Warning: Permanently added '10.128.0.214' (ED25519) to the list of known hosts. 2025/11/23 06:37:14 parsed 1 programs [ 56.668303][ T5814] cgroup: Unknown subsys name 'net' [ 56.848224][ T5814] cgroup: Unknown subsys name 'cpuset' [ 56.854951][ T5814] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.670479][ T5814] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.026099][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.111533][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.124925][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.137682][ T3787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.145585][ T3787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.325235][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 67.350228][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.357406][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.364617][ T5841] bridge_slave_0: entered allmulticast mode [ 67.371204][ T5841] bridge_slave_0: entered promiscuous mode [ 67.377959][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.385071][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.392243][ T5841] bridge_slave_1: entered allmulticast mode [ 67.398570][ T5841] bridge_slave_1: entered promiscuous mode [ 67.413905][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.424061][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.439815][ T5841] team0: Port device team_slave_0 added [ 67.446052][ T5841] team0: Port device team_slave_1 added [ 67.459025][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.465983][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.492426][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.503690][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.510728][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.536697][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.557869][ T5841] hsr_slave_0: entered promiscuous mode [ 67.563775][ T5841] hsr_slave_1: entered promiscuous mode [ 67.604378][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.612476][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.620397][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.628912][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.642196][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.649326][ T5841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.656600][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.663678][ T5841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.683868][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.693703][ T3787] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.701630][ T3787] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.711704][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.721134][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.728333][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.737441][ T3787] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.744537][ T3787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.797113][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.813976][ T5841] veth0_vlan: entered promiscuous mode [ 67.821699][ T5841] veth1_vlan: entered promiscuous mode [ 67.834340][ T5841] veth0_macvtap: entered promiscuous mode [ 67.841864][ T5841] veth1_macvtap: entered promiscuous mode [ 67.851884][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.861914][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.871323][ T72] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.880221][ T72] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.890023][ T72] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.898977][ T72] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.943403][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.950700][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.958061][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.965389][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.973493][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.981604][ T3787] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.008522][ T3787] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.059056][ T3787] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.117783][ T3787] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/11/23 06:37:29 executed programs: 0 [ 71.019846][ T3787] bridge_slave_1: left allmulticast mode [ 71.025565][ T3787] bridge_slave_1: left promiscuous mode [ 71.031428][ T3787] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.039394][ T3787] bridge_slave_0: left allmulticast mode [ 71.045080][ T3787] bridge_slave_0: left promiscuous mode [ 71.050984][ T3787] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.108931][ T3787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.118740][ T3787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.128236][ T3787] bond0 (unregistering): Released