Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts. 2025/10/14 05:24:13 parsed 1 programs [ 74.569565][ T5832] cgroup: Unknown subsys name 'net' [ 74.700636][ T5832] cgroup: Unknown subsys name 'cpuset' [ 74.709620][ T5832] cgroup: Unknown subsys name 'rlimit' [ 76.111274][ T5832] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.857302][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.250178][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 79.322187][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.329900][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.337069][ T5846] bridge_slave_0: entered allmulticast mode [ 79.344464][ T5846] bridge_slave_0: entered promiscuous mode [ 79.353806][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.361053][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.368547][ T5846] bridge_slave_1: entered allmulticast mode [ 79.375557][ T5846] bridge_slave_1: entered promiscuous mode [ 79.404501][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.416116][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.446079][ T5846] team0: Port device team_slave_0 added [ 79.454008][ T5846] team0: Port device team_slave_1 added [ 79.481251][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.488608][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.514609][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.527380][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.534341][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.561687][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.623038][ T5846] hsr_slave_0: entered promiscuous mode [ 79.630920][ T5846] hsr_slave_1: entered promiscuous mode [ 79.771442][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.783538][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.793893][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.803517][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.832402][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.839607][ T5846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.847552][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.854661][ T5846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.916935][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.934878][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.943583][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.961135][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.974234][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.981419][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.996147][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.003315][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.162318][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.210363][ T5846] veth0_vlan: entered promiscuous mode [ 80.222588][ T5846] veth1_vlan: entered promiscuous mode [ 80.251757][ T5846] veth0_macvtap: entered promiscuous mode [ 80.261537][ T5846] veth1_macvtap: entered promiscuous mode [ 80.282035][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.298030][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.313139][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.322903][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.332882][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.341971][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.506108][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.574193][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.672270][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.733702][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.231881][ T4569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.240173][ T4569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.268686][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.276605][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.649819][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.658430][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.665923][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.675015][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.683086][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.231084][ T12] bridge_slave_1: left allmulticast mode [ 83.237161][ T12] bridge_slave_1: left promiscuous mode [ 83.244620][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.259451][ T12] bridge_slave_0: left allmulticast mode [ 83.265313][ T12] bridge_slave_0: left promiscuous mode [ 83.271471][ T12] bridge0: port 