[ 9.348586][ T3996] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: [ 9.379309][ T1575] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 9.380656][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.14' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://40603 syzkaller login: [ 31.942435][ T4343] cgroup: Unknown subsys name 'net' [ 32.221604][ T4343] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.515121][ T4343] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 36.856782][ T1575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.858207][ T1575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.860271][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.868346][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.870292][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.871654][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.094698][ T4375] chnl_net:caif_netlink_parms(): no params data found [ 37.113929][ T4375] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.115205][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.116784][ T4375] device bridge_slave_0 entered promiscuous mode [ 37.119108][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.120610][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.122206][ T4375] device bridge_slave_1 entered promiscuous mode [ 37.128393][ T4375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.130976][ T4375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.137233][ T4375] team0: Port device team_slave_0 added [ 37.138784][ T4375] team0: Port device team_slave_1 added [ 37.144081][ T4375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.145311][ T4375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.150302][ T4375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.153640][ T4375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.154778][ T4375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.158856][ T4375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.210646][ T4375] device hsr_slave_0 entered promiscuous mode [ 37.249222][ T4375] device hsr_slave_1 entered promiscuous mode [ 37.332850][ T4375] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.371182][ T4375] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.411270][ T4375] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.450941][ T4375] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.497976][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.499183][ T4375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.500753][ T4375] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.501920][ T4375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.518655][ T4375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.523136][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.525131][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.527131][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.532254][ T4375] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.535069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.536794][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.537957][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.607730][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.609532][ T1575] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.610713][ T1575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.616926][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.618534][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.622399][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.625264][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.627984][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.630786][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.682565][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.683888][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.686897][ T4375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.693348][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.699943][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.701629][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.703050][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.705355][ T4375] device veth0_vlan entered promiscuous mode [ 37.708279][ T4375] device veth1_vlan entered promiscuous mode [ 37.716467][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.718049][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.720450][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.722702][ T4375] device veth0_macvtap entered promiscuous mode [ 37.725077][ T4375] device veth1_macvtap entered promiscuous mode [ 37.731285][ T4375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.732422][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.734485][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.737228][ T4375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.738606][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.742058][ T4375] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.743493][ T4375] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.744922][ T4375] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.746316][ T4375] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.109982][ T4409] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.111703][ T4409] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.113106][ T4409] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.114662][ T4409] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.116081][ T4409] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 38.117361][ T4409] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:00:39 