Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. 2025/09/28 05:36:10 parsed 1 programs [ 117.548663][ T6210] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 122.125419][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.138370][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.169010][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.177863][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.421088][ T6263] chnl_net:caif_netlink_parms(): no params data found [ 122.505348][ T6263] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.512608][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.519985][ T6263] bridge_slave_0: entered allmulticast mode [ 122.527699][ T6263] bridge_slave_0: entered promiscuous mode [ 122.535809][ T6263] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.543733][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.551177][ T6263] bridge_slave_1: entered allmulticast mode [ 122.558876][ T6263] bridge_slave_1: entered promiscuous mode [ 122.617318][ T6263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.631161][ T6263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.675436][ T6263] team0: Port device team_slave_0 added [ 122.683960][ T6263] team0: Port device team_slave_1 added [ 122.723725][ T6263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.730764][ T6263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.757489][ T6263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.772656][ T6263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.779664][ T6263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.806568][ T6263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.860652][ T6263] hsr_slave_0: entered promiscuous mode [ 122.867481][ T6263] hsr_slave_1: entered promiscuous mode [ 123.371706][ T6263] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.384114][ T6263] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.396086][ T6263] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.407314][ T6263] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.518644][ T6263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.540807][ T6263] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.564764][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.571957][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.585505][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.592917][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.854775][ T6263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.918398][ T6263] veth0_vlan: entered promiscuous mode [ 123.933626][ T6263] veth1_vlan: entered promiscuous mode [ 123.975724][ T6263] veth0_macvtap: entered promiscuous mode [ 123.989504][ T6263] veth1_macvtap: entered promiscuous mode [ 124.016704][ T6263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.033139][ T6263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.053493][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.075361][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.085373][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.108242][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.263084][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.338103][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.404038][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.475462][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.573172][ T5183] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.581616][ T5183] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.590800][ T5183] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.599484][ T5183] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.609136][ T5183] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/09/28 05:36:22 executed programs: 0 [ 126.303942][ T5183] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.316911][ T5183] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.326783][ T5183] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.335119][ T5183] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.343530][ T5183] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.646655][ T13] bridge_slave_1: left allmulticast mode [ 126.652671][ T13] bridge_slave_1: left promiscuous mode [ 126.658520][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.675929][ T13] bridge_slave_0: left allmulticast mode [ 126.681613][ T13] bridge_slave_0: left promiscuous mode [ 126.691746][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.005583][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.017917][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.028842][ T13] bond0 (unregistering): Released all slaves [ 127.054117][ T6399] chnl_net:caif_netlink_parms(): no params data found [ 127.131503][ T13] hsr_slave_0: left promiscuous mode [ 127.139206][ T13] hsr_slave_1: left promiscuous mode [ 127.146004][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.156278][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.164990][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.172758][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.191240][ T13] veth1_macvtap: left promiscuous mode [ 127.196948][ T13] veth0_macvtap: left promiscuous mode [ 127.203169][ T13] veth1_vlan: left promiscuous mode [ 127.208541][ T13] veth0_vlan: left promiscuous mode [ 127.649644][ T13] team0 (unregistering): Port device team_slave_1 removed [ 127.692042][ T13] team0 (unregistering): Port device team_slave_0 removed [ 128.095029][ T6399] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.103159][ T6399] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.110471][ T6399] bridge_slave_0: entered allmulticast mode [ 128.119437][ T6399] bridge_slave_0: entered promiscuous mode [ 128.140062][ T6399] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.154148][ T6399] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.162100][ T6399] bridge_slave_1: entered allmulticast mode [ 128.170824][ T6399] bridge_slave_1: entered promiscuous mode [ 128.236655][ T6399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.249961][ T6399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.304141][ T6399] team0: Port device team_slave_0 added [ 128.320888][ T6399] team0: Port device team_slave_1 added [ 128.381730][ T6399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.388977][ T5183] Bluetooth: hci0: command tx timeout [ 128.396340][ T6399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.424589][ T6399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.731899][ T6399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.741767][ T6399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.768298][ T6399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.861825][ T6399] hsr_slave_0: entered promiscuous mode [ 128.888225][ T6399] hsr_slave_1: entered promiscuous mode [ 129.482812][ T6399] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 129.497913][ T6399] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 129.509142][ T6399] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 129.519560][ T6399] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 129.585201][ T6399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.603630][ T6399] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.617843][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.625074][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.638863][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.646108][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.800462][ T6399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.839662][ T6399] veth0_vlan: entered promiscuous mode [ 129.850707][ T6399] veth1_vlan: entered promiscuous mode [ 129.878527][ T6399] veth0_macvtap: entered promiscuous mode [ 129.888679][ T6399] veth1_macvtap: entered promiscuous mode [ 129.907887][ T6399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.922131][ T6399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.937344][ T1150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.946437][ T1150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.956753][ T1150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.965933][ T1150] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.022066][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.030867][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.054953][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.064485][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.321774][ T6499] loop0: detected capacity change from 0 to 32768 [ 130.346883][ T6499] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 130.355597][ T6499] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 130.381019][ T6499] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 130.463187][ T5183] Bluetooth: hci0: command tx timeout [ 130.472027][ T6499] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 130.489223][ T6499] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 130.500046][ T6499] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590 [ 130.515190][ T6499] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 130.524911][ T6499] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6499 [syz.0.17] __gfs2_lookup+0x8f/0x270 [ 130.534602][ T6499] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 130.545045][ T6499] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 130.552616][ T6499] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 130.561390][ T6499] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 130.568769][ T6499] gfs2: fsid=syz:syz.s: File system withdrawn [ 130.575304][ T6499] CPU: 