1(bridge_slave_0) entered disabled state 2025/10/14 05:24:24 executed programs: 0 [ 83.362190][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.374864][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.386665][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.395250][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.404062][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.590638][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.602772][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.613252][ T12] bond0 (unregistering): Released all slaves [ 83.731453][ T12] hsr_slave_0: left promiscuous mode [ 83.739518][ T12] hsr_slave_1: left promiscuous mode [ 83.745743][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.753685][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.763716][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.771385][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.790521][ T12] veth1_macvtap: left promiscuous mode [ 83.796167][ T12] veth0_macvtap: left promiscuous mode [ 83.802265][ T12] veth1_vlan: left promiscuous mode [ 83.807903][ T12] veth0_vlan: left promiscuous mode [ 84.245455][ T12] team0 (unregistering): Port device team_slave_1 removed [ 84.273818][ T12] team0 (unregistering): Port device team_slave_0 removed [ 84.614373][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 84.775385][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.783413][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.791040][ T5941] bridge_slave_0: entered allmulticast mode [ 84.804676][ T5941] bridge_slave_0: entered promiscuous mode [ 84.823706][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.834152][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.849167][ T5941] bridge_slave_1: entered allmulticast mode [ 84.857097][ T5941] bridge_slave_1: entered promiscuous mode [ 84.911866][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.943256][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.424907][ T5941] team0: Port device team_slave_0 added [ 85.433575][ T5941] team0: Port device team_slave_1 added [ 85.478759][ T5147] Bluetooth: hci0: command tx timeout [ 85.502754][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.510529][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.541763][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.574851][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.590338][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.638763][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.899139][ T5941] hsr_slave_0: entered promiscuous mode [ 85.906127][ T5941] hsr_slave_1: entered promiscuous mode [ 86.585891][ T5941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.604531][ T5941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.617085][ T5941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.632210][ T5941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.747056][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.758172][ T9] cfg80211: failed to load regulatory.db [ 86.789244][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.805946][ T4569] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.813285][ T4569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.843956][ T4569] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.851248][ T4569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.109188][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.180194][ T5941] veth0_vlan: entered promiscuous mode [ 87.197193][ T5941] veth1_vlan: entered promiscuous mode [ 87.236463][ T5941] veth0_macvtap: entered promiscuous mode [ 87.248973][ T5941] veth1_macvtap: entered promiscuous mode [ 87.272615][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.293156][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.312812][ T4569] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.322737][ T4569] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.340610][ T4569] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.356979][ T4569] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.429808][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.444509][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.480637][ T4569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.490598][ T4569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.548597][ T5147] Bluetooth: hci0: command tx timeout [ 87.901067][ T6039] loop0: detected capacity change from 0 to 32768 [ 87.921024][ T6039] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 