Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. 2025/09/14 06:55:17 parsed 1 programs [ 57.717866][ T3462] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2025/09/14 06:55:20 executed programs: 0 [ 61.288756][ T4276] syz.3.16[4276]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 61.376831][ T4276] loop3: detected capacity change from 0 to 32768 [ 61.385250][ T4276] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 61.393473][ T4276] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 61.402355][ T4276] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 61.410520][ T233] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 61.417728][ T233] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 61.433568][ T233] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 15ms [ 61.441006][ T233] gfs2: fsid=syz:syz.0: jid=0: Done [ 61.446234][ T4276] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 61.454836][ T4276] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 61.464541][ T4276] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 61.464541][ T4276] inode = 12 2341 [ 61.464541][ T4276] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 61.483130][ T4276] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 61.492239][ T4276] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:4276 [syz.3.16] __gfs2_lookup+0x2b/0x160 [ 61.501605][ T4276] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 61.510035][ T4276] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 61.517330][ T4276] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 61.526100][ T4276] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 61.532523][ T4276] gfs2: fsid=syz:syz.0: File system withdrawn [ 61.538569][ T4276] CPU: 1 PID: 4276 Comm: syz.3.16 Not tainted syzkaller #0 [ 61.545735][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 61.555765][ T4276] Call Trace: [ 61.559032][ T4276] [ 61.563246][ T4276] dump_stack_lvl+0x78/0xc0 [ 61.567810][ T4276] gfs2_withdraw+0x444/0x750 [ 61.572416][ T4276] gfs2_dirent_scan+0x1fb/0x260 [ 61.577324][ T4276] ? gfs2_dirent_search+0x240/0x240 [ 61.582573][ T4276] ? gfs2_dirent_search+0x240/0x240 [ 61.587759][ T4276] gfs2_dirent_search+0x71/0x240 [ 61.592659][ T4276] gfs2_dir_search+0x3c/0xe0 [ 61.597229][ T4276] gfs2_lookupi+0x161/0x1e0 [ 61.601698][ T4276] ? __gfs2_lookup+0x2b/0x160 [ 61.606361][ T4276] __gfs2_lookup+0x2b/0x160 [ 61.610962][ T4276] ? __raw_spin_lock_init+0x3b/0x70 [ 61.616136][ T4276] __lookup_slow+0x132/0x1b0 [ 61.620697][ T4276] lookup_slow+0x2e/0x50 [ 61.624920][ T4276] walk_component+0xce/0xe0 [ 61.629392][ T4276] path_lookupat+0x46/0xf0 [ 61.633780][ T4276] filename_lookup+0xd6/0x1e0 [ 61.638424][ T4276] user_path_at_empty+0x35/0x90 [ 61.643273][ T4276] __se_sys_mount+0x130/0x1b0 [ 61.648103][ T4276] do_syscall_64+0x55/0xb0 [ 61.652508][ T4276] ? clear_bhb_loop+0x40/0x90 [ 61.657167][ T4276] ? clear_bhb_loop+0x40/0x90 [ 61.661815][ T4276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 61.667681][ T4276] RIP: 0033:0x7fa29758e9a9 [ 61.672059][ T4276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.691636][ T4276] RSP: 002b:00007fa2984e0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 61.700036][ T4276] RAX: ffffffffffffffda RBX: 00007fa2977b5fa0 RCX: 00007fa29758e9a9 [ 61.707979][ T4276] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 61.715969][ T4276] RBP: 00007fa297610d69 R08: 0000000000000000 R09: 0000000000000000 [ 61.724021][ T4276] R10: 0000000000081000 R11: 0000000000000246 R12: 0000000000000000 [ 61.731962][ T4276] R13: 0000000000000000 R14: 00007fa2977b5fa0 R15: 00007ffcccff9688 [ 61.740364][ T4276] [ 61.842008][ T4281] loop3: detected capacity change from 0 to 32768 [ 61.856098][ T4281] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 61.864618][ T4281] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 61.872706][ T4281] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 61.880812][ T2621] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 61.887660][ T2621] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 61.901927][ T2621] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 14ms [ 61.909685][ T2621] gfs2: fsid=syz:syz.0: jid=0: Done [ 61.914925][ T4281] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 61.923481][ T4281] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 61.933185][ T4281] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 61.933185][ T4281] inode = 12 2341 [ 61.933185][ T4281] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 61.951926][ T4281] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 61.961021][ T4281] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:4281 [syz.3.17] __gfs2_lookup+0x2b/0x160 [ 61.970625][ T4281] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 61.979245][ T4281] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 61.986741][ T4281] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 61.995774][ T4281] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 62.002304][ T4281] gfs2: fsid=syz:syz.0: File system withdrawn [ 62.008343][ T4281] CPU: 1 PID: 4281 Comm: syz.3.17 Not tainted syzkaller #0 [ 62.015526][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 62.025636][ T4281] Call Trace: [ 62.028920][ T4281] [ 62.031845][ T4281] dump_stack_lvl+0x78/0xc0 [ 62.036313][ T4281] gfs2_withdraw+0x444/0x750 [ 62.040903][ T4281] gfs2_dirent_scan+0x1fb/0x260 [ 62.045728][ T4281] ? gfs2_dirent_search+0x240/0x240 [ 62.050898][ T4281] ? gfs2_dirent_search+0x240/0x240 [ 62.056062][ T4281] gfs2_dirent_search+0x71/0x240 [ 62.060964][ T4281] gfs2_dir_search+0x3c/0xe0 [ 62.065534][ T4281] gfs2_lookupi+0x161/0x1e0 [ 62.070024][ T4281] ? __gfs2_lookup+0x2b/0x160 [ 62.074665][ T4281] __gfs2_lookup+0x2b/0x160 [ 62.079138][ T4281] ? __raw_spin_lock_init+0x3b/0x70 [ 62.084299][ T4281] __lookup_slow+0x132/0x1b0 [ 62.088865][ T4281] lookup_slow+0x2e/0x50 [ 62.093097][ T4281] walk_component+0xce/0xe0 [ 62.097651][ T4281] path_lookupat+0x46/0xf0 [ 62.102052][ T4281] filename_lookup+0xd6/0x1e0 [ 62.106691][ T4281] user_path_at_empty+0x35/0x90 [ 62.111516][ T4281] __se_sys_mount+0x130/0x1b0 [ 62.116156][ T4281] do_syscall_64+0x55/0xb0 [ 62.120549][ T4281] ? clear_bhb_loop+0x40/0x90 [ 62.125187][ T4281] ? clear_bhb_loop+0x40/0x90 [ 62.129841][ T4281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 62.135784][ T4281] RIP: 0033:0x7fa29758e9a9 [ 62.140189][ T4281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.164105][ T4281] RSP: 002b:00007fa2984e0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 62.172572][ T4281] RAX: ffffffffffffffda RBX: 00007fa2977b5fa0 RCX: 00007fa29758e9a9 [ 62.180519][ T4281] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 62.188552][ T4281] RBP: 00007fa297610d69 R08: 0000000000000000 R09: 0000000000000000 [ 62.196503][ T4281] R10: 0000000000081000 R11: 0000000000000246 R12: 0000000000000000 [ 62.204440][ T4281] R13: 0000000000000000 R14: 00007fa2977b5fa0 R15: 00007ffcccff9688 [ 62.212379][ T4281] [ 62.315622][ T4285] loop3: detected capacity change from 0 to 32768 [ 62.329341][ T4285] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 62.337782][ T4285] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 62.345753][ T4285] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 62.353712][ T2621] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 