Warning: Permanently added '10.128.1.21' (ED25519) to the list of known hosts. 2026/04/10 09:09:37 parsed 1 programs [ 112.541604][ T6178] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 115.427528][ T5160] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.437493][ T5160] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.447070][ T5160] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.458183][ T5160] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.467232][ T5160] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.005971][ T6211] chnl_net:caif_netlink_parms(): no params data found [ 116.072540][ T6211] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.079788][ T6211] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.087874][ T6211] bridge_slave_0: entered allmulticast mode [ 116.095202][ T6211] bridge_slave_0: entered promiscuous mode [ 116.104772][ T6211] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.112024][ T6211] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.119262][ T6211] bridge_slave_1: entered allmulticast mode [ 116.127011][ T6211] bridge_slave_1: entered promiscuous mode [ 116.180344][ T6211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.191874][ T6211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.239917][ T6211] team0: Port device team_slave_0 added [ 116.247471][ T6211] team0: Port device team_slave_1 added [ 116.272327][ T6211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.279322][ T6211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.306997][ T6211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.319887][ T6211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.327363][ T6211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.353410][ T6211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.392740][ T6211] hsr_slave_0: entered promiscuous mode [ 116.398907][ T6211] hsr_slave_1: entered promiscuous mode [ 117.028989][ T6211] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.040691][ T6211] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.057685][ T6211] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.070478][ T6211] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.165915][ T6211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.194881][ T6211] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.209255][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.216670][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.245239][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.252530][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.490915][ T6211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.547315][ T6211] veth0_vlan: entered promiscuous mode [ 117.565570][ T6211] veth1_vlan: entered promiscuous mode [ 117.600468][ T6211] veth0_macvtap: entered promiscuous mode [ 117.613790][ T6211] veth1_macvtap: entered promiscuous mode [ 117.636673][ T6211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.653232][ T6211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.668910][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.687366][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.710067][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.726313][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.911853][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.001485][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.076968][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.183472][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.504173][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.525656][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.558467][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.567916][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.194820][ T35] bridge_slave_1: left allmulticast mode [ 120.209290][ T35] bridge_slave_1: left promiscuous mode [ 120.215653][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.227028][ T35] bridge_slave_0: left allmulticast mode [ 120.234791][ T35] bridge_slave_0: left promiscuous mode [ 120.240622][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.439391][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.452154][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.463592][ T35] bond0 (unregistering): Released all slaves [ 120.550604][ T35] hsr_slave_0: left promiscuous mode [ 120.561048][ T35] hsr_slave_1: left promiscuous mode [ 