Warning: Permanently added '10.128.1.224' (ED25519) to the list of known hosts. 1970/01/01 00:01:05 parsed 1 programs [ 66.829324][ T4441] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 69.371508][ T4531] chnl_net:caif_netlink_parms(): no params data found [ 69.390810][ T4531] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.391984][ T4531] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.393619][ T4531] device bridge_slave_0 entered promiscuous mode [ 69.395655][ T4531] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.397204][ T4531] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.398694][ T4531] device bridge_slave_1 entered promiscuous mode [ 69.407684][ T4531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.410344][ T4531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.419892][ T4531] team0: Port device team_slave_0 added [ 69.421953][ T4531] team0: Port device team_slave_1 added [ 69.429318][ T4531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.430617][ T4531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.434776][ T4531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.439002][ T4531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.440037][ T4531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.444226][ T4531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.507836][ T4531] device hsr_slave_0 entered promiscuous mode [ 69.556827][ T4531] device hsr_slave_1 entered promiscuous mode [ 69.618819][ T2377] cfg80211: failed to load regulatory.db [ 69.621943][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.623095][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.342748][ T4531] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.388899][ T4531] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.438488][ T4531] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.481166][ T4531] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.562018][ T4531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.570267][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.572048][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.578447][ T4531] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.581433][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.582964][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.584524][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.585748][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.591951][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.596186][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.599118][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.600695][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.602107][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.603512][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.612015][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.613794][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.616025][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.619513][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.621227][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.625567][ T4531] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.630619][ T4531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.633394][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.635203][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.637110][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.638841][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.640350][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.657920][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.726455][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.727878][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.732903][ T4531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.740345][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.742136][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.748890][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.750453][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.752306][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.753670][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.755582][ T4531] device veth0_vlan entered promiscuous mode [ 70.762587][ T4531] device veth1_vlan entered promiscuous mode [ 70.772046][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.773648][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.775166][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.778071][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.780897][ T4531] device veth0_macvtap entered