[ 9.491024][ T3995] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: [ 9.523662][ T1574] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 9.532136][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.94' (ED25519) to the list of known hosts. 1970/01/01 00:00:31 parsed 1 programs 1970/01/01 00:00:31 serving rpc on tcp://37475 syzkaller login: [ 32.448968][ T4341] cgroup: Unknown subsys name 'net' [ 32.688806][ T4341] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.981339][ T4341] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 38.672596][ T4370] chnl_net:caif_netlink_parms(): no params data found [ 38.692353][ T4370] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.693820][ T4370] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.695464][ T4370] device bridge_slave_0 entered promiscuous mode [ 38.698230][ T4370] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.699641][ T4370] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.701204][ T4370] device bridge_slave_1 entered promiscuous mode [ 38.708672][ T4370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.711694][ T4370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.720078][ T4370] team0: Port device team_slave_0 added [ 38.721821][ T4370] team0: Port device team_slave_1 added [ 38.727806][ T4370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.729056][ T4370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.733375][ T4370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.736150][ T4370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.737443][ T4370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.741716][ T4370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.797295][ T4370] device hsr_slave_0 entered promiscuous mode [ 38.826141][ T4370] device hsr_slave_1 entered promiscuous mode [ 38.910037][ T4370] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.950264][ T4370] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.979038][ T4370] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.028381][ T4370] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.074169][ T4370] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.075520][ T4370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.077115][ T4370] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.078319][ T4370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.096606][ T4370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.100797][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.103626][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.105438][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.107552][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 39.111957][ T4370] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.115683][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.118266][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.119660][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.125114][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.127269][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.128572][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.134866][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 39.137523][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 39.141035][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 39.144056][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.148197][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.151263][ T4370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.221197][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.222687][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.227635][ T4370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.233512][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.239967][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.241962][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.243500][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.245779][ T4370] device veth0_vlan entered promiscuous mode [ 39.249252][ T4370] device veth1_vlan entered promiscuous mode [ 39.259079][ T4370] device veth0_macvtap entered promiscuous mode [ 39.261858][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.263669][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.265540][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.267796][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.270262][ T4370] device veth1_macvtap entered promiscuous mode [ 39.274970][ T4370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.276828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.280954][ T4370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.282437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.285361][ T4370] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.287378][ T4370] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.289095][ T4370] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.290548][ T4370] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.412785][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.414029][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.415609][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.423418][ T1668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.424846][ T1668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.426916][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.408881][ T1574] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.615473][ T4430] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.618199][ T4430] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.619729][ T4430] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.621399][ T4430] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.622985][ T4430] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 40.624354][ T4430] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:00:40 executed programs: 0 [ 40.852456][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 40.854078][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 40.855583][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 40.865158][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 40.867196][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 40.868617][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 40.911792][ T4438] chnl_net:caif_netlink_parms(): no params data found [ 40.927191][ T4438] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.928527][ T4438] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.930063][ T4438] device bridge_slave_0 entered promiscuous mode [ 40.932121][ T4438] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.933327][ T4438] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.935024][ T4438] device bridge_slave_1 entered promiscuous mode [ 40.941447][ T4438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.944024][ T4438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.950354][ T4438] team0: Port device team_slave_0 added [ 40.953012][ T4438] team0: Port device team_slave_1 added [ 40.958744][ T4438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.959978][ T4438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.964409][ T4438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.967516][ T4438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.968660][ T4438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.972713][ T4438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.017810][ T4438] device hsr_slave_0 entered promiscuous mode [ 41.057073][ T4438] device hsr_slave_1 entered promiscuous mode [ 41.096043][ T4438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.097577][ T4438] Cannot create hsr debugfs directory [ 42.646837][ T1574] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.886248][ T4430] Bluetooth: hci1: command 0x0409 tx timeout [ 44.956376][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 45.017158][ T1574] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.097911][ T1574] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.079743][ T4438] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.127059][ T4438] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.208322][ T4438] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.247077][ T4438] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.366948][ T4438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.370697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.372391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.375525][ T4438] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.378651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.380400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.382055][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.383325][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.384941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.459298][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.461052][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.462612][ T1668] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.463847][ T1668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.466725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 46.470008][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 46.472667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 46.474814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 46.476771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 46.479782][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 46.481541][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 46.484217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.485835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.489511][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.491742][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.494752][ T4438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.616525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.618031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.621216][ T4438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.667879][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.669742][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.677891][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.679661][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.681280][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.682856][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.685120][ T4438] device veth0_vlan entered promiscuous mode [ 46.688558][ T4438] device veth1_vlan entered promiscuous mode [ 