Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts. 2025/09/26 14:35:22 parsed 1 programs [ 180.034695][ T5862] cgroup: Unknown subsys name 'net' [ 180.266633][ T5862] cgroup: Unknown subsys name 'cpuset' [ 180.301296][ T5862] cgroup: Unknown subsys name 'rlimit' [ 181.987704][ T5862] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 185.809016][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.809035][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.864669][ T4427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.864688][ T4427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.660405][ T5926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.669763][ T5926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.679205][ T5926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.681668][ T5926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.682390][ T5926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.326415][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 190.732074][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.733761][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.733913][ T5931] bridge_slave_0: entered allmulticast mode [ 190.735585][ T5931] bridge_slave_0: entered promiscuous mode [ 190.739737][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.739843][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.739946][ T5931] bridge_slave_1: entered allmulticast mode [ 190.743495][ T5931] bridge_slave_1: entered promiscuous mode [ 190.926468][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.965496][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.095372][ T5931] team0: Port device team_slave_0 added [ 191.099542][ T5931] team0: Port device team_slave_1 added [ 191.375968][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.375981][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.375994][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.378971][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.378985][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.379007][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.555103][ T5931] hsr_slave_0: entered promiscuous mode [ 191.555935][ T5931] hsr_slave_1: entered promiscuous mode [ 191.908885][ T5931] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 191.938899][ T5931] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 191.974997][ T5931] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 192.016196][ T5931] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 192.150173][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.241261][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.248513][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.249163][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.278694][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.278938][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.498061][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.548238][ T5931] veth0_vlan: entered promiscuous mode [ 192.559752][ T5931] veth1_vlan: entered promiscuous mode [ 192.607815][ T5931] veth0_macvtap: entered promiscuous mode [ 192.618676][ T5931] veth1_macvtap: entered promiscuous mode [ 192.643708][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.658588][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.675506][ T4427] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.676841][ T4427] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.677105][ T4427] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.677141][ T4427] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.496445][ T4427] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.786091][ T4427] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.423692][ T4427] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.817878][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.817973][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 2025/09/26 14:35:40 executed programs: 0 [ 195.167382][ T4427] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.225266][ T5926] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.227559][ T5926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.228276][ T5926] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.229293][ T5926] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.229993][ T5926] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 195.469368][ T5974] chnl_net:caif_netlink_parms(): no params data found [ 195.753520][ T5974] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.753749][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.753942][ T5974] bridge_slave_0: entered allmulticast mode [ 195.756710][ T5974] bridge_slave_0: entered promiscuous mode [ 195.760268][ T5974] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.760490][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.766262][ T5974] bridge_slave_1: entered allmulticast mode [ 195.768974][ T5974] bridge_slave_1: entered promiscuous mode [ 195.976952][ T5974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.017330][ T5974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.234594][ T5974] team0: Port device team_slave_0 added [ 196.244717][ T5974] team0: Port device team_slave_1 added [ 196.404244][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.404261][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.404283][ T5974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.406628][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.406644][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.406667][ T5974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.834188][ T4427] bridge_slave_1: left allmulticast mode [ 196.834380][ T4427] bridge_slave_1: left promiscuous mode [ 196.836170][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.922575][ T4427] bridge_slave_0: left allmulticast mode [ 196.922607][ T4427] bridge_slave_0: left promiscuous mode [ 196.922864][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.292543][ T5154] Bluetooth: hci0: command tx timeout [ 198.481787][ T4427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.544314][ T4427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.565376][ T4427] bond0 (unregistering): Released all slaves [ 198.705764][ T5974] hsr_slave_0: entered promiscuous mode [ 198.706532][ T5974] hsr_slave_1: entered promiscuous mode [ 198.707190][ T5974] debugfs: 'hsr0' already exists in 'hsr' [ 198.707268][ T5974] Cannot create hsr debugfs directory [ 198.930932][ T4427] hsr_slave_0: left promiscuous mode [ 198.950957][ T4427] hsr_slave_1: left promiscuous mode [ 198.951849][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.951905][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.002679][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.002711][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.108552][ T4427] veth1_macvtap: left promiscuous mode [ 199.108763][ T4427] veth0_macvtap: left promiscuous mode [ 199.108957][ T4427] veth1_vlan: left promiscuous mode [ 199.109140][ T4427] veth0_vlan: left promiscuous mode [ 199.370834][ T5154] Bluetooth: hci0: command tx timeout [ 201.161434][ T4427] team0 (unregistering): Port device team_slave_1 removed [ 201.351765][ T4427] team0 (unregistering): Port device team_slave_0 removed [ 201.450974][ T5154] Bluetooth: hci0: command tx timeout [ 203.530880][ T5154] Bluetooth: hci0: command tx timeout [ 205.373027][ T5974] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 205.429489][ T5974] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.473257][ T5974] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.516982][ T5974] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 205.635863][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.658860][ T5974] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.673069][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.673278][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.683237][ T3288] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.683500][ T3288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.062921][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.120098][ T5974] veth0_vlan: entered promiscuous mode [ 206.144860][ T5974] veth1_vlan: entered promiscuous mode [ 206.185073][ T5974] veth0_macvtap: entered promiscuous mode [ 206.188720][ T5974] veth1_macvtap: entered promiscuous mode [ 206.208397][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.223970][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.241889][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.242127][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.242161][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.242192][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.459494][ T4427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.459515][ T4427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.513751][ T4427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.513771][ T4427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/26 14:35:51 executed programs: 2 [ 206.896319][ T6048] loop0: detected capacity change from 0 to 40427 [ 206.900089][ T6048] F2FS-fs: heap/no_heap options were deprecated [ 206.900263][ T6048] F2FS-fs: heap/no_heap options were deprecated [ 206.943078][ T6048] F2FS-fs (loop0): Image doesn't support compression [ 206.955666][ T6048] F2FS-fs (loop0): invalid crc value [ 207.104866][ T6048] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 207.124008][ T6048] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 214.398891][ T6048] F2FS-fs (loop0): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 214.417171][ T6048] syz.0.17: attempt to access beyond end of device [ 214.417171][ T6048] loop0: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 214.417787][ T6048] syz.0.17: attempt to access beyond end of device [ 214.417787][ T6048] loop0: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 214.417952][ T6048] syz.0.17: attempt to access beyond end of device [ 214.417952][ T6048] loop0: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 214.418057][ T6048] syz.0.17: attempt to access beyond end of device [ 214.418057][ T6048] loop0: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 214.418179][ T6048] syz.0.17: attempt to access beyond end of device [ 214.418179][ T6048] loop0: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 214.418271][ T6048] syz.0.17: attempt to access beyond end of device [ 214.418271][ T6048] loop0: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 214.418363][ T6048] syz.0.17: attempt to access beyond end of device [ 214.418363][ T6048] loop0: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 214.418454][ T6048] syz.0.17: attempt to access beyond end of device [ 214.418454][ T6048] loop0: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 214.418545][ T6048] syz.0.17: attempt to access beyond end of device [ 214.418545][ T6048] loop0: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 214.418762][ T6048] syz.0.17: attempt to access beyond end of device [ 214.418762][ T6048] loop0: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 219.420799][ T6048] bio_check_eod: 57318 callbacks suppressed [ 219.420817][ T6048] syz.0.17: attempt to access beyond end of device [ 219.420817][ T6048] loop0: rw=524288, sector=88992, nr_sectors = 8 limit=40427 [ 219.420893][ T6048] syz.0.17: attempt to access beyond end of device [ 219.420893][ T6048] loop0: rw=524288, sector=89000, nr_sectors = 8 limit=40427 [ 219.420961][ T6048] syz.0.17: attempt to access beyond end of device [ 219.420961][ T6048] loop0: rw=524288, sector=89008, nr_sectors = 8 limit=40427 [ 219.421029][ T6048] syz.0.17: attempt to access beyond end of device [ 219.421029][ T6048] loop0: rw=524288, sector=89016, nr_sectors = 8 limit=40427 [ 219.421096][ T6048] syz.0.17: attempt to access beyond end of device [ 219.421096][ T6048] loop0: rw=524288, sector=89024, nr_sectors = 8 limit=40427 [ 219.421181][ T6048] syz.0.17: attempt to access beyond end of device [ 219.421181][ T6048] loop0: rw=524288, sector=89032, nr_sectors = 8 limit=40427 [ 219.421249][ T6048] syz.0.17: attempt to access beyond end of device [ 219.421249][ T6048] loop0: rw=524288, sector=89040, nr_sectors = 8 limit=40427 [ 219.421317][ T6048] syz.0.17: attempt to access beyond end of device [ 219.421317][ T6048] loop0: rw=524288, sector=89048, nr_sectors = 8 limit=40427 [ 219.421385][ T6048] syz.0.17: attempt to access beyond end of device [ 219.421385][ T6048] loop0: rw=524288, sector=89056, nr_sectors = 8 limit=40427 [ 219.421452][ T6048] syz.0.17: attempt to access beyond end of device [ 219.421452][ T6048] loop0: rw=524288, sector=89064, nr_sectors = 8 limit=40427 [ 221.748416][ T5926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.766669][ T5926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.767546][ T5926] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.768954][ T5926] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.792376][ T5926] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.154987][ T6053] chnl_net:caif_netlink_parms(): no params data found [ 222.564359][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.564568][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.564739][ T6053] bridge_slave_0: entered allmulticast mode [ 222.567368][ T6053] bridge_slave_0: entered promiscuous mode [ 222.603697][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.603922][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.604118][ T6053] bridge_slave_1: entered allmulticast mode [ 222.606780][ T6053] bridge_slave_1: entered promiscuous mode [ 222.830213][ T6053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.855215][ T6053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.045785][ T6053] team0: Port device team_slave_0 added [ 223.049553][ T6053] team0: Port device team_slave_1 added [ 223.433677][ T6053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.433694][ T6053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.433716][ T6053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.436168][ T6053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.436180][ T6053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.436203][ T6053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.758544][ T6053] hsr_slave_0: entered promiscuous mode [ 223.766748][ T6053] hsr_slave_1: entered promiscuous mode [ 223.850827][ T5154] Bluetooth: hci1: command tx timeout [ 224.430786][ T6048] bio_check_eod: 48042 callbacks suppressed [ 224.430802][ T6048] syz.0.17: attempt to access beyond end of device [ 224.430802][ T6048] loop0: rw=524288, sector=88464, nr_sectors = 8 limit=40427 [ 224.430900][ T6048] syz.0.17: attempt to access beyond end of device [ 224.430900][ T6048] loop0: rw=524288, sector=88472, nr_sectors = 8 limit=40427 [ 224.430994][ T6048] syz.0.17: attempt to access beyond end of device [ 224.430994][ T6048] loop0: rw=524288, sector=88480, nr_sectors = 8 limit=40427 [ 224.431092][ T6048] syz.0.17: attempt to access beyond end of device [ 224.431092][ T6048] loop0: rw=524288, sector=88488, nr_sectors = 8 limit=40427 [ 224.431194][ T6048] syz.0.17: attempt to access beyond end of device [ 224.431194][ T6048] loop0: rw=524288, sector=88496, nr_sectors = 8 limit=40427 [ 224.431309][ T6048] syz.0.17: attempt to access beyond end of device [ 224.431309][ T6048] loop0: rw=524288, sector=88504, nr_sectors = 8 limit=40427 [ 224.431417][ T6048] syz.0.17: attempt to access beyond end of device [ 224.431417][ T6048] loop0: rw=524288, sector=88512, nr_sectors = 8 limit=40427 [ 224.431518][ T6048] syz.0.17: attempt to access beyond end of device [ 224.431518][ T6048] loop0: rw=524288, sector=88520, nr_sectors = 8 limit=40427 [ 224.431623][ T6048] syz.0.17: attempt to access beyond end of device [ 224.431623][ T6048] loop0: rw=524288, sector=88528, nr_sectors = 8 limit=40427 [ 224.431761][ T6048] syz.0.17: attempt to access beyond end of device [ 224.431761][ T6048] loop0: rw=524288, sector=88536, nr_sectors = 8 limit=40427 [ 224.563071][ T6053] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 224.618899][ T6053] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 224.667607][ T6053] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 224.715770][ T6053] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 224.945340][ T6053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.985441][ T6053] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.003718][ T3288] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.004349][ T3288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.036235][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.036394][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.400373][ T6053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.509882][ T6053] veth0_vlan: entered promiscuous mode [ 225.527850][ T6053] veth1_vlan: entered promiscuous mode [ 225.646810][ T6053] veth0_macvtap: entered promiscuous mode [ 225.656332][ T6053] veth1_macvtap: entered promiscuous mode [ 225.694229][ T6053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.731866][ T6053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.754685][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.757639][ T1152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.757681][ T1152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.757714][ T1152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.930754][ T5154] Bluetooth: hci1: command tx timeout [ 226.085756][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.085775][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.168255][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.168274][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/26 14:36:11 executed programs: 3 [ 226.973548][ T6073] loop1: detected capacity change from 0 to 40427 [ 226.990870][ T6073] F2FS-fs: heap/no_heap options were deprecated [ 226.991038][ T6073] F2FS-fs: heap/no_heap options were deprecated [ 227.021286][ T6073] F2FS-fs (loop1): Image doesn't support compression [ 227.026817][ T6073] F2FS-fs (loop1): invalid crc value [ 227.169351][ T6073] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 227.195822][ T6073] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 228.016325][ T5154] Bluetooth: hci1: command tx timeout [ 229.440803][ T6048] bio_check_eod: 29558 callbacks suppressed [ 229.440913][ T6048] syz.0.17: attempt to access beyond end of device [ 229.440913][ T6048] loop0: rw=524288, sector=89328, nr_sectors = 8 limit=40427 [ 229.441050][ T6048] syz.0.17: attempt to access beyond end of device [ 229.441050][ T6048] loop0: rw=524288, sector=89336, nr_sectors = 8 limit=40427 [ 229.441184][ T6048] syz.0.17: attempt to access beyond end of device [ 229.441184][ T6048] loop0: rw=524288, sector=89344, nr_sectors = 8 limit=40427 [ 229.441308][ T6048] syz.0.17: attempt to access beyond end of device [ 229.441308][ T6048] loop0: rw=524288, sector=89352, nr_sectors = 8 limit=40427 [ 229.441432][ T6048] syz.0.17: attempt to access beyond end of device [ 229.441432][ T6048] loop0: rw=524288, sector=89360, nr_sectors = 8 limit=40427 [ 229.441586][ T6048] syz.0.17: attempt to access beyond end of device [ 229.441586][ T6048] loop0: rw=524288, sector=89368, nr_sectors = 8 limit=40427 [ 229.441712][ T6048] syz.0.17: attempt to access beyond end of device [ 229.441712][ T6048] loop0: rw=524288, sector=89376, nr_sectors = 8 limit=40427 [ 229.441835][ T6048] syz.0.17: attempt to access beyond end of device [ 229.441835][ T6048] loop0: rw=524288, sector=89384, nr_sectors = 8 limit=40427 [ 229.442056][ T6048] syz.0.17: attempt to access beyond end of device [ 229.442056][ T6048] loop0: rw=524288, sector=89392, nr_sectors = 8 limit=40427 [ 229.442191][ T6048] syz.0.17: attempt to access beyond end of device [ 229.442191][ T6048] loop0: rw=524288, sector=89400, nr_sectors = 8 limit=40427 [ 230.090839][ T5154] Bluetooth: hci1: command tx timeout [ 234.450794][ T6048] bio_check_eod: 28692 callbacks suppressed [ 234.450813][ T6048] syz.0.17: attempt to access beyond end of device [ 234.450813][ T6048] loop0: rw=0, sector=87192, nr_sectors = 8 limit=40427 [ 234.450950][ T6048] syz.0.17: attempt to access beyond end of device [ 234.450950][ T6048] loop0: rw=0, sector=87200, nr_sectors = 8 limit=40427 [ 234.451080][ T6048] syz.0.17: attempt to access beyond end of device [ 234.451080][ T6048] loop0: rw=0, sector=87208, nr_sectors = 8 limit=40427 [ 234.451208][ T6048] syz.0.17: attempt to access beyond end of device [ 234.451208][ T6048] loop0: rw=0, sector=87216, nr_sectors = 8 limit=40427 [ 234.451355][ T6048] syz.0.17: attempt to access beyond end of device [ 234.451355][ T6048] loop0: rw=0, sector=87224, nr_sectors = 8 limit=40427 [ 234.451484][ T6048] syz.0.17: attempt to access beyond end of device [ 234.451484][ T6048] loop0: rw=0, sector=87232, nr_sectors = 8 limit=40427 [ 234.451613][ T6048] syz.0.17: attempt to access beyond end of device [ 234.451613][ T6048] loop0: rw=0, sector=87240, nr_sectors = 8 limit=40427 [ 234.451748][ T6048] syz.0.17: attempt to access beyond end of device [ 234.451748][ T6048] loop0: rw=0, sector=87248, nr_sectors = 8 limit=40427 [ 234.451876][ T6048] syz.0.17: attempt to access beyond end of device [ 234.451876][ T6048] loop0: rw=0, sector=87256, nr_sectors = 8 limit=40427 [ 234.452010][ T6048] syz.0.17: attempt to access beyond end of device [ 234.452010][ T6048] loop0: rw=0, sector=87264, nr_sectors = 8 limit=40427 [ 239.460822][ T6048] bio_check_eod: 29100 callbacks suppressed [ 239.460842][ T6048] syz.0.17: attempt to access beyond end of device [ 239.460842][ T6048] loop0: rw=524288, sector=88320, nr_sectors = 8 limit=40427 [ 239.460974][ T6048] syz.0.17: attempt to access beyond end of device [ 239.460974][ T6048] loop0: rw=524288, sector=88328, nr_sectors = 8 limit=40427 [ 239.461100][ T6048] syz.0.17: attempt to access beyond end of device [ 239.461100][ T6048] loop0: rw=524288, sector=88336, nr_sectors = 8 limit=40427 [ 239.461226][ T6048] syz.0.17: attempt to access beyond end of device [ 239.461226][ T6048] loop0: rw=524288, sector=88344, nr_sectors = 8 limit=40427 [ 239.461360][ T6048] syz.0.17: attempt to access beyond end of device [ 239.461360][ T6048] loop0: rw=524288, sector=88352, nr_sectors = 8 limit=40427 [ 239.461487][ T6048] syz.0.17: attempt to access beyond end of device [ 239.461487][ T6048] loop0: rw=524288, sector=88360, nr_sectors = 8 limit=40427 [ 239.461614][ T6048] syz.0.17: attempt to access beyond end of device [ 239.461614][ T6048] loop0: rw=524288, sector=88368, nr_sectors = 8 limit=40427 [ 239.461740][ T6048] syz.0.17: attempt to access beyond end of device [ 239.461740][ T6048] loop0: rw=524288, sector=88376, nr_sectors = 8 limit=40427 [ 239.461866][ T6048] syz.0.17: attempt to access beyond end of device [ 239.461866][ T6048] loop0: rw=524288, sector=88384, nr_sectors = 8 limit=40427 [ 239.461992][ T6048] syz.0.17: attempt to access beyond end of device [ 239.461992][ T6048] loop0: rw=524288, sector=88392, nr_sectors = 8 limit=40427 [ 241.500500][ T5926] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 241.515397][ T5926] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 241.516305][ T5926] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 241.517797][ T5926] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.518770][ T5926] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 242.114617][ T6078] chnl_net:caif_netlink_parms(): no params data found [ 242.662765][ T6078] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.662983][ T6078] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.663153][ T6078] bridge_slave_0: entered allmulticast mode [ 242.665885][ T6078] bridge_slave_0: entered promiscuous mode [ 242.669204][ T6078] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.669418][ T6078] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.669588][ T6078] bridge_slave_1: entered allmulticast mode [ 242.682508][ T6078] bridge_slave_1: entered promiscuous mode [ 242.896237][ T6078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.900382][ T6078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.195927][ T6078] team0: Port device team_slave_0 added [ 243.199684][ T6078] team0: Port device team_slave_1 added [ 243.424399][ T6078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.424414][ T6078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.424438][ T6078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.430817][ T6078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.430829][ T6078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.430850][ T6078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.610864][ T5926] Bluetooth: hci2: command tx timeout [ 243.773454][ T6078] hsr_slave_0: entered promiscuous mode [ 243.774879][ T6078] hsr_slave_1: entered promiscuous mode [ 243.775762][ T6078] debugfs: 'hsr0' already exists in 'hsr' [ 243.775784][ T6078] Cannot create hsr debugfs directory [ 244.480156][ T6048] bio_check_eod: 26378 callbacks suppressed [ 244.480174][ T6048] syz.0.17: attempt to access beyond end of device [ 244.480174][ T6048] loop0: rw=524288, sector=87312, nr_sectors = 8 limit=40427 [ 244.480317][ T6048] syz.0.17: attempt to access beyond end of device [ 244.480317][ T6048] loop0: rw=524288, sector=87320, nr_sectors = 8 limit=40427 [ 244.480444][ T6048] syz.0.17: attempt to access beyond end of device [ 244.480444][ T6048] loop0: rw=524288, sector=87328, nr_sectors = 8 limit=40427 [ 244.480571][ T6048] syz.0.17: attempt to access beyond end of device [ 244.480571][ T6048] loop0: rw=524288, sector=87336, nr_sectors = 8 limit=40427 [ 244.510910][ T6048] syz.0.17: attempt to access beyond end of device [ 244.510910][ T6048] loop0: rw=524288, sector=87344, nr_sectors = 8 limit=40427 [ 244.511051][ T6048] syz.0.17: attempt to access beyond end of device [ 244.511051][ T6048] loop0: rw=524288, sector=87352, nr_sectors = 8 limit=40427 [ 244.511177][ T6048] syz.0.17: attempt to access beyond end of device [ 244.511177][ T6048] loop0: rw=524288, sector=87360, nr_sectors = 8 limit=40427 [ 244.511343][ T6048] syz.0.17: attempt to access beyond end of device [ 244.511343][ T6048] loop0: rw=524288, sector=87368, nr_sectors = 8 limit=40427 [ 244.511495][ T6048] syz.0.17: attempt to access beyond end of device [ 244.511495][ T6048] loop0: rw=524288, sector=87376, nr_sectors = 8 limit=40427 [ 244.511621][ T6048] syz.0.17: attempt to access beyond end of device [ 244.511621][ T6048] loop0: rw=524288, sector=87384, nr_sectors = 8 limit=40427 [ 244.795937][ T6078] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 244.845255][ T6078] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 244.920729][ T6078] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 244.957076][ T6078] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 245.227518][ T6078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.294179][ T6078] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.309912][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.310158][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.372712][ T4427] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.372865][ T4427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.510237][ T6078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.555995][ T6073] F2FS-fs (loop1): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 245.690941][ T5926] Bluetooth: hci2: command tx timeout [ 245.852437][ T6078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.930476][ T6078] veth0_vlan: entered promiscuous mode [ 245.963915][ T6078] veth1_vlan: entered promiscuous mode [ 246.104644][ T6078] veth0_macvtap: entered promiscuous mode [ 246.110023][ T6078] veth1_macvtap: entered promiscuous mode [ 246.172212][ T6078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.214281][ T6078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.235822][ T4427] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.236074][ T4427] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.236301][ T4427] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.236781][ T4427] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.690753][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.690772][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.828157][ T4427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.828177][ T4427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/26 14:36:32 executed programs: 4 [ 247.771148][ T5926] Bluetooth: hci2: command tx timeout [ 248.129891][ T6098] loop2: detected capacity change from 0 to 40427 [ 248.143632][ T6098] F2FS-fs: heap/no_heap options were deprecated [ 248.143812][ T6098] F2FS-fs: heap/no_heap options were deprecated [ 248.182093][ T6098] F2FS-fs (loop2): Image doesn't support compression [ 248.185364][ T6098] F2FS-fs (loop2): invalid crc value [ 248.596177][ T6098] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 248.611467][ T6098] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 249.490738][ T6048] bio_check_eod: 29022 callbacks suppressed [ 249.490757][ T6048] syz.0.17: attempt to access beyond end of device [ 249.490757][ T6048] loop0: rw=524288, sector=87232, nr_sectors = 8 limit=40427 [ 249.490761][ T6073] syz.1.18: attempt to access beyond end of device [ 249.490761][ T6073] loop1: rw=0, sector=86600, nr_sectors = 8 limit=40427 [ 249.490894][ T6073] syz.1.18: attempt to access beyond end of device [ 249.490894][ T6073] loop1: rw=0, sector=86608, nr_sectors = 8 limit=40427 [ 249.490898][ T6048] syz.0.17: attempt to access beyond end of device [ 249.490898][ T6048] loop0: rw=524288, sector=87240, nr_sectors = 8 limit=40427 [ 249.491041][ T6073] syz.1.18: attempt to access beyond end of device [ 249.491041][ T6073] loop1: rw=0, sector=86616, nr_sectors = 8 limit=40427 [ 249.491057][ T6048] syz.0.17: attempt to access beyond end of device [ 249.491057][ T6048] loop0: rw=524288, sector=87248, nr_sectors = 8 limit=40427 [ 249.491183][ T6048] syz.0.17: attempt to access beyond end of device [ 249.491183][ T6048] loop0: rw=524288, sector=87256, nr_sectors = 8 limit=40427 [ 249.491183][ T6073] syz.1.18: attempt to access beyond end of device [ 249.491183][ T6073] loop1: rw=0, sector=86624, nr_sectors = 8 limit=40427 [ 249.491310][ T6048] syz.0.17: attempt to access beyond end of device [ 249.491310][ T6048] loop0: rw=524288, sector=87264, nr_sectors = 8 limit=40427 [ 249.491317][ T6073] syz.1.18: attempt to access beyond end of device [ 249.491317][ T6073] loop1: rw=0, sector=86632, nr_sectors = 8 limit=40427 [ 249.850915][ T5926] Bluetooth: hci2: command tx timeout [ 254.500761][ T6073] bio_check_eod: 34107 callbacks suppressed [ 254.500781][ T6073] syz.1.18: attempt to access beyond end of device [ 254.500781][ T6073] loop1: rw=0, sector=88968, nr_sectors = 8 limit=40427 [ 254.500916][ T6073] syz.1.18: attempt to access beyond end of device [ 254.500916][ T6073] loop1: rw=0, sector=88976, nr_sectors = 8 limit=40427 [ 254.501053][ T6073] syz.1.18: attempt to access beyond end of device [ 254.501053][ T6073] loop1: rw=0, sector=88984, nr_sectors = 8 limit=40427 [ 254.501182][ T6073] syz.1.18: attempt to access beyond end of device [ 254.501182][ T6073] loop1: rw=0, sector=88992, nr_sectors = 8 limit=40427 [ 254.501311][ T6073] syz.1.18: attempt to access beyond end of device [ 254.501311][ T6073] loop1: rw=0, sector=89000, nr_sectors = 8 limit=40427 [ 254.501440][ T6073] syz.1.18: attempt to access beyond end of device [ 254.501440][ T6073] loop1: rw=0, sector=89008, nr_sectors = 8 limit=40427 [ 254.501596][ T6073] syz.1.18: attempt to access beyond end of device [ 254.501596][ T6073] loop1: rw=0, sector=89016, nr_sectors = 8 limit=40427 [ 254.501725][ T6073] syz.1.18: attempt to access beyond end of device [ 254.501725][ T6073] loop1: rw=0, sector=89024, nr_sectors = 8 limit=40427 [ 254.501855][ T6073] syz.1.18: attempt to access beyond end of device [ 254.501855][ T6073] loop1: rw=0, sector=89032, nr_sectors = 8 limit=40427 [ 254.501989][ T6073] syz.1.18: attempt to access beyond end of device [ 254.501989][ T6073] loop1: rw=0, sector=89040, nr_sectors = 8 limit=40427 [ 256.258077][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.258154][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.510836][ T6073] bio_check_eod: 35261 callbacks suppressed [ 259.510856][ T6073] syz.1.18: attempt to access beyond end of device [ 259.510856][ T6073] loop1: rw=0, sector=88032, nr_sectors = 8 limit=40427 [ 259.510866][ T6048] syz.0.17: attempt to access beyond end of device [ 259.510866][ T6048] loop0: rw=0, sector=87056, nr_sectors = 8 limit=40427 [ 259.510997][ T6048] syz.0.17: attempt to access beyond end of device [ 259.510997][ T6048] loop0: rw=0, sector=87064, nr_sectors = 8 limit=40427 [ 259.510999][ T6073] syz.1.18: attempt to access beyond end of device [ 259.510999][ T6073] loop1: rw=0, sector=88040, nr_sectors = 8 limit=40427 [ 259.511129][ T6048] syz.0.17: attempt to access beyond end of device [ 259.511129][ T6048] loop0: rw=0, sector=87072, nr_sectors = 8 limit=40427 [ 259.511130][ T6073] syz.1.18: attempt to access beyond end of device [ 259.511130][ T6073] loop1: rw=0, sector=88048, nr_sectors = 8 limit=40427 [ 259.511261][ T6073] syz.1.18: attempt to access beyond end of device [ 259.511261][ T6073] loop1: rw=0, sector=88056, nr_sectors = 8 limit=40427 [ 259.511261][ T6048] syz.0.17: attempt to access beyond end of device [ 259.511261][ T6048] loop0: rw=0, sector=87080, nr_sectors = 8 limit=40427 [ 259.511390][ T6048] syz.0.17: attempt to access beyond end of device [ 259.511390][ T6048] loop0: rw=0, sector=87088, nr_sectors = 8 limit=40427 [ 259.511423][ T6073] syz.1.18: attempt to access beyond end of device [ 259.511423][ T6073] loop1: rw=0, sector=88064, nr_sectors = 8 limit=40427 [ 262.378212][ T5154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 262.381751][ T5154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 262.382666][ T5154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 262.384061][ T5154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 262.384777][ T5154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 263.143870][ T6109] chnl_net:caif_netlink_parms(): no params data found [ 263.924998][ T6109] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.940774][ T6109] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.940999][ T6109] bridge_slave_0: entered allmulticast mode [ 263.943689][ T6109] bridge_slave_0: entered promiscuous mode [ 263.974497][ T6109] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.987900][ T6109] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.988133][ T6109] bridge_slave_1: entered allmulticast mode [ 264.004200][ T6109] bridge_slave_1: entered promiscuous mode [ 264.426389][ T6109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.444612][ T6109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.490888][ T5926] Bluetooth: hci3: command tx timeout [ 264.522485][ T6073] bio_check_eod: 32104 callbacks suppressed [ 264.522504][ T6073] syz.1.18: attempt to access beyond end of device [ 264.522504][ T6073] loop1: rw=0, sector=88992, nr_sectors = 8 limit=40427 [ 264.522647][ T6073] syz.1.18: attempt to access beyond end of device [ 264.522647][ T6073] loop1: rw=0, sector=89000, nr_sectors = 8 limit=40427 [ 264.522778][ T6073] syz.1.18: attempt to access beyond end of device [ 264.522778][ T6073] loop1: rw=0, sector=89008, nr_sectors = 8 limit=40427 [ 264.522907][ T6073] syz.1.18: attempt to access beyond end of device [ 264.522907][ T6073] loop1: rw=0, sector=89016, nr_sectors = 8 limit=40427 [ 264.523036][ T6073] syz.1.18: attempt to access beyond end of device [ 264.523036][ T6073] loop1: rw=0, sector=89024, nr_sectors = 8 limit=40427 [ 264.523166][ T6073] syz.1.18: attempt to access beyond end of device [ 264.523166][ T6073] loop1: rw=0, sector=89032, nr_sectors = 8 limit=40427 [ 264.523324][ T6073] syz.1.18: attempt to access beyond end of device [ 264.523324][ T6073] loop1: rw=0, sector=89040, nr_sectors = 8 limit=40427 [ 264.523455][ T6073] syz.1.18: attempt to access beyond end of device [ 264.523455][ T6073] loop1: rw=0, sector=89048, nr_sectors = 8 limit=40427 [ 264.523591][ T6073] syz.1.18: attempt to access beyond end of device [ 264.523591][ T6073] loop1: rw=0, sector=89056, nr_sectors = 8 limit=40427 [ 264.523721][ T6073] syz.1.18: attempt to access beyond end of device [ 264.523721][ T6073] loop1: rw=0, sector=89064, nr_sectors = 8 limit=40427 [ 265.032704][ T6109] team0: Port device team_slave_0 added [ 265.036281][ T6109] team0: Port device team_slave_1 added [ 265.583466][ T6109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.583482][ T6109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.583505][ T6109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.585809][ T6109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.585821][ T6109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.585843][ T6109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.188200][ T6109] hsr_slave_0: entered promiscuous mode [ 266.189479][ T6109] hsr_slave_1: entered promiscuous mode [ 266.190338][ T6109] debugfs: 'hsr0' already exists in 'hsr' [ 266.190360][ T6109] Cannot create hsr debugfs directory [ 266.570771][ T5926] Bluetooth: hci3: command tx timeout [ 267.666578][ T6109] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 267.732725][ T6109] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 267.814034][ T6109] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 267.898974][ T6109] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 268.475564][ T6109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.536842][ T6109] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.598738][ T4427] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.599079][ T4427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.647533][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.648226][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.650824][ T5926] Bluetooth: hci3: command tx timeout [ 269.531027][ T6048] bio_check_eod: 28463 callbacks suppressed [ 269.531047][ T6048] syz.0.17: attempt to access beyond end of device [ 269.531047][ T6048] loop0: rw=0, sector=88080, nr_sectors = 8 limit=40427 [ 269.531186][ T6048] syz.0.17: attempt to access beyond end of device [ 269.531186][ T6048] loop0: rw=0, sector=88088, nr_sectors = 8 limit=40427 [ 269.531309][ T6048] syz.0.17: attempt to access beyond end of device [ 269.531309][ T6048] loop0: rw=0, sector=88096, nr_sectors = 8 limit=40427 [ 269.531433][ T6048] syz.0.17: attempt to access beyond end of device [ 269.531433][ T6048] loop0: rw=0, sector=88104, nr_sectors = 8 limit=40427 [ 269.531556][ T6048] syz.0.17: attempt to access beyond end of device [ 269.531556][ T6048] loop0: rw=0, sector=88112, nr_sectors = 8 limit=40427 [ 269.531679][ T6048] syz.0.17: attempt to access beyond end of device [ 269.531679][ T6048] loop0: rw=0, sector=88120, nr_sectors = 8 limit=40427 [ 269.531802][ T6048] syz.0.17: attempt to access beyond end of device [ 269.531802][ T6048] loop0: rw=0, sector=88128, nr_sectors = 8 limit=40427 [ 269.532727][ T6048] syz.0.17: attempt to access beyond end of device [ 269.532727][ T6048] loop0: rw=0, sector=88136, nr_sectors = 8 limit=40427 [ 269.532843][ T6048] syz.0.17: attempt to access beyond end of device [ 269.532843][ T6048] loop0: rw=0, sector=88144, nr_sectors = 8 limit=40427 [ 269.532949][ T6048] syz.0.17: attempt to access beyond end of device [ 269.532949][ T6048] loop0: rw=0, sector=88152, nr_sectors = 8 limit=40427 [ 269.590176][ T6109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.900926][ T6109] veth0_vlan: entered promiscuous mode [ 269.953449][ T6109] veth1_vlan: entered promiscuous mode [ 270.131057][ T6109] veth0_macvtap: entered promiscuous mode [ 270.182792][ T6109] veth1_macvtap: entered promiscuous mode [ 270.307868][ T6109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.339541][ T6109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.427005][ T4427] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.432300][ T4427] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.458825][ T4427] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.529486][ T4427] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.730879][ T5926] Bluetooth: hci3: command tx timeout [ 271.081372][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.081392][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.180214][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.180236][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/26 14:36:56 executed programs: 5 [ 272.915150][ T6133] loop3: detected capacity change from 0 to 40427 [ 272.929034][ T6133] F2FS-fs: heap/no_heap options were deprecated [ 272.929213][ T6133] F2FS-fs: heap/no_heap options were deprecated [ 272.968402][ T6133] F2FS-fs (loop3): Image doesn't support compression [ 273.008927][ T6133] F2FS-fs (loop3): invalid crc value [ 273.167979][ T6133] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 273.211187][ T6133] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 274.540745][ T6048] bio_check_eod: 26487 callbacks suppressed [ 274.540764][ T6048] syz.0.17: attempt to access beyond end of device [ 274.540764][ T6048] loop0: rw=0, sector=86152, nr_sectors = 8 limit=40427 [ 274.540841][ T6073] syz.1.18: attempt to access beyond end of device [ 274.540841][ T6073] loop1: rw=0, sector=86424, nr_sectors = 8 limit=40427 [ 274.540911][ T6048] syz.0.17: attempt to access beyond end of device [ 274.540911][ T6048] loop0: rw=0, sector=86160, nr_sectors = 8 limit=40427 [ 274.540979][ T6073] syz.1.18: attempt to access beyond end of device [ 274.540979][ T6073] loop1: rw=0, sector=86432, nr_sectors = 8 limit=40427 [ 274.541040][ T6048] syz.0.17: attempt to access beyond end of device [ 274.541040][ T6048] loop0: rw=0, sector=86168, nr_sectors = 8 limit=40427 [ 274.541122][ T6073] syz.1.18: attempt to access beyond end of device [ 274.541122][ T6073] loop1: rw=0, sector=86440, nr_sectors = 8 limit=40427 [ 274.541170][ T6048] syz.0.17: attempt to access beyond end of device [ 274.541170][ T6048] loop0: rw=0, sector=86176, nr_sectors = 8 limit=40427 [ 274.541253][ T6073] syz.1.18: attempt to access beyond end of device [ 274.541253][ T6073] loop1: rw=0, sector=86448, nr_sectors = 8 limit=40427 [ 274.541301][ T6048] syz.0.17: attempt to access beyond end of device [ 274.541301][ T6048] loop0: rw=0, sector=86184, nr_sectors = 8 limit=40427 [ 274.541384][ T6073] syz.1.18: attempt to access beyond end of device [ 274.541384][ T6073] loop1: rw=0, sector=86456, nr_sectors = 8 limit=40427 [ 279.569495][ T6073] bio_check_eod: 27854 callbacks suppressed [ 279.569515][ T6073] syz.1.18: attempt to access beyond end of device [ 279.569515][ T6073] loop1: rw=0, sector=86544, nr_sectors = 8 limit=40427 [ 279.569661][ T6073] syz.1.18: attempt to access beyond end of device [ 279.569661][ T6073] loop1: rw=0, sector=86552, nr_sectors = 8 limit=40427 [ 279.569794][ T6073] syz.1.18: attempt to access beyond end of device [ 279.569794][ T6073] loop1: rw=0, sector=86560, nr_sectors = 8 limit=40427 [ 279.569926][ T6073] syz.1.18: attempt to access beyond end of device [ 279.569926][ T6073] loop1: rw=0, sector=86568, nr_sectors = 8 limit=40427 [ 279.570057][ T6073] syz.1.18: attempt to access beyond end of device [ 279.570057][ T6073] loop1: rw=0, sector=86576, nr_sectors = 8 limit=40427 [ 279.570188][ T6073] syz.1.18: attempt to access beyond end of device [ 279.570188][ T6073] loop1: rw=0, sector=86584, nr_sectors = 8 limit=40427 [ 279.570319][ T6073] syz.1.18: attempt to access beyond end of device [ 279.570319][ T6073] loop1: rw=0, sector=86592, nr_sectors = 8 limit=40427 [ 279.570456][ T6073] syz.1.18: attempt to access beyond end of device [ 279.570456][ T6073] loop1: rw=0, sector=86600, nr_sectors = 8 limit=40427 [ 279.570586][ T6073] syz.1.18: attempt to access beyond end of device [ 279.570586][ T6073] loop1: rw=0, sector=86608, nr_sectors = 8 limit=40427 [ 279.596637][ T6073] syz.1.18: attempt to access beyond end of device [ 279.596637][ T6073] loop1: rw=0, sector=86616, nr_sectors = 8 limit=40427 [ 280.407574][ T6098] F2FS-fs (loop2): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 284.574848][ T6048] bio_check_eod: 38685 callbacks suppressed [ 284.574868][ T6048] syz.0.17: attempt to access beyond end of device [ 284.574868][ T6048] loop0: rw=524288, sector=89024, nr_sectors = 8 limit=40427 [ 284.575043][ T6048] syz.0.17: attempt to access beyond end of device [ 284.575043][ T6048] loop0: rw=524288, sector=89032, nr_sectors = 8 limit=40427 [ 284.575175][ T6048] syz.0.17: attempt to access beyond end of device [ 284.575175][ T6048] loop0: rw=524288, sector=89040, nr_sectors = 8 limit=40427 [ 284.575303][ T6048] syz.0.17: attempt to access beyond end of device [ 284.575303][ T6048] loop0: rw=524288, sector=89048, nr_sectors = 8 limit=40427 [ 284.575432][ T6048] syz.0.17: attempt to access beyond end of device [ 284.575432][ T6048] loop0: rw=524288, sector=89056, nr_sectors = 8 limit=40427 [ 284.575561][ T6048] syz.0.17: attempt to access beyond end of device [ 284.575561][ T6048] loop0: rw=524288, sector=89064, nr_sectors = 8 limit=40427 [ 284.575690][ T6048] syz.0.17: attempt to access beyond end of device [ 284.575690][ T6048] loop0: rw=524288, sector=89072, nr_sectors = 8 limit=40427 [ 284.575824][ T6048] syz.0.17: attempt to access beyond end of device [ 284.575824][ T6048] loop0: rw=524288, sector=89080, nr_sectors = 8 limit=40427 [ 284.575953][ T6048] syz.0.17: attempt to access beyond end of device [ 284.575953][ T6048] loop0: rw=524288, sector=89088, nr_sectors = 8 limit=40427 [ 284.576073][ T6048] syz.0.17: attempt to access beyond end of device [ 284.576073][ T6048] loop0: rw=524288, sector=89096, nr_sectors = 8 limit=40427 [ 286.845199][ T5154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 286.850270][ T5154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 286.852011][ T5154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 286.877598][ T5154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 286.879540][ T5154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 288.030214][ T6138] chnl_net:caif_netlink_parms(): no params data found [ 288.970836][ T5154] Bluetooth: hci4: command tx timeout [ 289.008154][ T6138] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.050944][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.051257][ T6138] bridge_slave_0: entered allmulticast mode [ 289.054088][ T6138] bridge_slave_0: entered promiscuous mode [ 289.062889][ T6138] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.063036][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.063233][ T6138] bridge_slave_1: entered allmulticast mode [ 289.094864][ T6138] bridge_slave_1: entered promiscuous mode [ 289.586925][ T6098] bio_check_eod: 35867 callbacks suppressed [ 289.586944][ T6098] syz.2.19: attempt to access beyond end of device [ 289.586944][ T6098] loop2: rw=0, sector=86608, nr_sectors = 8 limit=40427 [ 289.587081][ T6098] syz.2.19: attempt to access beyond end of device [ 289.587081][ T6098] loop2: rw=0, sector=86616, nr_sectors = 8 limit=40427 [ 289.587128][ T6073] syz.1.18: attempt to access beyond end of device [ 289.587128][ T6073] loop1: rw=524288, sector=86792, nr_sectors = 8 limit=40427 [ 289.587234][ T6098] syz.2.19: attempt to access beyond end of device [ 289.587234][ T6098] loop2: rw=0, sector=86624, nr_sectors = 8 limit=40427 [ 289.587288][ T6073] syz.1.18: attempt to access beyond end of device [ 289.587288][ T6073] loop1: rw=524288, sector=86800, nr_sectors = 8 limit=40427 [ 289.587387][ T6098] syz.2.19: attempt to access beyond end of device [ 289.587387][ T6098] loop2: rw=0, sector=86632, nr_sectors = 8 limit=40427 [ 289.587417][ T6073] syz.1.18: attempt to access beyond end of device [ 289.587417][ T6073] loop1: rw=524288, sector=86808, nr_sectors = 8 limit=40427 [ 289.587530][ T6098] syz.2.19: attempt to access beyond end of device [ 289.587530][ T6098] loop2: rw=0, sector=86640, nr_sectors = 8 limit=40427 [ 289.587543][ T6073] syz.1.18: attempt to access beyond end of device [ 289.587543][ T6073] loop1: rw=524288, sector=86816, nr_sectors = 8 limit=40427 [ 289.587657][ T6098] syz.2.19: attempt to access beyond end of device [ 289.587657][ T6098] loop2: rw=0, sector=86648, nr_sectors = 8 limit=40427 [ 289.754225][ T6138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.758579][ T6138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.618719][ T6138] team0: Port device team_slave_0 added [ 290.655076][ T6138] team0: Port device team_slave_1 added [ 291.050767][ T5154] Bluetooth: hci4: command tx timeout [ 291.193658][ T6138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.193674][ T6138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.193696][ T6138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.195997][ T6138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.196008][ T6138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.196030][ T6138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.031191][ T6138] hsr_slave_0: entered promiscuous mode [ 292.032586][ T6138] hsr_slave_1: entered promiscuous mode [ 292.033488][ T6138] debugfs: 'hsr0' already exists in 'hsr' [ 292.033516][ T6138] Cannot create hsr debugfs directory [ 293.150814][ T5154] Bluetooth: hci4: command tx timeout [ 293.610305][ T6138] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 293.689556][ T6138] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 293.830757][ T6138] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 293.906838][ T6138] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 294.592507][ T6098] bio_check_eod: 36612 callbacks suppressed [ 294.592527][ T6098] syz.2.19: attempt to access beyond end of device [ 294.592527][ T6098] loop2: rw=0, sector=88816, nr_sectors = 8 limit=40427 [ 294.592683][ T6098] syz.2.19: attempt to access beyond end of device [ 294.592683][ T6098] loop2: rw=0, sector=88824, nr_sectors = 8 limit=40427 [ 294.592815][ T6098] syz.2.19: attempt to access beyond end of device [ 294.592815][ T6098] loop2: rw=0, sector=88832, nr_sectors = 8 limit=40427 [ 294.592946][ T6098] syz.2.19: attempt to access beyond end of device [ 294.592946][ T6098] loop2: rw=0, sector=88840, nr_sectors = 8 limit=40427 [ 294.593075][ T6098] syz.2.19: attempt to access beyond end of device [ 294.593075][ T6098] loop2: rw=0, sector=88848, nr_sectors = 8 limit=40427 [ 294.593206][ T6098] syz.2.19: attempt to access beyond end of device [ 294.593206][ T6098] loop2: rw=0, sector=88856, nr_sectors = 8 limit=40427 [ 294.593346][ T6098] syz.2.19: attempt to access beyond end of device [ 294.593346][ T6098] loop2: rw=0, sector=88864, nr_sectors = 8 limit=40427 [ 294.593472][ T6098] syz.2.19: attempt to access beyond end of device [ 294.593472][ T6098] loop2: rw=0, sector=88872, nr_sectors = 8 limit=40427 [ 294.593649][ T6098] syz.2.19: attempt to access beyond end of device [ 294.593649][ T6098] loop2: rw=0, sector=88880, nr_sectors = 8 limit=40427 [ 294.593799][ T6098] syz.2.19: attempt to access beyond end of device [ 294.593799][ T6098] loop2: rw=0, sector=88888, nr_sectors = 8 limit=40427 [ 294.595621][ T6138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.734096][ T6138] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.794183][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.794466][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.817457][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.820953][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.217614][ T5154] Bluetooth: hci4: command tx timeout [ 295.916255][ T6138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.171110][ T6138] veth0_vlan: entered promiscuous mode [ 297.204386][ T6138] veth1_vlan: entered promiscuous mode [ 297.254770][ T6138] veth0_macvtap: entered promiscuous mode [ 297.269949][ T6138] veth1_macvtap: entered promiscuous mode [ 297.306921][ T6138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.320269][ T6138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.357649][ T4427] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.357947][ T4427] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.358197][ T4427] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.358436][ T4427] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.062658][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.062677][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.150101][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.150122][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/26 14:37:23 executed programs: 6 [ 299.600806][ T6073] bio_check_eod: 31482 callbacks suppressed [ 299.600826][ T6073] syz.1.18: attempt to access beyond end of device [ 299.600826][ T6073] loop1: rw=524288, sector=87432, nr_sectors = 8 limit=40427 [ 299.600995][ T6073] syz.1.18: attempt to access beyond end of device [ 299.600995][ T6073] loop1: rw=524288, sector=87440, nr_sectors = 8 limit=40427 [ 299.601094][ T6073] syz.1.18: attempt to access beyond end of device [ 299.601094][ T6073] loop1: rw=524288, sector=87448, nr_sectors = 8 limit=40427 [ 299.601223][ T6073] syz.1.18: attempt to access beyond end of device [ 299.601223][ T6073] loop1: rw=524288, sector=87456, nr_sectors = 8 limit=40427 [ 299.601349][ T6073] syz.1.18: attempt to access beyond end of device [ 299.601349][ T6073] loop1: rw=524288, sector=87464, nr_sectors = 8 limit=40427 [ 299.601475][ T6073] syz.1.18: attempt to access beyond end of device [ 299.601475][ T6073] loop1: rw=524288, sector=87472, nr_sectors = 8 limit=40427 [ 299.601600][ T6073] syz.1.18: attempt to access beyond end of device [ 299.601600][ T6073] loop1: rw=524288, sector=87480, nr_sectors = 8 limit=40427 [ 299.601724][ T6073] syz.1.18: attempt to access beyond end of device [ 299.601724][ T6073] loop1: rw=524288, sector=87488, nr_sectors = 8 limit=40427 [ 299.601848][ T6073] syz.1.18: attempt to access beyond end of device [ 299.601848][ T6073] loop1: rw=524288, sector=87496, nr_sectors = 8 limit=40427 [ 299.601979][ T6073] syz.1.18: attempt to access beyond end of device [ 299.601979][ T6073] loop1: rw=524288, sector=87504, nr_sectors = 8 limit=40427 [ 300.286527][ T6167] loop4: detected capacity change from 0 to 40427 [ 300.288255][ T6167] F2FS-fs: heap/no_heap options were deprecated [ 300.300983][ T6167] F2FS-fs: heap/no_heap options were deprecated [ 300.311021][ T6167] F2FS-fs (loop4): Image doesn't support compression [ 300.352700][ T6167] F2FS-fs (loop4): invalid crc value [ 300.880042][ T6167] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 300.920853][ T6167] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 304.613147][ T6073] bio_check_eod: 31617 callbacks suppressed [ 304.613166][ T6073] syz.1.18: attempt to access beyond end of device [ 304.613166][ T6073] loop1: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 304.613299][ T6073] syz.1.18: attempt to access beyond end of device [ 304.613299][ T6073] loop1: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 304.613425][ T6073] syz.1.18: attempt to access beyond end of device [ 304.613425][ T6073] loop1: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 304.613551][ T6073] syz.1.18: attempt to access beyond end of device [ 304.613551][ T6073] loop1: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 304.613680][ T6073] syz.1.18: attempt to access beyond end of device [ 304.613680][ T6073] loop1: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 304.613834][ T6073] syz.1.18: attempt to access beyond end of device [ 304.613834][ T6073] loop1: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 304.613958][ T6073] syz.1.18: attempt to access beyond end of device [ 304.613958][ T6073] loop1: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 304.614082][ T6073] syz.1.18: attempt to access beyond end of device [ 304.614082][ T6073] loop1: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 304.614206][ T6073] syz.1.18: attempt to access beyond end of device [ 304.614206][ T6073] loop1: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 304.614330][ T6073] syz.1.18: attempt to access beyond end of device [ 304.614330][ T6073] loop1: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 309.626937][ T6048] bio_check_eod: 33195 callbacks suppressed [ 309.626958][ T6048] syz.0.17: attempt to access beyond end of device [ 309.626958][ T6048] loop0: rw=524288, sector=87976, nr_sectors = 8 limit=40427 [ 309.627124][ T6048] syz.0.17: attempt to access beyond end of device [ 309.627124][ T6048] loop0: rw=524288, sector=87984, nr_sectors = 8 limit=40427 [ 309.627278][ T6048] syz.0.17: attempt to access beyond end of device [ 309.627278][ T6048] loop0: rw=524288, sector=87992, nr_sectors = 8 limit=40427 [ 309.627405][ T6048] syz.0.17: attempt to access beyond end of device [ 309.627405][ T6048] loop0: rw=524288, sector=88000, nr_sectors = 8 limit=40427 [ 309.627529][ T6048] syz.0.17: attempt to access beyond end of device [ 309.627529][ T6048] loop0: rw=524288, sector=88008, nr_sectors = 8 limit=40427 [ 309.627654][ T6048] syz.0.17: attempt to access beyond end of device [ 309.627654][ T6048] loop0: rw=524288, sector=88016, nr_sectors = 8 limit=40427 [ 309.627778][ T6048] syz.0.17: attempt to access beyond end of device [ 309.627778][ T6048] loop0: rw=524288, sector=88024, nr_sectors = 8 limit=40427 [ 309.627902][ T6048] syz.0.17: attempt to access beyond end of device [ 309.627902][ T6048] loop0: rw=524288, sector=88032, nr_sectors = 8 limit=40427 [ 309.628032][ T6048] syz.0.17: attempt to access beyond end of device [ 309.628032][ T6048] loop0: rw=524288, sector=88040, nr_sectors = 8 limit=40427 [ 309.628157][ T6048] syz.0.17: attempt to access beyond end of device [ 309.628157][ T6048] loop0: rw=524288, sector=88048, nr_sectors = 8 limit=40427 [ 313.847336][ T5926] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 313.850108][ T5926] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 313.852590][ T5926] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 313.860826][ T5926] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 313.880975][ T5926] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 314.641233][ T6048] bio_check_eod: 29777 callbacks suppressed [ 314.641251][ T6048] syz.0.17: attempt to access beyond end of device [ 314.641251][ T6048] loop0: rw=0, sector=87520, nr_sectors = 8 limit=40427 [ 314.641385][ T6048] syz.0.17: attempt to access beyond end of device [ 314.641385][ T6048] loop0: rw=0, sector=87528, nr_sectors = 8 limit=40427 [ 314.641519][ T6048] syz.0.17: attempt to access beyond end of device [ 314.641519][ T6048] loop0: rw=0, sector=87536, nr_sectors = 8 limit=40427 [ 314.641699][ T6048] syz.0.17: attempt to access beyond end of device [ 314.641699][ T6048] loop0: rw=0, sector=87544, nr_sectors = 8 limit=40427 [ 314.641878][ T6048] syz.0.17: attempt to access beyond end of device [ 314.641878][ T6048] loop0: rw=0, sector=87552, nr_sectors = 8 limit=40427 [ 314.642040][ T6048] syz.0.17: attempt to access beyond end of device [ 314.642040][ T6048] loop0: rw=0, sector=87560, nr_sectors = 8 limit=40427 [ 314.642176][ T6048] syz.0.17: attempt to access beyond end of device [ 314.642176][ T6048] loop0: rw=0, sector=87568, nr_sectors = 8 limit=40427 [ 314.642310][ T6048] syz.0.17: attempt to access beyond end of device [ 314.642310][ T6048] loop0: rw=0, sector=87576, nr_sectors = 8 limit=40427 [ 314.642442][ T6048] syz.0.17: attempt to access beyond end of device [ 314.642442][ T6048] loop0: rw=0, sector=87584, nr_sectors = 8 limit=40427 [ 314.642579][ T6048] syz.0.17: attempt to access beyond end of device [ 314.642579][ T6048] loop0: rw=0, sector=87592, nr_sectors = 8 limit=40427 [ 314.839275][ T6174] chnl_net:caif_netlink_parms(): no params data found [ 315.802804][ T6174] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.810952][ T6174] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.811189][ T6174] bridge_slave_0: entered allmulticast mode [ 315.814086][ T6174] bridge_slave_0: entered promiscuous mode [ 315.862122][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.862265][ T6174] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.862521][ T6174] bridge_slave_1: entered allmulticast mode [ 315.900755][ T6174] bridge_slave_1: entered promiscuous mode [ 315.930814][ T5926] Bluetooth: hci5: command tx timeout [ 316.546549][ T6174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.574991][ T6174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.140118][ T6133] F2FS-fs (loop3): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 317.351686][ T6174] team0: Port device team_slave_0 added [ 317.383281][ T6174] team0: Port device team_slave_1 added [ 317.700163][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.700252][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.007760][ T6174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.007776][ T6174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.007800][ T6174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.010193][ T6174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.010205][ T6174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.010228][ T6174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.012076][ T5154] Bluetooth: hci5: command tx timeout [ 318.945420][ T6174] hsr_slave_0: entered promiscuous mode [ 318.946808][ T6174] hsr_slave_1: entered promiscuous mode [ 318.947713][ T6174] debugfs: 'hsr0' already exists in 'hsr' [ 318.947736][ T6174] Cannot create hsr debugfs directory [ 319.653196][ T6133] bio_check_eod: 34353 callbacks suppressed [ 319.653215][ T6133] syz.3.20: attempt to access beyond end of device [ 319.653215][ T6133] loop3: rw=524288, sector=87912, nr_sectors = 8 limit=40427 [ 319.654055][ T6133] syz.3.20: attempt to access beyond end of device [ 319.654055][ T6133] loop3: rw=524288, sector=87920, nr_sectors = 8 limit=40427 [ 319.654201][ T6133] syz.3.20: attempt to access beyond end of device [ 319.654201][ T6133] loop3: rw=524288, sector=87928, nr_sectors = 8 limit=40427 [ 319.654324][ T6133] syz.3.20: attempt to access beyond end of device [ 319.654324][ T6133] loop3: rw=524288, sector=87936, nr_sectors = 8 limit=40427 [ 319.654443][ T6133] syz.3.20: attempt to access beyond end of device [ 319.654443][ T6133] loop3: rw=524288, sector=87944, nr_sectors = 8 limit=40427 [ 319.654566][ T6133] syz.3.20: attempt to access beyond end of device [ 319.654566][ T6133] loop3: rw=524288, sector=87952, nr_sectors = 8 limit=40427 [ 319.654687][ T6133] syz.3.20: attempt to access beyond end of device [ 319.654687][ T6133] loop3: rw=524288, sector=87960, nr_sectors = 8 limit=40427 [ 319.654810][ T6133] syz.3.20: attempt to access beyond end of device [ 319.654810][ T6133] loop3: rw=524288, sector=87968, nr_sectors = 8 limit=40427 [ 319.654933][ T6133] syz.3.20: attempt to access beyond end of device [ 319.654933][ T6133] loop3: rw=524288, sector=87976, nr_sectors = 8 limit=40427 [ 319.655054][ T6133] syz.3.20: attempt to access beyond end of device [ 319.655054][ T6133] loop3: rw=524288, sector=87984, nr_sectors = 8 limit=40427 [ 319.773118][ T5154] Bluetooth: hci0: command 0x0406 tx timeout [ 320.090931][ T5154] Bluetooth: hci5: command tx timeout [ 321.563926][ T6174] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 321.728583][ T6174] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 321.954814][ T6174] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 322.090077][ T6174] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 322.180790][ T5926] Bluetooth: hci5: command tx timeout [ 322.863132][ T6174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.984575][ T6174] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.027172][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.027907][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.123896][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.130896][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.457338][ T6174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.660872][ T6048] bio_check_eod: 36107 callbacks suppressed [ 324.660891][ T6048] syz.0.17: attempt to access beyond end of device [ 324.660891][ T6048] loop0: rw=524288, sector=88656, nr_sectors = 8 limit=40427 [ 324.660938][ T6133] syz.3.20: attempt to access beyond end of device [ 324.660938][ T6133] loop3: rw=0, sector=86120, nr_sectors = 8 limit=40427 [ 324.661027][ T6048] syz.0.17: attempt to access beyond end of device [ 324.661027][ T6048] loop0: rw=524288, sector=88664, nr_sectors = 8 limit=40427 [ 324.661076][ T6133] syz.3.20: attempt to access beyond end of device [ 324.661076][ T6133] loop3: rw=0, sector=86128, nr_sectors = 8 limit=40427 [ 324.661163][ T6048] syz.0.17: attempt to access beyond end of device [ 324.661163][ T6048] loop0: rw=524288, sector=88672, nr_sectors = 8 limit=40427 [ 324.661206][ T6133] syz.3.20: attempt to access beyond end of device [ 324.661206][ T6133] loop3: rw=0, sector=86136, nr_sectors = 8 limit=40427 [ 324.661322][ T6048] syz.0.17: attempt to access beyond end of device [ 324.661322][ T6048] loop0: rw=524288, sector=88680, nr_sectors = 8 limit=40427 [ 324.661335][ T6133] syz.3.20: attempt to access beyond end of device [ 324.661335][ T6133] loop3: rw=0, sector=86144, nr_sectors = 8 limit=40427 [ 324.661449][ T6048] syz.0.17: attempt to access beyond end of device [ 324.661449][ T6048] loop0: rw=524288, sector=88688, nr_sectors = 8 limit=40427 [ 324.661466][ T6133] syz.3.20: attempt to access beyond end of device [ 324.661466][ T6133] loop3: rw=0, sector=86152, nr_sectors = 8 limit=40427 [ 326.150508][ T6174] veth0_vlan: entered promiscuous mode [ 326.291026][ T6174] veth1_vlan: entered promiscuous mode [ 326.414410][ T6174] veth0_macvtap: entered promiscuous mode [ 326.435683][ T6174] veth1_macvtap: entered promiscuous mode [ 326.473109][ T6174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.494749][ T6174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.566113][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.566408][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.574287][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.630769][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.469982][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.470002][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.544760][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.544781][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/26 14:37:53 executed programs: 7 [ 329.670655][ T6133] bio_check_eod: 34959 callbacks suppressed [ 329.670674][ T6133] syz.3.20: attempt to access beyond end of device [ 329.670674][ T6133] loop3: rw=524288, sector=87784, nr_sectors = 8 limit=40427 [ 329.670672][ T6048] syz.0.17: attempt to access beyond end of device [ 329.670672][ T6048] loop0: rw=0, sector=89296, nr_sectors = 8 limit=40427 [ 329.670811][ T6133] syz.3.20: attempt to access beyond end of device [ 329.670811][ T6133] loop3: rw=524288, sector=87792, nr_sectors = 8 limit=40427 [ 329.670825][ T6048] syz.0.17: attempt to access beyond end of device [ 329.670825][ T6048] loop0: rw=0, sector=89304, nr_sectors = 8 limit=40427 [ 329.670957][ T6048] syz.0.17: attempt to access beyond end of device [ 329.670957][ T6048] loop0: rw=0, sector=89312, nr_sectors = 8 limit=40427 [ 329.670968][ T6133] syz.3.20: attempt to access beyond end of device [ 329.670968][ T6133] loop3: rw=524288, sector=87800, nr_sectors = 8 limit=40427 [ 329.671088][ T6048] syz.0.17: attempt to access beyond end of device [ 329.671088][ T6048] loop0: rw=0, sector=89320, nr_sectors = 8 limit=40427 [ 329.671096][ T6133] syz.3.20: attempt to access beyond end of device [ 329.671096][ T6133] loop3: rw=524288, sector=87808, nr_sectors = 8 limit=40427 [ 329.671221][ T6133] syz.3.20: attempt to access beyond end of device [ 329.671221][ T6133] loop3: rw=524288, sector=87816, nr_sectors = 8 limit=40427 [ 329.671249][ T6048] syz.0.17: attempt to access beyond end of device [ 329.671249][ T6048] loop0: rw=0, sector=89328, nr_sectors = 8 limit=40427 [ 330.252824][ T6207] loop5: detected capacity change from 0 to 40427 [ 330.264024][ T6207] F2FS-fs: heap/no_heap options were deprecated [ 330.264201][ T6207] F2FS-fs: heap/no_heap options were deprecated [ 330.332515][ T6207] F2FS-fs (loop5): Image doesn't support compression [ 330.388585][ T6207] F2FS-fs (loop5): invalid crc value [ 330.998240][ T6207] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 331.070799][ T6207] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 334.689426][ T6073] bio_check_eod: 35505 callbacks suppressed [ 334.689447][ T6073] syz.1.18: attempt to access beyond end of device [ 334.689447][ T6073] loop1: rw=524288, sector=86504, nr_sectors = 8 limit=40427 [ 334.689594][ T6073] syz.1.18: attempt to access beyond end of device [ 334.689594][ T6073] loop1: rw=524288, sector=86512, nr_sectors = 8 limit=40427 [ 334.689725][ T6073] syz.1.18: attempt to access beyond end of device [ 334.689725][ T6073] loop1: rw=524288, sector=86520, nr_sectors = 8 limit=40427 [ 334.689855][ T6073] syz.1.18: attempt to access beyond end of device [ 334.689855][ T6073] loop1: rw=524288, sector=86528, nr_sectors = 8 limit=40427 [ 334.689983][ T6073] syz.1.18: attempt to access beyond end of device [ 334.689983][ T6073] loop1: rw=524288, sector=86536, nr_sectors = 8 limit=40427 [ 334.690111][ T6073] syz.1.18: attempt to access beyond end of device [ 334.690111][ T6073] loop1: rw=524288, sector=86544, nr_sectors = 8 limit=40427 [ 334.690239][ T6073] syz.1.18: attempt to access beyond end of device [ 334.690239][ T6073] loop1: rw=524288, sector=86552, nr_sectors = 8 limit=40427 [ 334.690372][ T6073] syz.1.18: attempt to access beyond end of device [ 334.690372][ T6073] loop1: rw=524288, sector=86560, nr_sectors = 8 limit=40427 [ 334.690501][ T6073] syz.1.18: attempt to access beyond end of device [ 334.690501][ T6073] loop1: rw=524288, sector=86568, nr_sectors = 8 limit=40427 [ 334.700744][ T6098] syz.2.19: attempt to access beyond end of device [ 334.700744][ T6098] loop2: rw=524288, sector=88536, nr_sectors = 8 limit=40427 [ 339.696451][ T6048] bio_check_eod: 36681 callbacks suppressed [ 339.696470][ T6048] syz.0.17: attempt to access beyond end of device [ 339.696470][ T6048] loop0: rw=524288, sector=87968, nr_sectors = 8 limit=40427 [ 339.696508][ T6073] syz.1.18: attempt to access beyond end of device [ 339.696508][ T6073] loop1: rw=0, sector=86800, nr_sectors = 8 limit=40427 [ 339.696617][ T6048] syz.0.17: attempt to access beyond end of device [ 339.696617][ T6048] loop0: rw=524288, sector=87976, nr_sectors = 8 limit=40427 [ 339.696644][ T6073] syz.1.18: attempt to access beyond end of device [ 339.696644][ T6073] loop1: rw=0, sector=86808, nr_sectors = 8 limit=40427 [ 339.696745][ T6048] syz.0.17: attempt to access beyond end of device [ 339.696745][ T6048] loop0: rw=524288, sector=87984, nr_sectors = 8 limit=40427 [ 339.696775][ T6073] syz.1.18: attempt to access beyond end of device [ 339.696775][ T6073] loop1: rw=0, sector=86816, nr_sectors = 8 limit=40427 [ 339.696911][ T6073] syz.1.18: attempt to access beyond end of device [ 339.696911][ T6073] loop1: rw=0, sector=86824, nr_sectors = 8 limit=40427 [ 339.696914][ T6048] syz.0.17: attempt to access beyond end of device [ 339.696914][ T6048] loop0: rw=524288, sector=87992, nr_sectors = 8 limit=40427 [ 339.697041][ T6048] syz.0.17: attempt to access beyond end of device [ 339.697041][ T6048] loop0: rw=524288, sector=88000, nr_sectors = 8 limit=40427 [ 339.697050][ T6073] syz.1.18: attempt to access beyond end of device [ 339.697050][ T6073] loop1: rw=0, sector=86832, nr_sectors = 8 limit=40427 [ 343.665326][ T6215] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 343.679356][ T6215] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 343.688583][ T6215] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 343.689697][ T6215] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 343.690414][ T6215] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 344.720910][ T6048] bio_check_eod: 34617 callbacks suppressed [ 344.720930][ T6048] syz.0.17: attempt to access beyond end of device [ 344.720930][ T6048] loop0: rw=524288, sector=87800, nr_sectors = 8 limit=40427 [ 344.721068][ T6048] syz.0.17: attempt to access beyond end of device [ 344.721068][ T6048] loop0: rw=524288, sector=87808, nr_sectors = 8 limit=40427 [ 344.721194][ T6048] syz.0.17: attempt to access beyond end of device [ 344.721194][ T6048] loop0: rw=524288, sector=87816, nr_sectors = 8 limit=40427 [ 344.721320][ T6048] syz.0.17: attempt to access beyond end of device [ 344.721320][ T6048] loop0: rw=524288, sector=87824, nr_sectors = 8 limit=40427 [ 344.721449][ T6048] syz.0.17: attempt to access beyond end of device [ 344.721449][ T6048] loop0: rw=524288, sector=87832, nr_sectors = 8 limit=40427 [ 344.721575][ T6048] syz.0.17: attempt to access beyond end of device [ 344.721575][ T6048] loop0: rw=524288, sector=87840, nr_sectors = 8 limit=40427 [ 344.721706][ T6048] syz.0.17: attempt to access beyond end of device [ 344.721706][ T6048] loop0: rw=524288, sector=87848, nr_sectors = 8 limit=40427 [ 344.721831][ T6048] syz.0.17: attempt to access beyond end of device [ 344.721831][ T6048] loop0: rw=524288, sector=87856, nr_sectors = 8 limit=40427 [ 344.721971][ T6048] syz.0.17: attempt to access beyond end of device [ 344.721971][ T6048] loop0: rw=524288, sector=87864, nr_sectors = 8 limit=40427 [ 344.722097][ T6048] syz.0.17: attempt to access beyond end of device [ 344.722097][ T6048] loop0: rw=524288, sector=87872, nr_sectors = 8 limit=40427 [ 345.050050][ T6214] chnl_net:caif_netlink_parms(): no params data found [ 345.375502][ T5154] Bluetooth: hci1: command 0x0406 tx timeout [ 345.880679][ T5926] Bluetooth: hci6: command tx timeout [ 346.736201][ T6214] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.736345][ T6214] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.736559][ T6214] bridge_slave_0: entered allmulticast mode [ 346.813991][ T6214] bridge_slave_0: entered promiscuous mode [ 346.819600][ T6214] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.819814][ T6214] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.820044][ T6214] bridge_slave_1: entered allmulticast mode [ 346.857598][ T6214] bridge_slave_1: entered promiscuous mode [ 347.624368][ T6214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.628811][ T6214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.930789][ T5926] Bluetooth: hci6: command tx timeout [ 348.433265][ T6214] team0: Port device team_slave_0 added [ 348.442655][ T6214] team0: Port device team_slave_1 added [ 349.656102][ T6214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.656118][ T6214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.656141][ T6214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.658564][ T6214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.658576][ T6214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.658600][ T6214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.740132][ T6073] bio_check_eod: 33272 callbacks suppressed [ 349.740151][ T6073] syz.1.18: attempt to access beyond end of device [ 349.740151][ T6073] loop1: rw=0, sector=87912, nr_sectors = 8 limit=40427 [ 349.740289][ T6073] syz.1.18: attempt to access beyond end of device [ 349.740289][ T6073] loop1: rw=0, sector=87920, nr_sectors = 8 limit=40427 [ 349.740422][ T6073] syz.1.18: attempt to access beyond end of device [ 349.740422][ T6073] loop1: rw=0, sector=87928, nr_sectors = 8 limit=40427 [ 349.740544][ T6073] syz.1.18: attempt to access beyond end of device [ 349.740544][ T6073] loop1: rw=0, sector=87936, nr_sectors = 8 limit=40427 [ 349.740903][ T6073] syz.1.18: attempt to access beyond end of device [ 349.740903][ T6073] loop1: rw=0, sector=87944, nr_sectors = 8 limit=40427 [ 349.741031][ T6073] syz.1.18: attempt to access beyond end of device [ 349.741031][ T6073] loop1: rw=0, sector=87952, nr_sectors = 8 limit=40427 [ 349.741153][ T6073] syz.1.18: attempt to access beyond end of device [ 349.741153][ T6073] loop1: rw=0, sector=87960, nr_sectors = 8 limit=40427 [ 349.741276][ T6073] syz.1.18: attempt to access beyond end of device [ 349.741276][ T6073] loop1: rw=0, sector=87968, nr_sectors = 8 limit=40427 [ 349.741407][ T6073] syz.1.18: attempt to access beyond end of device [ 349.741407][ T6073] loop1: rw=0, sector=87976, nr_sectors = 8 limit=40427 [ 349.741537][ T6073] syz.1.18: attempt to access beyond end of device [ 349.741537][ T6073] loop1: rw=0, sector=87984, nr_sectors = 8 limit=40427 [ 350.014706][ T5926] Bluetooth: hci6: command tx timeout [ 350.918680][ T6214] hsr_slave_0: entered promiscuous mode [ 350.951445][ T6214] hsr_slave_1: entered promiscuous mode [ 350.972809][ T6214] debugfs: 'hsr0' already exists in 'hsr' [ 350.972837][ T6214] Cannot create hsr debugfs directory [ 352.090743][ T5926] Bluetooth: hci6: command tx timeout [ 353.932534][ T6214] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 354.200982][ T6214] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 354.358932][ T6214] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 354.651136][ T6167] F2FS-fs (loop4): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 354.701508][ T6214] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 354.744620][ T6073] bio_check_eod: 34248 callbacks suppressed [ 354.744641][ T6073] syz.1.18: attempt to access beyond end of device [ 354.744641][ T6073] loop1: rw=524288, sector=86192, nr_sectors = 8 limit=40427 [ 354.744799][ T6073] syz.1.18: attempt to access beyond end