Warning: Permanently added '[localhost]:18310' (ED25519) to the list of known hosts.
syzkaller login: [ 97.192611][ T1372] cfg80211: failed to load regulatory.db
2026/07/06 16:13:41 parsed 1 programs
2026/07/06 16:13:41 serving rpc on tcp://40705
[ 101.121287][ T5291] cgroup: Unknown subsys name 'net'
[ 101.181345][ T5291] cgroup: Unknown subsys name 'cpuset'
[ 101.192739][ T5291] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 102.858179][ T5291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 109.766619][ T5310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 110.828751][ T5322] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 110.835237][ T5322] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 110.839175][ T5322] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 110.844607][ T5322] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 110.849157][ T5322] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 113.731036][ T160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.734539][ T160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 113.828051][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 113.833176][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 117.569299][ T5363] bridge0: port 1(bridge_slave_0) entered blocking state
[ 117.586192][ T5363] bridge0: port 1(bridge_slave_0) entered disabled state
[ 117.590179][ T5363] bridge_slave_0: entered allmulticast mode
[ 117.596295][ T5363] bridge_slave_0: entered promiscuous mode
[ 117.612060][ T5363] bridge0: port 2(bridge_slave_1) entered blocking state
[ 117.625821][ T5363] bridge0: port 2(bridge_slave_1) entered disabled state
[ 117.629258][ T5363] bridge_slave_1: entered allmulticast mode
[ 117.633240][ T5363] bridge_slave_1: entered promiscuous mode
[ 117.707507][ T5363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 117.715253][ T5363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 117.745174][ T5363] team0: Port device team_slave_0 added
[ 117.750109][ T5363] team0: Port device team_slave_1 added
[ 117.776763][ T5363] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 117.780308][ T5363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 117.791379][ T5363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 117.800982][ T5363] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 117.804149][ T5363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 117.816977][ T5363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 117.866790][ T5363] hsr_slave_0: entered promiscuous mode
[ 117.870930][ T5363] hsr_slave_1: entered promiscuous mode
[ 118.141045][ T5363] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 118.180840][ T5363] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 118.196489][ T5363] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 118.204415][ T5363] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 118.219329][ T5363] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 118.236166][ T5363] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 118.246219][ T5363] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 118.259167][ T5363] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 118.341952][ T5363] bridge0: port 2(bridge_slave_1) entered blocking state
[ 118.345192][ T5363] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 118.349742][ T5363] bridge0: port 1(bridge_slave_0) entered blocking state
[ 118.352666][ T5363] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 118.391175][ T30] bridge0: port 1(bridge_slave_0) entered disabled state
[ 118.397919][ T30] bridge0: port 2(bridge_slave_1) entered disabled state
[ 118.544235][ T5363] 8021q: adding VLAN 0 to HW filter on device bond0
[ 118.619426][ T5363] 8021q: adding VLAN 0 to HW filter on device team0
[ 118.641802][ T160] bridge0: port 1(bridge_slave_0) entered blocking state
[ 118.645072][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 118.678804][ T160] bridge0: port 2(bridge_slave_1) entered blocking state
[ 118.681807][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 119.303474][ T5363] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 119.406626][ T5363] veth0_vlan: entered promiscuous mode
[ 119.453543][ T5363] veth1_vlan: entered promiscuous mode
[ 119.528627][ T5363] veth0_macvtap: entered promiscuous mode
[ 119.543455][ T5363] veth1_macvtap: entered promiscuous mode
[ 119.568211][ T5363] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 119.593559][ T5363] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 119.612173][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.626306][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.637306][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.671205][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 120.085686][ T160] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 120.636770][ T160] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 120.960938][ T160] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 121.527365][ T160] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 122.043512][ T160] bridge_slave_1: left allmulticast mode
[ 122.047176][ T160] bridge_slave_1: left promiscuous mode
[ 122.052315][ T160] bridge0: port 2(bridge_slave_1) entered disabled state
[ 122.067611][ T160] bridge_slave_0: left allmulticast mode
[ 122.070107][ T160] bridge_slave_0: left promiscuous mode
[ 122.074821][ T160] bridge0: port 1(bridge_slave_0) entered disabled state
[ 122.256975][ T160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 122.270848][ T160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 122.275709][ T160] bond0 (unregistering): Released all slaves
[ 122.352509][ T160] hsr_slave_0: left promiscuous mode
[ 122.378137][ T160] hsr_slave_1: left promiscuous mode
[ 122.394585][ T160] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 122.407055][ T160] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 122.442269][ T160] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 122.460410][ T160] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 122.520256][ T160] veth1_macvtap: left promiscuous mode
[ 122.532007][ T160] veth0_macvtap: left promiscuous mode
[ 122.539984][ T160] veth1_vlan: left promiscuous mode
[ 122.549382][ T160] veth0_vlan: left promiscuous mode
[ 123.159663][ T160] team0 (unregistering): Port device team_slave_1 removed
[ 123.194032][ T160] team0 (unregistering): Port device team_slave_0 removed
2026/07/06 16:14:06 executed programs: 0
[ 123.663068][ T4650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 123.671066][ T4650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 123.678275][ T4650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 123.683290][ T4650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 123.687301][ T4650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 124.451900][ T4996] 8021q: adding VLAN 0 to HW filter on device eth2
[ 125.192550][ T4996] 8021q: adding VLAN 0 to HW filter on device eth3
[ 125.529024][ T5422] bridge0: port 1(bridge_slave_0) entered blocking state
[ 125.532399][ T5422] bridge0: port 1(bridge_slave_0) entered disabled state
[ 125.546613][ T5422] bridge_slave_0: entered allmulticast mode
[ 125.551266][ T5422] bridge_slave_0: entered promiscuous mode
[ 125.567562][ T5422] bridge0: port 2(bridge_slave_1) entered blocking state
[ 125.577195][ T5422] bridge0: port 2(bridge_slave_1) entered disabled state
[ 125.587733][ T5422] bridge_slave_1: entered allmulticast mode
[ 125.593053][ T5422] bridge_slave_1: entered promiscuous mode
[ 125.651999][ T4996] 8021q: adding VLAN 0 to HW filter on device eth4
[ 125.661687][ T5422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 125.673066][ T5422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 125.703768][ T5422] team0: Port device team_slave_0 added
[ 125.713772][ T5422] team0: Port device team_slave_1 added
[ 125.736522][ T4650] Bluetooth: hci0: command tx timeout
[ 125.753912][ T5422] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 125.758778][ T5422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 125.786229][ T5422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 125.792739][ T5422] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 125.802892][ T5422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 125.826927][ T5422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 125.928386][ T5422] hsr_slave_0: entered promiscuous mode
[ 125.936735][ T5422] hsr_slave_1: entered promiscuous mode
[ 126.113701][ T4996] 8021q: adding VLAN 0 to HW filter on device eth5
[ 126.740036][ T5422] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 126.758570][ T5422] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 126.762642][ T5422] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 126.792936][ T5422] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 126.799420][ T5422] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 126.822395][ T5422] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 126.841149][ T5422] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 126.852192][ T5422] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 127.036805][ T5422] 8021q: adding VLAN 0 to HW filter on device bond0
[ 127.082920][ T5422] 8021q: adding VLAN 0 to HW filter on device team0
[ 127.104297][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 127.107989][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 127.145289][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 127.148566][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 127.233773][ T5422] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 127.249325][ T5422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 127.815654][ T4650] Bluetooth: hci0: command tx timeout
[ 127.941812][ T5422] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 128.013061][ T5422] veth0_vlan: entered promiscuous mode
[ 128.026653][ T5422] veth1_vlan: entered promiscuous mode
[ 128.070283][ T5422] veth0_macvtap: entered promiscuous mode
[ 128.080554][ T5422] veth1_macvtap: entered promiscuous mode
[ 128.104642][ T5422] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 128.118880][ T5422] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 128.128735][ T1075] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.135080][ T1075] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.142252][ T1075] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.151679][ T1075] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.244503][ T1075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 128.256927][ T1075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 128.343815][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 128.352986][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 128.931541][ T5501] loop0: detected capacity change from 0 to 32768
