[ 514.744295][ T6382] loop0: detected capacity change from 0 to 32768 [ 514.760766][ T6382] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 514.776475][ T6382] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 514.811099][ T6382] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 514.824394][ T5382] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 514.827633][ T5382] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 514.879861][ T5382] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 52ms [ 514.887194][ T5382] gfs2: fsid=syz:syz.0: jid=0: Done [ 514.889946][ T6382] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 514.958004][ T6382] gfs2: fsid=syz:syz.0: found 1 quota changes [ 514.967581][ T6382] syz.0.72: attempt to access beyond end of device [ 514.967581][ T6382] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 514.975523][ T6382] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 514.979578][ T6382] syz.0.72: attempt to access beyond end of device [ 514.979578][ T6382] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 515.034646][ T5811] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 515.040693][ T5811] CPU: 0 UID: 0 PID: 5811 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 515.040714][ T5811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 515.040720][ T5811] Call Trace: [ 515.040729][ T5811] [ 515.040735][ T5811] dump_stack_lvl+0xe8/0x150 [ 515.040809][ T5811] gfs2_withdraw+0xc3/0x1b0 [ 515.040858][ T5811] gfs2_ail1_empty+0x2c5/0x7b0 [ 515.040883][ T5811] gfs2_flush_revokes+0x5c/0x80 [ 515.040897][ T5811] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 515.040916][ T5811] revoke_lo_before_commit+0x2f/0xea0 [ 515.040926][ T5811] ? __pfx_list_sort+0x10/0x10 [ 515.040937][ T5811] ? do_raw_spin_lock+0x12b/0x2f0 [ 515.040955][ T5811] ? do_raw_spin_unlock+0x4d/0x210 [ 515.040967][ T5811] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 515.040979][ T5811] __gfs2_log_flush+0xa21/0x1d90 [ 515.041001][ T5811] ? __pfx___gfs2_log_flush+0x10/0x10 [ 515.041013][ T5811] ? down_write+0x16d/0x200 [ 515.041061][ T5811] ? __pfx_down_write+0x10/0x10 [ 515.041078][ T5811] ? call_rcu+0x64b/0x8b0 [ 515.041091][ T5811] gfs2_log_flush+0x34/0x50 [ 515.041105][ T5811] gfs2_kill_sb+0x5c/0x430 [ 515.041123][ T5811] deactivate_locked_super+0xbc/0x130 [ 515.041139][ T5811] cleanup_mnt+0x3d3/0x460 [ 515.041156][ T5811] task_work_run+0x1d9/0x270 [ 515.041176][ T5811] ? __pfx_task_work_run+0x10/0x10 [ 515.041196][ T5811] exit_to_user_mode_loop+0x1fa/0x730 [ 515.041210][ T5811] ? rcu_is_watching+0x15/0xb0 [ 515.041225][ T5811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.041238][ T5811] do_syscall_64+0x353/0x580 [ 515.041251][ T5811] ? trace_irq_disable+0x3b/0x140 [ 515.041265][ T5811] ? clear_bhb_loop+0x40/0x90 [ 515.041278][ T5811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.041288][ T5811] RIP: 0033:0x7f2bcf39c197 [ 515.041301][ T5811] Code: a2 c7 05 fc 83 23 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 515.041310][ T5811] RSP: 002b:00007ffd73c7c3c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 515.041323][ T5811] RAX: 0000000000000000 RBX: 00007f2bcf42f33b RCX: 00007f2bcf39c197 [ 515.041330][ T5811] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd73c7c480 [ 515.041336][ T5811] RBP: 00007ffd73c7c480 R08: 00007ffd73c7d480 R09: 00000000ffffffff [ 515.041351][ T5811] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd73c7d510 [ 515.041358][ T5811] R13: 00007f2bcf42f33b R14: 000000000007dae9 R15: 00007ffd73c7d550 [ 515.041375][ T5811] [ 515.041381][ T5811] gfs2: fsid=syz:syz.0: about to withdraw this file system Warning: Permanently added '[localhost]:34697' (ED25519) to the list of known hosts. executing program executing program [ 516.988295][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 516.991626][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 executing program executing program executing program executing program executing program executing program executing program executing program executing program [ 520.426235][ T9] gfs2: fsid=syz:syz.0: file system withdrawn [ 520.856885][ T6406] loop0: detected capacity change from 0 to 32768 [ 520.890277][ T6406] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 520.915317][ T6406] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 520.956737][ T6406] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 520.973894][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 520.980902][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 521.083470][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 102ms [ 521.095363][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 521.105690][ T6406] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 521.264456][ T6406] gfs2: fsid=syz:syz.0: found 1 quota changes [ 521.304823][ T6406] syz-executor103: attempt to access beyond end of device [ 521.304823][ T6406] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 521.318301][ T6406] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 521.329352][ T6406] syz-executor103: attempt to access beyond end of device [ 521.329352][ T6406] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 521.354184][ T6395] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 521.360736][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz-executor103 Not tainted syzkaller #0 PREEMPT(full) [ 521.360757][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 521.360764][ T6395] Call Trace: [ 521.360772][ T6395] [ 521.360778][ T6395] dump_stack_lvl+0xe8/0x150 [ 521.360858][ T6395] gfs2_withdraw+0xc3/0x1b0 [ 521.360901][ T6395] gfs2_ail1_empty+0x2c5/0x7b0 [ 521.360918][ T6395] gfs2_flush_revokes+0x5c/0x80 [ 521.360927][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 521.360936][ T6395] revoke_lo_before_commit+0x2f/0xea0 [ 521.360944][ T6395] ? __pfx_list_sort+0x10/0x10 [ 521.360954][ T6395] ? do_raw_spin_lock+0x12b/0x2f0 [ 521.360971][ T6395] ? do_raw_spin_unlock+0x4d/0x210 [ 521.360983][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 521.360996][ T6395] __gfs2_log_flush+0xa21/0x1d90 [ 521.361020][ T6395] ? __pfx___gfs2_log_flush+0x10/0x10 [ 521.361034][ T6395] ? down_write+0x16d/0x200 [ 521.361091][ T6395] ? __pfx_down_write+0x10/0x10 [ 521.361110][ T6395] ? call_rcu+0x64b/0x8b0 [ 521.361122][ T6395] gfs2_log_flush+0x34/0x50 [ 521.361139][ T6395] gfs2_kill_sb+0x5c/0x430 [ 521.361159][ T6395] deactivate_locked_super+0xbc/0x130 [ 521.361175][ T6395] cleanup_mnt+0x3d3/0x460 [ 521.361194][ T6395] task_work_run+0x1d9/0x270 [ 521.361212][ T6395] ? __pfx_task_work_run+0x10/0x10 [ 521.361233][ T6395] exit_to_user_mode_loop+0x1fa/0x730 [ 521.361248][ T6395] ? rcu_is_watching+0x15/0xb0 [ 521.361264][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.361275][ T6395] do_syscall_64+0x353/0x580 [ 521.361289][ T6395] ? trace_irq_disable+0x3b/0x140 [ 521.361303][ T6395] ? clear_bhb_loop+0x40/0x90 [ 521.361315][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.361326][ T6395] RIP: 0033:0x7fe0d80f0177 [ 521.361339][ T6395] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 34 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 521.361347][ T6395] RSP: 002b:00007fff3c7f31b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 521.361358][ T6395] RAX: 0000000000000000 RBX: 000000000007efab RCX: 00007fe0d80f0177 [ 521.361365][ T6395] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3c7f3270 [ 521.361370][ T6395] RBP: 00007fff3c7f3270 R08: 00007fff3c7f4270 R09: 00000000ffffffff [ 521.361398][ T6395] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7f42e0 [ 521.361405][ T6395] R13: 000055557ad95760 R14: 431bde82d7b634db R15: 00007fff3c7f4300 [ 521.361422][ T6395] [ 521.361476][ T6395] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 526.666636][ T9] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 527.155671][ T6423] loop0: detected capacity change from 0 to 32768 [ 527.180672][ T6423] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 527.194535][ T6423] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 527.241445][ T6423] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 527.259063][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 527.266268][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 527.303394][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 37ms [ 527.307166][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 527.315328][ T6423] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 527.377185][ T6423] gfs2: fsid=syz:syz.0: found 1 quota changes [ 527.393266][ T6423] syz-executor103: attempt to access beyond end of device [ 527.393266][ T6423] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 527.400819][ T6423] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 527.405776][ T6423] syz-executor103: attempt to access beyond end of device [ 527.405776][ T6423] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 527.424729][ T6395] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 527.431759][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz-executor103 Not tainted syzkaller #0 PREEMPT(full) [ 527.431779][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 527.431785][ T6395] Call Trace: [ 527.431792][ T6395] [ 527.431798][ T6395] dump_stack_lvl+0xe8/0x150 [ 527.431865][ T6395] gfs2_withdraw+0xc3/0x1b0 [ 527.431915][ T6395] gfs2_ail1_empty+0x2c5/0x7b0 [ 527.431939][ T6395] gfs2_flush_revokes+0x5c/0x80 [ 527.431953][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 527.431993][ T6395] revoke_lo_before_commit+0x2f/0xea0 [ 527.432005][ T6395] ? __pfx_list_sort+0x10/0x10 [ 527.432014][ T6395] ? do_raw_spin_lock+0x12b/0x2f0 [ 527.432032][ T6395] ? do_raw_spin_unlock+0x4d/0x210 [ 527.432042][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 527.432055][ T6395] __gfs2_log_flush+0xa21/0x1d90 [ 527.432078][ T6395] ? __pfx___gfs2_log_flush+0x10/0x10 [ 527.432091][ T6395] ? down_write+0x16d/0x200 [ 527.432146][ T6395] ? __pfx_down_write+0x10/0x10 [ 527.432164][ T6395] ? call_rcu+0x64b/0x8b0 [ 527.432176][ T6395] gfs2_log_flush+0x34/0x50 [ 527.432193][ T6395] gfs2_kill_sb+0x5c/0x430 [ 527.432210][ T6395] deactivate_locked_super+0xbc/0x130 [ 527.432226][ T6395] cleanup_mnt+0x3d3/0x460 [ 527.432243][ T6395] task_work_run+0x1d9/0x270 [ 527.432261][ T6395] ? __pfx_task_work_run+0x10/0x10 [ 527.432282][ T6395] exit_to_user_mode_loop+0x1fa/0x730 [ 527.432294][ T6395] ? rcu_is_watching+0x15/0xb0 [ 527.432311][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.432323][ T6395] do_syscall_64+0x353/0x580 [ 527.432337][ T6395] ? trace_irq_disable+0x3b/0x140 [ 527.432351][ T6395] ? clear_bhb_loop+0x40/0x90 [ 527.432364][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.432376][ T6395] RIP: 0033:0x7fe0d80f0177 [ 527.432389][ T6395] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 34 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 527.432398][ T6395] RSP: 002b:00007fff3c7f31b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 527.432433][ T6395] RAX: 0000000000000000 RBX: 0000000000080966 RCX: 00007fe0d80f0177 [ 527.432441][ T6395] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3c7f3270 [ 527.432447][ T6395] RBP: 00007fff3c7f3270 R08: 00007fff3c7f4270 R09: 00000000ffffffff [ 527.432453][ T6395] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7f42e0 [ 527.432460][ T6395] R13: 000055557ad95760 R14: 431bde82d7b634db R15: 00007fff3c7f4300 [ 527.432478][ T6395] [ 527.544909][ T6395] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 532.587109][ T9] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 533.088461][ T6430] loop0: detected capacity change from 0 to 32768 [ 533.124641][ T6430] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 533.137426][ T6430] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 533.174112][ T6430] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 533.189014][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 533.196609][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 533.273252][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 76ms [ 533.281627][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 533.292332][ T6430] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 533.386355][ T6430] gfs2: fsid=syz:syz.0: found 1 quota changes [ 533.397311][ T6430] syz-executor103: attempt to access beyond end of device [ 533.397311][ T6430] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 533.405364][ T6430] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 533.409783][ T6430] syz-executor103: attempt to access beyond end of device [ 533.409783][ T6430] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 533.429422][ T6395] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 533.436085][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz-executor103 Not tainted syzkaller #0 PREEMPT(full) [ 533.436106][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 533.436113][ T6395] Call Trace: [ 533.436119][ T6395] [ 533.436124][ T6395] dump_stack_lvl+0xe8/0x150 [ 533.436222][ T6395] gfs2_withdraw+0xc3/0x1b0 [ 533.436277][ T6395] gfs2_ail1_empty+0x2c5/0x7b0 [ 533.436305][ T6395] gfs2_flush_revokes+0x5c/0x80 [ 533.436319][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 533.436330][ T6395] revoke_lo_before_commit+0x2f/0xea0 [ 533.436342][ T6395] ? __pfx_list_sort+0x10/0x10 [ 533.436354][ T6395] ? do_raw_spin_lock+0x12b/0x2f0 [ 533.436373][ T6395] ? do_raw_spin_unlock+0x4d/0x210 [ 533.436385][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 533.436398][ T6395] __gfs2_log_flush+0xa21/0x1d90 [ 533.436414][ T6395] ? __pfx___gfs2_log_flush+0x10/0x10 [ 533.436423][ T6395] ? down_write+0x16d/0x200 [ 533.436463][ T6395] ? __pfx_down_write+0x10/0x10 [ 533.436475][ T6395] ? call_rcu+0x64b/0x8b0 [ 533.436484][ T6395] gfs2_log_flush+0x34/0x50 [ 533.436497][ T6395] gfs2_kill_sb+0x5c/0x430 [ 533.436514][ T6395] deactivate_locked_super+0xbc/0x130 [ 533.436529][ T6395] cleanup_mnt+0x3d3/0x460 [ 533.436547][ T6395] task_work_run+0x1d9/0x270 [ 533.436567][ T6395] ? __pfx_task_work_run+0x10/0x10 [ 533.436586][ T6395] exit_to_user_mode_loop+0x1fa/0x730 [ 533.436601][ T6395] ? rcu_is_watching+0x15/0xb0 [ 533.436619][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.436632][ T6395] do_syscall_64+0x353/0x580 [ 533.436646][ T6395] ? trace_irq_disable+0x3b/0x140 [ 533.436662][ T6395] ? clear_bhb_loop+0x40/0x90 [ 533.436677][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.436689][ T6395] RIP: 0033:0x7fe0d80f0177 [ 533.436702][ T6395] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 34 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 533.436711][ T6395] RSP: 002b:00007fff3c7f31b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 533.436725][ T6395] RAX: 0000000000000000 RBX: 0000000000082080 RCX: 00007fe0d80f0177 [ 533.436733][ T6395] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3c7f3270 [ 533.436739][ T6395] RBP: 00007fff3c7f3270 R08: 00007fff3c7f4270 R09: 00000000ffffffff [ 533.436747][ T6395] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7f42e0 [ 533.436753][ T6395] R13: 000055557ad95760 R14: 431bde82d7b634db R15: 00007fff3c7f4300 [ 533.436772][ T6395] [ 533.437076][ T6395] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 538.586081][ T9] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 539.072153][ T6437] loop0: detected capacity change from 0 to 32768 [ 539.105580][ T6437] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 539.118459][ T6437] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 539.151852][ T6437] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 539.166525][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 539.170347][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 539.238020][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 67ms [ 539.243421][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 539.248192][ T6437] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 539.307429][ T6437] gfs2: fsid=syz:syz.0: found 1 quota changes [ 539.322391][ T6437] syz-executor103: attempt to access beyond end of device [ 539.322391][ T6437] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 539.330675][ T6437] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 539.338329][ T6437] syz-executor103: attempt to access beyond end of device [ 539.338329][ T6437] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 539.357226][ T6395] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 539.364907][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz-executor103 Not tainted syzkaller #0 PREEMPT(full) [ 539.364927][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 539.364933][ T6395] Call Trace: [ 539.364937][ T6395] [ 539.364942][ T6395] dump_stack_lvl+0xe8/0x150 [ 539.365005][ T6395] gfs2_withdraw+0xc3/0x1b0 [ 539.365055][ T6395] gfs2_ail1_empty+0x2c5/0x7b0 [ 539.365080][ T6395] gfs2_flush_revokes+0x5c/0x80 [ 539.365094][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 539.365105][ T6395] revoke_lo_before_commit+0x2f/0xea0 [ 539.365116][ T6395] ? __pfx_list_sort+0x10/0x10 [ 539.365126][ T6395] ? do_raw_spin_lock+0x12b/0x2f0 [ 539.365144][ T6395] ? do_raw_spin_unlock+0x4d/0x210 [ 539.365155][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 539.365168][ T6395] __gfs2_log_flush+0xa21/0x1d90 [ 539.365190][ T6395] ? __pfx___gfs2_log_flush+0x10/0x10 [ 539.365203][ T6395] ? down_write+0x16d/0x200 [ 539.365252][ T6395] ? __pfx_down_write+0x10/0x10 [ 539.365269][ T6395] ? call_rcu+0x64b/0x8b0 [ 539.365282][ T6395] gfs2_log_flush+0x34/0x50 [ 539.365297][ T6395] gfs2_kill_sb+0x5c/0x430 [ 539.365314][ T6395] deactivate_locked_super+0xbc/0x130 [ 539.365329][ T6395] cleanup_mnt+0x3d3/0x460 [ 539.365346][ T6395] task_work_run+0x1d9/0x270 [ 539.365364][ T6395] ? __pfx_task_work_run+0x10/0x10 [ 539.365385][ T6395] exit_to_user_mode_loop+0x1fa/0x730 [ 539.365399][ T6395] ? rcu_is_watching+0x15/0xb0 [ 539.365416][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.365427][ T6395] do_syscall_64+0x353/0x580 [ 539.365439][ T6395] ? trace_irq_disable+0x3b/0x140 [ 539.365452][ T6395] ? clear_bhb_loop+0x40/0x90 [ 539.365471][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.365481][ T6395] RIP: 0033:0x7fe0d80f0177 [ 539.365495][ T6395] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 34 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 539.365504][ T6395] RSP: 002b:00007fff3c7f31b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 539.365515][ T6395] RAX: 0000000000000000 RBX: 00000000000837e9 RCX: 00007fe0d80f0177 [ 539.365522][ T6395] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3c7f3270 [ 539.365528][ T6395] RBP: 00007fff3c7f3270 R08: 00007fff3c7f4270 R09: 00000000ffffffff [ 539.365535][ T6395] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7f42e0 [ 539.365542][ T6395] R13: 000055557ad95760 R14: 431bde82d7b634db R15: 00007fff3c7f4300 [ 539.365559][ T6395] [ 539.365564][ T6395] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 544.505955][ T9] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 545.007188][ T6444] loop0: detected capacity change from 0 to 32768 [ 545.034915][ T6444] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 545.046687][ T6444] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 545.084018][ T6444] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 545.096213][ T5525] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 545.099441][ T5525] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 545.169926][ T5525] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 70ms [ 545.174714][ T5525] gfs2: fsid=syz:syz.0: jid=0: Done [ 545.179514][ T6444] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 545.254339][ T6444] gfs2: fsid=syz:syz.0: found 1 quota changes [ 545.267292][ T6444] syz-executor103: attempt to access beyond end of device [ 545.267292][ T6444] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 545.275385][ T6444] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 545.280259][ T6444] syz-executor103: attempt to access beyond end of device [ 545.280259][ T6444] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 545.298484][ T6395] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 545.305191][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz-executor103 Not tainted syzkaller #0 PREEMPT(full) [ 545.305213][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 545.305221][ T6395] Call Trace: [ 545.305252][ T6395] [ 545.305259][ T6395] dump_stack_lvl+0xe8/0x150 [ 545.305344][ T6395] gfs2_withdraw+0xc3/0x1b0 [ 545.305405][ T6395] gfs2_ail1_empty+0x2c5/0x7b0 [ 545.305432][ T6395] gfs2_flush_revokes+0x5c/0x80 [ 545.305448][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 545.305462][ T6395] revoke_lo_before_commit+0x2f/0xea0 [ 545.305474][ T6395] ? __pfx_list_sort+0x10/0x10 [ 545.305486][ T6395] ? do_raw_spin_lock+0x12b/0x2f0 [ 545.305509][ T6395] ? do_raw_spin_unlock+0x4d/0x210 [ 545.305523][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 545.305538][ T6395] __gfs2_log_flush+0xa21/0x1d90 [ 545.305563][ T6395] ? __pfx___gfs2_log_flush+0x10/0x10 [ 545.305578][ T6395] ? down_write+0x16d/0x200 [ 545.305635][ T6395] ? __pfx_down_write+0x10/0x10 [ 545.305658][ T6395] ? call_rcu+0x64b/0x8b0 [ 545.305673][ T6395] gfs2_log_flush+0x34/0x50 [ 545.305686][ T6395] gfs2_kill_sb+0x5c/0x430 [ 545.305705][ T6395] deactivate_locked_super+0xbc/0x130 [ 545.305723][ T6395] cleanup_mnt+0x3d3/0x460 [ 545.305743][ T6395] task_work_run+0x1d9/0x270 [ 545.305763][ T6395] ? __pfx_task_work_run+0x10/0x10 [ 545.305788][ T6395] exit_to_user_mode_loop+0x1fa/0x730 [ 545.305803][ T6395] ? rcu_is_watching+0x15/0xb0 [ 545.305823][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.305838][ T6395] do_syscall_64+0x353/0x580 [ 545.305853][ T6395] ? trace_irq_disable+0x3b/0x140 [ 545.305869][ T6395] ? clear_bhb_loop+0x40/0x90 [ 545.305885][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.305898][ T6395] RIP: 0033:0x7fe0d80f0177 [ 545.305914][ T6395] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 34 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 545.305925][ T6395] RSP: 002b:00007fff3c7f31b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 545.305939][ T6395] RAX: 0000000000000000 RBX: 0000000000084f0b RCX: 00007fe0d80f0177 [ 545.305947][ T6395] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3c7f3270 [ 545.305954][ T6395] RBP: 00007fff3c7f3270 R08: 00007fff3c7f4270 R09: 00000000ffffffff [ 545.305962][ T6395] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7f42e0 [ 545.305971][ T6395] R13: 000055557ad95760 R14: 431bde82d7b634db R15: 00007fff3c7f4300 [ 545.305990][ T6395] [ 545.306373][ T6395] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 550.507133][ T5525] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 551.025319][ T6452] loop0: detected capacity change from 0 to 32768 [ 551.066617][ T6452] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 551.078143][ T6452] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 551.100744][ T6452] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 551.117512][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 551.121555][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 551.216659][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 95ms [ 551.223534][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 551.231363][ T6452] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 551.351424][ T6452] gfs2: fsid=syz:syz.0: found 1 quota changes [ 551.364382][ T6452] syz-executor103: attempt to access beyond end of device [ 551.364382][ T6452] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 551.370934][ T6452] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 551.375865][ T6452] syz-executor103: attempt to access beyond end of device [ 551.375865][ T6452] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 551.393648][ T6395] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 551.400800][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz-executor103 Not tainted syzkaller #0 PREEMPT(full) [ 551.400819][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 551.400827][ T6395] Call Trace: [ 551.400836][ T6395] [ 551.400842][ T6395] dump_stack_lvl+0xe8/0x150 [ 551.400915][ T6395] gfs2_withdraw+0xc3/0x1b0 [ 551.400967][ T6395] gfs2_ail1_empty+0x2c5/0x7b0 [ 551.400994][ T6395] gfs2_flush_revokes+0x5c/0x80 [ 551.401008][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 551.401031][ T6395] revoke_lo_before_commit+0x2f/0xea0 [ 551.401044][ T6395] ? __pfx_list_sort+0x10/0x10 [ 551.401054][ T6395] ? do_raw_spin_lock+0x12b/0x2f0 [ 551.401071][ T6395] ? do_raw_spin_unlock+0x4d/0x210 [ 551.401082][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 551.401096][ T6395] __gfs2_log_flush+0xa21/0x1d90 [ 551.401121][ T6395] ? __pfx___gfs2_log_flush+0x10/0x10 [ 551.401134][ T6395] ? down_write+0x16d/0x200 [ 551.401181][ T6395] ? __pfx_down_write+0x10/0x10 [ 551.401200][ T6395] ? call_rcu+0x64b/0x8b0 [ 551.401213][ T6395] gfs2_log_flush+0x34/0x50 [ 551.401229][ T6395] gfs2_kill_sb+0x5c/0x430 [ 551.401247][ T6395] deactivate_locked_super+0xbc/0x130 [ 551.401263][ T6395] cleanup_mnt+0x3d3/0x460 [ 551.401281][ T6395] task_work_run+0x1d9/0x270 [ 551.401300][ T6395] ? __pfx_task_work_run+0x10/0x10 [ 551.401319][ T6395] exit_to_user_mode_loop+0x1fa/0x730 [ 551.401334][ T6395] ? rcu_is_watching+0x15/0xb0 [ 551.401351][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.401364][ T6395] do_syscall_64+0x353/0x580 [ 551.401377][ T6395] ? trace_irq_disable+0x3b/0x140 [ 551.401388][ T6395] ? clear_bhb_loop+0x40/0x90 [ 551.401400][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.401410][ T6395] RIP: 0033:0x7fe0d80f0177 [ 551.401423][ T6395] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 34 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 551.401432][ T6395] RSP: 002b:00007fff3c7f31b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 551.401447][ T6395] RAX: 0000000000000000 RBX: 000000000008668f RCX: 00007fe0d80f0177 [ 551.401454][ T6395] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3c7f3270 [ 551.401461][ T6395] RBP: 00007fff3c7f3270 R08: 00007fff3c7f4270 R09: 00000000ffffffff [ 551.401468][ T6395] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7f42e0 [ 551.401475][ T6395] R13: 000055557ad95760 R14: 431bde82d7b634db R15: 00007fff3c7f4300 [ 551.401494][ T6395] [ 551.401498][ T6395] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 556.586312][ T10] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 557.044027][ T6458] loop0: detected capacity change from 0 to 32768 [ 557.071292][ T6458] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 557.085674][ T6458] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 557.115529][ T6458] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 557.128044][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 557.133144][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 557.196550][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 63ms [ 557.206268][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 557.213314][ T6458] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 557.319402][ T6458] gfs2: fsid=syz:syz.0: found 1 quota changes [ 557.329423][ T6458] syz-executor103: attempt to access beyond end of device [ 557.329423][ T6458] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 557.338720][ T6458] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 557.346304][ T6458] syz-executor103: attempt to access beyond end of device [ 557.346304][ T6458] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 557.366401][ T6395] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 557.373668][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz-executor103 Not tainted syzkaller #0 PREEMPT(full) [ 557.373688][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 557.373695][ T6395] Call Trace: [ 557.373699][ T6395] [ 557.373704][ T6395] dump_stack_lvl+0xe8/0x150 [ 557.373780][ T6395] gfs2_withdraw+0xc3/0x1b0 [ 557.373849][ T6395] gfs2_ail1_empty+0x2c5/0x7b0 [ 557.373871][ T6395] gfs2_flush_revokes+0x5c/0x80 [ 557.373885][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 557.373897][ T6395] revoke_lo_before_commit+0x2f/0xea0 [ 557.373908][ T6395] ? __pfx_list_sort+0x10/0x10 [ 557.373918][ T6395] ? do_raw_spin_lock+0x12b/0x2f0 [ 557.373937][ T6395] ? do_raw_spin_unlock+0x4d/0x210 [ 557.373949][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 557.373962][ T6395] __gfs2_log_flush+0xa21/0x1d90 [ 557.373983][ T6395] ? __pfx___gfs2_log_flush+0x10/0x10 [ 557.373993][ T6395] ? down_write+0x16d/0x200 [ 557.374043][ T6395] ? __pfx_down_write+0x10/0x10 [ 557.374065][ T6395] ? call_rcu+0x64b/0x8b0 [ 557.374077][ T6395] gfs2_log_flush+0x34/0x50 [ 557.374092][ T6395] gfs2_kill_sb+0x5c/0x430 [ 557.374108][ T6395] deactivate_locked_super+0xbc/0x130 [ 557.374122][ T6395] cleanup_mnt+0x3d3/0x460 [ 557.374171][ T6395] task_work_run+0x1d9/0x270 [ 557.374190][ T6395] ? __pfx_task_work_run+0x10/0x10 [ 557.374214][ T6395] exit_to_user_mode_loop+0x1fa/0x730 [ 557.374228][ T6395] ? rcu_is_watching+0x15/0xb0 [ 557.374245][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.374257][ T6395] do_syscall_64+0x353/0x580 [ 557.374274][ T6395] ? trace_irq_disable+0x3b/0x140 [ 557.374292][ T6395] ? clear_bhb_loop+0x40/0x90 [ 557.374305][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.374316][ T6395] RIP: 0033:0x7fe0d80f0177 [ 557.374333][ T6395] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 34 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 557.374342][ T6395] RSP: 002b:00007fff3c7f31b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 557.374356][ T6395] RAX: 0000000000000000 RBX: 0000000000087e29 RCX: 00007fe0d80f0177 [ 557.374363][ T6395] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3c7f3270 [ 557.374369][ T6395] RBP: 00007fff3c7f3270 R08: 00007fff3c7f4270 R09: 00000000ffffffff [ 557.374377][ T6395] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7f42e0 [ 557.374382][ T6395] R13: 000055557ad95760 R14: 431bde82d7b634db R15: 00007fff3c7f4300 [ 557.374398][ T6395] [ 557.374684][ T6395] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 562.505645][ T10] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 562.971867][ T6465] loop0: detected capacity change from 0 to 32768 [ 562.991845][ T6465] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 563.009522][ T6465] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 563.044611][ T6465] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 563.060691][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 563.074583][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 563.151266][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 76ms [ 563.159436][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 563.166602][ T6465] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 563.251524][ T6465] gfs2: fsid=syz:syz.0: found 1 quota changes [ 563.261998][ T6465] syz-executor103: attempt to access beyond end of device [ 563.261998][ T6465] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 563.269747][ T6465] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 563.275472][ T6465] syz-executor103: attempt to access beyond end of device [ 563.275472][ T6465] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 563.296947][ T6395] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 563.304173][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz-executor103 Not tainted syzkaller #0 PREEMPT(full) [ 563.304191][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 563.304198][ T6395] Call Trace: [ 563.304203][ T6395] [ 563.304208][ T6395] dump_stack_lvl+0xe8/0x150 [ 563.304295][ T6395] gfs2_withdraw+0xc3/0x1b0 [ 563.304345][ T6395] gfs2_ail1_empty+0x2c5/0x7b0 [ 563.304369][ T6395] gfs2_flush_revokes+0x5c/0x80 [ 563.304383][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 563.304395][ T6395] revoke_lo_before_commit+0x2f/0xea0 [ 563.304406][ T6395] ? __pfx_list_sort+0x10/0x10 [ 563.304417][ T6395] ? do_raw_spin_lock+0x12b/0x2f0 [ 563.304433][ T6395] ? do_raw_spin_unlock+0x4d/0x210 [ 563.304443][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 563.304456][ T6395] __gfs2_log_flush+0xa21/0x1d90 [ 563.304476][ T6395] ? __pfx___gfs2_log_flush+0x10/0x10 [ 563.304489][ T6395] ? down_write+0x16d/0x200 [ 563.304537][ T6395] ? __pfx_down_write+0x10/0x10 [ 563.304554][ T6395] ? call_rcu+0x64b/0x8b0 [ 563.304567][ T6395] gfs2_log_flush+0x34/0x50 [ 563.304583][ T6395] gfs2_kill_sb+0x5c/0x430 [ 563.304601][ T6395] deactivate_locked_super+0xbc/0x130 [ 563.304617][ T6395] cleanup_mnt+0x3d3/0x460 [ 563.304634][ T6395] task_work_run+0x1d9/0x270 [ 563.304650][ T6395] ? __pfx_task_work_run+0x10/0x10 [ 563.304670][ T6395] exit_to_user_mode_loop+0x1fa/0x730 [ 563.304683][ T6395] ? rcu_is_watching+0x15/0xb0 [ 563.304699][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.304711][ T6395] do_syscall_64+0x353/0x580 [ 563.304724][ T6395] ? trace_irq_disable+0x3b/0x140 [ 563.304737][ T6395] ? clear_bhb_loop+0x40/0x90 [ 563.304750][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.304760][ T6395] RIP: 0033:0x7fe0d80f0177 [ 563.304772][ T6395] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 34 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 563.304781][ T6395] RSP: 002b:00007fff3c7f31b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 563.304794][ T6395] RAX: 0000000000000000 RBX: 000000000008954f RCX: 00007fe0d80f0177 [ 563.304800][ T6395] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3c7f3270 [ 563.304806][ T6395] RBP: 00007fff3c7f3270 R08: 00007fff3c7f4270 R09: 00000000ffffffff [ 563.304813][ T6395] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7f42e0 [ 563.304820][ T6395] R13: 000055557ad95760 R14: 431bde82d7b634db R15: 00007fff3c7f4300 [ 563.304838][ T6395] [ 563.305100][ T6395] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 568.508040][ T10] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 568.990379][ T6472] loop0: detected capacity change from 0 to 32768 [ 569.020143][ T6472] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 569.032190][ T6472] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 569.068821][ T6472] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 569.078698][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 569.087000][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 569.171769][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 84ms [ 569.180989][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 569.189188][ T6472] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 569.287210][ T6472] gfs2: fsid=syz:syz.0: found 1 quota changes [ 569.301885][ T6472] syz-executor103: attempt to access beyond end of device [ 569.301885][ T6472] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 569.309414][ T6472] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 569.314398][ T6472] syz-executor103: attempt to access beyond end of device [ 569.314398][ T6472] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 569.335164][ T6395] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 569.342009][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz-executor103 Not tainted syzkaller #0 PREEMPT(full) [ 569.342027][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 569.342062][ T6395] Call Trace: [ 569.342067][ T6395] [ 569.342072][ T6395] dump_stack_lvl+0xe8/0x150 [ 569.342139][ T6395] gfs2_withdraw+0xc3/0x1b0 [ 569.342189][ T6395] gfs2_ail1_empty+0x2c5/0x7b0 [ 569.342214][ T6395] gfs2_flush_revokes+0x5c/0x80 [ 569.342227][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 569.342268][ T6395] revoke_lo_before_commit+0x2f/0xea0 [ 569.342280][ T6395] ? __pfx_list_sort+0x10/0x10 [ 569.342291][ T6395] ? do_raw_spin_lock+0x12b/0x2f0 [ 569.342309][ T6395] ? do_raw_spin_unlock+0x4d/0x210 [ 569.342320][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 569.342332][ T6395] __gfs2_log_flush+0xa21/0x1d90 [ 569.342353][ T6395] ? __pfx___gfs2_log_flush+0x10/0x10 [ 569.342366][ T6395] ? down_write+0x16d/0x200 [ 569.342428][ T6395] ? __pfx_down_write+0x10/0x10 [ 569.342439][ T6395] ? call_rcu+0x64b/0x8b0 [ 569.342447][ T6395] gfs2_log_flush+0x34/0x50 [ 569.342457][ T6395] gfs2_kill_sb+0x5c/0x430 [ 569.342468][ T6395] deactivate_locked_super+0xbc/0x130 [ 569.342481][ T6395] cleanup_mnt+0x3d3/0x460 [ 569.342497][ T6395] task_work_run+0x1d9/0x270 [ 569.342515][ T6395] ? __pfx_task_work_run+0x10/0x10 [ 569.342537][ T6395] exit_to_user_mode_loop+0x1fa/0x730 [ 569.342550][ T6395] ? rcu_is_watching+0x15/0xb0 [ 569.342567][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.342578][ T6395] do_syscall_64+0x353/0x580 [ 569.342593][ T6395] ? trace_irq_disable+0x3b/0x140 [ 569.342609][ T6395] ? clear_bhb_loop+0x40/0x90 [ 569.342621][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.342631][ T6395] RIP: 0033:0x7fe0d80f0177 [ 569.342644][ T6395] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 34 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 569.342654][ T6395] RSP: 002b:00007fff3c7f31b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 569.342667][ T6395] RAX: 0000000000000000 RBX: 000000000008acc6 RCX: 00007fe0d80f0177 [ 569.342674][ T6395] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3c7f3270 [ 569.342681][ T6395] RBP: 00007fff3c7f3270 R08: 00007fff3c7f4270 R09: 00000000ffffffff [ 569.342687][ T6395] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7f42e0 [ 569.342693][ T6395] R13: 000055557ad95760 R14: 431bde82d7b634db R15: 00007fff3c7f4300 [ 569.342711][ T6395] [ 569.454602][ T6395] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 574.506264][ T10] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 574.997200][ T6479] loop0: detected capacity change from 0 to 32768 [ 575.029596][ T6479] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 575.044332][ T6479] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 575.084105][ T6479] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 575.097084][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 575.103275][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 575.157665][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 54ms [ 575.162391][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 575.168919][ T6479] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 575.227276][ T6479] gfs2: fsid=syz:syz.0: found 1 quota changes [ 575.240115][ T6479] syz-executor103: attempt to access beyond end of device [ 575.240115][ T6479] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 575.248294][ T6479] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 575.253039][ T6479] syz-executor103: attempt to access beyond end of device [ 575.253039][ T6479] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 575.271697][ T6395] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 575.278059][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz-executor103 Not tainted syzkaller #0 PREEMPT(full) [ 575.278078][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 575.278085][ T6395] Call Trace: [ 575.278089][ T6395] [ 575.278094][ T6395] dump_stack_lvl+0xe8/0x150 [ 575.278171][ T6395] gfs2_withdraw+0xc3/0x1b0 [ 575.278214][ T6395] gfs2_ail1_empty+0x2c5/0x7b0 [ 575.278236][ T6395] gfs2_flush_revokes+0x5c/0x80 [ 575.278249][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 575.278268][ T6395] revoke_lo_before_commit+0x2f/0xea0 [ 575.278279][ T6395] ? __pfx_list_sort+0x10/0x10 [ 575.278290][ T6395] ? do_raw_spin_lock+0x12b/0x2f0 [ 575.278308][ T6395] ? do_raw_spin_unlock+0x4d/0x210 [ 575.278320][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 575.278332][ T6395] __gfs2_log_flush+0xa21/0x1d90 [ 575.278354][ T6395] ? __pfx___gfs2_log_flush+0x10/0x10 [ 575.278366][ T6395] ? down_write+0x16d/0x200 [ 575.278415][ T6395] ? __pfx_down_write+0x10/0x10 [ 575.278433][ T6395] ? call_rcu+0x64b/0x8b0 [ 575.278444][ T6395] gfs2_log_flush+0x34/0x50 [ 575.278459][ T6395] gfs2_kill_sb+0x5c/0x430 [ 575.278497][ T6395] deactivate_locked_super+0xbc/0x130 [ 575.278512][ T6395] cleanup_mnt+0x3d3/0x460 [ 575.278528][ T6395] task_work_run+0x1d9/0x270 [ 575.278547][ T6395] ? __pfx_task_work_run+0x10/0x10 [ 575.278567][ T6395] exit_to_user_mode_loop+0x1fa/0x730 [ 575.278581][ T6395] ? rcu_is_watching+0x15/0xb0 [ 575.278596][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.278607][ T6395] do_syscall_64+0x353/0x580 [ 575.278621][ T6395] ? trace_irq_disable+0x3b/0x140 [ 575.278635][ T6395] ? clear_bhb_loop+0x40/0x90 [ 575.278649][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.278660][ T6395] RIP: 0033:0x7fe0d80f0177 [ 575.278673][ T6395] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 34 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 575.278681][ T6395] RSP: 002b:00007fff3c7f31b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 575.278693][ T6395] RAX: 0000000000000000 RBX: 000000000008c42e RCX: 00007fe0d80f0177 [ 575.278701][ T6395] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3c7f3270 [ 575.278707][ T6395] RBP: 00007fff3c7f3270 R08: 00007fff3c7f4270 R09: 00000000ffffffff [ 575.278713][ T6395] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7f42e0 [ 575.278719][ T6395] R13: 000055557ad95760 R14: 431bde82d7b634db R15: 00007fff3c7f4300 [ 575.278736][ T6395] [ 575.278792][ T6395] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 578.425044][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 578.428650][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 580.425539][ T9] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 580.896746][ T6487] loop0: detected capacity change from 0 to 32768 [ 580.932149][ T6487] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 580.945400][ T6487] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 580.967596][ T6487] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 580.980237][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 580.988174][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 581.060430][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 72ms [ 581.071647][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 581.080163][ T6487] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 581.169138][ T6487] gfs2: fsid=syz:syz.0: found 1 quota changes [ 581.180018][ T6487] syz-executor103: attempt to access beyond end of device [ 581.180018][ T6487] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 581.187087][ T6487] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 581.191430][ T6487] syz-executor103: attempt to access beyond end of device [ 581.191430][ T6487] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 581.213989][ T6395] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 581.220319][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz-executor103 Not tainted syzkaller #0 PREEMPT(full) [ 581.220343][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 581.220350][ T6395] Call Trace: [ 581.220359][ T6395] [ 581.220366][ T6395] dump_stack_lvl+0xe8/0x150 [ 581.220446][ T6395] gfs2_withdraw+0xc3/0x1b0 [ 581.220505][ T6395] gfs2_ail1_empty+0x2c5/0x7b0 [ 581.220536][ T6395] gfs2_flush_revokes+0x5c/0x80 [ 581.220554][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 581.220575][ T6395] revoke_lo_before_commit+0x2f/0xea0 [ 581.220594][ T6395] ? __pfx_list_sort+0x10/0x10 [ 581.220606][ T6395] ? do_raw_spin_lock+0x12b/0x2f0 [ 581.220632][ T6395] ? do_raw_spin_unlock+0x4d/0x210 [ 581.220655][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 581.220673][ T6395] __gfs2_log_flush+0xa21/0x1d90 [ 581.220701][ T6395] ? __pfx___gfs2_log_flush+0x10/0x10 [ 581.220717][ T6395] ? down_write+0x16d/0x200 [ 581.220857][ T6395] ? __pfx_down_write+0x10/0x10 [ 581.220880][ T6395] ? call_rcu+0x64b/0x8b0 [ 581.220894][ T6395] gfs2_log_flush+0x34/0x50 [ 581.220918][ T6395] gfs2_kill_sb+0x5c/0x430 [ 581.220943][ T6395] deactivate_locked_super+0xbc/0x130 [ 581.220981][ T6395] cleanup_mnt+0x3d3/0x460 [ 581.221007][ T6395] task_work_run+0x1d9/0x270 [ 581.221031][ T6395] ? __pfx_task_work_run+0x10/0x10 [ 581.221059][ T6395] exit_to_user_mode_loop+0x1fa/0x730 [ 581.221075][ T6395] ? rcu_is_watching+0x15/0xb0 [ 581.221094][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.221108][ T6395] do_syscall_64+0x353/0x580 [ 581.221124][ T6395] ? trace_irq_disable+0x3b/0x140 [ 581.221139][ T6395] ? clear_bhb_loop+0x40/0x90 [ 581.221154][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.221168][ T6395] RIP: 0033:0x7fe0d80f0177 [ 581.221185][ T6395] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 34 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 581.221198][ T6395] RSP: 002b:00007fff3c7f31b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 581.221214][ T6395] RAX: 0000000000000000 RBX: 000000000008db54 RCX: 00007fe0d80f0177 [ 581.221225][ T6395] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3c7f3270 [ 581.221232][ T6395] RBP: 00007fff3c7f3270 R08: 00007fff3c7f4270 R09: 00000000ffffffff [ 581.221241][ T6395] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7f42e0 [ 581.221248][ T6395] R13: 000055557ad95760 R14: 431bde82d7b634db R15: 00007fff3c7f4300 [ 581.221269][ T6395] [ 581.221343][ T6395] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 586.426442][ T9] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 586.932237][ T6495] loop0: detected capacity change from 0 to 32768 [ 586.951851][ T6495] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 586.968939][ T6495] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 587.000857][ T6495] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 587.018687][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 587.023231][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 587.093364][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 70ms [ 587.102103][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 587.109771][ T6495] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 587.219287][ T6495] gfs2: fsid=syz:syz.0: found 1 quota changes [ 587.231868][ T6495] syz-executor103: attempt to access beyond end of device [ 587.231868][ T6495] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 587.240264][ T6495] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 587.246505][ T6495] syz-executor103: attempt to access beyond end of device [ 587.246505][ T6495] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 587.265758][ T6395] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 587.273091][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz-executor103 Not tainted syzkaller #0 PREEMPT(full) [ 587.273110][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 587.273116][ T6395] Call Trace: [ 587.273121][ T6395] [ 587.273126][ T6395] dump_stack_lvl+0xe8/0x150 [ 587.273213][ T6395] gfs2_withdraw+0xc3/0x1b0 [ 587.273263][ T6395] gfs2_ail1_empty+0x2c5/0x7b0 [ 587.273289][ T6395] gfs2_flush_revokes+0x5c/0x80 [ 587.273303][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 587.273321][ T6395] revoke_lo_before_commit+0x2f/0xea0 [ 587.273332][ T6395] ? __pfx_list_sort+0x10/0x10 [ 587.273344][ T6395] ? do_raw_spin_lock+0x12b/0x2f0 [ 587.273361][ T6395] ? do_raw_spin_unlock+0x4d/0x210 [ 587.273373][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 587.273385][ T6395] __gfs2_log_flush+0xa21/0x1d90 [ 587.273407][ T6395] ? __pfx___gfs2_log_flush+0x10/0x10 [ 587.273421][ T6395] ? down_write+0x16d/0x200 [ 587.273469][ T6395] ? __pfx_down_write+0x10/0x10 [ 587.273485][ T6395] ? call_rcu+0x64b/0x8b0 [ 587.273498][ T6395] gfs2_log_flush+0x34/0x50 [ 587.273513][ T6395] gfs2_kill_sb+0x5c/0x430 [ 587.273529][ T6395] deactivate_locked_super+0xbc/0x130 [ 587.273544][ T6395] cleanup_mnt+0x3d3/0x460 [ 587.273561][ T6395] task_work_run+0x1d9/0x270 [ 587.273580][ T6395] ? __pfx_task_work_run+0x10/0x10 [ 587.273601][ T6395] exit_to_user_mode_loop+0x1fa/0x730 [ 587.273614][ T6395] ? rcu_is_watching+0x15/0xb0 [ 587.273630][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.273641][ T6395] do_syscall_64+0x353/0x580 [ 587.273654][ T6395] ? trace_irq_disable+0x3b/0x140 [ 587.273667][ T6395] ? clear_bhb_loop+0x40/0x90 [ 587.273680][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.273691][ T6395] RIP: 0033:0x7fe0d80f0177 [ 587.273703][ T6395] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 34 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 587.273720][ T6395] RSP: 002b:00007fff3c7f31b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 587.273733][ T6395] RAX: 0000000000000000 RBX: 000000000008f2be RCX: 00007fe0d80f0177 [ 587.273741][ T6395] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3c7f3270 [ 587.273747][ T6395] RBP: 00007fff3c7f3270 R08: 00007fff3c7f4270 R09: 00000000ffffffff [ 587.273754][ T6395] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7f42e0 [ 587.273760][ T6395] R13: 000055557ad95760 R14: 431bde82d7b634db R15: 00007fff3c7f4300 [ 587.273775][ T6395] [ 587.274087][ T6395] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 