executed programs: 0 [ 39.103247][ T4409] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.104946][ T4409] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.106338][ T4409] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.107953][ T4409] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.110059][ T4409] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 39.111426][ T4409] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.411749][ T4440] chnl_net:caif_netlink_parms(): no params data found [ 39.452484][ T4440] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.453868][ T4440] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.455440][ T4440] device bridge_slave_0 entered promiscuous mode [ 39.457257][ T4440] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.458406][ T4440] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.459871][ T4440] device bridge_slave_1 entered promiscuous mode [ 39.465916][ T4440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.468412][ T4440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.474888][ T4440] team0: Port device team_slave_0 added [ 39.476565][ T4440] team0: Port device team_slave_1 added [ 39.481535][ T4440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.482810][ T4440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.486744][ T4440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.489312][ T4440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.490414][ T4440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.494618][ T4440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.540161][ T4440] device hsr_slave_0 entered promiscuous mode [ 39.589298][ T4440] device hsr_slave_1 entered promiscuous mode [ 39.630210][ T4440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.631626][ T4440] Cannot create hsr debugfs directory [ 39.990470][ T4440] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.119405][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 43.199413][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 43.490323][ T4440] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.610106][ T4440] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.720503][ T4440] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.892404][ T4440] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.030733][ T4440] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.070317][ T4440] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.110023][ T4440] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.229817][ T4440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.233791][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.235214][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.237688][ T4440] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.272529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.274195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.275528][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.276763][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.278191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.281128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.282687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.284152][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.285274][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.287793][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.290499][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.293667][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.295451][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.297023][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.299703][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.301411][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.304378][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.306001][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.308389][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.311654][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.341587][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.413577][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.414841][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.417668][ T4440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.423226][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.424904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.430207][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.431851][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.433532][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.434914][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.436922][ T4440] device veth0_vlan entered promiscuous mode [ 44.440779][ T4440] device veth1_vlan entered promiscuous mode [ 44.446599][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 44.448002][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 44.449871][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.451388][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.453802][ T4440] device veth0_macvtap entered promiscuous mode [ 44.455979][ T4440] device veth1_macvtap entered promiscuous mode [ 44.512169][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 44.513898][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.516046][ T4440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.518113][ T4440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 44.520141][ T4440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 44.522144][ T4440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.523774][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 