Warning: Permanently added '10.128.0.28' (ED25519) to the list of known hosts. 2025/10/19 04:13:42 parsed 1 programs [ 60.678922][ T3455] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2025/10/19 04:13:46 executed programs: 0 [ 64.878506][ T4271] syz.3.16[4271]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 64.984907][ T4271] loop3: detected capacity change from 0 to 32768 [ 64.994902][ T4271] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 65.004446][ T4271] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 65.016905][ T4271] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 65.025585][ T2997] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 65.032874][ T2997] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 65.050759][ T2997] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 17ms [ 65.058859][ T2997] gfs2: fsid=syz:syz.0: jid=0: Done [ 65.064577][ T4271] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 65.073704][ T4271] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 65.083959][ T4271] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 65.083959][ T4271] inode = 12 2341 [ 65.083959][ T4271] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 65.103338][ T4271] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 65.112767][ T4271] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:4271 [syz.3.16] __gfs2_lookup+0x2b/0x160 [ 65.122485][ T4271] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 65.130941][ T4271] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 65.138465][ T4271] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 65.147340][ T4271] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 65.154130][ T4271] gfs2: fsid=syz:syz.0: File system withdrawn [ 65.160406][ T4271] CPU: 1 PID: 4271 Comm: syz.3.16 Not tainted syzkaller #0 [ 65.168479][ T4271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 65.179034][ T4271] Call Trace: [ 65.182390][ T4271] [ 65.185399][ T4271] dump_stack_lvl+0x78/0xc0 [ 65.189970][ T4271] gfs2_withdraw+0x444/0x750 [ 65.194960][ T4271] gfs2_dirent_scan+0x1fb/0x260 [ 65.199873][ T4271] ? gfs2_dirent_search+0x240/0x240 [ 65.205046][ T4271] ? gfs2_dirent_search+0x240/0x240 [ 65.210717][ T4271] gfs2_dirent_search+0x71/0x240 [ 65.215879][ T4271] gfs2_dir_search+0x3c/0xe0 [ 65.220816][ T4271] gfs2_lookupi+0x161/0x1e0 [ 65.225558][ T4271] ? __gfs2_lookup+0x2b/0x160 [ 65.230412][ T4271] __gfs2_lookup+0x2b/0x160 [ 65.235159][ T4271] ? __raw_spin_lock_init+0x3b/0x70 [ 65.240345][ T4271] __lookup_slow+0x132/0x1b0 [ 65.245184][ T4271] lookup_slow+0x2e/0x50 [ 65.249582][ T4271] walk_component+0xce/0xe0 [ 65.254150][ T4271] path_lookupat+0x46/0xf0 [ 65.258711][ T4271] filename_lookup+0xd6/0x1e0 [ 65.263361][ T4271] user_path_at_empty+0x35/0x90 [ 65.268315][ T4271] __se_sys_mount+0x130/0x1b0 [ 65.273062][ T4271] do_syscall_64+0x55/0xb0 [ 65.277670][ T4271] ? clear_bhb_loop+0x40/0x90 [ 65.282332][ T4271] ? clear_bhb_loop+0x40/0x90 [ 65.287533][ T4271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.293859][ T4271] RIP: 0033:0x7f3e69b8e9a9 [ 65.298986][ T4271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.322458][ T4271] RSP: 002b:00007f3e6aa57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 65.333974][ T4271] RAX: ffffffffffffffda RBX: 00007f3e69db5fa0 RCX: 00007f3e69b8e9a9 [ 65.343417][ T4271] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 65.352912][ T4271] RBP: 00007f3e69c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 65.361855][ T4271] R10: 0000000000081000 R11: 0000000000000246 R12: 0000000000000000 [ 65.370619][ T4271] R13: 0000000000000000 R14: 00007f3e69db5fa0 R15: 00007ffed4d1af68 [ 65.379083][ T4271] [ 65.547223][ T4276] loop3: detected capacity change from 0 to 32768 [ 65.556299][ T4276] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 65.565348][ T4276] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 65.573613][ T4276] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 65.583629][ T2997] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 65.590790][ T2997] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 65.607074][ T2997] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 16ms [ 65.614927][ T2997] gfs2: fsid=syz:syz.0: jid=0: Done [ 65.620699][ T4276] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 65.629462][ T4276] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 65.639478][ T4276] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 65.639478][ T4276] inode = 12 2341 [ 65.639478][ T4276] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 65.659114][ T4276] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 65.668677][ T4276] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:4276 [syz.3.17] __gfs2_lookup+0x2b/0x160 [ 65.678243][ T4276] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 65.686712][ T4278] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 65.686999][ T4276] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 65.696909][ T4278] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:4 m:20 p:1 [ 65.703924][ T4276] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 65.713414][ T4278] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:4276 [syz.3.17] __gfs2_lookup+0x2b/0x160 [ 65.722233][ T4276] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 65.722280][ T4276] gfs2: fsid=syz:syz.0: File system withdrawn [ 65.744457][ T4276] CPU: 1 PID: 4276 Comm: syz.3.17 Not tainted syzkaller #0 [ 65.751813][ T4276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 65.762029][ T4276] Call Trace: [ 65.765289][ T4276] [ 65.768413][ T4276] dump_stack_lvl+0x78/0xc0 [ 65.772901][ T4276] gfs2_withdraw+0x444/0x750 [ 65.777465][ T4276] gfs2_dirent_scan+0x1fb/0x260 [ 65.782683][ T4276] ? gfs2_dirent_search+0x240/0x240 [ 65.788153][ T4276] ? gfs2_dirent_search+0x240/0x240 [ 65.794294][ T4276] gfs2_dirent_search+0x71/0x240 [ 65.799378][ T4276] gfs2_dir_search+0x3c/0xe0 [ 65.804290][ T4276] gfs2_lookupi+0x161/0x1e0 [ 65.808851][ T4276] ? __gfs2_lookup+0x2b/0x160 [ 65.813923][ T4276] __gfs2_lookup+0x2b/0x160 [ 65.818824][ T4276] ? __raw_spin_lock_init+0x3b/0x70 [ 65.824378][ T4276] __lookup_slow+0x132/0x1b0 [ 65.829033][ T4276] lookup_slow+0x2e/0x50 [ 65.833424][ T4276] walk_component+0xce/0xe0 [ 65.838157][ T4276] path_lookupat+0x46/0xf0 [ 65.842543][ T4276] filename_lookup+0xd6/0x1e0 [ 65.847222][ T4276] user_path_at_empty+0x35/0x90 [ 65.852215][ T4276] __se_sys_mount+0x130/0x1b0 [ 65.856880][ T4276] do_syscall_64+0x55/0xb0 [ 65.862354][ T4276] ? clear_bhb_loop+0x40/0x90 [ 65.869068][ T4276] ? clear_bhb_loop+0x40/0x90 [ 65.875160][ T4276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.882320][ T4276] RIP: 0033:0x7f3e69b8e9a9 [ 65.887630][ T4276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.909573][ T4276] RSP: 002b:00007f3e6aa57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 65.919626][ T4276] RAX: ffffffffffffffda RBX: 00007f3e69db5fa0 RCX: 00007f3e69b8e9a9 [ 65.928813][ T4276] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 65.938117][ T4276] RBP: 00007f3e69c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 65.946847][ T4276] R10: 0000000000081000 R11: 0000000000000246 R12: 0000000000000000 [ 65.955762][ T4276] R13: 0000000000000000 R14: 00007f3e69db5fa0 R15: 00007ffed4d1af68 [ 65.963905][ T4276] [ 65.967389][ T4278] BUG: kernel NULL pointer dereference, address: 0000000000000067 [ 65.975537][ T4278] #PF: supervisor read access in kernel mode [ 65.981576][ T4278] #PF: error_code(0x0000) - not-present page [ 65.988062][ T4278] PGD 116002067 P4D 116002067 PUD 0 [ 65.993336][ T4278] Oops: 0000 [#1] PREEMPT SMP [ 65.998076][ T4278] CPU: 1 PID: 4278 Comm: syz.3.17 Not tainted syzkaller #0 [ 66.005260][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 66.015388][ T4278] RIP: 0010:gfs2_dump_glock+0x47c/0x6d0 [ 66.020995][ T4278] Code: 94 ff 4c 8d 2d 00 00 00 00 48 c7 c7 48 6d dd 83 31 f6 31 d2 b9 02 00 00 00 45 31 c0 45 31 c9 41 55 e8 e8 cd 91 ff 48 83 