87.930123][ T6039] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 87.970656][ T6039] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 87.981807][ T917] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 87.990485][ T917] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 88.069366][ T917] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 78ms [ 88.077162][ T917] gfs2: fsid=syz:syz.0: jid=0: Done [ 88.083503][ T6039] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 88.360195][ T43] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 88.376190][ T5863] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 88.392200][ T5869] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 88.407681][ T917] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 88.423666][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 88.423689][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 88.423700][ T43] Workqueue: gfs2-delete/syz:syz delete_work_func [ 88.423738][ T43] Call Trace: [ 88.423745][ T43] [ 88.423753][ T43] dump_stack_lvl+0x189/0x250 [ 88.423776][ T43] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.423790][ T43] ? gfs2_meta_read+0x775/0x8b0 [ 88.423814][ T43] ? __pfx_gfs2_meta_read+0x10/0x10 [ 88.423834][ T43] ? do_raw_spin_unlock+0x122/0x240 [ 88.423853][ T43] gfs2_withdraw+0xc8/0x160 [ 88.423870][ T43] gfs2_meta_buffer+0x225/0x2e0 [ 88.423894][ T43] inode_go_instantiate+0xdf/0x1260 [ 88.423914][ T43] ? do_raw_spin_lock+0x121/0x290 [ 88.423932][ T43] ? __pfx_inode_go_instantiate+0x10/0x10 [ 88.423954][ T43] ? do_raw_spin_unlock+0x122/0x240 [ 88.423975][ T43] gfs2_instantiate+0x168/0x220 [ 88.423996][ T43] gfs2_inode_lookup+0x648/0xb10 [ 88.424021][ T43] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 88.424047][ T43] ? gfs2_lookup_by_inum+0x52/0x100 [ 88.424070][ T43] ? do_raw_spin_lock+0x121/0x290 [ 88.424095][ T43] gfs2_lookup_by_inum+0x52/0x100 [ 88.424117][ T43] delete_work_func+0x2c9/0x490 [ 88.424141][ T43] ? __pfx_delete_work_func+0x10/0x10 [ 88.424160][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 88.424188][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 88.424206][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 88.424227][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 88.424249][ T43] process_scheduled_works+0xae1/0x17b0 [ 88.424299][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 88.424339][ T43] worker_thread+0x8a0/0xda0 [ 88.424388][ T43] kthread+0x711/0x8a0 [ 88.424409][ T43] ? __pfx_worker_thread+0x10/0x10 [ 88.424431][ T43] ? __pfx_kthread+0x10/0x10 [ 88.424450][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 88.424468][ T43] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.424486][ T43] ? __pfx_kthread+0x10/0x10 [ 88.424504][ T43] ret_from_fork+0x4bc/0x870 [ 88.424529][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 88.424558][ T43] ? __switch_to_asm+0x39/0x70 [ 88.424573][ T43] ? __switch_to_asm+0x33/0x70 [ 88.424592][ T43] ? __pfx_kthread+0x10/0x10 [ 88.424606][ T43] ret_from_fork_asm+0x1a/0x30 [ 88.424639][ T43] [ 88.424646][ T43] gfs2: fsid=syz:syz.0: about to withdraw this file system 2025/10/14 05:24:29 executed programs: 3 [ 88.474766][ T6039] loop0: writeback error on inode 9394, offset 2176000, sector 23076 [ 89.627421][ T5147] Bluetooth: hci0: command tx timeout [ 91.707582][ T5147] Bluetooth: hci0: command tx timeout [ 93.550667][ T917] gfs2: fsid=syz:syz.0: file system withdrawn [ 93.878272][ T6053] loop0: detected capacity change from 0 to 32768 [ 93.902186][ T6053] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 93.910794][ T6053] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 93.944174][ T6053] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 93.953960][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 93.961051][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 94.008425][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 47ms [ 94.018339][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 94.023600][ T6053] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 94.265082][ T43] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 94.281529][ T917] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 94.297370][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 94.297394][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 94.297405][ T43] Workqueue: gfs2-delete/syz:syz delete_work_func [ 94.297429][ T43] Call Trace: [ 94.297436][ T43] [ 94.297438][ T6053] gfs2: fsid=syz:syz.0: GFS2:adding buf while withdrawn! 