44.525380][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.526945][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.528705][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.530454][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.532065][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.534599][ T4440] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.535953][ T4440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.537376][ T4440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.538766][ T4440] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.544068][ T1618] device hsr_slave_0 left promiscuous mode [ 44.589326][ T1618] device hsr_slave_1 left promiscuous mode [ 44.669162][ T1618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.670362][ T1618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.671913][ T1618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.673080][ T1618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.674479][ T1618] device bridge_slave_1 left promiscuous mode [ 44.676055][ T1618] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.709689][ T1618] device bridge_slave_0 left promiscuous mode [ 44.710850][ T1618] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.829253][ T1618] device veth1_macvtap left promiscuous mode [ 44.830376][ T1618] device veth0_macvtap left promiscuous mode [ 44.831457][ T1618] device veth1_vlan left promiscuous mode [ 44.832480][ T1618] device veth0_vlan left promiscuous mode [ 45.289536][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 46.990942][ T1618] team0 (unregistering): Port device team_slave_1 removed [ 47.169984][ T1618] team0 (unregistering): Port device team_slave_0 removed [ 47.349495][ T1618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.359107][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 47.559878][ T1618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.099874][ T1618] bond0 (unregistering): Released all slaves [ 49.419431][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.420844][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.427151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.437388][ T1575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.438846][ T1575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.441154][ T1575] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.595980][ T4471] loop0: detected capacity change from 0 to 32768 [ 49.600815][ T4471] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 49.602229][ T4471] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 49.615558][ T4471] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 49.617904][ T4388] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 49.619206][ T4388] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 49.629766][ T4388] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 10ms [ 49.632325][ T4388] gfs2: fsid=syz:syz.0: jid=0: Done [ 49.633437][ T4471] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 49.730130][ T4440] ------------[ cut here ]------------ [ 49.731162][ T4440] WARNING: CPU: 0 PID: 4440 at include/linux/backing-dev.h:247 __folio_mark_dirty+0x8b8/0xce0 [ 49.732809][ T4440] Modules linked in: [ 49.733449][ T4440] CPU: 0 PID: 4440 Comm: syz-executor Not tainted syzkaller #0 [ 49.734640][ T4440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 49.736215][ T4440] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 49.737358][ T4440] pc : __folio_mark_dirty+0x8b8/0xce0 [ 49.738212][ T4440] lr : __folio_mark_dirty+0x8b8/0xce0 [ 49.739097][ T4440] sp : ffff800020d97700 [ 49.739794][ T4440] x29: ffff800020d97710 x28: 1fffff800065a180 x27: 0000000000000000 [ 49.741416][ T4440] x26: dfff800000000000 x25: 0000000000000000 x24: ffff0000c54cb398 [ 49.742755][ T4440] x23: 0000000000000001 x22: 0000000000000000 x21: 1fffe00018a99673 [ 49.744063][ T4440] x20: ffff0000d3136250 x19: fffffc00032d0c00 x18: 1fffe00033e7277e [ 49.745462][ T4440] x17: ffff80001537d000 x16: ffff8000082dbd3c x15: 000000000004ffff [ 49.746872][ T4440] x14: 0000000000000001 x13: 1fffe00018a99673 x12: 0000000000000000 [ 49.748505][ T4440] x11: ff00800008715320 x10: 0000000000000000 x9 : ffff800008715320 [ 49.750118][ T4440] x8 : ffff0000c3048000 x7 : 0000000000000000 x6 : 0000000000000000 [ 49.751464][ T4440] x5 : 0000000000000020 x4 : 0000000000000000 x3 : ffff800008a66f8c [ 49.752881][ T4440] x2 : ffff0000ca724060 x1 : 0000000000000000 x0 : 0000000000000000 [ 49.754358][ T4440] Call trace: [ 49.754964][ T4440] __folio_mark_dirty+0x8b8/0xce0 [ 49.755903][ T4440] mark_buffer_dirty+0x2b8/0x5c0 [ 49.756816][ T4440] gfs2_unpin+0x128/0x918 [ 49.757628][ T4440] buf_lo_after_commit+0x144/0x18c [ 49.758536][ T4440] __gfs2_log_flush+0x12e8/0x1bd4 [ 49.759468][ T4440] gfs2_log_flush+0x3c/0x58 [ 49.760277][ T4440] gfs2_kill_sb+0x5c/0xd8 [ 49.761069][ T4440] deactivate_locked_super+0xb4/0x128 [ 49.762072][ T4440] deactivate_super+0xe4/0x104 [ 49.762977][ T4440] cleanup_mnt+0x3a8/0x430 [ 49.763803][ T4440] __cleanup_mnt+0x20/0x30 [ 49.764622][ T4440] task_work_run+0x1f4/0x280 [ 49.765411][ T4440] do_notify_resume+0x20f8/0x2c84 [ 49.766226][ T4440] el0_svc+0x98/0x128 [ 49.766883][ T4440] el0t_64_sync_handler+0x84/0xf0 [ 49.767744][ T4440] el0t_64_sync+0x18c/0x190 [ 49.768528][ T4440] irq event stamp: 164236 [ 49.769310][ T4440] hardirqs last enabled at (164235): [] folio_memcg_lock+0xe8/0x1f8 [ 49.770972][ T4440] hardirqs last disabled at (164236): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 49.772749][ T4440] softirqs last enabled at (164202): [] handle_softirqs+0xb1c/0xc90 [ 