Warning: Permanently added '10.128.1.15' (ED25519) to the list of known hosts. 2025/10/18 19:53:34 parsed 1 programs [ 92.085121][ T5831] cgroup: Unknown subsys name 'net' [ 92.201526][ T5831] cgroup: Unknown subsys name 'cpuset' [ 92.213025][ T5831] cgroup: Unknown subsys name 'rlimit' [ 94.083299][ T5831] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.170158][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.178910][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.187282][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.195583][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.203740][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.316214][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.399597][ T43] cfg80211: failed to load regulatory.db [ 98.044689][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 98.193076][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.202399][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.210945][ T5863] bridge_slave_0: entered allmulticast mode [ 98.218808][ T5863] bridge_slave_0: entered promiscuous mode [ 98.232887][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.240649][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.248135][ T5863] bridge_slave_1: entered allmulticast mode [ 98.255585][ T5863] bridge_slave_1: entered promiscuous mode [ 98.295354][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.309310][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.351590][ T5863] team0: Port device team_slave_0 added [ 98.360093][ T5863] team0: Port device team_slave_1 added [ 98.395034][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.402326][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.428959][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.442435][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.449624][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.475940][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.528010][ T5863] hsr_slave_0: entered promiscuous mode [ 98.534679][ T5863] hsr_slave_1: entered promiscuous mode [ 98.703495][ T5863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.717514][ T5863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.728262][ T5863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.740337][ T5863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.778536][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.785809][ T5863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.794198][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.801976][ T5863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.869033][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.890904][ T3026] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.900297][ T3026] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.921152][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.935637][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.943118][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.958272][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.966033][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.168277][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.222464][ T5863] veth0_vlan: entered promiscuous mode [ 99.234926][ T5863] veth1_vlan: entered promiscuous mode [ 99.270121][ T5863] veth0_macvtap: entered promiscuous mode [ 99.281079][ T5863] veth1_macvtap: entered promiscuous mode [ 99.302524][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.319105][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.334927][ T66] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.345344][ T66] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.360179][ T66] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.369469][ T66] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.532432][ T3026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.622910][ T3026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.701074][ T3026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.784208][ T3026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.551611][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.560072][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.607235][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.615304][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.938125][ T3026] bridge_slave_1: left allmulticast mode [ 101.944018][ T3026] bridge_slave_1: left promiscuous mode [ 101.967092][ T3026] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.000238][ T3026] bridge_slave_0: left allmulticast mode [ 102.016223][ T3026] bridge_slave_0: left promiscuous mode [ 102.022229][ T3026] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.584295][ T3026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.596904][ T3026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.608600][ T3026] bond0 (unregistering): Released all slaves [ 102.748897][ T3026] hsr_slave_0: left promiscuous mode [ 102.757376][ T3026] hsr_slave_1: left promiscuous mode [ 102.763911][ T3026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.772147][ T3026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.782413][ T3026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.792691][ T3026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.826516][ T3026] veth1_macvtap: left promiscuous mode [ 102.832448][ T3026] veth0_macvtap: left promiscuous mode [ 102.839812][ T3026] veth1_vlan: left promiscuous mode [ 102.845904][ T3026] veth0_vlan: