[ 9.424544][ T3991] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: [ 9.455083][ T292] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 9.461188][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts. 1970/01/01 00:00:43 parsed 1 programs 1970/01/01 00:00:43 serving rpc on tcp://34917 syzkaller login: [ 44.425400][ T4341] cgroup: Unknown subsys name 'net' [ 44.748707][ T4341] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 45.018882][ T4341] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 51.301380][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.302689][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.303940][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.316873][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.318110][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.319720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.412963][ T4378] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.414292][ T4378] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.415597][ T4378] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.417841][ T4378] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.419199][ T4378] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 51.420290][ T4378] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.019714][ T4402] chnl_net:caif_netlink_parms(): no params data found [ 52.036867][ T4402] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.038041][ T4402] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.039456][ T4402] device bridge_slave_0 entered promiscuous mode [ 52.041942][ T4402] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.043113][ T4402] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.044488][ T4402] device bridge_slave_1 entered promiscuous mode [ 52.051554][ T4402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.053845][ T4402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.061493][ T4402] team0: Port device team_slave_0 added [ 52.063118][ T4402] team0: Port device team_slave_1 added [ 52.068613][ T4402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.069681][ T4402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.073409][ T4402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.075922][ T4402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.077234][ T4402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.080854][ T4402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.117230][ T4402] device hsr_slave_0 entered promiscuous mode [ 52.156917][ T4402] device hsr_slave_1 entered promiscuous mode [ 52.248668][ T4402] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.296546][ T4402] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.359461][ T4402] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.427614][ T4402] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.493509][ T4402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.497980][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.499845][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.502519][ T4402] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.504770][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.507393][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.509368][ T248] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.510528][ T248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.512241][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.523526][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.525204][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.527526][ T248] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.528611][ T248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.531300][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.533973][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.542962][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.544942][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.546736][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.548531][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.550267][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.551664][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.553071][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.554472][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.559623][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.569700][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.627567][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.628814][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.632494][ T4402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.638392][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.639997][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.645259][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.648272][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.650490][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.651807][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.660485][ T4402] device veth0_vlan entered promiscuous mode [ 52.663996][ T4402] device veth1_vlan entered promiscuous mode [ 52.670740][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.672238][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.673641][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.675149][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.678474][ T4402] device veth0_macvtap entered promiscuous mode [ 52.681454][ T4402] device veth1_macvtap entered promiscuous mode [ 52.686012][ T4402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.687719][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.689323][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.690709][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.692178][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.694852][ T4402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.695942][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.698369][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.700802][ T4402] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.702269][ T4402] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.703566][ T4402] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.704810][ T4402] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:54 executed programs: 0 [ 54.212692][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.214328][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.215732][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.217830][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.219154][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.220384][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.428583][ T292] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.466499][ T4441] chnl_net:caif_netlink_parms(): no params data found [ 54.481607][ T4441] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.482833][ T4441] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.484387][ T4441] device bridge_slave_0 entered promiscuous mode [ 54.486759][ T4441] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.487854][ T4441] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.489293][ T4441] device bridge_slave_1 entered promiscuous mode [ 54.495360][ T4441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.498463][ T4441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.505234][ T4441] team0: Port device team_slave_0 added [ 54.509243][ T4441] team0: Port device team_slave_1 added [ 54.514334][ T4441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.515516][ T4441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.519486][ T4441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.522071][ T4441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.523083][ T4441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.527109][ T4441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.567405][ T4441] device hsr_slave_0 entered promiscuous mode [ 54.606253][ T4441] device hsr_slave_1 entered promiscuous mode [ 54.646167][ T4441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.647465][ T4441] Cannot create hsr debugfs directory [ 56.256358][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 57.527126][ T292] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.277393][ T292] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.336407][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 58.367905][ T292] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.398225][ T4441] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.610723][ T4441] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.647186][ T4441] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.710527][ T4441] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.838719][ T4441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.842487][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.843944][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.846631][ T4441] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.849465][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.851055][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.852403][ T4411] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.853369][ T4411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.854635][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.901286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.902790][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.904136][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.905116][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.907671][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.910377][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.913388][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.915217][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.916789][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.919295][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.920837][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.923646][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.925085][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.927931][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.929380][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.931528][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.062762][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.064041][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.068001][ T4441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.073670][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.075199][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.081198][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.082740][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.084527][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.085855][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.119238][ T4441] device veth0_vlan entered promiscuous mode [ 60.122491][ T4441] device veth1_vlan entered promiscuous mode [ 60.129930][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.131309][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.132799][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.134259][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.137480][ T4441] device veth0_macvtap entered promiscuous mode [ 60.140226][ T4441] device veth1_macvtap entered promiscuous mode [ 60.144609][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.146612][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.148596][ T4441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.149823][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.151247][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.152587][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.154070][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.156637][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.158068][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.160067][ T4441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.201005][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.202709][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.205565][ T4441] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.207026][ T4441] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.208334][ T4441] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.209712][ T4441] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.230273][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.232602][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.234272][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.295862][ T4411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.297453][ T4411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.298665][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 60.416439][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 60.449870][ T4512] loop0: detected capacity change from 0 to 32768 [ 60.460840][ T4512] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 60.462116][ T4512] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 60.467449][ T4512] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 60.469907][ T4414] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 60.471031][ T4414] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 60.488126][ T4414] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 17ms [ 60.490162][ T4414] gfs2: fsid=syz:syz.0: jid=0: Done [ 60.491453][ T4512] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 60.539795][ T292] device hsr_slave_0 left promiscuous mode [ 60.568453][ T292] device hsr_slave_1 left promiscuous mode [ 60.569876][ T4441] ------------[ cut here ]------------ [ 60.570862][ T4441] WARNING: CPU: 1 PID: 4441 at include/linux/backing-dev.h:247 __folio_mark_dirty+0x8b8/0xce0 [ 60.572284][ T4441] Modules linked in: [ 60.572829][ T4441] CPU: 1 PID: 4441 Comm: syz-executor Not tainted syzkaller #0 [ 60.573924][ T4441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 60.575424][ T4441] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 60.576770][ T4441] pc : __folio_mark_dirty+0x8b8/0xce0 [ 60.577627][ T4441] lr : __folio_mark_dirty+0x8b8/0xce0 [ 60.578495][ T4441] sp : ffff800021337620 [ 60.579097][ T4441] x29: ffff800021337630 x28: 1fffff80006cc9b0 x27: 0000000000000000 [ 60.580406][ T4441] x26: dfff800000000000 x25: 0000000000000000 x24: ffff0000c53a3e98 [ 60.581651][ T4441] x23: 0000000000000001 x22: 0000000000000000 x21: 1fffe00018a747d3 [ 60.582969][ T4441] x20: ffff0000d272e250 x19: fffffc0003664d80 x18: 1fffe00033e8417e [ 60.584193][ T4441] x17: ffff80001532d000 x16: ffff8000082dba2c x15: 000000000004ffff [ 60.585417][ T4441] x14: 0000000000000001 x13: 1fffe00018a747d3 x12: 0000000000000000 [ 60.586752][ T4441] x11: ff00800008714a0c x10: 0000000000000000 x9 : ffff800008714a0c [ 60.588038][ T4441] x8 : ffff0000cdde5400 x7 : 0000000000000000 x6 : 0000000000000000 [ 60.589349][ T4441] x5 : 0000000000000020 x4 : 0000000000000000 x3 : ffff800008a6643c [ 60.590596][ T4441] x2 : ffff0000ced30060 x1 : 0000000000000000 x0 : 0000000000000000 [ 60.591973][ T4441] Call trace: [ 60.592429][ T4441] __folio_mark_dirty+0x8b8/0xce0 [ 60.593206][ T4441] mark_buffer_dirty+0x2b8/0x5c0 [ 60.593980][ T4441] gfs2_unpin+0x128/0x918 [ 60.594679][ T4441] buf_lo_after_commit+0x144/0x18c [ 60.595533][ T4441] __gfs2_log_flush+0x12e8/0x1bd4 [ 60.596350][ T4441] gfs2_log_flush+0x3c/0x58 [ 60.597064][ T4441] gfs2_kill_sb+0x5c/0xd8 [ 60.597676][ T4441] deactivate_locked_super+0xb4/0x128 [ 60.598520][ T4441] deactivate_super+0xe4/0x104 [ 60.599215][ T4441] cleanup_mnt+0x3a8/0x430 [ 60.599870][ T4441] __cleanup_mnt+0x20/0x30 [ 60.600531][ T4441] task_work_run+0x1f4/0x280 [ 60.601249][ T4441] get_signal+0x1140/0x133c [ 60.601962][ T4441] do_notify_resume+0x364/0x2c84 [ 60.602676][ T4441] el0_svc+0x98/0x128 [ 60.603261][ T4441] el0t_64_sync_handler+0x84/0xf0 [ 60.604026][ T4441] el0t_64_sync+0x18c/0x190 [ 60.604693][ T4441] irq event stamp: 147514 [ 60.605376][ T4441] hardirqs last enabled at (147513): [] folio_memcg_lock+0xe8/0x1f8 [ 60.606827][ T4441] hardirqs last disabled at (147514): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 60.608352][ T4441] softirqs last enabled at (147398): [] local_bh_enable+0x10/0x34 [ 60.609709][ T4441] softirqs last disabled at (147396): [] local_bh_disable+0x10/0x34 [ 60.611160][ T4441] ---[ end trace 0000000000000000 ]--- [ 60.614204][ T4441] ------------[ cut here ]------------ [ 60.615069][ T4441] WARNING: CPU: 0 PID: 4441 at include/linux/backing-dev.h:247 __folio_start_writeback+0x8a8/0xa98 [ 60.616735][ T4441] Modules linked in: [ 60.617333][ T4441] CPU: 0 PID: 4441 Comm: syz-executor Tainted: G W syzkaller #0 [ 60.618610][ T4441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 60.619898][ T4441] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 