Warning: Permanently added '10.128.1.60' (ED25519) to the list of known hosts. 1970/01/01 00:00:32 parsed 1 programs syzkaller login: [ 34.073414][ T4325] cgroup: Unknown subsys name 'net' [ 34.325013][ T4325] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.609064][ T4325] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 38.967084][ T1615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.968357][ T1615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.970004][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.980551][ T1615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.982137][ T1615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.985355][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.825151][ T4393] chnl_net:caif_netlink_parms(): no params data found [ 39.845927][ T4393] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.847180][ T4393] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.848630][ T4393] device bridge_slave_0 entered promiscuous mode [ 39.850764][ T4393] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.852110][ T4393] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.853501][ T4393] device bridge_slave_1 entered promiscuous mode [ 39.860442][ T4393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.862878][ T4393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.869916][ T4393] team0: Port device team_slave_0 added [ 39.871591][ T4393] team0: Port device team_slave_1 added [ 39.876976][ T4393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.878092][ T4393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.882366][ T4393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.886411][ T4393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.887551][ T4393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.891609][ T4393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.923186][ T4393] device hsr_slave_0 entered promiscuous mode [ 39.972009][ T4393] device hsr_slave_1 entered promiscuous mode [ 40.038815][ T4393] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.071018][ T4393] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.113272][ T4393] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.153039][ T4393] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.224269][ T4393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.228246][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.230000][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.233402][ T4393] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.236079][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.237641][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.239346][ T1620] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.240447][ T1620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.242518][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.244999][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.246620][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.248045][ T1620] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.249138][ T1620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.251427][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.264071][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.266715][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.268527][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.270113][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.274415][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.276077][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.277543][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.278978][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.283560][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.285003][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.287105][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.340157][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.341510][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.354009][ T4393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.360265][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 40.363206][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.369526][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.371141][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.373866][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.385327][ T4393] device veth0_vlan entered promiscuous mode [ 40.390096][ T4393] device veth1_vlan entered promiscuous mode [ 40.397332][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.398932][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.400436][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.404448][ T4393] device veth0_macvtap entered promiscuous mode [ 40.406772][ T4393] device veth1_macvtap entered promiscuous mode [ 40.411667][ T4393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.414005][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.415560][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.417154][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.419769][ T4393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.420927][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.422824][ T1620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.425459][ T4393] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.426832][ T4393] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.428324][ T4393] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.429813][ T4393] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.517141][ T4413] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.518670][ T4413] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.520005][ T4413] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.521434][ T4413] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.525013][ T4413] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 40.526213][ T4413] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:00:41 executed programs: 0 [ 41.116514][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 41.118063][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 41.119526][ T4415] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 41.120958][ T4415] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 41.122933][ T4415] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 41.124093][ T4415] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 41.432886][ T4423] chnl_net:caif_netlink_parms(): no params data found [ 41.458138][ T4423] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.459276][ T4423] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.460733][ T4423] device bridge_slave_0 entered promiscuous mode [ 41.463783][ T4423] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.464890][ T4423] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.466467][ T4423] device bridge_slave_1 entered promiscuous mode [ 41.474344][ T4423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.476646][ T4423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.483323][ T4423] team0: Port device team_slave_0 added [ 41.485032][ T4423] team0: Port device team_slave_1 added [ 41.490710][ T4423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.492169][ T4423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.496573][ T4423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.499017][ T4423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.500170][ T4423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.504630][ T4423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.652808][ T4423] device hsr_slave_0 entered promiscuous mode [ 41.692000][ T4423] device hsr_slave_1 entered promiscuous mode [ 41.731893][ T4423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.733208][ T4423] Cannot create hsr debugfs directory [ 42.123133][ T4423] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.142104][ T4413] Bluetooth: hci0: command 0x0409 tx timeout [ 44.692592][ T4423] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.212201][ T4415] Bluetooth: hci0: command 0x041b tx timeout [ 45.792548][ T4423] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.895013][ T4423] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.156815][ T4423] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.235516][ T4423] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.326040][ T4423] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.405226][ T4423] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.503441][ T4423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.507413][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.509017][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.511321][ T4423] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.515103][ T39] device hsr_slave_0 left promiscuous mode [ 46.533420][ T39] device hsr_slave_1 left promiscuous mode [ 46.652140][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.653348][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.655071][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.656232][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.657631][ T39] device bridge_slave_1 left promiscuous mode [ 46.659046][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.712441][ T39] device bridge_slave_0 left promiscuous mode [ 46.713456][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.871996][ T39] device veth1_macvtap left promiscuous mode [ 46.873078][ T39] device veth0_macvtap left promiscuous mode [ 46.874182][ T39] device veth1_vlan left promiscuous mode [ 46.875157][ T39] device veth0_vlan left promiscuous mode [ 47.291881][ T4415] Bluetooth: hci0: command 0x040f tx timeout [ 49.092944][ T39] team0 (unregistering): Port device team_slave_1 removed [ 49.284208][ T39] team0 (unregistering): Port device team_slave_0 removed [ 49.371829][ T4415] Bluetooth: hci0: command 0x0419 tx timeout [ 49.482284][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.712236][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.292626][ T39] bond0 (unregistering): Released all slaves [ 51.613081][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.615043][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.616481][ T1615] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.617692][ T1615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.619046][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.620590][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.622425][ T1615] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.623449][ T1615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.624887][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.626491][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.628094][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.629823][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.631312][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.633079][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.634552][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.635978][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.639022][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.640435][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.645634][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.647111][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.649668][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.699518][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.700886][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.708269][ T4423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.714079][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.715820][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.721133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.724122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.725776][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.727135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.729319][ T4423] device veth0_vlan entered promiscuous mode [ 51.733654][ T4423] device veth1_vlan entered promiscuous mode [ 51.740429][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.742370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.743806][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.745311][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.747941][ T4423] device veth0_macvtap entered promiscuous mode [ 51.750135][ T4423] device veth1_macvtap entered promiscuous mode [ 51.755092][ T4423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.756222][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.757689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.759068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.760660][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.763932][ T4423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.765026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.766640][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.769026][ T4423] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.770471][ T4423] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.772265][ T4423] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.773589][ T4423] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.791088][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.794877][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.801170][ T4434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.802457][ T4434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.803952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.805419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.987582][ T4440] loop0: detected capacity change from 0 to 32768 [ 52.000373][ T4440] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 52.001697][ T4440] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 52.012337][ T4440] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 52.014702][ T14] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 52.015711][ T14] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 52.027375][ T14] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 11ms [ 52.028857][ T14] gfs2: fsid=syz:syz.0: jid=0: Done [ 52.029765][ T4440] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 52.135807][ T4423] ------------[ cut here ]------------ [ 52.136820][ T4423] WARNING: CPU: 0 PID: 4423 at include/linux/backing-dev.h:247 __folio_mark_dirty+0x8a0/0xcd8 [ 52.138379][ T4423] Modules linked in: [ 52.138942][ T4423] CPU: 0 PID: 4423 Comm: syz-executor Not tainted syzkaller #0 [ 52.140214][ T4423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 52.141760][ T4423] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 52.143050][ T4423] pc : __folio_mark_dirty+0x8a0/0xcd8 [ 52.143948][ T4423] lr : __folio_mark_dirty+0x8a0/0xcd8 [ 52.144844][ T4423] sp : ffff8000207375e0 [ 52.145549][ T4423] x29: ffff800020737600 x28: 1fffff80006c1660 x27: dfff800000000000 [ 52.146882][ T4423] x26: 0000000000000000 x25: ffff0000c510be90 x24: 0000000000000001 [ 52.148211][ T4423] x23: 0000000000000000 x22: fffffc000360b308 x21: 1fffe00018a217d2 [ 52.149518][ T4423] x20: ffff0000de6b6250 x19: fffffc000360b300 x18: ffff800011b8bf60 [ 52.150876][ T4423] x17: ffff800018349000 x16: ffff8000082d7ca0 x15: ffff800017e2a000 [ 52.154312][ T4423] x14: 0000000000000001 x13: 1fffe00018a217d2 x12: 0000000000ff0100 [ 52.155730][ T4423] x11: ff00800008708b70 x10: 0000000000000000 x9 : ffff800008708b70 [ 52.157007][ T4423] x8 : ffff0000ccf69bc0 x7 : 0000000000000000 x6 : 0000000000000000 [ 52.158277][ T4423] x5 : 0000000000000020 x4 : 0000000000000000 x3 : ffff800008a56aa8 [ 52.159596][ T4423] x2 : ffff0000ce8d6060 x1 : 0000000000000000 x0 : 0000000000000000 [ 52.160891][ T4423] Call trace: [ 52.161385][ T4423] __folio_mark_dirty+0x8a0/0xcd8 [ 52.162190][ T4423] mark_buffer_dirty+0x2b8/0x5c0 [ 52.162946][ T4423] gfs2_unpin+0x120/0x8fc [ 52.163624][ T4423] buf_lo_after_commit+0x140/0x188 [ 52.164549][ T4423] gfs2_log_flush+0xc00/0x1b20 [ 52.165360][ T4423] gfs2_kill_sb+0x5c/0xd4 [ 52.166040][ T4423] deactivate_locked_super+0xac/0x120 [ 52.167014][ T4423] deactivate_super+0xe4/0x104 [ 52.167871][ T4423] cleanup_mnt+0x390/0x418 [ 52.168614][ T4423] __cleanup_mnt+0x20/0x30 [ 52.169369][ T4423] task_work_run+0x1ec/0x278 [ 52.170147][ T4423] get_signal+0x111c/0x1304 [ 52.170999][ T4423] do_notify_resume+0x33c/0x2aa4 [ 52.171868][ T4423] el0_svc+0x98/0x128 [ 52.172516][ T4423] el0t_64_sync_handler+0x84/0xf0 [ 52.173350][ T4423] el0t_64_sync+0x18c/0x190 [ 52.174124][ T4423] irq event stamp: 163532 [ 52.174808][ T4423] hardirqs last enabled at (163531): [] folio_memcg_lock+0xe8/0x1f4 [ 52.176452][ T4423] hardirqs last disabled at (163532): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 52.178131][ T4423] softirqs last enabled at (163418): [] local_bh_enable+0x10/0x34 [ 