Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://36273 [ 31.893401][ T4338] cgroup: Unknown subsys name 'net' [ 32.108695][ T4338] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.369775][ T4338] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 37.297383][ T4347] chnl_net:caif_netlink_parms(): no params data found [ 37.313468][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.314689][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.316136][ T4347] device bridge_slave_0 entered promiscuous mode [ 37.319380][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.320497][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.321997][ T4347] device bridge_slave_1 entered promiscuous mode [ 37.329140][ T4347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.331532][ T4347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.338218][ T4347] team0: Port device team_slave_0 added [ 37.339917][ T4347] team0: Port device team_slave_1 added [ 37.345400][ T4347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.346926][ T4347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.350754][ T4347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.353288][ T4347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.354312][ T4347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.358501][ T4347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.417620][ T4347] device hsr_slave_0 entered promiscuous mode [ 37.456527][ T4347] device hsr_slave_1 entered promiscuous mode [ 37.538072][ T4347] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.588344][ T4347] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.638066][ T4347] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.677389][ T4347] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.713795][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.715055][ T4347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.716353][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.717453][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.733876][ T4347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.737362][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.739853][ T1582] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.741694][ T1582] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.743415][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 37.748849][ T4347] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.751462][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.752893][ T1582] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.753959][ T1582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.757046][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.758497][ T1582] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.759514][ T1582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.764983][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.767165][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.770483][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.773130][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.775707][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.778608][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.827741][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.828931][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.831913][ T4347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.838574][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.843718][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.845320][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.846855][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.848959][ T4347] device veth0_vlan entered promiscuous mode [ 37.851822][ T4347] device veth1_vlan entered promiscuous mode [ 37.858810][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.860258][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.861636][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.863781][ T4347] device veth0_macvtap entered promiscuous mode [ 37.865919][ T4347] device veth1_macvtap entered promiscuous mode [ 37.871367][ T4347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.872591][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.874371][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.878219][ T4347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.879632][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.881931][ T4347] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.883277][ T4347] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.884611][ T4347] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.885916][ T4347] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.288291][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.252989][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.254293][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.255876][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.263775][ T1582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.264971][ T1582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.266219][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.375397][ T4419] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.380399][ T4419] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.381739][ T4419] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.383247][ T4419] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.384453][ T4419] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 