120.567622][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.575835][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.584130][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.592662][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.606447][ T35] veth1_macvtap: left promiscuous mode [ 120.614271][ T35] veth0_macvtap: left promiscuous mode [ 120.620172][ T35] veth1_vlan: left promiscuous mode [ 120.626687][ T35] veth0_vlan: left promiscuous mode [ 120.904932][ T35] team0 (unregistering): Port device team_slave_1 removed [ 120.936169][ T35] team0 (unregistering): Port device team_slave_0 removed 2026/04/10 09:09:50 executed programs: 0 [ 122.446210][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 122.458149][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 122.472211][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 122.481638][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 122.490301][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 123.009059][ T6424] chnl_net:caif_netlink_parms(): no params data found [ 123.131015][ T6424] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.142672][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.150508][ T6424] bridge_slave_0: entered allmulticast mode [ 123.158782][ T6424] bridge_slave_0: entered promiscuous mode [ 123.171014][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.179668][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.187247][ T6424] bridge_slave_1: entered allmulticast mode [ 123.195396][ T6424] bridge_slave_1: entered promiscuous mode [ 123.253712][ T6424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.266161][ T6424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.307470][ T6424] team0: Port device team_slave_0 added [ 123.316049][ T6424] team0: Port device team_slave_1 added [ 123.345495][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.352545][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.379187][ T6424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.392882][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.399930][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.427390][ T6424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.503914][ T6424] hsr_slave_0: entered promiscuous mode [ 123.510913][ T6424] hsr_slave_1: entered promiscuous mode [ 124.115825][ T6424] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.127552][ T6424] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.139531][ T6424] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.152419][ T6424] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.249736][ T6424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.274957][ T6424] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.288661][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.295832][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.313001][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.320113][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.555175][ T6424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.571839][ T50] Bluetooth: hci0: command tx timeout [ 124.619165][ T6424] veth0_vlan: entered promiscuous mode [ 124.632632][ T6424] veth1_vlan: entered promiscuous mode [ 124.665949][ T6424] veth0_macvtap: entered promiscuous mode [ 124.677254][ T6424] veth1_macvtap: entered promiscuous mode [ 124.701582][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.717624][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.734001][ T47] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.745628][ T47] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.756741][ T47] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.777675][ T47] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.847904][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.863391][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.898742][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.908594][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.311706][ T6507] loop0: detected capacity change from 0 to 32768 [ 125.341426][ T6507] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 125.351281][ T6507] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 125.383746][ T6507] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 125.434152][ T6507] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 125.448730][ T6507] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 