promiscuous mode [ 70.783703][ T4531] device veth1_macvtap entered promiscuous mode [ 70.790047][ T4531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.792786][ T4531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.795209][ T4531] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.797142][ T4531] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.798894][ T4531] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.800362][ T4531] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.802725][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.804306][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.808641][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.817493][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.819136][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.820684][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.171537][ T572] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.441024][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.442413][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.451549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.456395][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.457993][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.459279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:12 executed programs: 0 [ 72.134357][ T4814] chnl_net:caif_netlink_parms(): no params data found [ 72.156556][ T4814] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.159306][ T4814] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.160865][ T4814] device bridge_slave_0 entered promiscuous mode [ 72.163949][ T4814] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.165217][ T4814] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.167614][ T4814] device bridge_slave_1 entered promiscuous mode [ 72.179453][ T4814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.182435][ T4814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.193489][ T4814] team0: Port device team_slave_0 added [ 72.195913][ T4814] team0: Port device team_slave_1 added [ 72.204868][ T4814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.205960][ T4814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.210826][ T4814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.213336][ T4814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.214424][ T4814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.220176][ T4814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.268065][ T4814] device hsr_slave_0 entered promiscuous mode [ 72.307279][ T4814] device hsr_slave_1 entered promiscuous mode [ 72.336845][ T4814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.338017][ T4814] Cannot create hsr debugfs directory [ 73.619950][ T572] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.086715][ T1541] Bluetooth: hci0: command 0x0409 tx timeout [ 76.166875][ T4173] Bluetooth: hci0: command 0x041b tx timeout [ 76.251064][ T572] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.321506][ T572] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.322054][ T4814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.349742][ T4814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.398261][ T4814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.444258][ T4814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.502467][ T4814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.506998][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.508604][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.511350][ T4814] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.514066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.515630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.517682][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.518849][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.521224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.531126][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.532821][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.534645][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.535755][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.539069][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.542173][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.545630][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.547960][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.549985][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.552627][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.554535][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.558892][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.560576][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.563498][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.565060][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.568521][ T4814] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.613371][ T4814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.617180][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.618545][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.623651][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.625352][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.633836][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.635507][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.638494][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.640075][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.642927][ T4814] device veth0_vlan entered promiscuous mode [ 77.647186][ T4814] device veth1_vlan entered promiscuous mode [ 77.655981][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.658445][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.659905][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.661528][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.671204][ T4814] device veth0_macvtap entered promiscuous mode [ 77.674116][ T4814] device veth1_macvtap entered promiscuous mode [ 77.679744][ T4814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.681472][ T4814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.683847][ T4814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.685139][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.689002][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.698375][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.699986][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.702736][ T4814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.704916][ T4814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.707908][ T4814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.709459][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.711189][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.713940][ T4814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.715364][ T4814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.718712][ T4814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.720207][ T4814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.754398][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.755740][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.759169][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.761188][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.762373][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.763761][ T4989] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:17 executed programs: 2 [ 77.914692][ T4995] loop0: detected capacity change from 0 to 32768 [ 77.923646][ T4995] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 77.925095][ T4995] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 77.937685][ T4995] gfs2: fsid=syz:syz.0: journal 0 mapped with 4 extents in 0ms [ 77.940266][ T7] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 77.941465][ T7] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 77.952828][ T7] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 11ms [ 77.954371][ T7] gfs2: fsid=syz:syz.0: jid=0: Done [ 77.955389][ T4995] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 77.971288][ T572] device hsr_slave_0 left promiscuous mode [ 77.998393][ T572] device hsr_slave_1 left promiscuous mode [ 78.040284][ T4995] attempt to access beyond end of device [ 78.040284][ T4995] loop0: rw=1, want=16778992, limit=32768 [ 78.042143][ T4995] gfs2: fsid=syz:syz.0: Error 10 writing to journal, jid=0 [ 78.043429][ T4995] gfs2: fsid=syz:syz.0: fatal: I/O error(s) [ 78.044302][ T4995] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 78.045622][ T4995] BUG: sleeping function called from invalid context at fs/gfs2/glock.c:1281 [ 78.047152][ T4995] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 4995, name: syz.0.16 [ 78.048662][ T4995] 5 locks held by syz.0.16/4995: [ 78.049499][ T4995] #0: ffff0000d0228460 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 78.051072][ T4995] #1: ffff0000eeca0150 (&type->i_mutex_dir_key#8){+.+.}-{3:3}, at: path_openat+0x604/0x2718 [ 78.052773][ T4995] #2: ffff0000d0228650 (sb_internal#2){.+.+}-{0:0}, at: gfs2_trans_begin+0x120/0x1bc [ 78.054402][ T4995] #3: ffff0000d765d0a8 (&sdp->sd_log_flush_lock){++++}-{3:3}, at: gfs2_log_flush+0xb4/0x1fbc [ 78.056194][ T4995] #4: ffff0000d765ced0 (&sdp->sd_log_lock){+.