0 UID: 0 PID: 6499 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 130.575326][ T6499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.575346][ T6499] Call Trace: [ 130.575354][ T6499] [ 130.575361][ T6499] dump_stack_lvl+0x189/0x250 [ 130.575388][ T6499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.575406][ T6499] ? __pfx__printk+0x10/0x10 [ 130.575434][ T6499] ? kobject_uevent_env+0x36b/0x8c0 [ 130.575464][ T6499] gfs2_withdraw+0xb30/0x1430 [ 130.575497][ T6499] ? __pfx_gfs2_withdraw+0x10/0x10 [ 130.575513][ T6499] ? __pfx__printk+0x10/0x10 [ 130.575529][ T6499] ? gfs2_consist_inode_i+0xf5/0x110 [ 130.575539][ T6499] gfs2_dirent_scan+0x545/0x690 [ 130.575555][ T6499] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 130.575571][ T6499] gfs2_dirent_search+0x2cb/0x710 [ 130.575586][ T6499] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 130.575599][ T6499] ? __pfx___might_resched+0x10/0x10 [ 130.575614][ T6499] ? __pfx_gfs2_dirent_search+0x10/0x10 [ 130.575628][ T6499] ? __pfx_gfs2_permission+0x10/0x10 [ 130.575636][ T6499] ? gfs2_glock_nq+0x10c7/0x1830 [ 130.575654][ T6499] gfs2_dir_search+0x4c/0x220 [ 130.575671][ T6499] gfs2_lookupi+0x3d9/0x5a0 [ 130.575686][ T6499] ? __pfx_gfs2_lookupi+0x10/0x10 [ 130.575694][ T6499] ? d_alloc_parallel+0x14ae/0x15e0 [ 130.575710][ T6499] ? __gfs2_lookup+0x8f/0x270 [ 130.575723][ T6499] ? d_alloc_parallel+0x2f0/0x15e0 [ 130.575738][ T6499] __gfs2_lookup+0x8f/0x270 [ 130.575750][ T6499] ? __pfx___gfs2_lookup+0x10/0x10 [ 130.575762][ T6499] ? __raw_spin_lock_init+0x45/0x100 [ 130.575775][ T6499] ? __init_waitqueue_head+0xa9/0x150 [ 130.575787][ T6499] __lookup_slow+0x297/0x3d0 [ 130.575803][ T6499] ? __pfx___lookup_slow+0x10/0x10 [ 130.575820][ T6499] ? gfs2_dhash+0x59/0xb0 [ 130.575835][ T6499] ? down_read+0x1ad/0x2e0 [ 130.575849][ T6499] lookup_slow+0x53/0x70 [ 130.575864][ T6499] walk_component+0x2d2/0x400 [ 130.575876][ T6499] ? path_lookupat+0x156/0x430 [ 130.575890][ T6499] path_lookupat+0x163/0x430 [ 130.575906][ T6499] filename_lookup+0x212/0x570 [ 130.575919][ T6499] ? do_syscall_64+0xfa/0xfa0 [ 130.575929][ T6499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.575941][ T6499] ? __pfx_filename_lookup+0x10/0x10 [ 130.575968][ T6499] ? __might_fault+0xb0/0x130 [ 130.575983][ T6499] vfs_statx+0xf8/0x550 [ 130.575999][ T6499] ? __pfx_vfs_statx+0x10/0x10 [ 130.576010][ T6499] ? strncpy_from_user+0x150/0x290 [ 130.576024][ T6499] ? getname_flags+0x1e5/0x540 [ 130.576038][ T6499] vfs_fstatat+0x118/0x170 [ 130.576051][ T6499] __x64_sys_newfstatat+0x116/0x190 [ 130.576066][ T6499] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 130.576095][ T6499] ? rcu_is_watching+0x15/0xb0 [ 130.576107][ T6499] ? do_syscall_64+0xbe/0xfa0 [ 130.576120][ T6499] do_syscall_64+0xfa/0xfa0 [ 130.576131][ T6499] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.576141][ T6499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.576150][ T6499] ? clear_bhb_loop+0x60/0xb0 [ 130.576163][ T6499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.576178][ T6499] RIP: 0033:0x7f4d8c38eba9 [ 130.576198][ T6499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.576210][ T6499] RSP: 002b:00007f4d8b9fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 130.576232][ T6499] RAX: ffffffffffffffda RBX: 00007f4d8c5d5fa0 RCX: 00007f4d8c38eba9 [ 130.576242][ T6499] RDX: 0000000000000000 RSI: 0000200000000e80 RDI: ffffffffffffff9c [ 130.576248][ T6499] RBP: 00007f4d8c411e19 R08: 0000000000000000 R09: 0000000000000000 [ 130.576253][ T6499] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000 [ 130.576258][ T6499] R13: 00007f4d8c5d6038 R14: 00007f4d8c5d5fa0 R15: 00007ffdda175a38 [ 130.576275][ T6499] [ 131.412257][ T6504] loop0: detected capacity change from 0 to 32768 [ 131.437853][ T6504] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 131.448064][ T6504] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 131.466008][ T6504] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 131.559090][ T6504] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 131.570446][ T6504] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 131.580144][ T6504] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590 [ 131.597111][ T6504] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 131.606962][ T6504] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6504 [syz.0.18] __gfs2_lookup+0x8f/0x270 [ 131.616462][ T6504] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 131.625828][ T6504] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 131.633406][ T6504] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 131.642385][ T6504] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 131.649127][ T6504] gfs2: fsid=syz:syz.s: File system withdrawn [ 131.655413][ T6504] CPU: 0 UID: 0 PID: 