Warning: Permanently added '10.128.0.97' (ED25519) to the list of known hosts. 1970/01/01 00:01:05 parsed 1 programs [ 66.618278][ T4509] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 69.610025][ T3338] cfg80211: failed to load regulatory.db [ 69.628507][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.629632][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.765352][ T4568] chnl_net:caif_netlink_parms(): no params data found [ 70.781857][ T4568] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.783053][ T4568] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.784602][ T4568] device bridge_slave_0 entered promiscuous mode [ 70.786703][ T4568] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.787841][ T4568] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.789751][ T4568] device bridge_slave_1 entered promiscuous mode [ 70.798539][ T4568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.801430][ T4568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.809363][ T4568] team0: Port device team_slave_0 added [ 70.811110][ T4568] team0: Port device team_slave_1 added [ 70.817594][ T4568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.819098][ T4568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.823345][ T4568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.826403][ T4568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.827490][ T4568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.831514][ T4568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.899122][ T4568] device hsr_slave_0 entered promiscuous mode [ 70.948430][ T4568] device hsr_slave_1 entered promiscuous mode [ 71.695458][ T4568] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.739737][ T4568] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.770221][ T4568] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.790505][ T4568] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.887685][ T4568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.891568][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.893105][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.895477][ T4568] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.897816][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.902425][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.904048][ T463] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.905161][ T463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.906563][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.915221][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.916756][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.920170][ T463] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.921303][ T463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.922686][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.924366][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.932791][ T4568] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.934518][ T4568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.936590][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.939211][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.941027][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.942681][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.944197][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.945736][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.947374][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.951214][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.954817][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.956919][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.994829][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.996137][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.999975][ T4568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.010247][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.011886][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.015088][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.016715][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.019347][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.020786][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.024456][ T4568] device veth0_vlan entered promiscuous mode [ 72.027486][ T4568] device veth1_vlan entered promiscuous mode [ 72.036496][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.038045][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.040406][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.042049][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.044612][ T4568] device