125.459522][ T6507] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590 [ 125.474237][ T6507] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 125.483623][ T6507] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6507 [syz.0.16] iterate_dir+0x399/0x570 [ 125.494217][ T6507] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 125.500348][ T6517] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 125.502802][ T6507] CPU: 0 UID: 0 PID: 6507 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 125.502821][ T6507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 125.502837][ T6507] Call Trace: [ 125.502846][ T6507] [ 125.502853][ T6507] dump_stack_lvl+0xe8/0x150 [ 125.502880][ T6507] gfs2_withdraw+0xc3/0x1b0 [ 125.502898][ T6507] gfs2_dirent_scan+0x545/0x690 [ 125.502917][ T6507] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 125.502937][ T6507] gfs2_dir_read+0x78e/0x1760 [ 125.502960][ T6507] ? __pfx_inode_dio_wait+0x10/0x10 [ 125.502979][ T6507] ? do_raw_spin_unlock+0xf5/0x210 [ 125.502996][ T6507] ? __pfx_gfs2_dir_read+0x10/0x10 [ 125.503020][ T6507] ? gfs2_glock_wait+0x20f/0x2a0 [ 125.503038][ T6507] gfs2_readdir+0x169/0x1e0 [ 125.503058][ T6507] ? iterate_dir+0x292/0x570 [ 125.503075][ T6507] ? __pfx_gfs2_readdir+0x10/0x10 [ 125.503098][ T6507] ? iterate_dir+0x399/0x570 [ 125.503114][ T6507] ? iterate_dir+0x292/0x570 [ 125.503128][ T6507] ? down_read_killable+0x1bb/0x340 [ 125.503154][ T6507] iterate_dir+0x399/0x570 [ 125.503175][ T6507] __se_sys_getdents64+0xf1/0x280 [ 125.503194][ T6507] ? __pfx___se_sys_getdents64+0x10/0x10 [ 125.503210][ T6507] ? __pfx_filldir64+0x10/0x10 [ 125.503228][ T6507] ? rcu_is_watching+0x15/0xb0 [ 125.503257][ T6507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.503273][ T6507] do_syscall_64+0x15f/0xf80 [ 125.503290][ T6507] ? trace_irq_disable+0x3b/0x140 [ 125.503307][ T6507] ? clear_bhb_loop+0x40/0x90 [ 125.503324][ T6507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.503339][ T6507] RIP: 0033:0x7fb821599079 [ 125.503361][ T6507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.503372][ T6507] RSP: 002b:00007fb822455028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 125.503391][ T6507] RAX: ffffffffffffffda RBX: 00007fb8217c5fa0 RCX: 00007fb821599079 [ 125.503402][ T6507] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 125.503417][ T6507] RBP: 00007fb82162ba4c R08: 0000000000000000 R09: 0000000000000000 [ 125.503426][ T6507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.503434][ T6507] R13: 0000000000000000 R14: 00007fb8217c5fa0 R15: 00007fff4f046258 [ 125.503459][ T6507] [ 125.503465][ T6507] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 125.533207][ T6517] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 125.542388][ T9] gfs2: fsid=syz:syz.s: file system withdrawn [ 125.553916][ T6517] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6507 [syz.0.16] iterate_dir+0x399/0x570 [ 125.553963][ T6517] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6517 [syz.0.16] iterate_dir+0x399/0x570 [ 125.553987][ T6517] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 126.096533][ T6519] loop0: detected capacity change from 0 to 32768 [ 126.118376][ T6519] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 126.127321][ T6519] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 126.142056][ T6519] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 126.207768][ T6519] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 126.219813][ T6519] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 126.229463][ T6519] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590 [ 126.243916][ T6519] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 126.252982][ T6519] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6519 [syz.0.17] iterate_dir+0x399/0x570 [ 126.262536][ T6519] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 126.270957][ T6519] CPU: 1 UID: 0 PID: 6519 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 126.270977][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 126.270985][ T6519] Call Trace: [ 126.270992][ T6519] [ 126.270998][ T6519] dump_stack_lvl+0xe8/0x150 [ 126.271024][ T6519] gfs2_withdraw+0xc3/0x1b0 [ 126.271042][ T6519] gfs2_dirent_scan+0x545/0x690 [ 126.271061][ T6519] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 126.271083][ T6519] gfs2_dir_read+0x78e/0x1760 [ 126.271103][ T6519] ? __pfx_inode_dio_wait+0x10/0x10 [ 126.271121][ T6519] ? do_raw_spin_unlock+0xf5/0x210 [ 126.271139][ T6519] ? __pfx_gfs2_dir_read+0x10/0x10 [ 126.271165][ T6519] ? gfs2_glock_wait+0x20f/0x2a0 [ 126.271183][ T6519] gfs2_readdir+0x169/0x1e0 [ 126.271202][ T6519] ? iterate_dir+0x292/0x570 [ 126.271219][ T6519] ? __pfx_gfs2_readdir+0x10/0x10 [ 126.271241][ T6519] ? iterate_dir+0x399/0x570 [ 126.271257][ T6519] ? iterate_dir+0x292/0x570 [ 126.271271][ T6519] ? down_read_killable+0x1bb/0x340 [ 126.271297][ T6519] iterate_dir+0x399/0x570 [ 126.271318][ T6519] __se_sys_getdents64+0xf1/0x280 [ 126.271338][ T6519] ? __pfx___se_sys_getdents64+0x10/0x10 [ 126.271355][ T6519] ? __pfx_filldir64+0x10/0x10 [ 126.271374][ T6519] ? __pfx___se_sys_chdir+0x10/0x10 [ 126.271399][ T6519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.271416][ T6519] do_syscall_64+0x15f/0xf80 [ 126.271435][ T6519] ? trace_irq_disable+0x3b/0x140 [ 126.271453][ T6519] ? clear_bhb_loop+0x40/0x90 [ 126.271472][ T6519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.271487][ T6519] RIP: 0033:0x7fb821599079 [ 126.271503][ T6519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.271515][ T6519] RSP: 002b:00007fb822455028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 126.271532][ T6519] RAX: ffffffffffffffda RBX: 00007fb8217c5fa0 RCX: 00007fb821599079 [ 126.271543][ T6519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 126.271552][ T6519] RBP: 00007fb82162ba4c R08: 0000000000000000 R09: 0000000000000000 [ 126.271561][ T6519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.271570][ T6519] R13: 0000000000000000 R14: 00007fb8217c5fa0 R15: 00007fff4f046258 [ 126.271603][ T6519] [ 126.497455][ T6519] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 126.506402][ T24] gfs2: fsid=syz:syz.s: file system withdrawn [ 126.651383][ T50] Bluetooth: hci0: command tx timeout [ 126.820642][ T6524] loop0: detected capacity change from 0 to 32768 [ 126.833368][ T6524] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 126.842903][ T6524] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 126.876123][ T6524] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 126.949311][ T6524] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 126.961354][ T6524] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 126.971054][ T6524] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590 [ 126.986131][ T6524] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 126.995732][ T6524] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6524 [syz.0.18] iterate_dir+0x399/0x570 [ 127.005183][ T6524] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 127.013862][ T6524] CPU: 0 UID: 0 PID: 6524 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 127.013880][ T6524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 127.013888][ T6524] Call Trace: [ 127.013894][ T6524] [ 127.013900][ T6524] dump_stack_lvl+0xe8/0x150 [ 127.013927][ T6524] gfs2_withdraw+0xc3/0x1b0 [ 127.013946][ T6524] gfs2_dirent_scan+0x545/0x690 [ 127.013965][ T6524] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 127.013983][ T6524] gfs2_dir_read+0x78e/0x1760 [ 127.014005][ T6524] ? __pfx_inode_dio_wait+0x10/0x10 [ 127.014024][ T6524] ? do_raw_spin_unlock+0xf5/0x210 [ 127.014044][ T6524] ? __pfx_gfs2_dir_read+0x10/0x10 [ 127.014071][ T6524] ? gfs2_glock_wait+0x20f/0x2a0 [ 127.014088][ T6524] gfs2_readdir+0x169/0x1e0 [ 127.014107][ T6524] ? iterate_dir+0x292/0x570 [ 127.014123][ T6524] ? __pfx_gfs2_readdir+0x10/0x10 [ 127.014144][ T6524] ? iterate_dir+0x399/0x570 [ 127.014159][ T6524] ? iterate_dir+0x292/0x570 [ 127.014172][ T6524] ? down_read_killable+0x1bb/0x340 [ 127.014197][ T6524] iterate_dir+0x399/0x570 [ 127.014218][ T6524] __se_sys_getdents64+0xf1/0x280 [ 127.014236][ T6524] ? __pfx___se_sys_getdents64+0x10/0x10 [ 127.014252][ T6524] ? __pfx_filldir64+0x10/0x10 [ 127.014268][ T6524] ? rcu_is_watching+0x15/0xb0 [ 127.014299][ T6524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.014316][ T6524] do_syscall_64+0x15f/0xf80 [ 127.014334][ T6524] ? trace_irq_disable+0x3b/0x140 [ 127.014352][ T6524] ? clear_bhb_loop+0x40/0x90 [ 127.014371][ T6524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.014386][ T6524] RIP: 0033:0x7fb821599079 [ 127.014401][ T6524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.014411][ T6524] RSP: 002b:00007fb822455028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 127.014427][ T6524] RAX: ffffffffffffffda RBX: 