left promiscuous mode [ 103.329243][ T3026] team0 (unregistering): Port device team_slave_1 removed [ 103.358612][ T3026] team0 (unregistering): Port device team_slave_0 removed 2025/10/18 19:53:50 executed programs: 0 [ 104.695559][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.706423][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.714527][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.724219][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.734824][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 105.544540][ T5969] chnl_net:caif_netlink_parms(): no params data found [ 105.791337][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.798727][ T5969] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.808330][ T5969] bridge_slave_0: entered allmulticast mode [ 105.816327][ T5969] bridge_slave_0: entered promiscuous mode [ 105.825584][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.833523][ T5969] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.840902][ T5969] bridge_slave_1: entered allmulticast mode [ 105.849334][ T5969] bridge_slave_1: entered promiscuous mode [ 105.898548][ T5969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.914765][ T5969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.972455][ T5969] team0: Port device team_slave_0 added [ 105.983048][ T5969] team0: Port device team_slave_1 added [ 106.067615][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.074717][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.114355][ T5969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.138216][ T5969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.145225][ T5969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.173671][ T5969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.358920][ T5969] hsr_slave_0: entered promiscuous mode [ 106.366745][ T5969] hsr_slave_1: entered promiscuous mode [ 106.826978][ T53] Bluetooth: hci0: command tx timeout [ 107.038047][ T5969] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.056211][ T5969] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.069246][ T5969] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.089380][ T5969] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.211269][ T5969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.243473][ T5969] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.263285][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.270734][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.291643][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.298945][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.593678][ T5969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.662283][ T5969] veth0_vlan: entered promiscuous mode [ 107.677991][ T5969] veth1_vlan: entered promiscuous mode [ 107.721202][ T5969] veth0_macvtap: entered promiscuous mode [ 107.735121][ T5969] veth1_macvtap: entered promiscuous mode [ 107.761751][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.779777][ T5969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.799225][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.811830][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.823380][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.846993][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.922791][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.939935][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.983659][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.992631][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.479913][ T6050] loop0: detected capacity change from 0 to 32768 [ 108.561857][ T6050] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 108.570544][ T6050] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 108.583590][ T6050] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2073 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 108.605795][ T6050] CPU: 1 UID: 0 PID: 6050 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 108.605827][ T6050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.605847][ T6050] Call Trace: [ 108.605855][ T6050] [ 108.605863][ T6050] dump_stack_lvl+0x189/0x250 [ 108.605902][ T6050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.605922][ T6050] ? gfs2_meta_read+0x775/0x8b0 [ 108.605958][ T6050] ? __pfx_gfs2_meta_read+0x10/0x10 [ 108.605994][ T6050] gfs2_withdraw+0xc8/0x160 [ 108.606019][ T6050] gfs2_meta_buffer+0x225/0x2e0 [ 108.606053][ T6050] inode_go_instantiate+0xdf/0x1260 [ 108.606072][ T6050] ? __pfx_bit_wait+0x10/0x10 [ 108.606101][ T6050] ? __pfx_bit_wait+0x10/0x10 [ 108.606127][ T6050] ? out_of_line_wait_on_bit+0x123/0x170 [ 108.606158][ T6050] ? __pfx_inode_go_instantiate+0x10/0x10 [ 108.606182][ T6050] ? __pfx_wake_bit_function+0x10/0x10 [ 108.606210][ T6050] gfs2_instantiate+0x168/0x220 [ 108.606237][ T6050] gfs2_glock_wait+0x1d4/0x2a0 [ 108.606264][ T6050] gfs2_lookupi+0x35b/0x5a0 [ 108.606295][ T6050] ? __pfx_gfs2_lookupi+0x10/0x10 [ 108.606325][ T6050] ? gfs2_lookup_meta+0xa7/0x170 [ 108.606351][ T6050] ? crc32_le+0x250/0x2c0 [ 108.606372][ T6050] gfs2_lookup_meta+0xa7/0x170 [ 108.606395][ T6050] ? __pfx_gfs2_lookup_meta+0x10/0x10 [ 108.606421][ T6050] ? __asan_memset+0x22/0x50 [ 108.606449][ T6050] init_journal+0x1a5/0x2180 [ 108.606476][ T6050] ? __pfx_number+0x10/0x10 [ 108.606501][ T6050] ? format_decode+0x5a3/0xe30 [ 108.606527][ T6050] ? __pfx_init_journal+0x10/0x10 [ 108.606550][ T6050] ? vsnprintf+0xe11/0xf00 [ 108.606584][ T6050] ? snprintf+0xda/0x120 [ 108.606617][ T6050] ? __pfx_snprintf+0x10/0x10 [ 108.606640][ T6050] ? gfs2_glock_nq_num+0x13d/0x170 [ 108.606670][ T6050] init_inodes+0xdb/0x320 [ 108.606697][ T6050] gfs2_fill_super+0x1a5d/0x2230 [ 108.606736][ T6050] ? __pfx_gfs2_fill_super+0x10/0x10 [ 108.606763][ T6050] ? init_locking+0xb8/0x210 [ 108.606786][ T6050] ? sb_set_blocksize+0x104/0x180 [ 108.606814][ T6050] ? setup_bdev_super+0x4c1/0x5b0 [ 108.606842][ T6050] get_tree_bdev_flags+0x40e/0x4d0 [ 108.606868][ T6050] ? __pfx_gfs2_fill_super+0x10/0x10 [ 108.606893][ T6050] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 108.606916][ T6050] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 108.606955][ T6050] gfs2_get_tree+0x51/0x1e0 [ 108.606980][ T6050] vfs_get_tree+0x92/0x2b0 [ 108.607008][ T6050] do_new_mount+0x302/0xa10 [ 108.607033][ T6050] ? apparmor_capable+0x137/0x1b0 [ 108.607056][ T6050] ? __pfx_do_new_mount+0x10/0x10 [ 108.607083][ T6050] ? ns_capable+0x8a/0xf0 [ 108.607114][ T6050] ? kmem_cache_free+0x19b/0x690 [ 108.607151][ T6050] __se_sys_mount+0x313/0x410 [ 108.607186][ T6050] ? __pfx___se_sys_mount+0x10/0x10 [ 108.607219][ T6050] ? do_syscall_64+0xbe/0xfa0 [ 108.607246][ T6050] ? __x64_sys_mount+0x20/0xc0 [ 108.607278][ T6050] do_syscall_64+0xfa/0xfa0 [ 108.607305][ T6050] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.607334][ T6050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.607354][ T6050] ? clear_bhb_loop+0x60/0xb0 [ 108.607380][ T6050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.607400][ T6050] RIP: 0033:0x7fd9ecb9076a [ 108.607429][ T6050] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.607445][ T6050] RSP: 002b:00007ffd671e0748 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 108.607467][ T6050] RAX: ffffffffffffffda RBX: 00007ffd671e07d0 RCX: 00007fd9ecb9076a [ 108.607481][ T6050] RDX: 0000200000000000 RSI: 0000200000012500 RDI: 00007ffd671e0790 [ 108.607495][ T6050] RBP: 0000200000000000 R08: 00007ffd671e07d0 R09: 0000000000200001 [ 108.607509][ T6050] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 108.607521][ T6050] R13: 00007ffd671e0790 R14: 00000000000125bf R15: 0000200000000680 [ 108.607554][ T6050] [ 108.985179][ T6050] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 108.996539][ T6050] gfs2: fsid=syz:syz.0: can't lookup journal index: 0 [ 109.005896][ T24] gfs2: fsid=syz:syz.0: file system withdrawn [ 109.012347][ T53] Bluetooth: hci0: command tx timeout [ 109.613141][ T6067] loop0: detected capacity change from 0 to 32768 [ 109.647195][ T6067] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 109.655555][ T6067] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 109.666630][ T6067] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2073 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 109.682943][ T6067] CPU: 0 UID: 0 PID: 6067 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 109.682972][ T6067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 109.682984][ T6067] Call Trace: [ 109.682992][ T6067] [ 109.683001][ T6067] dump_stack_lvl+0x189/0x250 [ 109.683071][ T6067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.683091][ T6067] ? gfs2_meta_read+0x775/0x8b0 [ 109.683169][ T6067] ? __pfx_gfs2_meta_read+0x10/0x10 [ 109.683231][ T6067] gfs2_withdraw+0xc8/0x160 [ 109.683258][ T6067] gfs2_meta_buffer+0x225/0x2e0 [ 109.683294][ T6067] inode_go_instantiate+0xdf/0x1260 [ 109.683312][ T6067] ? __pfx_bit_wait+0x10/0x10 [ 109.683340][ T6067] ? __pfx_bit_wait+0x10/0x10 [ 109.683369][ T6067] ? out_of_line_wait_on_bit+0x123/0x170 [ 109.683402][ T6067] ? __pfx_inode_go_instantiate+0x10/0x10 [ 109.683429][ T6067] ? __pfx_wake_bit_function+0x10/0x10 [ 109.683459][ T6067] gfs2_instantiate+0x168/0x220 [ 109.683487][ T6067] gfs2_glock_wait+0x1d4/0x2a0 [ 109.683516][ T6067] gfs2_lookupi+0x35b/0x5a0 [ 109.683557][ T6067] ? __pfx_gfs2_lookupi+0x10/0x10 [ 109.683580][ T6067] ? percpu_ref_get_many+0x19/0x140 [ 109.683613][ T6067] ? gfs2_lookup_meta+0xa7/0x170 [ 109.683636][ T6067] ? look_up_lock_class+0x74/0x170 [ 109.683669][ T6067] ? crc32_le+0x250/0x2c0 [ 109.683694][ T6067] gfs2_lookup_meta+0xa7/0x170 [ 109.683720][ T6067] ? __pfx_gfs2_lookup_meta+0x10/0x10 [ 109.683747][ T6067] ? __asan_memset+0x22/0x50 [ 109.683777][ T6067] init_journal+0x1a5/0x2180 [ 109.683806][ T6067] ? __pfx_number+0x10/0x10 [ 109.683834][ T6067] ? format_decode+0x5a3/0xe30 [ 109.683860][ T6067] ? __pfx_init_journal+0x10/0x10 [ 109.683885][ T6067] ? vsnprintf+0xe11/0xf00 [ 109.683918][ T6067] ? snprintf+0xda/0x120 [ 109.683946][ T6067] ? __pfx_snprintf+0x10/0x10 [ 109.683970][ T6067] ? gfs2_glock_nq_num+0x13d/0x170 [ 109.684001][ T6067] init_inodes+0xdb/0x320 [ 109.684029][ T6067] gfs2_fill_super+0x1a5d/0x2230 [ 109.684071][ T6067] ? __pfx_gfs2_fill_super+0x10/0x10 [ 109.684100][ T6067] ? init_locking+0xb8/0x210 [ 109.684144][ T6067] ? sb_set_blocksize+0x104/0x180 [ 109.684174][ T6067] ? setup_bdev_super+0x4c1/0x5b0 [ 109.684204][ T6067] get_tree_bdev_flags+0x40e/0x4d0 [ 109.684231][ T6067] ? __pfx_gfs2_fill_super+0x10/0x10 [ 109.684256][ T6067] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 109.684280][ T6067] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 109.684323][ T6067] gfs2_get_tree+0x51/0x1e0 [ 109.684351][ T6067] vfs_get_tree+0x92/0x2b0 [ 109.684380][ T6067] do_new_mount+0x302/0xa10 [ 109.684405][ T6067] ? apparmor_capable+0x137/0x1b0 [ 109.684431][ T6067] ? __pfx_do_new_mount+0x10/0x10 [ 109.684459][ T6067] ? ns_capable+0x8a/0xf0 [ 