+.}-{2:2}, at: gfs2_flush_revokes+0x48/0x88 [ 78.058000][ T4995] Preemption disabled at: [ 78.058009][ T4995] [] gfs2_flush_revokes+0x48/0x88 [ 78.059789][ T4995] CPU: 0 PID: 4995 Comm: syz.0.16 Not tainted syzkaller #0 [ 78.060904][ T4995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 78.062453][ T4995] Call trace: [ 78.062990][ T4995] dump_backtrace+0x0/0x458 [ 78.063725][ T4995] show_stack+0x2c/0x3c [ 78.064398][ T4995] __dump_stack+0x30/0x40 [ 78.065130][ T4995] dump_stack_lvl+0xf4/0x15c [ 78.065895][ T4995] dump_stack+0x1c/0x5c [ 78.066613][ T4995] ___might_sleep+0x358/0x4d4 [ 78.067406][ T4995] __might_sleep+0x98/0x124 [ 78.068166][ T4995] gfs2_glock_nq+0x888/0x1404 [ 78.068927][ T4995] gfs2_freeze_lock+0x64/0xd8 [ 78.069685][ T4995] gfs2_withdraw+0x4a0/0x129c [ 78.070475][ T4995] gfs2_ail1_empty+0x758/0x7e8 [ 78.071356][ T4995] gfs2_flush_revokes+0x54/0x88 [ 78.072156][ T4995] revoke_lo_before_commit+0x3c/0x608 [ 78.073057][ T4995] gfs2_log_flush+0x8c4/0x1fbc [ 78.073834][ T4995] gfs2_trans_end+0x2f0/0x4bc [ 78.074645][ T4995] alloc_dinode+0x2f0/0x414 [ 78.075385][ T4995] gfs2_create_inode+0x9e8/0x1058 [ 78.076260][ T4995] gfs2_atomic_open+0xc8/0x1c4 [ 78.077041][ T4995] path_openat+0xb5c/0x2718 [ 78.077816][ T4995] do_filp_open+0x184/0x368 [ 78.078582][ T4995] do_sys_openat2+0x134/0x3f4 [ 78.079354][ T4995] __arm64_sys_openat+0x118/0x14c [ 78.080142][ T4995] invoke_syscall+0x98/0x2b0 [ 78.081018][ T4995] el0_svc_common+0x138/0x258 [ 78.081751][ T4995] do_el0_svc+0x58/0x13c [ 78.082441][ T4995] el0_svc+0x78/0x1d0 [ 78.083056][ T4995] el0t_64_sync_handler+0xcc/0xe4 [ 78.083838][ T4995] el0t_64_sync+0x1a0/0x1a4 [ 78.087221][ T4995] [ 78.087591][ T4995] ============================= [ 78.088311][ T4995] [ BUG: Invalid wait context ] [ 78.089041][ T4995] syzkaller #0 Tainted: G W [ 78.089918][ T4995] ----------------------------- [ 78.090727][ T4995] syz.0.16/4995 is trying to lock: [ 78.091549][ T4995] ffff0000c6882488 (&wq->mutex){+.+.}-{3:3}, at: flush_workqueue+0x150/0x104c [ 78.092962][ T4995] other info that might help us debug this: [ 78.093875][ T4995] context-{4:4} [ 78.094399][ T4995] 5 locks held by syz.0.16/4995: [ 78.095146][ T4995] #0: ffff0000d0228460 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 78.096809][ T4995] #1: ffff0000eeca0150 (&type->i_mutex_dir_key#8){+.+.}-{3:3}, at: path_openat+0x604/0x2718 [ 78.098663][ T4995] #2: ffff0000d0228650 (sb_internal#2){.+.+}-{0:0}, at: gfs2_trans_begin+0x120/0x1bc [ 78.100308][ T4995] #3: ffff0000d765d0a8 (&sdp->sd_log_flush_lock){++++}-{3:3}, at: gfs2_log_flush+0xb4/0x1fbc [ 78.102007][ T4995] #4: ffff0000d765ced0 (&sdp->sd_log_lock){+.+.}-{2:2}, at: gfs2_flush_revokes+0x48/0x88 [ 78.103702][ T4995] stack backtrace: [ 78.104296][ T4995] CPU: 0 PID: 4995 Comm: syz.0.16 Tainted: G W syzkaller #0 [ 78.105657][ T4995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 78.107186][ T4995] Call trace: [ 78.107741][ T4995] dump_backtrace+0x0/0x458 [ 78.108459][ T4995] show_stack+0x2c/0x3c [ 78.109126][ T4995] __dump_stack+0x30/0x40 [ 78.109828][ T4995] dump_stack_lvl+0xf4/0x15c [ 78.110500][ T4995] dump_stack+0x1c/0x5c [ 78.111167][ T4995] __lock_acquire+0x17f0/0x67ec [ 78.111953][ T4995] lock_acquire+0x1f4/0x618 [ 78.112708][ T4995] __mutex_lock_common+0x194/0x1f14 [ 78.113535][ T4995] mutex_lock_nested+0xac/0x11c [ 78.114432][ T4995] flush_workqueue+0x150/0x104c [ 78.115288][ T4995] gfs2_flush_delete_work+0x34/0x44 [ 78.116138][ T4995] gfs2_make_fs_ro+0xbc/0x538 [ 78.116912][ T4995] gfs2_withdraw+0x4dc/0x129c [ 78.117649][ T4995] gfs2_ail1_empty+0x758/0x7e8 [ 78.118425][ T4995] gfs2_flush_revokes+0x54/0x88 [ 78.119261][ T4995] revoke_lo_before_commit+0x3c/0x608 [ 78.120160][ T4995] gfs2_log_flush+0x8c4/0x1fbc [ 78.120950][ T4995] gfs2_trans_end+0x2f0/0x4bc [ 78.121721][ T4995] alloc_dinode+0x2f0/0x414 [ 78.122491][ T4995] gfs2_create_inode+0x9e8/0x1058 [ 78.123287][ T4995] gfs2_atomic_open+0xc8/0x1c4 [ 78.124087][ T4995] path_openat+0xb5c/0x2718 [ 78.124854][ T4995] do_filp_open+0x184/0x368 [ 78.125624][ T4995] do_sys_openat2+0x134/0x3f4 [ 78.126447][ T4995] __arm64_sys_openat+0x118/0x14c [ 78.127328][ T4995] invoke_syscall+0x98/0x2b0 [ 78.128104][ T4995] el0_svc_common+0x138/0x258 [ 78.128938][ T4995] do_el0_svc+0x58/0x13c [ 78.129598][ T4995] el0_svc+0x78/0x1d0 [ 78.130266][ T4995] el0t_64_sync_handler+0xcc/0xe4 [ 78.131069][ T4995] el0t_64_sync+0x1a0/0x1a4 [ 78.132066][ T4995] BUG: scheduling while atomic: syz.0.16/4995/0x00000002 [ 78.133219][ T4995] INFO: lockdep is turned off. [ 78.133968][ T4995] Modules linked in: [ 78.134593][ T4995] Preemption disabled at: [ 78.134607][ T4995] [] gfs2_flush_revokes+0x48/0x88 [ 78.136308][ T4995] CPU: 0 PID: 4995 Comm: syz.0.16 Tainted: G W syzkaller #0 [ 78.137624][ T4995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 78.139235][ T4995] Call trace: [ 78.139723][ T4995] dump_backtrace+0x0/0x458 [ 78.140430][ T4995] show_stack+0x2c/0x3c [ 78.141092][ T4995] __dump_stack+0x30/0x40 [ 78.141785][ T4995] dump_stack_lvl+0xf4/0x15c [ 78.142483][ T4995] dump_stack+0x1c/0x5c [ 78.143141][ T4995] __schedule_bug+0x124/0x1c8 [ 78.143885][ T4995] __schedule+0xe90/0x1bc4 [ 78.144624][ T4995] schedule+0x11c/0x1c8 [ 78.145337][ T4995] schedule_timeout+0xc8/0x2f4 [ 78.146083][ T4995] do_wait_for_common+0x204/0x374 [ 78.146918][ T4995] wait_for_completion+0x48/0x60 [ 78.147765][ T4995] kthread_stop+0x1a0/0x6d8 [ 78.148524][ T4995] gfs2_make_fs_ro+0x130/0x538 [ 78.149292][ T4995] gfs2_withdraw+0x4dc/0x129c [ 78.150035][ T4995] gfs2_ail1_empty+0x758/0x7e8 [ 78.150808][ T4995] gfs2_flush_revokes+0x54/0x88 [ 78.151567][ T4995] revoke_lo_before_commit+0x3c/0x608 [ 78.152449][ T4995] gfs2_log_flush+0x8c4/0x1fbc [ 78.153215][ T4995] gfs2_trans_end+0x2f0/0x4bc [ 78.154048][ T4995] alloc_dinode+0x2f0/0x414 [ 78.154761][ T4995] gfs2_create_inode+0x9e8/0x1058 [ 78.155634][ T4995] gfs2_atomic_open+0xc8/0x1c4 [ 78.156426][ T4995] path_openat+0xb5c/0x2718 [ 78.157108][ T4995] do_filp_open+0x184/0x368 [ 78.157823][ T4995] do_sys_openat2+0x134/0x3f4 [ 78.158594][ T4995] __arm64_sys_openat+0x118/0x14c [ 78.159395][ T4995] invoke_syscall+0x98/0x2b0 [ 78.160179][ T4995] el0_svc_common+0x138/0x258 [ 78.160913][ T4995] do_el0_svc+0x58/0x13c [ 78.161600][ T4995] el0_svc+0x78/0x1d0 [ 78.162274][ T4995] el0t_64_sync_handler+0xcc/0xe4 [ 78.163153][ T4995] el0t_64_sync+0x1a0/0x1a4 [ 78.196818][ T572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.198069][ T572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.199587][ T572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.200818][ T572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.202211][ T572] device bridge_slave_1 left promiscuous mode [ 78.203260][ T572] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.237142][ T572] device bridge_slave_0 left promiscuous mode [ 78.238211][ T572] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.246706][ T4174] Bluetooth: hci0: command 0x040f tx timeout [ 78.366772][ T572] device veth1_macvtap left promiscuous mode [ 78.367818][ T572] device veth0_macvtap left promiscuous mode [ 78.368837][ T572] device veth1_vlan left promiscuous mode [ 78.369839][ T572] device veth0_vlan left promiscuous mode [ 78.449432][ T572] team0 (unregistering): Port device team_slave_1 removed [ 78.453285][ T572] team0 (unregistering): Port device team_slave_0 removed [ 78.458279][ T572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.470769][ T572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.580232][ T572] bond0 (unregistering): Released all slaves [ 80.327048][ T4153] Bluetooth: hci0: command 0x0419 tx timeout [ 83.216736][ T4995] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 83.218197][ T4995] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 83.219355][ T4995] gfs2: fsid=syz:syz.0: File system withdrawn [ 83.220385][ T4995] CPU: 0 PID: 4995 Comm: syz.0.16 Tainted: G W syzkaller #0 [ 83.221795][ T4995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 83.223445][ T4995] Call trace: [ 83.223992][ T4995] dump_backtrace+0x0/0x458 [ 83.224748][ T4995] show_stack+0x2c/0x3c [ 83.225422][ T4995] __dump_stack+0x30/0x40 [ 83.226135][ T4995] dump_stack_lvl+0xf4/0x15c [ 83.226855][ T4995] dump_stack+0x1c/0x5c [ 83.227602][ T4995] gfs2_withdraw+0xc88/0x129c [ 83.228426][ T4995] gfs2_ail1_empty+0x758/0x7e8 [ 83.229308][ T4995] gfs2_flush_revokes+0x54/0x88 [ 83.230127][ T4995] revoke_lo_before_commit+0x3c/0x608 [ 83.231020][ T4995] gfs2_log_flush+0x8c4/0x1fbc [ 83.231825][ T4995] gfs2_trans_end+0x2f0/0x4bc [ 83.232590][ T4995] alloc_dinode+0x2f0/0x414 [ 83.233303][ T4995] gfs2_create_inode+0x9e8/0x1058 [ 83.234062][ T4995] gfs2_atomic_open+0xc8/0x1c4 [ 83.234753][ T4995] path_openat+0xb5c/0x2718 [ 83.235409][ T4995] do_filp_open+0x184/0x368 [ 83.236078][ T4995] do_sys_openat2+0x134/0x3f4 [ 83.236782][ T4995] __arm64_sys_openat+0x118/0x14c [ 83.237596][ T4995] invoke_syscall+0x98/0x2b0 [ 83.238332][ T4995] el0_svc_common+0x138/0x258 [ 83.239130][ T4995] do_el0_svc+0x58/0x13c [ 83.239874][ T4995] el0_svc+0x78/0x1d0 [ 83.240508][ T4995] el0t_64_sync_handler+0xcc/0xe4 [ 83.241315][ T4995] el0t_64_sync+0x1a0/0x1a4 1970/01/01 00:01:23 executed programs: 3