592.425740][ T9] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 592.912263][ T6507] loop0: detected capacity change from 0 to 32768 [ 592.939971][ T6507] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 592.955974][ T6507] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 592.984270][ T6507] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 592.995294][ T5525] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 593.000554][ T5525] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 593.073468][ T5525] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 72ms [ 593.081599][ T5525] gfs2: fsid=syz:syz.0: jid=0: Done [ 593.090032][ T6507] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 593.179904][ T6507] gfs2: fsid=syz:syz.0: found 1 quota changes [ 593.188465][ T6507] syz-executor103: attempt to access beyond end of device [ 593.188465][ T6507] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 593.198288][ T6507] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 593.204495][ T6507] syz-executor103: attempt to access beyond end of device [ 593.204495][ T6507] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 593.222422][ T6395] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 593.229263][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz-executor103 Not tainted syzkaller #0 PREEMPT(full) [ 593.229275][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 593.229281][ T6395] Call Trace: [ 593.229287][ T6395] [ 593.229291][ T6395] dump_stack_lvl+0xe8/0x150 [ 593.229354][ T6395] gfs2_withdraw+0xc3/0x1b0 [ 593.229403][ T6395] gfs2_ail1_empty+0x2c5/0x7b0 [ 593.229430][ T6395] gfs2_flush_revokes+0x5c/0x80 [ 593.229443][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 593.229451][ T6395] revoke_lo_before_commit+0x2f/0xea0 [ 593.229459][ T6395] ? __pfx_list_sort+0x10/0x10 [ 593.229466][ T6395] ? do_raw_spin_lock+0x12b/0x2f0 [ 593.229478][ T6395] ? do_raw_spin_unlock+0x4d/0x210 [ 593.229485][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 593.229493][ T6395] __gfs2_log_flush+0xa21/0x1d90 [ 593.229507][ T6395] ? __pfx___gfs2_log_flush+0x10/0x10 [ 593.229516][ T6395] ? down_write+0x16d/0x200 [ 593.229555][ T6395] ? __pfx_down_write+0x10/0x10 [ 593.229567][ T6395] ? call_rcu+0x64b/0x8b0 [ 593.229575][ T6395] gfs2_log_flush+0x34/0x50 [ 593.229585][ T6395] gfs2_kill_sb+0x5c/0x430 [ 593.229597][ T6395] deactivate_locked_super+0xbc/0x130 [ 593.229607][ T6395] cleanup_mnt+0x3d3/0x460 [ 593.229619][ T6395] task_work_run+0x1d9/0x270 [ 593.229633][ T6395] ? __pfx_task_work_run+0x10/0x10 [ 593.229646][ T6395] exit_to_user_mode_loop+0x1fa/0x730 [ 593.229656][ T6395] ? rcu_is_watching+0x15/0xb0 [ 593.229668][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.229675][ T6395] do_syscall_64+0x353/0x580 [ 593.229685][ T6395] ? trace_irq_disable+0x3b/0x140 [ 593.229694][ T6395] ? clear_bhb_loop+0x40/0x90 [ 593.229703][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.229710][ T6395] RIP: 0033:0x7fe0d80f0177 [ 593.229720][ T6395] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 34 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 593.229731][ T6395] RSP: 002b:00007fff3c7f31b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 593.229740][ T6395] RAX: 0000000000000000 RBX: 0000000000090a40 RCX: 00007fe0d80f0177 [ 593.229745][ T6395] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3c7f3270 [ 593.229749][ T6395] RBP: 00007fff3c7f3270 R08: 00007fff3c7f4270 R09: 00000000ffffffff [ 593.229754][ T6395] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7f42e0 [ 593.229758][ T6395] R13: 000055557ad95760 R14: 431bde82d7b634db R15: 00007fff3c7f4300 [ 593.229769][ T6395] [ 593.229773][ T6395] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 598.426053][ T9] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 598.886143][ T6514] loop0: detected capacity change from 0 to 32768 [ 598.924980][ T6514] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 598.937437][ T6514] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 598.972349][ T6514] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 598.990411][ T5525] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 598.998384][ T5525] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 599.067244][ T5525] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 68ms [ 599.076643][ T5525] gfs2: fsid=syz:syz.0: jid=0: Done [ 599.085649][ T6514] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 599.168536][ T6514] gfs2: fsid=syz:syz.0: found 1 quota changes [ 599.183936][ T6514] syz-executor103: attempt to access beyond end of device [ 599.183936][ T6514] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 599.190225][ T6514] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 599.196350][ T6514] syz-executor103: attempt to access beyond end of device [ 599.196350][ T6514] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 599.217610][ T6395] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 599.225791][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz-executor103 Not tainted syzkaller #0 PREEMPT(full) [ 599.225836][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 599.225843][ T6395] Call Trace: [ 599.225848][ T6395] [ 599.225853][ T6395] dump_stack_lvl+0xe8/0x150 [ 599.225925][ T6395] gfs2_withdraw+0xc3/0x1b0 [ 599.225975][ T6395] gfs2_ail1_empty+0x2c5/0x7b0 [ 599.226001][ T6395] gfs2_flush_revokes+0x5c/0x80 [ 599.226015][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 599.226059][ T6395] revoke_lo_before_commit+0x2f/0xea0 [ 599.226079][ T6395] ? __pfx_list_sort+0x10/0x10 [ 599.226090][ T6395] ? do_raw_spin_lock+0x12b/0x2f0 [ 599.226108][ T6395] ? do_raw_spin_unlock+0x4d/0x210 [ 599.226120][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 599.226132][ T6395] __gfs2_log_flush+0xa21/0x1d90 [ 599.226158][ T6395] ? __pfx___gfs2_log_flush+0x10/0x10 [ 599.226172][ T6395] ? down_write+0x16d/0x200 [ 599.226227][ T6395] ? __pfx_down_write+0x10/0x10 [ 599.226244][ T6395] ? call_rcu+0x64b/0x8b0 [ 599.226258][ T6395] gfs2_log_flush+0x34/0x50 [ 599.226294][ T6395] gfs2_kill_sb+0x5c/0x430 [ 599.226312][ T6395] deactivate_locked_super+0xbc/0x130 [ 599.226328][ T6395] cleanup_mnt+0x3d3/0x460 [ 599.226345][ T6395] task_work_run+0x1d9/0x270 [ 599.226365][ T6395] ? __pfx_task_work_run+0x10/0x10 [ 599.226388][ T6395] exit_to_user_mode_loop+0x1fa/0x730 [ 599.226402][ T6395] ? rcu_is_watching+0x15/0xb0 [ 599.226419][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.226432][ T6395] do_syscall_64+0x353/0x580 [ 599.226443][ T6395] ? trace_irq_disable+0x3b/0x140 [ 599.226458][ T6395] ? clear_bhb_loop+0x40/0x90 [ 599.226472][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.226483][ T6395] RIP: 0033:0x7fe0d80f0177 [ 599.226496][ T6395] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 34 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 599.226505][ T6395] RSP: 002b:00007fff3c7f31b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 599.226518][ T6395] RAX: 0000000000000000 RBX: 00000000000921a2 RCX: 00007fe0d80f0177 [ 599.226525][ T6395] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3c7f3270 [ 599.226532][ T6395] RBP: 00007fff3c7f3270 R08: 00007fff3c7f4270 R09: 00000000ffffffff [ 599.226539][ T6395] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7f42e0 [ 599.226545][ T6395] R13: 000055557ad95760 R14: 431bde82d7b634db R15: 00007fff3c7f4300 [ 599.226563][ T6395] [ 599.227108][ T6395] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 604.426899][ T5525] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 604.907378][ T6521] loop0: detected capacity change from 0 to 32768 [ 604.930155][ T6521] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 604.945166][ T6521] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 604.977223][ T6521] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 604.987279][ T5525] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 604.990507][ T5525] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 605.053220][ T5525] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 62ms [ 605.058698][ T5525] gfs2: fsid=syz:syz.0: jid=0: Done [ 605.062081][ T6521] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 605.128419][ T6521] gfs2: fsid=syz:syz.0: found 1 quota changes [ 605.145285][ T6521] syz-executor103: attempt to access beyond end of device [ 605.145285][ T6521] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 605.152349][ T6521] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 605.158866][ T6521] syz-executor103: attempt to access beyond end of device [ 605.158866][ T6521] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 605.179067][ T6395] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 605.188813][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz-executor103 Not tainted syzkaller #0 PREEMPT(full) [ 605.188837][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 605.188844][ T6395] Call Trace: [ 605.188856][ T6395] [ 605.188861][ T6395] dump_stack_lvl+0xe8/0x150 [ 605.188908][ T6395] gfs2_withdraw+0xc3/0x1b0 [ 605.188951][ T6395] gfs2_ail1_empty+0x2c5/0x7b0 [ 605.188977][ T6395] gfs2_flush_revokes+0x5c/0x80 [ 605.188990][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 605.189007][ T6395] revoke_lo_before_commit+0x2f/0xea0 [ 605.189019][ T6395] ? __pfx_list_sort+0x10/0x10 [ 605.189029][ T6395] ? do_raw_spin_lock+0x12b/0x2f0 [ 605.189048][ T6395] ? do_raw_spin_unlock+0x4d/0x210 [ 605.189059][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 605.189069][ T6395] __gfs2_log_flush+0xa21/0x1d90 [ 605.189082][ T6395] ? __pfx___gfs2_log_flush+0x10/0x10 [ 605.189091][ T6395] ? down_write+0x16d/0x200 [ 605.189142][ T6395] ? __pfx_down_write+0x10/0x10 [ 605.189160][ T6395] ? call_rcu+0x64b/0x8b0 [ 605.189192][ T6395] gfs2_log_flush+0x34/0x50 [ 605.189204][ T6395] gfs2_kill_sb+0x5c/0x430 [ 605.189215][ T6395] deactivate_locked_super+0xbc/0x130 [ 605.189226][ T6395] cleanup_mnt+0x3d3/0x460 [ 605.189236][ T6395] task_work_run+0x1d9/0x270 [ 605.189248][ T6395] ? __pfx_task_work_run+0x10/0x10 [ 605.189268][ T6395] exit_to_user_mode_loop+0x1fa/0x730 [ 605.189281][ T6395] ? rcu_is_watching+0x15/0xb0 [ 605.189297][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.189309][ T6395] do_syscall_64+0x353/0x580 [ 605.189322][ T6395] ? trace_irq_disable+0x3b/0x140 [ 605.189336][ T6395] ? clear_bhb_loop+0x40/0x90 [ 605.189349][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.189358][ T6395] RIP: 0033:0x7fe0d80f0177 [ 605.189377][ T6395] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 34 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 605.189386][ T6395] RSP: 002b:00007fff3c7f31b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 605.189399][ T6395] RAX: 0000000000000000 RBX: 0000000000093908 RCX: 00007fe0d80f0177 [ 605.189406][ T6395] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3c7f3270 [ 605.189413][ T6395] RBP: 00007fff3c7f3270 R08: 00007fff3c7f4270 R09: 00000000ffffffff [ 605.189420][ T6395] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7f42e0 [ 605.189426][ T6395] R13: 000055557ad95760 R14: 431bde82d7b634db R15: 00007fff3c7f4300 [ 605.189442][ T6395] [ 605.189720][ T6395] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 610.346320][ T5525] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 610.837700][ T6528] loop0: detected capacity change from 0 to 32768 [ 610.855242][ T6528] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 610.870446][ T6528] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 610.901869][ T6528] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 610.919409][ T5382] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 610.927346][ T5382] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 611.006644][ T5382] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 79ms [ 611.016819][ T5382] gfs2: fsid=syz:syz.0: jid=0: Done [ 611.025613][ T6528] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 611.145629][ T6528] gfs2: fsid=syz:syz.0: found 1 quota changes [ 611.161183][ T6528] syz-executor103: attempt to access beyond end of device [ 611.161183][ T6528] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 611.170296][ T6528] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 