109.684492][ T6067] ? kmem_cache_free+0x19b/0x690 [ 109.684551][ T6067] __se_sys_mount+0x313/0x410 [ 109.684588][ T6067] ? __pfx___se_sys_mount+0x10/0x10 [ 109.684622][ T6067] ? do_syscall_64+0xbe/0xfa0 [ 109.684649][ T6067] ? __x64_sys_mount+0x20/0xc0 [ 109.684680][ T6067] do_syscall_64+0xfa/0xfa0 [ 109.684707][ T6067] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.684736][ T6067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.684756][ T6067] ? clear_bhb_loop+0x60/0xb0 [ 109.684782][ T6067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.684801][ T6067] RIP: 0033:0x7fd9ecb9076a [ 109.684819][ T6067] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.684836][ T6067] RSP: 002b:00007ffd671e0748 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 109.684857][ T6067] RAX: ffffffffffffffda RBX: 00007ffd671e07d0 RCX: 00007fd9ecb9076a [ 109.684872][ T6067] RDX: 0000200000000000 RSI: 0000200000012500 RDI: 00007ffd671e0790 [ 109.684886][ T6067] RBP: 0000200000000000 R08: 00007ffd671e07d0 R09: 0000000000200001 [ 109.684900][ T6067] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 109.684912][ T6067] R13: 00007ffd671e0790 R14: 00000000000125bf R15: 0000200000000680 [ 109.684946][ T6067] [ 109.684955][ T6067] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 110.083544][ T6067] gfs2: fsid=syz:syz.0: can't lookup journal index: 0 [ 110.125497][ T798] gfs2: fsid=syz:syz.0: file system withdrawn 2025/10/18 19:53:56 executed programs: 4 [ 110.628113][ T6087] loop0: detected capacity change from 0 to 32768 [ 110.655459][ T6087] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 110.663765][ T6087] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 110.674324][ T6087] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2073 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 110.690034][ T6087] CPU: 0 UID: 0 PID: 6087 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) [ 110.690063][ T6087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 110.690075][ T6087] Call Trace: [ 110.690083][ T6087] [ 110.690092][ T6087] dump_stack_lvl+0x189/0x250 [ 110.690132][ T6087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.690153][ T6087] ? gfs2_meta_read+0x775/0x8b0 [ 110.690190][ T6087] ? __pfx_gfs2_meta_read+0x10/0x10 [ 110.690229][ T6087] gfs2_withdraw+0xc8/0x160 [ 110.690255][ T6087] gfs2_meta_buffer+0x225/0x2e0 [ 110.690294][ T6087] inode_go_instantiate+0xdf/0x1260 [ 110.690316][ T6087] ? __pfx_bit_wait+0x10/0x10 [ 110.690347][ T6087] ? __pfx_bit_wait+0x10/0x10 [ 110.690375][ T6087] ? out_of_line_wait_on_bit+0x123/0x170 [ 110.690409][ T6087] ? __pfx_inode_go_instantiate+0x10/0x10 [ 110.690444][ T6087] ? __pfx_wake_bit_function+0x10/0x10 [ 110.690473][ T6087] gfs2_instantiate+0x168/0x220 [ 110.690502][ T6087] gfs2_glock_wait+0x1d4/0x2a0 [ 110.690532][ T6087] gfs2_lookupi+0x35b/0x5a0 [ 110.690566][ T6087] ? __pfx_gfs2_lookupi+0x10/0x10 [ 110.690590][ T6087] ? percpu_ref_get_many+0x19/0x140 [ 110.690623][ T6087] ? gfs2_lookup_meta+0xa7/0x170 [ 110.690647][ T6087] ? look_up_lock_class+0x74/0x170 [ 110.690681][ T6087] ? crc32_le+0x250/0x2c0 [ 110.690706][ T6087] gfs2_lookup_meta+0xa7/0x170 [ 110.690732][ T6087] ? __pfx_gfs2_lookup_meta+0x10/0x10 [ 110.690760][ T6087] ? __asan_memset+0x22/0x50 [ 110.690790][ T6087] init_journal+0x1a5/0x2180 [ 110.690819][ T6087] ? __pfx_number+0x10/0x10 [ 110.690846][ T6087] ? format_decode+0x5a3/0xe30 [ 110.690873][ T6087] ? __pfx_init_journal+0x10/0x10 [ 110.690897][ T6087] ? vsnprintf+0xe11/0xf00 [ 110.690931][ T6087] ? snprintf+0xda/0x120 [ 110.690959][ T6087] ? __pfx_snprintf+0x10/0x10 [ 110.690983][ T6087] ? gfs2_glock_nq_num+0x13d/0x170 [ 110.691015][ T6087] init_inodes+0xdb/0x320 [ 110.691042][ T6087] gfs2_fill_super+0x1a5d/0x2230 [ 110.691085][ T6087] ? __pfx_gfs2_fill_super+0x10/0x10 [ 110.691114][ T6087] ? init_locking+0xb8/0x210 [ 110.691136][ T6087] ? sb_set_blocksize+0x104/0x180 [ 110.691166][ T6087] ? setup_bdev_super+0x4c1/0x5b0 [ 110.691197][ T6087] get_tree_bdev_flags+0x40e/0x4d0 [ 110.691224][ T6087] ? __pfx_gfs2_fill_super+0x10/0x10 [ 110.691249][ T6087] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 110.691273][ T6087] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 110.691316][ T6087] gfs2_get_tree+0x51/0x1e0 [ 110.691344][ T6087] vfs_get_tree+0x92/0x2b0 [ 110.691372][ T6087] do_new_mount+0x302/0xa10 [ 110.691398][ T6087] ? apparmor_capable+0x137/0x1b0 [ 110.691430][ T6087] ? __pfx_do_new_mount+0x10/0x10 [ 110.691458][ T6087] ? ns_capable+0x8a/0xf0 [ 110.691509][ T6087] ? kmem_cache_free+0x19b/0x690 [ 110.691547][ T6087] __se_sys_mount+0x313/0x410 [ 110.691583][ T6087] ? __pfx___se_sys_mount+0x10/0x10 [ 110.691616][ T6087] ? do_syscall_64+0xbe/0xfa0 [ 110.691643][ T6087] ? __x64_sys_mount+0x20/0xc0 [ 110.691674][ T6087] do_syscall_64+0xfa/0xfa0 [ 110.691700][ T6087] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.691729][ T6087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.691749][ T6087] ? clear_bhb_loop+0x60/0xb0 [ 110.691774][ T6087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.691794][ T6087] RIP: 0033:0x7fd9ecb9076a [ 110.691813][ T6087] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.691830][ T6087] RSP: 002b:00007ffd671e0748 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 110.691851][ T6087] RAX: ffffffffffffffda RBX: 00007ffd671e07d0 RCX: 00007fd9ecb9076a [ 110.691866][ T6087] RDX: 0000200000000000 RSI: 0000200000012500 RDI: 00007ffd671e0790 [ 110.691880][ T6087] RBP: 0000200000000000 R08: 