[ 129.047074][ T5501] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 129.061340][ T5501] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 129.201369][ T5501] syz.0.17: attempt to access beyond end of device
[ 129.201369][ T5501] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 129.222524][ T5501] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 129.246431][ T5501] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:6
[ 129.258091][ T5501] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320
[ 129.277817][ T5501] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 129.290972][ T5501] CPU: 0 UID: 0 PID: 5501 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 129.290991][ T5501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 129.290997][ T5501] Call Trace:
[ 129.291002][ T5501]
[ 129.291007][ T5501] dump_stack_lvl+0xe8/0x150
[ 129.291029][ T5501] gfs2_withdraw+0xc3/0x1b0
[ 129.291047][ T5501] gfs2_jdesc_check+0x17d/0x2f0
[ 129.291067][ T5501] init_journal+0xcc3/0x2330
[ 129.291089][ T5501] ? init_inodes+0xdb/0x320
[ 129.291106][ T5501] ? __pfx_init_journal+0x10/0x10
[ 129.291120][ T5501] ? vsnprintf+0xe42/0xef0
[ 129.291195][ T5501] ? snprintf+0xe8/0x140
[ 129.291207][ T5501] ? init_inodes+0xdb/0x320
[ 129.291222][ T5501] ? __pfx_snprintf+0x10/0x10
[ 129.291234][ T5501] ? gfs2_glock_nq_num+0x13d/0x170
[ 129.291252][ T5501] init_inodes+0xdb/0x320
[ 129.291268][ T5501] gfs2_fill_super+0x1942/0x20b0
[ 129.291287][ T5501] ? __pfx_gfs2_fill_super+0x10/0x10
[ 129.291303][ T5501] ? init_locking+0xb8/0x210
[ 129.291316][ T5501] ? sb_set_blocksize+0x155/0x240
[ 129.291331][ T5501] ? setup_bdev_super+0x4c1/0x5b0
[ 129.291348][ T5501] get_tree_bdev_flags+0x430/0x4f0
[ 129.291362][ T5501] ? __pfx_gfs2_fill_super+0x10/0x10
[ 129.291377][ T5501] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 129.291398][ T5501] gfs2_get_tree+0x51/0x1e0
[ 129.291415][ T5501] vfs_get_tree+0x92/0x2a0
[ 129.291431][ T5501] do_new_mount+0x319/0xdc0
[ 129.291448][ T5501] ? __pfx_do_new_mount+0x10/0x10
[ 129.291460][ T5501] ? ns_capable+0x89/0xe0
[ 129.291476][ T5501] ? path_mount+0x647/0x1040
[ 129.291489][ T5501] ? user_path_at+0xd4/0x160
[ 129.291505][ T5501] __se_sys_mount+0x31d/0x420
[ 129.291520][ T5501] ? __pfx___se_sys_mount+0x10/0x10
[ 129.291537][ T5501] ? __x64_sys_mount+0x20/0xc0
[ 129.291548][ T5501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 129.291560][ T5501] do_syscall_64+0x174/0x580
[ 129.291572][ T5501] ? trace_irq_disable+0x3b/0x140
[ 129.291587][ T5501] ? clear_bhb_loop+0x40/0x90
[ 129.291601][ T5501] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 129.291634][ T5501] RIP: 0033:0x7f2d4699f0ca
[ 129.291646][ T5501] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 129.291655][ T5501] RSP: 002b:00007ffeed735b98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 129.291669][ T5501] RAX: ffffffffffffffda RBX: 00007ffeed735c20 RCX: 00007f2d4699f0ca
[ 129.291677][ T5501] RDX: 0000200000000400 RSI: 0000200000000080 RDI: 00007ffeed735be0
[ 129.291684][ T5501] RBP: 0000200000000400 R08: 00007ffeed735c20 R09: 0000000000000000
[ 129.291690][ T5501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080
[ 129.291696][ T5501] R13: 00007ffeed735be0 R14: 00000000000125bb R15: 0000200000000180
[ 129.291714][ T5501]
[ 129.294056][ T5501] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5
2026/07/06 16:14:13 executed programs: 3
[ 129.897111][ T4650] Bluetooth: hci0: command tx timeout
[ 130.184652][ T5504] loop0: detected capacity change from 0 to 32768
[ 130.239067][ T5504] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 130.247593][ T5504] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 130.278116][ T5504] syz.0.18: attempt to access beyond end of device
[ 130.278116][ T5504] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 130.306533][ T5504] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 130.329557][ T5504] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:6
[ 130.335997][ T5504] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320
[ 130.342518][ T5504] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 130.348854][ T5504] CPU: 0 UID: 0 PID: 5504 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full)
[ 130.348871][ T5504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 130.348878][ T5504] Call Trace:
[ 130.348882][ T5504]
[ 130.348887][ T5504] dump_stack_lvl+0xe8/0x150
[ 130.348908][ T5504] gfs2_withdraw+0xc3/0x1b0
[ 130.348923][ T5504] gfs2_jdesc_check+0x17d/0x2f0
[ 130.348942][ T5504] init_journal+0xcc3/0x2330
[ 130.348961][ T5504] ? init_inodes+0xdb/0x320
[ 130.348976][ T5504] ? __pfx_init_journal+0x10/0x10
[ 130.348988][ T5504] ? vsnprintf+0xe42/0xef0
[ 130.349017][ T5504] ? snprintf+0xe8/0x140
[ 130.349028][ T5504] ? init_inodes+0xdb/0x320
[ 130.349041][ T5504] ? __pfx_snprintf+0x10/0x10
[ 130.349051][ T5504] ? gfs2_glock_nq_num+0x13d/0x170
[ 130.349067][ T5504] init_inodes+0xdb/0x320
[ 130.349082][ T5504] gfs2_fill_super+0x1942/0x20b0
[ 130.349102][ T5504] ? __pfx_gfs2_fill_super+0x10/0x10
[ 130.349116][ T5504] ? init_locking+0xb8/0x210
[ 130.349128][ T5504] ? sb_set_blocksize+0x155/0x240
[ 130.349141][ T5504] ? setup_bdev_super+0x4c1/0x5b0
[ 130.349159][ T5504] get_tree_bdev_flags+0x430/0x4f0
[ 130.349173][ T5504] ? __pfx_gfs2_fill_super+0x10/0x10
[ 130.349185][ T5504] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 130.349204][ T5504] gfs2_get_tree+0x51/0x1e0
[ 130.349219][ T5504] vfs_get_tree+0x92/0x2a0
[ 130.349258][ T5504] do_new_mount+0x319/0xdc0
[ 130.349273][ T5504] ? __pfx_do_new_mount+0x10/0x10
[ 130.349285][ T5504] ? ns_capable+0x89/0xe0
[ 130.349298][ T5504] ? path_mount+0x647/0x1040
[ 130.349310][ T5504] ? user_path_at+0xd4/0x160
[ 130.349324][ T5504] __se_sys_mount+0x31d/0x420
[ 130.349338][ T5504] ? __pfx___se_sys_mount+0x10/0x10
[ 130.349352][ T5504] ? __x64_sys_mount+0x20/0xc0
[ 130.349362][ T5504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 130.349373][ T5504] do_syscall_64+0x174/0x580
[ 130.349385][ T5504] ? trace_irq_disable+0x3b/0x140
[ 130.349398][ T5504] ? clear_bhb_loop+0x40/0x90
[ 130.349410][ T5504] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 130.349420][ T5504] RIP: 0033:0x7f2d4699f0ca
[ 130.349432][ T5504] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 130.349440][ T5504] RSP: 002b:00007ffeed735b98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 130.349455][ T5504] RAX: ffffffffffffffda RBX: 00007ffeed735c20 RCX: 00007f2d4699f0ca
[ 130.349462][ T5504] RDX: 0000200000000400 RSI: 0000200000000080 RDI: 00007ffeed735be0
[ 130.349470][ T5504] RBP: 0000200000000400 R08: 00007ffeed735c20 R09: 0000000000000000
[ 130.349477][ T5504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080
[ 130.349483][ T5504] R13: 00007ffeed735be0 R14: 00000000000125bb R15: 0000200000000180
[ 130.349498][ T5504]
[ 130.349559][ T5504] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5
[ 130.974911][ T5507] loop0: detected capacity change from 0 to 32768
[ 131.009212][ T5507] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 131.017726][ T5507] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 131.068320][ T5507] syz.0.19: attempt to access beyond end of device
[ 131.068320][ T5507] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 131.092985][ T5507] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 131.113132][ T5507] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:6
[ 131.119744][ T5507] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320
[ 131.123754][ T5507] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 131.128231][ T5507] CPU: 0 UID: 0 PID: 5507 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full)
[ 131.128247][ T5507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 131.128253][ T5507] Call Trace:
[ 131.128258][ T5507]
[ 131.128263][ T5507] dump_stack_lvl+0xe8/0x150
[ 131.128288][ T5507] gfs2_withdraw+0xc3/0x1b0
[ 131.128303][ T5507] gfs2_jdesc_check+0x17d/0x2f0
[ 131.128326][ T5507] init_journal+0xcc3/0x2330
[ 131.128349][ T5507] ? init_inodes+0xdb/0x320
[ 131.128367][ T5507] ? __pfx_init_journal+0x10/0x10
[ 131.128378][ T5507] ? vsnprintf+0xe42/0xef0
[ 131.128392][ T5507] ? snprintf+0xe8/0x140
[ 131.128404][ T5507] ? init_inodes+0xdb/0x320
[ 131.128417][ T5507] ? __pfx_snprintf+0x10/0x10
[ 131.128430][ T5507] ? gfs2_glock_nq_num+0x13d/0x170
[ 131.128449][ T5507] init_inodes+0xdb/0x320
[ 131.128465][ T5507] gfs2_fill_super+0x1942/0x20b0
[ 131.128490][ T5507] ? __pfx_gfs2_fill_super+0x10/0x10
[ 131.128507][ T5507] ? init_locking+0xb8/0x210
[ 131.128527][ T5507] ? sb_set_blocksize+0x155/0x240
[ 131.128541][ T5507] ? setup_bdev_super+0x4c1/0x5b0
[ 131.128559][ T5507] get_tree_bdev_flags+0x430/0x4f0
[ 131.128575][ T5507] ? __pfx_gfs2_fill_super+0x10/0x10
[ 131.128590][ T5507] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 131.128606][ T5507] gfs2_get_tree+0x51/0x1e0
[ 131.128617][ T5507] vfs_get_tree+0x92/0x2a0
[ 131.128628][ T5507] do_new_mount+0x319/0xdc0
[ 131.128639][ T5507] ? __pfx_do_new_mount+0x10/0x10
[ 131.128648][ T5507] ? ns_capable+0x89/0xe0
[ 131.128662][ T5507] ? path_mount+0x647/0x1040
[ 131.128699][ T5507] ? user_path_at+0xd4/0x160
[ 131.128716][ T5507] __se_sys_mount+0x31d/0x420
[ 131.128733][ T5507] ? __pfx___se_sys_mount+0x10/0x10
[ 131.128769][ T5507] ? __x64_sys_mount+0x20/0xc0
[ 131.128779][ T5507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 131.128787][ T5507] do_syscall_64+0x174/0x580
[ 131.128799][ T5507] ? trace_irq_disable+0x3b/0x140
[ 131.128813][ T5507] ? clear_bhb_loop+0x40/0x90
[ 131.128826][ T5507] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 131.128837][ T5507] RIP: 0033:0x7f2d4699f0ca
[ 131.128849][ T5507] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 131.128858][ T5507] RSP: 002b:00007ffeed735b98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 131.128871][ T5507] RAX: ffffffffffffffda RBX: 00007ffeed735c20 RCX: 00007f2d4699f0ca
[ 131.128878][ T5507] RDX: 0000200000000400 RSI: 0000200000000080 RDI: 00007ffeed735be0
[ 131.128885][ T5507] RBP: 0000200000000400 R08: 00007ffeed735c20 R09: 0000000000000000