6504 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 131.655433][ T6504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 131.655442][ T6504] Call Trace: [ 131.655448][ T6504] [ 131.655455][ T6504] dump_stack_lvl+0x189/0x250 [ 131.655480][ T6504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.655497][ T6504] ? __pfx__printk+0x10/0x10 [ 131.655515][ T6504] ? kobject_uevent_env+0x36b/0x8c0 [ 131.655544][ T6504] gfs2_withdraw+0xb30/0x1430 [ 131.655581][ T6504] ? __pfx_gfs2_withdraw+0x10/0x10 [ 131.655608][ T6504] ? __pfx__printk+0x10/0x10 [ 131.655635][ T6504] ? gfs2_consist_inode_i+0xf5/0x110 [ 131.655655][ T6504] gfs2_dirent_scan+0x545/0x690 [ 131.655683][ T6504] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 131.655708][ T6504] gfs2_dirent_search+0x2cb/0x710 [ 131.655731][ T6504] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 131.655753][ T6504] ? __pfx___might_resched+0x10/0x10 [ 131.655776][ T6504] ? __pfx_gfs2_dirent_search+0x10/0x10 [ 131.655798][ T6504] ? __pfx_gfs2_permission+0x10/0x10 [ 131.655812][ T6504] ? gfs2_glock_nq+0x10c7/0x1830 [ 131.655836][ T6504] gfs2_dir_search+0x4c/0x220 [ 131.655864][ T6504] gfs2_lookupi+0x3d9/0x5a0 [ 131.655887][ T6504] ? __pfx_gfs2_lookupi+0x10/0x10 [ 131.655900][ T6504] ? d_alloc_parallel+0x14ae/0x15e0 [ 131.655926][ T6504] ? __gfs2_lookup+0x8f/0x270 [ 131.655948][ T6504] ? d_alloc_parallel+0x2f0/0x15e0 [ 131.655973][ T6504] __gfs2_lookup+0x8f/0x270 [ 131.655990][ T6504] ? __lock_acquire+0xab9/0xd20 [ 131.656012][ T6504] ? __pfx___gfs2_lookup+0x10/0x10 [ 131.656027][ T6504] ? look_up_lock_class+0x74/0x170 [ 131.656051][ T6504] ? __raw_spin_lock_init+0x45/0x100 [ 131.656080][ T6504] ? __init_waitqueue_head+0xa9/0x150 [ 131.656105][ T6504] __lookup_slow+0x297/0x3d0 [ 131.656131][ T6504] ? __pfx___lookup_slow+0x10/0x10 [ 131.656160][ T6504] ? gfs2_dhash+0x59/0xb0 [ 131.656186][ T6504] ? down_read+0x1ad/0x2e0 [ 131.656208][ T6504] lookup_slow+0x53/0x70 [ 131.656231][ T6504] walk_component+0x2d2/0x400 [ 131.656251][ T6504] ? path_lookupat+0x156/0x430 [ 131.656274][ T6504] path_lookupat+0x163/0x430 [ 131.656302][ T6504] filename_lookup+0x212/0x570 [ 131.656330][ T6504] ? do_syscall_64+0xfa/0xfa0 [ 131.656347][ T6504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.656368][ T6504] ? __pfx_filename_lookup+0x10/0x10 [ 131.656414][ T6504] ? __might_fault+0xb0/0x130 [ 131.656441][ T6504] vfs_statx+0xf8/0x550 [ 131.656467][ T6504] ? __pfx_vfs_statx+0x10/0x10 [ 131.656485][ T6504] ? strncpy_from_user+0x150/0x290 [ 131.656507][ T6504] ? getname_flags+0x1e5/0x540 [ 131.656531][ T6504] vfs_fstatat+0x118/0x170 [ 131.656552][ T6504] __x64_sys_newfstatat+0x116/0x190 [ 131.656576][ T6504] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 131.656613][ T6504] ? rcu_is_watching+0x15/0xb0 [ 131.656634][ T6504] ? do_syscall_64+0xbe/0xfa0 [ 131.656656][ T6504] do_syscall_64+0xfa/0xfa0 [ 131.656672][ T6504] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.656690][ T6504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.656705][ T6504] ? clear_bhb_loop+0x60/0xb0 [ 131.656725][ T6504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.656740][ T6504] RIP: 0033:0x7f4d8c38eba9 [ 131.656755][ T6504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.656768][ T6504] RSP: 002b:00007f4d8b9fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 131.656785][ T6504] RAX: ffffffffffffffda RBX: 00007f4d8c5d5fa0 RCX: 00007f4d8c38eba9 [ 131.656797][ T6504] RDX: 0000000000000000 RSI: 0000200000000e80 RDI: ffffffffffffff9c [ 131.656808][ T6504] RBP: 00007f4d8c411e19 R08: 0000000000000000 R09: 0000000000000000 [ 131.656817][ T6504] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000 [ 131.656826][ T6504] R13: 00007f4d8c5d6038 R14: 00007f4d8c5d5fa0 R15: 00007ffdda175a38 [ 131.656855][ T6504] 2025/09/28 05:36:28 executed programs: 4 [ 132.351855][ T6509] loop0: detected capacity change from 0 to 32768 [ 132.372388][ T6509] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 132.380584][ T6509] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 132.399613][ T6509] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 132.486388][ T6509] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 132.497598][ T6509] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 132.507453][ T6509] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590 [ 132.522339][ T6509] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 132.531473][ T6509] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6509 [syz.0.19] __gfs2_lookup+0x8f/0x270 [ 132.541059][ T6509] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 132.549605][ T6509] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 132.552336][ T5183] Bluetooth: hci0: command tx timeout [ 132.557131][ T6509] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 