460][ T5886] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5886 [syz.0.36] init_journal+0x17f8/0x2260 [ 164.218452][ T5886] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 164.231629][ T5886] gfs2: fsid=..s: about to withdraw this file system [ 164.234622][ T5886] gfs2: fsid=..s: Journal recovery skipped for jid 0 until next mount. [ 164.238540][ T5886] gfs2: fsid=..s: Glock dequeues delayed: 0 [ 164.244442][ T5886] gfs2: fsid=..s: File system withdrawn [ 164.247046][ T5886] CPU: 0 UID: 0 PID: 5886 Comm: syz.0.36 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 164.247064][ T5886] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 164.247071][ T5886] Call Trace: [ 164.247079][ T5886] [ 164.247084][ T5886] dump_stack_lvl+0x189/0x250 [ 164.247105][ T5886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.247120][ T5886] ? __pfx__printk+0x10/0x10 [ 164.247136][ T5886] ? kobject_uevent_env+0x36b/0x8c0 [ 164.247161][ T5886] gfs2_withdraw+0xb30/0x1430 [ 164.247179][ T5886] ? __pfx_gfs2_withdraw+0x10/0x10 [ 164.247192][ T5886] ? __pfx_wake_up_bit+0x10/0x10 [ 164.247211][ T5886] ? gfs2_consist_inode_i+0xf5/0x110 [ 164.247226][ T5886] gfs2_jdesc_check+0x17d/0x2f0 [ 164.247243][ T5886] check_journal_clean+0x158/0x310 [ 164.247257][ T5886] ? __pfx_check_journal_clean+0x10/0x10 [ 164.247272][ T5886] ? init_journal+0x17f8/0x2260 [ 164.247291][ T5886] ? do_raw_spin_unlock+0x4d/0x240 [ 164.247307][ T5886] ? _raw_spin_unlock+0x28/0x50 [ 164.247320][ T5886] ? gfs2_jdesc_find+0xab/0xc0 [ 164.247334][ T5886] init_journal+0x17f8/0x2260 [ 164.247352][ T5886] ? init_inodes+0xdb/0x320 [ 164.247369][ T5886] ? __pfx_init_journal+0x10/0x10 [ 164.247381][ T5886] ? vsnprintf+0xe11/0xf00 [ 164.247400][ T5886] ? snprintf+0xda/0x120 [ 164.247414][ T5886] ? init_inodes+0xdb/0x320 [ 164.247426][ T5886] ? __pfx_snprintf+0x10/0x10 [ 164.247438][ T5886] ? gfs2_glock_nq_num+0x13d/0x170 [ 164.247456][ T5886] init_inodes+0xdb/0x320 [ 164.247470][ T5886] gfs2_fill_super+0x1923/0x20d0 [ 164.247494][ T5886] ? __pfx_gfs2_fill_super+0x10/0x10 [ 164.247508][ T5886] ? init_locking+0xb8/0x210 [ 164.247519][ T5886] ? sb_set_blocksize+0x104/0x180 [ 164.247535][ T5886] ? setup_bdev_super+0x4c1/0x5b0 [ 164.247551][ T5886] get_tree_bdev_flags+0x40b/0x4d0 [ 164.247564][ T5886] ? __pfx_gfs2_fill_super+0x10/0x10 [ 164.247577][ T5886] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 164.247597][ T5886] gfs2_get_tree+0x51/0x1e0 [ 164.247612][ T5886] vfs_get_tree+0x8f/0x2b0 [ 164.247628][ T5886] do_new_mount+0x2a2/0x9e0 [ 164.247645][ T5886] ? ns_capable+0x8a/0xf0 [ 164.247656][ T5886] ? __pfx_do_new_mount+0x10/0x10 [ 164.247670][ T5886] ? path_mount+0x61c/0xfe0 [ 164.247684][ T5886] ? user_path_at+0x44/0x60 [ 164.247708][ T5886] __se_sys_mount+0x317/0x410 [ 164.247727][ T5886] ? __pfx___se_sys_mount+0x10/0x10 [ 164.247747][ T5886] ? do_syscall_64+0xbe/0x3b0 [ 164.247761][ T5886] ? __x64_sys_mount+0x20/0xc0 [ 164.247777][ T5886] do_syscall_64+0xfa/0x3b0 [ 164.247791][ T5886] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.247805][ T5886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.247816][ T5886] ? clear_bhb_loop+0x60/0xb0 [ 164.247829][ T5886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.247840][ T5886] RIP: 0033:0x7f7a21d900ca [ 164.247852][ T5886] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.247861][ T5886] RSP: 002b:00007f7a22cb9e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 164.247875][ T5886] RAX: ffffffffffffffda RBX: 00007f7a22cb9ef0 RCX: 00007f7a21d900ca [ 164.247883][ T5886] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 