[ 9.043794][ T3990] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: [ 9.076766][ T39] gvnic 0000:00:00.0 enp0s0: Device link is up. OK [ 9.087053][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.236' (ED25519) to the list of known hosts. 1970/01/01 00:00:26 parsed 1 programs syzkaller login: [ 27.503120][ T4324] cgroup: Unknown subsys name 'net' [ 27.728470][ T4324] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.013886][ T4324] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 32.860590][ T1615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.861918][ T1615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.863386][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.872535][ T250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.873869][ T250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.875355][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.245798][ T4346] chnl_net:caif_netlink_parms(): no params data found [ 33.263486][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.264719][ T4346] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.266789][ T4346] device bridge_slave_0 entered promiscuous mode [ 33.270414][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.271496][ T4346] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.272908][ T4346] device bridge_slave_1 entered promiscuous mode [ 33.281036][ T4346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.283303][ T4346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.290569][ T4346] team0: Port device team_slave_0 added [ 33.292304][ T4346] team0: Port device team_slave_1 added [ 33.298644][ T4346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.299661][ T4346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.303262][ T4346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.305589][ T4346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.306897][ T4346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.310536][ T4346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.377313][ T4346] device hsr_slave_0 entered promiscuous mode [ 33.436170][ T4346] device hsr_slave_1 entered promiscuous mode [ 33.528734][ T4346] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.567612][ T4346] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.607119][ T4346] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.638166][ T4346] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.705844][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.707008][ T4346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.708249][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.709295][ T4346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.726616][ T4346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.730575][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.732695][ T250] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.734265][ T250] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.739132][ T4346] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.742995][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.744687][ T250] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.745764][ T250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.750537][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.751994][ T250] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.753115][ T250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.759387][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.760844][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.763792][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.767956][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.770537][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.773272][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.824443][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.825698][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.830763][ T4346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.838245][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.843792][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.845497][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.847010][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.849160][ T4346] device veth0_vlan entered promiscuous mode [ 33.852067][ T4346] device veth1_vlan entered promiscuous mode [ 33.860088][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.861598][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.863296][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.865532][ T4346] device veth0_macvtap entered promiscuous mode [ 33.868874][ T4346] device veth1_macvtap entered promiscuous mode [ 33.873643][ T4346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.874834][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.877093][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.879585][ T4346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.880733][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.882271][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.884850][ T4346] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.888602][ T4346] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.890016][ T4346] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.891316][ T4346] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.328929][ T4368] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.330505][ T4368] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.331735][ T4368] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.333311][ T4368] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.334601][ T4368] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 34.335727][ T4368] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.239018][ T1615] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:35 executed programs: 0 [ 35.928421][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.930181][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.931590][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.933156][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.934432][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.935597][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.980397][ T4413] chnl_net:caif_netlink_parms(): no params data found [ 35.997218][ T4413] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.998386][ T4413] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.999860][ T4413] device bridge_slave_0 entered promiscuous mode [ 36.001818][ T4413] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.002957][ T4413] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.004417][ T4413] device bridge_slave_1 entered promiscuous mode [ 36.012470][ T4413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.014842][ T4413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.022534][ T4413] team0: Port device team_slave_0 added [ 36.024475][ T4413] team0: Port device team_slave_1 added [ 36.030482][ T4413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.031514][ T4413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.035167][ T4413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.037609][ T4413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.038628][ T4413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.042338][ T4413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.117072][ T4413] device hsr_slave_0 entered promiscuous mode [ 36.166330][ T4413] device hsr_slave_1 entered promiscuous mode [ 36.206124][ T4413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.207350][ T4413] Cannot create hsr debugfs directory [ 37.257288][ T1615] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.016250][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 39.356812][ T1615] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.487972][ T1615] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.086273][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 40.527683][ T4413] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.577262][ T4413] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.741202][ T4413] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.776965][ T4413] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.879813][ T4413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.883236][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.884847][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.888960][ T4413] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.891126][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 40.892554][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.894023][ T4373] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.895173][ T4373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.897000][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 40.942159][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 40.943718][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.945470][ T4373] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.946634][ T4373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.949462][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 40.952086][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 40.954694][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 40.956577][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.958124][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.960547][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 40.961996][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.964538][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 40.966060][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.969189][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 40.970522][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.972764][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.044496][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 41.045828][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 41.051024][ T4413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.082889][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.084506][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.092280][ T4413] device veth0_vlan entered promiscuous mode [ 41.094808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 41.096318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.097805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.099136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.101272][ T4413] device veth1_vlan entered promiscuous mode [ 41.109215][ T4413] device veth0_macvtap entered promiscuous mode [ 41.110593][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 41.112005][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 41.113329][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.114911][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.117640][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 41.151291][ T4413] device veth1_macvtap entered promiscuous mode [ 