Warning: Permanently added '10.128.1.208' (ED25519) to the list of known hosts. 2025/10/14 12:07:21 parsed 1 programs [ 70.580305][ T5830] cgroup: Unknown subsys name 'net' [ 70.729687][ T5830] cgroup: Unknown subsys name 'cpuset' [ 70.738392][ T5830] cgroup: Unknown subsys name 'rlimit' [ 71.421321][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.427827][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.195854][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.800717][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.029362][ T2980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.041304][ T2980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.064723][ T2980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.074387][ T2980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.779604][ T5897] chnl_net:caif_netlink_parms(): no params data found [ 77.870648][ T5897] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.878186][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.885375][ T5897] bridge_slave_0: entered allmulticast mode [ 77.893523][ T5897] bridge_slave_0: entered promiscuous mode [ 77.902675][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.910381][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.918028][ T5897] bridge_slave_1: entered allmulticast mode [ 77.925115][ T5897] bridge_slave_1: entered promiscuous mode [ 77.997546][ T5897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.011795][ T5897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.054583][ T5897] team0: Port device team_slave_0 added [ 78.062192][ T5897] team0: Port device team_slave_1 added [ 78.092476][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.099761][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.125852][ T5897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.139136][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.146567][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.173037][ T5897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.223702][ T5897] hsr_slave_0: entered promiscuous mode [ 78.230330][ T5897] hsr_slave_1: entered promiscuous mode [ 78.356905][ T5897] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.368361][ T5897] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.378462][ T5897] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.388484][ T5897] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.458568][ T5897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.486718][ T5897] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.500579][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.507812][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.523057][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.530339][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.693278][ T5897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.735867][ T5897] veth0_vlan: entered promiscuous mode [ 78.752035][ T5897] veth1_vlan: entered promiscuous mode [ 78.780370][ T5897] veth0_macvtap: entered promiscuous mode [ 78.794294][ T5897] veth1_macvtap: entered promiscuous mode [ 78.813947][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.829622][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.844572][ T77] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.854688][ T3009] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.865868][ T3009] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.875318][ T3009] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.982132][ T77] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.078633][ T77] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.145213][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.146102][ T77] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.154255][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.171820][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.181014][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.190887][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.227796][ T77] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/10/14 12:07:32 executed programs: 0 [ 79.675991][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.684349][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.692174][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.701786][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.709857][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.852477][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 79.930000][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.937310][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.944461][ T5941] bridge_slave_0: entered allmulticast mode [ 79.952081][ T5941] bridge_slave_0: entered promiscuous mode [ 79.960185][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.967731][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.974913][ T5941] bridge_slave_1: entered allmulticast mode [ 79.982695][ T5941] bridge_slave_1: entered promiscuous mode [ 80.021949][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.034423][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.075103][ T5941] team0: Port device team_slave_0 added [ 80.083680][ T5941] team0: Port device team_slave_1 added [ 80.110009][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.117900][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.144316][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.160996][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.168354][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.194709][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.245941][ T5941] hsr_slave_0: entered promiscuous mode [ 80.252502][ T5941] hsr_slave_1: entered promiscuous mode [ 80.260006][ T5941] debugfs: 'hsr0' already exists in 'hsr' [ 80.265828][ T5941] Cannot create hsr debugfs directory [ 81.736880][ T52] Bluetooth: hci0: command tx timeout [ 81.870807][ T77] bridge_slave_1: left allmulticast mode [ 81.883259][ T77] bridge_slave_1: left promiscuous mode [ 81.897450][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.918700][ T77] bridge_slave_0: left allmulticast mode [ 81.924471][ T77] bridge_slave_0: left promiscuous mode [ 81.946451][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.295094][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.312786][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.324098][ T77] bond0 (unregistering): Released all slaves [ 82.450570][ T77] hsr_slave_0: left promiscuous mode [ 82.460576][ T77] hsr_slave_1: left promiscuous mode [ 82.466897][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.474314][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.482774][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.490372][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.511558][ T77] veth1_macvtap: left promiscuous mode [ 82.517736][ T77] veth0_macvtap: left promiscuous mode [ 82.523964][ T77] veth1_vlan: left promiscuous mode [ 82.529794][ T77] veth0_vlan: left promiscuous mode [ 82.953753][ T77] team0 (unregistering): Port device team_slave_1 removed [ 82.980167][ T77] team0 (unregistering): Port device team_slave_0 removed [ 83.393427][ T5941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.405511][ T5941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.419789][ T5941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.442370][ T5941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.713212][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.750056][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.773428][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.780655][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.822049][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.829271][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.836490][ T52] Bluetooth: hci0: command tx timeout [ 84.132256][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.202128][ T5941] veth0_vlan: entered promiscuous mode [ 84.219535][ T5941] veth1_vlan: entered promiscuous mode [ 84.263814][ T5941] veth0_macvtap: entered promiscuous mode [ 84.278145][ T5941] veth1_macvtap: entered promiscuous mode [ 84.302817][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.320049][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.341145][ T77] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.358927][ T77] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.403185][ T77] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.428778][ T77] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.467111][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.475054][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.525192][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.540416][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.941231][ T6027] loop0: detected capacity change from 0 to 32768 [ 84.962916][ T6027] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 84.971371][ T6027] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 85.034606][ T6027] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 85.045007][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 85.054231][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 85.123977][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 69ms [ 85.131829][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 85.140103][ T6027] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 85.461731][ T10] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 85.478294][ T5920] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 85.493932][ T9] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 85.509728][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 85.509748][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 85.509757][ T9] Workqueue: gfs2-delete/syz:syz delete_work_func [ 85.509793][ T9] Call Trace: [ 85.509799][ T9] [ 85.509807][ T9] dump_stack_lvl+0x189/0x250 [ 85.509827][ T9] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.509842][ T9] ? gfs2_meta_read+0x775/0x8b0 [ 85.509868][ T9] ? __pfx_gfs2_meta_read+0x10/0x10 [ 85.509888][ T9] ? do_raw_spin_unlock+0x122/0x240 [ 85.509907][ T9] gfs2_withdraw+0xc8/0x160 [ 85.509925][ T9] gfs2_meta_buffer+0x225/0x2e0 [ 85.509951][ T9] inode_go_instantiate+0xdf/0x1260 [ 85.509977][ T9] ? do_raw_spin_lock+0x121/0x290 [ 85.509996][ T9] ? __pfx_inode_go_instantiate+0x10/0x10 [ 85.510016][ T9] ? do_raw_spin_unlock+0x122/0x240 [ 85.510037][ T9] gfs2_instantiate+0x168/0x220 [ 85.510056][ T9] gfs2_inode_lookup+0x648/0xb10 [ 85.510079][ T9] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 85.510103][ T9] ? gfs2_lookup_by_inum+0x52/0x100 [ 85.510126][ T9] ? do_raw_spin_lock+0x121/0x290 [ 85.510147][ T9] gfs2_lookup_by_inum+0x52/0x100 [ 85.510166][ T9] delete_work_func+0x2c9/0x490 [ 85.510189][ T9] ? __pfx_delete_work_func+0x10/0x10 [ 85.510205][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 85.510231][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 85.510247][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 85.510272][ T9] ? process_scheduled_works+0x9ef/0x17b0 [ 85.510292][ T9] process_scheduled_works+0xae1/0x17b0 [ 85.510336][ T9] ? __pfx_process_scheduled_works+0x10/0x10 [ 85.510373][ T9] worker_thread+0x8a0/0xda0 [ 85.510418][ T9] kthread+0x711/0x8a0 [ 85.510438][ T9] ? __pfx_worker_thread+0x10/0x10 [ 85.510458][ T9] ? __pfx_kthread+0x10/0x10 [ 85.510474][ T9] ? _raw_spin_unlock_irq+0x23/0x50 [ 85.510492][ T9] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.510509][ T9] ? __pfx_kthread+0x10/0x10 [ 85.510526][ T9] ret_from_fork+0x4bc/0x870 [ 85.510551][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 85.510579][ T9] ? __switch_to_asm+0x39/0x70 [ 85.510596][ T9] ? __switch_to_asm+0x33/0x70 [ 85.510613][ T9] ? __pfx_kthread+0x10/0x10 [ 85.510631][ T9] ret_from_fork_asm+0x1a/0x30 [ 85.510668][ T9] [ 85.510674][ T9] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 85.514156][ T6027] gfs2: fsid=syz:syz.0: GFS2:adding buf while withdrawn! 