00007f7a22cb9eb0 [ 164.247890][ T5886] RBP: 0000200000000000 R08: 00007f7a22cb9ef0 R09: 0000000000208c1b [ 164.247897][ T5886] R10: 0000000000208c1b R11: 0000000000000246 R12: 0000200000000100 [ 164.247904][ T5886] R13: 00007f7a22cb9eb0 R14: 0000000000012754 R15: 00002000000128c0 [ 164.247922][ T5886] [ 164.247928][ T5886] gfs2: fsid=..s: Error checking journal for spectator mount. [ 164.810127][ T30] ================================================================== [ 164.813969][ T30] BUG: KASAN: slab-use-after-free in move_to_new_folio+0x145/0x490 [ 164.819315][ T30] Read of size 8 at addr ffff88805592d3a0 by task kcompactd1/30 [ 164.823640][ T30] [ 164.824780][ T30] CPU: 0 UID: 0 PID: 30 Comm: kcompactd1 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 164.824796][ T30] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 164.824804][ T30] Call Trace: [ 164.824811][ T30] [ 164.824817][ T30] dump_stack_lvl+0x189/0x250 [ 164.824835][ T30] ? rcu_is_watching+0x15/0xb0 [ 164.824845][ T30] ? __kasan_check_byte+0x12/0x40 [ 164.824858][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.824870][ T30] ? rcu_is_watching+0x15/0xb0 [ 164.824881][ T30] ? lock_release+0x4b/0x3e0 [ 164.824896][ T30] ? __virt_addr_valid+0x1c8/0x5c0 [ 164.824909][ T30] ? __virt_addr_valid+0x4a5/0x5c0 [ 164.824923][ T30] print_report+0xca/0x240 [ 164.824933][ T30] ? move_to_new_folio+0x145/0x490 [ 164.824948][ T30] kasan_report+0x118/0x150 [ 164.824962][ T30] ? move_to_new_folio+0x145/0x490 [ 164.824976][ T30] kasan_check_range+0x2b0/0x2c0 [ 164.824986][ T30] move_to_new_folio+0x145/0x490 [ 164.824997][ T30] migrate_pages_batch+0x1e34/0x3620 [ 164.825009][ T30] ? __pfx_compaction_free+0x10/0x10 [ 164.825019][ T30] ? __pfx_migrate_pages_batch+0x10/0x10 [ 164.825028][ T30] ? __lock_acquire+0xab9/0xd20 [ 164.825037][ T30] ? css_rstat_updated+0x23a/0x4f0 [ 164.825045][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 164.825054][ T30] ? __pfx_compaction_free+0x10/0x10 [ 164.825062][ T30] migrate_pages+0x1bcc/0x2930 [ 164.825073][ T30] ? __pfx_compaction_free+0x10/0x10 [ 164.825081][ T30] ? __pfx_compaction_alloc+0x10/0x10 [ 164.825089][ T30] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.825107][ T30] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 164.825116][ T30] ? __pfx_migrate_pages+0x10/0x10 [ 164.825125][ T30] ? rcu_is_watching+0x15/0xb0 [ 164.825135][ T30] ? isolate_migratepages_block+0x3ac7/0x4350 [ 164.825153][ T30] compact_zone+0x23e1/0x4ab0 [ 164.825175][ T30] ? __pfx_compact_zone+0x10/0x10 [ 164.825187][ T30] ? rcu_is_watching+0x15/0xb0 [ 164.825197][ T30] kcompactd+0x97d/0x1290 [ 164.825212][ T30] ? __pfx_kcompactd+0x10/0x10 [ 164.825229][ T30] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 164.825241][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 164.825253][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 164.825264][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 164.825273][ T30] ? __kthread_parkme+0x7b/0x200 [ 164.825280][ T30] ? __kthread_parkme+0x1a1/0x200 [ 164.825291][ T30] kthread+0x70e/0x8a0 [ 164.825304][ T30] ? __pfx_kcompactd+0x10/0x10 [ 164.825315][ T30] ? __pfx_kthread+0x10/0x10 [ 164.825328][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 164.825339][ T30] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.825347][ T30] ? __pfx_kthread+0x10/0x10 [ 164.825355][ T30] ret_from_fork+0x3f9/0x770 [ 164.825365][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 164.825376][ T30] ? __pfx_kthread+0x10/0x10 [ 164.825387][ T30] ret_from_fork_asm+0x1a/0x30 [ 164.825404][ T30] [ 