[ 131.128893][ T5507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080
[ 131.128900][ T5507] R13: 00007ffeed735be0 R14: 00000000000125bb R15: 0000200000000180
[ 131.128918][ T5507]
[ 131.129149][ T5507] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5
[ 131.724784][ T5510] loop0: detected capacity change from 0 to 32768
[ 131.753344][ T5510] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 131.767742][ T5510] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 131.795591][ T5510] syz.0.20: attempt to access beyond end of device
[ 131.795591][ T5510] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 131.816072][ T5510] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 131.826341][ T5510] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:6
[ 131.835975][ T5510] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320
[ 131.844537][ T5510] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 131.850619][ T5510] CPU: 0 UID: 0 PID: 5510 Comm: syz.0.20 Not tainted syzkaller #0 PREEMPT(full)
[ 131.850636][ T5510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 131.850642][ T5510] Call Trace:
[ 131.850646][ T5510]
[ 131.850651][ T5510] dump_stack_lvl+0xe8/0x150
[ 131.850672][ T5510] gfs2_withdraw+0xc3/0x1b0
[ 131.850698][ T5510] gfs2_jdesc_check+0x17d/0x2f0
[ 131.850717][ T5510] init_journal+0xcc3/0x2330
[ 131.850739][ T5510] ? init_inodes+0xdb/0x320
[ 131.850755][ T5510] ? __pfx_init_journal+0x10/0x10
[ 131.850769][ T5510] ? vsnprintf+0xe42/0xef0
[ 131.850788][ T5510] ? snprintf+0xe8/0x140
[ 131.850799][ T5510] ? init_inodes+0xdb/0x320
[ 131.850812][ T5510] ? __pfx_snprintf+0x10/0x10
[ 131.850824][ T5510] ? gfs2_glock_nq_num+0x13d/0x170
[ 131.850843][ T5510] init_inodes+0xdb/0x320
[ 131.850859][ T5510] gfs2_fill_super+0x1942/0x20b0
[ 131.850895][ T5510] ? __pfx_gfs2_fill_super+0x10/0x10
[ 131.850907][ T5510] ? init_locking+0xb8/0x210
[ 131.850915][ T5510] ? sb_set_blocksize+0x155/0x240
[ 131.850926][ T5510] ? setup_bdev_super+0x4c1/0x5b0
[ 131.850942][ T5510] get_tree_bdev_flags+0x430/0x4f0
[ 131.850956][ T5510] ? __pfx_gfs2_fill_super+0x10/0x10
[ 131.850969][ T5510] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 131.850989][ T5510] gfs2_get_tree+0x51/0x1e0
[ 131.851004][ T5510] vfs_get_tree+0x92/0x2a0
[ 131.851020][ T5510] do_new_mount+0x319/0xdc0
[ 131.851035][ T5510] ? __pfx_do_new_mount+0x10/0x10
[ 131.851048][ T5510] ? ns_capable+0x89/0xe0
[ 131.851063][ T5510] ? path_mount+0x647/0x1040
[ 131.851076][ T5510] ? user_path_at+0xd4/0x160
[ 131.851090][ T5510] __se_sys_mount+0x31d/0x420
[ 131.851105][ T5510] ? __pfx___se_sys_mount+0x10/0x10
[ 131.851121][ T5510] ? __x64_sys_mount+0x20/0xc0
[ 131.851132][ T5510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 131.851143][ T5510] do_syscall_64+0x174/0x580
[ 131.851157][ T5510] ? trace_irq_disable+0x3b/0x140
[ 131.851171][ T5510] ? clear_bhb_loop+0x40/0x90
[ 131.851184][ T5510] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 131.851195][ T5510] RIP: 0033:0x7f2d4699f0ca
[ 131.851206][ T5510] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 131.851215][ T5510] RSP: 002b:00007ffeed735b98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 131.851228][ T5510] RAX: ffffffffffffffda RBX: 00007ffeed735c20 RCX: 00007f2d4699f0ca
[ 131.851235][ T5510] RDX: 0000200000000400 RSI: 0000200000000080 RDI: 00007ffeed735be0
[ 131.851242][ T5510] RBP: 0000200000000400 R08: 00007ffeed735c20 R09: 0000000000000000
[ 131.851249][ T5510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080
[ 131.851256][ T5510] R13: 00007ffeed735be0 R14: 00000000000125bb R15: 0000200000000180
[ 131.851274][ T5510]
[ 131.852079][ T5510] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5
[ 132.009016][ T4650] Bluetooth: hci0: command tx timeout
[ 132.517989][ T5513] loop0: detected capacity change from 0 to 32768
[ 132.556066][ T5513] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 132.562224][ T5513] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 132.590510][ T5513] syz.0.21: attempt to access beyond end of device
[ 132.590510][ T5513] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 132.605732][ T5513] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 132.618568][ T5513] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:6
[ 132.629703][ T5513] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320
[ 132.639165][ T5513] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 132.651454][ T5513] CPU: 0 UID: 0 PID: 5513 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(full)
[ 132.651474][ T5513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 132.651482][ T5513] Call Trace:
[ 132.651488][ T5513]
[ 132.651495][ T5513] dump_stack_lvl+0xe8/0x150
[ 132.651522][ T5513] gfs2_withdraw+0xc3/0x1b0
[ 132.651542][ T5513] gfs2_jdesc_check+0x17d/0x2f0
[ 132.651569][ T5513] init_journal+0xcc3/0x2330
[ 132.651595][ T5513] ? init_inodes+0xdb/0x320
[ 132.651652][ T5513] ? __pfx_init_journal+0x10/0x10
[ 132.651669][ T5513] ? vsnprintf+0xe42/0xef0
[ 132.651699][ T5513] ? snprintf+0xe8/0x140
[ 132.651712][ T5513] ? init_inodes+0xdb/0x320
[ 132.651729][ T5513] ? __pfx_snprintf+0x10/0x10
[ 132.651744][ T5513] ? gfs2_glock_nq_num+0x13d/0x170
[ 132.651766][ T5513] init_inodes+0xdb/0x320
[ 132.651786][ T5513] gfs2_fill_super+0x1942/0x20b0
[ 132.651813][ T5513] ? __pfx_gfs2_fill_super+0x10/0x10
[ 132.651834][ T5513] ? init_locking+0xb8/0x210
[ 132.651852][ T5513] ? sb_set_blocksize+0x155/0x240
[ 132.651868][ T5513] ? setup_bdev_super+0x4c1/0x5b0
[ 132.651891][ T5513] get_tree_bdev_flags+0x430/0x4f0
[ 132.651910][ T5513] ? __pfx_gfs2_fill_super+0x10/0x10
[ 132.651927][ T5513] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 132.651953][ T5513] gfs2_get_tree+0x51/0x1e0
[ 132.651975][ T5513] vfs_get_tree+0x92/0x2a0
[ 132.651995][ T5513] do_new_mount+0x319/0xdc0
[ 132.652020][ T5513] ? __pfx_do_new_mount+0x10/0x10
[ 132.652036][ T5513] ? ns_capable+0x89/0xe0
[ 132.652055][ T5513] ? path_mount+0x647/0x1040
[ 132.652072][ T5513] ? user_path_at+0xd4/0x160
[ 132.652091][ T5513] __se_sys_mount+0x31d/0x420
[ 132.652112][ T5513] ? __pfx___se_sys_mount+0x10/0x10
[ 132.652131][ T5513] ? __x64_sys_mount+0x20/0xc0
[ 132.652146][ T5513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 132.652161][ T5513] do_syscall_64+0x174/0x580
[ 132.652177][ T5513] ? trace_irq_disable+0x3b/0x140
[ 132.652194][ T5513] ? clear_bhb_loop+0x40/0x90
[ 132.652211][ T5513] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 132.652224][ T5513] RIP: 0033:0x7f2d4699f0ca
[ 132.652239][ T5513] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 132.652250][ T5513] RSP: 002b:00007ffeed735b98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 132.652265][ T5513] RAX: ffffffffffffffda RBX: 00007ffeed735c20 RCX: 00007f2d4699f0ca
[ 132.652274][ T5513] RDX: 0000200000000400 RSI: 0000200000000080 RDI: 00007ffeed735be0
[ 132.652282][ T5513] RBP: 0000200000000400 R08: 00007ffeed735c20 R09: 0000000000000000
[ 132.652291][ T5513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080
[ 132.652300][ T5513] R13: 00007ffeed735be0 R14: 00000000000125bb R15: 0000200000000180
[ 132.652322][ T5513]
[ 132.654404][ T5513] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5
[ 133.221282][ T5516] loop0: detected capacity change from 0 to 32768
[ 133.233999][ T5516] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 133.250354][ T5516] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 133.275234][ T5516] syz.0.22: attempt to access beyond end of device
[ 133.275234][ T5516] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 133.290545][ T5516] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 133.306701][ T5516] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:6
[ 133.310461][ T5516] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320
[ 133.315065][ T5516] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 133.333823][ T5516] CPU: 0 UID: 0 PID: 5516 Comm: syz.0.22 Not tainted syzkaller #0 PREEMPT(full)
[ 133.333843][ T5516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 133.333850][ T5516] Call Trace:
[ 133.333856][ T5516]
[ 133.333861][ T5516] dump_stack_lvl+0xe8/0x150
[ 133.333884][ T5516] gfs2_withdraw+0xc3/0x1b0
[ 133.333904][ T5516] gfs2_jdesc_check+0x17d/0x2f0
[ 133.333924][ T5516] init_journal+0xcc3/0x2330
[ 133.333948][ T5516] ? init_inodes+0xdb/0x320
[ 133.333968][ T5516] ? __pfx_init_journal+0x10/0x10
[ 133.333982][ T5516] ? vsnprintf+0xe42/0xef0
[ 133.334004][ T5516] ? snprintf+0xe8/0x140
[ 133.334017][ T5516] ? init_inodes+0xdb/0x320
[ 133.334039][ T5516] ? __pfx_snprintf+0x10/0x10
[ 133.334053][ T5516] ? gfs2_glock_nq_num+0x13d/0x170
[ 133.334074][ T5516] init_inodes+0xdb/0x320
[ 133.334091][ T5516] gfs2_fill_super+0x1942/0x20b0
[ 133.334116][ T5516] ? __pfx_gfs2_fill_super+0x10/0x10
[ 133.334135][ T5516] ? init_locking+0xb8/0x210
[ 133.334149][ T5516] ? sb_set_blocksize+0x155/0x240
[ 133.334165][ T5516] ? setup_bdev_super+0x4c1/0x5b0
[ 133.334185][ T5516] get_tree_bdev_flags+0x430/0x4f0
[ 133.334201][ T5516] ? __pfx_gfs2_fill_super+0x10/0x10
[ 133.334217][ T5516] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 133.334239][ T5516] gfs2_get_tree+0x51/0x1e0
[ 133.334257][ T5516] vfs_get_tree+0x92/0x2a0
[ 133.334310][ T5516] do_new_mount+0x319/0xdc0
[ 133.334327][ T5516] ? __pfx_do_new_mount+0x10/0x10
[ 133.334336][ T5516] ? ns_capable+0x89/0xe0
[ 133.334350][ T5516] ? path_mount+0x647/0x1040
[ 133.334365][ T5516] ? user_path_at+0xd4/0x160
[ 133.334382][ T5516] __se_sys_mount+0x31d/0x420
[ 133.334400][ T5516] ? __pfx___se_sys_mount+0x10/0x10
[ 133.334417][ T5516] ? __x64_sys_mount+0x20/0xc0
[ 133.334429][ T5516] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 133.334443][ T5516] do_syscall_64+0x174/0x580
[ 133.334480][ T5516] ? trace_irq_disable+0x3b/0x140
[ 133.334499][ T5516] ? clear_bhb_loop+0x40/0x90
[ 133.334511][ T5516] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 133.334519][ T5516] RIP: 0033:0x7f2d4699f0ca
[ 133.334531][ T5516] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 133.334541][ T5516] RSP: 002b:00007ffeed735b98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 133.334555][ T5516] RAX: ffffffffffffffda RBX: 00007ffeed735c20 RCX: 00007f2d4699f0ca
[ 133.334563][ T5516] RDX: 0000200000000400 RSI: 0000200000000080 RDI: 00007ffeed735be0
[ 133.334570][ T5516] RBP: 0000200000000400 R08: 00007ffeed735c20 R09: 0000000000000000
[ 133.334578][ T5516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080