39.385618][ T4419] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:00:39 executed programs: 0 [ 39.627827][ T47] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 39.629388][ T47] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 39.630740][ T47] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 39.632216][ T47] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 39.633600][ T47] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 39.634853][ T47] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 39.673858][ T4428] chnl_net:caif_netlink_parms(): no params data found [ 39.689685][ T4428] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.690848][ T4428] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.692396][ T4428] device bridge_slave_0 entered promiscuous mode [ 39.694641][ T4428] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.695682][ T4428] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.697380][ T4428] device bridge_slave_1 entered promiscuous mode [ 39.703443][ T4428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.705820][ T4428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.712869][ T4428] team0: Port device team_slave_0 added [ 39.714690][ T4428] team0: Port device team_slave_1 added [ 39.719699][ T4428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.720772][ T4428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.724395][ T4428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.727313][ T4428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.728418][ T4428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.732172][ T4428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.787357][ T4428] device hsr_slave_0 entered promiscuous mode [ 39.826510][ T4428] device hsr_slave_1 entered promiscuous mode [ 39.866373][ T4428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.867787][ T4428] Cannot create hsr debugfs directory [ 40.957329][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.686488][ T4421] Bluetooth: hci1: command 0x0409 tx timeout [ 43.257358][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.348432][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.766542][ T4421] Bluetooth: hci1: command 0x041b tx timeout [ 44.267504][ T4428] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.307363][ T4428] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.408053][ T4428] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.499148][ T4428] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.607261][ T4428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.610735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.612300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.614524][ T4428] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.617070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.618624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.620009][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.621022][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.622363][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.625765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.627663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.629245][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.630267][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.669583][ T1320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.672262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.674893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.676734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.678350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.680787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.682562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.685075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.686656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.689128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.690595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.693458][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.771026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.772439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.775272][ T4428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.781815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.783411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.789116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.790596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.792150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.793514][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.795572][ T4428] device veth0_vlan entered promiscuous mode [ 44.799087][ T4428] device veth1_vlan entered promiscuous mode [ 44.806059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.808158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.809615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.811134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.817147][ T39] device hsr_slave_0 left promiscuous mode [ 44.846367][ T39] device hsr_slave_1 left promiscuous mode [ 44.926399][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.927636][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.929305][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.930417][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.931847][ T39] device bridge_slave_1 left promiscuous mode [ 44.933211][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.967195][ T39] device