Warning: Permanently added '10.128.0.232' (ED25519) to the list of known hosts. 1970/01/01 00:00:32 parsed 1 programs [ 33.311002][ T4326] cgroup: Unknown subsys name 'net' [ 33.616127][ T4326] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.878421][ T4326] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 39.264000][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.265381][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.266898][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.274889][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.276235][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.277498][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.476753][ T4364] chnl_net:caif_netlink_parms(): no params data found [ 39.496428][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.497680][ T4364] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.499195][ T4364] device bridge_slave_0 entered promiscuous mode [ 39.501531][ T4364] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.502783][ T4364] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.504642][ T4364] device bridge_slave_1 entered promiscuous mode [ 39.511556][ T4364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.514112][ T4364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.520221][ T4364] team0: Port device team_slave_0 added [ 39.522046][ T4364] team0: Port device team_slave_1 added [ 39.529540][ T4364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.530609][ T4364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.535125][ T4364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.537804][ T4364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.538930][ T4364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.543395][ T4364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.584533][ T4364] device hsr_slave_0 entered promiscuous mode [ 39.623448][ T4364] device hsr_slave_1 entered promiscuous mode [ 39.708990][ T4364] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.766184][ T4364] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.805122][ T4364] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.855704][ T4364] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.890608][ T4364] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.891934][ T4364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.893496][ T4364] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.894605][ T4364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.963241][ T4364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.967386][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.969693][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.971763][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.977845][ T4364] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.981031][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.982616][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.983714][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.988188][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.989660][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.990768][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.998370][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.000082][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.002981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.006286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.009071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.011691][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.067384][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.068814][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.071928][ T4364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.081925][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.090501][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.092195][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.093704][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.095873][ T4364] device veth0_vlan entered promiscuous mode [ 40.099299][ T4364] device veth1_vlan entered promiscuous mode [ 40.105941][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.107492][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.109125][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.111476][ T4364] device veth0_macvtap entered promiscuous mode [ 40.114536][ T4364] device veth1_macvtap entered promiscuous mode [ 40.119413][ T4364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.120674][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.122684][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.127797][ T4364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.129182][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.137739][ T4364] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.139296][ T4364] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.140705][ T4364] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.142053][ T4364] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.765139][ T4415] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.766846][ T4415] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.768284][ T4415] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.770128][ T4415] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.771548][ T4415] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 40.772892][ T4415] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:00:41 executed programs: 0 [ 41.823880][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 41.825474][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 41.826919][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 41.828417][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 41.830292][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 41.831449][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 42.036088][ T4429] chnl_net:caif_netlink_parms(): no params data found [ 42.052326][ T4429] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.057156][ T4429] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.058737][ T4429] device bridge_slave_0 entered promiscuous mode [ 42.060685][ T4429] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.061873][ T4429] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.063350][ T4429] device bridge_slave_1 entered promiscuous mode [ 42.070381][ T4429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.072939][ T4429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.081502][ T4429] team0: Port device team_slave_0 added [ 42.083379][ T4429] team0: Port device team_slave_1 added [ 42.089090][ T4429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.090295][ T4429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.095743][ T4429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.416709][ T1658] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.419743][ T4429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.420879][ T4429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.425589][ T4429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.494525][ T4429] device hsr_slave_0 entered promiscuous mode [ 42.534380][ T4429] device hsr_slave_1 entered promiscuous mode [ 42.573304][ T4429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.574603][ T4429] Cannot create hsr debugfs directory [ 43.863487][ T4415] Bluetooth: hci0: command 0x0409 tx timeout [ 45.724333][ T1658] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.924270][ T1658] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.933712][ T4415] Bluetooth: hci0: command 0x041b tx timeout [ 46.005830][ T1658] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.115353][ T4429] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.224839][ T4429] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.264263][ T4429] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.304291][ T4429] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.433892][ T4429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.437409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.439181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.442071][ T4429] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.535064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.536729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.538195][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.539344][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.540745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.542221][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.544207][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.545480][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.546929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.549798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.552474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.556223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.557930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.559521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.561964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.564005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.566730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.568279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.570602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.572089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.606476][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.688390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.689745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.692589][ T4429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.699457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.701127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.706766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.708376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.709897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.711295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.713660][ T4429] device veth0_vlan entered promiscuous mode [ 47.717603][ T4429] device veth1_vlan entered promiscuous mode [ 47.725720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.727355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.728703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.730255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.732428][ T4429] device veth0_macvtap entered promiscuous mode [ 47.789141][ T4429] device veth1_macvtap entered promiscuous mode [ 47.794454][ T4429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.796185][ T4429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.798342][ T4429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.799672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.801269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.802783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.804377][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.806634][ T4429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.808333][ T4429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.810356][ T4429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.811620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.813319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.815643][ T4429] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.816949][ T4429] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.818286][ T4429] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.819718][ T4429] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.889045][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.890458][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.892523][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.899557][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.900818][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.902292][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.977006][ T1658] device hsr_slave_0 left promiscuous mode [ 48.013212][ T4415] Bluetooth: hci0: command 0x040f tx timeout [ 48.024821][ T1658] device hsr_slave_1 left promiscuous mode [ 48.049689][ T4507] loop0: detected capacity change from 0 to 32768 [ 48.054630][ T4507] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 48.056010][ T4507] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 48.065122][ T4507] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 48.067514][ T4456] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 48.068723][ T4456] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 48.081594][ T4456] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 12ms [ 48.084063][ T4456] gfs2: fsid=syz:syz.0: jid=0: Done [ 48.085457][ T4507] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 48.104776][ T1658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.106102][ T1658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.109151][ T1658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.110398][ T1658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.111839][ T1658] device bridge_slave_1 left promiscuous mode [ 48.113131][ T1658] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.150693][ T4507] gfs2: fsid=syz:syz.0: found 1 quota changes [ 48.154560][ T1658] device bridge_slave_0 left promiscuous mode [ 48.155706][ T1658] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.174275][ T4429] ------------[ cut here ]------------ [ 48.175298][ T4429] WARNING: CPU: 1 PID: 4429 at include/linux/backing-dev.h:247 __folio_mark_dirty+0x8a0/0xcd8 [ 48.176908][ T4429] Modules linked in: [ 48.177490][ T4429] CPU: 1 PID: 4429 Comm: syz-executor Not tainted syzkaller #0 [ 48.178690][ T4429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 48.180142][ T4429] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 48.181404][ T4429] pc : __folio_mark_dirty+0x8a0/0xcd8 [ 48.182198][ T4429] lr : __folio_mark_dirty+0x8a0/0xcd8 [ 48.183130][ T4429] sp : ffff800020a473c0 [ 48.183874][ T4429] x29: ffff800020a473e0 x28: 1fffff80006b4f58 x27: dfff800000000000 [ 48.185158][ T4429] x26: 0000000000000000 x25: ffff0000c058be90 x24: 0000000000000001 [ 48.186580][ T4429] x23: 0000000000000000 x22: fffffc00035a7ac8 x21: 1fffe000180b17d2 [ 48.187948][ T4429] x20: ffff0000d06e2250 x19: fffffc00035a7ac0 x18: ffff800011b9bf60 [ 48.189269][ T4429] x17: ffff80001835b000 x16: ffff8000082d7db8 x15: ffff800017e3c000 [ 48.190518][ T4429] x14: 0000000000000001 x13: 1fffe000180b17d2 x12: 0000000000ff0100 [ 48.191875][ T4429] x11: ff0080000870a0f8 x10: 0000000000000000 x9 : ffff80000870a0f8 [ 48.193195][ T4429] x8 : ffff0000cb8c3780 x7 : ffff80000870989c x6 : 0000000000000000 [ 48.194544][ T4429] x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff800008a58a88 [ 48.195918][ T4429] x2 : ffff0000cf352060 x1 : 0000000000000000 x0 : 0000000000000000 [ 48.197189][ T4429] Call trace: [ 48.197725][ T4429] __folio_mark_dirty+0x8a0/0xcd8 [ 48.198685][ T4429] mark_buffer_dirty+0x2b8/0x5c0 [ 48.199520][ T4429] gfs2_unpin+0x120/0x8fc [ 48.200296][ T4429] buf_lo_after_commit+0x140/0x188 [ 48.201249][ T4429] gfs2_log_flush+0xc00/0x1b20 [ 48.202061][ T4429] do_sync+0x8cc/0xaec [ 48.202714][ T4429] gfs2_quota_sync+0x2cc/0x500 [ 48.203542][ T4429] gfs2_sync_fs+0x4c/0xc4 [ 48.204320][ T4429] sync_filesystem+0xe8/0x218 [ 48.205134][ T4429] generic_shutdown_super+0x70/0x324 [ 48.206040][ T4429] kill_block_super+0x70/0xdc [ 48.206834][ T4429] gfs2_kill_sb+0xc0/0xd4 [ 48.207559][ T4429] deactivate_locked_super+0xac/0x120 [ 48.208462][ T4429] deactivate_super+0xe4/0x104 [ 48.209209][ T4429] cleanup_mnt+0x390/0x418 [ 48.209988][ T4429] __cleanup_mnt+0x20/0x30 [ 48.210708][ T4429] task_work_run+0x1ec/0x278 [ 48.211443][ T4429] do_notify_resume+0x1fa0/0x2aa4 [ 48.212312][ T4429] el0_svc+0x98/0x128 [ 48.212974][ T4429] el0t_64_sync_handler+0x84/0xf0 [ 48.213886][ T4429] el0t_64_sync+0x18c/0x190 [ 48.214688][ T4429] irq event stamp: 159346 [ 48.215455][ T4429] hardirqs last enabled at (159345): [] folio_memcg_lock+0xe8/0x1f4 [ 48.217167][ T4429] hardirqs last disabled at (159346): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 48.218844][ T4429] softirqs last enabled at (159040): [] local_bh_enable+0x10/0x34 [ 48.220507][ T4429] softirqs last disabled at (159038): [] local_bh_disable+0x10/0x34 [ 48.222090][ T4429] ---[ end trace 0000000000000000 ]--- [ 48.232900][ T55] ------------[ cut here ]------------ [ 48.233799][ T55] WARNING: CPU: 1 PID: 55 at include/linux/backing-dev.h:247 __folio_start_writeback+0x88c/0xa7c [ 48.235475][ T55] Modules linked in: [ 48.236104][ T55] CPU: 1 PID: 55 Comm: kworker/u4:3 Tainted: G W syzkaller #0 [ 48.237458][ T55] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 48.239064][ T55] Workqueue: writeback wb_workfn (flush-7:0) [ 48.240047][ T55] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 48.241386][ T55] pc : __folio_start_writeback+0x88c/0xa7c [ 48.242357][ T55] lr : __folio_start_writeback+0x88c/0xa7c [ 48.243371][ T55] sp : ffff80001cfe6c80 [ 48.244051][ T55] x29: ffff80001cfe6d60 x28: dfff800000000000 x27: 0000000000000000 [ 48.245328][ T55] x26: ffff7000039fcd98 x25: 0000000000000000 x24: ffff0000d06e2ce0 [ 48.246657][ T55] x23: ffff80001cfe6ce0 x22: ffff0000c058bce8 x21: 0000000000000001 [ 48.247978][ T55] x20: fffffc0003550f88 x19: fffffc0003550f80 x18: ffff800011b9bf60 [ 48.249399][ T55] x17: ffff80001835b000 x16: ffff8000082d7db8 x15: ffff800017e3c000 [ 48.250764][ T55] x14: 0000000000000001 x13: 1fffff80006aa1f0 x12: 0000000000ff0100 [ 48.252146][ T55] x11: ff0080000870c604 x10: 0000000000000000 x9 : ffff80000870c604 [ 48.253504][ T55] x8 : ffff0000c66a1bc0 x7 : 0000000000000000 x6 : 0000000000000000 [ 48.254885][ T55] x5 : 0000000000000020 x4 : 0000000000000000 x3 : ffff80000870c0b0 [ 48.256211][ T55] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 48.257441][ T55] Call trace: [ 48.257977][ T55] __folio_start_writeback+0x88c/0xa7c [ 48.258942][ T55] set_page_writeback+0x5c/0x7c [ 48.259801][ T55] gfs2_aspace_writepage+0x514/0x6dc [ 48.260662][ T55] __writepage+0x70/0x184 [ 48.261408][ T55] write_cache_pages+0x74c/0xde8 [ 48.262225][ T55] do_writepages+0x318/0x504 [ 48.263030][ T55] filemap_fdatawrite_wbc+0x124/0x174 [ 48.263957][ T55] filemap_fdatawrite+0xd0/0x12c [ 48.264780][ T55] gfs2_write_inode+0x234/0x34c [ 48.265526][ T55] __writeback_single_inode+0x5e0/0x1554 [ 48.266401][ T55] writeback_sb_inodes+0x858/0x143c [ 48.267261][ T55] wb_writeback+0x414/0xfcc [ 48.268028][ T55] wb_workfn+0x360/0xe18 [ 48.268750][ T55] process_one_work+0x7f8/0x13a4 [ 48.269579][ T55] worker_thread+0x8c4/0xfec [ 48.270301][ T55] kthread+0x250/0x2d8 [ 48.271002][ T55] ret_from_fork+0x10/0x20 [ 48.271788][ T55] irq event stamp: 283908 [ 48.272506][ T55] hardirqs last enabled at (283907): [] folio_memcg_lock+0xe8/0x1f4 [ 48.273962][ T55] hardirqs last disabled at (283908): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 48.275549][ T55] softirqs last enabled at (283842): [] batadv_tt_local_event+0x3d0/0x624 [ 48.277190][ T55] softirqs last disabled at (283840): [] batadv_tt_local_event+0x130/0x624 [ 48.278812][ T55] ---[ end trace 0000000000000000 ]--- [ 48.284037][ C1] ------------[ cut here ]------------ [ 48.284876][ C1] WARNING: CPU: 1 PID: 21 at include/linux/backing-dev.h:247 __folio_end_writeback+0x7d0/0x9cc [ 48.286541][ C1] Modules linked in: [ 48.287165][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 [ 48.288467][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 48.289934][ C1] pstate: 424000c5 (nZcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 48.291106][ C1] pc : __folio_end_writeback+0x7d0/0x9cc [ 48.291982][ C1] lr : __folio_end_writeback+0x7d0/0x9cc [ 48.292953][ C1] sp : ffff80001ca97970 [ 48.293647][ C1] x29: ffff80001ca97990 x28: dfff800000000000 x27: ffff0000c058bce8 [ 48.294929][ C1] x26: 0000000000000000 x25: 05ffd400000020d2 x24: 1fffff80006aa1f0 [ 48.296205][ C1] x23: 0000000000000001 x22: ffff0000d06e2ce0 x21: ffff0000d06e2ce8 [ 48.297400][ C1] x20: 0000000000000001 x19: fffffc0003550f80 x18: ffff800011b9bf60 [ 48.298659][ C1] x17: ffff80001835b000 x16: ffff8000082d7db8 x15: ffff800017e3c000 [ 48.299922][ C1] x14: 0000000000000003 x13: 1ffff00003952f20 x12: 0000000000ff0100 [ 48.301127][ C1] x11: ff0080000870bb7c x10: 0000000000000000 x9 : ffff80000870bb7c [ 48.302379][ C1] x8 : ffff0000c0a51bc0 x7 : 0000000000000000 x6 : 0000000000000000 [ 48.303803][ C1] x5 : 0000000000000080 x4 : 0000000000000000 x3 : 0000000000000010 [ 48.305147][ C1] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 48.306541][ C1] Call trace: [ 48.307070][ C1] __folio_end_writeback+0x7d0/0x9cc [ 48.307892][ C1] folio_end_writeback+0x12c/0x410 [ 48.308647][ C1] end_page_writeback+0x58/0x74 [ 48.309436][ C1] end_buffer_async_write+0x32c/0x4f4 [ 48.310310][ C1] end_bio_bh_io_sync+0xb0/0x1dc [ 48.311094][ C1] bio_endio+0x750/0x794 [ 48.311832][ C1] blk_update_request+0x49c/0xbec [ 48.312661][ C1] blk_mq_end_request+0x54/0x88 [ 48.313437][ C1] lo_complete_rq+0x1ec/0x250 [ 48.314218][ C1] blk_done_softirq+0x11c/0x168 [ 48.315064][ C1] handle_softirqs+0x318/0xc60 [ 48.315828][ C1] run_ksoftirqd+0x7c/0x2ac [ 48.316568][ C1] smpboot_thread_fn+0x4b0/0x964 [ 48.317371][ C1] kthread+0x250/0x2d8 [ 48.318028][ C1] ret_from_fork+0x10/0x20 [ 48.318751][ C1] irq event stamp: 333423 [ 48.319383][ C1] hardirqs last enabled at (333422): [] folio_memcg_lock+0xe8/0x1f4 [ 48.320876][ C1] hardirqs last disabled at (333423): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 48.322601][ C1] softirqs last enabled at (333398): [] handle_softirqs+0xaec/0xc60 [ 48.324135][ C1] softirqs last disabled at (333403): [] run_ksoftirqd+0x7c/0x2ac [ 48.325568][ C1] ---[ end trace 0000000000000000 ]---