Warning: Permanently added '10.128.1.74' (ED25519) to the list of known hosts. 1970/01/01 00:00:31 parsed 1 programs 1970/01/01 00:00:31 serving rpc on tcp://36949 [ 32.469584][ T4339] cgroup: Unknown subsys name 'net' [ 32.773346][ T4339] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.060667][ T4339] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 40.485893][ T4368] chnl_net:caif_netlink_parms(): no params data found [ 40.506503][ T4368] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.508000][ T4368] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.509623][ T4368] device bridge_slave_0 entered promiscuous mode [ 40.512136][ T4368] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.513251][ T4368] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.514706][ T4368] device bridge_slave_1 entered promiscuous mode [ 40.522230][ T4368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.524751][ T4368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.531822][ T4368] team0: Port device team_slave_0 added [ 40.533683][ T4368] team0: Port device team_slave_1 added [ 40.538829][ T4368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.539963][ T4368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.544417][ T4368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.547100][ T4368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.548355][ T4368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.553300][ T4368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.602418][ T4368] device hsr_slave_0 entered promiscuous mode [ 40.640941][ T4368] device hsr_slave_1 entered promiscuous mode [ 40.715075][ T4368] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.763712][ T4368] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.812825][ T4368] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.842132][ T4368] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.889443][ T4368] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.890772][ T4368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.892129][ T4368] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.893358][ T4368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.911214][ T4368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.915498][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.918295][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.920442][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.923646][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 40.928056][ T4368] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.931609][ T1666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.933263][ T1666] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.934579][ T1666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.937576][ T1666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.939003][ T1666] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.940261][ T1666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.949472][ T1666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.952052][ T1666] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.955369][ T1666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.958216][ T1666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.963242][ T1666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.965846][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.018091][ T1666] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.019384][ T1666] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.023232][ T4368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.028891][ T1666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.036339][ T1666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.038113][ T1666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.039570][ T1666] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.043411][ T4368] device veth0_vlan entered promiscuous mode [ 41.046380][ T4368] device veth1_vlan entered promiscuous mode [ 41.055496][ T1666] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.057122][ T1666] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.058707][ T1666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.061895][ T4368] device veth0_macvtap entered promiscuous mode [ 41.064370][ T4368] device veth1_macvtap entered promiscuous mode [ 41.069354][ T4368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.070643][ T1666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.074094][ T1666] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.077194][ T4368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.078654][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.081694][ T4368] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.083160][ T4368] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.084572][ T4368] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.085836][ T4368] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.179782][ T4386] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 41.183126][ T4386] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 41.184591][ T4386] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 41.186223][ T4386] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 41.187662][ T4386] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 41.188874][ T4386] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 41.582931][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.147129][ T1666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.148629][ T1666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.152937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.158521][ T1574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.159897][ T1574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.161646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:00:42 executed programs: 0 [ 42.543011][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 42.544627][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 42.546047][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 42.547848][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 42.549528][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 42.551096][ T4385] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 42.592710][ T4428] chnl_net:caif_netlink_parms(): no params data found [ 42.613328][ T4428] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.614693][ T4428] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.616317][ T4428] device bridge_slave_0 entered promiscuous mode [ 42.618342][ T4428] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.619464][ T4428] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.621157][ T4428] device bridge_slave_1 entered promiscuous mode [ 42.628019][ T4428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.631825][ T4428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.638127][ T4428] team0: Port device team_slave_0 added [ 42.639889][ T4428] team0: Port device team_slave_1 added [ 42.645574][ T4428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.646830][ T4428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.651005][ T4428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.653606][ T4428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.654816][ T4428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.658818][ T4428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.701974][ T4428] device hsr_slave_0 entered promiscuous mode [ 42.741186][ T4428] device hsr_slave_1 entered promiscuous mode [ 42.791760][ T4428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.793221][ T4428] Cannot create hsr debugfs directory [ 44.421868][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.591034][ T4386] Bluetooth: hci0: command 0x0409 tx timeout [ 46.671135][ T4386] Bluetooth: hci0: command 0x041b tx timeout [ 46.892597][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.972571][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.872716][ T4428] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.085739][ T4428] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.195878][ T4428] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.231832][ T4428] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.313453][ T4428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.317038][ T1666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.318708][ T1666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.322572][ T4428] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.356742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.358534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.360130][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.361414][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.363385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.366518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.368285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.369824][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.371007][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.373501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.376305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.378957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.381249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.383201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.385807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.387592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.390231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.393651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.474647][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.476333][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.479262][ T4428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.577271][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.578727][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.582234][ T4428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.587577][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.589214][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.595703][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.597463][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.599138][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.600529][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.603730][ T4428] device veth0_vlan entered promiscuous mode [ 48.607743][ T4428] device veth1_vlan entered promiscuous mode [ 48.614483][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.616197][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.617682][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.619235][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.656068][ T4428] device veth0_macvtap entered promiscuous mode [ 48.658563][ T4428] device veth1_macvtap entered promiscuous mode [ 48.665359][ T4428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.667170][ T4428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.669268][ T4428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.670533][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.672607][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.674118][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.675714][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.678143][ T4428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.679805][ T4428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.682633][ T4428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.736718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.738593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.741176][ T4428] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.742655][ T4428] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.744011][ T4428] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.745317][ T4428] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.751133][ T4386] Bluetooth: hci0: command 0x040f tx timeout [ 48.765500][ T1574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.766857][ T1574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.769032][ T1574] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.806709][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.808001][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.809323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.925293][ T39] device hsr_slave_0 left promiscuous mode [ 48.961082][ T39] device hsr_slave_1 left promiscuous mode [ 48.997529][ T4504] loop0: detected capacity change from 0 to 32768 [ 49.012506][ T4504] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 49.013922][ T4504] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 49.025596][ T4504] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 49.027856][ T7] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 49.028952][ T7] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 49.041229][ T7] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 12ms [ 49.042137][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.043315][ T7] gfs2: fsid=syz:syz.0: jid=0: Done [ 49.043737][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.044745][ T4504] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 49.047733][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.049042][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.050571][ T39] device bridge_slave_1 left promiscuous mode [ 49.052538][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.074235][ T39] device bridge_slave_0 left promiscuous mode [ 49.075355][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.159662][ T4428] ------------[ cut here ]------------ [ 49.160741][ T4428] WARNING: CPU: 0 PID: 4428 at include/linux/backing-dev.h:247 __folio_mark_dirty+0x8b8/0xce0 [ 49.162498][ T4428] Modules linked in: [ 49.163143][ T4428] CPU: 0 PID: 4428 Comm: syz-executor Not tainted syzkaller #0 [ 49.164513][ T4428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 49.166191][ T4428] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 49.167764][ T4428] pc : __folio_mark_dirty+0x8b8/0xce0 [ 49.168839][ T4428] lr : __folio_mark_dirty+0x8b8/0xce0 [ 49.169877][ T4428] sp : ffff800020d07620 [ 49.170610][ T4428] x29: ffff800020d07630 x28: 1fffff80006f8e40 x27: 0000000000000000 [ 49.171950][ T4428] x26: dfff800000000000 x25: 0000000000000000 x24: ffff0000c550be98 [ 49.173386][ T4428] x23: 0000000000000001 x22: 0000000000000000 x21: 1fffe00018aa17d3 [ 49.174804][ T4428] x20: ffff0000f0f082a0 x19: fffffc00037c7200 x18: 1fffe00033e7277e [ 49.176192][ T4428] x17: ffff80001537d000 x16: ffff8000082dba2c x15: 000000000004ffff [ 49.177633][ T4428] x14: 0000000000000001 x13: 1fffe00018aa17d3 x12: 0000000000000000 [ 49.179096][ T4428] x11: ff008000087148ac x10: 0000000000000000 x9 : ffff8000087148ac [ 49.180777][ T4428] x8 : ffff0000ccced400 x7 : 0000000000000000 x6 : 0000000000000000 [ 49.182307][ T4428] x5 : ffff800018686ed0 x4 : 0000000000000008 x3 : ffff800008a66314 [ 49.183730][ T4428] x2 : ffff0000cebd4060 x1 : 0000000000000000 x0 : 0000000000000000 [ 49.185167][ T4428] Call trace: [ 49.185742][ T4428] __folio_mark_dirty+0x8b8/0xce0 [ 49.186583][ T4428] mark_buffer_dirty+0x2b8/0x5c0 [ 49.187537][ T4428] gfs2_unpin+0x128/0x918 [ 49.188301][ T4428] buf_lo_after_commit+0x144/0x18c [ 49.189201][ T4428] __gfs2_log_flush+0x12e8/0x1bd4 [ 49.190038][ T4428] gfs2_log_flush+0x3c/0x58 [ 49.190786][ T4428] gfs2_kill_sb+0x5c/0xd8 [ 49.191536][ T4428] deactivate_locked_super+0xb4/0x128 [ 49.192462][ T4428] deactivate_super+0xe4/0x104 [ 49.193253][ T4428] cleanup_mnt+0x3a8/0x430 [ 49.193991][ T4428] __cleanup_mnt+0x20/0x30 [ 49.194796][ T4428] task_work_run+0x1f4/0x280 [ 49.195580][ T4428] get_signal+0x1140/0x133c [ 49.196339][ T4428] do_notify_resume+0x364/0x2c84 [ 49.197218][ T4428] el0_svc+0x98/0x128 [ 49.197867][ T4428] el0t_64_sync_handler+0x84/0xf0 [ 49.198711][ T4428] el0t_64_sync+0x18c/0x190 [ 49.199442][ T4428] irq event stamp: 157068 [ 49.200177][ T4428] hardirqs last enabled at (157067): [] folio_memcg_lock+0xe8/0x1f8 [ 49.201787][ T4428] hardirqs last disabled at (157068): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 49.203417][ T4428] softirqs last enabled at (156968): [] local_bh_enable+0x10/0x34 [ 49.205006][ T4428] softirqs last disabled at (156966): [] local_bh_disable+0x10/0x34 [ 49.206547][ T4428] ---[ end trace 0000000000000000 ]--- [ 49.211128][ T4428] ------------[ cut here ]------------ [ 49.212035][ T4428] WARNING: CPU: 0 PID: 4428 at include/linux/backing-dev.h:247 __folio_start_writeback+0x8a8/0xa98 [ 49.214045][ T4428] Modules linked in: [ 