46.694680][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.696815][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.698519][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.700032][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.703361][ T4438] device veth0_macvtap entered promiscuous mode [ 46.705751][ T4438] device veth1_macvtap entered promiscuous mode [ 46.752670][ T4438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.754625][ T4438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.757167][ T4438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.758472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.760219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.761680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.763266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.765555][ T4438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.767636][ T4438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.769923][ T4438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.771272][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.772970][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.775889][ T4438] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.777730][ T4438] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.779366][ T4438] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.781038][ T4438] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.837448][ T1668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.839949][ T1668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.842107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.848328][ T1668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.849833][ T1668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.851367][ T1668] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.009022][ T4515] loop0: detected capacity change from 0 to 32768 [ 47.016741][ T4515] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 47.018249][ T4515] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 47.027866][ T4515] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 47.030516][ T3902] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 47.031777][ T3902] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 47.036317][ T4430] Bluetooth: hci1: command 0x040f tx timeout [ 47.059041][ T3902] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 27ms [ 47.061046][ T3902] gfs2: fsid=syz:syz.0: jid=0: Done [ 47.062168][ T4515] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 47.173094][ T4438] ------------[ cut here ]------------ [ 47.174216][ T4438] WARNING: CPU: 0 PID: 4438 at include/linux/backing-dev.h:247 __folio_mark_dirty+0x8b8/0xce0 [ 47.175955][ T4438] Modules linked in: [ 47.176656][ T4438] CPU: 0 PID: 4438 Comm: syz-executor Not tainted syzkaller #0 [ 47.178034][ T4438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 47.179791][ T4438] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 47.181273][ T4438] pc : __folio_mark_dirty+0x8b8/0xce0 [ 47.182182][ T4438] lr : __folio_mark_dirty+0x8b8/0xce0 [ 47.183118][ T4438] sp : ffff800020c17700 [ 47.183794][ T4438] x29: ffff800020c17710 x28: 1fffff800061dc18 x27: 0000000000000000 [ 47.185245][ T4438] x26: dfff800000000000 x25: 0000000000000000 x24: ffff0000c550be98 [ 47.186650][ T4438] x23: 0000000000000001 x22: 0000000000000000 x21: 1fffe00018aa17d3 [ 47.187995][ T4438] x20: ffff0000eba107e8 x19: fffffc00030ee0c0 x18: 1fffe00033e7037e [ 47.189316][ T4438] x17: ffff80001538d000 x16: ffff8000082dbd50 x15: 000000000004ffff [ 47.190706][ T4438] x14: 0000000000000001 x13: 1fffe00018aa17d3 x12: 0000000000000000 [ 47.192102][ T4438] x11: ff00800008715b58 x10: 0000000000000000 x9 : ffff800008715b58 [ 47.193536][ T4438] x8 : ffff0000d622b800 x7 : 0000000000000000 x6 : 0000000000000000 [ 47.194950][ T4438] x5 : 0000000000000020 x4 : 0000000000000000 x3 : ffff800008a67cc8 [ 47.196326][ T4438] x2 : ffff0000ced10060 x1 : 0000000000000000 x0 : 0000000000000000 [ 47.197774][ T4438] Call trace: [ 47.198369][ T4438] __folio_mark_dirty+0x8b8/0xce0 [ 47.199303][ T4438] mark_buffer_dirty+0x2b8/0x5c0 [ 47.200156][ T4438] gfs2_unpin+0x128/0x918 [ 47.200951][ T4438] buf_lo_after_commit+0x144/0x18c [ 47.201883][ T4438] __gfs2_log_flush+0x12e8/0x1bd4 [ 47.202798][ T4438] gfs2_log_flush+0x3c/0x58 [ 47.203573][ T4438] gfs2_kill_sb+0x5c/0xd8 [ 47.204297][ T4438] deactivate_locked_super+0xb4/0x128 [ 47.205209][ T4438] deactivate_super+0xe4/0x104 [ 47.206032][ T4438] cleanup_mnt+0x3a8/0x430 [ 47.206801][ T4438] __cleanup_mnt+0x20/0x30 [ 47.207580][ T4438] task_work_run+0x1f4/0x280 [ 47.208365][ T4438] do_notify_resume+0x20f8/0x2c84 [ 47.209227][ T4438] el0_svc+0x98/0x128 [ 47.209943][ T4438] el0t_64_sync_handler+0x84/0xf0 [ 47.210865][ T4438] el0t_64_sync+0x18c/0x190 [ 47.211639][ T4438] irq event stamp: 153202 [ 47.212377][ T4438] hardirqs last enabled at (153201): [] folio_memcg_lock+0xe8/0x1f8 [ 47.214061][ T4438] hardirqs last disabled at (153202): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 47.215777][ T4438] softirqs last enabled at (153086): [] local_bh_enable+0x10/0x34 [ 47.217476][ T4438] softirqs last disabled at (153084): [] local_bh_disable+0x10/0x34 [ 47.219225][ T4438] ---[ end trace 0000000000000000 ]--- [ 47.226405][ T4438] ------------[ cut here ]------------ [ 47.227544][ T4438] WARNING: CPU: 1 PID: 4438 at include/linux/backing-dev.h:247 __folio_start_writeback+0x8a8/0xa98 [ 47.229443][ T4438] Modules linked in: [ 47.230122][ T4438] CPU: 1 PID: 4438 Comm: syz-executor Tainted: G W syzkaller #0 [ 47.231735][ T4438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 47.233639][ T4438] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 47.235025][ T4438] pc : __folio_start_writeback+0x8a8/0xa98 [ 47.235970][ T4438] lr : __folio_start_writeback+0x8a8/0xa98 [ 47.237013][ T4438] sp : ffff800020c17180 [ 47.237718][ T4438] x29: ffff800020c17260 x28: ffff700004182e38 x27: 0000000000000000 [ 47.239145][ T4438] x26: ffff0000c550bcf0 x25: 1fffff800061dc19 x24: dfff800000000000 [ 47.240551][ T4438] x23: ffff0000eba107e8 x22: ffff800020c171e0 x21: ffff0000c550be98 [ 47.241930][ T4438] x20: 0000000000000001 x19: fffffc00030ee0c0 x18: 1fffe00033e7457e [ 47.243353][ T4438] x17: ffff80001538d000 x16: ffff8000082dbd50 x15: 0000000000000000 [ 47.244922][ T4438] x14: 0000000000000001 x13: 1fffff800061dc18 x12: 0000000000000000 [ 47.246478][ T4438] x11: ff0080000871807c x10: 0000000000000000 x9 : ffff80000871807c [ 47.248017][ T4438] x8 : ffff0000d622b800 x7 : ffff800008717acc x6 : 0000000000000000 [ 47.249684][ T4438] x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff800008717b08 [ 47.251337][ T4438] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 47.252987][ T4438] Call trace: [ 47.253620][ T4438] __folio_start_writeback+0x8a8/0xa98 [ 47.254659][ T4438] set_page_writeback+0x5c/0x7c [ 47.255617][ T4438] gfs2_aspace_writepage+0x524/0x6f4 [ 47.256662][ T4438] __gfs2_writepage+0x70/0x184 [ 47.257481][ T4438] write_cache_pages+0x760/0xe00 [ 47.258311][ T4438] gfs2_ail1_flush+0x7a8/0x9f0 [ 47.259141][ T4438] empty_ail1_list+0x130/0x214 [ 47.259978][ T4438] __gfs2_log_flush+0x15c8/0x1bd4 [ 47.260857][ T4438] gfs2_log_flush+0x3c/0x58 [ 47.261671][ T4438] gfs2_kill_sb+0x5c/0xd8 [ 47.262452][ T4438] deactivate_locked_super+0xb4/0x128 [ 47.263497][ T4438] deactivate_super+0xe4/0x104 [ 47.264368][ T4438] cleanup_mnt+0x3a8/0x430 [ 47.265159][ T4438] __cleanup_mnt+0x20/0x30 [ 47.265979][ T4438] task_work_run+0x1f4/0x280 [ 47.266760][ T4438] do_notify_resume+0x20f8/0x2c84 [ 47.267650][ T4438] el0_svc+0x98/0x128 [ 47.268359][ T4438] el0t_64_sync_handler+0x84/0xf0 [ 47.269285][ T4438] el0t_64_sync+0x18c/0x190 [ 47.270070][ T4438] irq event stamp: 153640 [ 47.270823][ T4438] hardirqs last enabled at (153639): [] folio_memcg_lock+0xe8/0x1f8 [ 47.272438][ T4438] hardirqs last disabled at (153640): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 47.274217][ T4438] softirqs last enabled at (153616): [] handle_softirqs+0xb1c/0xc90 [ 47.275939][ T4438] softirqs last disabled at (153205): [] __do_softirq+0x14/0x20 [ 47.277519][ T4438] ---[ end trace 0000000000000000 ]--- [ 47.281849][ C1] ------------[ cut here ]------------ [ 47.282953][ C1] WARNING: CPU: 1 PID: 21 at include/linux/backing-dev.h:247 __folio_end_writeback+0x7d0/0x9cc [ 47.284722][ C1] Modules linked in: [ 47.285393][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 [ 47.286925][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 47.288673][ C1] pstate: 424000c5 (nZcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 47.290029][ C1] pc : __folio_end_writeback+0x7d0/0x9cc [ 47.290996][ C1] lr : __folio_end_writeback+0x7d0/0x9cc [ 47.292022][ C1] sp : ffff80001cc17980 [ 47.292731][ C1] x29: ffff80001cc179a0 x28: 1fffff800069fa21 x27: 1fffff800069fa20 [ 47.294120][ C1] x26: dfff800000000000 x25: 0000000000000000 x24: ffff0000c550bcf0 [ 47.295603][ C1] x23: ffff0000c550be98 x22: ffff0000eba13770 x21: ffff0000eba13778 [ 47.297036][ C1] x20: 0000000000000001 x19: fffffc00034fd100 x18: 1fffe00033e7457e [ 47.298492][ C1] x17: ffff80001538d000 x16: ffff8000082dbd50 x15: ffff00019f3a2bfc [ 47.299983][ C1] x14: 0000000000000003 x13: 1ffff00003982f22 x12: 0000000000000000 [ 47.301461][ C1] x11: ff008000087175d8 x10: 0000000000000000 x9 : ffff8000087175d8 [ 47.302865][ C1] x8 : ffff0000c0a59c00 x7 : 0000000000000000 x6 : 0000000000000000 [ 47.304506][ C1] x5 : 0000000000000080 x4 : 0000000000000000 x3 : 0000000000000010 [ 47.305990][ C1] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 47.307409][ C1] Call trace: [ 47.307985][ C1] __folio_end_writeback+0x7d0/0x9cc [ 47.308942][ C1] folio_end_writeback+0x12c/0x410 [ 47.309948][ C1] end_page_writeback+0x58/0x74 [ 47.310847][ C1] end_buffer_async_write+0x330/0x4fc [ 47.311812][ C1] end_bio_bh_io_sync+0xb4/0x1e4 [ 47.312684][ C1] bio_endio+0x750/0x794 [ 47.313469][ C1] blk_update_request+0x4ac/0xc58 [ 47.314389][ C1] blk_mq_end_request+0x54/0x8c [ 47.315301][ C1] lo_complete_rq+0x1e8/0x238 [ 47.316141][ C1] blk_done_softirq+0x11c/0x168 [ 47.317011][ C1] handle_softirqs+0x318/0xc90 [ 47.317834][ C1] run_ksoftirqd+0x7c/0x2ac [ 47.318629][ C1] smpboot_thread_fn+0x4e8/0x960 [ 47.319521][ C1] kthread+0x254/0x2e0 [ 47.320259][ C1] ret_from_fork+0x10/0x20 [ 47.321049][ C1] irq event stamp: 425655 [ 47.321811][ C1] hardirqs last enabled at (425654): [] folio_memcg_lock+0xe8/0x1f8 [ 47.323490][ C1] hardirqs last disabled at (425655): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 47.325153][ C1] softirqs last enabled at (425644): [] handle_softirqs+0xb1c/0xc90 [ 47.326814][ C1] softirqs last disabled at (425649): [] run_ksoftirqd+0x7c/0x2ac [ 47.328391][ C1] ---[ end trace 0000000000000000 ]---