[ 9.389777][ T3992] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: [ 9.420043][ T291] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 9.421719][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.70' (ED25519) to the list of known hosts. 1970/01/01 00:00:31 parsed 1 programs 1970/01/01 00:00:31 serving rpc on tcp://42257 syzkaller login: [ 32.646036][ T4338] cgroup: Unknown subsys name 'net' [ 32.904685][ T4338] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.174922][ T4338] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 38.387062][ T4368] chnl_net:caif_netlink_parms(): no params data found [ 38.403759][ T4368] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.405029][ T4368] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.406464][ T4368] device bridge_slave_0 entered promiscuous mode [ 38.408796][ T4368] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.409903][ T4368] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.411310][ T4368] device bridge_slave_1 entered promiscuous mode [ 38.418018][ T4368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.420732][ T4368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.427105][ T4368] team0: Port device team_slave_0 added [ 38.428719][ T4368] team0: Port device team_slave_1 added [ 38.436413][ T4368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.437506][ T4368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.441296][ T4368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.444466][ T4368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.445545][ T4368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.449185][ T4368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.493440][ T4368] device hsr_slave_0 entered promiscuous mode [ 38.542231][ T4368] device hsr_slave_1 entered promiscuous mode [ 38.616461][ T4368] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.645129][ T4368] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.715182][ T4368] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.774962][ T4368] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.850976][ T4368] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.852285][ T4368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.853692][ T4368] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.854841][ T4368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.871680][ T4368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.875793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.878209][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.880265][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.883370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 38.887838][ T4368] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.890815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.894845][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.896076][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.900391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.901916][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.903129][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.908816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.910501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.914462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.917802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.920547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.924860][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.000304][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.001628][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.006159][ T4368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.013175][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.019508][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.021333][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.023877][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.027535][ T4368] device veth0_vlan entered promiscuous mode [ 39.030977][ T4368] device veth1_vlan entered promiscuous mode [ 39.038896][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.040549][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.042529][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.045635][ T4368] device veth0_macvtap entered promiscuous mode [ 39.048005][ T4368] device veth1_macvtap entered promiscuous mode [ 39.054994][ T4368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.056294][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.058309][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.061108][ T4368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.063185][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.065845][ T4368] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.067232][ T4368] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.068680][ T4368] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.070034][ T4368] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.175938][ T4389] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.177347][ T4389] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.178620][ T4389] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.180100][ T4389] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.181327][ T4389] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 