veth0_macvtap entered promiscuous mode [ 72.046923][ T4568] device veth1_macvtap entered promiscuous mode [ 72.053528][ T4568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.054693][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.056145][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.057568][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.060410][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.063408][ T4568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.065345][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.066759][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.069230][ T4568] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.070590][ T4568] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.072046][ T4568] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.073521][ T4568] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.181372][ T463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.182826][ T463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.185009][ T463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.190471][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.191718][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.193394][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:12 executed programs: 0 [ 72.514229][ T4764] chnl_net:caif_netlink_parms(): no params data found [ 72.530950][ T4764] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.532102][ T4764] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.533666][ T4764] device bridge_slave_0 entered promiscuous mode [ 72.535529][ T4764] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.536727][ T4764] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.538619][ T4764] device bridge_slave_1 entered promiscuous mode [ 72.546518][ T4764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.548915][ T4764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.556490][ T4764] team0: Port device team_slave_0 added [ 72.558583][ T4764] team0: Port device team_slave_1 added [ 72.564742][ T4764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.565857][ T4764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.570548][ T4764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.572921][ T4764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.574044][ T4764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.578067][ T4764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.629409][ T4764] device hsr_slave_0 entered promiscuous mode [ 72.658750][ T4764] device hsr_slave_1 entered promiscuous mode [ 72.688393][ T4764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.689736][ T4764] Cannot create hsr debugfs directory [ 72.733437][ T4764] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.488268][ T4165] Bluetooth: hci0: command 0x0409 tx timeout [ 75.231482][ T4764] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.568277][ T4135] Bluetooth: hci0: command 0x041b tx timeout [ 77.711474][ T4764] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.762032][ T4764] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.931291][ T4764] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.979480][ T4764] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.029226][ T4764] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.088238][ T4764] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.167565][ T4764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.172077][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.173612][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.176105][ T4764] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.179420][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.181668][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.183170][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.184304][ T359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.185714][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 78.191912][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.193467][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.195022][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.196181][ T359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.198817][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 78.201584][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 78.204227][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 78.206062][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.207747][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.211136][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 