[ 133.334585][ T5516] R13: 00007ffeed735be0 R14: 00000000000125bb R15: 0000200000000180
[ 133.334606][ T5516]
[ 133.461973][ T5516] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5
[ 133.946686][ T5520] loop0: detected capacity change from 0 to 32768
[ 133.972569][ T5520] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 133.984745][ T5520] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 134.012902][ T5520] syz.0.23: attempt to access beyond end of device
[ 134.012902][ T5520] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 134.035925][ T5520] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 134.043575][ T5520] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:6
[ 134.055087][ T5520] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320
[ 134.063780][ T5520] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 134.070059][ T5520] CPU: 0 UID: 0 PID: 5520 Comm: syz.0.23 Not tainted syzkaller #0 PREEMPT(full)
[ 134.070077][ T5520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 134.070083][ T5520] Call Trace:
[ 134.070088][ T5520]
[ 134.070095][ T5520] dump_stack_lvl+0xe8/0x150
[ 134.070126][ T5520] gfs2_withdraw+0xc3/0x1b0
[ 134.070143][ T5520] gfs2_jdesc_check+0x17d/0x2f0
[ 134.070164][ T5520] init_journal+0xcc3/0x2330
[ 134.070186][ T5520] ? init_inodes+0xdb/0x320
[ 134.070204][ T5520] ? __pfx_init_journal+0x10/0x10
[ 134.070218][ T5520] ? vsnprintf+0xe42/0xef0
[ 134.070237][ T5520] ? snprintf+0xe8/0x140
[ 134.070250][ T5520] ? init_inodes+0xdb/0x320
[ 134.070294][ T5520] ? __pfx_snprintf+0x10/0x10
[ 134.070307][ T5520] ? gfs2_glock_nq_num+0x13d/0x170
[ 134.070327][ T5520] init_inodes+0xdb/0x320
[ 134.070344][ T5520] gfs2_fill_super+0x1942/0x20b0
[ 134.070368][ T5520] ? __pfx_gfs2_fill_super+0x10/0x10
[ 134.070385][ T5520] ? init_locking+0xb8/0x210
[ 134.070399][ T5520] ? sb_set_blocksize+0x155/0x240
[ 134.070430][ T5520] ? setup_bdev_super+0x4c1/0x5b0
[ 134.070452][ T5520] get_tree_bdev_flags+0x430/0x4f0
[ 134.070468][ T5520] ? __pfx_gfs2_fill_super+0x10/0x10
[ 134.070483][ T5520] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 134.070505][ T5520] gfs2_get_tree+0x51/0x1e0
[ 134.070523][ T5520] vfs_get_tree+0x92/0x2a0
[ 134.070538][ T5520] do_new_mount+0x319/0xdc0
[ 134.070555][ T5520] ? __pfx_do_new_mount+0x10/0x10
[ 134.070567][ T5520] ? ns_capable+0x89/0xe0
[ 134.070581][ T5520] ? path_mount+0x647/0x1040
[ 134.070595][ T5520] ? user_path_at+0xd4/0x160
[ 134.070609][ T5520] __se_sys_mount+0x31d/0x420
[ 134.070624][ T5520] ? __pfx___se_sys_mount+0x10/0x10
[ 134.070639][ T5520] ? __x64_sys_mount+0x20/0xc0
[ 134.070650][ T5520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 134.070661][ T5520] do_syscall_64+0x174/0x580
[ 134.070673][ T5520] ? trace_irq_disable+0x3b/0x140
[ 134.070686][ T5520] ? clear_bhb_loop+0x40/0x90
[ 134.070698][ T5520] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 134.070707][ T5520] RIP: 0033:0x7f2d4699f0ca
[ 134.070719][ T5520] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 134.070726][ T5520] RSP: 002b:00007ffeed735b98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 134.070739][ T5520] RAX: ffffffffffffffda RBX: 00007ffeed735c20 RCX: 00007f2d4699f0ca
[ 134.070747][ T5520] RDX: 0000200000000400 RSI: 0000200000000080 RDI: 00007ffeed735be0
[ 134.070755][ T5520] RBP: 0000200000000400 R08: 00007ffeed735c20 R09: 0000000000000000
[ 134.070762][ T5520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080
[ 134.070768][ T5520] R13: 00007ffeed735be0 R14: 00000000000125bb R15: 0000200000000180
[ 134.070787][ T5520]
[ 134.070840][ T5520] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5
[ 134.879808][ T5523] loop0: detected capacity change from 0 to 32768
[ 134.930055][ T5523] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 134.942947][ T5523] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 134.982951][ T5523] syz.0.24: attempt to access beyond end of device
[ 134.982951][ T5523] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 135.007078][ T5523] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 135.029143][ T5523] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:6
[ 135.048977][ T5523] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320
[ 135.063440][ T5523] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 135.075250][ T5523] CPU: 0 UID: 0 PID: 5523 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT(full)
[ 135.075270][ T5523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 135.075276][ T5523] Call Trace:
[ 135.075320][ T5523]
[ 135.075325][ T5523] dump_stack_lvl+0xe8/0x150
[ 135.075363][ T5523] gfs2_withdraw+0xc3/0x1b0
[ 135.075386][ T5523] gfs2_jdesc_check+0x17d/0x2f0
[ 135.075405][ T5523] init_journal+0xcc3/0x2330
[ 135.075426][ T5523] ? init_inodes+0xdb/0x320
[ 135.075474][ T5523] ? __pfx_init_journal+0x10/0x10
[ 135.075487][ T5523] ? vsnprintf+0xe42/0xef0
[ 135.075534][ T5523] ? snprintf+0xe8/0x140
[ 135.075547][ T5523] ? init_inodes+0xdb/0x320
[ 135.075560][ T5523] ? __pfx_snprintf+0x10/0x10
[ 135.075572][ T5523] ? gfs2_glock_nq_num+0x13d/0x170
[ 135.075590][ T5523] init_inodes+0xdb/0x320
[ 135.075605][ T5523] gfs2_fill_super+0x1942/0x20b0
[ 135.075624][ T5523] ? __pfx_gfs2_fill_super+0x10/0x10
[ 135.075639][ T5523] ? init_locking+0xb8/0x210
[ 135.075651][ T5523] ? sb_set_blocksize+0x155/0x240
[ 135.075665][ T5523] ? setup_bdev_super+0x4c1/0x5b0
[ 135.075683][ T5523] get_tree_bdev_flags+0x430/0x4f0
[ 135.075698][ T5523] ? __pfx_gfs2_fill_super+0x10/0x10
[ 135.075711][ T5523] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 135.075730][ T5523] gfs2_get_tree+0x51/0x1e0
[ 135.075746][ T5523] vfs_get_tree+0x92/0x2a0
[ 135.075763][ T5523] do_new_mount+0x319/0xdc0
[ 135.075780][ T5523] ? __pfx_do_new_mount+0x10/0x10
[ 135.075792][ T5523] ? ns_capable+0x89/0xe0
[ 135.075805][ T5523] ? path_mount+0x647/0x1040
[ 135.075818][ T5523] ? user_path_at+0xd4/0x160
[ 135.075833][ T5523] __se_sys_mount+0x31d/0x420
[ 135.075849][ T5523] ? __pfx___se_sys_mount+0x10/0x10
[ 135.075863][ T5523] ? __x64_sys_mount+0x20/0xc0
[ 135.075873][ T5523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 135.075885][ T5523] do_syscall_64+0x174/0x580
[ 135.075899][ T5523] ? trace_irq_disable+0x3b/0x140
[ 135.075911][ T5523] ? clear_bhb_loop+0x40/0x90
[ 135.075923][ T5523] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 135.075933][ T5523] RIP: 0033:0x7f2d4699f0ca
[ 135.075945][ T5523] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 135.075953][ T5523] RSP: 002b:00007ffeed735b98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 135.075966][ T5523] RAX: ffffffffffffffda RBX: 00007ffeed735c20 RCX: 00007f2d4699f0ca
[ 135.075973][ T5523] RDX: 0000200000000400 RSI: 0000200000000080 RDI: 00007ffeed735be0
[ 135.075980][ T5523] RBP: 0000200000000400 R08: 00007ffeed735c20 R09: 0000000000000000
[ 135.075985][ T5523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080
[ 135.075992][ T5523] R13: 00007ffeed735be0 R14: 00000000000125bb R15: 0000200000000180
[ 135.076008][ T5523]
[ 135.290464][ T5523] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5
2026/07/06 16:14:19 executed programs: 10
[ 136.037327][ T5526] loop0: detected capacity change from 0 to 32768
[ 136.089346][ T5526] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 136.105359][ T5526] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 136.155038][ T5526] syz.0.25: attempt to access beyond end of device
[ 136.155038][ T5526] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 136.177055][ T5526] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 136.201905][ T5526] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:6
[ 136.221769][ T5526] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320
[ 136.235946][ T5526] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 136.245279][ T5526] CPU: 0 UID: 0 PID: 5526 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT(full)
[ 136.245299][ T5526] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 136.245306][ T5526] Call Trace:
[ 136.245313][ T5526]
[ 136.245320][ T5526] dump_stack_lvl+0xe8/0x150
[ 136.245361][ T5526] gfs2_withdraw+0xc3/0x1b0
[ 136.245382][ T5526] gfs2_jdesc_check+0x17d/0x2f0
[ 136.245403][ T5526] init_journal+0xcc3/0x2330
[ 136.245426][ T5526] ? init_inodes+0xdb/0x320
[ 136.245445][ T5526] ? __pfx_init_journal+0x10/0x10
[ 136.245463][ T5526] ? vsnprintf+0xe42/0xef0
[ 136.245483][ T5526] ? snprintf+0xe8/0x140
[ 136.245496][ T5526] ? init_inodes+0xdb/0x320
[ 136.245512][ T5526] ? __pfx_snprintf+0x10/0x10
[ 136.245525][ T5526] ? gfs2_glock_nq_num+0x13d/0x170
[ 136.245545][ T5526] init_inodes+0xdb/0x320
[ 136.245561][ T5526] gfs2_fill_super+0x1942/0x20b0
[ 136.245585][ T5526] ? __pfx_gfs2_fill_super+0x10/0x10
[ 136.245603][ T5526] ? init_locking+0xb8/0x210
[ 136.245617][ T5526] ? sb_set_blocksize+0x155/0x240
[ 136.245631][ T5526] ? setup_bdev_super+0x4c1/0x5b0
[ 136.245649][ T5526] get_tree_bdev_flags+0x430/0x4f0
[ 136.245665][ T5526] ? __pfx_gfs2_fill_super+0x10/0x10
[ 136.245680][ T5526] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 136.245703][ T5526] gfs2_get_tree+0x51/0x1e0
[ 136.245720][ T5526] vfs_get_tree+0x92/0x2a0
[ 136.245737][ T5526] do_new_mount+0x319/0xdc0
[ 136.245754][ T5526] ? __pfx_do_new_mount+0x10/0x10
[ 136.245768][ T5526] ? ns_capable+0x89/0xe0
[ 136.245784][ T5526] ? path_mount+0x647/0x1040
[ 136.245798][ T5526] ? user_path_at+0xd4/0x160
[ 136.245815][ T5526] __se_sys_mount+0x31d/0x420
[ 136.245832][ T5526] ? __pfx___se_sys_mount+0x10/0x10
[ 136.245849][ T5526] ? __x64_sys_mount+0x20/0xc0
[ 136.245862][ T5526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 136.245874][ T5526] do_syscall_64+0x174/0x580
[ 136.245887][ T5526] ? trace_irq_disable+0x3b/0x140
[ 136.245901][ T5526] ? clear_bhb_loop+0x40/0x90
[ 136.245916][ T5526] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 136.245926][ T5526] RIP: 0033:0x7f2d4699f0ca
[ 136.245938][ T5526] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 136.245946][ T5526] RSP: 002b:00007ffeed735b98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 136.245958][ T5526] RAX: ffffffffffffffda RBX: 00007ffeed735c20 RCX: 00007f2d4699f0ca
[ 136.245965][ T5526] RDX: 0000200000000400 RSI: 0000200000000080 RDI: 00007ffeed735be0
[ 136.245971][ T5526] RBP: 0000200000000400 R08: 00007ffeed735c20 R09: 0000000000000000
[ 136.245978][ T5526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080
[ 136.245985][ T5526] R13: 00007ffeed735be0 R14: 00000000000125bb R15: 0000200000000180