0x3a5c [ 85.755216][ T6027] gfs2: fsid=syz:syz.0: GFS2:adding buf while withdrawn! 0x3a5c 2025/10/14 12:07:38 executed programs: 3 [ 85.896475][ T52] Bluetooth: hci0: command tx timeout [ 86.777651][ T48] cfg80211: failed to load regulatory.db [ 87.976528][ T52] Bluetooth: hci0: command tx timeout [ 90.540391][ T10] gfs2: fsid=syz:syz.0: file system withdrawn [ 90.867871][ T6039] loop0: detected capacity change from 0 to 32768 [ 90.887698][ T6039] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 90.906468][ T6039] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 90.934697][ T6039] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 90.951841][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 90.959292][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 91.019041][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 59ms [ 91.026777][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 91.031996][ T6039] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 91.284404][ T5860] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 91.299923][ T48] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 91.315852][ T90] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 91.331283][ T24] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 91.346975][ T5860] CPU: 1 UID: 0 PID: 5860 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 91.346997][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 91.347008][ T5860] Workqueue: gfs2-delete/syz:syz delete_work_func [ 91.347032][ T5860] Call Trace: [ 91.347039][ T5860] [ 91.347047][ T5860] dump_stack_lvl+0x189/0x250 [ 91.347070][ T5860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.347086][ T5860] ? gfs2_meta_read+0x775/0x8b0 [ 91.347112][ T5860] ? __pfx_gfs2_meta_read+0x10/0x10 [ 91.347134][ T5860] ? do_raw_spin_unlock+0x122/0x240 [ 91.347156][ T5860] gfs2_withdraw+0xc8/0x160 [ 91.347175][ T5860] gfs2_meta_buffer+0x225/0x2e0 [ 91.347201][ T5860] inode_go_instantiate+0xdf/0x1260 [ 91.347222][ T5860] ? do_raw_spin_lock+0x121/0x290 [ 91.347240][ T5860] ? __pfx_inode_go_instantiate+0x10/0x10 [ 91.347260][ T5860] ? do_raw_spin_unlock+0x122/0x240 [ 91.347282][ T5860] gfs2_instantiate+0x168/0x220 [ 91.347303][ T5860] gfs2_inode_lookup+0x648/0xb10 [ 91.347328][ T5860] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 91.347352][ T5860] ? gfs2_lookup_by_inum+0x52/0x100 [ 91.347376][ T5860] ? do_raw_spin_lock+0x121/0x290 [ 91.347400][ T5860] gfs2_lookup_by_inum+0x52/0x100 [ 91.347422][ T5860] delete_work_func+0x2c9/0x490 [ 91.347447][ T5860] ? __pfx_delete_work_func+0x10/0x10 [ 91.347464][ T5860] ? process_scheduled_works+0x9ef/0x17b0 [ 91.347493][ T5860] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.347511][ T5860] ? process_scheduled_works+0x9ef/0x17b0 [ 91.347531][ T5860] ? process_scheduled_works+0x9ef/0x17b0 [ 91.347555][ T5860] process_scheduled_works+0xae1/0x17b0 [ 91.347615][ T5860] ? __pfx_process_scheduled_works+0x10/0x10 [ 91.347651][ T5860] worker_thread+0x8a0/0xda0 [ 91.347675][ T5860] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 91.347702][ T5860] ? __kthread_parkme+0x7b/0x200 [ 91.347735][ T5860] kthread+0x711/0x8a0 [ 91.347756][ T5860] ? __pfx_worker_thread+0x10/0x10 [ 91.347778][ T5860] ? __pfx_kthread+0x10/0x10 [ 91.347797][ T5860] ? _raw_spin_unlock_irq+0x23/0x50 [ 91.347815][ T5860] ? lockdep_hardirqs_on+0x9c/0x150 [ 91.347833][ T5860] ? __pfx_kthread+0x10/0x10 [ 91.347851][ T5860] ret_from_fork+0x4bc/0x870 [ 91.347875][ T5860] ? __pfx_ret_from_fork+0x10/0x10 [ 91.347904][ T5860] ? __switch_to_asm+0x39/0x70 [ 91.347921][ T5860] ? __switch_to_asm+0x33/0x70 [ 91.347938][ T5860] ? __pfx_kthread+0x10/0x10 [ 91.347957][ T5860] ret_from_fork_asm+0x1a/0x30 [ 91.347993][ T5860] [ 91.348000][ T5860] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 91.380813][ T6039] loop0: writeback error on inode 9394, offset 4736000, sector 28116 [ 91.599387][ T6045] gfs2: fsid=syz:syz.0: gfs2_create_inode: -5 2025/10/14 12:07:44 executed programs: 4 [ 96.459462][ T90] gfs2: fsid=syz:syz.0: file system withdrawn [ 96.788722][ T6049] loop0: detected capacity change from 0 to 32768 [ 96.814951][ T6049] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 96.823748][ T6049] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 96.854003][ T6049] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 96.867455][ T90] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 96.874317][ T90] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 96.944174][ T90] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 69ms [ 96.951725][ T90] gfs2: fsid=syz:syz.0: jid=0: Done [ 96.957379][ T6049] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 97.218102][ T5920] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 97.233990][ T981] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 97.249928][ T10] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 97.265859][ T9] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 97.283051][ T981] CPU: 0 UID: 0 PID: 981 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 97.283076][ T981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 97.283087][ T981] Workqueue: gfs2-delete/syz:syz delete_work_func [ 97.283111][ T981] Call Trace: [ 97.283118][ T981] [ 97.283126][ T981] dump_stack_lvl+0x189/0x250 [ 97.283149][ T981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.283164][ T981] ? gfs2_meta_read+0x775/0x8b0 [ 97.283187][ T981] ? __pfx_gfs2_meta_read+0x10/0x10 [ 97.283208][ T981] ? do_raw_spin_unlock+0x122/0x240 [ 97.283229][ T981] gfs2_withdraw+0xc8/0x160 [ 97.283248][ T981] gfs2_meta_buffer+0x225/0x2e0 [ 97.283275][ T981] inode_go_instantiate+0xdf/0x1260 [ 97.283296][ T981] ? do_raw_spin_lock+0x121/0x290 [ 97.283317][ T981] ? __pfx_inode_go_instantiate+0x10/0x10 [ 97.283336][ T981] ? do_raw_spin_unlock+0x122/0x240 [ 97.283357][ T981] gfs2_instantiate+0x168/0x220 [ 97.283375][ T981] gfs2_inode_lookup+0x648/0xb10 [ 97.283399][ T981] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 97.283424][ T981] ? gfs2_lookup_by_inum+0x52/0x100 [ 97.283448][ T981] ? do_raw_spin_lock+0x121/0x290 [ 97.283473][ T981] gfs2_lookup_by_inum+0x52/0x100 [ 97.283495][ T981] delete_work_func+0x2c9/0x490 [ 97.283520][ T981] ? __pfx_delete_work_func+0x10/0x10 [ 97.283539][ T981] ? process_scheduled_works+0x9ef/0x17b0 [ 97.283568][ T981] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.283586][ T981] ? process_scheduled_works+0x9ef/0x17b0 [ 97.283607][ T981] ? process_scheduled_works+0x9ef/0x17b0 [ 97.283630][ T981] process_scheduled_works+0xae1/0x17b0 [ 97.283682][ T981] ? __pfx_process_scheduled_works+0x10/0x10 [ 97.283720][ T981] worker_thread+0x8a0/0xda0 [ 97.283746][ T981] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 97.283773][ T981] ? __kthread_parkme+0x7b/0x200 [ 97.283806][ T981] kthread+0x711/0x8a0 [ 97.283826][ T981] ? __pfx_worker_thread+0x10/0x10 [ 97.283848][ T981] ? __pfx_kthread+0x10/0x10 [ 97.283865][ T981] ? _raw_spin_unlock_irq+0x23/0x50 [ 97.283883][ T981] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.283900][ T981] ? __pfx_kthread+0x10/0x10 [ 97.283918][ T981] ret_from_fork+0x4bc/0x870 [ 97.283951][ T981] ? __pfx_ret_from_fork+0x10/0x10 [ 97.283980][ T981] ? __switch_to_asm+0x39/0x70 [ 97.283997][ T981] ? __switch_to_asm+0x33/0x70 [ 97.284014][ T981] ? __pfx_kthread+0x10/0x10 [ 97.284032][ T981] ret_from_fork_asm+0x1a/0x30 [ 97.284068][ T981] [ 97.284676][ T981] gfs2: fsid=syz:syz.0: about to withdraw this file system 2025/10/14 12:07:50 executed programs: 5 [ 97.333230][ T6049] loop0: writeback error on inode 9394, offset 3200000, sector 25092 [ 102.379374][ T9] gfs2: fsid=syz:syz.0: file system withdrawn [ 102.717850][ T6058] loop0: detected capacity change from 0 to 32768 [ 102.734991][ T6058] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 102.743625][ T6058] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 102.775909][ T6058] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 102.789282][ T6046] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 102.796089][ T6046] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 102.877252][ T6046] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 81ms [ 102.884781][ T6046] gfs2: fsid=syz:syz.0: jid=0: Done [ 102.890186][ T6058] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 103.139684][ T6046] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9381 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 103.156449][ T90] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 103.171839][ T5982] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9387 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 103.187340][ T5860] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 103.203076][ T90] CPU: 1 UID: 0 PID: 90 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 103.203100][ T90] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 103.203112][ T90] Workqueue: gfs2-delete/syz:syz delete_work_func [ 103.203137][ T90] Call Trace: [ 103.203144][ T90] [ 103.203152][ T90] dump_stack_lvl+0x189/0x250 [ 103.203176][ T90] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.203192][ T90] ? gfs2_meta_read+0x775/0x8b0 [ 103.203218][ T90] ? __pfx_gfs2_meta_read+0x10/0x10 [ 103.203241][ T90] ? do_raw_spin_unlock+0x122/0x240 [ 103.203263][ T90] gfs2_withdraw+0xc8/0x160 [ 103.203283][ T90] gfs2_meta_buffer+0x225/0x2e0 [ 103.203311][ T90] inode_go_instantiate+0xdf/0x1260 [ 103.203333][ T90] ? do_raw_spin_lock+0x121/0x290 [ 103.203353][ T90] ? __pfx_inode_go_instantiate+0x10/0x10 [ 103.203375][ T90] ? do_raw_spin_unlock+0x122/0x240 [ 103.203397][ T90] gfs2_instantiate+0x168/0x220 [ 103.203418][ T90] gfs2_inode_lookup+0x648/0xb10 [ 103.203444][ T90] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 103.203478][ T90] ? gfs2_lookup_by_inum+0x52/0x100 [ 103.203501][ T90] ? do_raw_spin_lock+0x121/0x290 [ 103.203527][ T90] gfs2_lookup_by_inum+0x52/0x100 [ 103.203549][ T90] delete_work_func+0x2c9/0x490 [ 103.203573][ T90] ? __pfx_delete_work_func+0x10/0x10 [ 103.203592][ T90] ? process_scheduled_works+0x9ef/0x17b0 [ 103.203621][ T90] ? _raw_spin_unlock_irq+0x23/0x50 [ 103.203640][ T90] ? process_scheduled_works+0x9ef/0x17b0 [ 103.203660][ T90] ? process_scheduled_works+0x9ef/0x17b0 [ 103.203684][ T90] process_scheduled_works+0xae1/0x17b0 [ 103.203736][ T90] ? __pfx_process_scheduled_works+0x10/0x10 [ 103.203776][ T90] worker_thread+0x8a0/0xda0 [ 103.203825][ T90] kthread+0x711/0x8a0 [ 103.203846][ T90] ? __pfx_worker_thread+0x10/0x10 [ 103.203867][ T90] ? __pfx_kthread+0x10/0x10 [ 103.203884][ T90] ? _raw_spin_unlock_irq+0x23/0x50 [ 103.203901][ T90] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.203919][ T90] ? __pfx_kthread+0x10/0x10 [ 103.203937][ T90] ret_from_fork+0x4bc/0x870 [ 103.203961][ T90] ? __pfx_ret_from_fork+0x10/0x10 [ 103.203991][ T90] ? __switch_to_asm+0x39/0x70 [ 103.204008][ T90] ? __switch_to_asm+0x33/0x70 [ 103.204025][ T90] ? __pfx_kthread+0x10/0x10 [ 103.204043][ T90] ret_from_fork_asm+0x1a/0x30 [ 103.204081][ T90] [ 103.204087][ T90] gfs2: fsid=syz:syz.0: about to withdraw this file system 2025/10/14 12:07:56 executed programs: 6 [ 103.239357][ T6058] loop0: writeback error on inode 9394, offset 3200000, sector 25092 [ 