Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. 1970/01/01 00:01:01 parsed 1 programs [ 62.521754][ T4386] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 63.646586][ T4519] chnl_net:caif_netlink_parms(): no params data found [ 63.665305][ T4519] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.666575][ T4519] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.668116][ T4519] device bridge_slave_0 entered promiscuous mode [ 63.670703][ T4519] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.671947][ T4519] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.673537][ T4519] device bridge_slave_1 entered promiscuous mode [ 63.680742][ T4519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.683841][ T4519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.691445][ T4519] team0: Port device team_slave_0 added [ 63.693456][ T4519] team0: Port device team_slave_1 added [ 63.702449][ T4519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.703516][ T4519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.707866][ T4519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.710358][ T4519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.711450][ T4519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.716004][ T4519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.760385][ T4519] device hsr_slave_0 entered promiscuous mode [ 63.809417][ T4519] device hsr_slave_1 entered promiscuous mode [ 64.321918][ T4519] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.341696][ T4519] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.401760][ T4519] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.420539][ T4519] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.511287][ T4519] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.512577][ T4519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.513893][ T4519] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.515121][ T4519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.543627][ T4519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.547773][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.550419][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.552103][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.557277][ T4519] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.560933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.562617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.564106][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.565179][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.575324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.576982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.578441][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.579759][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.590517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.593430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.600624][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.602310][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.604646][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.611341][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.613007][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.617713][ T4519] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.627057][ T4519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.630310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.631920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.633621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.635090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.636723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.764295][ T4519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.785996][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.787395][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.788705][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.792376][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.794139][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.796056][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.798272][ T4519] device veth0_vlan entered promiscuous mode [ 64.803122][ T4519] device veth1_vlan entered promiscuous mode [ 64.805125][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.806606][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.808017][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.816689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.818286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.821171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.823331][ T4519] device veth0_macvtap entered