52.179771][ T4423] softirqs last disabled at (163416): [] local_bh_disable+0x10/0x34 [ 52.181313][ T4423] ---[ end trace 0000000000000000 ]--- [ 52.212398][ T4423] ------------[ cut here ]------------ [ 52.213327][ T4423] WARNING: CPU: 1 PID: 4423 at include/linux/backing-dev.h:247 __folio_start_writeback+0x88c/0xa7c [ 52.215137][ T4423] Modules linked in: [ 52.215787][ T4423] CPU: 1 PID: 4423 Comm: syz-executor Tainted: G W syzkaller #0 [ 52.217345][ T4423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 52.219066][ T4423] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 52.220419][ T4423] pc : __folio_start_writeback+0x88c/0xa7c [ 52.221364][ T4423] lr : __folio_start_writeback+0x88c/0xa7c [ 52.222279][ T4423] sp : ffff800020737080 [ 52.223065][ T4423] x29: ffff800020737160 x28: dfff800000000000 x27: 0000000000000000 [ 52.224477][ T4423] x26: ffff7000040e6e18 x25: 0000000000000000 x24: ffff0000de6b6250 [ 52.225851][ T4423] x23: ffff8000207370e0 x22: ffff0000c510bce8 x21: 0000000000000001 [ 52.227175][ T4423] x20: fffffc000360b308 x19: fffffc000360b300 x18: ffff800011b8bf60 [ 52.228530][ T4423] x17: ffff800018349000 x16: ffff8000082d7ca0 x15: 0000000000000000 [ 52.229880][ T4423] x14: 0000000000000001 x13: 1fffff80006c1660 x12: 0000000000ff0100 [ 52.231175][ T4423] x11: ff0080000870b07c x10: 0000000000000000 x9 : ffff80000870b07c [ 52.232599][ T4423] x8 : ffff0000ccf69bc0 x7 : ffff80000870aae8 x6 : 0000000000000000 [ 52.234063][ T4423] x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000870ab28 [ 52.235431][ T4423] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 52.236785][ T4423] Call trace: [ 52.237362][ T4423] __folio_start_writeback+0x88c/0xa7c [ 52.238293][ T4423] set_page_writeback+0x5c/0x7c [ 52.239091][ T4423] gfs2_aspace_writepage+0x514/0x6dc [ 52.240024][ T4423] __gfs2_writepage+0x70/0x184 [ 52.240857][ T4423] write_cache_pages+0x74c/0xde8 [ 52.241680][ T4423] gfs2_ail1_flush+0x7c4/0xa14 [ 52.242483][ T4423] empty_ail1_list+0x130/0x214 [ 52.243293][ T4423] gfs2_log_flush+0x12b4/0x1b20 [ 52.244160][ T4423] gfs2_kill_sb+0x5c/0xd4 [ 52.244898][ T4423] deactivate_locked_super+0xac/0x120 [ 52.245809][ T4423] deactivate_super+0xe4/0x104 [ 52.246605][ T4423] cleanup_mnt+0x390/0x418 [ 52.247338][ T4423] __cleanup_mnt+0x20/0x30 [ 52.248077][ T4423] task_work_run+0x1ec/0x278 [ 52.248860][ T4423] get_signal+0x111c/0x1304 [ 52.249611][ T4423] do_notify_resume+0x33c/0x2aa4 [ 52.250512][ T4423] el0_svc+0x98/0x128 [ 52.251182][ T4423] el0t_64_sync_handler+0x84/0xf0 [ 52.252062][ T4423] el0t_64_sync+0x18c/0x190 [ 52.252826][ T4423] irq event stamp: 163638 [ 52.253545][ T4423] hardirqs last enabled at (163637): [] folio_memcg_lock+0xe8/0x1f4 [ 52.255124][ T4423] hardirqs last disabled at (163638): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 52.256738][ T4423] softirqs last enabled at (163614): [] handle_softirqs+0xaec/0xc60 [ 52.258345][ T4423] softirqs last disabled at (163535): [] __do_softirq+0x14/0x20 [ 52.259916][ T4423] ---[ end trace 0000000000000000 ]--- [ 52.263973][ C1] ------------[ cut here ]------------ [ 52.264875][ C1] WARNING: CPU: 1 PID: 21 at include/linux/backing-dev.h:247 __folio_end_writeback+0x7d0/0x9cc [ 52.266528][ C1] Modules linked in: [ 52.267158][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 [ 52.268572][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 52.270174][ C1] pstate: 424000c5 (nZcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 52.271422][ C1] pc : __folio_end_writeback+0x7d0/0x9cc [ 52.272398][ C1] lr : __folio_end_writeback+0x7d0/0x9cc [ 52.273392][ C1] sp : ffff80001ca87970 [ 52.274090][ C1] x29: ffff80001ca87990 x28: dfff800000000000 x27: ffff0000c510bce8 [ 52.275364][ C1] x26: 0000000000000000 x25: 05ffd60000002052 x24: 1fffff80006cdb70 [ 52.276673][ C1] x23: 0000000000000001 x22: ffff0000de6b42a0 x21: ffff0000de6b42a8 [ 52.278010][ C1] x20: 0000000000000001 x19: fffffc000366db80 x18: ffff800011b8bf60 [ 52.279390][ C1] x17: 1fffe00033eac97e x16: ffff8000082d7ca0 x15: 0000000000000000 [ 52.280695][ C1] x14: 0000000000000003 x13: 1ffff00003950f20 x12: 0000000000ff0100 [ 52.281934][ C1] x11: ff0080000870a5f4 x10: 0000000000000000 x9 : ffff80000870a5f4 [ 52.283264][ C1] x8 : ffff0000c0a51bc0 x7 : 0000000000000000 x6 : 0000000000000000 [ 52.284533][ C1] x5 : 0000000000000080 x4 : 0000000000000000 x3 : 0000000000000010 [ 52.285784][ C1] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 52.287083][ C1] Call trace: [ 52.287641][ C1] __folio_end_writeback+0x7d0/0x9cc [ 52.288609][ C1] folio_end_writeback+0x12c/0x410 [ 52.289511][ C1] end_page_writeback+0x58/0x74 [ 52.290350][ C1] end_buffer_async_write+0x32c/0x4f4 [ 52.291314][ C1] end_bio_bh_io_sync+0xb0/0x1dc [ 52.292164][ C1] bio_endio+0x750/0x794 [ 52.292886][ C1] blk_update_request+0x49c/0xbec [ 52.293696][ C1] blk_mq_end_request+0x54/0x88 [ 52.294528][ C1] lo_complete_rq+0x1ec/0x250 [ 52.295327][ C1] blk_done_softirq+0x11c/0x168 [ 52.296117][ C1] handle_softirqs+0x318/0xc60 [ 52.296887][ C1] run_ksoftirqd+0x7c/0x2ac [ 52.297559][ C1] smpboot_thread_fn+0x4b0/0x964 [ 52.298298][ C1] kthread+0x250/0x2d8 [ 52.299051][ C1] ret_from_fork+0x10/0x20 [ 52.299783][ C1] irq event stamp: 337491 [ 52.300477][ C1] hardirqs last enabled at (337490): [] folio_memcg_lock+0xe8/0x1f4 [ 52.302104][ C1] hardirqs last disabled at (337491): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 52.303772][ C1] softirqs last enabled at (337480): [] handle_softirqs+0xaec/0xc60 [ 52.305526][ C1] softirqs last disabled at (337485): [] run_ksoftirqd+0x7c/0x2ac [ 52.307146][ C1] ---[ end trace 0000000000000000 ]---