132.571069][ T6509] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 132.578152][ T6509] gfs2: fsid=syz:syz.s: File system withdrawn [ 132.584267][ T6509] CPU: 1 UID: 0 PID: 6509 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) [ 132.584282][ T6509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 132.584288][ T6509] Call Trace: [ 132.584294][ T6509] [ 132.584299][ T6509] dump_stack_lvl+0x189/0x250 [ 132.584317][ T6509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.584328][ T6509] ? __pfx__printk+0x10/0x10 [ 132.584341][ T6509] ? kobject_uevent_env+0x36b/0x8c0 [ 132.584360][ T6509] gfs2_withdraw+0xb30/0x1430 [ 132.584384][ T6509] ? __pfx_gfs2_withdraw+0x10/0x10 [ 132.584400][ T6509] ? __pfx__printk+0x10/0x10 [ 132.584420][ T6509] ? gfs2_consist_inode_i+0xf5/0x110 [ 132.584430][ T6509] gfs2_dirent_scan+0x545/0x690 [ 132.584448][ T6509] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 132.584464][ T6509] gfs2_dirent_search+0x2cb/0x710 [ 132.584479][ T6509] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 132.584492][ T6509] ? __pfx___might_resched+0x10/0x10 [ 132.584507][ T6509] ? __pfx_gfs2_dirent_search+0x10/0x10 [ 132.584521][ T6509] ? __pfx_gfs2_permission+0x10/0x10 [ 132.584529][ T6509] ? gfs2_glock_nq+0x10c7/0x1830 [ 132.584548][ T6509] gfs2_dir_search+0x4c/0x220 [ 132.584574][ T6509] gfs2_lookupi+0x3d9/0x5a0 [ 132.584594][ T6509] ? __pfx_gfs2_lookupi+0x10/0x10 [ 132.584607][ T6509] ? d_alloc_parallel+0x14ae/0x15e0 [ 132.584629][ T6509] ? __gfs2_lookup+0x8f/0x270 [ 132.584649][ T6509] ? d_alloc_parallel+0x2f0/0x15e0 [ 132.584668][ T6509] __gfs2_lookup+0x8f/0x270 [ 132.584678][ T6509] ? __lock_acquire+0xab9/0xd20 [ 132.584691][ T6509] ? __pfx___gfs2_lookup+0x10/0x10 [ 132.584700][ T6509] ? look_up_lock_class+0x74/0x170 [ 132.584714][ T6509] ? __raw_spin_lock_init+0x45/0x100 [ 132.584726][ T6509] ? __init_waitqueue_head+0xa9/0x150 [ 132.584740][ T6509] __lookup_slow+0x297/0x3d0 [ 132.584756][ T6509] ? __pfx___lookup_slow+0x10/0x10 [ 132.584773][ T6509] ? gfs2_dhash+0x59/0xb0 [ 132.584788][ T6509] ? down_read+0x1ad/0x2e0 [ 132.584803][ T6509] lookup_slow+0x53/0x70 [ 132.584817][ T6509] walk_component+0x2d2/0x400 [ 132.584830][ T6509] ? path_lookupat+0x156/0x430 [ 132.584844][ T6509] path_lookupat+0x163/0x430 [ 132.584861][ T6509] filename_lookup+0x212/0x570 [ 132.584873][ T6509] ? do_syscall_64+0xfa/0xfa0 [ 132.584883][ T6509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.584895][ T6509] ? __pfx_filename_lookup+0x10/0x10 [ 132.584922][ T6509] ? __might_fault+0xb0/0x130 [ 132.584937][ T6509] vfs_statx+0xf8/0x550 [ 132.584954][ T6509] ? __pfx_vfs_statx+0x10/0x10 [ 132.584964][ T6509] ? strncpy_from_user+0x150/0x290 [ 132.584978][ T6509] ? getname_flags+0x1e5/0x540 [ 132.584992][ T6509] vfs_fstatat+0x118/0x170 [ 132.585005][ T6509] __x64_sys_newfstatat+0x116/0x190 [ 132.585020][ T6509] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 132.585043][ T6509] ? rcu_is_watching+0x15/0xb0 [ 132.585056][ T6509] ? do_syscall_64+0xbe/0xfa0 [ 132.585069][ T6509] do_syscall_64+0xfa/0xfa0 [ 132.585080][ T6509] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.585090][ T6509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.585099][ T6509] ? clear_bhb_loop+0x60/0xb0 [ 132.585110][ T6509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.585119][ T6509] RIP: 0033:0x7f4d8c38eba9 [ 132.585128][ T6509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.585136][ T6509] RSP: 002b:00007f4d8b9fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 132.585150][ T6509] RAX: ffffffffffffffda RBX: 00007f4d8c5d5fa0 RCX: 00007f4d8c38eba9 [ 132.585156][ T6509] RDX: 0000000000000000 RSI: 0000200000000e80 RDI: ffffffffffffff9c [ 132.585162][ T6509] RBP: 00007f4d8c411e19 R08: 0000000000000000 R09: 0000000000000000 [ 132.585167][ T6509] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000 [ 132.585173][ T6509] R13: 00007f4d8c5d6038 R14: 00007f4d8c5d5fa0 R15: 00007ffdda175a38 [ 132.585194][ T6509] [ 132.989429][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.002522][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.292933][ T6514] loop0: detected capacity change from 0 to 32768 [ 133.316317][ T6514] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 133.324701][ T6514] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 133.344136][ T6514] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 133.433974][ T6514] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 133.446427][ T6514] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 133.456333][ T6514] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590 [ 133.470816][ T6514] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 133.479908][ T6514] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6514 [syz.0.20] __gfs2_lookup+0x8f/0x270 [ 