Warning: Permanently added '10.128.1.242' (ED25519) to the list of known hosts. 2025/09/28 05:00:38 parsed 1 programs [ 117.255143][ T6211] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 120.378617][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.386506][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.415872][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.423805][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.595086][ T6257] chnl_net:caif_netlink_parms(): no params data found [ 121.661595][ T6257] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.669116][ T6257] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.676264][ T6257] bridge_slave_0: entered allmulticast mode [ 121.685246][ T6257] bridge_slave_0: entered promiscuous mode [ 121.693385][ T6257] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.700709][ T6257] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.707908][ T6257] bridge_slave_1: entered allmulticast mode [ 121.714858][ T6257] bridge_slave_1: entered promiscuous mode [ 121.749280][ T6257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.762627][ T6257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.795669][ T6257] team0: Port device team_slave_0 added [ 121.803297][ T6257] team0: Port device team_slave_1 added [ 121.829730][ T6257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.836708][ T6257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.862781][ T6257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.900906][ T6257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.908776][ T6257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.935538][ T6257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.990680][ T6257] hsr_slave_0: entered promiscuous mode [ 121.996984][ T6257] hsr_slave_1: entered promiscuous mode [ 122.461256][ T6257] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.474319][ T6257] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.486135][ T6257] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 122.499549][ T6257] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 122.609783][ T6257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.635874][ T6257] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.649984][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.657210][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.682653][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.689913][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.934098][ T6257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.993489][ T6257] veth0_vlan: entered promiscuous mode [ 123.009723][ T6257] veth1_vlan: entered promiscuous mode [ 123.052274][ T6257] veth0_macvtap: entered promiscuous mode [ 123.064190][ T6257] veth1_macvtap: entered promiscuous mode [ 123.091645][ T6257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.111252][ T6257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.130355][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.142682][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.171235][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.208136][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.311792][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.422421][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.523783][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.636621][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.597782][ T5185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.606303][ T5185] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.615112][ T5185] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.623605][ T5185] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.631654][ T5185] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/09/28 05:00:49 executed programs: 0 [ 125.334413][ T5185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.345321][ T5185] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.355620][ T5185] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.364591][ T5185] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.372682][ T5185] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.590803][ T6395] chnl_net:caif_netlink_parms(): no params data found [ 125.697644][ T6395] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.704912][ T6395] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.712652][ T6395] bridge_slave_0: entered allmulticast mode [ 125.721176][ T6395] bridge_slave_0: entered promiscuous mode [ 125.731035][ T6395] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.738340][ T6395] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.745596][ T6395] bridge_slave_1: entered allmulticast mode [ 125.754153][ T6395] bridge_slave_1: entered promiscuous mode [ 125.830602][ T6395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.844501][ T6395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.963888][ T6395] team0: Port device team_slave_0 added [ 125.971151][ T60] bridge_slave_1: left allmulticast mode [ 125.976813][ T60] bridge_slave_1: left promiscuous mode [ 125.984938][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.995877][ T60] bridge_slave_0: left allmulticast mode [ 126.004389][ T60] bridge_slave_0: left promiscuous mode [ 126.011051][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.323836][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.340501][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.351059][ T60] bond0 (unregistering): Released all slaves [ 126.370935][ T6395] team0: Port device team_slave_1 added [ 126.439825][ T6395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.449295][ T6395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.476221][ T6395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.507011][ T60] hsr_slave_0: left promiscuous mode [ 126.513931][ T60] hsr_slave_1: left promiscuous mode [ 126.521002][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.528915][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.537176][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.544884][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.565206][ T60] veth1_macvtap: left promiscuous mode [ 126.570933][ T60] veth0_macvtap: left promiscuous mode [ 126.576633][ T60] veth1_vlan: left promiscuous mode [ 126.585665][ T60] veth0_vlan: left promiscuous mode [ 126.990576][ T60] team0 (unregistering): Port device team_slave_1 removed [ 127.018329][ T60] team0 (unregistering): Port device team_slave_0 removed [ 127.224550][ T6395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.231673][ T6395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.258536][ T6395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.328092][ T6395] hsr_slave_0: entered promiscuous mode [ 127.334939][ T6395] hsr_slave_1: entered promiscuous mode [ 127.458011][ T5904] Bluetooth: hci0: command tx timeout [ 128.169754][ T6395] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 128.186905][ T6395] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 128.213929][ T6395] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 128.232276][ T6395] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 128.375944][ T6395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.404302][ T6395] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.422300][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.429535][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.455946][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.463192][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.713358][ T6395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.777188][ T6395] veth0_vlan: entered promiscuous mode [ 128.792038][ T6395] veth1_vlan: entered promiscuous mode [ 128.825658][ T6395] veth0_macvtap: entered promiscuous mode [ 128.837972][ T6395] veth1_macvtap: entered promiscuous mode [ 128.862472][ T6395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.874646][ T6395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.891454][ T1161] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.900894][ T1161] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.918231][ T1161] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.931386][ T1161] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.987392][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.995325][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.029256][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.039184][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.275999][ T6495] loop0: detected capacity change from 0 to 32768 [ 129.303834][ T6495] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 129.312743][ T6495] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 129.334055][ T6495] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 129.394325][ T6495] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 129.408104][ T6495] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 129.418487][ T6495] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590 [ 129.433453][ T6495] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 129.442527][ T6495] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6495 [syz.0.17] __gfs2_lookup+0x8f/0x270 [ 129.452553][ T6495] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 129.461412][ T6495] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 129.468860][ T6495] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 129.477925][ T6495] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 129.485120][ T6495] gfs2: fsid=syz:syz.s: File system withdrawn [ 129.491978][ T6495] CPU: 1 UID: 0 PID: 6495 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 129.492019][ T6495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 129.492050][ T6495] Call Trace: [ 129.492057][ T6495] [ 129.492065][ T6495] dump_stack_lvl+0x189/0x250 [ 129.492091][ T6495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.492109][ T6495] ? __pfx__printk+0x10/0x10 [ 129.492124][ T6495] ? kobject_uevent_env+0x36b/0x8c0 [ 129.492144][ T6495] gfs2_withdraw+0xb30/0x1430 [ 129.492168][ T6495] ? __pfx_gfs2_withdraw+0x10/0x10 [ 129.492184][ T6495] ? __pfx__printk+0x10/0x10 [ 129.492200][ T6495] ? gfs2_consist_inode_i+0xf5/0x110 [ 129.492210][ T6495] gfs2_dirent_scan+0x545/0x690 [ 129.492226][ T6495] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 129.492243][ T6495] gfs2_dirent_search+0x2cb/0x710 [ 129.492257][ T6495] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 129.492271][ T6495] ? __pfx___might_resched+0x10/0x10 [ 129.492286][ T6495] ? __pfx_gfs2_dirent_search+0x10/0x10 [ 129.492300][ T6495] ? __pfx_gfs2_permission+0x10/0x10 [ 129.492308][ T6495] ? gfs2_glock_nq+0x10c7/0x1830 [ 129.492323][ T6495] gfs2_dir_search+0x4c/0x220 [ 129.492339][ T6495] gfs2_lookupi+0x3d9/0x5a0 [ 129.492352][ T6495] ? __pfx_gfs2_lookupi+0x10/0x10 [ 129.492360][ T6495] ? d_alloc_parallel+0x14ae/0x15e0 [ 129.492376][ T6495] ? __gfs2_lookup+0x8f/0x270 [ 129.492389][ T6495] ? d_alloc_parallel+0x2f0/0x15e0 [ 129.492404][ T6495] __gfs2_lookup+0x8f/0x270 [ 129.492416][ T6495] ? __pfx___gfs2_lookup+0x10/0x10 [ 129.492428][ T6495] ? __raw_spin_lock_init+0x45/0x100 [ 129.492441][ T6495] ? __init_waitqueue_head+0xa9/0x150 [ 129.492454][ T6495] __lookup_slow+0x297/0x3d0 [ 129.492470][ T6495] ? __pfx___lookup_slow+0x10/0x10 [ 129.492487][ T6495] ? gfs2_dhash+0x59/0xb0 [ 129.492502][ T6495] ? down_read+0x1ad/0x2e0 [ 129.492521][ T6495] lookup_slow+0x53/0x70 [ 129.492535][ T6495] walk_component+0x2d2/0x400 [ 129.492547][ T6495] ? path_lookupat+0x156/0x430 [ 129.492561][ T6495] path_lookupat+0x163/0x430 [ 129.492578][ T6495] filename_lookup+0x212/0x570 [ 129.492590][ T6495] ? do_syscall_64+0xfa/0xfa0 [ 129.492601][ T6495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.492612][ T6495] ? __pfx_filename_lookup+0x10/0x10 [ 129.492639][ T6495] ? __might_fault+0xb0/0x130 [ 129.492655][ T6495] vfs_statx+0xf8/0x550 [ 129.492670][ T6495] ? __pfx_vfs_statx+0x10/0x10 [ 129.492681][ T6495] ? strncpy_from_user+0x150/0x290 [ 129.492694][ T6495] ? getname_flags+0x1e5/0x540 [ 129.492709][ T6495] vfs_fstatat+0x118/0x170 [ 129.492722][ T6495] __x64_sys_newfstatat+0x116/0x190 [ 129.492736][ T6495] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 129.492759][ T6495] ? rcu_is_watching+0x15/0xb0 [ 129.492771][ T6495] ? do_syscall_64+0xbe/0xfa0 [ 129.492784][ T6495] do_syscall_64+0xfa/0xfa0 [ 129.492794][ T6495] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.492805][ T6495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.492814][ T6495] ? clear_bhb_loop+0x60/0xb0 [ 129.492825][ T6495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.492834][ T6495] RIP: 0033:0x7f22c878eba9 [ 129.492849][ T6495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.492857][ T6495] RSP: 002b:00007f22c96d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 129.492867][ T6495] RAX: ffffffffffffffda RBX: 00007f22c89d5fa0 RCX: 00007f22c878eba9 [ 129.492874][ T6495] RDX: 0000000000000000 RSI: 0000200000000e80 RDI: ffffffffffffff9c [ 129.492880][ T6495] RBP: 00007f22c8811e19 R08: 0000000000000000 R09: 0000000000000000 [ 129.492886][ T6495] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000 [ 129.492891][ T6495] R13: 00007f22c89d6038 R14: 00007f22c89d5fa0 R15: 00007ffea191eee8 [ 129.492907][ T6495] [ 129.868025][ T5904] Bluetooth: hci0: command tx timeout [ 130.208319][ T6500] loop0: detected capacity change from 0 to 32768 [ 130.228894][ T6500] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 130.237573][ T6500] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 130.253978][ T6500] gfs2: fsid=syz:syz.s: journal 0 mapped with 18 extents in 0ms [ 130.340297][ T6500] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 130.352813][ T6500] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 130.362902][ T6500] gfs2: fsid=syz:syz.s: fatal: filesystem consistency error - inode = 12 2341, function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 590 [ 130.378529][ T6500] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 130.388753][ T6500] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6500 [syz.0.18] __gfs2_lookup+0x8f/0x270 [ 130.398213][ T6500] gfs2: fsid=syz:syz.s: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 130.406613][ T6503] gfs2: fsid=syz:syz.s: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 130.406780][ T6500] gfs2: fsid=syz:syz.s: about to withdraw this file system [ 130.419992][ T6503] gfs2: fsid=syz:syz.s: G: s:SH n:2/925 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 130.423999][ T6500] gfs2: fsid=syz:syz.s: Journal recovery skipped for jid 0 until next mount. [ 130.433532][ T6503] gfs2: fsid=syz:syz.s: H: s:SH f:H e:0 p:6500 [syz.0.18] __gfs2_lookup+0x8f/0x270 [ 130.441970][ T6500] gfs2: fsid=syz:syz.s: Glock dequeues delayed: 0 [ 130.458647][ T6500] gfs2: fsid=syz:syz.s: File system withdrawn [ 130.464743][ T6500] CPU: 1 UID: 0 PID: 6500 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 130.464764][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.464773][ T6500] Call Trace: [ 130.464779][ T6500] [ 130.464785][ T6500] dump_stack_lvl+0x189/0x250 [ 130.464806][ T6500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.464821][ T6500] ? __pfx__printk+0x10/0x10 [ 130.464837][ T6500] ? kobject_uevent_env+0x36b/0x8c0 [ 130.464868][ T6500] gfs2_withdraw+0xb30/0x1430 [ 130.464899][ T6500] ? __pfx_gfs2_withdraw+0x10/0x10 [ 130.464920][ T6500] ? __pfx__printk+0x10/0x10 [ 130.464940][ T6500] ? gfs2_consist_inode_i+0xf5/0x110 [ 130.464955][ T6500] gfs2_dirent_scan+0x545/0x690 [ 130.464975][ T6500] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 130.464996][ T6500] gfs2_dirent_search+0x2cb/0x710 [ 130.465015][ T6500] ? __pfx_gfs2_dirent_find+0x10/0x10 [ 130.465032][ T6500] ? __pfx___might_resched+0x10/0x10 [ 130.465051][ T6500] ? __pfx_gfs2_dirent_search+0x10/0x10 [ 130.465069][ T6500] ? __pfx_gfs2_permission+0x10/0x10 [ 130.465081][ T6500] ? gfs2_glock_nq+0x10c7/0x1830 [ 130.465100][ T6500] gfs2_dir_search+0x4c/0x220 [ 130.465122][ T6500] gfs2_lookupi+0x3d9/0x5a0 [ 130.465139][ T6500] ? __pfx_gfs2_lookupi+0x10/0x10 [ 130.465150][ T6500] ? d_alloc_parallel+0x14ae/0x15e0 [ 130.465171][ T6500] ? __gfs2_lookup+0x8f/0x270 [ 130.465188][ T6500] ? d_alloc_parallel+0x2f0/0x15e0 [ 130.465208][ T6500] __gfs2_lookup+0x8f/0x270 [ 130.465221][ T6500] ? __lock_acquire+0xab9/0xd20 [ 130.465239][ T6500] ? __pfx___gfs2_lookup+0x10/0x10 [ 130.465251][ T6500] ? look_up_lock_class+0x74/0x170 [ 130.465270][ T6500] ? __raw_spin_lock_init+0x45/0x100 [ 130.465286][ T6500] ? __init_waitqueue_head+0xa9/0x150 [ 130.465304][ T6500] __lookup_slow+0x297/0x3d0 [ 130.465323][ T6500] ? __pfx___lookup_slow+0x10/0x10 [ 130.465346][ T6500] ? gfs2_dhash+0x59/0xb0 [ 130.465365][ T6500] ? down_read+0x1ad/0x2e0 [ 130.465383][ T6500] lookup_slow+0x53/0x70 [ 130.465402][ T6500] walk_component+0x2d2/0x400 [ 130.465417][ T6500] ? path_lookupat+0x156/0x430 [ 130.465435][ T6500] path_lookupat+0x163/0x430 [ 130.465457][ T6500] filename_lookup+0x212/0x570 [ 130.465473][ T6500] ? do_syscall_64+0xfa/0xfa0 [ 130.465486][ T6500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.465503][ T6500] ? __pfx_filename_lookup+0x10/0x10 [ 130.465538][ T6500] ? __might_fault+0xb0/0x130 [ 130.465559][ T6500] vfs_statx+0xf8/0x550 [ 130.465580][ T6500] ? __pfx_vfs_statx+0x10/0x10 [ 130.465594][ T6500] ? strncpy_from_user+0x150/0x290 [ 130.465612][ T6500] ? getname_flags+0x1e5/0x540 [ 130.465630][ T6500] vfs_fstatat+0x118/0x170 [ 130.465647][ T6500] __x64_sys_newfstatat+0x116/0x190 [ 130.465667][ T6500] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 130.465697][ T6500] ? rcu_is_watching+0x15/0xb0 [ 130.465714][ T6500] ? do_syscall_64+0xbe/0xfa0 [ 130.465731][ T6500] do_syscall_64+0xfa/0xfa0 [ 130.465744][ T6500] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.465758][ T6500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.465770][ T6500] ? clear_bhb_loop+0x60/0xb0 [ 130.465786][ T6500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.465798][ T6500] RIP: 0033:0x7f22c878eba9 [ 130.465810][ T6500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.465821][ T6500] RSP: 002b:00007f22c96d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 130.465836][ T6500] RAX: ffffffffffffffda RBX: 00007f22c89d5fa0 RCX: 00007f22c878eba9 [ 130.465845][ T6500] RDX: 0000000000000000 RSI: 0000200000000e80 RDI: ffffffffffffff9c [ 130.465853][ T6500] RBP: 00007f22c8811e19 R08: 0000000000000000 R09: 0000000000000000 [ 130.465866][ T6500] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000 [ 130.465873][ T6500] R13: 00007f22c89d6038 R14: 00007f22c89d5fa0 R15: 00007ffea191eee8 [ 130.465896][ T6500] [ 130.466705][ T6503] Oops: general protection fault, probably for non-canonical address 0xe7697c11396a5d6c: 0000 [#1] SMP KASAN PTI [ 130.850848][ T6503] KASAN: maybe wild-memory-access in range [0x3b4c0089cb52eb60-0x3b4c0089cb52eb67] [ 130.860114][ T6503] CPU: 1 UID: 0 PID: 6503 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 130.869233][ T6503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.879271][ T6503] RIP: 0010:string+0x1bb/0x2b0 [ 130.884058][ T6503] Code: 34 aa f6 eb b3 41 c1 fd 10 4c 89 6c 24 10 49 8d 5d ff 45 31 ed 4b 8d 3c 2c 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 75 60 4b 8d 2c 2e 47 0f b6 3c 2c 31 ff 44 89 fe [ 130.903987][ T6503] RSP: 0018:ffffc90002e76f00 EFLAGS: 00010007 [ 130.910054][ T6503] RAX: 07698011396a5d6c RBX: 00000000fffffffe RCX: dffffc0000000000 [ 130.918013][ T6503] RDX: ffff888026e03c80 RSI: 00000000ffff0a00 RDI: 3b4c0089cb52eb67 [ 130.925969][ T6503] RBP: ffffffff8bf118fe R08: ffff888026e03c80 R09: 0000000000000008 [ 130.933932][ T6503] R10: 0000000000000007 R11: 0000000000000000 R12: 3b4c0089cb52eb67 [ 130.942061][ T6503] R13: 0000000000000000 R14: ffffc90002e77319 R15: 0000000000000030 [ 130.950013][ T6503] FS: 00007f22c96af6c0(0000) GS:ffff888125afc000(0000) knlGS:0000000000000000 [ 130.958924][ T6503] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.965489][ T6503] CR2: 00007f22bfdd8000 CR3: 00000000783da000 CR4: 00000000003526f0 [ 130.973454][ T6503] Call Trace: [ 130.976717][ T6503] [ 130.979633][ T6503] vsnprintf+0x739/0xf00 [ 130.983869][ T6503] pointer+0x940/0x1190 [ 130.988018][ T6503] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.993205][ T6503] ? finish_task_switch+0x266/0x950 [ 130.998481][ T6503] ? __pfx_pointer+0x10/0x10 [ 131.003060][ T6503] ? trace_sched_exit_tp+0x36/0x110 [ 131.008414][ T6503] ? format_decode+0x5ee/0xe30 [ 131.013164][ T6503] vsnprintf+0x60f/0xf00 [ 131.017480][ T6503] vprintk_store+0x3c7/0xd00 [ 131.022140][ T6503] ? check_noncircular+0xe0/0x160 [ 131.027142][ T6503] ? __pfx_vprintk_store+0x10/0x10 [ 131.032260][ T6503] ? lockdep_unlock+0x89/0x120 [ 131.037007][ T6503] ? validate_chain+0x897/0x2140 [ 131.041930][ T6503] ? is_printk_cpu_sync_owner+0x32/0x40 [ 131.047459][ T6503] vprintk_emit+0x15f/0x590 [ 131.051968][ T6503] ? __pfx_vprintk_emit+0x10/0x10 [ 131.056982][ T6503] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 131.062947][ T6503] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 131.069439][ T6503] _printk+0xcf/0x120 [ 131.073407][ T6503] ? __pfx__printk+0x10/0x10 [ 131.077994][ T6503] gfs2_print_dbg+0x19a/0x1b0 [ 131.082651][ T6503] ? __pfx_gfs2_print_dbg+0x10/0x10 [ 131.087833][ T6503] gfs2_dump_glock+0x152d/0x1bc0 [ 131.092791][ T6503] ? gfs2_dump_glock+0xf0b/0x1bc0 [ 131.097799][ T6503] ? __pfx_gfs2_dump_glock+0x10/0x10 [ 131.103096][ T6503] ? __se_sys_getdents64+0xe4/0x260 [ 131.108326][ T6503] ? do_syscall_64+0xfa/0xfa0 [ 131.113004][ T6503] ? __pfx__printk+0x10/0x10 [ 131.117579][ T6503] gfs2_consist_inode_i+0xf5/0x110 [ 131.122670][ T6503] gfs2_dirent_scan+0x545/0x690 [ 131.127506][ T6503] ? __pfx_gfs2_dirent_gather+0x10/0x10 [ 131.133042][ T6503] gfs2_dir_read+0x804/0x16f0 [ 131.137801][ T6503] ? __pfx_inode_dio_wait+0x10/0x10 [ 131.142989][ T6503] ? __pfx___might_resched+0x10/0x10 [ 131.148259][ T6503] ? __pfx_gfs2_dir_read+0x10/0x10 [ 131.153529][ T6503] ? _raw_spin_unlock+0x28/0x50 [ 131.158358][ T6503] ? gfs2_glock_nq+0x10c7/0x1830 [ 131.163286][ T6503] ? gfs2_glock_wait+0x20f/0x2a0 [ 131.168202][ T6503] gfs2_readdir+0x14c/0x1b0 [ 131.172691][ T6503] ? __pfx_gfs2_readdir+0x10/0x10 [ 131.177800][ T6503] ? iterate_dir+0x399/0x570 [ 131.182370][ T6503] ? down_read_killable+0x1d1/0x350 [ 131.187561][ T6503] iterate_dir+0x399/0x570 [ 131.191956][ T6503] __se_sys_getdents64+0xe4/0x260 [ 131.196969][ T6503] ? __pfx___se_sys_getdents64+0x10/0x10 [ 131.202581][ T6503] ? __pfx_filldir64+0x10/0x10 [ 131.207335][ T6503] ? do_syscall_64+0xbe/0xfa0 [ 131.211994][ T6503] do_syscall_64+0xfa/0xfa0 [ 131.216479][ T6503] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.221659][ T6503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.227707][ T6503] ? clear_bhb_loop+0x60/0xb0 [ 131.232366][ T6503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.238235][ T6503] RIP: 0033:0x7f22c878eba9 [ 131.242630][ T6503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.262215][ T6503] RSP: 002b:00007f22c96af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 131.270609][ T6503] RAX: ffffffffffffffda RBX: 00007f22c89d6090 RCX: 00007f22c878eba9 [ 131.278568][ T6503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 131.286616][ T6503] RBP: 00007f22c8811e19 R08: 0000000000000000 R09: 0000000000000000 [ 131.294568][ T6503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.302696][ T6503] R13: 00007f22c89d6128 R14: 00007f22c89d6090 R15: 00007ffea191eee8 [ 131.310668][ T6503] [ 131.313668][ T6503] Modules linked in: [ 131.317579][ T6503] ---[ end trace 0000000000000000 ]--- [ 131.323124][ T6503] RIP: 0010:string+0x1bb/0x2b0 [ 131.327879][ T6503] Code: 34 aa f6 eb b3 41 c1 fd 10 4c 89 6c 24 10 49 8d 5d ff 45 31 ed 4b 8d 3c 2c 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 75 60 4b 8d 2c 2e 47 0f b6 3c 2c 31 ff 44 89 fe [ 131.347648][ T6503] RSP: 0018:ffffc90002e76f00 EFLAGS: 00010007 [ 131.353695][ T6503] RAX: 07698011396a5d6c RBX: 00000000fffffffe RCX: dffffc0000000000 [ 131.361650][ T6503] RDX: ffff888026e03c80 RSI: 00000000ffff0a00 RDI: 3b4c0089cb52eb67 [ 131.369612][ T6503] RBP: ffffffff8bf118fe R08: ffff888026e03c80 R09: 0000000000000008 [ 131.377567][ T6503] R10: 0000000000000007 R11: 0000000000000000 R12: 3b4c0089cb52eb67 [ 131.385525][ T6503] R13: 0000000000000000 R14: ffffc90002e77319 R15: 0000000000000030 [ 131.393477][ T6503] FS: 00007f22c96af6c0(0000) GS:ffff888125afc000(0000) knlGS:0000000000000000 [ 131.402388][ T6503] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.408967][ T6503] CR2: 00007f22bfdd8000 CR3: 00000000783da000 CR4: 00000000003526f0 [ 131.416931][ T6503] Kernel panic - not syncing: Fatal exception [ 131.423355][ T6503] Kernel Offset: disabled [ 131.427658][ T6503] Rebooting in 86400 seconds..