39.184521][ T4389] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.458468][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.459867][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.461471][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.476104][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.477500][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.478682][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:00:40 executed programs: 0 [ 40.219996][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 40.221653][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 40.223386][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 40.224965][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 40.226286][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 40.227513][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 40.455607][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.498446][ T4433] chnl_net:caif_netlink_parms(): no params data found [ 40.512916][ T4433] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.514203][ T4433] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.515641][ T4433] device bridge_slave_0 entered promiscuous mode [ 40.517518][ T4433] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.518636][ T4433] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.520753][ T4433] device bridge_slave_1 entered promiscuous mode [ 40.527351][ T4433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.529787][ T4433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.536648][ T4433] team0: Port device team_slave_0 added [ 40.538789][ T4433] team0: Port device team_slave_1 added [ 40.545500][ T4433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.546558][ T4433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.550368][ T4433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.552978][ T4433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.554002][ T4433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.557798][ T4433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.613704][ T4433] device hsr_slave_0 entered promiscuous mode [ 40.662210][ T4433] device hsr_slave_1 entered promiscuous mode [ 40.702150][ T4433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.703471][ T4433] Cannot create hsr debugfs directory [ 42.252360][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 42.653518][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.332621][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 44.483244][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.563957][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.556797][ T4433] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.593388][ T4433] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.694406][ T4433] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.733545][ T4433] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.842531][ T4433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.845977][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.847550][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.849821][ T4433] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.934927][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.936603][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.938019][ T1643] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.939071][ T1643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.940448][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.941878][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.943762][ T1643] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.944924][ T1643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.946140][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.947732][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.949318][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.953953][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.955896][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.957439][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.960154][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.962115][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.964827][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.966197][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.968506][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.969953][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.973256][ T4433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.047899][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.049243][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.051965][ T4433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.058474][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.060138][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.065435][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.066945][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.068567][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.070012][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.115269][ T4433] device veth0_vlan entered promiscuous mode [ 46.119219][ T4433] device veth1_vlan entered promiscuous mode [ 46.125536][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 46.127111][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 