[ 136.246003][ T5526]
[ 136.446568][ T5526] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5
[ 137.015744][ T5530] loop0: detected capacity change from 0 to 32768
[ 137.035325][ T5530] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 137.046515][ T5530] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 137.067204][ T5530] syz.0.26: attempt to access beyond end of device
[ 137.067204][ T5530] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 137.084943][ T5530] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 137.099391][ T5530] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:6
[ 137.109565][ T5530] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320
[ 137.119786][ T5530] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 137.126321][ T5530] CPU: 0 UID: 0 PID: 5530 Comm: syz.0.26 Not tainted syzkaller #0 PREEMPT(full)
[ 137.126337][ T5530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 137.126344][ T5530] Call Trace:
[ 137.126349][ T5530]
[ 137.126354][ T5530] dump_stack_lvl+0xe8/0x150
[ 137.126375][ T5530] gfs2_withdraw+0xc3/0x1b0
[ 137.126391][ T5530] gfs2_jdesc_check+0x17d/0x2f0
[ 137.126410][ T5530] init_journal+0xcc3/0x2330
[ 137.126433][ T5530] ? init_inodes+0xdb/0x320
[ 137.126450][ T5530] ? __pfx_init_journal+0x10/0x10
[ 137.126471][ T5530] ? vsnprintf+0xe42/0xef0
[ 137.126502][ T5530] ? snprintf+0xe8/0x140
[ 137.126513][ T5530] ? init_inodes+0xdb/0x320
[ 137.126530][ T5530] ? __pfx_snprintf+0x10/0x10
[ 137.126541][ T5530] ? gfs2_glock_nq_num+0x13d/0x170
[ 137.126559][ T5530] init_inodes+0xdb/0x320
[ 137.126576][ T5530] gfs2_fill_super+0x1942/0x20b0
[ 137.126598][ T5530] ? __pfx_gfs2_fill_super+0x10/0x10
[ 137.126615][ T5530] ? init_locking+0xb8/0x210
[ 137.126627][ T5530] ? sb_set_blocksize+0x155/0x240
[ 137.126641][ T5530] ? setup_bdev_super+0x4c1/0x5b0
[ 137.126658][ T5530] get_tree_bdev_flags+0x430/0x4f0
[ 137.126673][ T5530] ? __pfx_gfs2_fill_super+0x10/0x10
[ 137.126687][ T5530] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 137.126706][ T5530] gfs2_get_tree+0x51/0x1e0
[ 137.126722][ T5530] vfs_get_tree+0x92/0x2a0
[ 137.126736][ T5530] do_new_mount+0x319/0xdc0
[ 137.126753][ T5530] ? __pfx_do_new_mount+0x10/0x10
[ 137.126765][ T5530] ? ns_capable+0x89/0xe0
[ 137.126780][ T5530] ? path_mount+0x647/0x1040
[ 137.126793][ T5530] ? user_path_at+0xd4/0x160
[ 137.126831][ T5530] __se_sys_mount+0x31d/0x420
[ 137.126848][ T5530] ? __pfx___se_sys_mount+0x10/0x10
[ 137.126863][ T5530] ? __x64_sys_mount+0x20/0xc0
[ 137.126875][ T5530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 137.126886][ T5530] do_syscall_64+0x174/0x580
[ 137.126899][ T5530] ? trace_irq_disable+0x3b/0x140
[ 137.126914][ T5530] ? clear_bhb_loop+0x40/0x90
[ 137.126926][ T5530] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 137.126937][ T5530] RIP: 0033:0x7f2d4699f0ca
[ 137.126950][ T5530] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 137.126958][ T5530] RSP: 002b:00007ffeed735b98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 137.126969][ T5530] RAX: ffffffffffffffda RBX: 00007ffeed735c20 RCX: 00007f2d4699f0ca
[ 137.126976][ T5530] RDX: 0000200000000400 RSI: 0000200000000080 RDI: 00007ffeed735be0
[ 137.126983][ T5530] RBP: 0000200000000400 R08: 00007ffeed735c20 R09: 0000000000000000
[ 137.126990][ T5530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080
[ 137.126996][ T5530] R13: 00007ffeed735be0 R14: 00000000000125bb R15: 0000200000000180
[ 137.127013][ T5530]
[ 137.128775][ T5530] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5
[ 137.728639][ T5536] loop0: detected capacity change from 0 to 32768
[ 137.746691][ T5536] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 137.757647][ T5536] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 137.778087][ T5536] syz.0.27: attempt to access beyond end of device
[ 137.778087][ T5536] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 137.795767][ T5536] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 137.816005][ T5536] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:6
[ 137.821259][ T5536] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320
[ 137.832793][ T5536] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 137.837438][ T5536] CPU: 0 UID: 0 PID: 5536 Comm: syz.0.27 Not tainted syzkaller #0 PREEMPT(full)
[ 137.837456][ T5536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 137.837463][ T5536] Call Trace:
[ 137.837468][ T5536]
[ 137.837473][ T5536] dump_stack_lvl+0xe8/0x150
[ 137.837499][ T5536] gfs2_withdraw+0xc3/0x1b0
[ 137.837516][ T5536] gfs2_jdesc_check+0x17d/0x2f0
[ 137.837535][ T5536] init_journal+0xcc3/0x2330
[ 137.837561][ T5536] ? init_inodes+0xdb/0x320
[ 137.837580][ T5536] ? __pfx_init_journal+0x10/0x10
[ 137.837594][ T5536] ? vsnprintf+0xe42/0xef0
[ 137.837628][ T5536] ? snprintf+0xe8/0x140
[ 137.837641][ T5536] ? init_inodes+0xdb/0x320
[ 137.837656][ T5536] ? __pfx_snprintf+0x10/0x10
[ 137.837669][ T5536] ? gfs2_glock_nq_num+0x13d/0x170
[ 137.837689][ T5536] init_inodes+0xdb/0x320
[ 137.837707][ T5536] gfs2_fill_super+0x1942/0x20b0
[ 137.837730][ T5536] ? __pfx_gfs2_fill_super+0x10/0x10
[ 137.837747][ T5536] ? init_locking+0xb8/0x210
[ 137.837761][ T5536] ? sb_set_blocksize+0x155/0x240
[ 137.837777][ T5536] ? setup_bdev_super+0x4c1/0x5b0
[ 137.837795][ T5536] get_tree_bdev_flags+0x430/0x4f0
[ 137.837811][ T5536] ? __pfx_gfs2_fill_super+0x10/0x10
[ 137.837825][ T5536] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 137.837846][ T5536] gfs2_get_tree+0x51/0x1e0
[ 137.837864][ T5536] vfs_get_tree+0x92/0x2a0
[ 137.837882][ T5536] do_new_mount+0x319/0xdc0
[ 137.837898][ T5536] ? __pfx_do_new_mount+0x10/0x10
[ 137.837910][ T5536] ? ns_capable+0x89/0xe0
[ 137.837924][ T5536] ? path_mount+0x647/0x1040
[ 137.837940][ T5536] ? user_path_at+0xd4/0x160
[ 137.837962][ T5536] __se_sys_mount+0x31d/0x420
[ 137.837977][ T5536] ? __pfx___se_sys_mount+0x10/0x10
[ 137.837994][ T5536] ? __x64_sys_mount+0x20/0xc0
[ 137.838007][ T5536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 137.838021][ T5536] do_syscall_64+0x174/0x580
[ 137.838037][ T5536] ? trace_irq_disable+0x3b/0x140
[ 137.838073][ T5536] ? clear_bhb_loop+0x40/0x90
[ 137.838083][ T5536] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 137.838091][ T5536] RIP: 0033:0x7f2d4699f0ca
[ 137.838100][ T5536] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 137.838107][ T5536] RSP: 002b:00007ffeed735b98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 137.838117][ T5536] RAX: ffffffffffffffda RBX: 00007ffeed735c20 RCX: 00007f2d4699f0ca
[ 137.838123][ T5536] RDX: 0000200000000400 RSI: 0000200000000080 RDI: 00007ffeed735be0
[ 137.838128][ T5536] RBP: 0000200000000400 R08: 00007ffeed735c20 R09: 0000000000000000
[ 137.838132][ T5536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080
[ 137.838137][ T5536] R13: 00007ffeed735be0 R14: 00000000000125bb R15: 0000200000000180
[ 137.838149][ T5536]
[ 137.838199][ T5536] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5
[ 138.431977][ T5539] loop0: detected capacity change from 0 to 32768
[ 138.452957][ T5539] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 138.467529][ T5539] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 138.496651][ T5539] syz.0.28: attempt to access beyond end of device
[ 138.496651][ T5539] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 138.515639][ T5539] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 138.528278][ T5539] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:6
[ 138.536013][ T5539] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320
[ 138.546266][ T5539] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 138.555006][ T5539] CPU: 0 UID: 0 PID: 5539 Comm: syz.0.28 Not tainted syzkaller #0 PREEMPT(full)
[ 138.555026][ T5539] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 138.555034][ T5539] Call Trace:
[ 138.555039][ T5539]
[ 138.555044][ T5539] dump_stack_lvl+0xe8/0x150
[ 138.555067][ T5539] gfs2_withdraw+0xc3/0x1b0
[ 138.555086][ T5539] gfs2_jdesc_check+0x17d/0x2f0
[ 138.555105][ T5539] init_journal+0xcc3/0x2330
[ 138.555128][ T5539] ? init_inodes+0xdb/0x320
[ 138.555147][ T5539] ? __pfx_init_journal+0x10/0x10
[ 138.555160][ T5539] ? vsnprintf+0xe42/0xef0
[ 138.555178][ T5539] ? snprintf+0xe8/0x140
[ 138.555191][ T5539] ? init_inodes+0xdb/0x320
[ 138.555206][ T5539] ? __pfx_snprintf+0x10/0x10
[ 138.555217][ T5539] ? gfs2_glock_nq_num+0x13d/0x170
[ 138.555237][ T5539] init_inodes+0xdb/0x320
[ 138.555255][ T5539] gfs2_fill_super+0x1942/0x20b0
[ 138.555278][ T5539] ? __pfx_gfs2_fill_super+0x10/0x10
[ 138.555296][ T5539] ? init_locking+0xb8/0x210
[ 138.555309][ T5539] ? sb_set_blocksize+0x155/0x240
[ 138.555325][ T5539] ? setup_bdev_super+0x4c1/0x5b0
[ 138.555364][ T5539] get_tree_bdev_flags+0x430/0x4f0
[ 138.555381][ T5539] ? __pfx_gfs2_fill_super+0x10/0x10
[ 138.555397][ T5539] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 138.555417][ T5539] gfs2_get_tree+0x51/0x1e0
[ 138.555435][ T5539] vfs_get_tree+0x92/0x2a0
[ 138.555453][ T5539] do_new_mount+0x319/0xdc0
[ 138.555468][ T5539] ? __pfx_do_new_mount+0x10/0x10
[ 138.555482][ T5539] ? ns_capable+0x89/0xe0
[ 138.555498][ T5539] ? path_mount+0x647/0x1040
[ 138.555511][ T5539] ? user_path_at+0xd4/0x160
[ 138.555527][ T5539] __se_sys_mount+0x31d/0x420
[ 138.555544][ T5539] ? __pfx___se_sys_mount+0x10/0x10
[ 138.555560][ T5539] ? __x64_sys_mount+0x20/0xc0
[ 138.555572][ T5539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 138.555585][ T5539] do_syscall_64+0x174/0x580
[ 138.555600][ T5539] ? trace_irq_disable+0x3b/0x140
[ 138.555616][ T5539] ? clear_bhb_loop+0x40/0x90
[ 138.555629][ T5539] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 138.555639][ T5539] RIP: 0033:0x7f2d4699f0ca
[ 138.555652][ T5539] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 138.555661][ T5539] RSP: 002b:00007ffeed735b98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 138.555680][ T5539] RAX: ffffffffffffffda RBX: 00007ffeed735c20 RCX: 00007f2d4699f0ca
[ 138.555688][ T5539] RDX: 0000200000000400 RSI: 0000200000000080 RDI: 00007ffeed735be0
[ 138.555694][ T5539] RBP: 0000200000000400 R08: 00007ffeed735c20 R09: 0000000000000000
[ 138.555702][ T5539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080
[ 138.555708][ T5539] R13: 00007ffeed735be0 R14: 00000000000125bb R15: 0000200000000180
[ 138.555726][ T5539]
[ 138.753408][ T5539] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5
[ 139.268534][ T5544] loop0: detected capacity change from 0 to 32768