41.155466][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.157267][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.159163][ T4413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.160358][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.161922][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 41.163478][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.167472][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.169068][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.170989][ T4413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.172190][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.173838][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.176468][ T4413] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.177820][ T4413] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.179121][ T4413] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.180465][ T4413] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.274514][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.278647][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.281038][ T250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.283067][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.284296][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.286871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.438502][ T4483] loop0: detected capacity change from 0 to 32768 [ 41.444078][ T4483] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 41.445451][ T4483] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 41.456152][ T4483] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 41.458600][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 41.459612][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 41.471707][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 12ms [ 41.474679][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 41.475713][ T4483] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 41.549360][ T1615] device hsr_slave_0 left promiscuous mode [ 41.568222][ T4483] gfs2: fsid=syz:syz.0: found 1 quota changes SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 41.596073][ T4413] ------------[ cut here ]------------ [ 41.597025][ T4413] WARNING: CPU: 0 PID: 4413 at include/linux/backing-dev.h:247 __folio_mark_dirty+0x8a0/0xce0 [ 41.598442][ T4413] Modules linked in: [ 41.598981][ T4413] CPU: 0 PID: 4413 Comm: syz-executor Not tainted syzkaller #0 [ 41.600096][ T4413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 41.601502][ T4413] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 41.602591][ T4413] pc : __folio_mark_dirty+0x8a0/0xce0 [ 41.603417][ T4413] lr : __folio_mark_dirty+0x8a0/0xce0 [ 41.604253][ T4413] sp : ffff800020fa73c0 [ 41.604930][ T4413] x29: ffff800020fa73e0 x28: 1fffff8000683370 x27: dfff800000000000 [ 41.606140][ T4413] x26: 0000000000000000 x25: ffff0000c0494990 x24: 0000000000000001 [ 41.607357][ T4413] x23: 0000000000000000 x22: fffffc0003419b88 x21: 1fffe00018092932 [ 41.608513][ T4413] x20: ffff0000d066a250 x19: fffffc0003419b80 x18: ffff800011a5bd40 [ 41.609698][ T4413] x17: ffff800018184000 x16: ffff8000082d2558 x15: ffff800017c65000 [ 41.610902][ T4413] x14: ffff0000cd450a98 x13: 1ffff00002a0a0b1 x12: 0000000000ff0100 [ 41.612216][ T4413] x11: ff008000086fd29c x10: 0000000000000000 x9 : ffff8000086fd29c [ 41.613463][ T4413] x8 : ffff0000cd450000 x7 : ffff8000086fca40 x6 : 0000000000000000 [ 41.614739][ T4413] x5 : 0000000000000080 x4 : 0000000000000001 x3 : ffff800008a4835c [ 41.615974][ T4413] x2 : ffff0000ce95e060 x1 : 0000000000000000 x0 : 0000000000000000 [ 41.617196][ T4413] Call trace: [ 41.617703][ T4413] __folio_mark_dirty+0x8a0/0xce0 [ 41.618423][ T4413] mark_buffer_dirty+0x2b8/0x5cc [ 41.619152][ T4413] gfs2_unpin+0x120/0x914 [ 41.619816][ T4413] buf_lo_after_commit+0x140/0x188 [ 41.620605][ T4413] gfs2_log_flush+0xbc8/0x1aa0 [ 41.621396][ T4413] do_sync+0x88c/0xa94 [ 41.622000][ T4413] gfs2_quota_sync+0x2e0/0x528 [ 41.622700][ T4413] gfs2_sync_fs+0x4c/0xc4 [ 41.623374][ T4413] sync_filesystem+0xe8/0x218 [ 41.624124][ T4413] generic_shutdown_super+0x70/0x324 [ 41.624938][ T4413] kill_block_super+0x70/0xdc [ 41.625627][ T4413] gfs2_kill_sb+0xc0/0xd4 [ 41.626315][ T4413] deactivate_locked_super+0xac/0x124 [ 41.627072][ T4413] deactivate_super+0xe8/0x108 [ 41.627724][ T4413] cleanup_mnt+0x37c/0x404 [ 41.628355][ T4413] __cleanup_mnt+0x20/0x30 [ 41.629028][ T4413] task_work_run+0x1ec/0x270 [ 41.629720][ T4413] do_notify_resume+0x2038/0x2b28 [ 41.630441][ T4413] el0_svc+0x98/0x138 [ 41.631062][ T4413] el0t_64_sync_handler+0x84/0xf0 [ 41.631799][ T4413] el0t_64_sync+0x18c/0x190 [ 41.632452][ T4413] irq event stamp: 161518 [ 41.633061][ T4413] hardirqs last enabled at (161517): [] folio_memcg_lock+0xe8/0x1fc [ 41.634505][ T4413] hardirqs last disabled at (161518): [] _raw_spin_lock_irqsave+0xa4/0xb4 [ 41.635958][ T4413] softirqs last enabled at (161032): [] local_bh_enable+0x10/0x34 [ 41.637394][ T4413] softirqs last disabled at (161030): [] local_bh_disable+0x10/0x34 [ 41.638783][ T4413] ---[ end trace 0000000000000000 ]--- [ 41.643155][ T1615] device hsr_slave_1 left promiscuous mode [ 41.645378][ T4373] ------------[ cut here ]------------ [ 41.646349][ T4373] WARNING: CPU: 1 PID: 4373 at include/linux/backing-dev.h:247 __folio_start_writeback+0x868/0xa68 [ 41.647964][ T4373] Modules linked in: [ 41.648565][ T4373] CPU: 1 PID: 4373 Comm: kworker/u4:5 Tainted: G W syzkaller #0 [ 41.649874][ T4373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 