promiscuous mode [ 64.825760][ T4519] device veth1_macvtap entered promiscuous mode [ 64.835114][ T4519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.836462][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.838016][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.840864][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.842501][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.845782][ T4519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.847804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.849782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.853239][ T4519] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.854689][ T4519] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.856137][ T4519] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.857560][ T4519] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.454152][ T349] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.622856][ T425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.624314][ T425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.625791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.637832][ T425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.639551][ T425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.641559][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:06 executed programs: 0 [ 66.157563][ T4789] chnl_net:caif_netlink_parms(): no params data found [ 66.175869][ T4789] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.177271][ T4789] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.178908][ T4789] device bridge_slave_0 entered promiscuous mode [ 66.181783][ T4789] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.183018][ T4789] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.184616][ T4789] device bridge_slave_1 entered promiscuous mode [ 66.193081][ T4789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.195714][ T4789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.204970][ T4789] team0: Port device team_slave_0 added [ 66.206889][ T4789] team0: Port device team_slave_1 added [ 66.215985][ T4789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.217145][ T4789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.223116][ T4789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.225579][ T4789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.226784][ T4789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.231317][ T4789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.280328][ T4789] device hsr_slave_0 entered promiscuous mode [ 66.299370][ T4789] device hsr_slave_1 entered promiscuous mode [ 66.349325][ T4789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.350726][ T4789] Cannot create hsr debugfs directory [ 68.179189][ T4168] Bluetooth: hci0: command 0x0409 tx timeout [ 68.202008][ T349] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.620414][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.621130][ T1967] cfg80211: failed to load regulatory.db [ 69.621598][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.259207][ T4059] Bluetooth: hci0: command 0x041b tx timeout [ 70.422015][ T349] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.472736][ T349] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.453959][ T4789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.500382][ T4789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.540369][ T4789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.580303][ T4789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.650881][ T4789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.654747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.656401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.659914][ T4789] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.662432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.664174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.665752][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.666967][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.668492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.672665][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.674491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.676004][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.677185][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.679954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.682885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.685844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.687879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.689891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.705432][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.707200][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.710276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.712052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.715613][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.717390][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.719988][ T4789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.757899][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.760946][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.764625][ T4789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.770872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.773051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.780518][ T4789] device veth0_vlan entered promiscuous mode [ 71.781736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.783473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.785044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.786522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.790377][ T4789] device veth1_vlan entered promiscuous mode [ 71.797602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.800064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.801650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.803338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.805943][ T4789] device veth0_macvtap entered promiscuous mode [ 71.808271][ T4789] device veth1_macvtap entered promiscuous mode [ 71.813771][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.815560][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.817767][ T4789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.820668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.822242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.823786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.825479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.828162][ T4789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.830226][ T4789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.832363][ T4789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.833638][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.835307][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.838164][ T4789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.840424][ T4789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.841885][ T4789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.843408][ T4789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.861688][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.863717][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.867875][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.872059][ T425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.873272][ T425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.874644][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:11 executed programs: 2 [ 72.021636][ T4963] loop0: detected capacity change from 0 to 32768 [ 72.028271][ T4963] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 72.029809][ T4963] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 72.041190][ T4963] gfs2: fsid=syz:syz.0: journal 0 mapped with 4 extents in 0ms [ 72.043757][ T4164] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 72.044904][ T4164] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 72.062640][ T4164] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 17ms [ 72.064529][ T4164] gfs2: fsid=syz:syz.0: jid=0: Done [ 72.065562][ T4963] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 72.150185][ T4963] attempt to access beyond end of device [ 72.150185][ T4963] loop0: rw=1, want=16778992, limit=32768 [ 72.152206][ T4963] gfs2: fsid=syz:syz.0: Error 10 writing to journal, jid=0 [ 72.153424][ T4963] gfs2: fsid=syz:syz.0: fatal: I/O error(s) [ 72.154380][ T4963] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 72.155625][ T4963] BUG: sleeping function called from invalid context at fs/gfs2/glock.c:1281 [ 72.157054][ T4963] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 4963, name: syz.0.16 [ 72.158563][ T4963] 5 locks held by syz.0.16/4963: [ 72.159483][ T4963] #0: ffff0000cf06a460 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 72.161115][ T4963] #1: ffff0000e2760150 (&type->i_mutex_dir_key#8){+.+.}-{3:3}, at: path_openat+0x604/0x2718 [ 72.162826][ T4963] #2: ffff0000cf06a650 (sb_internal#2){.+.+}-{0:0}, at: gfs2_trans_begin+0x120/0x1bc [ 72.164612][ T4963] #3: ffff0000dbcdd0a8 (&sdp->sd_log_flush_lock){++++}-{3:3}, at: gfs2_log_flush+0xb4/0x1fbc [ 72.166440][ T4963] #4: ffff0000dbcdced0 (&sdp->sd_log_lock){+.+.