62.360452][ T2621] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 62.375006][ T2621] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 14ms [ 62.382423][ T2621] gfs2: fsid=syz:syz.0: jid=0: Done [ 62.387606][ T4285] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 62.396995][ T4285] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 62.406596][ T4285] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 62.406596][ T4285] inode = 12 2341 [ 62.406596][ T4285] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 62.425389][ T4285] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 62.434524][ T4285] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:4285 [syz.3.18] __gfs2_lookup+0x2b/0x160 [ 62.443901][ T4285] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 62.452298][ T4285] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 62.459467][ T4285] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 62.468587][ T4285] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 62.475011][ T4285] gfs2: fsid=syz:syz.0: File system withdrawn [ 62.481053][ T4285] CPU: 1 PID: 4285 Comm: syz.3.18 Not tainted syzkaller #0 [ 62.488221][ T4285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 62.498246][ T4285] Call Trace: [ 62.501505][ T4285] [ 62.504413][ T4285] dump_stack_lvl+0x78/0xc0 [ 62.508885][ T4285] gfs2_withdraw+0x444/0x750 [ 62.513461][ T4285] gfs2_dirent_scan+0x1fb/0x260 [ 62.518276][ T4285] ? gfs2_dirent_search+0x240/0x240 [ 62.523451][ T4285] ? gfs2_dirent_search+0x240/0x240 [ 62.528723][ T4285] gfs2_dirent_search+0x71/0x240 [ 62.533625][ T4285] gfs2_dir_search+0x3c/0xe0 [ 62.538201][ T4285] gfs2_lookupi+0x161/0x1e0 [ 62.542668][ T4285] ? __gfs2_lookup+0x2b/0x160 [ 62.547331][ T4285] __gfs2_lookup+0x2b/0x160 [ 62.551805][ T4285] ? __raw_spin_lock_init+0x3b/0x70 [ 62.556985][ T4285] __lookup_slow+0x132/0x1b0 [ 62.561544][ T4285] lookup_slow+0x2e/0x50 [ 62.565859][ T4285] walk_component+0xce/0xe0 [ 62.570329][ T4285] path_lookupat+0x46/0xf0 [ 62.574717][ T4285] filename_lookup+0xd6/0x1e0 [ 62.579366][ T4285] user_path_at_empty+0x35/0x90 [ 62.584184][ T4285] __se_sys_mount+0x130/0x1b0 [ 62.588830][ T4285] do_syscall_64+0x55/0xb0 [ 62.593216][ T4285] ? clear_bhb_loop+0x40/0x90 [ 62.597860][ T4285] ? clear_bhb_loop+0x40/0x90 [ 62.602500][ T4285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 62.608363][ T4285] RIP: 0033:0x7fa29758e9a9 [ 62.612745][ T4285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.632317][ T4285] RSP: 002b:00007fa2984e0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 62.640694][ T4285] RAX: ffffffffffffffda RBX: 00007fa2977b5fa0 RCX: 00007fa29758e9a9 [ 62.648726][ T4285] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 62.656681][ T4285] RBP: 00007fa297610d69 R08: 0000000000000000 R09: 0000000000000000 [ 62.664710][ T4285] R10: 0000000000081000 R11: 0000000000000246 R12: 0000000000000000 [ 62.672833][ T4285] R13: 0000000000000000 R14: 00007fa2977b5fa0 R15: 00007ffcccff9688 [ 62.680785][ T4285] [ 62.783993][ T4289] loop3: detected capacity change from 0 to 32768 [ 62.791716][ T4289] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 62.800047][ T4289] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 62.808301][ T4289] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 62.816347][ T233] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 62.823123][ T233] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 62.837739][ T233] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 14ms [ 62.845184][ T233] gfs2: fsid=syz:syz.0: jid=0: Done [ 62.850497][ T4289] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 