all slaves [ 71.179550][ T3787] hsr_slave_0: left promiscuous mode [ 71.185455][ T3787] hsr_slave_1: left promiscuous mode [ 71.191162][ T3787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.198681][ T3787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.206112][ T3787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.213879][ T3787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.223136][ T3787] veth1_macvtap: left promiscuous mode [ 71.229435][ T3787] veth0_macvtap: left promiscuous mode [ 71.235032][ T3787] veth1_vlan: left promiscuous mode [ 71.240478][ T3787] veth0_vlan: left promiscuous mode [ 71.281946][ T3787] team0 (unregistering): Port device team_slave_1 removed [ 71.291479][ T3787] team0 (unregistering): Port device team_slave_0 removed [ 74.960062][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.967483][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.974651][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.982122][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.989575][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.038054][ T5987] chnl_net:caif_netlink_parms(): no params data found [ 75.063573][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.070728][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.078000][ T5987] bridge_slave_0: entered allmulticast mode [ 75.084386][ T5987] bridge_slave_0: entered promiscuous mode [ 75.091241][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.098379][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.105845][ T5987] bridge_slave_1: entered allmulticast mode [ 75.112283][ T5987] bridge_slave_1: entered promiscuous mode [ 75.124913][ T5987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.135161][ T5987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.150060][ T5987] team0: Port device team_slave_0 added [ 75.156328][ T5987] team0: Port device team_slave_1 added [ 75.168069][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.175141][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.201158][ T5987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.212300][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.219305][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.245307][ T5987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.264674][ T5987] hsr_slave_0: entered promiscuous mode [ 75.270723][ T5987] hsr_slave_1: entered promiscuous mode [ 75.317556][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 75.323971][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 75.453678][ T5987] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.462391][ T5987] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.470982][ T5987] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.480404][ T5987] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.495262][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.502403][ T5987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.509735][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.516922][ T5987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.544110][ T5987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.554935][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.563138][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.574034][ T5987] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.583859][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.591064][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.602230][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.609323][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.682614][ T5987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.704754][ T5987] veth0_vlan: entered promiscuous mode [ 75.712803][ T5987] veth1_vlan: entered promiscuous mode [ 75.726008][ T5987] veth0_macvtap: entered promiscuous mode [ 75.735637][ T5987] veth1_macvtap: entered promiscuous mode [ 75.747705][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.758726][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.769244][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.778071][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.791567][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.801048][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.824092][ T196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2025/11/23 06:37:36 executed programs: 2 [ 75.833573][ T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.849299][ T196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.857287][ T196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.018955][ T6071] loop0: detected capacity change from 0 to 32768 [ 76.037948][ T6071] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 76.046363][ T6071] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 76.075893][ T6071] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 76.090983][ T5855] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 76.098150][ T5855] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 76.122944][ T5855] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 24ms [ 76.131251][ T5855] gfs2: fsid=syz:syz.0: jid=0: Done [ 76.136584][ T6071] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 76.235709][ T5128] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 499 [ 76.251269][ T9] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 499 [ 76.266669][ T5855] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 499 [ 76.282578][ T5128] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 77.066840][ T5864] Bluetooth: hci0: command tx timeout [ 79.146855][ T5864] Bluetooth: hci0: command tx timeout [ 81.227017][ T5864] Bluetooth: hci0: command tx timeout [ 81.309395][ T5128] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 81.318244][ T5128] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 1 [ 81.326537][ T5128] gfs2: fsid=syz:syz.0: File system withdrawn [ 81.332778][ T5128] CPU: 0 UID: 0 PID: 5128 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 81.332812][ T5128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 81.332828][ T5128] Workqueue: gfs2-delete/syz:syz delete_work_func [ 81.332864][ T5128] Call Trace: [ 81.332871][ T5128] [ 81.332879][ T5128] dump_stack_lvl+0xab/0xe0 [ 81.332924][ T5128] gfs2_withdraw+0x4a4/0x7c0 [ 81.332957][ T5128] ? __pfx_autoremove_wake_function+0x10/0x10 [ 81.333017][ T5128] gfs2_meta_buffer+0x1ae/0x1c0 [ 81.333066][ T5128] inode_go_instantiate+0x63/0x540 [ 81.333100][ T5128] gfs2_instantiate+0xa7/0x130 [ 81.333144][ T5128] gfs2_inode_lookup+0x490/0x510 [ 81.333182][ T5128] ? gfs2_lookup_by_inum+0x2f/0xb0 [ 81.333221][ T5128] gfs2_lookup_by_inum+0x2f/0xb0 [ 81.333259][ T5128] delete_work_func+0x9e/0x2f0 [ 81.333288][ T5128] ? pwq_dec_nr_in_flight+0x78/0x560 [ 81.333314][ T5128] process_one_work+0x26b/0x620 [ 81.333339][ T5128] worker_thread+0x2c4/0x4f0 [ 81.333363][ T5128] ? __pfx_worker_thread+0x10/0x10 [ 81.333387][ T5128] kthread+0x15b/0x310 [ 81.333418][ T5128] ? finish_task_switch.isra.0+0x86/0x280 [ 81.333444][ T5128] ? __pfx_kthread+0x10/0x10 [ 81.333478][ T5128] ? __pfx_kthread+0x10/0x10 2025/11/23 06:37:42 executed programs: 3 [ 81.333512][ T5128] ret_from_fork+0x210/0x240 [ 81.333540][ T5128] ? __pfx_kthread+0x10/0x10 [ 81.333571][ T5128] ret_from_fork_asm+0x1a/0x30 [ 81.333621][ T5128] [ 81.583316][ T6134] loop0: detected capacity change from 0 to 32768 [ 81.593510][ T6134] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 81.606131][ T6134] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 81.622184][ T6134] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 81.630452][ T5848] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 81.637271][ T5848] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 81.656197][ T5848] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 18ms [ 81.663799][ T5848] gfs2: fsid=syz:syz.0: jid=0: Done [ 81.669131][ T6134] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 81.745055][ T5848] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 499 [ 81.760438][ T2149] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 499 [ 81.776054][ T6131] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 499 [ 81.791810][ T2149] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 83.306850][ T5864] Bluetooth: hci0: command tx timeout [ 85.547075][ T42] cfg80211: failed to load regulatory.db [ 86.829232][ T2149] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 86.838048][ T2149] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 86.844633][ T2149] gfs2: fsid=syz:syz.0: File system withdrawn [ 86.850754][ T2149] CPU: 1 UID: 0 PID: 2149 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 86.850789][ T2149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.850807][ T2149] Workqueue: gfs2-delete/syz:syz delete_work_func [ 86.850837][ T2149] Call Trace: [ 86.850843][ T2149] [ 86.850850][ T2149] dump_stack_lvl+0xab/0xe0 [ 86.850891][ T2149] gfs2_withdraw+0x4a4/0x7c0 [ 86.850922][ T2149] ? __pfx_autoremove_wake_function+0x10/0x10 [ 86.850974][ T2149] gfs2_meta_buffer+0x1ae/0x1c0 [ 86.851021][ T2149] inode_go_instantiate+0x63/0x540 [ 86.851055][ T2149] gfs2_instantiate+0xa7/0x130 [ 86.851097][ T2149] gfs2_inode_lookup+0x490/0x510 [ 86.851138][ T2149] ? gfs2_lookup_by_inum+0x2f/0xb0 [ 86.851177][ T2149] gfs2_lookup_by_inum+0x2f/0xb0 [ 86.851216][ T2149] delete_work_func+0x9e/0x2f0 [ 86.851247][ T2149] process_one_work+0x26b/0x620 [ 86.851273][ T2149] worker_thread+0x2c4/0x4f0 [ 86.851297][ T2149] ? __pfx_worker_thread+0x10/0x10 [ 86.851322][ T2149] kthread+0x15b/0x310 [ 86.851355][ T2149] ? finish_task_switch.isra.0+0x86/0x280 [ 86.851382][ T2149] ? __pfx_kthread+0x10/0x10 [ 86.851416][ T2149] ? __pfx_kthread+0x10/0x10 [ 86.851452][ T2149] ret_from_fork+0x210/0x240 [ 86.851483][ T2149] ? __pfx_kthread+0x10/0x10 [ 86.851518][ T2149] ret_from_fork_asm+0x1a/0x30 [ 86.851569][ T2149] [ 87.090703][ T6145] loop0: detected capacity change from 0 to 32768 [ 87.102071][ T6145] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 87.110296][ T6145] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 87.122324][ T6145] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 87.130841][ T2149] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 87.137780][ T2149] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 87.155503][ T2149] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 17ms [ 87.163054][ T2149] gfs2: fsid=syz:syz.0: jid=0: Done [ 87.168406][ T6145] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 87.245921][ T9] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 499 [ 87.261454][ T5855] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 499 [ 87.276827][ T5128] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 499 [ 87.292669][ T6132] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 499 [ 87.308046][ T9] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 92.349077][ T9] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 92.357913][ T9] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 92.364935][ T9] gfs2: fsid=syz:syz.0: File system withdrawn [ 92.371069][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 92.371103][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.371120][ T9] Workqueue: gfs2-delete/syz:syz delete_work_func [ 92.371150][ T9] Call Trace: [ 92.371156][ T9] [ 92.371164][ T9] dump_stack_lvl+0xab/0xe0 [ 92.371207][ T9] gfs2_withdraw+0x4a4/0x7c0 [ 92.371238][ T9] ? __pfx_autoremove_wake_function+0x10/0x10 [ 92.371290][ T9] gfs2_meta_buffer+0x1ae/0x1c0 [ 92.371338][ T9] inode_go_instantiate+0x63/0x540 [ 92.371372][ T9] gfs2_instantiate+0xa7/0x130 [ 92.371415][ T9] gfs2_inode_lookup+0x490/0x510 [ 92.371456][ T9] ? gfs2_lookup_by_inum+0x2f/0xb0 [ 92.371496][ T9] gfs2_lookup_by_inum+0x2f/0xb0 [ 92.371535][ T9] delete_work_func+0x9e/0x2f0 [ 92.371564][ T9] ? srcu_invoke_callbacks+0x16e/0x1c0 [ 92.371613][ T9] ? pwq_dec_nr_in_flight+0x78/0x560 [ 92.371640][ T9] process_one_work+0x26b/0x620 [ 92.371666][ T9] worker_thread+0x2c4/0x4f0 [ 92.371690][ T9] ? __pfx_worker_thread+0x10/0x10 [ 92.371715][ T9] kthread+0x15b/0x310 [ 92.371749][ T9] ? finish_task_switch.isra.0+0x86/0x280 [ 92.371776][ T9] ? __pfx_kthread+0x10/0x10 [ 92.371810][ T9] ? __pfx_kthread+0x10/0x10 [ 92.371846][ T9] ret_from_fork+0x210/0x240 [ 92.371877][ T9] ? __pfx_kthread+0x10/0x10 [ 92.371912][ T9] ret_from_fork_asm+0x1a/0x30 [ 92.371955][ T9] [ 94.491840][ T5814] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) BUG: memory leak unreferenced object 0xffff888110e52000 (size 144): comm "syz.0.17", pid 6071, jiffies 4294944857 hex dump (first 32 bytes): c0 ff 59 82 ff ff ff ff 05 00 00 00 db 1a 00 00 ..Y............. 0b 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 ................ backtrace (crc 853012f0): kmem_cache_alloc_noprof+0x397/0x5a0 gfs2_trans_begin+0x29/0xa0 gfs2_create_inode+0xca0/0x1890 gfs2_atomic_open+0x98/0x190 path_openat+0x13ef/0x1eb0 do_filp_open+0x102/0x1f0 do_sys_openat2+0xc1/0x140 __x64_sys_openat+0xb2/0x100 do_syscall_64+0xa4/0xfa0 entry_SYSCALL_64_after_hwframe+0x77/0x7f connection error: failed to recv *flatrpc.ExecutorMessageRawT: EOF [ 97.489152][ T72] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.538485][ T72] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.568426][ T72] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.628658][ T72] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.683032][ T72] bridge_slave_1: left allmulticast mode [ 97.688768][ T72] bridge_slave_1: left promiscuous mode [ 97.694409][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.702056][ T72] bridge_slave_0: left allmulticast mode [ 97.707758][ T72] bridge_slave_0: left promiscuous mode [ 97.713406][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.799327][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.808596][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.817749][ T72] bond0 (unregistering): Released all slaves [ 97.961351][ T72] hsr_slave_0: left promiscuous mode [ 97.967122][ T72] hsr_slave_1: left promiscuous mode [ 97.972697][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.980733][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.988393][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.995835][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.005225][ T72] veth1_macvtap: left promiscuous mode [ 98.010888][ T72] veth0_macvtap: left promiscuous mode [ 98.016420][ T72] veth1_vlan: left promiscuous mode [ 98.021906][ T72] veth0_vlan: left promiscuous mode [ 98.055904][ T72] team0 (unregistering): Port device team_slave_1 removed [ 98.064151][ T72] team0 (unregistering): Port device team_slave_0 removed