[ 139.285982][ T5544] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 139.295092][ T5544] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 139.318892][ T5544] syz.0.29: attempt to access beyond end of device
[ 139.318892][ T5544] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 139.336119][ T5544] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 139.355681][ T5544] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:6
[ 139.366564][ T5544] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320
[ 139.370519][ T5544] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 139.374281][ T5544] CPU: 0 UID: 0 PID: 5544 Comm: syz.0.29 Not tainted syzkaller #0 PREEMPT(full)
[ 139.374300][ T5544] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 139.374308][ T5544] Call Trace:
[ 139.374316][ T5544]
[ 139.374324][ T5544] dump_stack_lvl+0xe8/0x150
[ 139.374349][ T5544] gfs2_withdraw+0xc3/0x1b0
[ 139.374369][ T5544] gfs2_jdesc_check+0x17d/0x2f0
[ 139.374392][ T5544] init_journal+0xcc3/0x2330
[ 139.374418][ T5544] ? init_inodes+0xdb/0x320
[ 139.374440][ T5544] ? __pfx_init_journal+0x10/0x10
[ 139.374458][ T5544] ? vsnprintf+0xe42/0xef0
[ 139.374492][ T5544] ? snprintf+0xe8/0x140
[ 139.374508][ T5544] ? init_inodes+0xdb/0x320
[ 139.374533][ T5544] ? __pfx_snprintf+0x10/0x10
[ 139.374547][ T5544] ? gfs2_glock_nq_num+0x13d/0x170
[ 139.374567][ T5544] init_inodes+0xdb/0x320
[ 139.374585][ T5544] gfs2_fill_super+0x1942/0x20b0
[ 139.374613][ T5544] ? __pfx_gfs2_fill_super+0x10/0x10
[ 139.374634][ T5544] ? init_locking+0xb8/0x210
[ 139.374650][ T5544] ? sb_set_blocksize+0x155/0x240
[ 139.374669][ T5544] ? setup_bdev_super+0x4c1/0x5b0
[ 139.374690][ T5544] get_tree_bdev_flags+0x430/0x4f0
[ 139.374709][ T5544] ? __pfx_gfs2_fill_super+0x10/0x10
[ 139.374727][ T5544] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 139.374754][ T5544] gfs2_get_tree+0x51/0x1e0
[ 139.374775][ T5544] vfs_get_tree+0x92/0x2a0
[ 139.374796][ T5544] do_new_mount+0x319/0xdc0
[ 139.374816][ T5544] ? __pfx_do_new_mount+0x10/0x10
[ 139.374833][ T5544] ? ns_capable+0x89/0xe0
[ 139.374851][ T5544] ? path_mount+0x647/0x1040
[ 139.374869][ T5544] ? user_path_at+0xd4/0x160
[ 139.374888][ T5544] __se_sys_mount+0x31d/0x420
[ 139.374909][ T5544] ? __pfx___se_sys_mount+0x10/0x10
[ 139.374929][ T5544] ? __x64_sys_mount+0x20/0xc0
[ 139.374945][ T5544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 139.374960][ T5544] do_syscall_64+0x174/0x580
[ 139.374978][ T5544] ? trace_irq_disable+0x3b/0x140
[ 139.374996][ T5544] ? clear_bhb_loop+0x40/0x90
[ 139.375013][ T5544] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 139.375027][ T5544] RIP: 0033:0x7f2d4699f0ca
[ 139.375044][ T5544] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 139.375055][ T5544] RSP: 002b:00007ffeed735b98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 139.375071][ T5544] RAX: ffffffffffffffda RBX: 00007ffeed735c20 RCX: 00007f2d4699f0ca
[ 139.375083][ T5544] RDX: 0000200000000400 RSI: 0000200000000080 RDI: 00007ffeed735be0
[ 139.375092][ T5544] RBP: 0000200000000400 R08: 00007ffeed735c20 R09: 0000000000000000
[ 139.375100][ T5544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080
[ 139.375107][ T5544] R13: 00007ffeed735be0 R14: 00000000000125bb R15: 0000200000000180
[ 139.375129][ T5544]
[ 139.375137][ T5544] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5
[ 139.960978][ T5548] loop0: detected capacity change from 0 to 32768
[ 139.984757][ T5548] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 140.003447][ T5548] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 140.030427][ T5548] syz.0.30: attempt to access beyond end of device
[ 140.030427][ T5548] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 140.045841][ T5548] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 140.064361][ T5548] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:6
[ 140.074816][ T5548] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320
[ 140.085046][ T5548] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 140.092747][ T5548] CPU: 0 UID: 0 PID: 5548 Comm: syz.0.30 Not tainted syzkaller #0 PREEMPT(full)
[ 140.092767][ T5548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 140.092776][ T5548] Call Trace:
[ 140.092781][ T5548]
[ 140.092786][ T5548] dump_stack_lvl+0xe8/0x150
[ 140.092804][ T5548] gfs2_withdraw+0xc3/0x1b0
[ 140.092818][ T5548] gfs2_jdesc_check+0x17d/0x2f0
[ 140.092833][ T5548] init_journal+0xcc3/0x2330
[ 140.092849][ T5548] ? init_inodes+0xdb/0x320
[ 140.092863][ T5548] ? __pfx_init_journal+0x10/0x10
[ 140.092878][ T5548] ? vsnprintf+0xe42/0xef0
[ 140.092899][ T5548] ? snprintf+0xe8/0x140
[ 140.092911][ T5548] ? init_inodes+0xdb/0x320
[ 140.092927][ T5548] ? __pfx_snprintf+0x10/0x10
[ 140.092942][ T5548] ? gfs2_glock_nq_num+0x13d/0x170
[ 140.092964][ T5548] init_inodes+0xdb/0x320
[ 140.092982][ T5548] gfs2_fill_super+0x1942/0x20b0
[ 140.093008][ T5548] ? __pfx_gfs2_fill_super+0x10/0x10
[ 140.093026][ T5548] ? init_locking+0xb8/0x210
[ 140.093041][ T5548] ? sb_set_blocksize+0x155/0x240
[ 140.093081][ T5548] ? setup_bdev_super+0x4c1/0x5b0
[ 140.093103][ T5548] get_tree_bdev_flags+0x430/0x4f0
[ 140.093122][ T5548] ? __pfx_gfs2_fill_super+0x10/0x10
[ 140.093139][ T5548] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 140.093163][ T5548] gfs2_get_tree+0x51/0x1e0
[ 140.093183][ T5548] vfs_get_tree+0x92/0x2a0
[ 140.093203][ T5548] do_new_mount+0x319/0xdc0
[ 140.093222][ T5548] ? __pfx_do_new_mount+0x10/0x10
[ 140.093237][ T5548] ? ns_capable+0x89/0xe0
[ 140.093255][ T5548] ? path_mount+0x647/0x1040
[ 140.093271][ T5548] ? user_path_at+0xd4/0x160
[ 140.093288][ T5548] __se_sys_mount+0x31d/0x420
[ 140.093306][ T5548] ? __pfx___se_sys_mount+0x10/0x10
[ 140.093325][ T5548] ? __x64_sys_mount+0x20/0xc0
[ 140.093338][ T5548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 140.093353][ T5548] do_syscall_64+0x174/0x580
[ 140.093370][ T5548] ? trace_irq_disable+0x3b/0x140
[ 140.093387][ T5548] ? clear_bhb_loop+0x40/0x90
[ 140.093404][ T5548] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 140.093417][ T5548] RIP: 0033:0x7f2d4699f0ca
[ 140.093431][ T5548] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 140.093441][ T5548] RSP: 002b:00007ffeed735b98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 140.093456][ T5548] RAX: ffffffffffffffda RBX: 00007ffeed735c20 RCX: 00007f2d4699f0ca
[ 140.093465][ T5548] RDX: 0000200000000400 RSI: 0000200000000080 RDI: 00007ffeed735be0
[ 140.093474][ T5548] RBP: 0000200000000400 R08: 00007ffeed735c20 R09: 0000000000000000
[ 140.093482][ T5548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080
[ 140.093490][ T5548] R13: 00007ffeed735be0 R14: 00000000000125bb R15: 0000200000000180
[ 140.093509][ T5548]
[ 140.221803][ T5548] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5
[ 140.689026][ T5551] loop0: detected capacity change from 0 to 32768
[ 140.716354][ T5551] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 140.723749][ T5551] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 140.742781][ T5551] syz.0.31: attempt to access beyond end of device
[ 140.742781][ T5551] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 140.764314][ T5551] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 140.778131][ T5551] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:6
[ 140.782305][ T5551] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320
[ 140.795881][ T5551] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 140.801964][ T5551] CPU: 0 UID: 0 PID: 5551 Comm: syz.0.31 Not tainted syzkaller #0 PREEMPT(full)
[ 140.801983][ T5551] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 140.801989][ T5551] Call Trace:
[ 140.801994][ T5551]
[ 140.802000][ T5551] dump_stack_lvl+0xe8/0x150
[ 140.802024][ T5551] gfs2_withdraw+0xc3/0x1b0
[ 140.802040][ T5551] gfs2_jdesc_check+0x17d/0x2f0
[ 140.802059][ T5551] init_journal+0xcc3/0x2330
[ 140.802080][ T5551] ? init_inodes+0xdb/0x320
[ 140.802096][ T5551] ? __pfx_init_journal+0x10/0x10
[ 140.802109][ T5551] ? vsnprintf+0xe42/0xef0
[ 140.802133][ T5551] ? snprintf+0xe8/0x140
[ 140.802145][ T5551] ? init_inodes+0xdb/0x320
[ 140.802158][ T5551] ? __pfx_snprintf+0x10/0x10
[ 140.802170][ T5551] ? gfs2_glock_nq_num+0x13d/0x170
[ 140.802189][ T5551] init_inodes+0xdb/0x320
[ 140.802234][ T5551] gfs2_fill_super+0x1942/0x20b0
[ 140.802250][ T5551] ? __pfx_gfs2_fill_super+0x10/0x10
[ 140.802260][ T5551] ? init_locking+0xb8/0x210
[ 140.802268][ T5551] ? sb_set_blocksize+0x155/0x240
[ 140.802279][ T5551] ? setup_bdev_super+0x4c1/0x5b0
[ 140.802292][ T5551] get_tree_bdev_flags+0x430/0x4f0
[ 140.802306][ T5551] ? __pfx_gfs2_fill_super+0x10/0x10
[ 140.802318][ T5551] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 140.802337][ T5551] gfs2_get_tree+0x51/0x1e0
[ 140.802353][ T5551] vfs_get_tree+0x92/0x2a0
[ 140.802368][ T5551] do_new_mount+0x319/0xdc0
[ 140.802404][ T5551] ? __pfx_do_new_mount+0x10/0x10
[ 140.802418][ T5551] ? ns_capable+0x89/0xe0
[ 140.802432][ T5551] ? path_mount+0x647/0x1040
[ 140.802445][ T5551] ? user_path_at+0xd4/0x160
[ 140.802460][ T5551] __se_sys_mount+0x31d/0x420
[ 140.802476][ T5551] ? __pfx___se_sys_mount+0x10/0x10
[ 140.802492][ T5551] ? __x64_sys_mount+0x20/0xc0
[ 140.802503][ T5551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 140.802514][ T5551] do_syscall_64+0x174/0x580
[ 140.802527][ T5551] ? trace_irq_disable+0x3b/0x140
[ 140.802540][ T5551] ? clear_bhb_loop+0x40/0x90
[ 140.802554][ T5551] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 140.802565][ T5551] RIP: 0033:0x7f2d4699f0ca
[ 140.802577][ T5551] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 140.802586][ T5551] RSP: 002b:00007ffeed735b98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 140.802601][ T5551] RAX: ffffffffffffffda RBX: 00007ffeed735c20 RCX: 00007f2d4699f0ca
[ 140.802608][ T5551] RDX: 0000200000000400 RSI: 0000200000000080 RDI: 00007ffeed735be0
[ 140.802615][ T5551] RBP: 0000200000000400 R08: 00007ffeed735c20 R09: 0000000000000000
[ 140.802621][ T5551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080
[ 140.802627][ T5551] R13: 00007ffeed735be0 R14: 00000000000125bb R15: 0000200000000180
[ 140.802644][ T5551]
[ 140.802716][ T5551] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5
2026/07/06 16:14:24 executed programs: 17
[ 141.381408][ T5554] loop0: detected capacity change from 0 to 32768
