Warning: Permanently added '10.128.0.229' (ED25519) to the list of known hosts. 1970/01/01 00:00:31 parsed 1 programs 1970/01/01 00:00:31 serving rpc on tcp://39453 syzkaller login: [ 33.036231][ T4342] cgroup: Unknown subsys name 'net' [ 33.283833][ T4342] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.609812][ T4342] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 37.548443][ T4361] chnl_net:caif_netlink_parms(): no params data found [ 37.564667][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.566014][ T4361] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.567696][ T4361] device bridge_slave_0 entered promiscuous mode [ 37.569995][ T4361] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.571178][ T4361] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.573771][ T4361] device bridge_slave_1 entered promiscuous mode [ 37.580677][ T4361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.583617][ T4361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.589769][ T4361] team0: Port device team_slave_0 added [ 37.591698][ T4361] team0: Port device team_slave_1 added [ 37.596770][ T4361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.597931][ T4361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.602257][ T4361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.605139][ T4361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.606396][ T4361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.610390][ T4361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.652779][ T4361] device hsr_slave_0 entered promiscuous mode [ 37.701496][ T4361] device hsr_slave_1 entered promiscuous mode [ 37.777883][ T4361] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.825137][ T4361] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.864018][ T4361] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.923857][ T4361] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.968971][ T4361] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.970280][ T4361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.971770][ T4361] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.972984][ T4361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.990396][ T4361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.994436][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.996913][ T1573] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.998551][ T1573] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.004060][ T4361] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.008199][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.010049][ T1573] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.011169][ T1573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.015524][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.017011][ T1573] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.018196][ T1573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.024594][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.026258][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.029119][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.032563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.035299][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.038188][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.091059][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.093644][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.163557][ T4361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.170947][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.177648][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.179352][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.180833][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.183796][ T4361] device veth0_vlan entered promiscuous mode [ 38.186870][ T4361] device veth1_vlan entered promiscuous mode [ 38.194590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.196286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.197908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.200184][ T4361] device veth0_macvtap entered promiscuous mode [ 38.204255][ T4361] device veth1_macvtap entered promiscuous mode [ 38.209494][ T4361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.210900][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.213957][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.217128][ T4361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.218618][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.221164][ T4361] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.223322][ T4361] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.224902][ T4361] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.226312][ T4361] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.307775][ T4376] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.309428][ T4376] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.310848][ T4376] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.314140][ T4376] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.315659][ T4376] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 38.317095][ T4376] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.391129][ T1573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.392735][ T1573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.394621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.404219][ T1573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.405651][ T1573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.407201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.314203][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:39 executed programs: 0 [ 39.765007][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.766578][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.767934][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.769624][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.771247][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 39.774800][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.816160][ T4431] chnl_net:caif_netlink_parms(): no params data found [ 39.833106][ T4431] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.834425][ T4431] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.835993][ T4431] device bridge_slave_0 entered promiscuous mode [ 39.837978][ T4431] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.839202][ T4431] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.840657][ T4431] device bridge_slave_1 entered promiscuous mode [ 39.847795][ T4431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.850369][ T4431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.857213][ T4431] team0: Port device team_slave_0 added [ 39.859279][ T4431] team0: Port device team_slave_1 added [ 39.865102][ T4431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.866280][ T4431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.870459][ T4431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.873082][ T4431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.874160][ T4431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.878215][ T4431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.933501][ T4431] device hsr_slave_0 entered promiscuous mode [ 39.972421][ T4431] device hsr_slave_1 entered promiscuous mode [ 40.011377][ T4431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.012856][ T4431] Cannot create hsr debugfs directory [ 41.572115][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.851769][ T4376] Bluetooth: hci0: command 0x0409 tx timeout [ 43.931408][ T4376] Bluetooth: hci0: command 0x041b tx timeout [ 44.152189][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.243279][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.163778][ T4431] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.212512][ T4431] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.413555][ T4431] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.453352][ T4431] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.591533][ T4431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.596042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.597630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.600621][ T4431] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.644200][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.646109][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.647637][ T1573] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.648780][ T1573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.650585][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.660696][ T4431] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.662655][ T4431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.665496][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.667313][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.668927][ T1573] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.670209][ T1573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.672275][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.673941][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.675694][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.677475][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.679207][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.680799][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.682894][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.684485][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.686072][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.687704][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.689408][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.690922][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.825552][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 45.826940][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 45.829765][ T4431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.836486][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.838222][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.843900][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.845433][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.847100][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.848548][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.850690][ T4431] device veth0_vlan entered promiscuous mode [ 45.854969][ T4431] device veth1_vlan entered promiscuous mode [ 45.932903][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.934635][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.936178][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.937796][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.940741][ T4431] device veth0_macvtap entered promiscuous mode [ 45.943456][ T4431] device veth1_macvtap entered promiscuous mode [ 45.947767][ T4431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.949452][ T4431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.951569][ T4431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.953599][ T4431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.955283][ T4431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.957358][ T4431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.958626][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.960274][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.962490][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.964079][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.965817][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.967389][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.970459][ T4431] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.973222][ T4431] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.974761][ T4431] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.976351][ T4431] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.011385][ T4376] Bluetooth: hci0: command 0x040f tx timeout [ 46.083126][ T4415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.086478][ T4415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.088380][ T1578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.094237][ T1578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.095507][ T1578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.096973][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.244283][ T4490] loop0: detected capacity change from 0 to 32768 [ 46.249230][ T4490] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 46.250689][ T4490] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 46.259591][ T4490] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 46.262793][ T4460] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 46.264022][ T4460] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 46.277509][ T4460] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 13ms [ 46.279644][ T4460] gfs2: fsid=syz:syz.0: jid=0: Done [ 46.280656][ T4490] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 46.400495][ T4431] ------------[ cut here ]------------ [ 46.401638][ T4431] WARNING: CPU: 0 PID: 4431 at include/linux/backing-dev.h:247 __folio_mark_dirty+0x8b8/0xce0 [ 46.403361][ T4431] Modules linked in: [ 46.404049][ T4431] CPU: 0 PID: 4431 Comm: syz-executor Not tainted syzkaller #0 [ 46.405368][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 46.407048][ T4431] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 46.408329][ T4431] pc : __folio_mark_dirty+0x8b8/0xce0 [ 46.409243][ T4431] lr : __folio_mark_dirty+0x8b8/0xce0 [ 46.410139][ T4431] sp : ffff800021217700 [ 46.410872][ T4431] x29: ffff800021217710 x28: 1fffff800066c7d0 x27: 0000000000000000 [ 46.412280][ T4431] x26: dfff800000000000 x25: 0000000000000000 x24: ffff0000c0498798 [ 46.413735][ T4431] x23: 0000000000000001 x22: 0000000000000000 x21: 1fffe000180930f3 [ 46.415150][ T4431] x20: ffff0000de48a250 x19: fffffc0003363e80 x18: 1fffe00033e7277e [ 46.416592][ T4431] x17: ffff80001537d000 x16: ffff8000082dbd38 x15: 000000000004ffff [ 46.418019][ T4431] x14: 0000000000000001 x13: 1fffe000180930f3 x12: 0000000000000000 [ 46.419493][ T4431] x11: ff008000087157bc x10: 0000000000000000 x9 : ffff8000087157bc [ 46.420959][ T4431] x8 : ffff0000d17ed400 x7 : 0000000000000000 x6 : 0000000000000000 [ 46.422326][ T4431] x5 : 0000000000000020 x4 : 0000000000000000 x3 : ffff800008a67444 [ 46.423831][ T4431] x2 : ffff0000ce9e4060 x1 : 0000000000000000 x0 : 0000000000000000 [ 46.425285][ T4431] Call trace: [ 46.425884][ T4431] __folio_mark_dirty+0x8b8/0xce0 [ 46.426793][ T4431] mark_buffer_dirty+0x2b8/0x5c0 [ 46.427661][ T4431] gfs2_unpin+0x128/0x918 [ 46.428447][ T4431] buf_lo_after_commit+0x144/0x18c [ 46.429521][ T4431] __gfs2_log_flush+0x12e8/0x1bd4 [ 46.430596][ T4431] gfs2_log_flush+0x3c/0x58 [ 46.431508][ T4431] gfs2_kill_sb+0x5c/0xd8 [ 46.432265][ T4431] deactivate_locked_super+0xb4/0x128 [ 46.433224][ T4431] deactivate_super+0xe4/0x104 [ 46.434171][ T4431] cleanup_mnt+0x3a8/0x430 [ 46.435104][ T4431] __cleanup_mnt+0x20/0x30 [ 46.436045][ T4431] task_work_run+0x1f4/0x280 [ 46.437014][ T4431] do_notify_resume+0x20f8/0x2c84 [ 46.438089][ T4431] el0_svc+0x98/0x128 [ 46.438872][ T4431] el0t_64_sync_handler+0x84/0xf0 [ 46.439862][ T4431] el0t_64_sync+0x18c/0x190 [ 46.440751][ T4431] irq event stamp: 154720 [ 46.441606][ T4431] hardirqs last enabled at (154719): [] folio_memcg_lock+0xe8/0x1f8 [ 46.443422][ T4431] hardirqs last disabled at (154720): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 46.445519][ T4431] softirqs last enabled at (154570): [] local_bh_enable+0x10/0x34 [ 46.447432][ T4431] softirqs last disabled at (154568): [] local_bh_disable+0x10/0x34 [ 46.449102][ T4431] ---[ end trace 0000000000000000 ]--- [ 46.462638][ T4431] ------------[ cut here ]------------ [ 46.463680][ T4431] WARNING: CPU: 1 PID: 4431 at include/linux/backing-dev.h:247 __folio_start_writeback+0x8a8/0xa98 [ 46.465600][ T4431] Modules linked in: [ 46.466329][ T4431] CPU: 1 PID: 4431 Comm: syz-executor Tainted: G W syzkaller #0 [ 46.467985][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 46.469839][ T4431] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 46.471273][ T4431] pc : __folio_start_writeback+0x8a8/0xa98 [ 46.472433][ T4431] lr : __folio_start_writeback+0x8a8/0xa98 [ 46.473598][ T4431] sp : ffff800021217180 [ 46.474427][ T4431] x29: ffff800021217260 x28: ffff700004242e38 x27: 0000000000000000 [ 46.476032][ T4431] x26: ffff0000c04985f0 x25: 1fffff800066c7d1 x24: dfff800000000000 [ 46.477589][ T4431] x23: ffff0000de48a250 x22: ffff8000212171e0 x21: ffff0000c0498798 [ 46.479170][ T4431] x20: 0000000000000001 x19: fffffc0003363e80 x18: 1fffe00033e7697e [ 46.480606][ T4431] x17: ffff80001537d000 x16: ffff8000082dbd38 x15: 0000000000000000 [ 46.482051][ T4431] x14: 0000000000000001 x13: 1fffff800066c7d0 x12: 0000000000000000 [ 46.483541][ T4431] x11: ff00800008717ce0 x10: 0000000000000000 x9 : ffff800008717ce0 [ 46.484993][ T4431] x8 : ffff0000d17ed400 x7 : ffff800008717730 x6 : 0000000000000000 [ 46.486337][ T4431] x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff80000871776c [ 46.487628][ T4431] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 46.488977][ T4431] Call trace: [ 46.489539][ T4431] __folio_start_writeback+0x8a8/0xa98 [ 46.490469][ T4431] set_page_writeback+0x5c/0x7c [ 46.491309][ T4431] gfs2_aspace_writepage+0x524/0x6f4 [ 46.492221][ T4431] __gfs2_writepage+0x70/0x184 [ 46.493088][ T4431] write_cache_pages+0x760/0xe00 [ 46.493900][ T4431] gfs2_ail1_flush+0x7a8/0x9f0 [ 46.494718][ T4431] empty_ail1_list+0x130/0x214 [ 46.495520][ T4431] __gfs2_log_flush+0x15c8/0x1bd4 [ 46.496398][ T4431] gfs2_log_flush+0x3c/0x58 [ 46.497191][ T4431] gfs2_kill_sb+0x5c/0xd8 [ 46.497941][ T4431] deactivate_locked_super+0xb4/0x128 [ 46.498847][ T4431] deactivate_super+0xe4/0x104 [ 46.499666][ T4431] cleanup_mnt+0x3a8/0x430 [ 46.500395][ T4431] __cleanup_mnt+0x20/0x30 [ 46.501151][ T4431] task_work_run+0x1f4/0x280 [ 46.501935][ T4431] do_notify_resume+0x20f8/0x2c84 [ 46.502823][ T4431] el0_svc+0x98/0x128 [ 46.503536][ T4431] el0t_64_sync_handler+0x84/0xf0 [ 46.504438][ T4431] el0t_64_sync+0x18c/0x190 [ 46.505230][ T4431] irq event stamp: 154804 [ 46.505996][ T4431] hardirqs last enabled at (154803): [] folio_memcg_lock+0xe8/0x1f8 [ 46.507691][ T4431] hardirqs last disabled at (154804): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 46.509437][ T4431] softirqs last enabled at (154778): [] handle_softirqs+0xb1c/0xc90 [ 46.511135][ T4431] softirqs last disabled at (154723): [] __do_softirq+0x14/0x20 [ 46.512728][ T4431] ---[ end trace 0000000000000000 ]--- [ 46.519094][ C1] ------------[ cut here ]------------ [ 46.520105][ C1] WARNING: CPU: 1 PID: 21 at include/linux/backing-dev.h:247 __folio_end_writeback+0x7d0/0x9cc [ 46.521870][ C1] Modules linked in: [ 46.522612][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 [ 46.524277][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 46.526150][ C1] pstate: 424000c5 (nZcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 46.527574][ C1] pc : __folio_end_writeback+0x7d0/0x9cc [ 46.528557][ C1] lr : __folio_end_writeback+0x7d0/0x9cc [ 46.529552][ C1] sp : ffff80001cc07980 [ 46.530283][ C1] x29: ffff80001cc079a0 x28: 1fffff800064dec1 x27: 1fffff800064dec0 [ 46.531674][ C1] x26: dfff800000000000 x25: 0000000000000000 x24: ffff0000c04985f0 [ 46.533086][ C1] x23: ffff0000c0498798 x22: ffff0000de4882a0 x21: ffff0000de4882a8 [ 46.534502][ C1] x20: 0000000000000001 x19: fffffc000326f600 x18: 1fffe00033e7697e [ 46.535915][ C1] x17: ffff80001537d000 x16: ffff8000082dbd38 x15: 0000000000000000 [ 46.537348][ C1] x14: 0000000000000003 x13: 1ffff00003980f22 x12: 0000000000000000 [ 46.538768][ C1] x11: ff0080000871723c x10: 0000000000000000 x9 : ffff80000871723c [ 46.540204][ C1] x8 : ffff0000c0a59c00 x7 : 0000000000000000 x6 : 0000000000000000 [ 46.541637][ C1] x5 : 0000000000000080 x4 : 0000000000000000 x3 : 0000000000000010 [ 46.543301][ C1] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 46.544787][ C1] Call trace: [ 46.545382][ C1] __folio_end_writeback+0x7d0/0x9cc [ 46.546325][ C1] folio_end_writeback+0x12c/0x410 [ 46.547216][ C1] end_page_writeback+0x58/0x74 [ 46.548085][ C1] end_buffer_async_write+0x330/0x4fc [ 46.549043][ C1] end_bio_bh_io_sync+0xb4/0x1e4 [ 46.549901][ C1] bio_endio+0x750/0x794 [ 46.550622][ C1] blk_update_request+0x4ac/0xc58 [ 46.551514][ C1] blk_mq_end_request+0x54/0x8c [ 46.552371][ C1] lo_complete_rq+0x1e8/0x238 [ 46.553206][ C1] blk_done_softirq+0x11c/0x168 [ 46.554053][ C1] handle_softirqs+0x318/0xc90 [ 46.554837][ C1] run_ksoftirqd+0x7c/0x2ac [ 46.555616][ C1] smpboot_thread_fn+0x4e8/0x960 [ 46.556480][ C1] kthread+0x254/0x2e0 [ 46.557191][ C1] ret_from_fork+0x10/0x20 [ 46.557979][ C1] irq event stamp: 412901 [ 46.558772][ C1] hardirqs last enabled at (412900): [] folio_memcg_lock+0xe8/0x1f8 [ 46.560519][ C1] hardirqs last disabled at (412901): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 46.562189][ C1] softirqs last enabled at (412890): [] handle_softirqs+0xb1c/0xc90 [ 46.563814][ C1] softirqs last disabled at (412895): [] run_ksoftirqd+0x7c/0x2ac [ 46.565357][ C1] ---[ end trace 0000000000000000 ]---