49.214711][ T4428] CPU: 0 PID: 4428 Comm: syz-executor Tainted: G W syzkaller #0 [ 49.216138][ T4428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 49.217810][ T4428] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 49.219015][ T4428] pc : __folio_start_writeback+0x8a8/0xa98 [ 49.219990][ T4428] lr : __folio_start_writeback+0x8a8/0xa98 [ 49.220985][ T4428] sp : ffff800020d070a0 [ 49.221739][ T4428] x29: ffff800020d07180 x28: ffff7000041a0e1c x27: 0000000000000000 [ 49.223211][ T4428] x26: ffff0000c550bcf0 x25: 1fffff80006f8e41 x24: dfff800000000000 [ 49.224592][ T4428] x23: ffff0000f0f082a0 x22: ffff800020d07100 x21: ffff0000c550be98 [ 49.225920][ T4428] x20: 0000000000000001 x19: fffffc00037c7200 x18: 1fffe00033e7277e [ 49.227233][ T4428] x17: ffff80001537d000 x16: ffff8000082dba2c x15: 0000000000000000 [ 49.228649][ T4428] x14: 0000000000000001 x13: 1fffff80006f8e40 x12: 0000000000000000 [ 49.230056][ T4428] x11: ff00800008716dd0 x10: 0000000000000000 x9 : ffff800008716dd0 [ 49.231549][ T4428] x8 : ffff0000ccced400 x7 : ffff800008716820 x6 : 0000000000000000 [ 49.232921][ T4428] x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000871685c [ 49.234230][ T4428] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 49.235616][ T4428] Call trace: [ 49.236195][ T4428] __folio_start_writeback+0x8a8/0xa98 [ 49.237104][ T4428] set_page_writeback+0x5c/0x7c [ 49.237915][ T4428] gfs2_aspace_writepage+0x524/0x6f4 [ 49.238842][ T4428] __gfs2_writepage+0x70/0x184 [ 49.239695][ T4428] write_cache_pages+0x760/0xe00 [ 49.240564][ T4428] gfs2_ail1_flush+0x7a8/0x9f0 [ 49.241329][ T4428] empty_ail1_list+0x130/0x214 [ 49.242154][ T4428] __gfs2_log_flush+0x15c8/0x1bd4 [ 49.243022][ T4428] gfs2_log_flush+0x3c/0x58 [ 49.243810][ T4428] gfs2_kill_sb+0x5c/0xd8 [ 49.244547][ T4428] deactivate_locked_super+0xb4/0x128 [ 49.245615][ T4428] deactivate_super+0xe4/0x104 [ 49.246494][ T4428] cleanup_mnt+0x3a8/0x430 [ 49.247340][ T4428] __cleanup_mnt+0x20/0x30 [ 49.248105][ T4428] task_work_run+0x1f4/0x280 [ 49.248870][ T4428] get_signal+0x1140/0x133c [ 49.249687][ T4428] do_notify_resume+0x364/0x2c84 [ 49.250525][ T4428] el0_svc+0x98/0x128 [ 49.251237][ T4428] el0t_64_sync_handler+0x84/0xf0 [ 49.252045][ T4428] el0t_64_sync+0x18c/0x190 [ 49.252818][ T4428] irq event stamp: 157844 [ 49.253607][ T4428] hardirqs last enabled at (157843): [] folio_memcg_lock+0xe8/0x1f8 [ 49.255308][ T4428] hardirqs last disabled at (157844): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 49.257031][ T4428] softirqs last enabled at (157838): [] handle_softirqs+0xb1c/0xc90 [ 49.258763][ T4428] softirqs last disabled at (157325): [] __do_softirq+0x14/0x20 [ 49.260354][ T4428] ---[ end trace 0000000000000000 ]--- [ 49.263505][ C1] ------------[ cut here ]------------ [ 49.264605][ C1] WARNING: CPU: 1 PID: 21 at include/linux/backing-dev.h:247 __folio_end_writeback+0x7d0/0x9cc [ 49.266141][ C1] Modules linked in: [ 49.266713][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 [ 49.267988][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 49.269457][ C1] pstate: 424000c5 (nZcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 49.270541][ C1] pc : __folio_end_writeback+0x7d0/0x9cc [ 49.271443][ C1] lr : __folio_end_writeback+0x7d0/0x9cc [ 49.272399][ C1] sp : ffff80001cc07980 [ 49.273076][ C1] x29: ffff80001cc079a0 x28: 1fffff80006f8e41 x27: 1fffff80006f8e40 [ 49.274559][ C1] x26: dfff800000000000 x25: 0000000000000000 x24: ffff0000c550bcf0 [ 49.276125][ C1] x23: ffff0000c550be98 x22: ffff0000f0f082a0 x21: ffff0000f0f082a8 [ 49.277745][ C1] x20: 0000000000000001 x19: fffffc00037c7200 x18: 1fffe00033e7697e [ 49.279402][ C1] x17: ffff80001537d000 x16: ffff8000082dba2c x15: 000000000004ffff [ 49.280930][ C1] x14: 0000000000000003 x13: 1ffff00003980f22 x12: 0000000000000000 [ 49.282339][ C1] x11: ff0080000871632c x10: 0000000000000000 x9 : ffff80000871632c [ 49.283683][ C1] x8 : ffff0000c0a59c00 x7 : 0000000000000000 x6 : 0000000000000000 [ 49.285183][ C1] x5 : 0000000000000080 x4 : 0000000000000000 x3 : 0000000000000010 [ 49.286581][ C1] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 49.287934][ C1] Call trace: [ 49.288495][ C1] __folio_end_writeback+0x7d0/0x9cc [ 49.289394][ C1] folio_end_writeback+0x12c/0x410 [ 49.290395][ C1] end_page_writeback+0x58/0x74 [ 49.291178][ C1] end_buffer_async_write+0x330/0x4fc [ 49.292077][ C1] end_bio_bh_io_sync+0xb4/0x1e4 [ 49.293037][ C1] bio_endio+0x750/0x794 [ 49.293870][ C1] blk_update_request+0x4ac/0xc58 [ 49.294780][ C1] blk_mq_end_request+0x54/0x8c [ 49.295673][ C1] lo_complete_rq+0x1e8/0x238 [ 49.296524][ C1] blk_done_softirq+0x11c/0x168 [ 49.297379][ C1] handle_softirqs+0x318/0xc90 [ 49.298371][ C1] run_ksoftirqd+0x7c/0x2ac [ 49.299200][ C1] smpboot_thread_fn+0x4e8/0x960 [ 49.300143][ C1] kthread+0x254/0x2e0 [ 49.300874][ C1] ret_from_fork+0x10/0x20 [ 49.301596][ C1] irq event stamp: 449811 [ 49.302353][ C1] hardirqs last enabled at (449810): [] folio_memcg_lock+0xe8/0x1f8 [ 49.304030][ C1] hardirqs last disabled at (449811): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 49.305818][ C1] softirqs last enabled at (449800): [] handle_softirqs+0xb1c/0xc90 [ 49.307526][ C1] softirqs last disabled at (449805): [] run_ksoftirqd+0x7c/0x2ac [ 49.309179][ C1] ---[ end trace 0000000000000000 ]--- [ 49.363440][ T39] device veth1_macvtap left promiscuous mode [ 49.364638][ T39] device veth0_macvtap left promiscuous mode [ 49.365707][ T39] device veth1_vlan left promiscuous mode [ 49.366666][ T39] device veth0_vlan left promiscuous mode