c4 08 <41> f6 44 24 21 02 74 17 41 0f b7 44 24 22 66 85 c0 74 0c 49 c7 c2 [ 66.041003][ T4278] RSP: 0018:ffffc900031ab770 EFLAGS: 00010292 [ 66.047164][ T4278] RAX: 3b7d0c1512bd1a00 RBX: ffff888104305810 RCX: 3b7d0c1512bd1a00 [ 66.056075][ T4278] RDX: 908f45497f8c9391 RSI: ffffffff839adeaf RDI: ffffffff8388f5bf [ 66.064463][ T4278] RBP: ffffc900031ab928 R08: 0000000000000000 R09: 0000000000000021 [ 66.073023][ T4278] R10: 0000000000000001 R11: 205d383732345420 R12: 0000000000000046 [ 66.081943][ T4278] R13: ffffffff817d5beb R14: 00000000000010b4 R15: ffffc900031ab8d0 [ 66.090156][ T4278] FS: 00007f3e6aa366c0(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 66.099139][ T4278] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.106050][ T4278] CR2: 0000000000000067 CR3: 000000011f08e000 CR4: 00000000003506e0 [ 66.114098][ T4278] Call Trace: [ 66.117443][ T4278] [ 66.122673][ T4278] gfs2_consist_inode_i+0x52/0x60 [ 66.127882][ T4278] gfs2_dirent_scan+0x1fb/0x260 [ 66.132885][ T4278] ? gfs2_dirent_search+0x240/0x240 [ 66.138157][ T4278] ? gfs2_dirent_search+0x240/0x240 [ 66.144156][ T4278] gfs2_dirent_search+0x71/0x240 [ 66.149471][ T4278] gfs2_dir_search+0x3c/0xe0 [ 66.154302][ T4278] gfs2_lookupi+0x161/0x1e0 [ 66.159240][ T4278] ? __gfs2_lookup+0x2b/0x160 [ 66.164265][ T4278] __gfs2_lookup+0x2b/0x160 [ 66.168926][ T4278] ? __raw_spin_lock_init+0x3b/0x70 [ 66.174669][ T4278] __lookup_slow+0x132/0x1b0 [ 66.179848][ T4278] lookup_slow+0x2e/0x50 [ 66.184156][ T4278] link_path_walk+0x373/0x400 [ 66.189373][ T4278] path_lookupat+0x56/0xf0 [ 66.194799][ T4278] do_o_path+0x34/0xb0 [ 66.198844][ T4278] path_openat+0xc8f/0xd30 [ 66.203543][ T4278] do_filp_open+0xaf/0x150 [ 66.208218][ T4278] do_sys_openat2+0x7a/0xd0 [ 66.213302][ T4278] __x64_sys_openat+0x7c/0xa0 [ 66.218633][ T4278] do_syscall_64+0x55/0xb0 [ 66.223375][ T4278] ? clear_bhb_loop+0x40/0x90 [ 66.228196][ T4278] ? clear_bhb_loop+0x40/0x90 [ 66.233236][ T4278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.239492][ T4278] RIP: 0033:0x7f3e69b8e9a9 [ 66.244108][ T4278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.265587][ T4278] RSP: 002b:00007f3e6aa36038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 66.274863][ T4278] RAX: ffffffffffffffda RBX: 00007f3e69db6080 RCX: 00007f3e69b8e9a9 [ 66.283675][ T4278] RDX: 0000000000200002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 66.291911][ T4278] RBP: 00007f3e69c10d69 R08: 0000000000000000 R09: 0000000000000000 [ 66.300288][ T4278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.308594][ T4278] R13: 0000000000000001 R14: 00007f3e69db6080 R15: 00007ffed4d1af68 [ 66.316745][ T4278] [ 66.319909][ T4278] Modules linked in: [ 66.323875][ T4278] CR2: 0000000000000067 [ 66.328102][ T4278] ---[ end trace 0000000000000000 ]--- [ 66.333785][ T4278] RIP: 0010:gfs2_dump_glock+0x47c/0x6d0 [ 66.339651][ T4278] Code: 94 ff 4c 8d 2d 00 00 00 00 48 c7 c7 48 6d dd 83 31 f6 31 d2 b9 02 00 00 00 45 31 c0 45 31 c9 41 55 e8 e8 cd 91 ff 48 83 c4 08 <41> f6 44 24 21 02 74 17 41 0f b7 44 24 22 66 85 c0 74 0c 49 c7 c2 [ 66.359838][ T4278] RSP: 0018:ffffc900031ab770 EFLAGS: 00010292 [ 66.365872][ T4278] RAX: 3b7d0c1512bd1a00 RBX: ffff888104305810 RCX: 3b7d0c1512bd1a00 [ 66.374156][ T4278] RDX: 908f45497f8c9391 RSI: ffffffff839adeaf RDI: ffffffff8388f5bf [ 66.382182][ T4278] RBP: ffffc900031ab928 R08: 0000000000000000 R09: 0000000000000021 [ 66.390210][ T4278] R10: 0000000000000001 R11: 205d383732345420 R12: 0000000000000046 [ 66.398415][ T4278] R13: ffffffff817d5beb R14: 00000000000010b4 R15: ffffc900031ab8d0 [ 66.406455][ T4278] FS: 00007f3e6aa366c0(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 [ 66.415633][ T4278] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 66.422624][ T4278] CR2: 0000000000000067 CR3: 000000011f08e000 CR4: 00000000003506e0 [ 66.430584][ T4278] Kernel panic - not syncing: Fatal exception [ 66.436960][ T4278] Kernel Offset: disabled [ 66.441454][ T4278] Rebooting in 86400 seconds..