bridge_slave_0 left promiscuous mode [ 44.968195][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.116487][ T39] device veth1_macvtap left promiscuous mode [ 45.117798][ T39] device veth0_macvtap left promiscuous mode [ 45.118762][ T39] device veth1_vlan left promiscuous mode [ 45.119748][ T39] device veth0_vlan left promiscuous mode [ 45.846315][ T47] Bluetooth: hci1: command 0x040f tx timeout [ 47.307267][ T39] team0 (unregistering): Port device team_slave_1 removed [ 47.477100][ T39] team0 (unregistering): Port device team_slave_0 removed [ 47.637456][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.836724][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.926397][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 49.437115][ T39] bond0 (unregistering): Released all slaves [ 49.739327][ T4428] device veth0_macvtap entered promiscuous mode [ 49.741513][ T4428] device veth1_macvtap entered promiscuous mode [ 49.745981][ T4428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.750085][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.751569][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.752892][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.754214][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.760655][ T4428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.761817][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.763349][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.765654][ T4428] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.767386][ T4428] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.768651][ T4428] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.769941][ T4428] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.793923][ T4503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.796179][ T4503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.799311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.804240][ T4503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.805450][ T4503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.806670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.961656][ T4505] loop0: detected capacity change from 0 to 32768 [ 49.968445][ T4505] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 49.969663][ T4505] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 49.984215][ T4505] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 49.986390][ T22] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 49.987422][ T22] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 50.000390][ T22] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 12ms [ 50.002328][ T22] gfs2: fsid=syz:syz.0: jid=0: Done [ 50.003309][ T4505] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 50.124506][ T4428] ------------[ cut here ]------------ [ 50.125485][ T4428] WARNING: CPU: 0 PID: 4428 at include/linux/backing-dev.h:247 __folio_mark_dirty+0x8b8/0xce0 [ 50.127002][ T4428] Modules linked in: [ 50.127579][ T4428] CPU: 0 PID: 4428 Comm: syz-executor Not tainted syzkaller #0 [ 50.128682][ T4428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 50.130143][ T4428] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 50.131339][ T4428] pc : __folio_mark_dirty+0x8b8/0xce0 [ 50.132183][ T4428] lr : __folio_mark_dirty+0x8b8/0xce0 [ 50.132982][ T4428] sp : ffff800020717700 [ 50.133618][ T4428] x29: ffff800020717710 x28: 1fffff80006fa300 x27: 0000000000000000 [ 50.134828][ T4428] x26: dfff800000000000 x25: 0000000000000000 x24: ffff0000c049c998 [ 50.136049][ T4428] x23: 0000000000000001 x22: 0000000000000000 x21: 1fffe00018093933 [ 50.137439][ T4428] x20: ffff0000df3c47e8 x19: fffffc00037d1800 x18: 1fffe00033e7277e [ 50.138659][ T4428] x17: ffff80001537d000 x16: ffff8000082dba2c x15: 000000000004ffff [ 50.139857][ T4428] x14: 0000000000000001 x13: 1fffe00018093933 x12: 0000000000000000 [ 50.141054][ T4428] x11: ff008000087148ac x10: 0000000000000000 x9 : ffff8000087148ac [ 50.142277][ T4428] x8 : ffff0000ccfd8000 x7 : 0000000000000000 x6 : 0000000000000000 [ 50.143518][ T4428] x5 : 0000000000000020 x4 : 0000000000000000 x3 : ffff800008a66314 [ 50.144708][ T4428] x2 : ffff0000cede2060 x1 : 0000000000000000 x0 : 0000000000000000 [ 50.145919][ T4428] Call trace: [ 50.146424][ T4428] __folio_mark_dirty+0x8b8/0xce0 [ 50.147184][ T4428] mark_buffer_dirty+0x2b8/0x5c0 [ 50.147974][ T4428] gfs2_unpin+0x128/0x918 [ 50.148633][ T4428] buf_lo_after_commit+0x144/0x18c [ 50.149499][ T4428] __gfs2_log_flush+0x12e8/0x1bd4 [ 50.150286][ T4428] gfs2_log_flush+0x3c/0x58 [ 50.151000][ T4428] gfs2_kill_sb+0x5c/0xd8 [ 50.151612][ T4428] deactivate_locked_super+0xb4/0x128 [ 50.152415][ T4428] deactivate_super+0xe4/0x104 [ 50.153099][ T4428] cleanup_mnt+0x3a8/0x430 [ 50.153787][ T4428] __cleanup_mnt+0x20/0x30 [ 50.154468][ T4428] task_work_run+0x1f4/0x280 [ 50.155180][ T4428] do_notify_resume+0x20f8/0x2c84 [ 50.155958][ T4428] el0_svc+0x98/0x128 [ 50.156591][ T4428] el0t_64_sync_handler+0x84/0xf0 [ 50.157368][ T4428] el0t_64_sync+0x18c/0x190 [ 50.158076][ T4428] irq event stamp: 163258 [ 50.158707][ T4428] hardirqs last enabled at (163257): [] folio_memcg_lock+0xe8/0x1f8 [ 50.160278][ T4428] hardirqs last disabled at (163258): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 50.161893][ T4428] softirqs last enabled at (163172): [] handle_softirqs+0xb1c/0xc90 [ 50.163420][ T4428] softirqs last disabled at (162995): [] __do_softirq+0x14/0x20 [ 50.164852][ T4428] ---[ end trace 0000000000000000 ]--- [ 