Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. 2025/10/28 14:52:44 parsed 1 programs [ 117.492818][ T6172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 121.627577][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.638840][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.670416][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.678287][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.916354][ T6215] chnl_net:caif_netlink_parms(): no params data found [ 122.006103][ T6215] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.013463][ T6215] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.021290][ T6215] bridge_slave_0: entered allmulticast mode [ 122.028309][ T6215] bridge_slave_0: entered promiscuous mode [ 122.036669][ T6215] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.044342][ T6215] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.052420][ T6215] bridge_slave_1: entered allmulticast mode [ 122.060680][ T6215] bridge_slave_1: entered promiscuous mode [ 122.125010][ T6215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.138177][ T6215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.181161][ T6215] team0: Port device team_slave_0 added [ 122.189776][ T6215] team0: Port device team_slave_1 added [ 122.232255][ T6215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.239490][ T6215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.265470][ T6215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.277917][ T6215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.285156][ T6215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.311207][ T6215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.362677][ T6215] hsr_slave_0: entered promiscuous mode [ 122.369031][ T6215] hsr_slave_1: entered promiscuous mode [ 122.882625][ T6215] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.895440][ T6215] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.907040][ T6215] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 122.917270][ T6215] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.018266][ T6215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.045774][ T6215] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.059854][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.067082][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.085693][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.092995][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.339826][ T6215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.403302][ T6215] veth0_vlan: entered promiscuous mode [ 123.419055][ T6215] veth1_vlan: entered promiscuous mode [ 123.464608][ T6215] veth0_macvtap: entered promiscuous mode [ 123.478384][ T6215] veth1_macvtap: entered promiscuous mode [ 123.502027][ T6215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.514746][ T6215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.539206][ T3552] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.574504][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.610227][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.618980][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.789771][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.898509][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.957546][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.026708][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.775212][ T5148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.791100][ T5148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.804240][ T5148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.812448][ T5148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.821757][ T5148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/10/28 14:52:56 executed programs: 0 [ 126.016614][ T5921] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.025434][ T5921] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.033821][ T5921] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.042001][ T5921] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.050247][ T5921] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.329666][ T6360] chnl_net:caif_netlink_parms(): no params data found [ 126.441096][ T13] bridge_slave_1: left allmulticast mode [ 126.446792][ T13] bridge_slave_1: left promiscuous mode [ 126.453308][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.464245][ T13] bridge_slave_0: left allmulticast mode [ 126.472106][ T13] bridge_slave_0: left promiscuous mode [ 126.478017][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.793969][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.807112][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.825787][ T13] bond0 (unregistering): Released all slaves [ 126.926761][ T6360] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.942834][ T6360] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.955320][ T6360] bridge_slave_0: entered allmulticast mode [ 126.966393][ T6360] bridge_slave_0: entered promiscuous mode [ 126.981409][ T13] hsr_slave_0: left promiscuous mode [ 126.987733][ T13] hsr_slave_1: left promiscuous mode [ 126.994470][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.002004][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.017786][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.025321][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.051204][ T13] veth1_macvtap: left promiscuous mode [ 127.056958][ T13] veth0_macvtap: left promiscuous mode [ 127.064187][ T13] veth1_vlan: left promiscuous mode [ 127.069631][ T13] veth0_vlan: left promiscuous mode [ 127.518173][ T13] team0 (unregistering): Port device team_slave_1 removed [ 127.556396][ T13] team0 (unregistering): Port device team_slave_0 removed [ 127.797319][ T6360] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.804945][ T6360] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.812252][ T6360] bridge_slave_1: entered allmulticast mode [ 127.823159][ T6360] bridge_slave_1: entered promiscuous mode [ 127.867866][ T6360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.882186][ T6360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.952623][ T6360] team0: Port device team_slave_0 added [ 127.965750][ T6360] team0: Port device team_slave_1 added [ 128.021942][ T6360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.028929][ T6360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.056452][ T6360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.072862][ T6360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.080041][ T5921] Bluetooth: hci0: command tx timeout [ 128.090445][ T6360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.116913][ T6360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.201776][ T6360] hsr_slave_0: entered promiscuous mode [ 128.208702][ T6360] hsr_slave_1: entered promiscuous mode [ 129.316514][ T6360] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 129.328491][ T6360] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 129.341728][ T6360] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 129.357439][ T6360] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 129.438804][ T6360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.458740][ T6360] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.470811][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.477997][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.492908][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.500065][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.647513][ T6360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.687514][ T6360] veth0_vlan: entered promiscuous mode [ 129.698375][ T6360] veth1_vlan: entered promiscuous mode [ 129.726816][ T6360] veth0_macvtap: entered promiscuous mode [ 129.736651][ T6360] veth1_macvtap: entered promiscuous mode [ 129.755922][ T6360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.770221][ T6360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.785134][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.794138][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.803581][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.813313][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.867920][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.878658][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.908441][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.916455][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.159533][ T5921] Bluetooth: hci0: command tx timeout [ 130.202483][ T6459] loop0: detected capacity change from 0 to 32768 [ 130.228500][ T6459] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 130.239171][ T6459] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 130.281958][ T6459] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 130.294219][ T5919] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 130.302296][ T5919] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 130.368962][ T5919] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 66ms [ 130.377734][ T5919] gfs2: fsid=syz:syz.0: jid=0: Done [ 130.383815][ T6459] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 130.655428][ T10] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 130.671038][ T5893] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 130.691124][ T1210] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 130.712003][ T6461] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 130.734129][ T6461] CPU: 0 UID: 0 PID: 6461 Comm: kworker/R-gfs2- Not tainted syzkaller #0 PREEMPT(full) [ 130.734164][ T6461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 130.734174][ T6461] Workqueue: gfs2-delete/syz:syz delete_work_func [ 130.734224][ T6461] Call Trace: [ 130.734231][ T6461] [ 130.734239][ T6461] dump_stack_lvl+0x189/0x250 [ 130.734267][ T6461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.734287][ T6461] ? gfs2_meta_read+0x775/0x8b0 [ 130.734311][ T6461] ? __pfx_gfs2_meta_read+0x10/0x10 [ 130.734330][ T6461] ? do_raw_spin_unlock+0x122/0x240 [ 130.734357][ T6461] gfs2_withdraw+0xc3/0x1b0 [ 130.734381][ T6461] gfs2_meta_buffer+0x225/0x2e0 [ 130.734405][ T6461] inode_go_instantiate+0xdf/0x1260 [ 130.734443][ T6461] ? do_raw_spin_lock+0x121/0x290 [ 130.734469][ T6461] ? __pfx_inode_go_instantiate+0x10/0x10 [ 130.734495][ T6461] ? do_raw_spin_unlock+0x122/0x240 [ 130.734523][ T6461] gfs2_instantiate+0x168/0x220 [ 130.734550][ T6461] gfs2_inode_lookup+0x648/0xb10 [ 130.734580][ T6461] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 130.734611][ T6461] ? gfs2_lookup_by_inum+0x52/0x100 [ 130.734640][ T6461] ? do_raw_spin_lock+0x121/0x290 [ 130.734671][ T6461] gfs2_lookup_by_inum+0x52/0x100 [ 130.734697][ T6461] delete_work_func+0x2c9/0x490 [ 130.734727][ T6461] ? __pfx_delete_work_func+0x10/0x10 [ 130.734751][ T6461] ? process_scheduled_works+0x9ef/0x17b0 [ 130.734777][ T6461] ? _raw_spin_unlock_irq+0x23/0x50 [ 130.734797][ T6461] ? process_scheduled_works+0x9ef/0x17b0 [ 130.734816][ T6461] ? process_scheduled_works+0x9ef/0x17b0 [ 130.734838][ T6461] process_scheduled_works+0xae1/0x17b0 [ 130.734887][ T6461] ? __pfx_process_scheduled_works+0x10/0x10 [ 130.734918][ T6461] ? assign_work+0x381/0x410 [ 130.734943][ T6461] rescuer_thread+0x53c/0xdd0 [ 130.734970][ T6461] ? rescuer_thread+0xbb/0xdd0 [ 130.735011][ T6461] kthread+0x711/0x8a0 [ 130.735038][ T6461] ? __pfx_rescuer_thread+0x10/0x10 [ 130.735059][ T6461] ? __pfx_kthread+0x10/0x10 [ 130.735084][ T6461] ? _raw_spin_unlock_irq+0x23/0x50 [ 130.735104][ T6461] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.735123][ T6461] ? __pfx_kthread+0x10/0x10 [ 130.735154][ T6461] ret_from_fork+0x4bc/0x870 [ 130.735176][ T6461] ? __pfx_ret_from_fork+0x10/0x10 [ 130.735203][ T6461] ? __switch_to_asm+0x39/0x70 [ 130.735218][ T6461] ? __switch_to_asm+0x33/0x70 [ 130.735232][ T6461] ? __pfx_kthread+0x10/0x10 [ 130.735255][ T6461] ret_from_fork_asm+0x1a/0x30 [ 130.735286][ T6461] [ 130.735293][ T6461] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 130.754762][ T6459] loop0: writeback error on inode 9394, offset 4608000, sector 27864 [ 130.999912][ T6464] gfs2: fsid=syz:syz.0: gfs2_create_inode: -5 2025/10/28 14:53:01 executed programs: 3 [ 132.239935][ T5921] Bluetooth: hci0: command tx timeout [ 132.962898][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.969484][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.319444][ T5921] Bluetooth: hci0: command tx timeout [ 135.842459][ T6465] gfs2: fsid=syz:syz.0: file system withdrawn [ 136.177029][ T6469] loop0: detected capacity change from 0 to 32768 [ 136.194520][ T6469] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 136.203546][ T6469] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 136.233301][ T6469] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 136.243576][ T6465] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 136.250599][ T6465] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 136.303671][ T6465] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 53ms [ 136.311610][ T6465] gfs2: fsid=syz:syz.0: jid=0: Done [ 136.317091][ T6469] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 136.572548][ T24] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 136.588520][ T5919] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 136.604292][ T115] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 136.619939][ T43] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 136.636284][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 136.636293][ T6469] gfs2: fsid=syz:syz.0: GFS2:adding buf while withdrawn! 