Warning: Permanently added '10.128.0.239' (ED25519) to the list of known hosts. 1970/01/01 00:00:25 parsed 1 programs [ 26.975774][ T4323] cgroup: Unknown subsys name 'net' [ 27.182767][ T4323] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 27.443165][ T4323] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 31.353352][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.354578][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.356651][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 31.363984][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.365272][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.366726][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 31.591070][ T4367] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 31.592620][ T4368] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.593946][ T4368] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.596066][ T4368] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.597922][ T4368] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 31.599122][ T4368] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.797776][ T4381] chnl_net:caif_netlink_parms(): no params data found [ 31.814894][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.816292][ T4381] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.817879][ T4381] device bridge_slave_0 entered promiscuous mode [ 31.820873][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.822044][ T4381] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.823490][ T4381] device bridge_slave_1 entered promiscuous mode [ 31.829671][ T4381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.832554][ T4381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.839382][ T4381] team0: Port device team_slave_0 added [ 31.841254][ T4381] team0: Port device team_slave_1 added [ 31.847134][ T4381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.848299][ T4381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.853005][ T4381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.855571][ T4381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.856633][ T4381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.861142][ T4381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.901220][ T4381] device hsr_slave_0 entered promiscuous mode [ 31.920131][ T4381] device hsr_slave_1 entered promiscuous mode [ 31.993236][ T4381] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.031542][ T4381] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.071215][ T4381] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.111158][ T4381] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.177782][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.179140][ T4381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.180556][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.181732][ T4381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.198355][ T4381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.202604][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.204667][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.206661][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.211139][ T4381] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.214270][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.215832][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.216908][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.222099][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.223669][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.224813][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.240745][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.242294][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.244797][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.247574][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.251492][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.253747][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.305984][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.307315][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.311730][ T4381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.328001][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.335115][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.336826][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.338263][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.340810][ T4381] device veth0_vlan entered promiscuous mode [ 32.344436][ T4381] device veth1_vlan entered promiscuous mode [ 32.358573][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.361298][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.363653][ T4381] device veth0_macvtap entered promiscuous mode [ 32.365974][ T4381] device veth1_macvtap entered promiscuous mode [ 32.371769][ T4381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.373078][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.374446][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.375775][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.377267][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.379850][ T4381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.381803][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.383409][ T61] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.396788][ T4381] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.398267][ T4381] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.399632][ T4381] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.401163][ T4381] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:32 executed programs: 0 [ 32.696113][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 32.697628][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 32.699203][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 32.702345][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 32.703885][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 32.705351][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 32.981121][ T4430] chnl_net:caif_netlink_parms(): no params data found [ 33.029845][ T4430] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.031200][ T4430] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.032693][ T4430] device bridge_slave_0 entered promiscuous mode [ 33.034611][ T4430] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.035873][ T4430] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.037386][ T4430] device bridge_slave_1 entered promiscuous mode [ 33.044095][ T4430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.046469][ T4430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.053717][ T4430] team0: Port device team_slave_0 added [ 33.055502][ T4430] team0: Port device team_slave_1 added [ 33.060539][ T4430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.061676][ T4430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.065809][ T4430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.373796][ T4430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.375017][ T4430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.379038][ T4430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.433683][ T4430] device hsr_slave_0 entered promiscuous mode [ 33.471122][ T4430] device hsr_slave_1 entered promiscuous mode [ 33.510040][ T4430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.511327][ T4430] Cannot create hsr debugfs directory [ 33.961279][ T4430] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.730266][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 36.521145][ T4430] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.820390][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 37.972102][ T4430] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.082316][ T4430] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.319733][ T4430] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.431870][ T4430] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.531740][ T4430] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.571101][ T4430] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.661932][ T4430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.665336][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.666932][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.669800][ T4430] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.711764][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.713610][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.715008][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.716141][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.717700][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.719304][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.720991][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.722150][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.723551][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.725251][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.727419][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.729319][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.731523][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.733048][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.734612][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.736091][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.737543][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.739056][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.741309][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.742836][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.792560][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.844834][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.846202][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.849588][ T4430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.890077][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 38.896697][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.898346][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.906376][ T4430] device veth0_vlan entered promiscuous mode [ 38.909172][ T4430] device veth1_vlan entered promiscuous mode [ 38.911619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.913200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.914774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.916196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.917613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.924235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.925785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.927286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.929525][ T4430] device veth0_macvtap entered promiscuous mode [ 38.934047][ T11] device hsr_slave_0 left promiscuous mode [ 38.950531][ T11] device hsr_slave_1 left promiscuous mode [ 