00007fb8217c5fa0 RCX: 00007fb821599079 [ 127.014437][ T6524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 127.014445][ T6524] RBP: 00007fb82162ba4c R08: 0000000000000000 R09: 0000000000000000 [ 127.014452][ T6524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.014460][ T6524] R13: 0000000000000000 R14: 00007fb8217c5fa0 R15: 00007fff4f046258 [ 127.014482][ T6524] [ 127.015266][ T6524] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 127.249484][ T807] gfs2: fsid=syz:syz.s: file system withdrawn [ 127.554207][ T6529] loop0: detected capacity change from 0 to 32768 [ 127.572026][ T6529] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 127.585206][ T6529] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 127.604191][ T6529] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 127.678152][ T6529] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 127.690745][ T6529] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 127.701020][ T6529] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590 [ 127.715749][ T6529] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 127.725840][ T6529] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6529 [syz.0.19] iterate_dir+0x399/0x570 [ 127.735419][ T6529] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 127.742427][ T6532] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 127.744542][ T6529] CPU: 0 UID: 0 PID: 6529 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) [ 127.744562][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 127.744570][ T6529] Call Trace: [ 127.744577][ T6529] [ 127.744583][ T6529] dump_stack_lvl+0xe8/0x150 [ 127.744609][ T6529] gfs2_withdraw+0xc3/0x1b0 [ 127.744628][ T6529] gfs2_dirent_scan+0x545/0x690 [ 127.744646][ T6529] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 127.744664][ T6529] gfs2_dir_read+0x78e/0x1760 [ 127.744686][ T6529] ? __pfx_inode_dio_wait+0x10/0x10 [ 127.744705][ T6529] ? do_raw_spin_unlock+0xf5/0x210 [ 127.744724][ T6529] ? __pfx_gfs2_dir_read+0x10/0x10 [ 127.744750][ T6529] ? gfs2_glock_wait+0x20f/0x2a0 [ 127.744769][ T6529] gfs2_readdir+0x169/0x1e0 [ 127.744789][ T6529] ? iterate_dir+0x292/0x570 [ 127.744805][ T6529] ? __pfx_gfs2_readdir+0x10/0x10 [ 127.744828][ T6529] ? iterate_dir+0x399/0x570 [ 127.744844][ T6529] ? iterate_dir+0x292/0x570 [ 127.744859][ T6529] ? down_read_killable+0x1bb/0x340 [ 127.744886][ T6529] iterate_dir+0x399/0x570 [ 127.744907][ T6529] __se_sys_getdents64+0xf1/0x280 [ 127.744925][ T6529] ? __pfx___se_sys_getdents64+0x10/0x10 [ 127.744942][ T6529] ? __pfx_filldir64+0x10/0x10 [ 127.744959][ T6529] ? rcu_is_watching+0x15/0xb0 [ 127.744989][ T6529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.745006][ T6529] do_syscall_64+0x15f/0xf80 [ 127.745024][ T6529] ? trace_irq_disable+0x3b/0x140 [ 127.745071][ T6529] ? clear_bhb_loop+0x40/0x90 [ 127.745089][ T6529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.745104][ T6529] RIP: 0033:0x7fb821599079 [ 127.745118][ T6529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.745129][ T6529] RSP: 002b:00007fb822455028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 127.745145][ T6529] RAX: ffffffffffffffda RBX: 00007fb8217c5fa0 RCX: 00007fb821599079 [ 127.745156][ T6529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 127.745165][ T6529] RBP: 00007fb82162ba4c R08: 0000000000000000 R09: 0000000000000000 [ 127.745174][ T6529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.745182][ T6529] R13: 0000000000000000 R14: 00007fb8217c5fa0 R15: 00007fff4f046258 [ 127.745208][ T6529] [ 127.745214][ T6529] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 127.755372][ T6532] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 127.762883][ T9] gfs2: fsid=syz:syz.s: file system withdrawn [ 127.775191][ T6532] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6529 [syz.0.19] iterate_dir+0x399/0x570 [ 128.012981][ T6532] Oops: general protection fault, probably for non-canonical address 0xe3fffa2201d515a1: 0000 [#1] SMP KASAN PTI [ 128.025059][ T6532] KASAN: maybe wild-memory-access in range [0x1ffff1100ea8ad08-0x1ffff1100ea8ad0f] [ 128.034339][ T6532] CPU: 1 UID: 0 PID: 6532 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) [ 128.043526][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 128.053573][ T6532] RIP: 0010:gfs2_dump_glock+0xe2c/0x1a60 [ 128.059201][ T6532] Code: c2 40 cb 19 8c e8 a4 cb 83 fd ba 20 00 00 00 48 8d bc 24 c0 00 