133.489966][ T6514] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 133.498653][ T6514] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 133.506491][ T6514] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 133.515597][ T6514] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 133.522628][ T6514] gfs2: fsid=syz:syz.s: File system withdrawn [ 133.528734][ T6514] CPU: 0 UID: 0 PID: 6514 Comm: syz.0.20 Not tainted syzkaller #0 PREEMPT(full) [ 133.528759][ T6514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 133.528768][ T6514] Call Trace: [ 133.528777][ T6514] [ 133.528784][ T6514] dump_stack_lvl+0x189/0x250 [ 133.528803][ T6514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.528814][ T6514] ? __pfx__printk+0x10/0x10 [ 133.528827][ T6514] ? kobject_uevent_env+0x36b/0x8c0 [ 133.528846][ T6514] gfs2_withdraw+0xb30/0x1430 [ 133.528870][ T6514] ? __pfx_gfs2_withdraw+0x10/0x10 [ 133.528886][ T6514] ? __pfx__printk+0x10/0x10 [ 133.528902][ T6514] ? gfs2_consist_inode_i+0xf5/0x110 [ 133.528912][ T6514] gfs2_dirent_scan+0x545/0x690 [ 133.528928][ T6514] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 133.528946][ T6514] gfs2_dirent_search+0x2cb/0x710 [ 133.528967][ T6514] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 133.528989][ T6514] ? __pfx___might_resched+0x10/0x10 [ 133.529012][ T6514] ? __pfx_gfs2_dirent_search+0x10/0x10 [ 133.529034][ T6514] ? __pfx_gfs2_permission+0x10/0x10 [ 133.529043][ T6514] ? gfs2_glock_nq+0x10c7/0x1830 [ 133.529057][ T6514] gfs2_dir_search+0x4c/0x220 [ 133.529074][ T6514] gfs2_lookupi+0x3d9/0x5a0 [ 133.529086][ T6514] ? __pfx_gfs2_lookupi+0x10/0x10 [ 133.529094][ T6514] ? d_alloc_parallel+0x14ae/0x15e0 [ 133.529111][ T6514] ? __gfs2_lookup+0x8f/0x270 [ 133.529129][ T6514] ? d_alloc_parallel+0x2f0/0x15e0 [ 133.529145][ T6514] __gfs2_lookup+0x8f/0x270 [ 133.529154][ T6514] ? __lock_acquire+0xab9/0xd20 [ 133.529168][ T6514] ? __pfx___gfs2_lookup+0x10/0x10 [ 133.529177][ T6514] ? look_up_lock_class+0x74/0x170 [ 133.529191][ T6514] ? __raw_spin_lock_init+0x45/0x100 [ 133.529203][ T6514] ? __init_waitqueue_head+0xa9/0x150 [ 133.529216][ T6514] __lookup_slow+0x297/0x3d0 [ 133.529232][ T6514] ? __pfx___lookup_slow+0x10/0x10 [ 133.529250][ T6514] ? gfs2_dhash+0x59/0xb0 [ 133.529265][ T6514] ? down_read+0x1ad/0x2e0 [ 133.529279][ T6514] lookup_slow+0x53/0x70 [ 133.529294][ T6514] walk_component+0x2d2/0x400 [ 133.529306][ T6514] ? path_lookupat+0x156/0x430 [ 133.529320][ T6514] path_lookupat+0x163/0x430 [ 133.529337][ T6514] filename_lookup+0x212/0x570 [ 133.529349][ T6514] ? do_syscall_64+0xfa/0xfa0 [ 133.529360][ T6514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.529372][ T6514] ? __pfx_filename_lookup+0x10/0x10 [ 133.529400][ T6514] ? __might_fault+0xb0/0x130 [ 133.529416][ T6514] vfs_statx+0xf8/0x550 [ 133.529431][ T6514] ? __pfx_vfs_statx+0x10/0x10 [ 133.529442][ T6514] ? strncpy_from_user+0x150/0x290 [ 133.529456][ T6514] ? getname_flags+0x1e5/0x540 [ 133.529470][ T6514] vfs_fstatat+0x118/0x170 [ 133.529483][ T6514] __x64_sys_newfstatat+0x116/0x190 [ 133.529498][ T6514] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 133.529525][ T6514] ? do_syscall_64+0xbe/0xfa0 [ 133.529538][ T6514] do_syscall_64+0xfa/0xfa0 [ 133.529548][ T6514] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.529559][ T6514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.529567][ T6514] ? clear_bhb_loop+0x60/0xb0 [ 133.529579][ T6514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.529588][ T6514] RIP: 0033:0x7f4d8c38eba9 [ 133.529597][ T6514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.529604][ T6514] RSP: 002b:00007f4d8b9fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 133.529615][ T6514] RAX: ffffffffffffffda RBX: 00007f4d8c5d5fa0 RCX: 00007f4d8c38eba9 [ 133.529621][ T6514] RDX: 0000000000000000 RSI: 0000200000000e80 RDI: ffffffffffffff9c [ 133.529627][ T6514] RBP: 00007f4d8c411e19 R08: 0000000000000000 R09: 0000000000000000 [ 133.529633][ T6514] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000 [ 133.529638][ T6514] R13: 00007f4d8c5d6038 R14: 00007f4d8c5d5fa0 R15: 00007ffdda175a38 [ 133.529654][ T6514] [ 134.237481][ T6519] loop0: detected capacity change from 0 to 32768 [ 134.273277][ T6519] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 134.283410][ T6519] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 134.306889][ T6519] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 134.384915][ T6519] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 134.396296][ T6519] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 134.406005][ T6519] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590 [ 134.420566][ T6519] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 134.430097][ T6519] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6519 [syz.0.21] __gfs2_lookup+0x8f/0x270 [ 134.439879][ T6519] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 134.448341][ T6522] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 134.448354][ T6519] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 134.457952][ T6519] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 134.457967][ T6519] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 134.458755][ T6519] gfs2: fsid=syz:syz.s: File system withdrawn [ 134.466251][ T6522] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 134.496602][ T6519] CPU: 1 UID: 0 PID: 6519 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(full) [ 134.496622][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 134.496632][ T6519] Call Trace: [ 134.496638][ T6519] [ 134.496646][ T6519] dump_stack_lvl+0x189/0x250 [ 134.496673][ T6519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.496690][ T6519] ? __pfx__printk+0x10/0x10 [ 134.496708][ T6519] ? kobject_uevent_env+0x36b/0x8c0 [ 134.496735][ T6519] gfs2_withdraw+0xb30/0x1430 [ 134.496771][ T6519] ? __pfx_gfs2_withdraw+0x10/0x10 [ 134.496796][ T6519] ? __pfx__printk+0x10/0x10 [ 134.496819][ T6519] ? gfs2_consist_inode_i+0xf5/0x110 [ 134.496837][ T6519] gfs2_dirent_scan+0x545/0x690 [ 134.496859][ T6519] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 134.496885][ T6519] gfs2_dirent_search+0x2cb/0x710 [ 134.496908][ T6519] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 134.496929][ T6519] ? __pfx___might_resched+0x10/0x10 [ 134.496953][ T6519] ? __pfx_gfs2_dirent_search+0x10/0x10 [ 134.496976][ T6519] ? __pfx_gfs2_permission+0x10/0x10 [ 134.496990][ T6519] ? gfs2_glock_nq+0x10c7/0x1830 [ 134.497016][ T6519] gfs2_dir_search+0x4c/0x220 [ 134.497043][ T6519] gfs2_lookupi+0x3d9/0x5a0 [ 134.497065][ T6519] ? __pfx_gfs2_lookupi+0x10/0x10 [ 134.497079][ T6519] ? d_alloc_parallel+0x14ae/0x15e0 [ 134.497105][ T6519] ? __gfs2_lookup+0x8f/0x270 [ 134.497127][ T6519] ? d_alloc_parallel+0x2f0/0x15e0 [ 134.497149][ T6519] __gfs2_lookup+0x8f/0x270 [ 134.497165][ T6519] ? __lock_acquire+0xab9/0xd20 [ 134.497187][ T6519] ? __pfx___gfs2_lookup+0x10/0x10 [ 134.497203][ T6519] ? look_up_lock_class+0x74/0x170 [ 134.497227][ T6519] ? __raw_spin_lock_init+0x45/0x100 [ 134.497244][ T6519] ? __init_waitqueue_head+0xa9/0x150 [ 134.497266][ T6519] __lookup_slow+0x297/0x3d0 [ 134.497299][ T6519] ? __pfx___lookup_slow+0x10/0x10 [ 134.497328][ T6519] ? gfs2_dhash+0x59/0xb0 [ 134.497353][ T6519] ? down_read+0x1ad/0x2e0 [ 134.497377][ T6519] lookup_slow+0x53/0x70 [ 134.497401][ T6519] walk_component+0x2d2/0x400 [ 134.497421][ T6519] ? path_lookupat+0x156/0x430 [ 134.497444][ T6519] path_lookupat+0x163/0x430 [ 134.497470][ T6519] filename_lookup+0x212/0x570 [ 134.497488][ T6519] ? do_syscall_64+0xfa/0xfa0 [ 134.497505][ T6519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.497525][ T6519] ? __pfx_filename_lookup+0x10/0x10 [ 134.497568][ T6519] ? __might_fault+0xb0/0x130 [ 134.497593][ T6519] vfs_statx+0xf8/0x550 [ 134.497617][ T6519] ? __pfx_vfs_statx+0x10/0x10 [ 134.497632][ T6519] ? strncpy_from_user+0x150/0x290 [ 134.497652][ T6519] ? getname_flags+0x1e5/0x540 [ 134.497675][ T6519] vfs_fstatat+0x118/0x170 [ 134.497693][ T6519] __x64_sys_newfstatat+0x116/0x190 [ 134.497717][ T6519] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 134.497756][ T6519] ? rcu_is_watching+0x15/0xb0 [ 134.497777][ T6519] ? do_syscall_64+0xbe/0xfa0 [ 134.497799][ T6519] do_syscall_64+0xfa/0xfa0 [ 134.497816][ T6519] ? lockdep_hardirqs_on+0x9c/0x150 [ 134.497835][ T6519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.497850][ T6519] ? clear_bhb_loop+0x60/0xb0 [ 134.497870][ T6519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.497884][ T6519] RIP: 0033:0x7f4d8c38eba9 [ 134.497898][ T6519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.497910][ T6519] RSP: 002b:00007f4d8b9fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 134.497925][ T6519] RAX: ffffffffffffffda RBX: 00007f4d8c5d5fa0 RCX: 00007f4d8c38eba9 [ 134.497935][ T6519] RDX: 0000000000000000 RSI: 0000200000000e80 RDI: ffffffffffffff9c [ 134.497946][ T6519] RBP: 00007f4d8c411e19 R08: 0000000000000000 R09: 0000000000000000 [ 134.497954][ T6519] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000 [ 134.497963][ T6519] R13: 00007f4d8c5d6038 R14: 00007f4d8c5d5fa0 R15: 00007ffdda175a38 [ 134.497957][ T6522] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6519 [syz.0.21] __gfs2_lookup+0x8f/0x270 [ 134.497991][ T6519] [ 134.624989][ T5183] Bluetooth: hci0: command tx timeout [ 134.891863][ T6522] Oops: general protection fault, probably for non-canonical address 0xdffffc0014a19ab9: 0000 [#1] SMP KASAN PTI [ 134.903753][ T6522] KASAN: probably user-memory-access in range [0x00000000a50cd5c8-0x00000000a50cd5cf] [ 134.913362][ T6522] CPU: 1 