39.030953][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.032239][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.034001][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.035231][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.036638][ T11] device bridge_slave_1 left promiscuous mode [ 39.037992][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.080713][ T11] device bridge_slave_0 left promiscuous mode [ 39.081803][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.210250][ T11] device veth1_macvtap left promiscuous mode [ 39.211316][ T11] device veth0_macvtap left promiscuous mode [ 39.212335][ T11] device veth1_vlan left promiscuous mode [ 39.213291][ T11] device veth0_vlan left promiscuous mode [ 40.980002][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 41.401120][ T11] team0 (unregistering): Port device team_slave_1 removed [ 41.561289][ T11] team0 (unregistering): Port device team_slave_0 removed [ 41.720456][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.920414][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.552575][ T11] bond0 (unregistering): Released all slaves [ 43.873222][ T4430] device veth1_macvtap entered promiscuous mode [ 43.878025][ T4430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.880985][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.882422][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.883922][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.885874][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.888224][ T4430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.891639][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.893476][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.898620][ T4430] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.900095][ T4430] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.901512][ T4430] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.902935][ T4430] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.926106][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.927296][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.928677][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.941168][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.942510][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.943801][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 44.084791][ T4452] loop0: detected capacity change from 0 to 32768 [ 44.100319][ T4452] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 44.101763][ T4452] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 44.109371][ T4452] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 44.111993][ T112] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 44.113205][ T112] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 44.126012][ T112] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 12ms [ 44.127625][ T112] gfs2: fsid=syz:syz.0: jid=0: Done [ 44.128622][ T4452] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 44.174648][ T4452] gfs2: fsid=syz:syz.0: found 1 quota changes [ 44.188796][ T4430] ------------[ cut here ]------------ [ 44.189745][ T4430] WARNING: CPU: 0 PID: 4430 at include/linux/backing-dev.h:247 __folio_mark_dirty+0x8a0/0xcd8 [ 44.191426][ T4430] Modules linked in: [ 44.192096][ T4430] CPU: 0 PID: 4430 Comm: syz-executor Not tainted syzkaller #0 [ 44.193421][ T4430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 44.195135][ T4430] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 44.196480][ T4430] pc : __folio_mark_dirty+0x8a0/0xcd8 [ 44.197394][ T4430] lr : __folio_mark_dirty+0x8a0/0xcd8 [ 44.198304][ T4430] sp : ffff8000213c76e0 [ 44.199029][ T4430] x29: ffff8000213c7700 x28: 1fffff8000651da8 x27: dfff800000000000 [ 44.200248][ T4430] x26: 0000000000000000 x25: ffff0000c049c990 x24: 0000000000000001 [ 44.201587][ T4430] x23: 0000000000000000 x22: fffffc000328ed48 x21: 1fffe00018093932 [ 44.202922][ T4430] x20: ffff0000d2900c40 x19: fffffc000328ed40 x18: ffff800011b8bf60 [ 44.204303][ T4430] x17: ffff800018349000 x16: ffff8000082d7ca0 x15: ffff800017e2a000 [ 44.205685][ T4430] x14: 0000000000000001 x13: 1fffe00018093932 x12: 0000000000ff0100 [ 44.207052][ T4430] x11: ff00800008708b70 x10: 0000000000000000 x9 : ffff800008708b70 [ 44.208308][ T4430] x8 : ffff0000d9af0000 x7 : 0000000000000000 x6 : 0000000000000000 [ 44.209704][ T4430] x5 : 0000000000000020 x4 : 0000000000000000 x3 : ffff800008a56aa8 [ 44.210957][ T4430] x2 : ffff0000cecfe060 x1 : 0000000000000000 x0 : 0000000000000000 [ 44.212183][ T4430] Call trace: [ 44.212687][ T4430] __folio_mark_dirty+0x8a0/0xcd8 [ 44.213426][ T4430] mark_buffer_dirty+0x2b8/0x5c0 [ 44.214165][ T4430] gfs2_unpin+0x120/0x8fc [ 44.214844][ T4430] buf_lo_after_commit+0x140/0x188 [ 44.215627][ T4430] gfs2_log_flush+0xc00/0x1b20 [ 44.216359][ T4430] gfs2_kill_sb+0x5c/0xd4 [ 44.217042][ T4430] deactivate_locked_super+0xac/0x120 [ 44.217853][ T4430] deactivate_super+0xe4/0x104 [ 44.218561][ T4430] cleanup_mnt+0x390/0x418 [ 44.219313][ T4430] __cleanup_mnt+0x20/0x30 [ 44.220068][ T4430] task_work_run+0x1ec/0x278 [ 44.220864][ T4430] do_notify_resume+0x1fa0/0x2aa4 [ 44.221707][ T4430] el0_svc+0x98/0x128 [ 44.222416][ T4430] el0t_64_sync_handler+0x84/0xf0 [ 44.223202][ T4430] el0t_64_sync+0x18c/0x190 [ 44.223961][ T4430] irq event stamp: 162126 [ 44.224659][ T4430] hardirqs last enabled at (162125): [] folio_memcg_lock+0xe8/0x1f4 [ 44.226242][ T4430] hardirqs last disabled at (162126): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 44.227846][ T4430] softirqs last enabled at (161934): [] local_bh_enable+0x10/0x34 [ 44.229367][ T4430] softirqs last disabled at (161932): [] local_bh_disable+0x10/0x34 [ 44.230977][ T4430] ---[ end trace 0000000000000000 ]--- [ 44.280537][ T4430] ------------[ cut here ]------------ [ 44.281458][ T4430] WARNING: CPU: 1 PID: 4430 at include/linux/backing-dev.h:247 __folio_start_writeback+0x88c/0xa7c [ 44.283103][ T4430] Modules linked in: [ 44.283728][ T4430] CPU: 1 PID: 4430 Comm: syz-executor Tainted: G W syzkaller #0 [ 44.285097][ T4430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 44.286710][ T4430] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 44.287997][ T4430] pc : __folio_start_writeback+0x88c/0xa7c [ 44.288936][ T4430] lr : __folio_start_writeback+0x88c/0xa7c [ 44.289854][ T4430] sp : ffff8000213c7180 [ 44.290565][ T4430] x29: ffff8000213c7260 x28: dfff800000000000 x27: 0000000000000000 [ 44.291894][ T4430] x26: ffff700004278e38 x25: 0000000000000000 x24: ffff0000d2900c40 [ 44.293260][ T4430] x23: ffff8000213c71e0 x22: ffff0000c049c7e8 x21: 0000000000000001 [ 44.294566][ T4430] x20: fffffc000328ed48 x19: fffffc000328ed40 x18: ffff800011b8bf60 [ 44.295850][ T4430] x17: ffff800018349000 x16: ffff8000082d7ca0 x15: 0000000000000000 [ 44.297148][ T4430] x14: 0000000000000001 x13: 1fffff8000651da8 x12: 0000000000ff0100 [ 44.298542][ T4430] x11: ff0080000870b07c x10: 0000000000000000 x9 : ffff80000870b07c [ 44.299865][ T4430] x8 : ffff0000d9af0000 x7 : ffff80000870aae8 x6 : 0000000000000000 [ 44.301086][ T4430] x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000870ab28 [ 44.302457][ T4430] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 44.303869][ T4430] Call trace: [ 44.304408][ T4430] __folio_start_writeback+0x88c/0xa7c [ 44.305321][ T4430] set_page_writeback+0x5c/0x7c [ 44.306107][ T4430] gfs2_aspace_writepage+0x514/0x6dc [ 44.306996][ T4430] __gfs2_writepage+0x70/0x184 [ 44.307772][ T4430] write_cache_pages+0x74c/0xde8 [ 44.308550][ T4430] gfs2_ail1_flush+0x7c4/0xa14 [ 44.309274][ T4430] empty_ail1_list+0x130/0x214 [ 44.310018][ T4430] gfs2_log_flush+0x12b4/0x1b20 [ 44.310809][ T4430] gfs2_kill_sb+0x5c/0xd4 [ 44.311548][ T4430] deactivate_locked_super+0xac/0x120 [ 44.312473][ T4430] deactivate_super+0xe4/0x104 [ 44.313277][ T4430] cleanup_mnt+0x390/0x418 [ 44.314059][ T4430] __cleanup_mnt+0x20/0x30 [ 44.314784][ T4430] task_work_run+0x1ec/0x278 [ 44.315499][ T4430] do_notify_resume+0x1fa0/0x2aa4 [ 44.316317][ T4430] el0_svc+0x98/0x128 [ 44.317045][ T4430] el0t_64_sync_handler+0x84/0xf0 [ 44.317799][ T4430] el0t_64_sync+0x18c/0x190 [ 44.318563][ T4430] irq event stamp: 162258 [ 44.319283][ T4430] hardirqs last enabled at (162257): [] folio_memcg_lock+0xe8/0x1f4 [ 44.320856][ T4430] hardirqs last disabled at (162258): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 44.322481][ T4430] softirqs last enabled at (162234): [] handle_softirqs+0xaec/0xc60 [ 44.324026][ T4430] softirqs last disabled at (162129): [] __do_softirq+0x14/0x20 [ 44.325614][ T4430] ---[ end trace 0000000000000000 ]--- [ 44.329766][ T4430] syz-executor: attempt to access beyond end of device [ 44.329766][ T4430] loop0: rw=12289, sector=68719479080, nr_sectors = 8 limit=32768 [ 44.332504][ T4430] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 44.333996][ T4430] ------------[ cut here ]------------ [ 44.334766][ T4430] WARNING: CPU: 1 PID: 4430 at include/linux/backing-dev.h:247 __folio_end_writeback+0x7d0/0x9cc [ 44.336388][ T4430] Modules linked in: [ 44.337016][ T4430] CPU: 1 PID: 4430 Comm: syz-executor Tainted: G W syzkaller #0 [ 44.338512][ T4430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 44.340099][ T4430] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 44.341393][ T4430] pc : __folio_end_writeback+0x7d0/0x9cc [ 44.342339][ T4430] lr : __folio_end_writeback+0x7d0/0x9cc [ 44.343304][ T4430] sp : ffff8000213c6f80 [ 44.343924][ T4430] x29: ffff8000213c6fa0 x28: dfff800000000000 x27: ffff0000c049c7e8 [ 44.345376][ T4430] x26: 0000000000000000 x25: 05ffd20000002153 x24: 1fffff80006de540 [ 44.346760][ T4430] x23: 0000000000000001 x22: ffff0000d531b770 x21: ffff0000d531b778 [ 44.348131][ T4430] x20: 0000000000000001 x19: fffffc00036f2a00 x18: ffff800011b8bf60 [ 44.349454][ T4430] x17: ffff800018349000 x16: ffff8000082d7ca0 x15: ffff800017e2a000 [ 44.350785][ T4430] x14: 0000000000000003 x13: 1ffff00004278de2 x12: 0000000000ff0100 [ 44.352062][ T4430] x11: ff0080000870a5f4 x10: 0000000000000000 x9 : ffff80000870a5f4 [ 44.353372][ T4430] x8 : ffff0000d9af0000 x7 : 0000000000000000 x6 : 0000000000000000 [ 44.354657][ T4430] x5 : 0000000000000080 x4 : 0000000000000000 x3 : 0000000000000010 [ 44.355935][ T4430] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 44.357113][ T4430] Call trace: [ 44.357620][ T4430] __folio_end_writeback+0x7d0/0x9cc [ 44.358391][ T4430] folio_end_writeback+0x12c/0x410 [ 44.359228][ T4430] end_page_writeback+0x58/0x74 [ 44.360011][ T4430] end_buffer_async_write+0x32c/0x4f4 [ 44.360839][ T4430] end_bio_bh_io_sync+0xb0/0x1dc [ 44.361559][ T4430] bio_endio+0x750/0x794 [ 44.362225][ T4430] submit_bio_noacct+0x258/0x16bc [ 44.362995][ T4430] submit_bio+0x29c/0x3d0 [ 44.363690][ T4430] submit_bh_wbc+0x384/0x44c [ 44.364434][ T4430] submit_bh+0x2c/0x3c [ 44.365115][ T4430] gfs2_aspace_writepage+0x57c/0x6dc [ 44.366003][ T4430] __gfs2_writepage+0x70/0x184 [ 44.366742][ T4430] write_cache_pages+0x74c/0xde8 [ 44.367548][ T4430] gfs2_ail1_flush+0x7c4/0xa14 [ 44.368357][ T4430] empty_ail1_list+0x130/0x214 [