611.175093][ T6528] syz-executor103: attempt to access beyond end of device [ 611.175093][ T6528] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 611.194634][ T6395] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 611.200596][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz-executor103 Not tainted syzkaller #0 PREEMPT(full) [ 611.200615][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 611.200622][ T6395] Call Trace: [ 611.200631][ T6395] [ 611.200637][ T6395] dump_stack_lvl+0xe8/0x150 [ 611.200709][ T6395] gfs2_withdraw+0xc3/0x1b0 [ 611.200757][ T6395] gfs2_ail1_empty+0x2c5/0x7b0 [ 611.200782][ T6395] gfs2_flush_revokes+0x5c/0x80 [ 611.200796][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 611.200806][ T6395] revoke_lo_before_commit+0x2f/0xea0 [ 611.200817][ T6395] ? __pfx_list_sort+0x10/0x10 [ 611.200828][ T6395] ? do_raw_spin_lock+0x12b/0x2f0 [ 611.200844][ T6395] ? do_raw_spin_unlock+0x4d/0x210 [ 611.200855][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 611.200867][ T6395] __gfs2_log_flush+0xa21/0x1d90 [ 611.200888][ T6395] ? __pfx___gfs2_log_flush+0x10/0x10 [ 611.200901][ T6395] ? down_write+0x16d/0x200 [ 611.200952][ T6395] ? __pfx_down_write+0x10/0x10 [ 611.200968][ T6395] ? call_rcu+0x64b/0x8b0 [ 611.200979][ T6395] gfs2_log_flush+0x34/0x50 [ 611.200995][ T6395] gfs2_kill_sb+0x5c/0x430 [ 611.201012][ T6395] deactivate_locked_super+0xbc/0x130 [ 611.201027][ T6395] cleanup_mnt+0x3d3/0x460 [ 611.201045][ T6395] task_work_run+0x1d9/0x270 [ 611.201064][ T6395] ? __pfx_task_work_run+0x10/0x10 [ 611.201085][ T6395] exit_to_user_mode_loop+0x1fa/0x730 [ 611.201099][ T6395] ? rcu_is_watching+0x15/0xb0 [ 611.201115][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.201126][ T6395] do_syscall_64+0x353/0x580 [ 611.201141][ T6395] ? trace_irq_disable+0x3b/0x140 [ 611.201155][ T6395] ? clear_bhb_loop+0x40/0x90 [ 611.201168][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.201180][ T6395] RIP: 0033:0x7fe0d80f0177 [ 611.201194][ T6395] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 34 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 611.201203][ T6395] RSP: 002b:00007fff3c7f31b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 611.201217][ T6395] RAX: 0000000000000000 RBX: 000000000009503c RCX: 00007fe0d80f0177 [ 611.201223][ T6395] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3c7f3270 [ 611.201229][ T6395] RBP: 00007fff3c7f3270 R08: 00007fff3c7f4270 R09: 00000000ffffffff [ 611.201233][ T6395] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7f42e0 [ 611.201238][ T6395] R13: 000055557ad95760 R14: 431bde82d7b634db R15: 00007fff3c7f4300 [ 611.201249][ T6395] [ 611.201252][ T6395] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 616.346887][ T10] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 616.866091][ T6536] loop0: detected capacity change from 0 to 32768 [ 616.881253][ T6536] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 616.895641][ T6536] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 616.923240][ T6536] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 616.935769][ T5382] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 616.939841][ T5382] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 617.011704][ T5382] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 71ms [ 617.025921][ T5382] gfs2: fsid=syz:syz.0: jid=0: Done [ 617.032115][ T6536] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 617.149641][ T6536] gfs2: fsid=syz:syz.0: found 1 quota changes [ 617.160310][ T6536] syz-executor103: attempt to access beyond end of device [ 617.160310][ T6536] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 617.168567][ T6536] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 617.173623][ T6536] syz-executor103: attempt to access beyond end of device [ 617.173623][ T6536] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 617.192397][ T6395] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 617.199024][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz-executor103 Not tainted syzkaller #0 PREEMPT(full) [ 617.199047][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 617.199056][ T6395] Call Trace: [ 617.199066][ T6395] [ 617.199074][ T6395] dump_stack_lvl+0xe8/0x150 [ 617.199160][ T6395] gfs2_withdraw+0xc3/0x1b0 [ 617.199225][ T6395] gfs2_ail1_empty+0x2c5/0x7b0 [ 617.199263][ T6395] gfs2_flush_revokes+0x5c/0x80 [ 617.199284][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 617.199343][ T6395] revoke_lo_before_commit+0x2f/0xea0 [ 617.199360][ T6395] ? __pfx_list_sort+0x10/0x10 [ 617.199375][ T6395] ? do_raw_spin_lock+0x12b/0x2f0 [ 617.199401][ T6395] ? do_raw_spin_unlock+0x4d/0x210 [ 617.199418][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 617.199437][ T6395] __gfs2_log_flush+0xa21/0x1d90 [ 617.199470][ T6395] ? __pfx___gfs2_log_flush+0x10/0x10 [ 617.199490][ T6395] ? down_write+0x16d/0x200 [ 617.199559][ T6395] ? __pfx_down_write+0x10/0x10 [ 617.199586][ T6395] ? call_rcu+0x64b/0x8b0 [ 617.199604][ T6395] gfs2_log_flush+0x34/0x50 [ 617.199627][ T6395] gfs2_kill_sb+0x5c/0x430 [ 617.199653][ T6395] deactivate_locked_super+0xbc/0x130 [ 617.199675][ T6395] cleanup_mnt+0x3d3/0x460 [ 617.199700][ T6395] task_work_run+0x1d9/0x270 [ 617.199728][ T6395] ? __pfx_task_work_run+0x10/0x10 [ 617.199757][ T6395] exit_to_user_mode_loop+0x1fa/0x730 [ 617.199778][ T6395] ? rcu_is_watching+0x15/0xb0 [ 617.199799][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.199815][ T6395] do_syscall_64+0x353/0x580 [ 617.199832][ T6395] ? trace_irq_disable+0x3b/0x140 [ 617.199852][ T6395] ? clear_bhb_loop+0x40/0x90 [ 617.199868][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.199884][ T6395] RIP: 0033:0x7fe0d80f0177 [ 617.199900][ T6395] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 34 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 617.199912][ T6395] RSP: 002b:00007fff3c7f31b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 617.199929][ T6395] RAX: 0000000000000000 RBX: 00000000000967b7 RCX: 00007fe0d80f0177 [ 617.199939][ T6395] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3c7f3270 [ 617.199947][ T6395] RBP: 00007fff3c7f3270 R08: 00007fff3c7f4270 R09: 00000000ffffffff [ 617.199957][ T6395] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7f42e0 [ 617.199966][ T6395] R13: 000055557ad95760 R14: 431bde82d7b634db R15: 00007fff3c7f4300 [ 617.199993][ T6395] [ 617.199999][ T6395] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 622.345881][ T5382] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 622.841583][ T6542] loop0: detected capacity change from 0 to 32768 [ 622.878633][ T6542] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 622.894602][ T6542] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 622.928881][ T6542] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 622.944970][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 622.950184][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 623.025897][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 75ms [ 623.035600][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 623.046439][ T6542] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 623.144644][ T6542] gfs2: fsid=syz:syz.0: found 1 quota changes [ 623.158646][ T6542] syz-executor103: attempt to access beyond end of device [ 623.158646][ T6542] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 623.165370][ T6542] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 623.170358][ T6542] syz-executor103: attempt to access beyond end of device [ 623.170358][ T6542] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 623.181309][ T6395] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 623.189251][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz-executor103 Not tainted syzkaller #0 PREEMPT(full) [ 623.189271][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 623.189278][ T6395] Call Trace: [ 623.189282][ T6395] [ 623.189287][ T6395] dump_stack_lvl+0xe8/0x150 [ 623.189359][ T6395] gfs2_withdraw+0xc3/0x1b0 [ 623.189411][ T6395] gfs2_ail1_empty+0x2c5/0x7b0 [ 623.189435][ T6395] gfs2_flush_revokes+0x5c/0x80 [ 623.189448][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 623.189460][ T6395] revoke_lo_before_commit+0x2f/0xea0 [ 623.189470][ T6395] ? __pfx_list_sort+0x10/0x10 [ 623.189481][ T6395] ? do_raw_spin_lock+0x12b/0x2f0 [ 623.189502][ T6395] ? do_raw_spin_unlock+0x4d/0x210 [ 623.189514][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 623.189526][ T6395] __gfs2_log_flush+0xa21/0x1d90 [ 623.189548][ T6395] ? __pfx___gfs2_log_flush+0x10/0x10 [ 623.189560][ T6395] ? down_write+0x16d/0x200 [ 623.189649][ T6395] ? __pfx_down_write+0x10/0x10 [ 623.189668][ T6395] ? call_rcu+0x64b/0x8b0 [ 623.189680][ T6395] gfs2_log_flush+0x34/0x50 [ 623.189695][ T6395] gfs2_kill_sb+0x5c/0x430 [ 623.189712][ T6395] deactivate_locked_super+0xbc/0x130 [ 623.189728][ T6395] cleanup_mnt+0x3d3/0x460 [ 623.189746][ T6395] task_work_run+0x1d9/0x270 [ 623.189767][ T6395] ? __pfx_task_work_run+0x10/0x10 [ 623.189787][ T6395] exit_to_user_mode_loop+0x1fa/0x730 [ 623.189801][ T6395] ? rcu_is_watching+0x15/0xb0 [ 623.189817][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.189828][ T6395] do_syscall_64+0x353/0x580 [ 623.189841][ T6395] ? trace_irq_disable+0x3b/0x140 [ 623.189878][ T6395] ? clear_bhb_loop+0x40/0x90 [ 623.189894][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.189905][ T6395] RIP: 0033:0x7fe0d80f0177 [ 623.189955][ T6395] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 34 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 623.189966][ T6395] RSP: 002b:00007fff3c7f31b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 623.189981][ T6395] RAX: 0000000000000000 RBX: 0000000000097f12 RCX: 00007fe0d80f0177 [ 623.189990][ T6395] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3c7f3270 [ 623.189997][ T6395] RBP: 00007fff3c7f3270 R08: 00007fff3c7f4270 R09: 00000000ffffffff [ 623.190006][ T6395] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7f42e0 [ 623.190023][ T6395] R13: 000055557ad95760 R14: 431bde82d7b634db R15: 00007fff3c7f4300 [ 623.190066][ T6395] [ 623.190512][ T6395] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 628.345940][ T9] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 628.824387][ T6549] loop0: detected capacity change from 0 to 32768 [ 628.853511][ T6549] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 628.864260][ T6549] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 628.894960][ T6549] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 2ms [ 628.906017][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 628.913610][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 628.987789][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 74ms [ 628.997802][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 629.005904][ T6549] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 629.097868][ T6549] gfs2: fsid=syz:syz.0: found 1 quota changes [ 629.108979][ T6549] syz-executor103: attempt to access beyond end of device [ 629.108979][ T6549] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 629.117638][ T6549] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 629.122107][ T6549] syz-executor103: attempt to access beyond end of device [ 629.122107][ T6549] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 629.141742][ T6395] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 629.148079][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz-executor103 Not tainted syzkaller #0 PREEMPT(full) [ 629.148097][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 629.148104][ T6395] Call Trace: [ 629.148108][ T6395] [ 629.148112][ T6395] dump_stack_lvl+0xe8/0x150 [ 629.148180][ T6395] gfs2_withdraw+0xc3/0x1b0 [ 629.148226][ T6395] gfs2_ail1_empty+0x2c5/0x7b0 [ 629.148247][ T6395] gfs2_flush_revokes+0x5c/0x80 [ 629.148259][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 629.148269][ T6395] revoke_lo_before_commit+0x2f/0xea0 [ 629.148278][ T6395] ? __pfx_list_sort+0x10/0x10 [ 629.148287][ T6395] ? do_raw_spin_lock+0x12b/0x2f0 [ 629.148302][ T6395] ? do_raw_spin_unlock+0x4d/0x210 [ 629.148311][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 