[ 141.396295][ T5554] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 141.408407][ T5554] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 141.432896][ T5554] syz.0.32: attempt to access beyond end of device
[ 141.432896][ T5554] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 141.449369][ T5554] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 141.474831][ T5554] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:6
[ 141.479800][ T5554] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320
[ 141.483205][ T5554] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 141.493835][ T5554] CPU: 0 UID: 0 PID: 5554 Comm: syz.0.32 Not tainted syzkaller #0 PREEMPT(full)
[ 141.493855][ T5554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 141.493862][ T5554] Call Trace:
[ 141.493868][ T5554]
[ 141.493874][ T5554] dump_stack_lvl+0xe8/0x150
[ 141.493899][ T5554] gfs2_withdraw+0xc3/0x1b0
[ 141.493918][ T5554] gfs2_jdesc_check+0x17d/0x2f0
[ 141.493940][ T5554] init_journal+0xcc3/0x2330
[ 141.493964][ T5554] ? init_inodes+0xdb/0x320
[ 141.493982][ T5554] ? __pfx_init_journal+0x10/0x10
[ 141.493995][ T5554] ? vsnprintf+0xe42/0xef0
[ 141.494013][ T5554] ? snprintf+0xe8/0x140
[ 141.494025][ T5554] ? init_inodes+0xdb/0x320
[ 141.494039][ T5554] ? __pfx_snprintf+0x10/0x10
[ 141.494051][ T5554] ? gfs2_glock_nq_num+0x13d/0x170
[ 141.494071][ T5554] init_inodes+0xdb/0x320
[ 141.494088][ T5554] gfs2_fill_super+0x1942/0x20b0
[ 141.494111][ T5554] ? __pfx_gfs2_fill_super+0x10/0x10
[ 141.494128][ T5554] ? init_locking+0xb8/0x210
[ 141.494143][ T5554] ? sb_set_blocksize+0x155/0x240
[ 141.494158][ T5554] ? setup_bdev_super+0x4c1/0x5b0
[ 141.494178][ T5554] get_tree_bdev_flags+0x430/0x4f0
[ 141.494194][ T5554] ? __pfx_gfs2_fill_super+0x10/0x10
[ 141.494250][ T5554] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 141.494272][ T5554] gfs2_get_tree+0x51/0x1e0
[ 141.494291][ T5554] vfs_get_tree+0x92/0x2a0
[ 141.494310][ T5554] do_new_mount+0x319/0xdc0
[ 141.494327][ T5554] ? __pfx_do_new_mount+0x10/0x10
[ 141.494341][ T5554] ? ns_capable+0x89/0xe0
[ 141.494383][ T5554] ? path_mount+0x647/0x1040
[ 141.494399][ T5554] ? user_path_at+0xd4/0x160
[ 141.494416][ T5554] __se_sys_mount+0x31d/0x420
[ 141.494433][ T5554] ? __pfx___se_sys_mount+0x10/0x10
[ 141.494449][ T5554] ? __x64_sys_mount+0x20/0xc0
[ 141.494461][ T5554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 141.494474][ T5554] do_syscall_64+0x174/0x580
[ 141.494491][ T5554] ? trace_irq_disable+0x3b/0x140
[ 141.494515][ T5554] ? clear_bhb_loop+0x40/0x90
[ 141.494530][ T5554] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 141.494542][ T5554] RIP: 0033:0x7f2d4699f0ca
[ 141.494555][ T5554] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 141.494564][ T5554] RSP: 002b:00007ffeed735b98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 141.494577][ T5554] RAX: ffffffffffffffda RBX: 00007ffeed735c20 RCX: 00007f2d4699f0ca
[ 141.494585][ T5554] RDX: 0000200000000400 RSI: 0000200000000080 RDI: 00007ffeed735be0
[ 141.494593][ T5554] RBP: 0000200000000400 R08: 00007ffeed735c20 R09: 0000000000000000
[ 141.494599][ T5554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080
[ 141.494606][ T5554] R13: 00007ffeed735be0 R14: 00000000000125bb R15: 0000200000000180
[ 141.494623][ T5554]
[ 141.619019][ T5554] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5
[ 142.334328][ T5557] loop0: detected capacity change from 0 to 32768
[ 142.362077][ T5557] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 142.373303][ T5557] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 142.412082][ T5557] syz.0.33: attempt to access beyond end of device
[ 142.412082][ T5557] loop0: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768
[ 142.425727][ T5557] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 1 19, function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[ 142.444970][ T5557] gfs2: fsid=syz:syz.0: G: s:SH n:2/13 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:6
[ 142.449785][ T5557] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320
[ 142.454629][ T5557] gfs2: fsid=syz:syz.0: I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[ 142.459754][ T5557] CPU: 0 UID: 0 PID: 5557 Comm: syz.0.33 Not tainted syzkaller #0 PREEMPT(full)
[ 142.459770][ T5557] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 142.459776][ T5557] Call Trace:
[ 142.459781][ T5557]
[ 142.459786][ T5557] dump_stack_lvl+0xe8/0x150
[ 142.459807][ T5557] gfs2_withdraw+0xc3/0x1b0
[ 142.459825][ T5557] gfs2_jdesc_check+0x17d/0x2f0
[ 142.459846][ T5557] init_journal+0xcc3/0x2330
[ 142.459866][ T5557] ? init_inodes+0xdb/0x320
[ 142.459882][ T5557] ? __pfx_init_journal+0x10/0x10
[ 142.459896][ T5557] ? vsnprintf+0xe42/0xef0
[ 142.459915][ T5557] ? snprintf+0xe8/0x140
[ 142.459927][ T5557] ? init_inodes+0xdb/0x320
[ 142.459940][ T5557] ? __pfx_snprintf+0x10/0x10
[ 142.459976][ T5557] ? gfs2_glock_nq_num+0x13d/0x170
[ 142.459994][ T5557] init_inodes+0xdb/0x320
[ 142.460010][ T5557] gfs2_fill_super+0x1942/0x20b0
[ 142.460030][ T5557] ? __pfx_gfs2_fill_super+0x10/0x10
[ 142.460046][ T5557] ? init_locking+0xb8/0x210
[ 142.460059][ T5557] ? sb_set_blocksize+0x155/0x240
[ 142.460074][ T5557] ? setup_bdev_super+0x4c1/0x5b0
[ 142.460092][ T5557] get_tree_bdev_flags+0x430/0x4f0
[ 142.460105][ T5557] ? __pfx_gfs2_fill_super+0x10/0x10
[ 142.460119][ T5557] ? __pfx_get_tree_bdev_flags+0x10/0x10
[ 142.460154][ T5557] gfs2_get_tree+0x51/0x1e0
[ 142.460170][ T5557] vfs_get_tree+0x92/0x2a0
[ 142.460185][ T5557] do_new_mount+0x319/0xdc0
[ 142.460201][ T5557] ? __pfx_do_new_mount+0x10/0x10
[ 142.460214][ T5557] ? ns_capable+0x89/0xe0
[ 142.460228][ T5557] ? path_mount+0x647/0x1040
[ 142.460242][ T5557] ? user_path_at+0xd4/0x160
[ 142.460257][ T5557] __se_sys_mount+0x31d/0x420
[ 142.460272][ T5557] ? __pfx___se_sys_mount+0x10/0x10
[ 142.460287][ T5557] ? __x64_sys_mount+0x20/0xc0
[ 142.460298][ T5557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 142.460312][ T5557] do_syscall_64+0x174/0x580
[ 142.460325][ T5557] ? trace_irq_disable+0x3b/0x140
[ 142.460339][ T5557] ? clear_bhb_loop+0x40/0x90
[ 142.460352][ T5557] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 142.460363][ T5557] RIP: 0033:0x7f2d4699f0ca
[ 142.460374][ T5557] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 142.460382][ T5557] RSP: 002b:00007ffeed735b98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 142.460395][ T5557] RAX: ffffffffffffffda RBX: 00007ffeed735c20 RCX: 00007f2d4699f0ca
[ 142.460402][ T5557] RDX: 0000200000000400 RSI: 0000200000000080 RDI: 00007ffeed735be0
[ 142.460409][ T5557] RBP: 0000200000000400 R08: 00007ffeed735c20 R09: 0000000000000000
[ 142.460415][ T5557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080
[ 142.460422][ T5557] R13: 00007ffeed735be0 R14: 00000000000125bb R15: 0000200000000180
[ 142.460439][ T5557]
[ 142.460850][ T5557] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5
[ 143.063681][ T5560] loop0: detected capacity change from 0 to 32768
[ 143.081379][ T5560] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 143.090596][ T5560] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 143.112971][ T69] ==================================================================
[ 143.116546][ T69] BUG: KASAN: slab-use-after-free in folio_evictable+0xe4/0x250
[ 143.119684][ T69] Read of size 8 at addr ffff888034a89818 by task kswapd0/69
[ 143.124200][ T69]
[ 143.125677][ T69] CPU: 0 UID: 0 PID: 69 Comm: kswapd0 Not tainted syzkaller #0 PREEMPT(full)
[ 143.125698][ T69] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 143.125707][ T69] Call Trace:
[ 143.125717][ T69]
[ 143.125724][ T69] dump_stack_lvl+0xe8/0x150
[ 143.125750][ T69] print_address_description+0x55/0x1e0
[ 143.125774][ T69] ? folio_evictable+0xe4/0x250
[ 143.125793][ T69] print_report+0x58/0x70
[ 143.125809][ T69] kasan_report+0x117/0x150
[ 143.125825][ T69] ? folio_evictable+0xe4/0x250
[ 143.125844][ T69] kasan_check_range+0x264/0x2c0
[ 143.125860][ T69] ? folio_evictable+0x1c/0x250
[ 143.125881][ T69] folio_evictable+0xe4/0x250
[ 143.125896][ T69] evict_folios+0x1a9d/0x4b40
[ 143.125917][ T69] ? evict_folios+0x257/0x4b40
[ 143.125931][ T69] ? __pfx_evict_folios+0x10/0x10
[ 143.125943][ T69] ? __lock_acquire+0x683/0x2cf0
[ 143.125962][ T69] ? __lock_acquire+0x683/0x2cf0
[ 143.125977][ T69] try_to_shrink_lruvec+0xb4f/0xed0
[ 143.125988][ T69] ? __pfx_try_to_shrink_lruvec+0x10/0x10
[ 143.125996][ T69] ? shrink_node+0x2ed4/0x3b60
[ 143.126010][ T69] shrink_one+0x233/0x730
[ 143.126022][ T69] ? shrink_node+0x2ed4/0x3b60
[ 143.126032][ T69] shrink_node+0x3303/0x3b60
[ 143.126046][ T69] ? shrink_node+0x2ed4/0x3b60
[ 143.126062][ T69] ? percpu_ref_put+0x19/0x180
[ 143.126076][ T69] ? percpu_ref_put+0x19/0x180
[ 143.126090][ T69] ? __pfx_shrink_node+0x10/0x10
[ 143.126102][ T69] ? percpu_ref_put+0x19/0x180
[ 143.126115][ T69] ? percpu_ref_put+0x19/0x180
[ 143.126129][ T69] ? mem_cgroup_iter+0x410/0x440
[ 143.126145][ T69] ? mem_cgroup_iter+0x3b/0x440
[ 143.126161][ T69] kswapd+0x17b6/0x31c0
[ 143.126181][ T69] ? kswapd+0x9b6/0x31c0
[ 143.126232][ T69] ? __pfx_kswapd+0x10/0x10
[ 143.126245][ T69] ? trace_contention_end+0x3d/0x140
[ 143.126258][ T69] ? __lock_acquire+0x683/0x2cf0
[ 143.126273][ T69] ? kthread_affine_node+0x2b2/0x360
[ 143.126289][ T69] ? __mutex_unlock_slowpath+0x731/0x900
[ 143.126309][ T69] ? __pfx_autoremove_wake_function+0x10/0x10
[ 143.126322][ T69] ? __kthread_parkme+0x71/0x1f0
[ 143.126335][ T69] ? __kthread_parkme+0x196/0x1f0
[ 143.126349][ T69] kthread+0x388/0x470
[ 143.126364][ T69] ? __pfx_kswapd+0x10/0x10
[ 143.126377][ T69] ? __pfx_kthread+0x10/0x10
[ 143.126391][ T69] ret_from_fork+0x514/0xb70
[ 143.126409][ T69] ? __pfx_ret_from_fork+0x10/0x10
[ 143.126424][ T69] ? __switch_to+0xc89/0x1420
[ 143.126446][ T69] ? __pfx_kthread+0x10/0x10
[ 143.126460][ T69] ret_from_fork_asm+0x1a/0x30
[ 143.126475][ T69]
[ 143.126479][ T69]
[ 143.243079][ T69] Allocated by task 5557:
[ 143.245173][ T69] kasan_save_track+0x3e/0x80
[ 143.247602][ T69] __kasan_slab_alloc+0x6c/0x80
[ 143.250672][ T69] kmem_cache_alloc_noprof+0x2a0/0x5f0
[ 143.253934][ T69] gfs2_glock_get+0x276/0xf20
[ 143.256391][ T69] gfs2_inode_lookup+0x2a3/0xc30
[ 143.258520][ T69] gfs2_dir_search+0x168/0x220
[ 143.260516][ T69] gfs2_lookupi+0x45b/0x640
[ 143.262520][ T69] init_journal+0x5ac/0x2330
[ 143.264916][ T69] init_inodes+0xdb/0x320
[ 143.267209][ T69] gfs2_fill_super+0x1942/0x20b0
[ 143.269853][ T69] get_tree_bdev_flags+0x430/0x4f0