62.858698][ T4289] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 62.868442][ T4289] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 62.868442][ T4289] inode = 12 2341 [ 62.868442][ T4289] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 62.887080][ T4289] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 62.896138][ T4289] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:4289 [syz.3.19] __gfs2_lookup+0x2b/0x160 [ 62.905944][ T4289] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 62.914363][ T4289] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 62.921528][ T4289] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 62.930309][ T4289] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 62.936786][ T4289] gfs2: fsid=syz:syz.0: File system withdrawn [ 62.942880][ T4289] CPU: 1 PID: 4289 Comm: syz.3.19 Not tainted syzkaller #0 [ 62.950156][ T4289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 62.960269][ T4289] Call Trace: [ 62.963546][ T4289] [ 62.966475][ T4289] dump_stack_lvl+0x78/0xc0 [ 62.970961][ T4289] gfs2_withdraw+0x444/0x750 [ 62.975593][ T4289] gfs2_dirent_scan+0x1fb/0x260 [ 62.980426][ T4289] ? gfs2_dirent_search+0x240/0x240 [ 62.985586][ T4289] ? gfs2_dirent_search+0x240/0x240 [ 62.990752][ T4289] gfs2_dirent_search+0x71/0x240 [ 62.995686][ T4289] gfs2_dir_search+0x3c/0xe0 [ 63.000254][ T4289] gfs2_lookupi+0x161/0x1e0 [ 63.004750][ T4289] ? __gfs2_lookup+0x2b/0x160 [ 63.009422][ T4289] __gfs2_lookup+0x2b/0x160 [ 63.013891][ T4289] ? __raw_spin_lock_init+0x3b/0x70 [ 63.019051][ T4289] __lookup_slow+0x132/0x1b0 [ 63.023621][ T4289] lookup_slow+0x2e/0x50 [ 63.027914][ T4289] walk_component+0xce/0xe0 [ 63.032384][ T4289] path_lookupat+0x46/0xf0 [ 63.036784][ T4289] filename_lookup+0xd6/0x1e0 [ 63.041431][ T4289] user_path_at_empty+0x35/0x90 [ 63.046250][ T4289] __se_sys_mount+0x130/0x1b0 [ 63.050902][ T4289] do_syscall_64+0x55/0xb0 [ 63.055284][ T4289] ? clear_bhb_loop+0x40/0x90 [ 63.059953][ T4289] ? clear_bhb_loop+0x40/0x90 [ 63.064591][ T4289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 63.070713][ T4289] RIP: 0033:0x7fa29758e9a9 [ 63.075092][ T4289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.094666][ T4289] RSP: 002b:00007fa2984e0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 63.103054][ T4289] RAX: ffffffffffffffda RBX: 00007fa2977b5fa0 RCX: 00007fa29758e9a9 [ 63.111084][ T4289] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 63.119024][ T4289] RBP: 00007fa297610d69 R08: 0000000000000000 R09: 0000000000000000 [ 63.126961][ T4289] R10: 0000000000081000 R11: 0000000000000246 R12: 0000000000000000 [ 63.134997][ T4289] R13: 0000000000000000 R14: 00007fa2977b5fa0 R15: 00007ffcccff9688 [ 63.142947][ T4289] [ 63.245756][ T4293] loop3: detected capacity change from 0 to 32768 [ 63.254060][ T4293] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 63.262261][ T4293] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 63.270219][ T4293] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 63.278154][ T2621] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 63.284930][ T2621] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 63.299853][ T2621] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 14ms [ 63.307310][ T2621] gfs2: fsid=syz:syz.0: jid=0: Done [ 63.312521][ T4293] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 63.320903][ T4293] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 63.330515][ T4293] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 63.330515][ T4293] inode = 12 2341 [ 63.330515][ T4293] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 63.349195][ T4293] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 