Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. 1970/01/01 00:00:26 parsed 1 programs syzkaller login: [ 27.922555][ T4324] cgroup: Unknown subsys name 'net' [ 28.188494][ T4324] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.465330][ T4324] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 33.693796][ T4340] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 33.695199][ T4340] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 33.696710][ T4340] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 33.698328][ T4340] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 33.699641][ T4340] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 33.700881][ T4340] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 34.233068][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.234358][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.239645][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.243466][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.244642][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.246288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.326257][ T4376] chnl_net:caif_netlink_parms(): no params data found [ 34.343335][ T4376] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.344547][ T4376] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.346402][ T4376] device bridge_slave_0 entered promiscuous mode [ 34.348588][ T4376] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.349710][ T4376] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.351133][ T4376] device bridge_slave_1 entered promiscuous mode [ 34.357759][ T4376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.360071][ T4376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.368315][ T4376] team0: Port device team_slave_0 added [ 34.370038][ T4376] team0: Port device team_slave_1 added [ 34.375149][ T4376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.376670][ T4376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.380616][ T4376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.383241][ T4376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.384303][ T4376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.388613][ T4376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.446909][ T4376] device hsr_slave_0 entered promiscuous mode [ 34.485734][ T4376] device hsr_slave_1 entered promiscuous mode [ 34.562203][ T4376] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.576877][ T4376] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.656285][ T4376] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.707385][ T4376] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.756113][ T4376] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.757450][ T4376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.758701][ T4376] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.759793][ T4376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.780119][ T4376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.784362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.787110][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.788741][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.793615][ T4376] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.796996][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.798456][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.799596][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.802425][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.803753][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.804882][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.812330][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 34.814101][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 34.817932][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 34.820781][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.823877][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.827953][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 34.885614][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.886995][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.890930][ T4376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.897027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.902997][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.904750][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.906470][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.909252][ T4376] device veth0_vlan entered promiscuous mode [ 34.912356][ T4376] device veth1_vlan entered promiscuous mode [ 34.919852][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.921367][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.922797][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.925430][ T4376] device veth0_macvtap entered promiscuous mode [ 34.928249][ T4376] device veth1_macvtap entered promiscuous mode [ 34.934050][ T4376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.935315][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.947119][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.950248][ T4376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.951467][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.953102][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.955651][ T4376] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.957060][ T4376] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.958365][ T4376] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.959624][ T4376] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:35 executed programs: 0 [ 35.601686][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.603203][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.604430][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.606262][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.607712][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.608977][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.655378][ T4423] chnl_net:caif_netlink_parms(): no params data found [ 35.671428][ T4423] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.672574][ T4423] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.673981][ T4423] device bridge_slave_0 entered promiscuous mode [ 35.678470][ T4423] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.679653][ T4423] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.681154][ T4423] device bridge_slave_1 entered promiscuous mode [ 35.687771][ T4423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.690471][ T4423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.697191][ T4423] team0: Port device team_slave_0 added [ 35.698865][ T4423] team0: Port device team_slave_1 added [ 35.704064][ T4423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.705158][ T4423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.709667][ T4423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.711904][ T4423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.712978][ T4423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.716852][ T4423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.736861][ T4423] device hsr_slave_0 entered promiscuous mode [ 35.785716][ T4423] device hsr_slave_1 entered promiscuous mode [ 35.836035][ T4423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.837372][ T4423] Cannot create hsr debugfs directory [ 36.297906][ T4423] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.686469][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 39.306350][ T4423] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.755808][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 40.857388][ T4423] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.937586][ T4423] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.209455][ T4423] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 41.256839][ T4423] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 41.316651][ T4423] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 41.417472][ T4423] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 41.555665][ T4423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.559711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.561243][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.563843][ T4423] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.566417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.568033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.569506][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.570615][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.572001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.574472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.576758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.578203][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.579288][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.629510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.632282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.634899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 41.636691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 41.638414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 41.642005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 41.643749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 41.646678][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.648247][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.650980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.652413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.654642][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.659312][ T1587] device hsr_slave_0 left promiscuous mode [ 41.685891][ T1587] device hsr_slave_1 left promiscuous mode [ 41.775879][ T1587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.777127][ T1587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.778755][ T1587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.779878][ T1587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.781200][ T1587] device bridge_slave_1 left promiscuous mode [ 41.782563][ T1587] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.816234][ T1587] device bridge_slave_0 left promiscuous mode [ 41.817333][ T1587] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.835588][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 41.935742][ T1587] device veth1_macvtap left promiscuous mode [ 41.936811][ T1587] device veth0_macvtap left promiscuous mode [ 41.937747][ T1587] device veth1_vlan left promiscuous mode [ 41.938697][ T1587] device veth0_vlan left promiscuous mode [ 43.915582][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 44.107537][ T1587] team0 (unregistering): Port device team_slave_1 removed [ 44.296597][ T1587] team0 (unregistering): Port device team_slave_0 removed [ 44.475972][ T1587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.686004][ T1587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.286825][ T1587] bond0 (unregistering): Released all slaves [ 46.648584][ T505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.649824][ T505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.652672][ T4423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.659578][ T505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.661821][ T505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.669240][ T505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.670810][ T505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.672401][ T505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.673788][ T505] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.675953][ T4423] device veth0_vlan entered promiscuous mode [ 46.679967][ T4423] device veth1_vlan entered promiscuous mode [ 46.687557][ T505] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.689137][ T505] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.690538][ T505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.692054][ T505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.694310][ T4423] device veth0_macvtap entered promiscuous mode [ 46.696728][ T4423] device veth1_macvtap entered promiscuous mode [ 46.701257][ T4423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.702491][ T505] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.703924][ T505] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.705284][ T505] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.707059][ T505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.709733][ T4423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.710895][ T505] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.712401][ T505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.714713][ T4423] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.717112][ T4423] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.718458][ T4423] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.719772][ T4423] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.741826][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.743053][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.746566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.753936][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.755131][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.757523][ T505] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.908208][ T4451] loop0: detected capacity change from 0 to 32768 [ 46.911893][ T4451] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 46.913249][ T4451] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 46.923402][ T4451] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 46.926118][ T4345] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 46.927211][ T4345] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 46.940443][ T4345] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 13ms [ 46.942068][ T4345] gfs2: fsid=syz:syz.0: jid=0: Done [ 46.942952][ T4451] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 47.053938][ T4423] ------------[ cut here ]------------ [ 47.054979][ T4423] WARNING: CPU: 0 PID: 4423 at include/linux/backing-dev.h:247 __folio_mark_dirty+0x8a0/0xcd8 [ 47.056595][ T4423] Modules linked in: [ 47.057216][ T4423] CPU: 0 PID: 4423 Comm: syz-executor Not tainted syzkaller #0 [ 47.058406][ T4423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 47.059947][ T4423] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 47.061188][ T4423] pc : __folio_mark_dirty+0x8a0/0xcd8 [ 47.061991][ T4423] lr : __folio_mark_dirty+0x8a0/0xcd8 [ 47.062783][ T4423] sp : ffff800020c176e0 [ 47.063372][ T4423] x29: ffff800020c17700 x28: 1fffff80006e5d50 x27: dfff800000000000 [ 47.064558][ T4423] x26: 0000000000000000 x25: ffff0000c049c990 x24: 0000000000000001 [ 47.065780][ T4423] x23: 0000000000000000 x22: fffffc000372ea88 x21: 1fffe00018093932 [ 47.067026][ T4423] x20: ffff0000dcd2e250 x19: fffffc000372ea80 x18: ffff800011b7bf60 [ 47.068280][ T4423] x17: ffff800018338000 x16: ffff8000082d7e60 x15: ffff800017e19000 [ 47.069520][ T4423] x14: 0000000000000001 x13: 1fffe00018093932 x12: 0000000000ff0100 [ 47.070726][ T4423] x11: ff00800008708680 x10: 0000000000000000 x9 : ffff800008708680 [ 47.071864][ T4423] x8 : ffff0000ca75b780 x7 : 0000000000000000 x6 : 0000000000000000 [ 47.073133][ T4423] x5 : ffff8000184fb538 x4 : 0000000000000008 x3 : ffff800008a560e8 [ 47.074338][ T4423] x2 : ffff0000ce56a060 x1 : 0000000000000000 x0 : 0000000000000000 [ 47.075510][ T4423] Call trace: [ 47.075984][ T4423] __folio_mark_dirty+0x8a0/0xcd8 [ 47.076736][ T4423] mark_buffer_dirty+0x2b8/0x5c0 [ 47.077518][ T4423] gfs2_unpin+0x120/0x8fc [ 47.078189][ T4423] buf_lo_after_commit+0x140/0x188 [ 47.079012][ T4423] gfs2_log_flush+0xbf0/0x1b10 [ 47.079757][ T4423] gfs2_kill_sb+0x5c/0xd4 [ 47.080399][ T4423] deactivate_locked_super+0xac/0x120 [ 47.081141][ T4423] deactivate_super+0xe4/0x104 [ 47.081938][ T4423] cleanup_mnt+0x390/0x418 [ 47.082579][ T4423] __cleanup_mnt+0x20/0x30 [ 47.083273][ T4423] task_work_run+0x1ec/0x278 [ 47.083967][ T4423] do_notify_resume+0x1fa0/0x2aa4 [ 47.084741][ T4423] el0_svc+0x98/0x128 [ 47.085328][ T4423] el0t_64_sync_handler+0x84/0xf0 [ 47.086115][ T4423] el0t_64_sync+0x18c/0x190 [ 47.086809][ T4423] irq event stamp: 162316 [ 47.087458][ T4423] hardirqs last enabled at (162315): [] folio_memcg_lock+0xe8/0x1f4 [ 47.088944][ T4423] hardirqs last disabled at (162316): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 47.090480][ T4423] softirqs last enabled at (162200): [] local_bh_enable+0x10/0x34 [ 47.091868][ T4423] softirqs last disabled at (162198): [] local_bh_disable+0x10/0x34 [ 47.093352][ T4423] ---[ end trace 0000000000000000 ]--- [ 47.100780][ T4423] ------------[ cut here ]------------ [ 47.101670][ T4423] WARNING: CPU: 0 PID: 4423 at include/linux/backing-dev.h:247 __folio_start_writeback+0x88c/0xa7c [ 47.103232][ T4423] Modules linked in: [ 47.103883][ T4423] CPU: 0 PID: 4423 Comm: syz-executor Tainted: G W syzkaller #0 [ 47.105405][ T4423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 47.106966][ T4423] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 47.108147][ T4423] pc : __folio_start_writeback+0x88c/0xa7c [ 47.109038][ T4423] lr : __folio_start_writeback+0x88c/0xa7c [ 47.109892][ T4423] sp : ffff800020c17180 [ 47.110500][ T4423] x29: ffff800020c17260 x28: dfff800000000000 x27: 0000000000000000 [ 47.111780][ T4423] x26: ffff700004182e38 x25: 0000000000000000 x24: ffff0000dcd2e250 [ 47.113055][ T4423] x23: ffff800020c171e0 x22: ffff0000c049c7e8 x21: 0000000000000001 [ 47.114265][ T4423] x20: fffffc000372ea88 x19: fffffc000372ea80 x18: ffff800011b7bf60 [ 47.115545][ T4423] x17: ffff800018338000 x16: ffff8000082d7e60 x15: 0000000000000000 [ 47.116759][ T4423] x14: 0000000000000001 x13: 1fffff80006e5d50 x12: 0000000000ff0100 [ 47.118041][ T4423] x11: ff0080000870ab8c x10: 0000000000000000 x9 : ffff80000870ab8c [ 47.119240][ T4423] x8 : ffff0000ca75b780 x7 : ffff80000870a5f8 x6 : 0000000000000000 [ 47.120405][ T4423] x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000870a638 [ 47.121576][ T4423] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 47.122839][ T4423] Call trace: [ 47.123299][ T4423] __folio_start_writeback+0x88c/0xa7c [ 47.124133][ T4423] set_page_writeback+0x5c/0x7c [ 47.124836][ T4423] gfs2_aspace_writepage+0x514/0x6dc [ 47.125652][ T4423] __gfs2_writepage+0x70/0x184 [ 47.126372][ T4423] write_cache_pages+0x74c/0xde8 [ 47.127057][ T4423] gfs2_ail1_flush+0x7c4/0xa14 [ 47.127818][ T4423] empty_ail1_list+0x130/0x214 [ 47.128592][ T4423] gfs2_log_flush+0x12a4/0x1b10 [ 47.129340][ T4423] gfs2_kill_sb+0x5c/0xd4 [ 47.130008][ T4423] deactivate_locked_super+0xac/0x120 [ 47.130818][ T4423] deactivate_super+0xe4/0x104 [ 47.131509][ T4423] cleanup_mnt+0x390/0x418 [ 47.132193][ T4423] __cleanup_mnt+0x20/0x30 [ 47.132930][ T4423] task_work_run+0x1ec/0x278 [ 47.133580][ T4423] do_notify_resume+0x1fa0/0x2aa4 [ 47.134317][ T4423] el0_svc+0x98/0x128 [ 47.134903][ T4423] el0t_64_sync_handler+0x84/0xf0 [ 47.135667][ T4423] el0t_64_sync+0x18c/0x190 [ 47.136334][ T4423] irq event stamp: 162412 [ 47.136984][ T4423] hardirqs last enabled at (162411): [] folio_memcg_lock+0xe8/0x1f4 [ 47.138454][ T4423] hardirqs last disabled at (162412): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 47.139940][ T4423] softirqs last enabled at (162392): [] handle_softirqs+0xaec/0xc60 [ 47.141447][ T4423] softirqs last disabled at (162319): [] __do_softirq+0x14/0x20 [ 47.142782][ T4423] ---[ end trace 0000000000000000 ]--- [ 47.146977][ C0] ------------[ cut here ]------------ [ 47.147858][ C0] WARNING: CPU: 0 PID: 15 at include/linux/backing-dev.h:247 __folio_end_writeback+0x7d0/0x9cc [ 47.149322][ C0] Modules linked in: [ 47.149902][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G W syzkaller #0 [ 47.151207][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 47.152625][ C0] pstate: 424000c5 (nZcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 47.153827][ C0] pc : __folio_end_writeback+0x7d0/0x9cc [ 47.154641][ C0] lr : __folio_end_writeback+0x7d0/0x9cc [ 47.155456][ C0] sp : ffff80001ca07970 [ 47.156142][ C0] x29: ffff80001ca07990 x28: dfff800000000000 x27: ffff0000c049c7e8 [ 47.157474][ C0] x26: 0000000000000000 x25: 05ffd40000002052 x24: 1fffff80006debd0 [ 47.158795][ C0] x23: 0000000000000001 x22: ffff0000dcd2c2a0 x21: ffff0000dcd2c2a8 [ 47.160079][ C0] x20: 0000000000000001 x19: fffffc00036f5e80 x18: ffff800011b7bf60 [ 47.161436][ C0] x17: 1fffe00033eaab7e x16: ffff8000082d7e60 x15: 0000000000000000 [ 47.162750][ C0] x14: 0000000000000003 x13: 1ffff00003940f20 x12: 0000000000ff0100 [ 47.164079][ C0] x11: ff0080000870a104 x10: 0000000000000000 x9 : ffff80000870a104 [ 47.165393][ C0] x8 : ffff0000c09b3780 x7 : 0000000000000000 x6 : 0000000000000000 [ 47.166662][ C0] x5 : 0000000000000080 x4 : 0000000000000000 x3 : 0000000000000010 [ 47.167900][ C0] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 47.169199][ C0] Call trace: [ 47.169715][ C0] __folio_end_writeback+0x7d0/0x9cc [ 47.170558][ C0] folio_end_writeback+0x12c/0x410 [ 47.171426][ C0] end_page_writeback+0x58/0x74 [ 47.172221][ C0] end_buffer_async_write+0x32c/0x4f4 [ 47.173099][ C0] end_bio_bh_io_sync+0xb0/0x1dc [ 47.173937][ C0] bio_endio+0x750/0x794 [ 47.174588][ C0] blk_update_request+0x49c/0xbec [ 47.175350][ C0] blk_mq_end_request+0x54/0x88 [ 47.176063][ C0] lo_complete_rq+0x1ec/0x250 [ 47.176729][ C0] blk_done_softirq+0x11c/0x168 [ 47.177496][ C0] handle_softirqs+0x318/0xc60 [ 47.178217][ C0] run_ksoftirqd+0x7c/0x2ac [ 47.178911][ C0] smpboot_thread_fn+0x4b0/0x964 [ 47.179653][ C0] kthread+0x250/0x2d8 [ 47.180281][ C0] ret_from_fork+0x10/0x20 [ 47.180963][ C0] irq event stamp: 416079 [ 47.181594][ C0] hardirqs last enabled at (416078): [] folio_memcg_lock+0xe8/0x1f4 [ 47.182955][ C0] hardirqs last disabled at (416079): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 47.184478][ C0] softirqs last enabled at (416064): [] handle_softirqs+0xaec/0xc60 [ 47.185956][ C0] softirqs last disabled at (416069): [] run_ksoftirqd+0x7c/0x2ac [ 47.187378][ C0] ---[ end trace 0000000000000000 ]---