46.128508][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.130016][ T291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.132332][ T4433] device veth0_macvtap entered promiscuous mode [ 46.134850][ T4433] device veth1_macvtap entered promiscuous mode [ 46.139962][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.141658][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.144970][ T4433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.146110][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 46.147643][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.148980][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.150824][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.154657][ T4433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.156331][ T4433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.158288][ T4433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.159438][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.160933][ T1643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.215209][ T4433] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.216693][ T4433] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.218017][ T4433] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.219377][ T4433] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.238575][ T291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.241210][ T291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.244775][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 46.249825][ T291] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.251102][ T291] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.252894][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 46.412058][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 46.473091][ T4508] loop0: detected capacity change from 0 to 32768 [ 46.478341][ T4508] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 46.479664][ T4508] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 46.485373][ T4508] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 46.487710][ T4459] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 46.488841][ T4459] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 46.506851][ T4459] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 18ms [ 46.508542][ T4459] gfs2: fsid=syz:syz.0: jid=0: Done [ 46.509526][ T4508] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 46.575554][ T4433] ------------[ cut here ]------------ [ 46.576553][ T4433] WARNING: CPU: 0 PID: 4433 at include/linux/backing-dev.h:247 __folio_mark_dirty+0x8b8/0xce0 [ 46.578196][ T4433] Modules linked in: [ 46.578817][ T4433] CPU: 0 PID: 4433 Comm: syz-executor Not tainted syzkaller #0 [ 46.580110][ T4433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 46.581733][ T4433] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 46.583070][ T4433] pc : __folio_mark_dirty+0x8b8/0xce0 [ 46.583956][ T4433] lr : __folio_mark_dirty+0x8b8/0xce0 [ 46.584805][ T4433] sp : ffff800020cb7700 [ 46.585455][ T4433] x29: ffff800020cb7710 x28: 1fffff8000692ab8 x27: 0000000000000000 [ 46.586806][ T4433] x26: dfff800000000000 x25: 0000000000000000 x24: ffff0000c0494998 [ 46.588113][ T4433] x23: 0000000000000001 x22: 0000000000000000 x21: 1fffe00018092933 [ 46.589344][ T4433] x20: ffff0000df67e250 x19: fffffc00034955c0 x18: 1fffe00033e7ff7e [ 46.590542][ T4433] x17: ffff80001532d000 x16: ffff8000082dba2c x15: 000000000004ffff [ 46.591859][ T4433] x14: 0000000000000001 x13: 1fffe00018092933 x12: 0000000000000000 [ 46.593129][ T4433] x11: ff00800008714a0c x10: 0000000000000000 x9 : ffff800008714a0c [ 46.594412][ T4433] x8 : ffff0000cf96b800 x7 : 0000000000000000 x6 : 0000000000000000 [ 46.595805][ T4433] x5 : 0000000000000020 x4 : 0000000000000000 x3 : ffff800008a6643c [ 46.597119][ T4433] x2 : ffff0000cebf6060 x1 : 0000000000000000 x0 : 0000000000000000 [ 46.598344][ T4433] Call trace: [ 46.598812][ T4433] __folio_mark_dirty+0x8b8/0xce0 [ 46.599643][ T4433] mark_buffer_dirty+0x2b8/0x5c0 [ 46.600385][ T4433] gfs2_unpin+0x128/0x918 [ 46.601055][ T4433] buf_lo_after_commit+0x144/0x18c [ 46.601861][ T4433] __gfs2_log_flush+0x12e8/0x1bd4 [ 46.602696][ T4433] gfs2_log_flush+0x3c/0x58 [ 46.603435][ T4433] gfs2_kill_sb+0x5c/0xd8 [ 46.604109][ T4433] deactivate_locked_super+0xb4/0x128 [ 46.604948][ T4433] deactivate_super+0xe4/0x104 [ 46.605707][ T4433] cleanup_mnt+0x3a8/0x430 [ 46.606432][ T4433] __cleanup_mnt+0x20/0x30 [ 46.607168][ T4433] task_work_run+0x1f4/0x280 [ 46.607902][ T4433] do_notify_resume+0x20f8/0x2c84 [ 46.608665][ T4433] el0_svc+0x98/0x128 [ 46.609228][ T4433] el0t_64_sync_handler+0x84/0xf0 [ 46.610013][ T4433] el0t_64_sync+0x18c/0x190 [ 46.610663][ T4433] irq event stamp: 150938 [ 46.611396][ T4433] hardirqs last enabled at (150937): [] folio_memcg_lock+0xe8/0x1f8 [ 46.612889][ T4433] hardirqs last disabled at (150938): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 46.614470][ T4433] softirqs last enabled at (150824): [] local_bh_enable+0x10/0x34 [ 46.615978][ T4433] softirqs last disabled at (150822): [] local_bh_disable+0x10/0x34 [ 46.617460][ T4433] ---[ end trace 0000000000000000 ]--- [ 46.642819][ T4433] ------------[ cut here ]------------ [ 46.643793][ T4433] WARNING: CPU: 1 PID: 4433 at include/linux/backing-dev.h:247 __folio_start_writeback+0x8a8/0xa98 [ 46.645359][ T4433] Modules linked in: [ 46.645936][ T4433] CPU: 1 PID: 4433 Comm: syz-executor Tainted: G W syzkaller #0 [ 46.647206][ T4433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 46.648568][ T4433] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 46.649884][ T4433] pc : __folio_start_writeback+0x8a8/0xa98 [ 46.650737][ T4433] lr : __folio_start_writeback+0x8a8/0xa98 [ 46.651656][ T4433] sp : ffff800020cb7180 [ 46.652329][ T4433] x29: ffff800020cb7260 x28: ffff700004196e38 x27: 0000000000000000 [ 46.653747][ T4433] x26: ffff0000c04947f0 x25: 1fffff8000692ab9 x24: dfff800000000000 [ 46.655026][ T4433] x23: ffff0000df67e250 x22: ffff800020cb71e0 x21: ffff0000c0494998 [ 46.656305][ T4433] x20: 0000000000000001 x19: fffffc00034955c0 x18: 1fffe00033e8417e [ 46.657659][ T4433] x17: ffff80001532d000 x16: ffff8000082dba2c x15: 0000000000000000 [ 46.658995][ T4433] x14: 0000000000000001 x13: 1fffff8000692ab8 x12: 0000000000000000 [ 46.660312][ T4433] x11: ff00800008716f30 x10: 0000000000000000 x9 : ffff800008716f30 [ 46.661716][ T4433] x8 : ffff0000cf96b800 x7 : ffff800008716980 x6 : 0000000000000000 [ 46.663034][ T4433] x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff8000087169bc [ 46.664415][ T4433] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 46.665769][ T4433] Call trace: [ 46.666346][ T4433] __folio_start_writeback+0x8a8/0xa98 [ 46.667230][ T4433] set_page_writeback+0x5c/0x7c [ 46.668007][ T4433] gfs2_aspace_writepage+0x524/0x6f4 [ 46.668901][ T4433] __gfs2_writepage+0x70/0x184 [ 46.669726][ T4433] write_cache_pages+0x760/0xe00 [ 46.670549][ T4433] gfs2_ail1_flush+0x7a8/0x9f0 [ 46.671382][ T4433] empty_ail1_list+0x130/0x214 [ 46.672228][ T4433] __gfs2_log_flush+0x15c8/0x1bd4 [ 46.673095][ T4433] gfs2_log_flush+0x3c/0x58 [ 46.673950][ T4433] gfs2_kill_sb+0x5c/0xd8 [ 46.674650][ T4433] deactivate_locked_super+0xb4/0x128 [ 46.675552][ T4433] deactivate_super+0xe4/0x104 [ 46.676323][ T4433] cleanup_mnt+0x3a8/0x430 [ 46.677035][ T4433] __cleanup_mnt+0x20/0x30 [ 46.677809][ T4433] task_work_run+0x1f4/0x280 [ 46.678628][ T4433] do_notify_resume+0x20f8/0x2c84 [ 46.679505][ T4433] el0_svc+0x98/0x128 [ 46.680125][ T4433] el0t_64_sync_handler+0x84/0xf0 [ 46.681023][ T4433] el0t_64_sync+0x18c/0x190 [ 46.681771][ T4433] irq event stamp: 151116 [ 46.682500][ T4433] hardirqs last enabled at (151115): [] folio_memcg_lock+0xe8/0x1f8 [ 46.684018][ T4433] hardirqs last disabled at (151116): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 46.685682][ T4433] softirqs last enabled at (151088): [] handle_softirqs+0xb1c/0xc90 [ 46.687223][ T4433] softirqs last disabled at (150941): [] __do_softirq+0x14/0x20 [ 46.688708][ T4433] ---[ end trace 0000000000000000 ]--- [ 46.694659][ C1] ------------[ cut here ]------------ [ 46.695695][ C1] WARNING: CPU: 1 PID: 21 at include/linux/backing-dev.h:247 __folio_end_writeback+0x7d0/0x9cc [ 46.697279][ C1] Modules linked in: [ 46.697875][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 [ 46.699160][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 46.700670][ C1] pstate: 424000c5 (nZcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 46.701763][ C1] pc : __folio_end_writeback+0x7d0/0x9cc [ 46.702633][ C1] lr : __folio_end_writeback+0x7d0/0x9cc [ 46.703537][ C1] sp : ffff80001cba7980 [ 46.704172][ C1] x29: ffff80001cba79a0 x28: 1fffff8000626121 x27: 1fffff8000626120 [ 46.705499][ C1] x26: dfff800000000000 x25: 0000000000000000 x24: ffff0000c04947f0 [ 46.706795][ C1] x23: ffff0000c0494998 x22: ffff0000df67c2a0 x21: ffff0000df67c2a8 [ 46.708099][ C1] x20: 0000000000000001 x19: fffffc0003130900 x18: 1fffe00033e8417e [ 46.709406][ C1] x17: ffff80001532d000 x16: ffff8000082dba2c x15: 0000000000000000 [ 46.710641][ C1] x14: 0000000000000003 x13: 1ffff00003974f22 x12: 0000000000000000 [ 46.711889][ C1] x11: ff0080000871648c x10: 0000000000000000 x9 : ffff80000871648c [ 46.713183][ C1] x8 : ffff0000c0a59c00 x7 : 0000000000000000 x6 : 0000000000000000 [ 46.714442][ C1] x5 : 0000000000000080 x4 : 0000000000000000 x3 : 0000000000000010 [ 46.715730][ C1] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 46.717063][ C1] Call trace: [ 46.717592][ C1] __folio_end_writeback+0x7d0/0x9cc [ 46.718401][ C1] folio_end_writeback+0x12c/0x410 [ 46.719198][ C1] end_page_writeback+0x58/0x74 [ 46.719989][ C1] end_buffer_async_write+0x330/0x4fc [ 46.720900][ C1] end_bio_bh_io_sync+0xb4/0x1e4 [ 46.721658][ C1] bio_endio+0x750/0x794 [ 46.722377][ C1] blk_update_request+0x4ac/0xc58 [ 46.723254][ C1] blk_mq_end_request+0x54/0x8c [ 46.724093][ C1] lo_complete_rq+0x1e8/0x238 [ 46.724866][ C1] blk_done_softirq+0x11c/0x168 [ 46.725605][ C1] handle_softirqs+0x318/0xc90 [ 46.726389][ C1] run_ksoftirqd+0x7c/0x2ac [ 46.727125][ C1] smpboot_thread_fn+0x4e8/0x960 [ 46.727919][ C1] kthread+0x254/0x2e0 [ 46.728643][ C1] ret_from_fork+0x10/0x20 [ 46.729412][ C1] irq event stamp: 390709 [ 46.730184][ C1] hardirqs last enabled at (390708): [] folio_memcg_lock+0xe8/0x1f8 [ 46.731734][ C1] hardirqs last disabled at (390709): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 46.733350][ C1] softirqs last enabled at (390698): [] handle_softirqs+0xb1c/0xc90 [ 46.734944][ C1] softirqs last disabled at (390703): [] run_ksoftirqd+0x7c/0x2ac [ 46.736450][ C1] ---[ end trace 0000000000000000 ]---