78.212799][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.215597][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 78.217131][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.220935][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 78.222449][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.224749][ T4764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.260591][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.261947][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.266051][ T4764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.277948][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.280274][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.285762][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.287256][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.289130][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.290496][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.292863][ T4764] device veth0_vlan entered promiscuous mode [ 78.296073][ T4764] device veth1_vlan entered promiscuous mode [ 78.304305][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.305885][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.307339][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.309356][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.311905][ T4764] device veth0_macvtap entered promiscuous mode [ 78.314251][ T4764] device veth1_macvtap entered promiscuous mode [ 78.319408][ T4764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.321146][ T4764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.323163][ T4764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.324330][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.325897][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.327338][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.329382][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.331743][ T4764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.333338][ T4764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.335386][ T4764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.336596][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.338784][ T359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.341326][ T4764] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.342695][ T4764] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.344171][ T4764] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.345567][ T4764] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.363840][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.365206][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.370267][ T463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.371598][ T463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.372610][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.374209][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:18 executed programs: 2 [ 78.523814][ T4970] loop0: detected capacity change from 0 to 32768 [ 78.574440][ T4970] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 78.575830][ T4970] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 78.591588][ T4970] gfs2: fsid=syz:syz.0: journal 0 mapped with 4 extents in 0ms [ 78.593849][ T13] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 78.595005][ T13] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 78.605921][ T13] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 10ms [ 78.607870][ T13] gfs2: fsid=syz:syz.0: jid=0: Done [ 78.609953][ T4970] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 78.648309][ T4165] Bluetooth: hci0: command 0x040f tx timeout [ 78.684133][ T4970] attempt to access beyond end of device [ 78.684133][ T4970] loop0: rw=1, want=16778992, limit=32768 [ 78.685893][ T4970] gfs2: fsid=syz:syz.0: Error 10 writing to journal, jid=0 [ 78.687388][ T4970] gfs2: fsid=syz:syz.0: fatal: I/O error(s) [ 78.688505][ T4970] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 78.689651][ T4970] BUG: sleeping function called from invalid context at fs/gfs2/glock.c:1281 [ 78.691099][ T4970] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 4970, name: syz.0.16 [ 78.692495][ T4970] 5 locks held by syz.0.16/4970: [ 78.693202][ T4970] #0: ffff0000c11d2460 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 78.694625][ T4970] #1: ffff0000ec840150 (&type->i_mutex_dir_key#8){+.+.}-{3:3}, at: path_openat+0x5f4/0x26e4 [ 78.696384][ T4970] #2: ffff0000c11d2650 (sb_internal#2){.+.+}-{0:0}, at: gfs2_trans_begin+0x120/0x1bc [ 78.698007][ T4970] #3: ffff0000cf2590a8 (&sdp->sd_log_flush_lock){++++}-{3:3}, at: gfs2_log_flush+0xb4/0x2078 [ 78.699770][ T4970] #4: ffff0000cf258ed0 (&sdp->sd_log_lock){+.