0x3b57 [ 94.297443][ T43] dump_stack_lvl+0x189/0x250 [ 94.297465][ T43] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.297479][ T43] ? gfs2_meta_read+0x775/0x8b0 [ 94.297505][ T43] ? __pfx_gfs2_meta_read+0x10/0x10 [ 94.297524][ T43] ? do_raw_spin_unlock+0x122/0x240 [ 94.297542][ T43] gfs2_withdraw+0xc8/0x160 [ 94.297558][ T43] gfs2_meta_buffer+0x225/0x2e0 [ 94.297580][ T43] inode_go_instantiate+0xdf/0x1260 [ 94.297596][ T43] ? do_raw_spin_lock+0x121/0x290 [ 94.297613][ T43] ? __pfx_inode_go_instantiate+0x10/0x10 [ 94.297634][ T43] ? do_raw_spin_unlock+0x122/0x240 [ 94.297655][ T43] gfs2_instantiate+0x168/0x220 [ 94.297675][ T43] gfs2_inode_lookup+0x648/0xb10 [ 94.297699][ T43] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 94.297713][ T43] ? lockdep_unlock+0x89/0x120 [ 94.297731][ T43] ? validate_chain+0x897/0x2140 [ 94.297756][ T43] ? gfs2_lookup_by_inum+0x52/0x100 [ 94.297788][ T43] gfs2_lookup_by_inum+0x52/0x100 [ 94.297809][ T43] delete_work_func+0x2c9/0x490 [ 94.297833][ T43] ? __pfx_delete_work_func+0x10/0x10 [ 94.297850][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 94.297877][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 94.297895][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 94.297915][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 94.297937][ T43] process_scheduled_works+0xae1/0x17b0 [ 94.297984][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 94.298022][ T43] worker_thread+0x8a0/0xda0 [ 94.298076][ T43] kthread+0x711/0x8a0 [ 94.298097][ T43] ? __pfx_worker_thread+0x10/0x10 [ 94.298117][ T43] ? __pfx_kthread+0x10/0x10 [ 94.298135][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 94.298152][ T43] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.298169][ T43] ? __pfx_kthread+0x10/0x10 [ 94.298187][ T43] ret_from_fork+0x4bc/0x870 [ 94.298210][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 94.298238][ T43] ? __switch_to_asm+0x39/0x70 [ 94.298254][ T43] ? __switch_to_asm+0x33/0x70 [ 94.298270][ T43] ? __pfx_kthread+0x10/0x10 [ 94.298287][ T43] ret_from_fork_asm+0x1a/0x30 [ 94.298322][ T43] [ 94.298329][ T43] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 94.307184][ T6059] gfs2: fsid=syz:syz.0: gfs2_create_inode: -5 [ 94.318372][ T6053] gfs2: fsid=syz:syz.0: GFS2:adding buf while withdrawn! 0x3b57 2025/10/14 05:24:35 executed programs: 4 [ 99.390525][ T917] gfs2: fsid=syz:syz.0: file system withdrawn [ 99.730849][ T6063] loop0: detected capacity change from 0 to 32768 [ 99.763473][ T6063] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 99.772600][ T6063] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 99.810109][ T6063] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 99.822435][ T917] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 99.830720][ T917] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 99.886302][ T917] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 55ms [ 99.893855][ T917] gfs2: fsid=syz:syz.0: jid=0: Done [ 99.899133][ T6063] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 100.148154][ T5869] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 100.164446][ T43] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 100.180118][ T24] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 100.198375][ T917] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 100.219937][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 100.219957][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 100.219965][ T43] Workqueue: gfs2-delete/syz:syz delete_work_func [ 100.219986][ T43] Call Trace: [ 100.219991][ T43] [ 100.219997][ T43] dump_stack_lvl+0x189/0x250 [ 100.220017][ T43] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.220028][ T43] ? gfs2_meta_read+0x775/0x8b0 [ 100.220049][ T43] ? __pfx_gfs2_meta_read+0x10/0x10 [ 100.220065][ T43] ? do_raw_spin_unlock+0x122/0x240 [ 100.220083][ T43] gfs2_withdraw+0xc8/0x160 [ 100.220097][ T43] gfs2_meta_buffer+0x225/0x2e0 [ 100.220119][ T43] inode_go_instantiate+0xdf/0x1260 [ 100.220135][ T43] ? do_raw_spin_lock+0x121/0x290 [ 100.220149][ T43] ? __pfx_inode_go_instantiate+0x10/0x10 [ 100.220166][ T43] ? do_raw_spin_unlock+0x122/0x240 [ 100.220184][ T43] gfs2_instantiate+0x168/0x220 [ 100.220202][ T43] gfs2_inode_lookup+0x648/0xb10 [ 100.220221][ T43] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 100.220241][ T43] ? gfs2_lookup_by_inum+0x52/0x100 [ 100.220258][ T43] ? do_raw_spin_lock+0x121/0x290 [ 100.220278][ T43] gfs2_lookup_by_inum+0x52/0x100 [ 100.220294][ T43] delete_work_func+0x2c9/0x490 [ 100.220315][ T43] ? __pfx_delete_work_func+0x10/0x10 [ 100.220331][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 100.220355][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 100.220371][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 100.220389][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 100.220409][ T43] process_scheduled_works+0xae1/0x17b0 [ 100.220453][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 100.220489][ T43] worker_thread+0x8a0/0xda0 [ 100.220534][ T43] kthread+0x711/0x8a0 [ 100.220553][ T43] ? __pfx_worker_thread+0x10/0x10 [ 100.220571][ T43] ? __pfx_kthread+0x10/0x10 [ 100.220587][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 100.220604][ T43] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.220622][ T43] ? __pfx_kthread+0x10/0x10 [ 100.220639][ T43] ret_from_fork+0x4bc/0x870 [ 100.220661][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 100.220698][ T43] ? __switch_to_asm+0x39/0x70 [ 100.220715][ T43] ? __switch_to_asm+0x33/0x70 [ 100.220731][ T43] ? __pfx_kthread+0x10/0x10 [ 100.220749][ T43] ret_from_fork_asm+0x1a/0x30 [ 100.220786][ T43] [ 100.220793][ T43] gfs2: fsid=syz:syz.0: about to withdraw this file system 2025/10/14 05:24:41 executed programs: 5 [ 100.257341][ T6063] loop0: writeback error on inode 9394, offset 3200000, sector 25092 [ 105.311315][ T917] gfs2: fsid=syz:syz.0: file system withdrawn [ 105.647053][ T6071] loop0: detected capacity change from 0 to 32768 [ 105.669000][ T6071] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 105.677199][ T6071] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 105.711081][ T6071] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 105.724024][ T917] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 105.732302][ T917] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 105.792049][ T917] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 59ms [ 105.799643][ T917] gfs2: fsid=syz:syz.0: jid=0: Done [ 105.805243][ T6071] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 106.057000][ T5870] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 106.057154][ T5869] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 106.073085][ T5870] CPU: 0 UID: 0 PID: 5870 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 106.073106][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 106.073117][ T5870] Workqueue: gfs2-delete/syz:syz delete_work_func [ 106.073139][ T5870] Call Trace: [ 106.073146][ T5870] [ 106.073153][ T5870] dump_stack_lvl+0x189/0x250 [ 106.073177][ T5870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.073192][ T5870] ? gfs2_meta_read+0x775/0x8b0 [ 106.073218][ T5870] ? __pfx_gfs2_meta_read+0x10/0x10 [ 106.073239][ T5870] ? do_raw_spin_unlock+0x122/0x240 [ 106.073260][ T5870] gfs2_withdraw+0xc8/0x160 [ 106.073278][ T5870] gfs2_meta_buffer+0x225/0x2e0 [ 106.073305][ T5870] inode_go_instantiate+0xdf/0x1260 [ 106.073325][ T5870] ? do_raw_spin_lock+0x121/0x290 [ 106.073344][ T5870] ? __pfx_inode_go_instantiate+0x10/0x10 [ 106.073364][ T5870] ? do_raw_spin_unlock+0x122/0x240 [ 106.073386][ T5870] gfs2_instantiate+0x168/0x220 [ 106.073405][ T5870] gfs2_inode_lookup+0x648/0xb10 [ 106.073429][ T5870] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 106.073444][ T5870] ? lockdep_unlock+0x89/0x120 [ 106.073462][ T5870] ? validate_chain+0x897/0x2140 [ 106.073487][ T5870] ? gfs2_lookup_by_inum+0x52/0x100 [ 106.073520][ T5870] gfs2_lookup_by_inum+0x52/0x100 [ 106.073541][ T5870] delete_work_func+0x2c9/0x490 [ 106.073565][ T5870] ? __pfx_delete_work_func+0x10/0x10 [ 106.073582][ T5870] ? process_scheduled_works+0x9ef/0x17b0 [ 106.073610][ T5870] ? _raw_spin_unlock_irq+0x23/0x50 [ 106.073627][ T5870] ? process_scheduled_works+0x9ef/0x17b0 [ 106.073647][ T5870] ? process_scheduled_works+0x9ef/0x17b0 [ 106.073669][ T5870] process_scheduled_works+0xae1/0x17b0 [ 106.073719][ T5870] ? __pfx_process_scheduled_works+0x10/0x10 [ 106.073756][ T5870] worker_thread+0x8a0/0xda0 [ 106.073787][ T5870] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 106.073813][ T5870] ? __kthread_parkme+0x7b/0x200 [ 106.073844][ T5870] kthread+0x711/0x8a0 [ 106.073864][ T5870] ? __pfx_worker_thread+0x10/0x10 [ 106.073884][ T5870] ? __pfx_kthread+0x10/0x10 [ 106.073902][ T5870] ? _raw_spin_unlock_irq+0x23/0x50 [ 106.073919][ T5870] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.073936][ T5870] ? __pfx_kthread+0x10/0x10 [ 106.073954][ T5870] ret_from_fork+0x4bc/0x870 [ 106.073978][ T5870] ? __pfx_ret_from_fork+0x10/0x10 [ 106.074006][ T5870] ? __switch_to_asm+0x39/0x70 [ 106.074022][ T5870] ? __switch_to_asm+0x33/0x70 [ 106.074038][ T5870] ? __pfx_kthread+0x10/0x10 [ 106.074055][ T5870] ret_from_fork_asm+0x1a/0x30 [ 106.074091][ T5870] [ 106.074097][ T5870] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 106.088354][ T95] gfs2: fsid=syz:syz.0: G: s:EX n:3/2090 f:lyfaqo t:EX d:EX/0 a:0 v:0 r:3 m:20 p:0 [ 106.349152][ T95] gfs2: fsid=syz:syz.0: H: s:EX f:nW e:0 p:6071 [syz.0.20] gfs2_iomap_begin+0x7a3/0x11c0 [ 106.359234][ T95] gfs2: fsid=syz:syz.0: R: n:8336 f:80000000 b:826/826 i:7 q:810 r:0 e:7001 [ 106.368235][ T95] gfs2: fsid=syz:syz.0: B: n:9394 s:15569 f:810 [ 106.374866][ T95] ------------[ cut here ]------------ [ 106.380347][ T95] kernel BUG at fs/gfs2/glock.c:674! [ 106.385653][ T95] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 106.391966][ T95] CPU: 1 UID: 0 PID: 95 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(full) [ 106.401220][ T95] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 106.411250][ T95] Workqueue: gfs2-glock/syz:syz glock_work_func [ 106.417470][ T95] RIP: 0010:do_xmote+0x706/0x750 [ 106.422395][ T95] Code: 38 c1 0f 8c a9 fe ff ff 48 89 df e8 64 77 29 fe e9 9c fe ff ff e8 ea cd c3 fd 31 ff 48 89 de ba 01 00 00 00 e8 1b e9 fe ff 90 <0f> 0b e8 d3 cd c3 fd 31 ff 48 89 de ba 01 00 00 00 e8 04 e9 fe ff [ 106.441978][ T95] RSP: 0018:ffffc9000212f9a0 EFLAGS: 00010246 [ 106.448025][ T95] RAX: 992e81f959216400 RBX: ffff88805a6b2bc0 RCX: 0000000000000000 [ 106.455974][ T95] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 106.463922][ T95] RBP: ffffffff8bb183c0 R08: ffff88807b7b687b R09: 1ffff1100f6f6d0f [ 106.471931][ T95] R10: dffffc0000000000 R11: ffffed100f6f6d10 R12: dffffc0000000000 [ 106.479890][ T95] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000015 [ 106.487847][ T95] FS: 0000000000000000(0000) GS:ffff888125e08000(0000) knlGS:0000000000000000 [ 106.496770][ T95] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.503337][ T95] CR2: 0000200000609000 CR3: 000000007897a000 CR4: 00000000003526f0 [ 106.511300][ T95] Call Trace: [ 106.514568][ T95] [ 106.517486][ T95] glock_work_func+0x2a8/0x580 [ 106.522505][ T95] ? process_scheduled_works+0x9ef/0x17b0 [ 106.528207][ T95] ? process_scheduled_works+0x9ef/0x17b0 [ 106.533910][ T95] process_scheduled_works+0xae1/0x17b0 [ 106.539449][ T95] ? __pfx_process_scheduled_works+0x10/0x10 [ 106.545421][ T95] worker_thread+0x8a0/0xda0 [ 106.549998][ T95] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 106.556310][ T95] ? __kthread_parkme+0x7b/0x200 [ 106.561230][ T95] kthread+0x711/0x8a0 [ 106.565276][ T95] ? __pfx_worker_thread+0x10/0x10 [ 106.570367][ T95] ? __pfx_kthread+0x10/0x10 [ 106.574950][ T95] ? _raw_spin_unlock_irq+0x23/0x50 [ 106.580128][ T95] ? lockdep_hardirqs_on+0x9c/0x150 [ 106.585303][ T95] ? __pfx_kthread+0x10/0x10 [ 106.589872][ T95] ret_from_fork+0x4bc/0x870 [ 106.594452][ T95] ? __pfx_ret_from_fork+0x10/0x10 [ 106.599546][ T95] ? __switch_to_asm+0x39/0x70 [ 106.604291][ T95] ? __switch_to_asm+0x33/0x70 [ 106.609032][ T95] ? __pfx_kthread+0x10/0x10 [ 106.613610][ T95] ret_from_fork_asm+0x1a/0x30 [ 106.618366][ T95] [ 106.621372][ T95] Modules linked in: [ 106.625445][ T95] ---[ end trace 0000000000000000 ]--- [ 106.631022][ T95] RIP: 0010:do_xmote+0x706/0x750 [ 106.635967][ T95] Code: 38 c1 0f 8c a9 fe ff ff 48 89 df e8 64 77 29 fe e9 9c fe ff ff e8 ea cd c3 fd 31 ff 48 89 de ba 01 00 00 00 e8 1b e9 fe ff 90 <0f> 0b e8 d3 cd c3 fd 31 ff 48 89 de ba 01 00 00 00 e8 04 e9 fe ff [ 106.655626][ T95] RSP: 0018:ffffc9000212f9a0 EFLAGS: 00010246 [ 106.661731][ T95] RAX: 992e81f959216400 RBX: ffff88805a6b2bc0 RCX: 0000000000000000 [ 106.669771][ T95] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 106.677767][ T95] RBP: ffffffff8bb183c0 R08: ffff88807b7b687b R09: 1ffff1100f6f6d0f [ 106.685716][ T95] R10: dffffc0000000000 R11: ffffed100f6f6d10 R12: dffffc0000000000 [ 106.693745][ T95] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000015 [ 106.701738][ T95] FS: 0000000000000000(0000) GS:ffff888125e08000(0000) knlGS:0000000000000000 [ 106.710692][ T95] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.717302][ T95] CR2: 0000200000609000 CR3: 000000007897a000 CR4: 00000000003526f0 [ 106.725275][ T95] Kernel panic - not syncing: Fatal exception [ 106.731680][ T95] Kernel Offset: disabled [ 106.735992][ T95] Rebooting in 86400 seconds..