UID: 0 PID: 6522 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(full) [ 134.922448][ T6522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 134.932489][ T6522] RIP: 0010:gfs2_dump_glock+0xfbb/0x1bc0 [ 134.938111][ T6522] Code: c0 12 f1 8b be 65 03 00 00 48 c7 c2 00 13 f1 8b e8 ea c6 a3 fd 49 8d 5d 20 49 89 de 49 c1 ee 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 04 06 84 c0 0f 85 28 06 00 00 48 89 5c 24 28 0f b7 1b 89 [ 134.957689][ T6522] RSP: 0018:ffffc9000384f700 EFLAGS: 00010203 [ 134.963734][ T6522] RAX: dffffc0000000000 RBX: 00000000a50cd5cc RCX: ffff8880269a3c80 [ 134.971683][ T6522] RDX: 0000000000000000 RSI: ffffffff8c03da40 RDI: ffffffff8c03da00 [ 134.979639][ T6522] RBP: ffffc9000384f9f0 R08: 0000000000000000 R09: ffffffff83fa5fdb [ 134.987599][ T6522] R10: dffffc0000000000 R11: fffffbfff1f86aef R12: ffffffff83fa5fdb [ 134.995557][ T6522] R13: 00000000a50cd5ac R14: 0000000014a19ab9 R15: 0000000000000000 [ 135.003510][ T6522] FS: 00007f4d8b9dd6c0(0000) GS:ffff888125afc000(0000) knlGS:0000000000000000 [ 135.012423][ T6522] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.019014][ T6522] CR2: 00007f3b2e167000 CR3: 000000002c2b4000 CR4: 00000000003526f0 [ 135.026985][ T6522] Call Trace: [ 135.030267][ T6522] [ 135.033189][ T6522] ? gfs2_dump_glock+0xf0b/0x1bc0 [ 135.038237][ T6522] ? __pfx_gfs2_dump_glock+0x10/0x10 [ 135.043516][ T6522] ? preempt_count_add+0x91/0x1a0 [ 135.048527][ T6522] ? __se_sys_getdents64+0xe4/0x260 [ 135.053705][ T6522] ? do_syscall_64+0xfa/0xfa0 [ 135.058394][ T6522] ? __pfx__printk+0x10/0x10 [ 135.062973][ T6522] gfs2_consist_inode_i+0xf5/0x110 [ 135.068158][ T6522] gfs2_dirent_scan+0x545/0x690 [ 135.073009][ T6522] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 135.078636][ T6522] gfs2_dir_read+0x804/0x16f0 [ 135.083305][ T6522] ? __pfx_inode_dio_wait+0x10/0x10 [ 135.088488][ T6522] ? __pfx___might_resched+0x10/0x10 [ 135.093754][ T6522] ? __pfx_gfs2_dir_read+0x10/0x10 [ 135.098845][ T6522] ? _raw_spin_unlock+0x28/0x50 [ 135.103670][ T6522] ? gfs2_glock_nq+0x10c7/0x1830 [ 135.108583][ T6522] ? gfs2_glock_wait+0x20f/0x2a0 [ 135.113498][ T6522] gfs2_readdir+0x14c/0x1b0 [ 135.117983][ T6522] ? __pfx_gfs2_readdir+0x10/0x10 [ 135.122985][ T6522] ? iterate_dir+0x399/0x570 [ 135.127563][ T6522] ? down_read_killable+0x1d1/0x350 [ 135.132745][ T6522] iterate_dir+0x399/0x570 [ 135.137143][ T6522] __se_sys_getdents64+0xe4/0x260 [ 135.142166][ T6522] ? __pfx___se_sys_getdents64+0x10/0x10 [ 135.147811][ T6522] ? __pfx_filldir64+0x10/0x10 [ 135.152580][ T6522] ? do_syscall_64+0xbe/0xfa0 [ 135.157238][ T6522] do_syscall_64+0xfa/0xfa0 [ 135.161718][ T6522] ? lockdep_hardirqs_on+0x9c/0x150 [ 135.166895][ T6522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.172935][ T6522] ? clear_bhb_loop+0x60/0xb0 [ 135.177590][ T6522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.183461][ T6522] RIP: 0033:0x7f4d8c38eba9 [ 135.187859][ T6522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.207550][ T6522] RSP: 002b:00007f4d8b9dd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 135.215949][ T6522] RAX: ffffffffffffffda RBX: 00007f4d8c5d6090 RCX: 00007f4d8c38eba9 [ 135.223900][ T6522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 135.231849][ T6522] RBP: 00007f4d8c411e19 R08: 0000000000000000 R09: 0000000000000000 [ 135.239864][ T6522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.247839][ T6522] R13: 00007f4d8c5d6128 R14: 00007f4d8c5d6090 R15: 00007ffdda175a38 [ 135.255796][ T6522] [ 135.258797][ T6522] Modules linked in: [ 135.263686][ T6522] ---[ end trace 0000000000000000 ]--- [ 135.269252][ T6522] RIP: 0010:gfs2_dump_glock+0xfbb/0x1bc0 [ 135.275408][ T6522] Code: c0 12 f1 8b be 65 03 00 00 48 c7 c2 00 13 f1 8b e8 ea c6 a3 fd 49 8d 5d 20 49 89 de 49 c1 ee 03 48 b8 00 00 00 00 00 fc ff df <41> 0f b6 04 06 84 c0 0f 85 28 06 00 00 48 89 5c 24 28 0f b7 1b 89 [ 135.295380][ T6522] RSP: 0018:ffffc9000384f700 EFLAGS: 00010203 [ 135.301495][ T6522] RAX: dffffc0000000000 RBX: 00000000a50cd5cc RCX: ffff8880269a3c80 [ 135.309565][ T6522] RDX: 0000000000000000 RSI: ffffffff8c03da40 RDI: ffffffff8c03da00 [ 135.317717][ T6522] RBP: ffffc9000384f9f0 R08: 0000000000000000 R09: ffffffff83fa5fdb [ 135.325956][ T6522] R10: dffffc0000000000 R11: fffffbfff1f86aef R12: ffffffff83fa5fdb [ 135.334002][ T6522] R13: 00000000a50cd5ac R14: 0000000014a19ab9 R15: 0000000000000000 [ 135.341963][ T6522] FS: 00007f4d8b9dd6c0(0000) GS:ffff8881259fc000(0000) knlGS:0000000000000000 [ 135.351504][ T6522] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 135.358203][ T6522] CR2: 00007f4d8b9dcf98 CR3: 000000002c2b4000 CR4: 00000000003526f0 [ 135.366215][ T6522] Kernel panic - not syncing: Fatal exception [ 135.372547][ T6522] Kernel Offset: disabled [ 135.376862][ T6522] Rebooting in 86400 seconds..