50.172113][ T4428] ------------[ cut here ]------------ [ 50.172984][ T4428] WARNING: CPU: 0 PID: 4428 at include/linux/backing-dev.h:247 __folio_start_writeback+0x8a8/0xa98 [ 50.174495][ T4428] Modules linked in: [ 50.175035][ T4428] CPU: 0 PID: 4428 Comm: syz-executor Tainted: G W syzkaller #0 [ 50.176248][ T4428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 50.177805][ T4428] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 50.179099][ T4428] pc : __folio_start_writeback+0x8a8/0xa98 [ 50.180006][ T4428] lr : __folio_start_writeback+0x8a8/0xa98 [ 50.180918][ T4428] sp : ffff800020717180 [ 50.181556][ T4428] x29: ffff800020717260 x28: ffff7000040e2e38 x27: 0000000000000000 [ 50.182813][ T4428] x26: ffff0000c049c7f0 x25: 1fffff80006fa301 x24: dfff800000000000 [ 50.184148][ T4428] x23: ffff0000df3c47e8 x22: ffff8000207171e0 x21: ffff0000c049c998 [ 50.185404][ T4428] x20: 0000000000000001 x19: fffffc00037d1800 x18: 1fffe00033e7277e [ 50.186678][ T4428] x17: ffff80001537d000 x16: ffff8000082dba2c x15: 0000000000000000 [ 50.187911][ T4428] x14: 0000000000000001 x13: 1fffff80006fa300 x12: 0000000000000000 [ 50.189105][ T4428] x11: ff00800008716dd0 x10: 0000000000000000 x9 : ffff800008716dd0 [ 50.190395][ T4428] x8 : ffff0000ccfd8000 x7 : ffff800008716820 x6 : 0000000000000000 [ 50.191704][ T4428] x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000871685c [ 50.193064][ T4428] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 50.194370][ T4428] Call trace: [ 50.194891][ T4428] __folio_start_writeback+0x8a8/0xa98 [ 50.195742][ T4428] set_page_writeback+0x5c/0x7c [ 50.196465][ T4428] gfs2_aspace_writepage+0x524/0x6f4 [ 50.197376][ T4428] __gfs2_writepage+0x70/0x184 [ 50.198079][ T4428] write_cache_pages+0x760/0xe00 [ 50.198872][ T4428] gfs2_ail1_flush+0x7a8/0x9f0 [ 50.199717][ T4428] empty_ail1_list+0x130/0x214 [ 50.200511][ T4428] __gfs2_log_flush+0x15c8/0x1bd4 [ 50.201318][ T4428] gfs2_log_flush+0x3c/0x58 [ 50.202024][ T4428] gfs2_kill_sb+0x5c/0xd8 [ 50.202693][ T4428] deactivate_locked_super+0xb4/0x128 [ 50.203576][ T4428] deactivate_super+0xe4/0x104 [ 50.204316][ T4428] cleanup_mnt+0x3a8/0x430 [ 50.205044][ T4428] __cleanup_mnt+0x20/0x30 [ 50.205754][ T4428] task_work_run+0x1f4/0x280 [ 50.206493][ T4428] do_notify_resume+0x20f8/0x2c84 [ 50.207358][ T4428] el0_svc+0x98/0x128 [ 50.207978][ T4428] el0t_64_sync_handler+0x84/0xf0 [ 50.208762][ T4428] el0t_64_sync+0x18c/0x190 [ 50.209494][ T4428] irq event stamp: 163394 [ 50.210144][ T4428] hardirqs last enabled at (163393): [] folio_memcg_lock+0xe8/0x1f8 [ 50.211594][ T4428] hardirqs last disabled at (163394): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 50.213123][ T4428] softirqs last enabled at (163370): [] handle_softirqs+0xb1c/0xc90 [ 50.214529][ T4428] softirqs last disabled at (163261): [] __do_softirq+0x14/0x20 [ 50.215910][ T4428] ---[ end trace 0000000000000000 ]--- [ 50.220311][ C0] ------------[ cut here ]------------ [ 50.221243][ C0] WARNING: CPU: 0 PID: 15 at include/linux/backing-dev.h:247 __folio_end_writeback+0x7d0/0x9cc [ 50.222800][ C0] Modules linked in: [ 50.223426][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G W syzkaller #0 [ 50.224765][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 50.226239][ C0] pstate: 424000c5 (nZcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 50.227472][ C0] pc : __folio_end_writeback+0x7d0/0x9cc [ 50.228317][ C0] lr : __folio_end_writeback+0x7d0/0x9cc [ 50.229214][ C0] sp : ffff80001cb97980 [ 50.229816][ C0] x29: ffff80001cb979a0 x28: 1fffff80006f4fc1 x27: 1fffff80006f4fc0 [ 50.231017][ C0] x26: dfff800000000000 x25: 0000000000000000 x24: ffff0000c049c7f0 [ 50.232172][ C0] x23: ffff0000c049c998 x22: ffff0000df3c7770 x21: ffff0000df3c7778 [ 50.233436][ C0] x20: 0000000000000001 x19: fffffc00037a7e00 x18: 1fffe00033e7277e [ 50.234648][ C0] x17: ffff80001537d000 x16: ffff8000082dba2c x15: 0000000000000000 [ 50.235912][ C0] x14: 0000000000000003 x13: 1ffff00003972f22 x12: 0000000000000000 [ 50.237081][ C0] x11: ff0080000871632c x10: 0000000000000000 x9 : ffff80000871632c [ 50.238289][ C0] x8 : ffff0000c09b3800 x7 : 0000000000000000 x6 : 0000000000000000 [ 50.239558][ C0] x5 : 0000000000000080 x4 : 0000000000000000 x3 : 0000000000000010 [ 50.240791][ C0] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 50.242018][ C0] Call trace: [ 50.242535][ C0] __folio_end_writeback+0x7d0/0x9cc [ 50.243348][ C0] folio_end_writeback+0x12c/0x410 [ 50.244173][ C0] end_page_writeback+0x58/0x74 [ 50.244921][ C0] end_buffer_async_write+0x330/0x4fc [ 50.245671][ C0] end_bio_bh_io_sync+0xb4/0x1e4 [ 50.246407][ C0] bio_endio+0x750/0x794 [ 50.247055][ C0] blk_update_request+0x4ac/0xc58 [ 50.247795][ C0] blk_mq_end_request+0x54/0x8c [ 50.248547][ C0] lo_complete_rq+0x1e8/0x238 [ 50.249266][ C0] blk_done_softirq+0x11c/0x168 [ 50.250036][ C0] handle_softirqs+0x318/0xc90 [ 50.250752][ C0] run_ksoftirqd+0x7c/0x2ac [ 50.251481][ C0] smpboot_thread_fn+0x4e8/0x960 [ 50.252236][ C0] kthread+0x254/0x2e0 [ 50.252843][ C0] ret_from_fork+0x10/0x20 [ 50.253530][ C0] irq event stamp: 445243 [ 50.254231][ C0] hardirqs last enabled at (445242): [] folio_memcg_lock+0xe8/0x1f8 [ 50.255693][ C0] hardirqs last disabled at (445243): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 50.257255][ C0] softirqs last enabled at (445232): [] handle_softirqs+0xb1c/0xc90 [ 50.258739][ C0] softirqs last disabled at (445237): [] run_ksoftirqd+0x7c/0x2ac [ 50.260188][ C0] ---[ end trace 0000000000000000 ]---