63.358220][ T4293] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:4293 [syz.3.20] __gfs2_lookup+0x2b/0x160 [ 63.367695][ T4293] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 63.371259][ T4295] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 63.376098][ T4293] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 63.376101][ T4293] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 63.376103][ T4293] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 63.408024][ T4293] gfs2: fsid=syz:syz.0: File system withdrawn [ 63.408474][ T4295] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:4 m:20 p:1 [ 63.414079][ T4293] CPU: 1 PID: 4293 Comm: syz.3.20 Not tainted syzkaller #0 [ 63.414083][ T4293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 63.414086][ T4293] Call Trace: [ 63.414089][ T4293] [ 63.446564][ T4293] dump_stack_lvl+0x78/0xc0 [ 63.451037][ T4293] gfs2_withdraw+0x444/0x750 [ 63.455608][ T4293] gfs2_dirent_scan+0x1fb/0x260 [ 63.460425][ T4293] ? gfs2_dirent_search+0x240/0x240 [ 63.465585][ T4293] ? gfs2_dirent_search+0x240/0x240 [ 63.470745][ T4293] gfs2_dirent_search+0x71/0x240 [ 63.475821][ T4293] gfs2_dir_search+0x3c/0xe0 [ 63.480394][ T4293] gfs2_lookupi+0x161/0x1e0 [ 63.484947][ T4293] ? __gfs2_lookup+0x2b/0x160 [ 63.489598][ T4293] __gfs2_lookup+0x2b/0x160 [ 63.494067][ T4293] ? __raw_spin_lock_init+0x3b/0x70 [ 63.499254][ T4293] __lookup_slow+0x132/0x1b0 [ 63.503846][ T4293] lookup_slow+0x2e/0x50 [ 63.508073][ T4293] walk_component+0xce/0xe0 [ 63.512642][ T4293] path_lookupat+0x46/0xf0 [ 63.517037][ T4293] filename_lookup+0xd6/0x1e0 [ 63.521689][ T4293] user_path_at_empty+0x35/0x90 [ 63.526507][ T4293] __se_sys_mount+0x130/0x1b0 [ 63.531260][ T4293] do_syscall_64+0x55/0xb0 [ 63.535657][ T4293] ? clear_bhb_loop+0x40/0x90 [ 63.540297][ T4293] ? clear_bhb_loop+0x40/0x90 [ 63.545028][ T4293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 63.550891][ T4293] RIP: 0033:0x7fa29758e9a9 [ 63.555358][ T4293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.575023][ T4293] RSP: 002b:00007fa2984e0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 63.583422][ T4293] RAX: ffffffffffffffda RBX: 00007fa2977b5fa0 RCX: 00007fa29758e9a9 [ 63.591449][ T4293] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 63.599388][ T4293] RBP: 00007fa297610d69 R08: 0000000000000000 R09: 0000000000000000 [ 63.607412][ T4293] R10: 0000000000081000 R11: 0000000000000246 R12: 0000000000000000 [ 63.615348][ T4293] R13: 0000000000000000 R14: 00007fa2977b5fa0 R15: 00007ffcccff9688 [ 63.623387][ T4293] [ 63.626415][ T4295] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:4293 [syz.3.20] __gfs2_lookup+0x2b/0x160 [ 63.635836][ T4295] BUG: kernel NULL pointer dereference, address: 0000000000000067 [ 63.643699][ T4295] #PF: supervisor read access in kernel mode [ 63.649752][ T4295] #PF: error_code(0x0000) - not-present page [ 63.655711][ T4295] PGD 106f2b067 P4D 106f2b067 PUD 0 [ 63.660961][ T4295] Oops: 0000 [#1] PREEMPT SMP [ 63.665620][ T4295] CPU: 1 PID: 4295 Comm: syz.3.20 Not tainted syzkaller #0 [ 63.672793][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 63.682827][ T4295] RIP: 0010:gfs2_dump_glock+0x47c/0x6d0 [ 63.688533][ T4295] Code: 94 ff 4c 8d 2d 00 00 00 00 48 c7 c7 48 6d dd 83 31 f6 31 d2 b9 02 00 00 00 45 31 c0 45 31 c9 41 55 e8 b8 d2 91 ff 48 83 c4 08 <41> f6 44 24 21 02 74 17 41 0f b7 44 24 22 66 85 c0 74 0c 49 c7 c2 [ 63.708195][ T4295] RSP: 0018:ffffc9000322b770 EFLAGS: 00010292 [ 63.714223][ T4295] RAX: 8cdb293d025b8d00 RBX: ffff888102ff8000 RCX: 8cdb293d025b8d00 [ 63.722154][ T4295] RDX: 014c68b9f9a10e6d RSI: ffffffff839ae268 RDI: ffffffff8388fa3a [ 63.730136][ T4295] RBP: ffffc9000322b928 R08: 0000000000000000 R09: 0000000000000021 [ 63.738087][ T4295] R10: 0000000000000001 R11: 0000000000005ffd R12: 0000000000000046 [ 63.746120][ T4295] R13: ffffffff817d56db R14: 00000000000010c5 R15: ffffc9000322b8d0 [ 63.754059][ T4295] FS: 00007fa2984bf6c0(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 63.762948][ T4295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.769510][ T4295] CR2: 0000000000000067 CR3: 00000001047c3000 CR4: 00000000003506e0 [ 63.777451][ T4295] Call Trace: [ 63.780706][ T4295] [ 63.783612][ T4295] gfs2_consist_inode_i+0x52/0x60 [ 63.788608][ T4295] gfs2_dirent_scan+0x1fb/0x260 [ 63.793445][ T4295] ? gfs2_dirent_search+0x240/0x240 [ 63.798609][ T4295] ? gfs2_dirent_search+0x240/0x240 [ 63.803767][ T4295] gfs2_dirent_search+0x71/0x240 [ 63.808663][ T4295] gfs2_dir_search+0x3c/0xe0 [ 63.813210][ T4295] gfs2_lookupi+0x161/0x1e0 [ 63.817673][ T4295] ? __gfs2_lookup+0x2b/0x160 [ 63.822336][ T4295] __gfs2_lookup+0x2b/0x160 [ 63.826818][ T4295] ? __raw_spin_lock_init+0x3b/0x70 [ 63.832006][ T4295] __lookup_slow+0x132/0x1b0 [ 63.836571][ T4295] lookup_slow+0x2e/0x50 [ 63.840786][ T4295] link_path_walk+0x373/0x400 [ 63.845428][ T4295] path_lookupat+0x56/0xf0 [ 63.849818][ T4295] do_o_path+0x34/0xb0 [ 63.853856][ T4295] path_openat+0xc8f/0xd30 [ 63.858242][ T4295] do_filp_open+0xaf/0x150 [ 63.862643][ T4295] do_sys_openat2+0x7a/0xd0 [ 63.867142][ T4295] __x64_sys_openat+0x7c/0xa0 [ 63.871780][ T4295] do_syscall_64+0x55/0xb0 [ 63.876162][ T4295] ? clear_bhb_loop+0x40/0x90 [ 63.880797][ T4295] ? clear_bhb_loop+0x40/0x90 [ 63.885520][ T4295] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 63.891398][ T4295] RIP: 0033:0x7fa29758e9a9 [ 63.895775][ T4295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.915438][ T4295] RSP: 002b:00007fa2984bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 63.923815][ T4295] RAX: ffffffffffffffda RBX: 00007fa2977b6080 RCX: 00007fa29758e9a9 [ 63.931762][ T4295] RDX: 0000000000200002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 63.939737][ T4295] RBP: 00007fa297610d69 R08: 0000000000000000 R09: 0000000000000000 [ 63.947673][ T4295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.955606][ T4295] R13: 0000000000000001 R14: 00007fa2977b6080 R15: 00007ffcccff9688 [ 63.963552][ T4295] [ 63.966539][ T4295] Modules linked in: [ 63.970427][ T4295] CR2: 0000000000000067 [ 63.974726][ T4295] ---[ end trace 0000000000000000 ]--- [ 63.980145][ T4295] RIP: 0010:gfs2_dump_glock+0x47c/0x6d0 [ 63.985664][ T4295] Code: 94 ff 4c 8d 2d 00 00 00 00 48 c7 c7 48 6d dd 83 31 f6 31 d2 b9 02 00 00 00 45 31 c0 45 31 c9 41 55 e8 b8 d2 91 ff 48 83 c4 08 <41> f6 44 24 21 02 74 17 41 0f b7 44 24 22 66 85 c0 74 0c 49 c7 c2 [ 64.005235][ T4295] RSP: 0018:ffffc9000322b770 EFLAGS: 00010292 [ 64.011279][ T4295] RAX: 8cdb293d025b8d00 RBX: ffff888102ff8000 RCX: 8cdb293d025b8d00 [ 64.019215][ T4295] RDX: 014c68b9f9a10e6d RSI: ffffffff839ae268 RDI: ffffffff8388fa3a [ 64.027160][ T4295] RBP: ffffc9000322b928 R08: 0000000000000000 R09: 0000000000000021 [ 64.035100][ T4295] R10: 0000000000000001 R11: 0000000000005ffd R12: 0000000000000046 [ 64.043142][ T4295] R13: ffffffff817d56db R14: 00000000000010c5 R15: ffffc9000322b8d0 [ 64.051157][ T4295] FS: 00007fa2984bf6c0(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 64.060165][ T4295] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.066717][ T4295] CR2: 0000000000000067 CR3: 00000001047c3000 CR4: 00000000003506e0 [ 64.074765][ T4295] Kernel panic - not syncing: Fatal exception [ 64.081128][ T4295] Kernel Offset: disabled [ 64.085425][ T4295] Rebooting in 86400 seconds..