+.}-{2:2}, at: gfs2_flush_revokes+0x48/0x88 [ 78.701409][ T4970] Preemption disabled at: [ 78.701428][ T4970] [] gfs2_flush_revokes+0x48/0x88 [ 78.703191][ T4970] CPU: 0 PID: 4970 Comm: syz.0.16 Not tainted syzkaller #0 [ 78.704331][ T4970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 78.705907][ T4970] Call trace: [ 78.706407][ T4970] dump_backtrace+0x0/0x43c [ 78.707088][ T4970] show_stack+0x2c/0x3c [ 78.707762][ T4970] __dump_stack+0x30/0x40 [ 78.708423][ T4970] dump_stack_lvl+0xf8/0x160 [ 78.709172][ T4970] dump_stack+0x1c/0x5c [ 78.709835][ T4970] ___might_sleep+0x358/0x4d4 [ 78.710620][ T4970] __might_sleep+0x98/0x124 [ 78.711406][ T4970] gfs2_glock_nq+0x888/0x141c [ 78.712141][ T4970] gfs2_freeze_lock+0x64/0xd8 [ 78.712968][ T4970] gfs2_withdraw+0x490/0x129c [ 78.713769][ T4970] gfs2_ail1_empty+0x768/0x7f8 [ 78.714571][ T4970] gfs2_flush_revokes+0x54/0x88 [ 78.715322][ T4970] revoke_lo_before_commit+0x3c/0x608 [ 78.716196][ T4970] gfs2_log_flush+0x8d0/0x2078 [ 78.717006][ T4970] gfs2_trans_end+0x2f0/0x4bc [ 78.717826][ T4970] alloc_dinode+0x2e8/0x3fc [ 78.718569][ T4970] gfs2_create_inode+0x9e4/0x1058 [ 78.719393][ T4970] gfs2_atomic_open+0xc8/0x1c4 [ 78.720185][ T4970] path_openat+0xb50/0x26e4 [ 78.720879][ T4970] do_filp_open+0x164/0x330 [ 78.721594][ T4970] do_sys_openat2+0x128/0x3d8 [ 78.722297][ T4970] __arm64_sys_openat+0x120/0x154 [ 78.723131][ T4970] invoke_syscall+0x98/0x2b8 [ 78.723869][ T4970] el0_svc_common+0x138/0x258 [ 78.724645][ T4970] do_el0_svc+0x58/0x14c [ 78.725406][ T4970] el0_svc+0x78/0x1e0 [ 78.726024][ T4970] el0t_64_sync_handler+0xcc/0xe4 [ 78.726791][ T4970] el0t_64_sync+0x1a0/0x1a4 [ 78.730095][ T4970] [ 78.730431][ T4970] ============================= [ 78.731217][ T4970] [ BUG: Invalid wait context ] [ 78.732010][ T4970] syzkaller #0 Tainted: G W [ 78.732958][ T4970] ----------------------------- [ 78.733711][ T4970] syz.0.16/4970 is trying to lock: [ 78.734511][ T4970] ffff0000c68dd888 (&wq->mutex){+.+.}-{3:3}, at: flush_workqueue+0x13c/0x1024 [ 78.735946][ T4970] other info that might help us debug this: [ 78.736867][ T4970] context-{4:4} [ 78.737420][ T4970] 5 locks held by syz.0.16/4970: [ 78.738286][ T4970] #0: ffff0000c11d2460 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 78.739817][ T4970] #1: ffff0000ec840150 (&type->i_mutex_dir_key#8){+.+.}-{3:3}, at: path_openat+0x5f4/0x26e4 [ 78.741540][ T4970] #2: ffff0000c11d2650 (sb_internal#2){.+.+}-{0:0}, at: gfs2_trans_begin+0x120/0x1bc [ 78.743226][ T4970] #3: ffff0000cf2590a8 (&sdp->sd_log_flush_lock){++++}-{3:3}, at: gfs2_log_flush+0xb4/0x2078 [ 78.745029][ T4970] #4: ffff0000cf258ed0 (&sdp->sd_log_lock){+.+.}-{2:2}, at: gfs2_flush_revokes+0x48/0x88 [ 78.746632][ T4970] stack backtrace: [ 78.747234][ T4970] CPU: 0 PID: 4970 Comm: syz.0.16 Tainted: G W syzkaller #0 [ 78.748668][ T4970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 78.750342][ T4970] Call trace: [ 78.750861][ T4970] dump_backtrace+0x0/0x43c [ 78.751639][ T4970] show_stack+0x2c/0x3c [ 78.752338][ T4970] __dump_stack+0x30/0x40 [ 78.753100][ T4970] dump_stack_lvl+0xf8/0x160 [ 78.753931][ T4970] dump_stack+0x1c/0x5c [ 78.754657][ T4970] __lock_acquire+0x1acc/0x651c [ 78.755497][ T4970] lock_acquire+0x1f4/0x620 [ 78.756265][ T4970] __mutex_lock_common+0x194/0x1edc [ 78.757166][ T4970] mutex_lock_nested+0xac/0x11c [ 78.757950][ T4970] flush_workqueue+0x13c/0x1024 [ 78.758771][ T4970] gfs2_flush_delete_work+0x34/0x44 [ 78.759583][ T4970] gfs2_make_fs_ro+0xb4/0x51c [ 78.760297][ T4970] gfs2_withdraw+0x4cc/0x129c [ 78.761053][ T4970] gfs2_ail1_empty+0x768/0x7f8 [ 78.761878][ T4970] gfs2_flush_revokes+0x54/0x88 [ 78.762721][ T4970] revoke_lo_before_commit+0x3c/0x608 [ 78.763611][ T4970] gfs2_log_flush+0x8d0/0x2078 [ 78.764401][ T4970] gfs2_trans_end+0x2f0/0x4bc [ 78.765157][ T4970] alloc_dinode+0x2e8/0x3fc [ 78.765934][ T4970] gfs2_create_inode+0x9e4/0x1058 [ 78.766791][ T4970] gfs2_atomic_open+0xc8/0x1c4 [ 78.767565][ T4970] path_openat+0xb50/0x26e4 [ 78.768316][ T4970] do_filp_open+0x164/0x330 [ 78.769020][ T4970] do_sys_openat2+0x128/0x3d8 [ 78.769772][ T4970] __arm64_sys_openat+0x120/0x154 [ 78.770546][ T4970] invoke_syscall+0x98/0x2b8 [ 78.771283][ T4970] el0_svc_common+0x138/0x258 [ 78.771987][ T4970] do_el0_svc+0x58/0x14c [ 78.772713][ T4970] el0_svc+0x78/0x1e0 [ 78.773376][ T4970] el0t_64_sync_handler+0xcc/0xe4 [ 78.774186][ T4970] el0t_64_sync+0x1a0/0x1a4 [ 78.775222][ T4970] BUG: scheduling while atomic: syz.0.16/4970/0x00000002 [ 78.776374][ T4970] INFO: lockdep is turned off. [ 78.777103][ T4970] Modules linked