00007ffd671e07d0 R09: 0000000000200001 [ 110.691893][ T6087] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 110.691907][ T6087] R13: 00007ffd671e0790 R14: 00000000000125bf R15: 0000200000000680 [ 110.691940][ T6087] [ 110.691948][ T6087] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 111.066231][ T53] Bluetooth: hci0: command tx timeout [ 111.069623][ T6087] gfs2: fsid=syz:syz.0: can't lookup journal index: 0 [ 111.113614][ T6045] gfs2: fsid=syz:syz.0: file system withdrawn [ 111.518614][ T6092] loop0: detected capacity change from 0 to 32768 [ 111.534358][ T6092] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 111.543088][ T6092] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 111.553530][ T6092] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2073 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 111.569307][ T6092] CPU: 0 UID: 0 PID: 6092 Comm: syz.0.20 Not tainted syzkaller #0 PREEMPT(full) [ 111.569334][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.569347][ T6092] Call Trace: [ 111.569355][ T6092] [ 111.569364][ T6092] dump_stack_lvl+0x189/0x250 [ 111.569396][ T6092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.569418][ T6092] ? gfs2_meta_read+0x775/0x8b0 [ 111.569458][ T6092] ? __pfx_gfs2_meta_read+0x10/0x10 [ 111.569498][ T6092] gfs2_withdraw+0xc8/0x160 [ 111.569525][ T6092] gfs2_meta_buffer+0x225/0x2e0 [ 111.569565][ T6092] inode_go_instantiate+0xdf/0x1260 [ 111.569595][ T6092] ? __pfx_bit_wait+0x10/0x10 [ 111.569625][ T6092] ? __pfx_bit_wait+0x10/0x10 [ 111.569654][ T6092] ? out_of_line_wait_on_bit+0x123/0x170 [ 111.569687][ T6092] ? __pfx_inode_go_instantiate+0x10/0x10 [ 111.569716][ T6092] ? __pfx_wake_bit_function+0x10/0x10 [ 111.569747][ T6092] gfs2_instantiate+0x168/0x220 [ 111.569777][ T6092] gfs2_glock_wait+0x1d4/0x2a0 [ 111.569808][ T6092] gfs2_lookupi+0x35b/0x5a0 [ 111.569842][ T6092] ? __pfx_gfs2_lookupi+0x10/0x10 [ 111.569867][ T6092] ? percpu_ref_get_many+0x19/0x140 [ 111.569901][ T6092] ? gfs2_lookup_meta+0xa7/0x170 [ 111.569926][ T6092] ? look_up_lock_class+0x74/0x170 [ 111.569960][ T6092] ? crc32_le+0x250/0x2c0 [ 111.569987][ T6092] gfs2_lookup_meta+0xa7/0x170 [ 111.570014][ T6092] ? __pfx_gfs2_lookup_meta+0x10/0x10 [ 111.570043][ T6092] ? __asan_memset+0x22/0x50 [ 111.570075][ T6092] init_journal+0x1a5/0x2180 [ 111.570105][ T6092] ? __pfx_number+0x10/0x10 [ 111.570177][ T6092] ? format_decode+0x5a3/0xe30 [ 111.570205][ T6092] ? __pfx_init_journal+0x10/0x10 [ 111.570231][ T6092] ? vsnprintf+0xe11/0xf00 [ 111.570266][ T6092] ? snprintf+0xda/0x120 [ 111.570295][ T6092] ? __pfx_snprintf+0x10/0x10 [ 111.570319][ T6092] ? gfs2_glock_nq_num+0x13d/0x170 [ 111.570353][ T6092] init_inodes+0xdb/0x320 [ 111.570381][ T6092] gfs2_fill_super+0x1a5d/0x2230 [ 111.570426][ T6092] ? __pfx_gfs2_fill_super+0x10/0x10 [ 111.570456][ T6092] ? init_locking+0xb8/0x210 [ 111.570480][ T6092] ? sb_set_blocksize+0x104/0x180 [ 111.570511][ T6092] ? setup_bdev_super+0x4c1/0x5b0 [ 111.570543][ T6092] get_tree_bdev_flags+0x40e/0x4d0 [ 111.570571][ T6092] ? __pfx_gfs2_fill_super+0x10/0x10 [ 111.570597][ T6092] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 111.570622][ T6092] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 111.570667][ T6092] gfs2_get_tree+0x51/0x1e0 [ 111.570697][ T6092] vfs_get_tree+0x92/0x2b0 [ 111.570727][ T6092] do_new_mount+0x302/0xa10 [ 111.570754][ T6092] ? apparmor_capable+0x137/0x1b0 [ 111.570780][ T6092] ? __pfx_do_new_mount+0x10/0x10 [ 111.570809][ T6092] ? ns_capable+0x8a/0xf0 [ 111.570844][ T6092] ? kmem_cache_free+0x19b/0x690 [ 111.570884][ T6092] __se_sys_mount+0x313/0x410 [ 111.570919][ T6092] ? __pfx___se_sys_mount+0x10/0x10 [ 111.570954][ T6092] ? do_syscall_64+0xbe/0xfa0 [ 111.570982][ T6092] ? __x64_sys_mount+0x20/0xc0 [ 111.571011][ T6092] do_syscall_64+0xfa/0xfa0 [ 111.571036][ T6092] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.571063][ T6092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.571083][ T6092] ? clear_bhb_loop+0x60/0xb0 [ 111.571108][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.571127][ T6092] RIP: 0033:0x7fd9ecb9076a [ 111.571154][ T6092] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.571168][ T6092] RSP: 002b:00007ffd671e0748 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 111.571191][ T6092] RAX: ffffffffffffffda RBX: 00007ffd671e07d0 RCX: 00007fd9ecb9076a [ 111.571206][ T6092] RDX: 0000200000000000 RSI: 0000200000012500 RDI: 00007ffd671e0790 [ 111.571219][ T6092] RBP: 0000200000000000 R08: 00007ffd671e07d0 R09: 0000000000200001 [ 111.571233][ T6092] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 111.571246][ T6092] R13: 00007ffd671e0790 R14: 00000000000125bf R15: 0000200000000680 [ 111.571281][ T6092] [ 111.571290][ T6092] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 111.969293][ T6092] gfs2: fsid=syz:syz.0: can't lookup journal index: 0 [ 111.989152][ T9] gfs2: fsid=syz:syz.0: file system withdrawn [ 112.388938][ T6095] loop0: detected capacity change from 0 to 32768 [ 112.402614][ T6095] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 112.410966][ T6095] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 112.421578][ T6095] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2073 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 112.437163][ T6095] CPU: 1 UID: 0 PID: 6095 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(full) [ 112.437191][ T6095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 112.437204][ T6095] Call Trace: [ 