49.774479][ T4440] softirqs last disabled at (164191): [] __do_softirq+0x14/0x20 [ 49.776145][ T4440] ---[ end trace 0000000000000000 ]--- [ 49.779867][ T4440] ------------[ cut here ]------------ [ 49.780825][ T4440] WARNING: CPU: 1 PID: 4440 at include/linux/backing-dev.h:247 __folio_start_writeback+0x8a8/0xa98 [ 49.782845][ T4440] Modules linked in: [ 49.783529][ T4440] CPU: 1 PID: 4440 Comm: syz-executor Tainted: G W syzkaller #0 [ 49.785165][ T4440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 49.786905][ T4440] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 49.788137][ T4440] pc : __folio_start_writeback+0x8a8/0xa98 [ 49.789138][ T4440] lr : __folio_start_writeback+0x8a8/0xa98 [ 49.790195][ T4440] sp : ffff800020d97180 [ 49.790926][ T4440] x29: ffff800020d97260 x28: ffff7000041b2e38 x27: 0000000000000000 [ 49.792286][ T4440] x26: ffff0000c54cb1f0 x25: 1fffff800065a181 x24: dfff800000000000 [ 49.793669][ T4440] x23: ffff0000d3136250 x22: ffff800020d971e0 x21: ffff0000c54cb398 [ 49.794993][ T4440] x20: 0000000000000001 x19: fffffc00032d0c00 x18: 1fffe00033e7697e [ 49.796271][ T4440] x17: ffff80001537d000 x16: ffff8000082dbd3c x15: 0000000000000000 [ 49.797601][ T4440] x14: 0000000000000001 x13: 1fffff800065a180 x12: 0000000000000000 [ 49.798946][ T4440] x11: ff00800008717844 x10: 0000000000000000 x9 : ffff800008717844 [ 49.800308][ T4440] x8 : ffff0000c3048000 x7 : ffff800008717294 x6 : 0000000000000000 [ 49.801680][ T4440] x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff8000087172d0 [ 49.803017][ T4440] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 49.804273][ T4440] Call trace: [ 49.804807][ T4440] __folio_start_writeback+0x8a8/0xa98 [ 49.805763][ T4440] set_page_writeback+0x5c/0x7c [ 49.806595][ T4440] gfs2_aspace_writepage+0x524/0x6f4 [ 49.807505][ T4440] __gfs2_writepage+0x70/0x184 [ 49.808335][ T4440] write_cache_pages+0x760/0xe00 [ 49.809193][ T4440] gfs2_ail1_flush+0x7a8/0x9f0 [ 49.809998][ T4440] empty_ail1_list+0x130/0x214 [ 49.810785][ T4440] __gfs2_log_flush+0x15c8/0x1bd4 [ 49.811625][ T4440] gfs2_log_flush+0x3c/0x58 [ 49.812407][ T4440] gfs2_kill_sb+0x5c/0xd8 [ 49.813150][ T4440] deactivate_locked_super+0xb4/0x128 [ 49.814112][ T4440] deactivate_super+0xe4/0x104 [ 49.814942][ T4440] cleanup_mnt+0x3a8/0x430 [ 49.815731][ T4440] __cleanup_mnt+0x20/0x30 [ 49.816504][ T4440] task_work_run+0x1f4/0x280 [ 49.817329][ T4440] do_notify_resume+0x20f8/0x2c84 [ 49.818178][ T4440] el0_svc+0x98/0x128 [ 49.818863][ T4440] el0t_64_sync_handler+0x84/0xf0 [ 49.819737][ T4440] el0t_64_sync+0x18c/0x190 [ 49.820486][ T4440] irq event stamp: 164422 [ 49.821209][ T4440] hardirqs last enabled at (164421): [] folio_memcg_lock+0xe8/0x1f8 [ 49.822774][ T4440] hardirqs last disabled at (164422): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 49.824472][ T4440] softirqs last enabled at (164398): [] handle_softirqs+0xb1c/0xc90 [ 49.826040][ T4440] softirqs last disabled at (164239): [] __do_softirq+0x14/0x20 [ 49.827526][ T4440] ---[ end trace 0000000000000000 ]--- [ 49.832144][ C0] ------------[ cut here ]------------ [ 49.833236][ C0] WARNING: CPU: 0 PID: 15 at include/linux/backing-dev.h:247 __folio_end_writeback+0x7d0/0x9cc [ 49.835028][ C0] Modules linked in: [ 49.835658][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G W syzkaller #0 [ 49.836999][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 49.838507][ C0] pstate: 424000c5 (nZcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 49.839796][ C0] pc : __folio_end_writeback+0x7d0/0x9cc [ 49.840787][ C0] lr : __folio_end_writeback+0x7d0/0x9cc [ 49.841741][ C0] sp : ffff80001cb97980 [ 49.842466][ C0] x29: ffff80001cb979a0 x28: 1fffff8000699a89 x27: 1fffff8000699a88 [ 49.843869][ C0] x26: dfff800000000000 x25: 0000000000000000 x24: ffff0000c54cb1f0 [ 49.845219][ C0] x23: ffff0000c54cb398 x22: ffff0000d31342a0 x21: ffff0000d31342a8 [ 49.846600][ C0] x20: 0000000000000001 x19: fffffc00034cd440 x18: 1fffe00033e7277e [ 49.847927][ C0] x17: ffff80001537d000 x16: ffff8000082dbd3c x15: 0000000000000000 [ 49.849285][ C0] x14: 0000000000000003 x13: 1ffff00003972f22 x12: 0000000000000000 [ 49.850614][ C0] x11: ff00800008716da0 x10: 0000000000000000 x9 : ffff800008716da0 [ 49.851946][ C0] x8 : ffff0000c09b3800 x7 : 0000000000000000 x6 : 0000000000000000 [ 49.853282][ C0] x5 : 0000000000000080 x4 : 0000000000000000 x3 : 0000000000000010 [ 49.854648][ C0] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 49.856074][ C0] Call trace: [ 49.856614][ C0] __folio_end_writeback+0x7d0/0x9cc [ 49.857535][ C0] folio_end_writeback+0x12c/0x410 [ 49.858366][ C0] end_page_writeback+0x58/0x74 [ 49.859173][ C0] end_buffer_async_write+0x330/0x4fc [ 49.860037][ C0] end_bio_bh_io_sync+0xb4/0x1e4 [ 49.860852][ C0] bio_endio+0x750/0x794 [ 49.861531][ C0] blk_update_request+0x4ac/0xc58 [ 49.862378][ C0] blk_mq_end_request+0x54/0x8c [ 49.863171][ C0] lo_complete_rq+0x1e8/0x238 [ 49.863927][ C0] blk_done_softirq+0x11c/0x168 [ 49.864745][ C0] handle_softirqs+0x318/0xc90 [ 49.865543][ C0] run_ksoftirqd+0x7c/0x2ac [ 49.866275][ C0] smpboot_thread_fn+0x4e8/0x960 [ 49.867074][ C0] kthread+0x254/0x2e0 [ 49.867772][ C0] ret_from_fork+0x10/0x20 [ 49.868536][ C0] irq event stamp: 467841 [ 49.869281][ C0] hardirqs last enabled at (467840): [] folio_memcg_lock+0xe8/0x1f8 [ 49.870952][ C0] hardirqs last disabled at (467841): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 49.872579][ C0] softirqs last enabled at (467828): [] handle_softirqs+0xb1c/0xc90 [ 49.874167][ C0] softirqs last disabled at (467835): [] run_ksoftirqd+0x7c/0x2ac [ 49.875752][ C0] ---[ end trace 0000000000000000 ]---