629.148329][ T6395] __gfs2_log_flush+0xa21/0x1d90 [ 629.148347][ T6395] ? __pfx___gfs2_log_flush+0x10/0x10 [ 629.148358][ T6395] ? down_write+0x16d/0x200 [ 629.148402][ T6395] ? __pfx_down_write+0x10/0x10 [ 629.148417][ T6395] ? call_rcu+0x64b/0x8b0 [ 629.148427][ T6395] gfs2_log_flush+0x34/0x50 [ 629.148440][ T6395] gfs2_kill_sb+0x5c/0x430 [ 629.148455][ T6395] deactivate_locked_super+0xbc/0x130 [ 629.148468][ T6395] cleanup_mnt+0x3d3/0x460 [ 629.148482][ T6395] task_work_run+0x1d9/0x270 [ 629.148498][ T6395] ? __pfx_task_work_run+0x10/0x10 [ 629.148515][ T6395] exit_to_user_mode_loop+0x1fa/0x730 [ 629.148527][ T6395] ? rcu_is_watching+0x15/0xb0 [ 629.148542][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.148552][ T6395] do_syscall_64+0x353/0x580 [ 629.148564][ T6395] ? trace_irq_disable+0x3b/0x140 [ 629.148576][ T6395] ? clear_bhb_loop+0x40/0x90 [ 629.148587][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.148616][ T6395] RIP: 0033:0x7fe0d80f0177 [ 629.148626][ T6395] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 34 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 629.148634][ T6395] RSP: 002b:00007fff3c7f31b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 629.148646][ T6395] RAX: 0000000000000000 RBX: 0000000000099684 RCX: 00007fe0d80f0177 [ 629.148652][ T6395] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3c7f3270 [ 629.148657][ T6395] RBP: 00007fff3c7f3270 R08: 00007fff3c7f4270 R09: 00000000ffffffff [ 629.148663][ T6395] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7f42e0 [ 629.148669][ T6395] R13: 000055557ad95760 R14: 431bde82d7b634db R15: 00007fff3c7f4300 [ 629.148684][ T6395] [ 629.148729][ T6395] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 634.346789][ T9] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 634.829371][ T6556] loop0: detected capacity change from 0 to 32768 [ 634.877472][ T6556] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 634.889749][ T6556] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 634.926941][ T6556] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 634.938260][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 634.945429][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 635.027407][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 81ms [ 635.036067][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 635.044764][ T6556] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 635.146534][ T6556] gfs2: fsid=syz:syz.0: found 1 quota changes [ 635.156432][ T6556] syz-executor103: attempt to access beyond end of device [ 635.156432][ T6556] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 635.163830][ T6556] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 635.173446][ T6556] syz-executor103: attempt to access beyond end of device [ 635.173446][ T6556] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 635.193718][ T6395] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 635.199687][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz-executor103 Not tainted syzkaller #0 PREEMPT(full) [ 635.199705][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 635.199713][ T6395] Call Trace: [ 635.199721][ T6395] [ 635.199727][ T6395] dump_stack_lvl+0xe8/0x150 [ 635.199793][ T6395] gfs2_withdraw+0xc3/0x1b0 [ 635.199842][ T6395] gfs2_ail1_empty+0x2c5/0x7b0 [ 635.199869][ T6395] gfs2_flush_revokes+0x5c/0x80 [ 635.199885][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 635.199929][ T6395] revoke_lo_before_commit+0x2f/0xea0 [ 635.199949][ T6395] ? __pfx_list_sort+0x10/0x10 [ 635.199960][ T6395] ? do_raw_spin_lock+0x12b/0x2f0 [ 635.199980][ T6395] ? do_raw_spin_unlock+0x4d/0x210 [ 635.199992][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 635.200004][ T6395] __gfs2_log_flush+0xa21/0x1d90 [ 635.200027][ T6395] ? __pfx___gfs2_log_flush+0x10/0x10 [ 635.200041][ T6395] ? down_write+0x16d/0x200 [ 635.200088][ T6395] ? __pfx_down_write+0x10/0x10 [ 635.200108][ T6395] ? call_rcu+0x64b/0x8b0 [ 635.200122][ T6395] gfs2_log_flush+0x34/0x50 [ 635.200139][ T6395] gfs2_kill_sb+0x5c/0x430 [ 635.200156][ T6395] deactivate_locked_super+0xbc/0x130 [ 635.200172][ T6395] cleanup_mnt+0x3d3/0x460 [ 635.200191][ T6395] task_work_run+0x1d9/0x270 [ 635.200209][ T6395] ? __pfx_task_work_run+0x10/0x10 [ 635.200230][ T6395] exit_to_user_mode_loop+0x1fa/0x730 [ 635.200244][ T6395] ? rcu_is_watching+0x15/0xb0 [ 635.200263][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.200275][ T6395] do_syscall_64+0x353/0x580 [ 635.200289][ T6395] ? trace_irq_disable+0x3b/0x140 [ 635.200303][ T6395] ? clear_bhb_loop+0x40/0x90 [ 635.200318][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.200348][ T6395] RIP: 0033:0x7fe0d80f0177 [ 635.200360][ T6395] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 34 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 635.200369][ T6395] RSP: 002b:00007fff3c7f31b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 635.200384][ T6395] RAX: 0000000000000000 RBX: 000000000009adf1 RCX: 00007fe0d80f0177 [ 635.200392][ T6395] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3c7f3270 [ 635.200400][ T6395] RBP: 00007fff3c7f3270 R08: 00007fff3c7f4270 R09: 00000000ffffffff [ 635.200407][ T6395] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7f42e0 [ 635.200414][ T6395] R13: 000055557ad95760 R14: 431bde82d7b634db R15: 00007fff3c7f4300 [ 635.200432][ T6395] [ 635.200483][ T6395] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 639.867140][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 639.870123][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 640.347020][ T9] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 640.821635][ T6564] loop0: detected capacity change from 0 to 32768 [ 640.839891][ T6564] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 640.852986][ T6564] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 640.874557][ T6564] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 640.885648][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 640.891330][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 640.961809][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 70ms [ 640.970143][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 640.978530][ T6564] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 641.095324][ T6564] gfs2: fsid=syz:syz.0: found 1 quota changes [ 641.107945][ T6564] syz-executor103: attempt to access beyond end of device [ 641.107945][ T6564] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 641.114754][ T6564] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 641.119568][ T6564] syz-executor103: attempt to access beyond end of device [ 641.119568][ T6564] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 641.137408][ T6395] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 641.143610][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz-executor103 Not tainted syzkaller #0 PREEMPT(full) [ 641.143630][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 641.143637][ T6395] Call Trace: [ 641.143641][ T6395] [ 641.143671][ T6395] dump_stack_lvl+0xe8/0x150 [ 641.143744][ T6395] gfs2_withdraw+0xc3/0x1b0 [ 641.143795][ T6395] gfs2_ail1_empty+0x2c5/0x7b0 [ 641.143820][ T6395] gfs2_flush_revokes+0x5c/0x80 [ 641.143834][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 641.143852][ T6395] revoke_lo_before_commit+0x2f/0xea0 [ 641.143861][ T6395] ? __pfx_list_sort+0x10/0x10 [ 641.143871][ T6395] ? do_raw_spin_lock+0x12b/0x2f0 [ 641.143890][ T6395] ? do_raw_spin_unlock+0x4d/0x210 [ 641.143901][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 641.143914][ T6395] __gfs2_log_flush+0xa21/0x1d90 [ 641.143936][ T6395] ? __pfx___gfs2_log_flush+0x10/0x10 [ 641.143947][ T6395] ? down_write+0x16d/0x200 [ 641.143990][ T6395] ? __pfx_down_write+0x10/0x10 [ 641.144009][ T6395] ? call_rcu+0x64b/0x8b0 [ 641.144021][ T6395] gfs2_log_flush+0x34/0x50 [ 641.144037][ T6395] gfs2_kill_sb+0x5c/0x430 [ 641.144055][ T6395] deactivate_locked_super+0xbc/0x130 [ 641.144070][ T6395] cleanup_mnt+0x3d3/0x460 [ 641.144087][ T6395] task_work_run+0x1d9/0x270 [ 641.144106][ T6395] ? __pfx_task_work_run+0x10/0x10 [ 641.144128][ T6395] exit_to_user_mode_loop+0x1fa/0x730 [ 641.144142][ T6395] ? rcu_is_watching+0x15/0xb0 [ 641.144159][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.144171][ T6395] do_syscall_64+0x353/0x580 [ 641.144185][ T6395] ? trace_irq_disable+0x3b/0x140 [ 641.144199][ T6395] ? clear_bhb_loop+0x40/0x90 [ 641.144217][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.144230][ T6395] RIP: 0033:0x7fe0d80f0177 [ 641.144242][ T6395] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 34 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 641.144251][ T6395] RSP: 002b:00007fff3c7f31b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 641.144265][ T6395] RAX: 0000000000000000 RBX: 000000000009c567 RCX: 00007fe0d80f0177 [ 641.144272][ T6395] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3c7f3270 [ 641.144278][ T6395] RBP: 00007fff3c7f3270 R08: 00007fff3c7f4270 R09: 00000000ffffffff [ 641.144285][ T6395] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7f42e0 [ 641.144291][ T6395] R13: 000055557ad95760 R14: 431bde82d7b634db R15: 00007fff3c7f4300 [ 641.144309][ T6395] [ 641.144601][ T6395] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 646.267791][ T5525] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 646.793037][ T6571] loop0: detected capacity change from 0 to 32768 [ 646.823600][ T6571] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 646.834622][ T6571] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 646.856948][ T6571] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 646.869979][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 646.877959][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 646.960239][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 82ms [ 646.969682][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 646.977920][ T6571] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 647.097690][ T6571] gfs2: fsid=syz:syz.0: found 1 quota changes [ 647.110326][ T6571] syz-executor103: attempt to access beyond end of device [ 647.110326][ T6571] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 647.118674][ T6571] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 647.123335][ T6571] syz-executor103: attempt to access beyond end of device [ 647.123335][ T6571] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 647.141684][ T6395] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 647.148640][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz-executor103 Not tainted syzkaller #0 PREEMPT(full) [ 647.148660][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 647.148667][ T6395] Call Trace: [ 647.148672][ T6395] [ 647.148678][ T6395] dump_stack_lvl+0xe8/0x150 [ 647.148743][ T6395] gfs2_withdraw+0xc3/0x1b0 [ 647.148792][ T6395] gfs2_ail1_empty+0x2c5/0x7b0 [ 647.148825][ T6395] gfs2_flush_revokes+0x5c/0x80 [ 647.148838][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 647.148850][ T6395] revoke_lo_before_commit+0x2f/0xea0 [ 647.148861][ T6395] ? __pfx_list_sort+0x10/0x10 [ 647.148872][ T6395] ? do_raw_spin_lock+0x12b/0x2f0 [ 647.148890][ T6395] ? do_raw_spin_unlock+0x4d/0x210 [ 647.148901][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 647.148914][ T6395] __gfs2_log_flush+0xa21/0x1d90 [ 647.148937][ T6395] ? __pfx___gfs2_log_flush+0x10/0x10 [ 647.148950][ T6395] ? down_write+0x16d/0x200 [ 647.149003][ T6395] ? __pfx_down_write+0x10/0x10 [ 647.149020][ T6395] ? call_rcu+0x64b/0x8b0 [ 647.149032][ T6395] gfs2_log_flush+0x34/0x50 [ 647.149067][ T6395] gfs2_kill_sb+0x5c/0x430 [ 647.149085][ T6395] deactivate_locked_super+0xbc/0x130 [ 647.149100][ T6395] cleanup_mnt+0x3d3/0x460 [ 647.149118][ T6395] task_work_run+0x1d9/0x270 [ 647.149136][ T6395] ? __pfx_task_work_run+0x10/0x10 [ 647.149157][ T6395] exit_to_user_mode_loop+0x1fa/0x730 [ 647.149170][ T6395] ? rcu_is_watching+0x15/0xb0 [ 647.149187][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.149200][ T6395] do_syscall_64+0x353/0x580 [ 647.149213][ T6395] ? trace_irq_disable+0x3b/0x140 [ 647.149227][ T6395] ? clear_bhb_loop+0x40/0x90 [ 647.149241][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.149252][ T6395] RIP: 0033:0x7fe0d80f0177 [ 647.149265][ T6395] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 34 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 647.149274][ T6395] RSP: 002b:00007fff3c7f31b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 647.149289][ T6395] RAX: 0000000000000000 RBX: 000000000009dc99 RCX: 00007fe0d80f0177 [ 647.149296][ T6395] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3c7f3270 [ 647.149302][ T6395] RBP: 00007fff3c7f3270 R08: 00007fff3c7f4270 R09: 00000000ffffffff [ 647.149310][ T6395] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7f42e0 [ 647.149317][ T6395] R13: 000055557ad95760 R14: 431bde82d7b634db R15: 00007fff3c7f4300 [ 647.149337][ T6395] [ 647.149949][ T6395] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 652.346250][ T10] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 652.838984][ T6582] loop0: detected capacity change from 0 to 32768 [ 652.857070][ T6582] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 652.872247][ T6582] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 652.910505][ T6582] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 652.926554][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 652.930749][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 653.003403][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 72ms [ 653.010443][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 653.019712][ T6582] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 653.125502][ T6582] gfs2: fsid=syz:syz.0: found 1 quota changes [ 653.136003][ T6582] syz-executor103: attempt to access beyond end of device [ 653.136003][ T6582] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 653.144268][ T6582] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 653.148954][ T6582] syz-executor103: attempt to access beyond end of device [ 653.148954][ T6582] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 653.166558][ T6395] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 653.173088][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz-executor103 Not tainted syzkaller #0 PREEMPT(full) [ 653.173109][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 653.173150][ T6395] Call Trace: [ 653.173156][ T6395] [ 653.173162][ T6395] dump_stack_lvl+0xe8/0x150 [ 653.173247][ T6395] gfs2_withdraw+0xc3/0x1b0 [ 653.173307][ T6395] gfs2_ail1_empty+0x2c5/0x7b0 [ 653.173337][ T6395] gfs2_flush_revokes+0x5c/0x80 [ 653.173353][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 653.173374][ T6395] revoke_lo_before_commit+0x2f/0xea0 [ 653.173422][ T6395] ? __pfx_list_sort+0x10/0x10 [ 653.173435][ T6395] ? do_raw_spin_lock+0x12b/0x2f0 [ 653.173457][ T6395] ? do_raw_spin_unlock+0x4d/0x210 [ 653.173470][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 653.173485][ T6395] __gfs2_log_flush+0xa21/0x1d90 [ 653.173511][ T6395] ? __pfx___gfs2_log_flush+0x10/0x10 [ 653.173528][ T6395] ? down_write+0x16d/0x200 [ 653.173584][ T6395] ? __pfx_down_write+0x10/0x10 [ 653.173604][ T6395] ? call_rcu+0x64b/0x8b0 [ 653.173619][ T6395] gfs2_log_flush+0x34/0x50 [ 653.173636][ T6395] gfs2_kill_sb+0x5c/0x430 [ 653.173657][ T6395] deactivate_locked_super+0xbc/0x130 [ 653.173676][ T6395] cleanup_mnt+0x3d3/0x460 [ 653.173696][ T6395] task_work_run+0x1d9/0x270 [ 653.173716][ T6395] ? __pfx_task_work_run+0x10/0x10 [ 653.173739][ T6395] exit_to_user_mode_loop+0x1fa/0x730 [ 653.173755][ T6395] ? rcu_is_watching+0x15/0xb0 [ 653.173774][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.173788][ T6395] do_syscall_64+0x353/0x580 [ 653.173803][ T6395] ? trace_irq_disable+0x3b/0x140 [ 653.173820][ T6395] ? clear_bhb_loop+0x40/0x90 [ 653.173836][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.173849][ T6395] RIP: 0033:0x7fe0d80f0177 [ 653.173863][ T6395] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 34 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 653.173874][ T6395] RSP: 002b:00007fff3c7f31b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 653.173888][ T6395] RAX: 0000000000000000 RBX: 000000000009f434 RCX: 00007fe0d80f0177 [ 653.173896][ T6395] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3c7f3270 [ 653.173904][ T6395] RBP: 00007fff3c7f3270 R08: 00007fff3c7f4270 R09: 00000000ffffffff [ 653.173913][ T6395] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7f42e0 [ 653.173921][ T6395] R13: 000055557ad95760 R14: 431bde82d7b634db R15: 00007fff3c7f4300 [ 653.173940][ T6395] [ 653.174295][ T6395] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 658.352877][ T10] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 658.848693][ T6592] loop0: detected capacity change from 0 to 32768 [ 658.865311][ T6592] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 658.879783][ T6592] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 658.914334][ T6592] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 2ms [ 658.925577][ T5525] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 658.931630][ T5525] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 659.004332][ T5525] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 72ms [ 659.015572][ T5525] gfs2: fsid=syz:syz.0: jid=0: Done [ 659.021412][ T6592] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 659.131892][ T6592] gfs2: fsid=syz:syz.0: found 1 quota changes [ 659.141524][ T6592] syz-executor103: attempt to access beyond end of device [ 659.141524][ T6592] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 659.150231][ T6592] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 659.155479][ T6592] syz-executor103: attempt to access beyond end of device [ 659.155479][ T6592] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 659.173763][ T6395] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 659.179929][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz-executor103 Not tainted syzkaller #0 PREEMPT(full) [ 659.179948][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 659.179955][ T6395] Call Trace: [ 659.179963][ T6395] [ 659.179970][ T6395] dump_stack_lvl+0xe8/0x150 [ 659.180037][ T6395] gfs2_withdraw+0xc3/0x1b0 [ 659.180088][ T6395] gfs2_ail1_empty+0x2c5/0x7b0 [ 659.180114][ T6395] gfs2_flush_revokes+0x5c/0x80 [ 659.180128][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 659.180169][ T6395] revoke_lo_before_commit+0x2f/0xea0 [ 659.180177][ T6395] ? __pfx_list_sort+0x10/0x10 [ 659.180184][ T6395] ? do_raw_spin_lock+0x12b/0x2f0 [ 659.180195][ T6395] ? do_raw_spin_unlock+0x4d/0x210 [ 659.180206][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 659.180218][ T6395] __gfs2_log_flush+0xa21/0x1d90 [ 659.180241][ T6395] ? __pfx___gfs2_log_flush+0x10/0x10 [ 659.180254][ T6395] ? down_write+0x16d/0x200 [ 659.180302][ T6395] ? __pfx_down_write+0x10/0x10 [ 659.180320][ T6395] ? call_rcu+0x64b/0x8b0 [ 659.180332][ T6395] gfs2_log_flush+0x34/0x50 [ 659.180347][ T6395] gfs2_kill_sb+0x5c/0x430 [ 659.180365][ T6395] deactivate_locked_super+0xbc/0x130 [ 659.180381][ T6395] cleanup_mnt+0x3d3/0x460 [ 659.180399][ T6395] task_work_run+0x1d9/0x270 [ 659.180419][ T6395] ? __pfx_task_work_run+0x10/0x10 [ 659.180438][ T6395] exit_to_user_mode_loop+0x1fa/0x730 [ 659.180452][ T6395] ? rcu_is_watching+0x15/0xb0 [ 659.180469][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.180481][ T6395] do_syscall_64+0x353/0x580 [ 659.180495][ T6395] ? trace_irq_disable+0x3b/0x140 [ 659.180508][ T6395] ? clear_bhb_loop+0x40/0x90 [ 659.180521][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.180531][ T6395] RIP: 0033:0x7fe0d80f0177 [ 659.180543][ T6395] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 34 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 659.180558][ T6395] RSP: 002b:00007fff3c7f31b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 659.180591][ T6395] RAX: 0000000000000000 RBX: 00000000000a0bd1 RCX: 00007fe0d80f0177 [ 659.180599][ T6395] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3c7f3270 [ 659.180606][ T6395] RBP: 00007fff3c7f3270 R08: 00007fff3c7f4270 R09: 00000000ffffffff [ 659.180612][ T6395] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7f42e0 [ 659.180619][ T6395] R13: 000055557ad95760 R14: 431bde82d7b634db R15: 00007fff3c7f4300 [ 659.180636][ T6395] [ 659.180687][ T6395] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 664.346284][ T10] gfs2: fsid=syz:syz.0: file system withdrawn executing program [ 664.826073][ T6598] loop0: detected capacity change from 0 to 32768 [ 664.841918][ T6598] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 664.858663][ T6598] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 664.896852][ T6598] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 664.909110][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 664.914701][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 664.994484][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 79ms [ 665.003558][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 665.012361][ T6598] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 665.121974][ T6598] gfs2: fsid=syz:syz.0: found 1 quota changes [ 665.131620][ T6598] syz-executor103: attempt to access beyond end of device [ 665.131620][ T6598] loop0: rw=14337, sector=68719479080, nr_sectors = 8 limit=32768 [ 665.140615][ T6598] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 665.151831][ T6598] syz-executor103: attempt to access beyond end of device [ 665.151831][ T6598] loop0: rw=12288, sector=68719479080, nr_sectors = 8 limit=32768 [ 665.172239][ T6395] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_empty_one, file = fs/gfs2/log.c, line = 326 [ 665.177412][ T6395] CPU: 0 UID: 0 PID: 6395 Comm: syz-executor103 Not tainted syzkaller #0 PREEMPT(full) [ 665.177432][ T6395] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 665.177440][ T6395] Call Trace: [ 665.177448][ T6395] [ 665.177454][ T6395] dump_stack_lvl+0xe8/0x150 [ 665.177539][ T6395] gfs2_withdraw+0xc3/0x1b0 [ 665.177595][ T6395] gfs2_ail1_empty+0x2c5/0x7b0 [ 665.177622][ T6395] gfs2_flush_revokes+0x5c/0x80 [ 665.177637][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 665.177683][ T6395] revoke_lo_before_commit+0x2f/0xea0 [ 665.177696][ T6395] ? __pfx_list_sort+0x10/0x10 [ 665.177709][ T6395] ? do_raw_spin_lock+0x12b/0x2f0 [ 665.177728][ T6395] ? do_raw_spin_unlock+0x4d/0x210 [ 665.177740][ T6395] ? __pfx_revoke_lo_before_commit+0x10/0x10 [ 665.177755][ T6395] __gfs2_log_flush+0xa21/0x1d90 [ 665.177782][ T6395] ? __pfx___gfs2_log_flush+0x10/0x10 [ 665.177796][ T6395] ? down_write+0x16d/0x200 [ 665.177852][ T6395] ? __pfx_down_write+0x10/0x10 [ 665.177873][ T6395] ? call_rcu+0x64b/0x8b0 [ 665.177888][ T6395] gfs2_log_flush+0x34/0x50 [ 665.177906][ T6395] gfs2_kill_sb+0x5c/0x430 [ 665.177928][ T6395] deactivate_locked_super+0xbc/0x130 [ 665.177948][ T6395] cleanup_mnt+0x3d3/0x460 [ 665.177968][ T6395] task_work_run+0x1d9/0x270 [ 665.178010][ T6395] ? __pfx_task_work_run+0x10/0x10 [ 665.178036][ T6395] exit_to_user_mode_loop+0x1fa/0x730 [ 665.178052][ T6395] ? rcu_is_watching+0x15/0xb0 [ 665.178071][ T6395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.178085][ T6395] do_syscall_64+0x353/0x580 [ 665.178102][ T6395] ? trace_irq_disable+0x3b/0x140 [ 665.178118][ T6395] ? clear_bhb_loop+0x40/0x90 [ 665.178136][ T6395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.178148][ T6395] RIP: 0033:0x7fe0d80f0177 [ 665.178163][ T6395] Code: bf 41 4d 56 53 b8 9d 00 00 00 0f 05 83 f8 ea 75 a2 c7 05 34 39 0a 00 00 00 00 00 eb 96 e8 81 05 00 00 90 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8 [ 665.178174][ T6395] RSP: 002b:00007fff3c7f31b8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 665.178189][ T6395] RAX: 0000000000000000 RBX: 00000000000a2324 RCX: 00007fe0d80f0177 [ 665.178198][ T6395] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3c7f3270 [ 665.178206][ T6395] RBP: 00007fff3c7f3270 R08: 00007fff3c7f4270 R09: 00000000ffffffff [ 665.178215][ T6395] R10: 0000000000000000 R11: 0000000000000206 R12: 00007fff3c7f42e0 [ 665.178222][ T6395] R13: 000055557ad95760 R14: 431bde82d7b634db R15: 00007fff3c7f4300 [ 665.178243][ T6395] [ 665.178308][ T6395] gfs2: fsid=syz:syz.0: about to withdraw this file system [host] Command execution timed out after 2m30s