0x3c54 [ 136.636308][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 136.636317][ T43] Workqueue: gfs2-delete/syz:syz delete_work_func [ 136.636344][ T43] Call Trace: [ 136.636352][ T43] [ 136.636359][ T43] dump_stack_lvl+0x189/0x250 [ 136.636386][ T43] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.636402][ T43] ? gfs2_meta_read+0x775/0x8b0 [ 136.636422][ T43] ? __pfx_gfs2_meta_read+0x10/0x10 [ 136.636438][ T43] ? do_raw_spin_unlock+0x122/0x240 [ 136.636463][ T43] gfs2_withdraw+0xc3/0x1b0 [ 136.636486][ T43] gfs2_meta_buffer+0x225/0x2e0 [ 136.636511][ T43] inode_go_instantiate+0xdf/0x1260 [ 136.636536][ T43] ? do_raw_spin_lock+0x121/0x290 [ 136.636562][ T43] ? __pfx_inode_go_instantiate+0x10/0x10 [ 136.636587][ T43] ? do_raw_spin_unlock+0x122/0x240 [ 136.636615][ T43] gfs2_instantiate+0x168/0x220 [ 136.636640][ T43] gfs2_inode_lookup+0x648/0xb10 [ 136.636669][ T43] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 136.636699][ T43] ? gfs2_lookup_by_inum+0x52/0x100 [ 136.636737][ T43] ? do_raw_spin_lock+0x121/0x290 [ 136.636767][ T43] gfs2_lookup_by_inum+0x52/0x100 [ 136.636793][ T43] delete_work_func+0x2c9/0x490 [ 136.636823][ T43] ? __pfx_delete_work_func+0x10/0x10 [ 136.636845][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 136.636872][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 136.636891][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 136.636909][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 136.636930][ T43] process_scheduled_works+0xae1/0x17b0 [ 136.636976][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 136.637013][ T43] worker_thread+0x8a0/0xda0 [ 136.637057][ T43] kthread+0x711/0x8a0 [ 136.637084][ T43] ? __pfx_worker_thread+0x10/0x10 [ 136.637103][ T43] ? __pfx_kthread+0x10/0x10 [ 136.637127][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 136.637146][ T43] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.637165][ T43] ? __pfx_kthread+0x10/0x10 [ 136.637189][ T43] ret_from_fork+0x4bc/0x870 [ 136.637210][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 136.637235][ T43] ? __switch_to_asm+0x39/0x70 [ 136.637249][ T43] ? __switch_to_asm+0x33/0x70 [ 136.637263][ T43] ? __pfx_kthread+0x10/0x10 [ 136.637287][ T43] ret_from_fork_asm+0x1a/0x30 [ 136.637319][ T43] [ 136.637326][ T43] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 136.650984][ T6469] gfs2: fsid=syz:syz.0: GFS2:adding buf while withdrawn! 0x3c54 2025/10/28 14:53:07 executed programs: 4 [ 141.684901][ T115] gfs2: fsid=syz:syz.0: file system withdrawn [ 142.024176][ T6479] loop0: detected capacity change from 0 to 32768 [ 142.055032][ T6479] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 142.064273][ T6479] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 142.091031][ T6479] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 142.101885][ T115] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 142.108695][ T115] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 142.174457][ T115] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 65ms [ 142.182072][ T115] gfs2: fsid=syz:syz.0: jid=0: Done [ 142.187981][ T6479] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 142.435360][ T6465] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 142.435404][ T43] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 142.450829][ T1210] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 142.482451][ T9] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 142.497868][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 142.497891][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 142.497902][ T43] Workqueue: gfs2-delete/syz:syz delete_work_func [ 142.497929][ T43] Call Trace: [ 142.497937][ T43] [ 142.497944][ T43] dump_stack_lvl+0x189/0x250 [ 142.497980][ T43] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.498001][ T43] ? gfs2_meta_read+0x775/0x8b0 [ 142.498023][ T43] ? __pfx_gfs2_meta_read+0x10/0x10 [ 142.498042][ T43] ? do_raw_spin_unlock+0x122/0x240 [ 142.498070][ T43] gfs2_withdraw+0xc3/0x1b0 [ 142.498094][ T43] gfs2_meta_buffer+0x225/0x2e0 [ 142.498125][ T43] inode_go_instantiate+0xdf/0x1260 [ 142.498150][ T43] ? do_raw_spin_lock+0x121/0x290 [ 142.498177][ T43] ? __pfx_inode_go_instantiate+0x10/0x10 [ 142.498201][ T43] ? do_raw_spin_unlock+0x122/0x240 [ 142.498229][ T43] gfs2_instantiate+0x168/0x220 [ 142.498254][ T43] gfs2_inode_lookup+0x648/0xb10 [ 142.498284][ T43] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 142.498304][ T43] ? lockdep_unlock+0x89/0x120 [ 142.498320][ T43] ? validate_chain+0x897/0x2140 [ 142.498344][ T43] ? gfs2_lookup_by_inum+0x52/0x100 [ 142.498381][ T43] gfs2_lookup_by_inum+0x52/0x100 [ 142.498407][ T43] delete_work_func+0x2c9/0x490 [ 142.498435][ T43] ? __pfx_delete_work_func+0x10/0x10 [ 142.498459][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 142.498484][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 142.498503][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 142.498522][ T43] ? process_scheduled_works+0x9ef/0x17b0 [ 142.498543][ T43] process_scheduled_works+0xae1/0x17b0 [ 142.498591][ T43] ? __pfx_process_scheduled_works+0x10/0x10 [ 142.498626][ T43] worker_thread+0x8a0/0xda0 [ 142.498671][ T43] kthread+0x711/0x8a0 [ 142.498697][ T43] ? __pfx_worker_thread+0x10/0x10 [ 142.498716][ T43] ? __pfx_kthread+0x10/0x10 [ 142.498740][ T43] ? _raw_spin_unlock_irq+0x23/0x50 [ 142.498759][ T43] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.498778][ T43] ? __pfx_kthread+0x10/0x10 [ 142.498801][ T43] ret_from_fork+0x4bc/0x870 [ 142.498824][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 142.498852][ T43] ? __switch_to_asm+0x39/0x70 [ 142.498867][ T43] ? __switch_to_asm+0x33/0x70 [ 142.498881][ T43] ? __pfx_kthread+0x10/0x10 [ 142.498904][ T43] ret_from_fork_asm+0x1a/0x30 [ 142.498936][ T43] [ 142.498998][ T43] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 142.507198][ T11] gfs2: fsid=syz:syz.0: G: s:EX n:3/2090 f:lyfaqo t:EX d:EX/0 a:0 v:0 r:3 m:20 p:0 [ 142.748390][ T11] gfs2: fsid=syz:syz.0: H: s:EX f:nW e:0 p:6479 [syz.0.19] gfs2_iomap_begin+0x7a3/0x11c0 [ 142.758545][ T11] gfs2: fsid=syz:syz.0: R: n:8336 f:80000000 b:1078/1078 i:7 q:1062 r:0 e:7001 [ 142.767753][ T11] gfs2: fsid=syz:syz.0: B: n:9394 s:15317 f:1062 [ 142.774716][ T11] ------------[ cut here ]------------ [ 142.780226][ T11] kernel BUG at fs/gfs2/glock.c:674! [ 142.785521][ T11] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 142.791840][ T11] CPU: 0 UID: 0 PID: 11 Comm: kworker/0:0H Not tainted syzkaller #0 PREEMPT(full) [ 142.801103][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 142.811140][ T11] Workqueue: gfs2-glock/syz:syz glock_work_func [ 142.817381][ T11] RIP: 0010:do_xmote+0x706/0x750 [ 142.822320][ T11] Code: 38 c1 0f 8c a9 fe ff ff 48 89 df e8 54 a7 27 fe e9 9c fe ff ff e8 7a 6f c1 fd 31 ff 48 89 de ba 01 00 00 00 e8 1b e9 fe ff 90 <0f> 0b e8 63 6f c1 fd 31 ff 48 89 de ba 01 00 00 00 e8 04 e9 fe ff [ 142.841917][ T11] RSP: 0018:ffffc900001079a0 EFLAGS: 00010246 [ 142.847976][ T11] RAX: a7b8bea1bff7e900 RBX: ffff8880306fe580 RCX: 0000000000000000 [ 142.855944][ T11] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 142.863897][ T11] RBP: ffffffff8bb19160 R08: ffff88807500c21b R09: 1ffff1100ea01843 [ 142.871852][ T11] R10: dffffc0000000000 R11: ffffed100ea01844 R12: dffffc0000000000 [ 142.879841][ T11] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000015 [ 142.887891][ T11] FS: 0000000000000000(0000) GS:ffff888125eeb000(0000) knlGS:0000000000000000 [ 142.896818][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.903384][ T11] CR2: 000020000061f000 CR3: 000000002f420000 CR4: 00000000003526f0 [ 142.911345][ T11] Call Trace: [ 142.914617][ T11] [ 142.917537][ T11] glock_work_func+0x2a8/0x580 [ 142.922300][ T11] ? process_scheduled_works+0x9ef/0x17b0 [ 142.928005][ T11] ? process_scheduled_works+0x9ef/0x17b0 [ 142.933716][ T11] process_scheduled_works+0xae1/0x17b0 [ 142.939253][ T11] ? __pfx_process_scheduled_works+0x10/0x10 [ 142.945223][ T11] worker_thread+0x8a0/0xda0 [ 142.949806][ T11] kthread+0x711/0x8a0 [ 142.953863][ T11] ? __pfx_worker_thread+0x10/0x10 [ 142.958955][ T11] ? __pfx_kthread+0x10/0x10 [ 142.963528][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 142.968708][ T11] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.973921][ T11] ? __pfx_kthread+0x10/0x10 [ 142.978513][ T11] ret_from_fork+0x4bc/0x870 [ 142.983093][ T11] ? __pfx_ret_from_fork+0x10/0x10 [ 142.988199][ T11] ? __switch_to_asm+0x39/0x70 [ 142.993035][ T11] ? __switch_to_asm+0x33/0x70 [ 142.997778][ T11] ? __pfx_kthread+0x10/0x10 [ 143.002536][ T11] ret_from_fork_asm+0x1a/0x30 [ 143.007286][ T11] [ 143.010288][ T11] Modules linked in: [ 143.014306][ T11] ---[ end trace 0000000000000000 ]--- [ 143.019795][ T11] RIP: 0010:do_xmote+0x706/0x750 [ 143.024746][ T11] Code: 38 c1 0f 8c a9 fe ff ff 48 89 df e8 54 a7 27 fe e9 9c fe ff ff e8 7a 6f c1 fd 31 ff 48 89 de ba 01 00 00 00 e8 1b e9 fe ff 90 <0f> 0b e8 63 6f c1 fd 31 ff 48 89 de ba 01 00 00 00 e8 04 e9 fe ff [ 143.044455][ T11] RSP: 0018:ffffc900001079a0 EFLAGS: 00010246 [ 143.050547][ T11] RAX: a7b8bea1bff7e900 RBX: ffff8880306fe580 RCX: 0000000000000000 [ 143.058523][ T11] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 143.066697][ T11] RBP: ffffffff8bb19160 R08: ffff88807500c21b R09: 1ffff1100ea01843 [ 143.074788][ T11] R10: dffffc0000000000 R11: ffffed100ea01844 R12: dffffc0000000000 [ 143.082871][ T11] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000015 [ 143.090873][ T11] FS: 0000000000000000(0000) GS:ffff888125eeb000(0000) knlGS:0000000000000000 [ 143.099828][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.106412][ T11] CR2: 000020000061f000 CR3: 000000002f420000 CR4: 00000000003526f0 [ 143.114423][ T11] Kernel panic - not syncing: Fatal exception [ 143.120803][ T11] Kernel Offset: disabled [ 143.125127][ T11] Rebooting in 86400 seconds..