[ 143.272057][ T69] gfs2_get_tree+0x51/0x1e0
[ 143.274152][ T69] vfs_get_tree+0x92/0x2a0
[ 143.276117][ T69] do_new_mount+0x319/0xdc0
[ 143.278063][ T69] __se_sys_mount+0x31d/0x420
[ 143.280455][ T69] do_syscall_64+0x174/0x580
[ 143.282965][ T69] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 143.285656][ T69]
[ 143.286850][ T69] Freed by task 5557:
[ 143.288559][ T69] kasan_save_track+0x3e/0x80
[ 143.290650][ T69] kasan_save_free_info+0x40/0x50
[ 143.293033][ T69] __kasan_slab_free+0x5c/0x80
[ 143.295422][ T69] kmem_cache_free+0x182/0x650
[ 143.297859][ T69] rcu_core+0x78b/0x10a0
[ 143.299907][ T69] handle_softirqs+0x225/0x840
[ 143.302055][ T69] __irq_exit_rcu+0xca/0x220
[ 143.304192][ T69] irq_exit_rcu+0x9/0x30
[ 143.306020][ T69] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 143.308252][ T69] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 143.310955][ T69]
[ 143.312152][ T69] Last potentially related work creation:
[ 143.314791][ T69] kasan_save_stack+0x3e/0x60
[ 143.316758][ T69] kasan_record_aux_stack+0xbd/0xd0
[ 143.318985][ T69] call_rcu+0xee/0x8b0
[ 143.320815][ T69] gfs2_glock_free+0x3c/0xa0
[ 143.322966][ T69] gfs2_evict_inode+0xd60/0x1400
[ 143.325408][ T69] evict+0x624/0xb50
[ 143.327578][ T69] gfs2_jindex_free+0x398/0x450
[ 143.329847][ T69] init_journal+0x8d9/0x2330
[ 143.331750][ T69] init_inodes+0xdb/0x320
[ 143.333720][ T69] gfs2_fill_super+0x1942/0x20b0
[ 143.335832][ T69] get_tree_bdev_flags+0x430/0x4f0
[ 143.338223][ T69] gfs2_get_tree+0x51/0x1e0
[ 143.340354][ T69] vfs_get_tree+0x92/0x2a0
[ 143.342485][ T69] do_new_mount+0x319/0xdc0
[ 143.344575][ T69] __se_sys_mount+0x31d/0x420
[ 143.346644][ T69] do_syscall_64+0x174/0x580
[ 143.348489][ T69] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 143.351503][ T69]
[ 143.352876][ T69] Second to last potentially related work creation:
[ 143.356148][ T69] kasan_save_stack+0x3e/0x60
[ 143.358301][ T69] kasan_record_aux_stack+0xbd/0xd0
[ 143.360573][ T69] insert_work+0x3d/0x330
[ 143.362814][ T69] __queue_work+0xcd8/0x10a0
[ 143.365385][ T69] queue_delayed_work_on+0x11a/0x1e0
[ 143.368537][ T69] do_xmote+0x539/0x770
[ 143.370425][ T69] glock_work_func+0x2ef/0x600
[ 143.372310][ T69] process_scheduled_works+0xa8e/0x14e0
[ 143.374611][ T69] worker_thread+0xa47/0xfb0
[ 143.376626][ T69] kthread+0x388/0x470
[ 143.378563][ T69] ret_from_fork+0x514/0xb70
[ 143.381006][ T69] ret_from_fork_asm+0x1a/0x30
[ 143.383450][ T69]
[ 143.384571][ T69] The buggy address belongs to the object at ffff888034a89460
[ 143.384571][ T69] which belongs to the cache gfs2_glock(aspace) of size 1176
[ 143.390114][ T69] The buggy address is located 952 bytes inside of
[ 143.390114][ T69] freed 1176-byte region [ffff888034a89460, ffff888034a898f8)
[ 143.398145][ T69]
[ 143.399350][ T69] The buggy address belongs to the physical page:
[ 143.402252][ T69] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34a88
[ 143.406097][ T69] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 143.410326][ T69] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff)
[ 143.414551][ T69] page_type: f5(slab)
[ 143.416244][ T69] raw: 04fff00000000040 ffff888031f9d780 dead000000000122 0000000000000000
[ 143.419985][ T69] raw: 0000000000000000 00000008000c000c 00000000f5000000 0000000000000000
[ 143.424146][ T69] head: 04fff00000000040 ffff888031f9d780 dead000000000122 0000000000000000
[ 143.428792][ T69] head: 0000000000000000 00000008000c000c 00000000f5000000 0000000000000000
[ 143.433724][ T69] head: 04fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[ 143.437939][ T69] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 143.441777][ T69] page dumped because: kasan: bad access detected
[ 143.444620][ T69] page_owner tracks the page as allocated
[ 143.447391][ T69] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5554, tgid 5554 (syz.0.32), ts 141424348218, free_ts 139739882130
[ 143.457053][ T69] post_alloc_hook+0x1f9/0x250
[ 143.459179][ T69] get_page_from_freelist+0x21fa/0x2270
[ 143.461593][ T69] __alloc_frozen_pages_noprof+0x18d/0x380
[ 143.464115][ T69] allocate_slab+0x79/0x5e0
[ 143.466049][ T69] refill_objects+0x2d5/0x350
[ 143.467966][ T69] __pcs_replace_empty_main+0x2bf/0x6b0
[ 143.470238][ T69] kmem_cache_alloc_noprof+0x382/0x5f0
[ 143.472404][ T69] gfs2_glock_get+0x276/0xf20
[ 143.474377][ T69] gfs2_inode_lookup+0x2a3/0xc30
[ 143.476584][ T69] init_sb+0xa55/0x1300
[ 143.478478][ T69] gfs2_fill_super+0x1615/0x20b0
[ 143.480651][ T69] get_tree_bdev_flags+0x430/0x4f0
[ 143.482860][ T69] gfs2_get_tree+0x51/0x1e0
[ 143.484876][ T69] vfs_get_tree+0x92/0x2a0
[ 143.486747][ T69] do_new_mount+0x319/0xdc0
[ 143.488621][ T69] __se_sys_mount+0x31d/0x420
[ 143.490555][ T69] page last free pid 9 tgid 9 stack trace:
[ 143.493142][ T69] __free_frozen_pages+0xc1e/0xd10
[ 143.495380][ T69] __slab_free+0x274/0x2c0
[ 143.497322][ T69] qlist_free_all+0x99/0x100
[ 143.499295][ T69] kasan_quarantine_reduce+0x148/0x160
[ 143.501562][ T69] __kasan_slab_alloc+0x22/0x80
[ 143.503746][ T69] __kmalloc_cache_noprof+0x2ab/0x660
[ 143.506063][ T69] drm_atomic_commit_alloc+0xa9/0x100
[ 143.508389][ T69] drm_atomic_helper_dirtyfb+0x129/0xfd0
[ 143.510779][ T69] drm_fbdev_shmem_helper_fb_dirty+0x160/0x310
[ 143.513477][ T69] drm_fb_helper_damage_work+0x2a4/0x740
[ 143.516411][ T69] process_scheduled_works+0xa8e/0x14e0
[ 143.519338][ T69] worker_thread+0xa47/0xfb0
[ 143.521347][ T69] kthread+0x388/0x470
[ 143.523138][ T69] ret_from_fork+0x514/0xb70
[ 143.525344][ T69] ret_from_fork_asm+0x1a/0x30
[ 143.527892][ T69]
[ 143.529366][ T69] Memory state around the buggy address:
[ 143.532787][ T69] ffff888034a89700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 143.537300][ T69] ffff888034a89780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 143.541398][ T69] >ffff888034a89800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 143.545138][ T69] ^
[ 143.547654][ T69] ffff888034a89880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc
[ 143.552441][ T69] ffff888034a89900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fa
[ 143.556492][ T69] ==================================================================
[ 143.560149][ T69] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 143.563916][ T69] CPU: 0 UID: 0 PID: 69 Comm: kswapd0 Not tainted syzkaller #0 PREEMPT(full)
[ 143.568484][ T69] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 143.572699][ T69] Call Trace:
[ 143.574281][ T69]
[ 143.575639][ T69] vpanic+0x56c/0xa60
[ 143.577338][ T69] ? __pfx_vpanic+0x10/0x10
[ 143.579421][ T69] panic+0xc5/0xd0
[ 143.581186][ T69] ? __pfx_panic+0x10/0x10
[ 143.583542][ T69] ? folio_evictable+0xe4/0x250
[ 143.585908][ T69] ? rcu_is_watching+0x15/0xb0
[ 143.588113][ T69] ? folio_evictable+0xe4/0x250
[ 143.590178][ T69] ? folio_evictable+0xe4/0x250
[ 143.592442][ T69] check_panic_on_warn+0x89/0xb0
[ 143.594900][ T69] ? folio_evictable+0xe4/0x250
[ 143.597235][ T69] end_report+0x73/0x170
[ 143.599326][ T69] ? folio_evictable+0xe4/0x250
[ 143.600983][ T69] kasan_report+0x128/0x150
[ 143.602680][ T69] ? folio_evictable+0xe4/0x250
[ 143.604602][ T69] kasan_check_range+0x264/0x2c0
[ 143.606671][ T69] ? folio_evictable+0x1c/0x250
[ 143.608940][ T69] folio_evictable+0xe4/0x250
[ 143.611249][ T69] evict_folios+0x1a9d/0x4b40
[ 143.613610][ T69] ? evict_folios+0x257/0x4b40
[ 143.615632][ T69] ? __pfx_evict_folios+0x10/0x10
[ 143.617655][ T69] ? __lock_acquire+0x683/0x2cf0
[ 143.619623][ T69] ? __lock_acquire+0x683/0x2cf0
[ 143.621600][ T69] try_to_shrink_lruvec+0xb4f/0xed0
[ 143.623858][ T69] ? __pfx_try_to_shrink_lruvec+0x10/0x10
[ 143.626554][ T69] ? shrink_node+0x2ed4/0x3b60
[ 143.628862][ T69] shrink_one+0x233/0x730
[ 143.630763][ T69] ? shrink_node+0x2ed4/0x3b60
[ 143.632680][ T69] shrink_node+0x3303/0x3b60
[ 143.634509][ T69] ? shrink_node+0x2ed4/0x3b60
[ 143.636465][ T69] ? percpu_ref_put+0x19/0x180
[ 143.638635][ T69] ? percpu_ref_put+0x19/0x180
[ 143.641032][ T69] ? __pfx_shrink_node+0x10/0x10
[ 143.643417][ T69] ? percpu_ref_put+0x19/0x180
[ 143.645427][ T69] ? percpu_ref_put+0x19/0x180
[ 143.647514][ T69] ? mem_cgroup_iter+0x410/0x440
[ 143.649736][ T69] ? mem_cgroup_iter+0x3b/0x440
[ 143.652133][ T69] kswapd+0x17b6/0x31c0
[ 143.654225][ T69] ? kswapd+0x9b6/0x31c0
[ 143.656442][ T69] ? __pfx_kswapd+0x10/0x10
[ 143.658521][ T69] ? trace_contention_end+0x3d/0x140
[ 143.660673][ T69] ? __lock_acquire+0x683/0x2cf0
[ 143.662709][ T69] ? kthread_affine_node+0x2b2/0x360
[ 143.664958][ T69] ? __mutex_unlock_slowpath+0x731/0x900
[ 143.667486][ T69] ? __pfx_autoremove_wake_function+0x10/0x10
[ 143.670513][ T69] ? __kthread_parkme+0x71/0x1f0
[ 143.672769][ T69] ? __kthread_parkme+0x196/0x1f0
[ 143.674777][ T69] kthread+0x388/0x470
[ 143.676447][ T69] ? __pfx_kswapd+0x10/0x10
[ 143.678303][ T69] ? __pfx_kthread+0x10/0x10
[ 143.680379][ T69] ret_from_fork+0x514/0xb70
[ 143.682635][ T69] ? __pfx_ret_from_fork+0x10/0x10
[ 143.685557][ T69] ? __switch_to+0xc89/0x1420
[ 143.688324][ T69] ? __pfx_kthread+0x10/0x10
[ 143.690357][ T69] ret_from_fork_asm+0x1a/0x30
[ 143.692325][ T69]
[ 143.693961][ T69] Kernel Offset: disabled
[ 143.695750][ T69] Rebooting in 86400 seconds..
VM DIAGNOSIS:
16:14:26 Registers:
info registers vcpu 0
CPU#0
RAX=1ffffffff355ba60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=dffffc0000000000 RSP=ffffc90000cdeb48
R8 =ffff888034888237 R9 =1ffff11006911046 R10=dffffc0000000000 R11=ffffffff85676de0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff9aadd520 R15=0000000000000000
RIP=ffffffff85676e57 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88808c54e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6e3b998000 CR3=0000000012a86000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=00000000c0c40000 Opmask01=00000000000003ff Opmask02=00000000000003ff Opmask03=0000000000000000
Opmask04=00000000fffdffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564d6ebbccf8 0000564d6ebbccf8
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564d6eba6910
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000564d6ebbcc98
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e3bbf1b20
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff0000ff000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6e3bb52c80
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20676e6964616572 004b4f2034366f66 6e695f706f6f6c20 676e696461657200
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a72737c
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000