}-{2:2}, at: gfs2_flush_revokes+0x48/0x88 [ 72.168040][ T4963] Preemption disabled at: [ 72.168058][ T4963] [] gfs2_flush_revokes+0x48/0x88 [ 72.170044][ T4963] CPU: 0 PID: 4963 Comm: syz.0.16 Not tainted syzkaller #0 [ 72.171201][ T4963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 72.172952][ T4963] Call trace: [ 72.173573][ T4963] dump_backtrace+0x0/0x458 [ 72.174328][ T4963] show_stack+0x2c/0x3c [ 72.175067][ T4963] __dump_stack+0x30/0x40 [ 72.175828][ T4963] dump_stack_lvl+0xf4/0x15c [ 72.176594][ T4963] dump_stack+0x1c/0x5c [ 72.177297][ T4963] ___might_sleep+0x358/0x4d4 [ 72.178101][ T4963] __might_sleep+0x98/0x124 [ 72.178909][ T4963] gfs2_glock_nq+0x888/0x1404 [ 72.179709][ T4963] gfs2_freeze_lock+0x64/0xd8 [ 72.180511][ T4963] gfs2_withdraw+0x4a0/0x129c [ 72.181305][ T4963] gfs2_ail1_empty+0x758/0x7e8 [ 72.182115][ T4963] gfs2_flush_revokes+0x54/0x88 [ 72.182958][ T4963] revoke_lo_before_commit+0x3c/0x608 [ 72.183866][ T4963] gfs2_log_flush+0x8c4/0x1fbc [ 72.184667][ T4963] gfs2_trans_end+0x2f0/0x4bc [ 72.185417][ T4963] alloc_dinode+0x2f0/0x414 [ 72.186194][ T4963] gfs2_create_inode+0x9e8/0x1058 [ 72.187045][ T4963] gfs2_atomic_open+0xc8/0x1c4 [ 72.187863][ T4963] path_openat+0xb5c/0x2718 [ 72.188668][ T4963] do_filp_open+0x184/0x368 [ 72.189427][ T4963] do_sys_openat2+0x134/0x3f4 [ 72.190289][ T4963] __arm64_sys_openat+0x118/0x14c [ 72.191136][ T4963] invoke_syscall+0x98/0x2b0 [ 72.191948][ T4963] el0_svc_common+0x138/0x258 [ 72.192736][ T4963] do_el0_svc+0x58/0x13c [ 72.193486][ T4963] el0_svc+0x78/0x1d0 [ 72.194165][ T4963] el0t_64_sync_handler+0xcc/0xe4 [ 72.195083][ T4963] el0t_64_sync+0x1a0/0x1a4 [ 72.198483][ T4963] [ 72.198822][ T4963] ============================= [ 72.199598][ T4963] [ BUG: Invalid wait context ] [ 72.200433][ T4963] syzkaller #0 Tainted: G W [ 72.201448][ T4963] ----------------------------- [ 72.202337][ T4963] syz.0.16/4963 is trying to lock: [ 72.203214][ T4963] ffff0000c68c7488 (&wq->mutex){+.+.}-{3:3}, at: flush_workqueue+0x150/0x104c [ 72.204753][ T4963] other info that might help us debug this: [ 72.205756][ T4963] context-{4:4} [ 72.206308][ T4963] 5 locks held by syz.0.16/4963: [ 72.207125][ T4963] #0: ffff0000cf06a460 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 72.208718][ T4963] #1: ffff0000e2760150 (&type->i_mutex_dir_key#8){+.+.}-{3:3}, at: path_openat+0x604/0x2718 [ 72.210444][ T4963] #2: ffff0000cf06a650 (sb_internal#2){.+.+}-{0:0}, at: gfs2_trans_begin+0x120/0x1bc [ 72.212137][ T4963] #3: ffff0000dbcdd0a8 (&sdp->sd_log_flush_lock){++++}-{3:3}, at: gfs2_log_flush+0xb4/0x1fbc [ 72.213957][ T4963] #4: ffff0000dbcdced0 (&sdp->sd_log_lock){+.+.}-{2:2}, at: gfs2_flush_revokes+0x48/0x88 [ 72.215675][ T4963] stack backtrace: [ 72.216288][ T4963] CPU: 0 PID: 4963 Comm: syz.0.16 Tainted: G W syzkaller #0 [ 72.217752][ T4963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 72.219439][ T4963] Call trace: [ 72.220006][ T4963] dump_backtrace+0x0/0x458 [ 72.220727][ T4963] show_stack+0x2c/0x3c [ 72.221444][ T4963] __dump_stack+0x30/0x40 [ 72.222169][ T4963] dump_stack_lvl+0xf4/0x15c [ 72.222950][ T4963] dump_stack+0x1c/0x5c [ 72.223689][ T4963] __lock_acquire+0x17f0/0x67ec [ 72.224493][ T4963] lock_acquire+0x1f4/0x618 [ 72.225289][ T4963] __mutex_lock_common+0x194/0x1f14 [ 72.226185][ T4963] mutex_lock_nested+0xac/0x11c [ 72.227019][ T4963] flush_workqueue+0x150/0x104c [ 72.227849][ T4963] gfs2_flush_delete_work+0x34/0x44 [ 72.228691][ T4963] gfs2_make_fs_ro+0xbc/0x538 [ 72.229493][ T4963] gfs2_withdraw+0x4dc/0x129c [ 72.230270][ T4963] gfs2_ail1_empty+0x758/0x7e8 [ 72.231070][ T4963] gfs2_flush_revokes+0x54/0x88 [ 72.231898][ T4963] revoke_lo_before_commit+0x3c/0x608 [ 72.232782][ T4963] gfs2_log_flush+0x8c4/0x1fbc [ 72.233556][ T4963] gfs2_trans_end+0x2f0/0x4bc [ 72.234318][ T4963] alloc_dinode+0x2f0/0x414 [ 72.235106][ T4963] gfs2_create_inode+0x9e8/0x1058 [ 72.235948][ T4963] gfs2_atomic_open+0xc8/0x1c4 [ 72.236672][ T4963] path_openat+0xb5c/0x2718 [ 72.237449][ T4963] do_filp_open+0x184/0x368 [ 72.238257][ T4963] do_sys_openat2+0x134/0x3f4 [ 72.239019][ T4963] __arm64_sys_openat+0x118/0x14c [ 72.239863][ T4963] invoke_syscall+0x98/0x2b0 [ 72.240664][ T4963] el0_svc_common+0x138/0x258 [ 72.241467][ T4963] do_el0_svc+0x58/0x13c [ 72.242201][ T4963] el0_svc+0x78/0x1d0 [ 72.242891][ T4963] el0t_64_sync_handler+0xcc/0xe4 [ 72.243747][ T4963] el0t_64_sync+0x1a0/0x1a4 [ 72.244575][ T4963] BUG: scheduling while atomic: syz.0.16/4963/0x00000002 [ 72.245750][ T4963] INFO: lockdep is turned off. [ 72.246571][ T4963] Modules linked in: [ 72.247235][ T4963] Preemption disabled at: [ 72.247253][ T4963] [] gfs2_flush_revokes+0x48/0x88 [ 72.249112][ T4963] CPU: 0 PID: 4963 Comm: syz.0.16 Tainted: G W syzkaller #0 [ 72.250599][ T4963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 72.252397][ T4963] Call trace: [ 72.252933][ T4963] dump_backtrace+0x0/0x458 [ 72.253660][ T4963] show_stack+0x2c/0x3c [ 72.254325][ T4963] __dump_stack+0x30/0x40 [ 72.255042][ T4963] dump_stack_lvl+0xf4/0x15c [ 72.255803][ T4963] dump_stack+0x1c/0x5c [ 72.256475][ T4963] __schedule_bug+0x124/0x1c8 [ 72.257240][ T4963] __schedule+0xe90/0x1bc4 [ 72.257976][ T4963] schedule+0x11c/0x1c8 [ 72.258653][ T4963] schedule_timeout+0xc8/0x2f4 [ 72.259444][ T4963] do_wait_for_common+0x204/0x374 [ 72.260299][ T4963] wait_for_completion+0x48/0x60 [ 72.261076][ T4963] kthread_stop+0x1a0/0x6d8 [ 72.261810][ T4963] gfs2_make_fs_ro+0x130/0x538 [ 72.262638][ T4963] gfs2_withdraw+0x4dc/0x129c [ 72.263441][ T4963] gfs2_ail1_empty+0x758/0x7e8 [ 72.264291][ T4963] gfs2_flush_revokes+0x54/0x88 [ 72.265096][ T4963] revoke_lo_before_commit+0x3c/0x608 [ 72.266005][ T4963] gfs2_log_flush+0x8c4/0x1fbc [ 72.266807][ T4963] gfs2_trans_end+0x2f0/0x4bc [ 72.267628][ T4963] alloc_dinode+0x2f0/0x414 [ 72.268439][ T4963] gfs2_create_inode+0x9e8/0x1058 [ 72.269301][ T4963] gfs2_atomic_open+0xc8/0x1c4 [ 72.270103][ T4963] path_openat+0xb5c/0x2718 [ 72.270874][ T4963] do_filp_open+0x184/0x368 [ 72.271675][ T4963] do_sys_openat2+0x134/0x3f4 [ 72.272547][ T4963] __arm64_sys_openat+0x118/0x14c [ 72.273452][ T4963] invoke_syscall+0x98/0x2b0 [ 72.274293][ T4963] el0_svc_common+0x138/0x258 [ 72.275123][ T4963] do_el0_svc+0x58/0x13c [ 72.275850][ T4963] el0_svc+0x78/0x1d0 [ 72.276592][ T4963] el0t_64_sync_handler+0xcc/0xe4 [ 72.277451][ T4963] el0t_64_sync+0x1a0/0x1a4 [ 72.349087][ T4931] Bluetooth: hci0: command 0x040f tx timeout [ 73.990634][ T349] device hsr_slave_0 left promiscuous mode [ 74.029393][ T349] device hsr_slave_1 left promiscuous mode [ 74.119116][ T349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.120328][ T349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.121723][ T349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.122923][ T349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.124382][ T349] device bridge_slave_1 left promiscuous mode [ 74.125424][ T349] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.159461][ T349] device bridge_slave_0 left promiscuous mode [ 74.160575][ T349] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.279161][ T349] device veth1_macvtap left promiscuous mode [ 74.280230][ T349] device veth0_macvtap left promiscuous mode [ 74.281292][ T349] device veth1_vlan left promiscuous mode [ 74.282244][ T349] device veth0_vlan left promiscuous mode [ 74.349626][ T349] team0 (unregistering): Port device team_slave_1 removed [ 74.352938][ T349] team0 (unregistering): Port device team_slave_0 removed [ 74.356038][ T349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.382858][ T349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.419244][ T4931] Bluetooth: hci0: command 0x0419 tx timeout [ 74.491760][ T349] bond0 (unregistering): Released all slaves [ 77.299339][ T4963] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 77.300843][ T4963] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 77.302034][ T4963] gfs2: fsid=syz:syz.0: File system withdrawn [ 77.302964][ T4963] CPU: 1 PID: 4963 Comm: syz.0.16 Tainted: G W syzkaller #0 [ 77.304309][ T4963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 77.305896][ T4963] Call trace: [ 77.306471][ T4963] dump_backtrace+0x0/0x458 [ 77.307259][ T4963] show_stack+0x2c/0x3c [ 77.307924][ T4963] __dump_stack+0x30/0x40 [ 77.308679][ T4963] dump_stack_lvl+0xf4/0x15c [ 77.309440][ T4963] dump_stack+0x1c/0x5c [ 77.310147][ T4963] gfs2_withdraw+0xc88/0x129c [ 77.310941][ T4963] gfs2_ail1_empty+0x758/0x7e8 [ 77.311793][ T4963] gfs2_flush_revokes+0x54/0x88 [ 77.312597][ T4963] revoke_lo_before_commit+0x3c/0x608 [ 77.313511][ T4963] gfs2_log_flush+0x8c4/0x1fbc [ 77.314345][ T4963] gfs2_trans_end+0x2f0/0x4bc [ 77.315168][ T4963] alloc_dinode+0x2f0/0x414 [ 77.315920][ T4963] gfs2_create_inode+0x9e8/0x1058 [ 77.316835][ T4963] gfs2_atomic_open+0xc8/0x1c4 [ 77.317648][ T4963] path_openat+0xb5c/0x2718 [ 77.318406][ T4963] do_filp_open+0x184/0x368 [ 77.319115][ T4963] do_sys_openat2+0x134/0x3f4 [ 77.319888][ T4963] __arm64_sys_openat+0x118/0x14c [ 77.320724][ T4963] invoke_syscall+0x98/0x2b0 [ 77.321540][ T4963] el0_svc_common+0x138/0x258 [ 77.322378][ T4963] do_el0_svc+0x58/0x13c [ 77.323113][ T4963] el0_svc+0x78/0x1d0 [ 77.323793][ T4963] el0t_64_sync_handler+0xcc/0xe4 [ 77.324672][ T4963] el0t_64_sync+0x1a0/0x1a4 1970/01/01 00:01:17 executed programs: 3