60.620999][ T4441] pc : __folio_start_writeback+0x8a8/0xa98 [ 60.621871][ T4441] lr : __folio_start_writeback+0x8a8/0xa98 [ 60.622795][ T4441] sp : ffff8000213370a0 [ 60.623404][ T4441] x29: ffff800021337180 x28: ffff700004266e1c x27: 0000000000000000 [ 60.624592][ T4441] x26: ffff0000c53a3cf0 x25: 1fffff80006cc9b1 x24: dfff800000000000 [ 60.625930][ T4441] x23: ffff0000d272e250 x22: ffff800021337100 x21: ffff0000c53a3e98 [ 60.627102][ T4441] x20: 0000000000000001 x19: fffffc0003664d80 x18: 1fffe00033e7ff7e [ 60.628352][ T4441] x17: ffff80001532d000 x16: ffff8000082dba2c x15: 0000000000000000 [ 60.629504][ T4441] x14: 0000000000000001 x13: 1fffff80006cc9b0 x12: 0000000000000000 [ 60.630708][ T4441] x11: ff00800008716f30 x10: 0000000000000000 x9 : ffff800008716f30 [ 60.631930][ T4441] x8 : ffff0000cdde5400 x7 : ffff800008716980 x6 : 0000000000000000 [ 60.633198][ T4441] x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff8000087169bc [ 60.634347][ T4441] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 60.635492][ T4441] Call trace: [ 60.635963][ T4441] __folio_start_writeback+0x8a8/0xa98 [ 60.636795][ T4441] set_page_writeback+0x5c/0x7c [ 60.637507][ T4441] gfs2_aspace_writepage+0x524/0x6f4 [ 60.638310][ T4441] __gfs2_writepage+0x70/0x184 [ 60.638992][ T4441] write_cache_pages+0x760/0xe00 [ 60.639678][ T4441] gfs2_ail1_flush+0x7a8/0x9f0 [ 60.640337][ T4441] empty_ail1_list+0x130/0x214 [ 60.641009][ T4441] __gfs2_log_flush+0x15c8/0x1bd4 [ 60.641726][ T4441] gfs2_log_flush+0x3c/0x58 [ 60.642435][ T4441] gfs2_kill_sb+0x5c/0xd8 [ 60.643038][ T4441] deactivate_locked_super+0xb4/0x128 [ 60.643856][ T4441] deactivate_super+0xe4/0x104 [ 60.644548][ T4441] cleanup_mnt+0x3a8/0x430 [ 60.645161][ T4441] __cleanup_mnt+0x20/0x30 [ 60.645768][ T4441] task_work_run+0x1f4/0x280 [ 60.646430][ T4441] get_signal+0x1140/0x133c [ 60.647073][ T4441] do_notify_resume+0x364/0x2c84 [ 60.647798][ T4441] el0_svc+0x98/0x128 [ 60.648353][ T4441] el0t_64_sync_handler+0x84/0xf0 [ 60.649048][ T4441] el0t_64_sync+0x18c/0x190 [ 60.649740][ T4441] irq event stamp: 147626 [ 60.650316][ T4441] hardirqs last enabled at (147625): [] folio_memcg_lock+0xe8/0x1f8 [ 60.651708][ T4441] hardirqs last disabled at (147626): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 60.653046][ T4441] softirqs last enabled at (147588): [] handle_softirqs+0xb1c/0xc90 [ 60.654437][ T4441] softirqs last disabled at (147517): [] __do_softirq+0x14/0x20 [ 60.655845][ T4441] ---[ end trace 0000000000000000 ]--- [ 60.666474][ C1] ------------[ cut here ]------------ [ 60.667547][ C1] WARNING: CPU: 1 PID: 21 at include/linux/backing-dev.h:247 __folio_end_writeback+0x7d0/0x9cc [ 60.669035][ C1] Modules linked in: [ 60.669583][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 [ 60.670844][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 60.672238][ C1] pstate: 424000c5 (nZcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 60.673378][ C1] pc : __folio_end_writeback+0x7d0/0x9cc [ 60.674178][ C1] lr : __folio_end_writeback+0x7d0/0x9cc [ 60.674966][ C1] sp : ffff80001cba7980 [ 60.675600][ C1] x29: ffff80001cba79a0 x28: 1fffff8000699cd9 x27: 1fffff8000699cd8 [ 60.676721][ C1] x26: dfff800000000000 x25: 0000000000000000 x24: ffff0000c53a3cf0 [ 60.678104][ C1] x23: ffff0000c53a3e98 x22: ffff0000d272c2a0 x21: ffff0000d272c2a8 [ 60.679310][ C1] x20: 0000000000000001 x19: fffffc00034ce6c0 x18: 1fffe00033e8417e [ 60.680587][ C1] x17: ffff80001532d000 x16: ffff8000082dba2c x15: 0000000000000000 [ 60.681846][ C1] x14: 0000000000000003 x13: 1ffff00003974f22 x12: 0000000000000000 [ 60.683198][ C1] x11: ff0080000871648c x10: 0000000000000000 x9 : ffff80000871648c [ 60.684429][ C1] x8 : ffff0000c0a59c00 x7 : 0000000000000000 x6 : 0000000000000000 [ 60.685612][ C1] x5 : 0000000000000080 x4 : 0000000000000000 x3 : 0000000000000010 [ 60.686749][ C1] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 60.687932][ C1] Call trace: [ 60.688359][ C1] __folio_end_writeback+0x7d0/0x9cc [ 60.689236][ C1] folio_end_writeback+0x12c/0x410 [ 60.690036][ C1] end_page_writeback+0x58/0x74 [ 60.690826][ C1] end_buffer_async_write+0x330/0x4fc [ 60.691598][ C1] end_bio_bh_io_sync+0xb4/0x1e4 [ 60.692344][ C1] bio_endio+0x750/0x794 [ 60.692977][ C1] blk_update_request+0x4ac/0xc58 [ 60.693708][ C1] blk_mq_end_request+0x54/0x8c [ 60.694367][ C1] lo_complete_rq+0x1e8/0x238 [ 60.695094][ C1] blk_done_softirq+0x11c/0x168 [ 60.695797][ C1] handle_softirqs+0x318/0xc90 [ 60.696497][ C1] run_ksoftirqd+0x7c/0x2ac [ 60.697121][ C1] smpboot_thread_fn+0x4e8/0x960 [ 60.697788][ C1] kthread+0x254/0x2e0 [ 60.698387][ C1] ret_from_fork+0x10/0x20 [ 60.699011][ C1] irq event stamp: 346445 [ 60.699609][ C1] hardirqs last enabled at (346444): [] folio_memcg_lock+0xe8/0x1f8 [ 60.700955][ C1] hardirqs last disabled at (346445): [] _raw_spin_lock_irqsave+0xa4/0xb0 [ 60.702440][ C1] softirqs last enabled at (346434): [] handle_softirqs+0xb1c/0xc90 [ 60.703917][ C1] softirqs last disabled at (346439): [] run_ksoftirqd+0x7c/0x2ac [ 60.705209][ C1] ---[ end trace 0000000000000000 ]--- [ 60.766282][ T292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.767487][ T292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.771344][ T292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.772423][ T292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.775866][ T292] device bridge_slave_1 left promiscuous mode [ 60.777736][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.817568][ T292] device bridge_slave_0 left promiscuous mode [ 60.818629][ T292] bridge0: port 1(bridge_slave_0) entered disabled state