00 00 31 f6 e8 80 cf 11 fe 4d 8d 7c 24 20 4d 89 fe 49 c1 ee 03 <43> 0f b6 04 2e 84 c0 0f 85 77 06 00 00 41 0f b7 1f 89 de 81 e6 00 [ 128.078797][ T6532] RSP: 0018:ffffc900033b7700 EFLAGS: 00010203 [ 128.084883][ T6532] RAX: ffffc900033b77c0 RBX: 0000000000000001 RCX: 0000000000000000 [ 128.092857][ T6532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900033b77e0 [ 128.100832][ T6532] RBP: ffffc900033b79f0 R08: ffffc900033b77df R09: 0000000000000000 [ 128.108798][ T6532] R10: ffffc900033b77c0 R11: fffff52000676efc R12: 1ffff1100ea8acec [ 128.116914][ T6532] R13: dffffc0000000000 R14: 03fffe2201d515a1 R15: 1ffff1100ea8ad0c [ 128.124882][ T6532] FS: 00007fb8224346c0(0000) GS:ffff888125349000(0000) knlGS:0000000000000000 [ 128.133866][ T6532] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.140442][ T6532] CR2: 00007fb822433ff8 CR3: 000000007da44000 CR4: 00000000003526f0 [ 128.148397][ T6532] Call Trace: [ 128.151670][ T6532] [ 128.154589][ T6532] ? gfs2_dump_glock+0xd6d/0x1a60 [ 128.159605][ T6532] ? __pfx_gfs2_dump_glock+0x10/0x10 [ 128.164874][ T6532] ? console_unlock+0x149/0x1c0 [ 128.169720][ T6532] ? preempt_schedule_thunk+0x16/0x30 [ 128.175189][ T6532] ? __pfx__printk+0x10/0x10 [ 128.179782][ T6532] gfs2_consist_inode_i+0xf5/0x110 [ 128.184899][ T6532] gfs2_dirent_scan+0x545/0x690 [ 128.189767][ T6532] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 128.195313][ T6532] gfs2_dir_read+0x78e/0x1760 [ 128.200024][ T6532] ? __pfx_inode_dio_wait+0x10/0x10 [ 128.205436][ T6532] ? do_raw_spin_unlock+0xf5/0x210 [ 128.210563][ T6532] ? __pfx_gfs2_dir_read+0x10/0x10 [ 128.215689][ T6532] ? gfs2_glock_wait+0x20f/0x2a0 [ 128.220624][ T6532] gfs2_readdir+0x169/0x1e0 [ 128.225121][ T6532] ? iterate_dir+0x292/0x570 [ 128.229702][ T6532] ? __pfx_gfs2_readdir+0x10/0x10 [ 128.234717][ T6532] ? iterate_dir+0x399/0x570 [ 128.239309][ T6532] ? iterate_dir+0x292/0x570 [ 128.243886][ T6532] ? down_read_killable+0x1bb/0x340 [ 128.249072][ T6532] iterate_dir+0x399/0x570 [ 128.253654][ T6532] __se_sys_getdents+0xf1/0x270 [ 128.258491][ T6532] ? __pfx___se_sys_getdents+0x10/0x10 [ 128.263930][ T6532] ? __pfx_filldir+0x10/0x10 [ 128.268501][ T6532] ? rcu_is_watching+0x15/0xb0 [ 128.273253][ T6532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.279490][ T6532] do_syscall_64+0x15f/0xf80 [ 128.284103][ T6532] ? trace_irq_disable+0x3b/0x140 [ 128.289128][ T6532] ? clear_bhb_loop+0x40/0x90 [ 128.293824][ T6532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.299718][ T6532] RIP: 0033:0x7fb821599079 [ 128.304144][ T6532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.323916][ T6532] RSP: 002b:00007fb822434028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 128.332322][ T6532] RAX: ffffffffffffffda RBX: 00007fb8217c6080 RCX: 00007fb821599079 [ 128.340278][ T6532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 128.348323][ T6532] RBP: 00007fb82162ba4c R08: 0000000000000000 R09: 0000000000000000 [ 128.356623][ T6532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.364579][ T6532] R13: 0000000000000000 R14: 00007fb8217c6080 R15: 00007fff4f046258 [ 128.372665][ T6532] [ 128.375841][ T6532] Modules linked in: [ 128.380404][ T6532] ---[ end trace 0000000000000000 ]--- [ 128.391365][ T6532] RIP: 0010:gfs2_dump_glock+0xe2c/0x1a60 [ 128.397057][ T6532] Code: c2 40 cb 19 8c e8 a4 cb 83 fd ba 20 00 00 00 48 8d bc 24 c0 00 00 00 31 f6 e8 80 cf 11 fe 4d 8d 7c 24 20 4d 89 fe 49 c1 ee 03 <43> 0f b6 04 2e 84 c0 0f 85 77 06 00 00 41 0f b7 1f 89 de 81 e6 00 [ 128.416937][ T6532] RSP: 0018:ffffc900033b7700 EFLAGS: 00010203 [ 128.423852][ T6532] RAX: ffffc900033b77c0 RBX: 0000000000000001 RCX: 0000000000000000 [ 128.432021][ T6532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900033b77e0 [ 128.440025][ T6532] RBP: ffffc900033b79f0 R08: ffffc900033b77df R09: 0000000000000000 [ 128.448169][ T6532] R10: ffffc900033b77c0 R11: fffff52000676efc R12: 1ffff1100ea8acec [ 128.456308][ T6532] R13: dffffc0000000000 R14: 03fffe2201d515a1 R15: 1ffff1100ea8ad0c [ 128.464612][ T6532] FS: 00007fb8224346c0(0000) GS:ffff888125249000(0000) knlGS:0000000000000000 [ 128.473852][ T6532] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.480470][ T6532] CR2: 00007fb8215e67c0 CR3: 000000007da44000 CR4: 00000000003526f0 [ 128.488972][ T6532] Kernel panic - not syncing: Fatal exception [ 128.495178][ T6532] Kernel Offset: disabled [ 128.499491][ T6532] Rebooting in 86400 seconds..