Warning: Permanently added '10.128.1.56' (ED25519) to the list of known hosts. 2026/08/14 01:50:26 parsed 1 programs 2026/08/14 01:50:26 serving rpc on tcp://35595 [ 73.251153][ T5626] cgroup: Unknown subsys name 'net' [ 73.360523][ T5626] cgroup: Unknown subsys name 'cpuset' [ 73.369417][ T5626] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.814411][ T5626] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.677992][ T5638] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.793954][ T1199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.802766][ T1199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.834042][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.834522][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.954308][ T5692] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.962985][ T5692] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.971456][ T5692] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.980117][ T5692] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.991477][ T5692] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.634095][ T5698] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.634865][ T5698] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.635011][ T5698] bridge_slave_0: entered allmulticast mode [ 80.643795][ T5698] bridge_slave_0: entered promiscuous mode [ 80.648828][ T5698] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.648982][ T5698] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.649126][ T5698] bridge_slave_1: entered allmulticast mode [ 80.650783][ T5698] bridge_slave_1: entered promiscuous mode [ 80.682841][ T5698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.686498][ T5698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.714235][ T5698] team0: Port device team_slave_0 added [ 80.716884][ T5698] team0: Port device team_slave_1 added [ 80.740519][ T5698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.740547][ T5698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.740591][ T5698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.743116][ T5698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.743130][ T5698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.743150][ T5698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.795135][ T5698] hsr_slave_0: entered promiscuous mode [ 80.796256][ T5698] hsr_slave_1: entered promiscuous mode [ 80.947749][ T5698] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.962123][ T5698] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.963649][ T5698] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.973795][ T5698] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.974612][ T5698] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.981577][ T5698] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.982463][ T5698] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.990220][ T5698] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.066604][ T5698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.091083][ T5698] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.099800][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.100222][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.110495][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.110614][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.411780][ T5698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.461780][ T5698] veth0_vlan: entered promiscuous mode [ 81.470105][ T5698] veth1_vlan: entered promiscuous mode [ 81.495926][ T5698] veth0_macvtap: entered promiscuous mode [ 81.501671][ T5698] veth1_macvtap: entered promiscuous mode [ 81.517816][ T5698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.521910][ T5698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.577973][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.578046][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.578088][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.578114][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.753596][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.850065][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.926559][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.012365][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/08/14 01:50:38 executed programs: 0 [ 82.573932][ T4933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.578106][ T4933] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.578692][ T4933] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.579781][ T4933] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.580344][ T4933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.985715][ T5749] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.985888][ T5749] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.986007][ T5749] bridge_slave_0: entered allmulticast mode [ 82.987784][ T5749] bridge_slave_0: entered promiscuous mode [ 82.990214][ T5749] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.990312][ T5749] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.990420][ T5749] bridge_slave_1: entered allmulticast mode [ 82.992026][ T5749] bridge_slave_1: entered promiscuous mode [ 83.030133][ T5749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.034159][ T5749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.068941][ T5749] team0: Port device team_slave_0 added [ 83.071679][ T5749] team0: Port device team_slave_1 added [ 83.092930][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.092971][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.093749][ T5749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.096050][ T5749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.096062][ T5749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.096082][ T5749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.166965][ T5749] hsr_slave_0: entered promiscuous mode [ 83.171798][ T5749] hsr_slave_1: entered promiscuous mode [ 83.176858][ T5749] debugfs: 'hsr0' already exists in 'hsr' [ 83.176937][ T5749] Cannot create hsr debugfs directory [ 84.575799][ T49] bridge_slave_1: left allmulticast mode [ 84.582713][ T49] bridge_slave_1: left promiscuous mode [ 84.590016][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.601117][ T49] bridge_slave_0: left allmulticast mode [ 84.601145][ T49] bridge_slave_0: left promiscuous mode [ 84.601663][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.648254][ T4933] Bluetooth: hci0: command tx timeout [ 84.725055][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.739603][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.750132][ T49] bond0 (unregistering): Released all slaves [ 84.815275][ T49] hsr_slave_0: left promiscuous mode [ 84.824590][ T49] hsr_slave_1: left promiscuous mode [ 84.825494][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.825562][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.838003][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.838024][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.874758][ T49] veth1_macvtap: left promiscuous mode [ 84.874821][ T49] veth0_macvtap: left promiscuous mode [ 84.875000][ T49] veth1_vlan: left promiscuous mode [ 84.875105][ T49] veth0_vlan: left promiscuous mode [ 85.179888][ T49] team0 (unregistering): Port device team_slave_1 removed [ 85.210881][ T49] team0 (unregistering): Port device team_slave_0 removed [ 85.363376][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 85.672599][ T5749] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.687728][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.695713][ T5749] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.709150][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.712030][ T5749] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.726970][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.735312][ T5749] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.746133][ T5749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.104490][ T5749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.146299][ T5749] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.166108][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.166218][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.189914][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.190048][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.251283][ T5749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.691845][ T5749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.727887][ T4933] Bluetooth: hci0: command tx timeout [ 86.749684][ T1235] cfg80211: failed to load regulatory.db [ 86.763562][ T5749] veth0_vlan: entered promiscuous mode [ 86.774931][ T5749] veth1_vlan: entered promiscuous mode [ 86.812822][ T5749] veth0_macvtap: entered promiscuous mode [ 86.818965][ T5749] veth1_macvtap: entered promiscuous mode [ 86.834873][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.842261][ T5749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.918130][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.918219][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.918246][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.918272][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.947204][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.947226][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.990118][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.990157][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.386908][ T5835] loop0: detected capacity change from 0 to 40427 [ 87.421028][ T5835] F2FS-fs (loop0): invalid crc value [ 87.633126][ T5835] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 87.648108][ T5835] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 87.701412][ T5749] syz-executor: attempt to access beyond end of device [ 87.701412][ T5749] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 87.706950][ T5749] CPU: 1 UID: 0 PID: 5749 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 87.706976][ T5749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.706994][ T5749] Call Trace: [ 87.707005][ T5749] [ 87.707012][ T5749] dump_stack_lvl+0xe8/0x150 [ 87.707048][ T5749] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 87.707075][ T5749] f2fs_write_end_bio+0x1211/0x16e0 [ 87.707102][ T5749] ? blkg_put+0x22/0x240 [ 87.707135][ T5749] __submit_merged_bio+0x258/0x6a0 [ 87.707156][ T5749] ? rcu_is_watching+0x16/0xb0 [ 87.707181][ T5749] __submit_merged_write_cond+0x3c9/0x4e0 [ 87.707208][ T5749] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 87.707245][ T5749] f2fs_write_data_pages+0x2a27/0x36f0 [ 87.707304][ T5749] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 87.707369][ T5749] ? __bfs+0x153/0x290 [ 87.707385][ T5749] ? __pfx_hlock_conflict+0x10/0x10 [ 87.707423][ T5749] ? lockdep_unlock+0x5c/0xd0 [ 87.707446][ T5749] ? __lock_acquire+0x14b9/0x2e50 [ 87.707466][ T5749] ? ktime_get+0x1f5/0x220 [ 87.707502][ T5749] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 87.707526][ T5749] do_writepages+0x338/0x560 [ 87.707559][ T5749] ? do_raw_spin_unlock+0xf5/0x200 [ 87.707586][ T5749] filemap_fdatawrite+0x1e9/0x2f0 [ 87.707611][ T5749] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 87.707669][ T5749] ? preempt_schedule_common+0x7f/0xd0 [ 87.707698][ T5749] ? preempt_schedule_thunk+0x16/0x40 [ 87.707725][ T5749] f2fs_sync_dirty_inodes+0x30e/0x830 [ 87.707764][ T5749] f2fs_write_checkpoint+0xa3d/0x2710 [ 87.707787][ T5749] ? __lock_acquire+0x6df/0x2e50 [ 87.707833][ T5749] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 87.707892][ T5749] ? try_to_wake_up+0x8b6/0x14d0 [ 87.707925][ T5749] kill_f2fs_super+0x2dd/0x700 [ 87.707958][ T5749] ? __pfx_kill_f2fs_super+0x10/0x10 [ 87.707993][ T5749] ? call_rcu+0x64d/0x8b0 [ 87.708012][ T5749] ? lockdep_hardirqs_on+0x7b/0x110 [ 87.708048][ T5749] deactivate_locked_super+0xbc/0x110 [ 87.708068][ T5749] cleanup_mnt+0x3d3/0x460 [ 87.708093][ T5749] task_work_run+0x1d9/0x270 [ 87.708115][ T5749] ? __pfx_task_work_run+0x10/0x10 [ 87.708143][ T5749] exit_to_user_mode_loop+0x204/0x770 [ 87.708161][ T5749] ? rcu_is_watching+0x16/0xb0 [ 87.708185][ T5749] do_syscall_64+0x328/0x520 [ 87.708207][ T5749] ? trace_irq_disable+0x3b/0x140 [ 87.708224][ T5749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.708242][ T5749] ? clear_bhb_loop+0x70/0xc0 [ 87.708264][ T5749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.708281][ T5749] RIP: 0033:0x7f18b219f317 [ 87.708303][ T5749] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 87.708317][ T5749] RSP: 002b:00007ffca248a098 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 87.708340][ T5749] RAX: 0000000000000000 RBX: 00007f18b2234474 RCX: 00007f18b219f317 [ 87.708352][ T5749] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca248a150 [ 87.708362][ T5749] RBP: 00007ffca248a150 R08: 00007ffca248b150 R09: 00000000ffffffff [ 87.708374][ T5749] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffca248b1e0 [ 87.708384][ T5749] R13: 00007f18b2234474 R14: 00000000000153e9 R15: 00007ffca248b220 [ 87.708413][ T5749] [ 87.722559][ T5749] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 87.749561][ T4933] [ 88.050728][ T4933] ============================= [ 88.055553][ T4933] WARNING: suspicious RCU usage [ 88.060460][ T4933] syzkaller #0 Not tainted [ 88.064860][ T4933] ----------------------------- [ 88.069705][ T4933] ./include/linux/radix-tree.h:179 suspicious rcu_dereference_check() usage! [ 88.078530][ T4933] [ 88.078530][ T4933] other info that might help us debug this: [ 88.078530][ T4933] [ 88.088888][ T4933] [ 88.088888][ T4933] rcu_scheduler_active = 2, debug_locks = 1 [ 88.097074][ T4933] locks held by kworker/u9:1/4933: 4, last CPU#0: [ 88.103533][ T4933] #0: ffff88807ea90140 ((wq_completion)f2fs_evict_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 88.115258][ T4933] #1: ffffc9000c557c40 ((work_completion)(&ew->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 88.126890][ T4933] #2: ffff8880b863a820 (lock){+.+.}-{3:3}, at: __radix_tree_preload+0x82/0x870 [ 88.135971][ T4933] #3: ffff8880307408c8 (&im->ino_lock){+.+.}-{3:3}, at: __f2fs_add_ino_entry+0x14c/0x830 [ 88.145932][ T4933] [ 88.145932][ T4933] stack backtrace: [ 88.151848][ T4933] CPU: 0 UID: 0 PID: 4933 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 88.161465][ T4933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.171606][ T4933] Workqueue: f2fs_evict_wq f2fs_evict_inode_work [ 88.177967][ T4933] Call Trace: [ 88.181267][ T4933] [ 88.184186][ T4933] dump_stack_lvl+0xe8/0x150 [ 88.188769][ T4933] lockdep_rcu_suspicious+0x140/0x1d0 [ 88.194130][ T4933] __f2fs_add_ino_entry+0x782/0x830 [ 88.199320][ T4933] ? process_scheduled_works+0x97a/0x1630 [ 88.205113][ T4933] f2fs_evict_inode_work+0xa1/0x120 [ 88.210299][ T4933] process_scheduled_works+0xc3d/0x1630 [ 88.215850][ T4933] ? __pfx_process_scheduled_works+0x10/0x10 [ 88.221836][ T4933] ? assign_work+0x3cf/0x5d0 [ 88.226413][ T4933] worker_thread+0xa47/0xfb0 [ 88.230993][ T4933] ? __kthread_parkme+0x71/0x1f0 [ 88.235928][ T4933] kthread+0x38b/0x480 [ 88.239987][ T4933] ? __pfx_worker_thread+0x10/0x10 [ 88.245182][ T4933] ? __pfx_kthread+0x10/0x10 [ 88.249795][ T4933] ret_from_fork+0x514/0xb70 [ 88.254417][ T4933] ? __pfx_ret_from_fork+0x10/0x10 [ 88.259959][ T4933] ? __switch_to+0xc89/0x1420 [ 88.264627][ T4933] ? __pfx_kthread+0x10/0x10 [ 88.269222][ T4933] ret_from_fork_asm+0x1a/0x30 [ 88.273996][ T4933]