41.651320][ T4373] Workqueue: writeback wb_workfn (flush-7:0) [ 41.652189][ T4373] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 41.653289][ T4373] pc : __folio_start_writeback+0x868/0xa68 [ 41.654094][ T4373] lr : __folio_start_writeback+0x868/0xa68 [ 41.654906][ T4373] sp : ffff800020ed6c80 [ 41.655527][ T4373] x29: ffff800020ed6d60 x28: dfff800000000000 x27: 0000000000000000 [ 41.656789][ T4373] x26: ffff7000041dad98 x25: 0000000000000000 x24: ffff0000d066ace0 [ 41.657976][ T4373] x23: ffff800020ed6ce0 x22: ffff0000c04947e8 x21: 0000000000000001 [ 41.659167][ T4373] x20: fffffc00030f2448 x19: fffffc00030f2440 x18: ffff800011a5bd40 [ 41.660237][ T4373] x17: ffff800018184000 x16: ffff8000082d2558 x15: ffff800017c65000 [ 41.661438][ T4373] x14: ffff0000cf91ddd8 x13: ffff0000cf91de50 x12: 0000000000ff0100 [ 41.662596][ T4373] x11: ff008000086ff7b4 x10: 0000000000000000 x9 : ffff8000086ff7b4 [ 41.663690][ T4373] x8 : ffff0000cf91d340 x7 : 0000000000000000 x6 : 0000000000000000 [ 41.664829][ T4373] x5 : 0000000000000020 x4 : 0000000000000000 x3 : ffff8000086ff274 [ 41.665979][ T4373] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 41.667156][ T4373] Call trace: [ 41.667673][ T4373] __folio_start_writeback+0x868/0xa68 [ 41.668458][ T4373] set_page_writeback+0x5c/0x7c [ 41.669178][ T4373] gfs2_aspace_writepage+0x520/0x6e8 [ 41.669919][ T4373] __writepage+0x70/0x18c [ 41.670537][ T4373] write_cache_pages+0x73c/0xdd4 [ 41.671310][ T4373] do_writepages+0x320/0x4fc [ 41.672002][ T4373] filemap_fdatawrite_wbc+0x124/0x174 [ 41.672834][ T4373] filemap_fdatawrite+0xc4/0x114 [ 41.673558][ T4373] gfs2_write_inode+0x234/0x34c [ 41.674232][ T4373] __writeback_single_inode+0x5e0/0x157c [ 41.675160][ T4373] writeback_sb_inodes+0x824/0x1404 [ 41.676002][ T4373] wb_writeback+0x400/0xfb0 [ 41.676708][ T4373] wb_workfn+0x34c/0xd98 [ 41.677330][ T4373] process_one_work+0x7f4/0x13a8 [ 41.678021][ T4373] worker_thread+0x8c8/0xfbc [ 41.678683][ T4373] kthread+0x250/0x2d8 [ 41.679296][ T4373] ret_from_fork+0x10/0x20 [ 41.679949][ T4373] irq event stamp: 333502 [ 41.680608][ T4373] hardirqs last enabled at (333501): [] folio_memcg_lock+0xe8/0x1fc [ 41.682069][ T4373] hardirqs last disabled at (333502): [] _raw_spin_lock_irqsave+0xa4/0xb4 [ 41.683607][ T4373] softirqs last enabled at (333412): [] batadv_nc_purge_paths+0x2f4/0x37c [ 41.685099][ T4373] softirqs last disabled at (333410): [] batadv_nc_purge_paths+0xd0/0x37c [ 41.686543][ T4373] ---[ end trace 0000000000000000 ]--- [ 41.691483][ C1] ------------[ cut here ]------------ [ 41.692337][ C1] WARNING: CPU: 1 PID: 21 at include/linux/backing-dev.h:247 __folio_end_writeback+0x7d4/0x9e0 [ 41.693752][ C1] Modules linked in: [ 41.694362][ C1] CPU: 1 PID: 21 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 [ 41.695676][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 41.697106][ C1] pstate: 424000c5 (nZcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 41.698226][ C1] pc : __folio_end_writeback+0x7d4/0x9e0 [ 41.699032][ C1] lr : __folio_end_writeback+0x7d4/0x9e0 [ 41.699848][ C1] sp : ffff80001c8c7960 [ 41.700484][ C1] x29: ffff80001c8c7980 x28: dfff800000000000 x27: ffff0000c04947e8 [ 41.701575][ C1] x26: 0000000000000000 x25: 05ffd400000020d2 x24: 1fffff800061e488 [ 41.702669][ C1] x23: 0000000000000001 x22: ffff0000d066ace0 x21: ffff0000d066ace8 [ 41.703755][ C1] x20: 0000000000000001 x19: fffffc00030f2440 x18: ffff800011a5bd40 [ 41.704871][ C1] x17: ffff800018184000 x16: ffff8000082d2558 x15: ffff800017c65000 [ 41.706032][ C1] x14: ffff0000c0a52658 x13: 1ffff00002a0a0b1 x12: 0000000000ff0100 [ 41.707182][ C1] x11: ff008000086fed40 x10: 0000000000000000 x9 : ffff8000086fed40 [ 41.708376][ C1] x8 : ffff0000c0a51bc0 x7 : 0000000000000000 x6 : 0000000000000000 [ 41.709516][ C1] x5 : 0000000000000080 x4 : 0000000000000000 x3 : 0000000000000010 [ 41.710687][ C1] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 41.711744][ C1] Call trace: [ 41.712314][ C1] __folio_end_writeback+0x7d4/0x9e0 [ 41.713148][ C1] folio_end_writeback+0x12c/0x41c [ 41.713906][ C1] end_page_writeback+0x58/0x74 [ 41.714581][ C1] end_buffer_async_write+0x32c/0x508 [ 41.715359][ C1] end_bio_bh_io_sync+0xb0/0x1e0 [ 41.716092][ C1] bio_endio+0x770/0x7b4 [ 41.716745][ C1] blk_update_request+0x49c/0xbec [ 41.717420][ C1] blk_mq_end_request+0x54/0x88 [ 41.718123][ C1] lo_complete_rq+0x1ec/0x250 [ 41.718742][ C1] blk_done_softirq+0x11c/0x168 [ 41.719415][ C1] handle_softirqs+0x318/0xc6c [ 41.720091][ C1] run_ksoftirqd+0x7c/0x2b0 [ 41.720730][ C1] smpboot_thread_fn+0x4b0/0x964 [ 41.721377][ C1] kthread+0x250/0x2d8 [ 41.721952][ C1] ret_from_fork+0x10/0x20 [ 41.722657][ C1] irq event stamp: 443187 [ 41.723307][ C1] hardirqs last enabled at (443186): [] folio_memcg_lock+0xe8/0x1fc [ 41.724752][ C1] hardirqs last disabled at (443187): [] _raw_spin_lock_irqsave+0xa4/0xb4 [ 41.726180][ C1] softirqs last enabled at (443162): [] handle_softirqs+0xaf8/0xc6c [ 41.727482][ C1] softirqs last disabled at (443167): [] run_ksoftirqd+0x7c/0x2b0 [ 41.728777][ C1] ---[ end trace 0000000000000000 ]--- [ 41.776355][ T1615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.777552][ T1615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.786442][ T1615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.787669][ T1615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.789291][ T1615] device bridge_slave_1 left promiscuous mode [ 41.790788][ T1615] bridge0: port 2(bridge_slave_1) entered disabled state