164.825409][ T30] [ 164.950557][ T30] Allocated by task 5882: [ 164.952372][ T30] kasan_save_track+0x3e/0x80 [ 164.954531][ T30] __kasan_slab_alloc+0x6c/0x80 [ 164.956971][ T30] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 164.959626][ T30] gfs2_glock_get+0x263/0xec0 [ 164.961682][ T30] gfs2_inode_lookup+0x215/0xb10 [ 164.963866][ T30] gfs2_dir_search+0x168/0x220 [ 164.965966][ T30] gfs2_lookupi+0x3d9/0x5a0 [ 164.967943][ T30] init_journal+0x54a/0x2260 [ 164.969981][ T30] init_inodes+0xdb/0x320 [ 164.971831][ T30] gfs2_fill_super+0x1923/0x20d0 [ 164.973944][ T30] get_tree_bdev_flags+0x40b/0x4d0 [ 164.976249][ T30] gfs2_get_tree+0x51/0x1e0 [ 164.978355][ T30] vfs_get_tree+0x8f/0x2b0 [ 164.980448][ T30] do_new_mount+0x2a2/0x9e0 [ 164.982398][ T30] __se_sys_mount+0x317/0x410 [ 164.984445][ T30] do_syscall_64+0xfa/0x3b0 [ 164.986442][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.989023][ T30] [ 164.990079][ T30] Freed by task 15: [ 164.991793][ T30] kasan_save_track+0x3e/0x80 [ 164.993802][ T30] kasan_save_free_info+0x46/0x50 [ 164.996014][ T30] __kasan_slab_free+0x5b/0x80 [ 164.998048][ T30] kmem_cache_free+0x18f/0x400 [ 165.000149][ T30] rcu_core+0xcab/0x1770 [ 165.001960][ T30] handle_softirqs+0x283/0x870 [ 165.004152][ T30] run_ksoftirqd+0x9b/0x100 [ 165.006343][ T30] smpboot_thread_fn+0x53f/0xa60 [ 165.008728][ T30] kthread+0x70e/0x8a0 [ 165.010506][ T30] ret_from_fork+0x3f9/0x770 [ 165.012461][ T30] ret_from_fork_asm+0x1a/0x30 [ 165.014519][ T30] [ 165.015628][ T30] Last potentially related work creation: [ 165.018022][ T30] kasan_save_stack+0x3e/0x60 [ 165.020069][ T30] kasan_record_aux_stack+0xbd/0xd0 [ 165.022275][ T30] call_rcu+0x157/0x9c0 [ 165.024081][ T30] __gfs2_glock_free+0xb44/0xc90 [ 165.026189][ T30] gfs2_glock_free+0x3c/0xa0 [ 165.028135][ T30] gfs2_evict_inode+0xae7/0x1000 [ 165.030196][ T30] evict+0x501/0x9c0 [ 165.031909][ T30] gfs2_jindex_free+0x39c/0x440 [ 165.034081][ T30] init_journal+0x8f1/0x2260 [ 165.036281][ T30] init_inodes+0xdb/0x320 [ 165.038226][ T30] gfs2_fill_super+0x1923/0x20d0 [ 165.040450][ T30] get_tree_bdev_flags+0x40b/0x4d0 [ 165.042708][ T30] gfs2_get_tree+0x51/0x1e0 [ 165.044758][ T30] vfs_get_tree+0x8f/0x2b0 [ 165.046702][ T30] do_new_mount+0x2a2/0x9e0 [ 165.048646][ T30] __se_sys_mount+0x317/0x410 [ 165.050664][ T30] do_syscall_64+0xfa/0x3b0 [ 165.052607][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.055181][ T30] [ 165.056230][ T30] Second to last potentially related work creation: [ 165.059065][ T30] kasan_save_stack+0x3e/0x60 [ 165.061088][ T30] kasan_record_aux_stack+0xbd/0xd0 [ 165.063386][ T30] insert_work+0x3d/0x330 [ 165.065323][ T30] __queue_work+0xcd2/0xfb0 [ 165.067358][ T30] queue_delayed_work_on+0x18b/0x280 [ 165.069574][ T30] do_xmote+0xce0/0x1260 [ 165.071355][ T30] glock_work_func+0x2a8/0x580 [ 165.073448][ T30] process_scheduled_works+0xade/0x17b0 [ 165.075798][ T30] worker_thread+0x8a0/0xda0 [ 165.077766][ T30] kthread+0x70e/0x8a0 [ 165.079529][ T30] ret_from_fork+0x3f9/0x770 [ 165.081513][ T30] ret_from_fork_asm+0x1a/0x30 [ 165.083554][ T30] [ 165.084595][ T30] The buggy address belongs to the object at ffff88805592cfd8 [ 165.084595][ T30] which belongs to the cache gfs2_glock(aspace) of size 1224 [ 165.090885][ T30] The buggy address is located 968 bytes inside of [ 165.090885][ T30] freed 1224-byte region [ffff88805592cfd8, ffff88805592d4a0) [ 165.096716][ T30] [ 165.097867][ T30] The buggy address belongs to the physical page: [ 165.100609][ T30] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5592c [ 165.104371][ T30] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 165.108132][ T30] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 165.111513][ T30] page_type: f5(slab) [ 165.113290][ T30] raw: 04fff00000000040 ffff888032a7e8c0 ffffea00013dee00 0000000000000002 [ 165.117078][ T30] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 165.120628][ T30] head: 04fff00000000040 ffff888032a7e8c0 ffffea00013dee00 0000000000000002 [ 165.124248][ T30] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 165.128375][ T30] head: 04fff00000000002 ffffea0001564b01 00000000ffffffff 00000000ffffffff [ 165.132312][ T30] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 165.136192][ T30] page dumped because: kasan: bad access detected [ 165.139066][ T30] page_owner tracks the page as allocated [ 165.141533][ T30] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5834, tgid 5833 (syz.0.23), ts 155134614637, free_ts 153487333086 [ 165.150860][ T30] post_alloc_hook+0x240/0x2a0 [ 165.153365][ T30] get_page_from_freelist+0x21e4/0x22c0 [ 165.155968][ T30] __alloc_frozen_pages_noprof+0x181/0x370 [ 165.158615][ T30] alloc_pages_mpol+0x232/0x4a0 [ 165.160782][ T30] allocate_slab+0x8a/0x370 [ 165.162860][ T30] ___slab_alloc+0xbeb/0x1410 [ 165.165026][ T30] kmem_cache_alloc_noprof+0x283/0x3c0 [ 165.167520][ T30] gfs2_glock_get+0x263/0xec0 [ 165.169623][ T30] gfs2_inode_lookup+0x215/0xb10 [ 165.171856][ T30] gfs2_dir_search+0x168/0x220 [ 165.174036][ T30] gfs2_lookupi+0x3d9/0x5a0 [ 165.176211][ T30] gfs2_lookup_meta+0xa7/0x170 [ 165.178470][ T30] init_journal+0x10cd/0x2260 [ 165.180644][ T30] init_inodes+0xdb/0x320 [ 165.182719][ T30] gfs2_fill_super+0x1923/0x20d0 [ 165.185124][ T30] get_tree_bdev_flags+0x40b/0x4d0 [ 165.187451][ T30] page last free pid 5723 tgid 5723 stack trace: [ 165.190328][ T30] __free_frozen_pages+0xbc4/0xd30 [ 165.192663][ T30] __slab_free+0x303/0x3c0 [ 165.194706][ T30] qlist_free_all+0x97/0x140 [ 165.196870][ T30] kasan_quarantine_reduce+0x148/0x160 [ 165.199370][ T30] __kasan_slab_alloc+0x22/0x80 [ 165.201672][ T30] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 165.204215][ T30] getname_flags+0xb8/0x540 [ 165.206348][ T30] user_path_at+0x24/0x60 [ 165.208526][ T30] __x64_sys_umount+0xee/0x160 [ 165.210859][ T30] do_syscall_64+0xfa/0x3b0 [ 165.212988][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.215647][ T30] [ 165.216733][ T30] Memory state around the buggy address: [ 165.219281][ T30] ffff88805592d280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.222721][ T30] ffff88805592d300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.226279][ T30] >ffff88805592d380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.229922][ T30] ^ [ 165.232200][ T30] ffff88805592d400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.235841][ T30] ffff88805592d480: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 165.239447][ T30] ================================================================== [ 165.271723][ T5890] loop0: detected capacity change from 0 to 32768 [ 165.311371][ T5890] gfs2: fsid=.: Trying to join cluster "lock_nolock", "." [ 165.314605][ T5890] gfs2: fsid=.: Now mounting FS (format 1801)... [ 165.354740][ T5890] syz.0.37: attempt to access beyond end of device [ 165.354740][ T5890] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768 [ 165.370932][ T5890] gfs2: fsid=..s: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119 [ 165.376868][ T5890] gfs2: fsid=..s: G: s:SH n:2/13 f:aqob t:SH d:EX/0 a:0 v:0 r:2 m:20 p:4 [ 165.392944][ T5890] gfs2: fsid=..s: H: s:SH f:eEcH e:0 p:5890 [syz.0.37] init_journal+0x17f8/0x2260 [ 165.396883][ T5890] gfs2: fsid=..s: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 165.400206][ T5890] gfs2: fsid=..s: about to withdraw this file system [ 165.416070][ T30] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 165.419153][ T30] CPU: 0 UID: 0 PID: 30 Comm: kcompactd1 Not tainted 6.17.0-rc1-syzkaller-00116-gd7ee5bdce789 #0 PREEMPT(full) [ 165.424105][ T30] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 165.428854][ T30] Call Trace: [ 165.430299][ T30] [ 165.431630][ T30] dump_stack_lvl+0x99/0x250 [ 165.433664][ T30] ? __asan_memcpy+0x40/0x70 [ 165.435728][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.437975][ T30] ? __pfx__printk+0x10/0x10 [ 165.440070][ T30] vpanic+0x281/0x750 [ 165.441901][ T30] ? preempt_schedule+0xae/0xc0 [ 165.444079][ T30] ? __pfx_vpanic+0x10/0x10 [ 165.446278][ T30] ? preempt_schedule_common+0x83/0xd0 [ 165.448606][ T30] ? preempt_schedule+0xae/0xc0 [ 165.450676][ T30] ? __pfx_preempt_schedule+0x10/0x10 [ 165.452983][ T30] panic+0xb9/0xc0 [ 165.454605][ T30] ? __pfx_panic+0x10/0x10 [ 165.456698][ T30] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 165.459221][ T30] ? move_to_new_folio+0x145/0x490 [ 165.461460][ T30] check_panic_on_warn+0x89/0xb0 [ 165.463698][ T30] ? move_to_new_folio+0x145/0x490 [ 165.466138][ T30] end_report+0x78/0x160 [ 165.468077][ T30] kasan_report+0x129/0x150 [ 165.469941][ T30] ? move_to_new_folio+0x145/0x490 [ 165.472157][ T30] kasan_check_range+0x2b0/0x2c0 [ 165.474270][ T30] move_to_new_folio+0x145/0x490 [ 165.476463][ T30] migrate_pages_batch+0x1e34/0x3620 [ 165.478776][ T30] ? __pfx_compaction_free+0x10/0x10 [ 165.481073][ T30] ? __pfx_migrate_pages_batch+0x10/0x10 [ 165.483512][ T30] ? __lock_acquire+0xab9/0xd20 [ 165.485655][ T30] ? css_rstat_updated+0x23a/0x4f0 [ 165.487801][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 165.490079][ T30] ? __pfx_compaction_free+0x10/0x10 [ 165.492294][ T30] migrate_pages+0x1bcc/0x2930 [ 165.494331][ T30] ? __pfx_compaction_free+0x10/0x10 [ 165.496686][ T30] ? __pfx_compaction_alloc+0x10/0x10 [ 165.498947][ T30] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.501073][ T30] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 165.503641][ T30] ? __pfx_migrate_pages+0x10/0x10 [ 165.505863][ T30] ? rcu_is_watching+0x15/0xb0 [ 165.507918][ T30] ? isolate_migratepages_block+0x3ac7/0x4350 [ 165.510377][ T30] compact_zone+0x23e1/0x4ab0 [ 165.512440][ T30] ? __pfx_compact_zone+0x10/0x10 [ 165.514681][ T30] ? rcu_is_watching+0x15/0xb0 [ 165.516735][ T30] kcompactd+0x97d/0x1290 [ 165.518533][ T30] ? __pfx_kcompactd+0x10/0x10 [ 165.520502][ T30] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 165.522977][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 165.525516][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 165.528044][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 165.531005][ T30] ? __kthread_parkme+0x7b/0x200 [ 165.533584][ T30] ? __kthread_parkme+0x1a1/0x200 [ 165.536107][ T30] kthread+0x70e/0x8a0 [ 165.538191][ T30] ? __pfx_kcompactd+0x10/0x10 [ 165.540426][ T30] ? __pfx_kthread+0x10/0x10 [ 165.542436][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 165.544688][ T30] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.547014][ T30] ? __pfx_kthread+0x10/0x10 [ 165.549033][ T30] ret_from_fork+0x3f9/0x770 [ 165.551129][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 165.553350][ T30] ? __pfx_kthread+0x10/0x10 [ 165.555254][ T30] ret_from_fork_asm+0x1a/0x30 [ 165.557292][ T30] [ 165.558992][ T30] Kernel Offset: disabled [ 165.560772][ T30] Rebooting in 86400 seconds..