in: [ 78.777814][ T4970] Preemption disabled at: [ 78.777822][ T4970] [] gfs2_flush_revokes+0x48/0x88 [ 78.779691][ T4970] CPU: 0 PID: 4970 Comm: syz.0.16 Tainted: G W syzkaller #0 [ 78.781084][ T4970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 78.782718][ T4970] Call trace: [ 78.783240][ T4970] dump_backtrace+0x0/0x43c [ 78.783973][ T4970] show_stack+0x2c/0x3c [ 78.784679][ T4970] __dump_stack+0x30/0x40 [ 78.785430][ T4970] dump_stack_lvl+0xf8/0x160 [ 78.786186][ T4970] dump_stack+0x1c/0x5c [ 78.786841][ T4970] __schedule_bug+0x124/0x1c8 [ 78.787595][ T4970] __schedule+0xe94/0x1bf8 [ 78.788295][ T4970] schedule+0x11c/0x1c8 [ 78.788976][ T4970] schedule_timeout+0xb4/0x2c8 [ 78.789749][ T4970] do_wait_for_common+0x1fc/0x35c [ 78.790510][ T4970] wait_for_completion+0x48/0x60 [ 78.791328][ T4970] kthread_stop+0x1a0/0x6f8 [ 78.792086][ T4970] gfs2_make_fs_ro+0x12c/0x51c [ 78.792900][ T4970] gfs2_withdraw+0x4cc/0x129c [ 78.793737][ T4970] gfs2_ail1_empty+0x768/0x7f8 [ 78.794572][ T4970] gfs2_flush_revokes+0x54/0x88 [ 78.795423][ T4970] revoke_lo_before_commit+0x3c/0x608 [ 78.796295][ T4970] gfs2_log_flush+0x8d0/0x2078 [ 78.797044][ T4970] gfs2_trans_end+0x2f0/0x4bc [ 78.797817][ T4970] alloc_dinode+0x2e8/0x3fc [ 78.798543][ T4970] gfs2_create_inode+0x9e4/0x1058 [ 78.799374][ T4970] gfs2_atomic_open+0xc8/0x1c4 [ 78.800101][ T4970] path_openat+0xb50/0x26e4 [ 78.800816][ T4970] do_filp_open+0x164/0x330 [ 78.801584][ T4970] do_sys_openat2+0x128/0x3d8 [ 78.802342][ T4970] __arm64_sys_openat+0x120/0x154 [ 78.803186][ T4970] invoke_syscall+0x98/0x2b8 [ 78.803899][ T4970] el0_svc_common+0x138/0x258 [ 78.804611][ T4970] do_el0_svc+0x58/0x14c [ 78.805313][ T4970] el0_svc+0x78/0x1e0 [ 78.805984][ T4970] el0t_64_sync_handler+0xcc/0xe4 [ 78.806790][ T4970] el0t_64_sync+0x1a0/0x1a4 [ 80.142559][ T9] device hsr_slave_0 left promiscuous mode [ 80.178503][ T9] device hsr_slave_1 left promiscuous mode [ 80.248271][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.249520][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.250845][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.251930][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.253275][ T9] device bridge_slave_1 left promiscuous mode [ 80.254321][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.288581][ T9] device bridge_slave_0 left promiscuous mode [ 80.289612][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.428318][ T9] device veth1_macvtap left promiscuous mode [ 80.429357][ T9] device veth0_macvtap left promiscuous mode [ 80.430323][ T9] device veth1_vlan left promiscuous mode [ 80.431254][ T9] device veth0_vlan left promiscuous mode [ 80.495333][ T9] team0 (unregistering): Port device team_slave_1 removed [ 80.501912][ T9] team0 (unregistering): Port device team_slave_0 removed [ 80.505004][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.540585][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.620782][ T9] bond0 (unregistering): Released all slaves [ 80.728263][ T4165] Bluetooth: hci0: command 0x0419 tx timeout [ 83.848421][ T4970] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 83.849989][ T4970] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 83.851139][ T4970] gfs2: fsid=syz:syz.0: File system withdrawn [ 83.852094][ T4970] CPU: 0 PID: 4970 Comm: syz.0.16 Tainted: G W syzkaller #0 [ 83.853476][ T4970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 83.855105][ T4970] Call trace: [ 83.855609][ T4970] dump_backtrace+0x0/0x43c [ 83.856344][ T4970] show_stack+0x2c/0x3c [ 83.857037][ T4970] __dump_stack+0x30/0x40 [ 83.857723][ T4970] dump_stack_lvl+0xf8/0x160 [ 83.858528][ T4970] dump_stack+0x1c/0x5c [ 83.859205][ T4970] gfs2_withdraw+0xc60/0x129c [ 83.859986][ T4970] gfs2_ail1_empty+0x768/0x7f8 [ 83.860723][ T4970] gfs2_flush_revokes+0x54/0x88 [ 83.861519][ T4970] revoke_lo_before_commit+0x3c/0x608 [ 83.862376][ T4970] gfs2_log_flush+0x8d0/0x2078 [ 83.863114][ T4970] gfs2_trans_end+0x2f0/0x4bc [ 83.863923][ T4970] alloc_dinode+0x2e8/0x3fc [ 83.864719][ T4970] gfs2_create_inode+0x9e4/0x1058 [ 83.865521][ T4970] gfs2_atomic_open+0xc8/0x1c4 [ 83.866284][ T4970] path_openat+0xb50/0x26e4 [ 83.867081][ T4970] do_filp_open+0x164/0x330 [ 83.867874][ T4970] do_sys_openat2+0x128/0x3d8 [ 83.868693][ T4970] __arm64_sys_openat+0x120/0x154 [ 83.869573][ T4970] invoke_syscall+0x98/0x2b8 [ 83.870399][ T4970] el0_svc_common+0x138/0x258 [ 83.871198][ T4970] do_el0_svc+0x58/0x14c [ 83.871944][ T4970] el0_svc+0x78/0x1e0 [ 83.872657][ T4970] el0t_64_sync_handler+0xcc/0xe4 [ 83.873486][ T4970] el0t_64_sync+0x1a0/0x1a4 1970/01/01 00:01:23 executed programs: 3