108.299833][ T6046] gfs2: fsid=syz:syz.0: file system withdrawn [ 108.634902][ T6066] loop0: detected capacity change from 0 to 32768 [ 108.669632][ T6066] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 108.679798][ T6066] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 108.713730][ T6066] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 108.723523][ T6046] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 108.731691][ T6046] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 108.791137][ T6046] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 59ms [ 108.800481][ T6046] gfs2: fsid=syz:syz.0: jid=0: Done [ 108.805758][ T6066] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 109.064437][ T6046] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9386 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 109.064517][ T10] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 9390 (bad magic number), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 496 [ 109.085495][ T6046] CPU: 1 UID: 0 PID: 6046 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 109.085518][ T6046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 109.085529][ T6046] Workqueue: gfs2-delete/syz:syz delete_work_func [ 109.085554][ T6046] Call Trace: [ 109.085561][ T6046] [ 109.085568][ T6046] dump_stack_lvl+0x189/0x250 [ 109.085591][ T6046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.085605][ T6046] ? gfs2_meta_read+0x775/0x8b0 [ 109.085631][ T6046] ? __pfx_gfs2_meta_read+0x10/0x10 [ 109.085651][ T6046] ? do_raw_spin_unlock+0x122/0x240 [ 109.085673][ T6046] gfs2_withdraw+0xc8/0x160 [ 109.085692][ T6046] gfs2_meta_buffer+0x225/0x2e0 [ 109.085717][ T6046] inode_go_instantiate+0xdf/0x1260 [ 109.085738][ T6046] ? do_raw_spin_lock+0x121/0x290 [ 109.085757][ T6046] ? __pfx_inode_go_instantiate+0x10/0x10 [ 109.085778][ T6046] ? do_raw_spin_unlock+0x122/0x240 [ 109.085798][ T6046] gfs2_instantiate+0x168/0x220 [ 109.085818][ T6046] gfs2_inode_lookup+0x648/0xb10 [ 109.085842][ T6046] ? __pfx_gfs2_inode_lookup+0x10/0x10 [ 109.085874][ T6046] ? gfs2_lookup_by_inum+0x52/0x100 [ 109.085896][ T6046] ? do_raw_spin_lock+0x121/0x290 [ 109.085920][ T6046] gfs2_lookup_by_inum+0x52/0x100 [ 109.085941][ T6046] delete_work_func+0x2c9/0x490 [ 109.085965][ T6046] ? __pfx_delete_work_func+0x10/0x10 [ 109.085983][ T6046] ? process_scheduled_works+0x9ef/0x17b0 [ 109.086010][ T6046] ? _raw_spin_unlock_irq+0x23/0x50 [ 109.086027][ T6046] ? process_scheduled_works+0x9ef/0x17b0 [ 109.086047][ T6046] ? process_scheduled_works+0x9ef/0x17b0 [ 109.086069][ T6046] process_scheduled_works+0xae1/0x17b0 [ 109.086118][ T6046] ? __pfx_process_scheduled_works+0x10/0x10 [ 109.086156][ T6046] worker_thread+0x8a0/0xda0 [ 109.086184][ T6046] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 109.086209][ T6046] ? __kthread_parkme+0x7b/0x200 [ 109.086241][ T6046] kthread+0x711/0x8a0 [ 109.086261][ T6046] ? __pfx_worker_thread+0x10/0x10 [ 109.086281][ T6046] ? __pfx_kthread+0x10/0x10 [ 109.086299][ T6046] ? _raw_spin_unlock_irq+0x23/0x50 [ 109.086316][ T6046] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.086333][ T6046] ? __pfx_kthread+0x10/0x10 [ 109.086350][ T6046] ret_from_fork+0x4bc/0x870 [ 109.086373][ T6046] ? __pfx_ret_from_fork+0x10/0x10 [ 109.086400][ T6046] ? __switch_to_asm+0x39/0x70 [ 109.086417][ T6046] ? __switch_to_asm+0x33/0x70 [ 109.086433][ T6046] ? __pfx_kthread+0x10/0x10 [ 109.086450][ T6046] ret_from_fork_asm+0x1a/0x30 [ 109.086485][ T6046] [ 109.088899][ T6046] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 109.096637][ T6064] gfs2: fsid=syz:syz.0: G: s:EX n:3/2090 f:lyfaqo t:EX d:EX/0 a:0 v:0 r:3 m:20 p:0 [ 109.352581][ T6064] gfs2: fsid=syz:syz.0: H: s:EX f:nW e:0 p:6072 [syz.0.21] alloc_dinode+0x16a/0x550 [ 109.362501][ T6064] gfs2: fsid=syz:syz.0: R: n:8336 f:80000000 b:826/826 i:7 q:0 r:0 e:7811 [ 109.371457][ T6064] ------------[ cut here ]------------ [ 109.377114][ T6064] kernel BUG at fs/gfs2/glock.c:674! [ 109.382439][ T6064] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 109.388673][ T6064] CPU: 0 UID: 0 PID: 6064 Comm: kworker/0:2H Not tainted syzkaller #0 PREEMPT(full) [ 109.398115][ T6064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 109.408152][ T6064] Workqueue: gfs2-glock/syz:syz glock_work_func [ 109.414381][ T6064] RIP: 0010:do_xmote+0x706/0x750 [ 109.419308][ T6064] Code: 38 c1 0f 8c a9 fe ff ff 48 89 df e8 64 77 29 fe e9 9c fe ff ff e8 ea cd c3 fd 31 ff 48 89 de ba 01 00 00 00 e8 1b e9 fe ff 90 <0f> 0b e8 d3 cd c3 fd 31 ff 48 89 de ba 01 00 00 00 e8 04 e9 fe ff [ 109.438906][ T6064] RSP: 0018:ffffc90002ff79a0 EFLAGS: 00010246 [ 109.445044][ T6064] RAX: 89b42d9b8aee9500 RBX: ffff8880406efb60 RCX: 0000000000000000 [ 109.453010][ T6064] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 109.461435][ T6064] RBP: ffffffff8bb183c0 R08: ffff888075ab0bab R09: 1ffff1100eb56175 [ 109.469404][ T6064] R10: dffffc0000000000 R11: ffffed100eb56176 R12: dffffc0000000000 [ 109.477366][ T6064] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000015 [ 109.485322][ T6064] FS: 0000000000000000(0000) GS:ffff888125d08000(0000) knlGS:0000000000000000 [ 109.494239][ T6064] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.500805][ T6064] CR2: 00007f742dc70f98 CR3: 000000007b84a000 CR4: 00000000003526f0 [ 109.508883][ T6064] Call Trace: [ 109.512320][ T6064] [ 109.515330][ T6064] glock_work_func+0x2a8/0x580 [ 109.520081][ T6064] ? process_scheduled_works+0x9ef/0x17b0 [ 109.525789][ T6064] ? process_scheduled_works+0x9ef/0x17b0 [ 109.531496][ T6064] process_scheduled_works+0xae1/0x17b0 [ 109.537036][ T6064] ? __pfx_process_scheduled_works+0x10/0x10 [ 109.543004][ T6064] worker_thread+0x8a0/0xda0 [ 109.547580][ T6064] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 109.553899][ T6064] ? __kthread_parkme+0x7b/0x200 [ 109.558828][ T6064] kthread+0x711/0x8a0 [ 109.562883][ T6064] ? __pfx_worker_thread+0x10/0x10 [ 109.567979][ T6064] ? __pfx_kthread+0x10/0x10 [ 109.572551][ T6064] ? _raw_spin_unlock_irq+0x23/0x50 [ 109.577727][ T6064] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.583082][ T6064] ? __pfx_kthread+0x10/0x10 [ 109.587658][ T6064] ret_from_fork+0x4bc/0x870 [ 109.592232][ T6064] ? __pfx_ret_from_fork+0x10/0x10 [ 109.597327][ T6064] ? __switch_to_asm+0x39/0x70 [ 109.602075][ T6064] ? __switch_to_asm+0x33/0x70 [ 109.606827][ T6064] ? __pfx_kthread+0x10/0x10 [ 109.611420][ T6064] ret_from_fork_asm+0x1a/0x30 [ 109.616240][ T6064] [ 109.619279][ T6064] Modules linked in: [ 109.623503][ T6064] ---[ end trace 0000000000000000 ]--- [ 109.629336][ T6064] RIP: 0010:do_xmote+0x706/0x750 [ 109.634396][ T6064] Code: 38 c1 0f 8c a9 fe ff ff 48 89 df e8 64 77 29 fe e9 9c fe ff ff e8 ea cd c3 fd 31 ff 48 89 de ba 01 00 00 00 e8 1b e9 fe ff 90 <0f> 0b e8 d3 cd c3 fd 31 ff 48 89 de ba 01 00 00 00 e8 04 e9 fe ff [ 109.654040][ T6064] RSP: 0018:ffffc90002ff79a0 EFLAGS: 00010246 [ 109.660139][ T6064] RAX: 89b42d9b8aee9500 RBX: ffff8880406efb60 RCX: 0000000000000000 [ 109.668123][ T6064] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 109.676210][ T6064] RBP: ffffffff8bb183c0 R08: ffff888075ab0bab R09: 1ffff1100eb56175 [ 109.684252][ T6064] R10: dffffc0000000000 R11: ffffed100eb56176 R12: dffffc0000000000 [ 109.692550][ T6064] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000015 [ 109.700561][ T6064] FS: 0000000000000000(0000) GS:ffff888125d08000(0000) knlGS:0000000000000000 [ 109.709657][ T6064] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.716279][ T6064] CR2: 00007f742dc70f98 CR3: 000000007b84a000 CR4: 00000000003526f0 [ 109.724255][ T6064] Kernel panic - not syncing: Fatal exception [ 109.730444][ T6064] Kernel Offset: disabled [ 109.734755][ T6064] Rebooting in 86400 seconds..