112.437213][ T6095] [ 112.437222][ T6095] dump_stack_lvl+0x189/0x250 [ 112.437254][ T6095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.437275][ T6095] ? gfs2_meta_read+0x775/0x8b0 [ 112.437314][ T6095] ? __pfx_gfs2_meta_read+0x10/0x10 [ 112.437353][ T6095] gfs2_withdraw+0xc8/0x160 [ 112.437379][ T6095] gfs2_meta_buffer+0x225/0x2e0 [ 112.437418][ T6095] inode_go_instantiate+0xdf/0x1260 [ 112.437441][ T6095] ? __pfx_bit_wait+0x10/0x10 [ 112.437471][ T6095] ? __pfx_bit_wait+0x10/0x10 [ 112.437499][ T6095] ? out_of_line_wait_on_bit+0x123/0x170 [ 112.437532][ T6095] ? __pfx_inode_go_instantiate+0x10/0x10 [ 112.437559][ T6095] ? __pfx_wake_bit_function+0x10/0x10 [ 112.437589][ T6095] gfs2_instantiate+0x168/0x220 [ 112.437618][ T6095] gfs2_glock_wait+0x1d4/0x2a0 [ 112.437649][ T6095] gfs2_lookupi+0x35b/0x5a0 [ 112.437682][ T6095] ? __pfx_gfs2_lookupi+0x10/0x10 [ 112.437706][ T6095] ? percpu_ref_get_many+0x19/0x140 [ 112.437739][ T6095] ? gfs2_lookup_meta+0xa7/0x170 [ 112.437762][ T6095] ? look_up_lock_class+0x74/0x170 [ 112.437795][ T6095] ? crc32_le+0x250/0x2c0 [ 112.437818][ T6095] gfs2_lookup_meta+0xa7/0x170 [ 112.437844][ T6095] ? __pfx_gfs2_lookup_meta+0x10/0x10 [ 112.437871][ T6095] ? __asan_memset+0x22/0x50 [ 112.437901][ T6095] init_journal+0x1a5/0x2180 [ 112.437930][ T6095] ? __pfx_number+0x10/0x10 [ 112.437956][ T6095] ? format_decode+0x5a3/0xe30 [ 112.437982][ T6095] ? __pfx_init_journal+0x10/0x10 [ 112.438007][ T6095] ? vsnprintf+0xe11/0xf00 [ 112.438050][ T6095] ? snprintf+0xda/0x120 [ 112.438078][ T6095] ? __pfx_snprintf+0x10/0x10 [ 112.438102][ T6095] ? gfs2_glock_nq_num+0x13d/0x170 [ 112.438133][ T6095] init_inodes+0xdb/0x320 [ 112.438160][ T6095] gfs2_fill_super+0x1a5d/0x2230 [ 112.438203][ T6095] ? __pfx_gfs2_fill_super+0x10/0x10 [ 112.438232][ T6095] ? init_locking+0xb8/0x210 [ 112.438255][ T6095] ? sb_set_blocksize+0x104/0x180 [ 112.438285][ T6095] ? setup_bdev_super+0x4c1/0x5b0 [ 112.438315][ T6095] get_tree_bdev_flags+0x40e/0x4d0 [ 112.438342][ T6095] ? __pfx_gfs2_fill_super+0x10/0x10 [ 112.438367][ T6095] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 112.438391][ T6095] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 112.438433][ T6095] gfs2_get_tree+0x51/0x1e0 [ 112.438461][ T6095] vfs_get_tree+0x92/0x2b0 [ 112.438489][ T6095] do_new_mount+0x302/0xa10 [ 112.438515][ T6095] ? apparmor_capable+0x137/0x1b0 [ 112.438540][ T6095] ? __pfx_do_new_mount+0x10/0x10 [ 112.438568][ T6095] ? ns_capable+0x8a/0xf0 [ 112.438601][ T6095] ? kmem_cache_free+0x19b/0x690 [ 112.438640][ T6095] __se_sys_mount+0x313/0x410 [ 112.438675][ T6095] ? __pfx___se_sys_mount+0x10/0x10 [ 112.438710][ T6095] ? do_syscall_64+0xbe/0xfa0 [ 112.438737][ T6095] ? __x64_sys_mount+0x20/0xc0 [ 112.438768][ T6095] do_syscall_64+0xfa/0xfa0 [ 112.438795][ T6095] ? lockdep_hardirqs_on+0x9c/0x150 [ 112.438823][ T6095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.438844][ T6095] ? clear_bhb_loop+0x60/0xb0 [ 112.438869][ T6095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.438888][ T6095] RIP: 0033:0x7fd9ecb9076a [ 112.438908][ T6095] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.438924][ T6095] RSP: 002b:00007ffd671e0748 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 112.438946][ T6095] RAX: ffffffffffffffda RBX: 00007ffd671e07d0 RCX: 00007fd9ecb9076a [ 112.438960][ T6095] RDX: 0000200000000000 RSI: 0000200000012500 RDI: 00007ffd671e0790 [ 112.438974][ T6095] RBP: 0000200000000000 R08: 00007ffd671e07d0 R09: 0000000000200001 [ 112.438988][ T6095] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 112.439001][ T6095] R13: 00007ffd671e0790 R14: 00000000000125bf R15: 0000200000000680 [ 112.439043][ T6095] [ 112.439051][ T6095] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 112.834453][ T6095] gfs2: fsid=syz:syz.0: can't lookup journal index: 0 [ 112.859377][ T24] gfs2: fsid=syz:syz.0: file system withdrawn [ 113.146107][ T53] Bluetooth: hci0: command tx timeout [ 113.254571][ T6098] loop0: detected capacity change from 0 to 32768 [ 113.279375][ T6098] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 113.287704][ T6098] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 113.298316][ T6098] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2073 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 113.313869][ T6098] CPU: 0 UID: 0 PID: 6098 Comm: syz.0.22 Not tainted syzkaller #0 PREEMPT(full) [ 113.313896][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 113.313908][ T6098] Call Trace: [ 113.313917][ T6098] [ 113.313925][ T6098] dump_stack_lvl+0x189/0x250 [ 113.313957][ T6098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.313977][ T6098] ? gfs2_meta_read+0x775/0x8b0 [ 113.314023][ T6098] ? __pfx_gfs2_meta_read+0x10/0x10 [ 113.314062][ T6098] gfs2_withdraw+0xc8/0x160 [ 113.314089][ T6098] gfs2_meta_buffer+0x225/0x2e0 [ 113.314127][ T6098] inode_go_instantiate+0xdf/0x1260 [ 113.314150][ T6098] ? __pfx_bit_wait+0x10/0x10 [ 113.314181][ T6098] ? __pfx_bit_wait+0x10/0x10 [ 113.314209][ T6098] ? out_of_line_wait_on_bit+0x123/0x170 [ 113.314243][ T6098] ? __pfx_inode_go_instantiate+0x10/0x10 [ 113.314269][ T6098] ? __pfx_wake_bit_function+0x10/0x10 [ 113.314299][ T6098] gfs2_instantiate+0x168/0x220 [ 113.314328][ T6098] gfs2_glock_wait+0x1d4/0x2a0 [ 113.314359][ T6098] gfs2_lookupi+0x35b/0x5a0 [ 113.314392][ T6098] ? __pfx_gfs2_lookupi+0x10/0x10 [ 113.314416][ T6098] ? percpu_ref_get_many+0x19/0x140 [ 113.314449][ T6098] ? gfs2_lookup_meta+0xa7/0x170 [ 113.314473][ T6098] ? look_up_lock_class+0x74/0x170 [ 113.314506][ T6098] ? crc32_le+0x250/0x2c0 [ 113.314531][ T6098] gfs2_lookup_meta+0xa7/0x170 [ 113.314558][ T6098] ? __pfx_gfs2_lookup_meta+0x10/0x10 [ 113.314586][ T6098] ? __asan_memset+0x22/0x50 [ 113.314615][ T6098] init_journal+0x1a5/0x2180 [ 113.314644][ T6098] ? __pfx_number+0x10/0x10 [ 113.314672][ T6098] ? format_decode+0x5a3/0xe30 [ 113.314698][ T6098] ? __pfx_init_journal+0x10/0x10 [ 113.314723][ T6098] ? vsnprintf+0xe11/0xf00 [ 113.314757][ T6098] ? snprintf+0xda/0x120 [ 113.314784][ T6098] ? __pfx_snprintf+0x10/0x10 [ 113.314808][ T6098] ? gfs2_glock_nq_num+0x13d/0x170 [ 113.314839][ T6098] init_inodes+0xdb/0x320 [ 113.314868][ T6098] gfs2_fill_super+0x1a5d/0x2230 [ 113.314910][ T6098] ? __pfx_gfs2_fill_super+0x10/0x10 [ 113.314957][ T6098] ? init_locking+0xb8/0x210 [ 113.314979][ T6098] ? sb_set_blocksize+0x104/0x180 [ 113.315018][ T6098] ? setup_bdev_super+0x4c1/0x5b0 [ 113.315048][ T6098] get_tree_bdev_flags+0x40e/0x4d0 [ 113.315075][ T6098] ? __pfx_gfs2_fill_super+0x10/0x10 [ 113.315100][ T6098] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 113.315124][ T6098] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 113.315167][ T6098] gfs2_get_tree+0x51/0x1e0 [ 113.315196][ T6098] vfs_get_tree+0x92/0x2b0 [ 113.315225][ T6098] do_new_mount+0x302/0xa10 [ 113.315252][ T6098] ? apparmor_capable+0x137/0x1b0 [ 113.315277][ T6098] ? __pfx_do_new_mount+0x10/0x10 [ 113.315305][ T6098] ? ns_capable+0x8a/0xf0 [ 113.315338][ T6098] ? kmem_cache_free+0x19b/0x690 [ 113.315377][ T6098] __se_sys_mount+0x313/0x410 [ 113.315413][ T6098] ? __pfx___se_sys_mount+0x10/0x10 [ 113.315446][ T6098] ? do_syscall_64+0xbe/0xfa0 [ 113.315472][ T6098] ? __x64_sys_mount+0x20/0xc0 [ 113.315503][ T6098] do_syscall_64+0xfa/0xfa0 [ 113.315530][ T6098] ? lockdep_hardirqs_on+0x9c/0x150 [ 113.315559][ T6098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.315579][ T6098] ? clear_bhb_loop+0x60/0xb0 [ 113.315605][ T6098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.315625][ T6098] RIP: 0033:0x7fd9ecb9076a [ 113.315643][ T6098] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.315660][ T6098] RSP: 002b:00007ffd671e0748 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 113.315682][ T6098] RAX: ffffffffffffffda RBX: 00007ffd671e07d0 RCX: 00007fd9ecb9076a [ 113.315697][ T6098] RDX: 0000200000000000 RSI: 0000200000012500 RDI: 00007ffd671e0790 [ 113.315710][ T6098] RBP: 0000200000000000 R08: 00007ffd671e07d0 R09: 0000000000200001 [ 113.315724][ T6098] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 113.315737][ T6098] R13: 00007ffd671e0790 R14: 00000000000125bf R15: 0000200000000680 [ 113.315770][ T6098] [ 113.315778][ T6098] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 113.714911][ T6098] gfs2: fsid=syz:syz.0: can't lookup journal index: 0 [ 113.740474][ T6098] ------------[ cut here ]------------ [ 113.746082][ T6098] ODEBUG: free active (active state 0) object: ffff8880668545a0 object type: work_struct hint: gfs2_withdraw_func+0x0/0x430 [ 113.760592][ T6098] WARNING: lib/debugobjects.c:615 at debug_print_object+0x16b/0x1e0, CPU#0: syz.0.22/6098 [ 113.770718][ T6098] Modules linked in: [ 113.775079][ T6098] CPU: 0 UID: 0 PID: 6098 Comm: syz.0.22 Not tainted syzkaller #0 PREEMPT(full) [ 113.784957][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 113.795561][ T6098] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 113.801759][ T6098] Code: 4c 89 ff e8 47 99 8a fd 4d 8b 0f 48 c7 c7 80 86 c0 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 8a f5 e7 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 c7 d0 02 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 113.821979][ T6098] RSP: 0000:ffffc900038ff8a0 EFLAGS: 00010296 [ 113.828480][ T6098] RAX: 1eeed9dbacf7a700 RBX: dffffc0000000000 RCX: ffff88802ef83c80 [ 113.836794][ T6098] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 113.844810][ T6098] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 113.853069][ T6098] R10: dffffc0000000000 R11: fffffbfff1bfa6c0 R12: ffffffff8404d890 [ 113.861133][ T6098] R13: ffffffff8bc08800 R14: ffff8880668545a0 R15: ffffffff8b69e000 [ 113.869363][ T6098] FS: 000055555efab500(0000) GS:ffff888125cfd000(0000) knlGS:0000000000000000 [ 113.878693][ T6098] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.885344][ T6098] CR2: 00007fd9ecb722e0 CR3: 0000000078e64000 CR4: 00000000003526f0 [ 113.893956][ T6098] Call Trace: [ 113.897331][ T6098] [ 113.900278][ T6098] debug_check_no_obj_freed+0x3a2/0x470 [ 113.905986][ T6098] ? gfs2_fill_super+0x1552/0x2230 [ 113.911174][ T6098] kfree+0x115/0x6d0 [ 113.915116][ T6098] gfs2_fill_super+0x1552/0x2230 [ 113.920250][ T6098] ? __pfx_gfs2_fill_super+0x10/0x10 [ 113.925584][ T6098] ? sb_set_blocksize+0x104/0x180 [ 113.930708][ T6098] ? setup_bdev_super+0x4c1/0x5b0 [ 113.935971][ T6098] get_tree_bdev_flags+0x40e/0x4d0 [ 113.941140][ T6098] ? __pfx_gfs2_fill_super+0x10/0x10 [ 113.946511][ T6098] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 113.952273][ T6098] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 113.958159][ T6098] gfs2_get_tree+0x51/0x1e0 [ 113.962710][ T6098] vfs_get_tree+0x92/0x2b0 [ 113.967210][ T6098] do_new_mount+0x302/0xa10 [ 113.971758][ T6098] ? apparmor_capable+0x137/0x1b0 [ 113.976982][ T6098] ? __pfx_do_new_mount+0x10/0x10 [ 113.982391][ T6098] ? ns_capable+0x8a/0xf0 [ 113.987193][ T6098] ? kmem_cache_free+0x19b/0x690 [ 113.992203][ T6098] __se_sys_mount+0x313/0x410 [ 113.997031][ T6098] ? __pfx___se_sys_mount+0x10/0x10 [ 114.002282][ T6098] ? do_syscall_64+0xbe/0xfa0 [ 114.007126][ T6098] ? __x64_sys_mount+0x20/0xc0 [ 114.011960][ T6098] do_syscall_64+0xfa/0xfa0 [ 114.016593][ T6098] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.021852][ T6098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.028012][ T6098] ? clear_bhb_loop+0x60/0xb0 [ 114.032730][ T6098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.038706][ T6098] RIP: 0033:0x7fd9ecb9076a [ 114.043158][ T6098] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.062942][ T6098] RSP: 002b:00007ffd671e0748 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 114.071449][ T6098] RAX: ffffffffffffffda RBX: 00007ffd671e07d0 RCX: 00007fd9ecb9076a [ 114.079488][ T6098] RDX: 0000200000000000 RSI: 0000200000012500 RDI: 00007ffd671e0790 [ 114.088240][ T6098] RBP: 0000200000000000 R08: 00007ffd671e07d0 R09: 0000000000200001 [ 114.096744][ T6098] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 114.104838][ T6098] R13: 00007ffd671e0790 R14: 00000000000125bf R15: 0000200000000680 [ 114.112947][ T6098] [ 114.116064][ T6098] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 114.123714][ T6098] CPU: 0 UID: 0 PID: 6098 Comm: syz.0.22 Not tainted syzkaller #0 PREEMPT(full) [ 114.132859][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 114.142932][ T6098] Call Trace: [ 114.146218][ T6098] [ 114.149160][ T6098] dump_stack_lvl+0x99/0x250 [ 114.153777][ T6098] ? __asan_memcpy+0x40/0x70 [ 114.158393][ T6098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.163613][ T6098] ? __pfx__printk+0x10/0x10 [ 114.168451][ T6098] vpanic+0x237/0x6d0 [ 114.172465][ T6098] ? __pfx_vpanic+0x10/0x10 [ 114.176993][ T6098] ? is_bpf_text_address+0x292/0x2b0 [ 114.182319][ T6098] ? is_bpf_text_address+0x26/0x2b0 [ 114.187541][ T6098] panic+0xb9/0xc0 [ 114.191321][ T6098] ? __pfx_panic+0x10/0x10 [ 114.195774][ T6098] __warn+0x334/0x4c0 [ 114.199806][ T6098] ? debug_print_object+0x16b/0x1e0 [ 114.205024][ T6098] ? debug_print_object+0x16b/0x1e0 [ 114.210322][ T6098] report_bug+0x2be/0x4f0 [ 114.214665][ T6098] ? debug_print_object+0x16b/0x1e0 [ 114.219989][ T6098] ? debug_print_object+0x16b/0x1e0 [ 114.225216][ T6098] ? debug_print_object+0x16d/0x1e0 [ 114.230446][ T6098] handle_bug+0x84/0x160 [ 114.234738][ T6098] exc_invalid_op+0x1a/0x50 [ 114.239271][ T6098] asm_exc_invalid_op+0x1a/0x20 [ 114.244135][ T6098] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 114.250066][ T6098] Code: 4c 89 ff e8 47 99 8a fd 4d 8b 0f 48 c7 c7 80 86 c0 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 8a f5 e7 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 c7 d0 02 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 114.269791][ T6098] RSP: 0000:ffffc900038ff8a0 EFLAGS: 00010296 [ 114.275913][ T6098] RAX: 1eeed9dbacf7a700 RBX: dffffc0000000000 RCX: ffff88802ef83c80 [ 114.284254][ T6098] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 114.292248][ T6098] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 114.300258][ T6098] R10: dffffc0000000000 R11: fffffbfff1bfa6c0 R12: ffffffff8404d890 [ 114.308257][ T6098] R13: ffffffff8bc08800 R14: ffff8880668545a0 R15: ffffffff8b69e000 [ 114.316268][ T6098] ? __pfx_gfs2_withdraw_func+0x10/0x10 [ 114.321877][ T6098] debug_check_no_obj_freed+0x3a2/0x470 [ 114.327591][ T6098] ? gfs2_fill_super+0x1552/0x2230 [ 114.332746][ T6098] kfree+0x115/0x6d0 [ 114.336772][ T6098] gfs2_fill_super+0x1552/0x2230 [ 114.341774][ T6098] ? __pfx_gfs2_fill_super+0x10/0x10 [ 114.347221][ T6098] ? sb_set_blocksize+0x104/0x180 [ 114.352287][ T6098] ? setup_bdev_super+0x4c1/0x5b0 [ 114.357422][ T6098] get_tree_bdev_flags+0x40e/0x4d0 [ 114.362552][ T6098] ? __pfx_gfs2_fill_super+0x10/0x10 [ 114.367940][ T6098] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 114.373800][ T6098] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 114.379557][ T6098] gfs2_get_tree+0x51/0x1e0 [ 114.384271][ T6098] vfs_get_tree+0x92/0x2b0 [ 114.388810][ T6098] do_new_mount+0x302/0xa10 [ 114.393340][ T6098] ? apparmor_capable+0x137/0x1b0 [ 114.398394][ T6098] ? __pfx_do_new_mount+0x10/0x10 [ 114.403433][ T6098] ? ns_capable+0x8a/0xf0 [ 114.407877][ T6098] ? kmem_cache_free+0x19b/0x690 [ 114.412869][ T6098] __se_sys_mount+0x313/0x410 [ 114.417571][ T6098] ? __pfx___se_sys_mount+0x10/0x10 [ 114.422790][ T6098] ? do_syscall_64+0xbe/0xfa0 [ 114.427558][ T6098] ? __x64_sys_mount+0x20/0xc0 [ 114.432365][ T6098] do_syscall_64+0xfa/0xfa0 [ 114.436892][ T6098] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.442140][ T6098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.448262][ T6098] ? clear_bhb_loop+0x60/0xb0 [ 114.452997][ T6098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.458934][ T6098] RIP: 0033:0x7fd9ecb9076a [ 114.463371][ T6098] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.483267][ T6098] RSP: 002b:00007ffd671e0748 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 114.491893][ T6098] RAX: ffffffffffffffda RBX: 00007ffd671e07d0 RCX: 00007fd9ecb9076a [ 114.499882][ T6098] RDX: 0000200000000000 RSI: 0000200000012500 RDI: 00007ffd671e0790 [ 114.507905][ T6098] RBP: 0000200000000000 R08: 00007ffd671e07d0 R09: 0000000000200001 [ 114.515901][ T6098] R10: 0000000000200001 R11: 0000000000000246 R12: 0000200000012500 [ 114.523893][ T6098] R13: 00007ffd671e0790 R14: 00000000000125bf R15: 0000200000000680 [ 114.532072][ T6098] [ 114.535417][ T6098] Kernel Offset: disabled [ 114.539756][ T6098] Rebooting in 86400 seconds..