of device [ 354.744799][ T6073] loop1: rw=524288, sector=86200, nr_sectors = 8 limit=40427 [ 354.744935][ T6073] syz.1.18: attempt to access beyond end of device [ 354.744935][ T6073] loop1: rw=524288, sector=86208, nr_sectors = 8 limit=40427 [ 354.745064][ T6073] syz.1.18: attempt to access beyond end of device [ 354.745064][ T6073] loop1: rw=524288, sector=86216, nr_sectors = 8 limit=40427 [ 354.745200][ T6073] syz.1.18: attempt to access beyond end of device [ 354.745200][ T6073] loop1: rw=524288, sector=86224, nr_sectors = 8 limit=40427 [ 354.745329][ T6073] syz.1.18: attempt to access beyond end of device [ 354.745329][ T6073] loop1: rw=524288, sector=86232, nr_sectors = 8 limit=40427 [ 354.745456][ T6073] syz.1.18: attempt to access beyond end of device [ 354.745456][ T6073] loop1: rw=524288, sector=86240, nr_sectors = 8 limit=40427 [ 354.745584][ T6073] syz.1.18: attempt to access beyond end of device [ 354.745584][ T6073] loop1: rw=524288, sector=86248, nr_sectors = 8 limit=40427 [ 354.745711][ T6073] syz.1.18: attempt to access beyond end of device [ 354.745711][ T6073] loop1: rw=524288, sector=86256, nr_sectors = 8 limit=40427 [ 354.745838][ T6073] syz.1.18: attempt to access beyond end of device [ 354.745838][ T6073] loop1: rw=524288, sector=86264, nr_sectors = 8 limit=40427 [ 355.783169][ T6214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.993374][ T6214] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.053201][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.060032][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.075164][ T4427] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.080846][ T4427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.745161][ T6214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.601042][ T6214] veth0_vlan: entered promiscuous mode [ 359.664428][ T6214] veth1_vlan: entered promiscuous mode [ 359.751178][ T6048] bio_check_eod: 38009 callbacks suppressed [ 359.751196][ T6048] syz.0.17: attempt to access beyond end of device [ 359.751196][ T6048] loop0: rw=524288, sector=87872, nr_sectors = 8 limit=40427 [ 359.751301][ T6048] syz.0.17: attempt to access beyond end of device [ 359.751301][ T6048] loop0: rw=524288, sector=87880, nr_sectors = 8 limit=40427 [ 359.751396][ T6048] syz.0.17: attempt to access beyond end of device [ 359.751396][ T6048] loop0: rw=524288, sector=87888, nr_sectors = 8 limit=40427 [ 359.751515][ T6048] syz.0.17: attempt to access beyond end of device [ 359.751515][ T6048] loop0: rw=524288, sector=87896, nr_sectors = 8 limit=40427 [ 359.751620][ T6048] syz.0.17: attempt to access beyond end of device [ 359.751620][ T6048] loop0: rw=524288, sector=87904, nr_sectors = 8 limit=40427 [ 359.751715][ T6048] syz.0.17: attempt to access beyond end of device [ 359.751715][ T6048] loop0: rw=524288, sector=87912, nr_sectors = 8 limit=40427 [ 359.751815][ T6048] syz.0.17: attempt to access beyond end of device [ 359.751815][ T6048] loop0: rw=524288, sector=87920, nr_sectors = 8 limit=40427 [ 359.751912][ T6048] syz.0.17: attempt to access beyond end of device [ 359.751912][ T6048] loop0: rw=524288, sector=87928, nr_sectors = 8 limit=40427 [ 359.752020][ T6048] syz.0.17: attempt to access beyond end of device [ 359.752020][ T6048] loop0: rw=524288, sector=87936, nr_sectors = 8 limit=40427 [ 359.752131][ T6048] syz.0.17: attempt to access beyond end of device [ 359.752131][ T6048] loop0: rw=524288, sector=87944, nr_sectors = 8 limit=40427 [ 360.113245][ T6214] veth0_macvtap: entered promiscuous mode [ 360.189046][ T6214] veth1_macvtap: entered promiscuous mode [ 360.327988][ T6214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.469037][ T6214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.548142][ T6231] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.548188][ T6231] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.548230][ T6231] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.548264][ T6231] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.152886][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.152907][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.726528][ T1364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.726547][ T1364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/26 14:38:28 executed programs: 8 [ 364.760797][ T6133] bio_check_eod: 39216 callbacks suppressed [ 364.760817][ T6133] syz.3.20: attempt to access beyond end of device [ 364.760817][ T6133] loop3: rw=524288, sector=87296, nr_sectors = 8 limit=40427 [ 364.760955][ T6133] syz.3.20: attempt to access beyond end of device [ 364.760955][ T6133] loop3: rw=524288, sector=87304, nr_sectors = 8 limit=40427 [ 364.761079][ T6133] syz.3.20: attempt to access beyond end of device [ 364.761079][ T6133] loop3: rw=524288, sector=87312, nr_sectors = 8 limit=40427 [ 364.761240][ T6133] syz.3.20: attempt to access beyond end of device [ 364.761240][ T6133] loop3: rw=524288, sector=87320, nr_sectors = 8 limit=40427 [ 364.761372][ T6133] syz.3.20: attempt to access beyond end of device [ 364.761372][ T6133] loop3: rw=524288, sector=87328, nr_sectors = 8 limit=40427 [ 364.761496][ T6133] syz.3.20: attempt to access beyond end of device [ 364.761496][ T6133] loop3: rw=524288, sector=87336, nr_sectors = 8 limit=40427 [ 364.761620][ T6133] syz.3.20: attempt to access beyond end of device [ 364.761620][ T6133] loop3: rw=524288, sector=87344, nr_sectors = 8 limit=40427 [ 364.761744][ T6133] syz.3.20: attempt to access beyond end of device [ 364.761744][ T6133] loop3: rw=524288, sector=87352, nr_sectors = 8 limit=40427 [ 364.761883][ T6133] syz.3.20: attempt to access beyond end of device [ 364.761883][ T6133] loop3: rw=524288, sector=87360, nr_sectors = 8 limit=40427 [ 364.762009][ T6133] syz.3.20: attempt to access beyond end of device [ 364.762009][ T6133] loop3: rw=524288, sector=87368, nr_sectors = 8 limit=40427 [ 365.828393][ T6243] loop6: detected capacity change from 0 to 40427 [ 365.860699][ T5154] Bluetooth: hci2: command 0x0406 tx timeout [ 365.868232][ T6243] F2FS-fs: heap/no_heap options were deprecated [ 365.868412][ T6243] F2FS-fs: heap/no_heap options were deprecated [ 365.884083][ T6243] F2FS-fs (loop6): Image doesn't support compression [ 365.897873][ T6243] F2FS-fs (loop6): invalid crc value [ 366.648290][ T6243] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 369.770854][ T6133] bio_check_eod: 38121 callbacks suppressed [ 369.770873][ T6133] syz.3.20: attempt to access beyond end of device [ 369.770873][ T6133] loop3: rw=524288, sector=89728, nr_sectors = 8 limit=40427 [ 369.771005][ T6133] syz.3.20: attempt to access beyond end of device [ 369.771005][ T6133] loop3: rw=524288, sector=89736, nr_sectors = 8 limit=40427 [ 369.771134][ T6133] syz.3.20: attempt to access beyond end of device [ 369.771134][ T6133] loop3: rw=524288, sector=89744, nr_sectors = 8 limit=40427 [ 369.771260][ T6133] syz.3.20: attempt to access beyond end of device [ 369.771260][ T6133] loop3: rw=524288, sector=89752, nr_sectors = 8 limit=40427 [ 369.771386][ T6133] syz.3.20: attempt to access beyond end of device [ 369.771386][ T6133] loop3: rw=524288, sector=89760, nr_sectors = 8 limit=40427 [ 369.771512][ T6133] syz.3.20: attempt to access beyond end of device [ 369.771512][ T6133] loop3: rw=524288, sector=89768, nr_sectors = 8 limit=40427 [ 369.771679][ T6133] syz.3.20: attempt to access beyond end of device [ 369.771679][ T6133] loop3: rw=524288, sector=89776, nr_sectors = 8 limit=40427 [ 369.771814][ T6133] syz.3.20: attempt to access beyond end of device [ 369.771814][ T6133] loop3: rw=524288, sector=89784, nr_sectors = 8 limit=40427 [ 369.771940][ T6133] syz.3.20: attempt to access beyond end of device [ 369.771940][ T6133] loop3: rw=524288, sector=89792, nr_sectors = 8 limit=40427 [ 369.772099][ T6133] syz.3.20: attempt to access beyond end of device [ 369.772099][ T6133] loop3: rw=524288, sector=89800, nr_sectors = 8 limit=40427 [ 370.445773][ T6248] loop6: detected capacity change from 0 to 40427 [ 370.503501][ T6248] F2FS-fs: heap/no_heap options were deprecated [ 370.503681][ T6248] F2FS-fs: heap/no_heap options were deprecated [ 370.504858][ T6248] F2FS-fs (loop6): Image doesn't support compression [ 370.510181][ T6248] F2FS-fs (loop6): invalid crc value [ 371.285293][ T6248] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 371.291792][ T6248] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 2025/09/26 14:38:37 executed programs: 10 [ 372.667532][ T6214] CPU: 0 UID: 0 PID: 6214 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 372.667562][ T6214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 372.667581][ T6214] Call Trace: [ 372.667589][ T6214] [ 372.667597][ T6214] dump_stack_lvl+0x189/0x250 [ 372.667639][ T6214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.667660][ T6214] ? rt_spin_lock+0x1bb/0x2c0 [ 372.667688][ T6214] ? __pfx_queue_work_on+0x10/0x10 [ 372.667720][ T6214] ? rt_spin_unlock+0x65/0x80 [ 372.667749][ T6214] f2fs_handle_critical_error+0x354/0x510 [ 372.667780][ T6214] f2fs_write_end_io+0x886/0xb60 [ 372.667821][ T6214] __submit_merged_bio+0x27a/0x6a0 [ 372.667853][ T6214] __submit_merged_write_cond+0x255/0x530 [ 372.667885][ T6214] f2fs_write_data_pages+0x261d/0x3000 [ 372.667952][ T6214] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 372.668033][ T6214] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 372.668057][ T6214] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.668096][ T6214] ? __lock_acquire+0xab9/0xd20 [ 372.668121][ T6214] ? rt_mutex_slowunlock+0x493/0x8a0 [ 372.668145][ T6214] ? reacquire_held_locks+0x127/0x1d0 [ 372.668168][ T6214] ? rt_spin_lock+0x1bb/0x2c0 [ 372.668200][ T6214] ? rt_spin_unlock+0x65/0x80 [ 372.668224][ T6214] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 372.668249][ T6214] do_writepages+0x32b/0x550 [ 372.668273][ T6214] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 372.668312][ T6214] filemap_fdatawrite+0x19c/0x240 [ 372.668335][ T6214] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 372.668404][ T6214] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 372.668431][ T6214] ? rt_spin_unlock+0x65/0x80 [ 372.668459][ T6214] f2fs_sync_dirty_inodes+0x31f/0x830 [ 372.668496][ T6214] f2fs_write_checkpoint+0x95a/0x1df0 [ 372.668544][ T6214] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 372.668611][ T6214] ? f2fs_stop_gc_thread+0x82/0xb0 [ 372.668631][ T6214] ? kfree+0x195/0x550 [ 372.668654][ T6214] ? kill_f2fs_super+0x298/0x6c0 [ 372.668688][ T6214] kill_f2fs_super+0x2c3/0x6c0 [ 372.668714][ T6214] ? __pfx_kill_f2fs_super+0x10/0x10 [ 372.668746][ T6214] ? shrinker_free+0x2ce/0x3e0 [ 372.668772][ T6214] deactivate_locked_super+0xbc/0x130 [ 372.668796][ T6214] cleanup_mnt+0x425/0x4c0 [ 372.668815][ T6214] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.668843][ T6214] task_work_run+0x1d4/0x260 [ 372.668865][ T6214] ? __pfx_task_work_run+0x10/0x10 [ 372.668878][ T6214] ? __x64_sys_umount+0x122/0x160 [ 372.668905][ T6214] ? exit_to_user_mode_loop+0x40/0x110 [ 372.668932][ T6214] exit_to_user_mode_loop+0xec/0x110 [ 372.668955][ T6214] do_syscall_64+0x2bd/0x3b0 [ 372.668971][ T6214] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.668994][ T6214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.669012][ T6214] ? clear_bhb_loop+0x60/0xb0 [ 372.669034][ T6214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.669051][ T6214] RIP: 0033:0x7f07dcdb01f7 [ 372.669074][ T6214] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 372.669088][ T6214] RSP: 002b:00007ffc0b528bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 372.669112][ T6214] RAX: 0000000000000000 RBX: 00007f07dce31d7d RCX: 00007f07dcdb01f7 [ 372.669124][ T6214] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc0b528c90 [ 372.669135][ T6214] RBP: 00007ffc0b528c90 R08: 0000000000000000 R09: 0000000000000000 [ 372.669146][ T6214] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc0b529d20 [ 372.669157][ T6214] R13: 00007f07dce31d7d R14: 000000000005a870 R15: 00007ffc0b529d60 [ 372.669192][ T6214] [ 372.669200][ T6214] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 374.788219][ T6048] bio_check_eod: 35513 callbacks suppressed [ 374.788240][ T6048] syz.0.17: attempt to access beyond end of device [ 374.788240][ T6048] loop0: rw=524288, sector=88728, nr_sectors = 8 limit=40427 [ 374.788406][ T6048] syz.0.17: attempt to access beyond end of device [ 374.788406][ T6048] loop0: rw=524288, sector=88736, nr_sectors = 8 limit=40427 [ 374.788538][ T6048] syz.0.17: attempt to access beyond end of device [ 374.788538][ T6048] loop0: rw=524288, sector=88744, nr_sectors = 8 limit=40427 [ 374.788662][ T6048] syz.0.17: attempt to access beyond end of device [ 374.788662][ T6048] loop0: rw=524288, sector=88752, nr_sectors = 8 limit=40427 [ 374.788787][ T6048] syz.0.17: attempt to access beyond end of device [ 374.788787][ T6048] loop0: rw=524288, sector=88760, nr_sectors = 8 limit=40427 [ 374.788911][ T6048] syz.0.17: attempt to access beyond end of device [ 374.788911][ T6048] loop0: rw=524288, sector=88768, nr_sectors = 8 limit=40427 [ 374.789037][ T6048] syz.0.17: attempt to access beyond end of device [ 374.789037][ T6048] loop0: rw=524288, sector=88776, nr_sectors = 8 limit=40427 [ 374.789161][ T6048] syz.0.17: attempt to access beyond end of device [ 374.789161][ T6048] loop0: rw=524288, sector=88784, nr_sectors = 8 limit=40427 [ 374.789270][ T6048] syz.0.17: attempt to access beyond end of device [ 374.789270][ T6048] loop0: rw=524288, sector=88792, nr_sectors = 8 limit=40427 [ 374.789394][ T6048] syz.0.17: attempt to access beyond end of device [ 374.789394][ T6048] loop0: rw=524288, sector=88800, nr_sectors = 8 limit=40427 [ 377.293950][ T6252] loop6: detected capacity change from 0 to 40427 [ 377.303781][ T6252] F2FS-fs: heap/no_heap options were deprecated [ 377.303958][ T6252] F2FS-fs: heap/no_heap options were deprecated [ 377.391279][ T6252] F2FS-fs (loop6): Image doesn't support compression [ 377.443747][ T6252] F2FS-fs (loop6): invalid crc value [ 378.159905][ T6252] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 2025/09/26 14:38:43 executed programs: 11 [ 379.139474][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.139543][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.792761][ T6167] bio_check_eod: 36525 callbacks suppressed [ 379.792781][ T6167] syz.4.21: attempt to access beyond end of device [ 379.792781][ T6167] loop4: rw=0, sector=89584, nr_sectors = 8 limit=40427 [ 379.792929][ T6167] syz.4.21: attempt to access beyond end of device [ 379.792929][ T6167] loop4: rw=0, sector=89592, nr_sectors = 8 limit=40427 [ 379.793062][ T6167] syz.4.21: attempt to access beyond end of device [ 379.793062][ T6167] loop4: rw=0, sector=89600, nr_sectors = 8 limit=40427 [ 379.793200][ T6167] syz.4.21: attempt to access beyond end of device [ 379.793200][ T6167] loop4: rw=0, sector=89608, nr_sectors = 8 limit=40427 [ 379.793331][ T6167] syz.4.21: attempt to access beyond end of device [ 379.793331][ T6167] loop4: rw=0, sector=89616, nr_sectors = 8 limit=40427 [ 379.793464][ T6167] syz.4.21: attempt to access beyond end of device [ 379.793464][ T6167] loop4: rw=0, sector=89624, nr_sectors = 8 limit=40427 [ 379.793987][ T6167] syz.4.21: attempt to access beyond end of device [ 379.793987][ T6167] loop4: rw=0, sector=89632, nr_sectors = 8 limit=40427 [ 379.794125][ T6167] syz.4.21: attempt to access beyond end of device [ 379.794125][ T6167] loop4: rw=0, sector=89640, nr_sectors = 8 limit=40427 [ 379.794256][ T6167] syz.4.21: attempt to access beyond end of device [ 379.794256][ T6167] loop4: rw=0, sector=89648, nr_sectors = 8 limit=40427 [ 379.794387][ T6167] syz.4.21: attempt to access beyond end of device [ 379.794387][ T6167] loop4: rw=0, sector=89656, nr_sectors = 8 limit=40427 [ 381.716843][ T6261] loop6: detected capacity change from 0 to 40427 [ 381.766078][ T6261] F2FS-fs: heap/no_heap options were deprecated [ 381.766258][ T6261] F2FS-fs: heap/no_heap options were deprecated [ 381.803306][ T6261] F2FS-fs (loop6): Image doesn't support compression [ 381.836930][ T6261] F2FS-fs (loop6): invalid crc value [ 382.537961][ T6261] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 384.804840][ T6098] bio_check_eod: 36381 callbacks suppressed [ 384.804860][ T6098] syz.2.19: attempt to access beyond end of device [ 384.804860][ T6098] loop2: rw=524288, sector=88960, nr_sectors = 8 limit=40427 [ 384.804994][ T6098] syz.2.19: attempt to access beyond end of device [ 384.804994][ T6098] loop2: rw=524288, sector=88968, nr_sectors = 8 limit=40427 [ 384.805116][ T6098] syz.2.19: attempt to access beyond end of device [ 384.805116][ T6098] loop2: rw=524288, sector=88976, nr_sectors = 8 limit=40427 [ 384.805235][ T6098] syz.2.19: attempt to access beyond end of device [ 384.805235][ T6098] loop2: rw=524288, sector=88984, nr_sectors = 8 limit=40427 [ 384.805365][ T6098] syz.2.19: attempt to access beyond end of device [ 384.805365][ T6098] loop2: rw=524288, sector=88992, nr_sectors = 8 limit=40427 [ 384.805484][ [ 384.805484][ T6098] syz.2.19: attempt to access beyond end of device [ 384.805484][ T6098] loop2: rw=524288, sector=89000, nr_sectors = 8 limit=40427 [ 384.805601][ T6098] syz.2.19: attempt to access beyond end of device [ 384.805601][ T6098] loop2: rw=524288, sector=89008, nr_sectors = 8 limit=40427 [ 384.805717][ T6098] syz.2.19: attempt to access beyond end of device [ 384.805717][ T6098] loop2: rw=524288, sector=89016, nr_sectors = 8 limit=40427 [ 384.805845][ T6098] syz.2.19: attempt to access beyond end of device [ 384.805845][ T6098] loop2: rw=524288, sector=89024, nr_sectors = 8 limit=40427 [ 384.805966][ T6098] syz.2.19: attempt to access beyond end of device [ 384.805966][ T6098] loop2: rw=524288, sector=89032, nr_sectors = 8 limit=40427 [ 384.891539][ T38] INFO: task kworker/u8:8:1179 blocked for more than 143 seconds. [ 384.891559][ T38] Not tainted syzkaller #0 [ 384.891569][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 384.891578][ T38] task:kworker/u8:8 state:D stack:23592 pid:1179 tgid:1179 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 384.891624][ T38] Workqueue: writeback wb_workfn (flush-7:0) [ 384.891650][ T38] Call Trace: [ 384.891656][ T38] [ 384.891669][ T38] __schedule+0x16f3/0x4c20 [ 384.891704][ T38] ? kvm_sched_clock_read+0x11/0x20 [ 384.891731][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 384.891772][ T38] ? __pfx___schedule+0x10/0x10 [ 384.891821][ T38] rt_mutex_schedule+0x77/0xf0 [ 384.891838][ T38] ? __rt_mutex_slowlock_locked+0x1a7/0x25e0 [ 384.891858][ T38] __rt_mutex_slowlock_locked+0x1e04/0x25e0 [ 384.891889][ T38] ? __rt_mutex_slowlock_locked+0x1a7/0x25e0 [ 384.891918][ T38] ? __pfx___rt_mutex_slowlock_locked+0x10/0x10 [ 384.891949][ T38] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 384.891977][ T38] ? rt_mutex_pre_schedule+0x7d/0x1d0 [ 384.892000][ T38] rt_mutex_slowlock+0xb5/0x160 [ 384.892023][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 384.892040][ T38] ? __pfx_hlock_conflict+0x10/0x10 [ 384.892062][ T38] ? lock_acquire+0x175/0x360 [ 384.892088][ T38] rwbase_write_lock+0x14f/0x750 [ 384.892135][ T38] f2fs_balance_fs+0x5af/0x7f0 [ 384.892161][ T38] ? f2fs_update_inode+0x13df/0x2620 [ 384.892182][ T38] ? f2fs_write_inode+0x3fb/0x5f0 [ 384.892203][ T38] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 384.892248][ T38] f2fs_write_inode+0x3fb/0x5f0 [ 384.892274][ T38] __writeback_single_inode+0x6f1/0x1000 [ 384.892304][ T38] writeback_sb_inodes+0x6b7/0xf60 [ 384.892329][ T38] ? stack_trace_save+0x9c/0xe0 [ 384.892353][ T38] ? mark_lock_irq+0x31a/0x390 [ 384.892388][ T38] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 384.892446][ T38] ? __pfx_down_read_trylock+0x10/0x10 [ 384.892468][ T38] ? __pfx_move_expired_inodes+0x10/0x10 [ 384.892498][ T38] __writeback_inodes_wb+0x111/0x240 [ 384.892528][ T38] wb_writeback+0x44f/0xaf0 [ 384.892557][ T38] ? queue_io+0x3c1/0x560 [ 384.892580][ T38] ? __pfx_wb_writeback+0x10/0x10 [ 384.892618][ T38] wb_workfn+0xaf4/0xf00 [ 384.892652][ T38] ? __pfx_wb_workfn+0x10/0x10 [ 384.892676][ T38] ? __lock_acquire+0xab9/0xd20 [ 384.892709][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 384.892737][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 384.892767][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 384.892786][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 384.892809][ T38] process_scheduled_works+0xade/0x17b0 [ 384.892859][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 384.892899][ T38] worker_thread+0x8a0/0xda0 [ 384.892948][ T38] kthread+0x70e/0x8a0 [ 384.892976][ T38] ? __pfx_worker_thread+0x10/0x10 [ 384.892997][ T38] ? __pfx_kthread+0x10/0x10 [ 384.893026][ T38] ? __pfx_kthread+0x10/0x10 [ 384.893052][ T38] ret_from_fork+0x436/0x7d0 [ 384.893077][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 384.893105][ T38] ? __switch_to_asm+0x39/0x70 [ 384.893122][ T38] ? __switch_to_asm+0x33/0x70 [ 384.893138][ T38] ? __pfx_kthread+0x10/0x10 [ 384.893163][ T38] ret_from_fork_asm+0x1a/0x30 [ 384.893198][ T38] [ 384.893310][ T38] [ 384.893310][ T38] Showing all locks held in the system: [ 384.893318][ T38] 4 locks held by kworker/u8:1/13: [ 384.893329][ T38] #0: ffff8881416c9138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 384.893377][ T38] #1: ffffc90000127bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 384.893423][ T38] #2: ffff8880580300d0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 384.893471][ T38] #3: ffff88802f4c9990 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5af/0x7f0 [ 384.893516][ T38] 4 locks held by pr/legacy/17: [ 384.893529][ T38] 1 lock held by khungtaskd/38: [ 384.893539][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 384.893583][ T38] 4 locks held by kworker/u8:4/67: [ 384.893593][ T38] #0: ffff8881416c9138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 384.893638][ T38] #1: ffffc9000152fbc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 384.893683][ T38] #2: ffff88803500c0d0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 384.893730][ T38] #3: ffff888029521990 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5af/0x7f0 [ 384.893785][ T38] 4 locks held by kworker/u8:6/1114: [ 384.893795][ T38] #0: ffff8881416c9138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 384.893840][ T38] #1: ffffc90004f0fbc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 384.893885][ T38] #2: ffff8880355b20d0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 384.893932][ T38] #3: ffff888033de9990 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5af/0x7f0 [ 384.893977][ T38] 2 locks held by kworker/u8:7/1152: [ 384.893988][ T38] 4 locks held by kworker/u8:8/1179: [ 384.893998][ T38] #0: ffff8881416c9138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 384.894043][ T38] #1: ffffc90004fcfbc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 384.894088][ T38] #2: ffff88803d6720d0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 384.894135][ T38] #3: ffff88803cf09990 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5af/0x7f0 [ 384.894190][ T38] 4 locks held by kworker/u8:11/3288: [ 384.894200][ T38] #0: ffff8881416c9138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 384.894245][ T38] #1: ffffc9000d927bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 384.894289][ T38] #2: ffff88803ba940d0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 384.894336][ T38] #3: ffff88804825d990 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5af/0x7f0 [ 384.894383][ T38] 4 locks held by kworker/u8:12/4427: [ 384.894395][ T38] 2 locks held by getty/5594: [ 384.894405][ T38] #0: ffff88823bf5c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 384.894453][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 384.894498][ T38] 3 locks held by kworker/u9:2/5926: [ 384.894508][ T38] #0: ffff88802866d938 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 384.894553][ T38] #1: ffffc90004967bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 384.894598][ T38] #2: ffff8880568bce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 384.894645][ T38] 6 locks held by syz.0.17/6048: [ 384.894657][ T38] 7 locks held by syz.1.18/6073: [ 384.894668][ T38] 4 locks held by syz.2.19/6098: [ 384.894680][ T38] 5 locks held by syz.3.20/6133: [ 384.894691][ T38] 6 locks held by syz.4.21/6167: [ 384.894703][ T38] 5 locks held by syz.5.22/6207: [ 384.894713][ T38] 4 locks held by kworker/u8:3/6212: [ 384.894723][ T38] #0: ffff8881416c9138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 384.894774][ T38] #1: ffffc9000155fbc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 384.894819][ T38] #2: ffff88805d18e0d0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 384.894866][ T38] #3: ffff888010b61990 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5af/0x7f0 [ 384.894913][ T38] [ 384.894918][ T38] ============================================= [ 384.894918][ T38] [ 384.894934][ T38] NMI backtrace for cpu 0 [ 384.894948][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 384.894968][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 384.894978][ T38] Call Trace: [ 384.894985][ T38] [ 384.894992][ T38] dump_stack_lvl+0x189/0x250 [ 384.895019][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.895042][ T38] ? __pfx__printk+0x10/0x10 [ 384.895073][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 384.895097][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 384.895122][ T38] ? __pfx__printk+0x10/0x10 [ 384.895145][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 384.895168][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 384.895192][ T38] watchdog+0xf93/0xfe0 [ 384.895219][ T38] ? watchdog+0x1de/0xfe0 [ 384.895245][ T38] kthread+0x70e/0x8a0 [ 384.895272][ T38] ? __pfx_watchdog+0x10/0x10 [ 384.895292][ T38] ? __pfx_kthread+0x10/0x10 [ 384.895319][ T38] ? __pfx_kthread+0x10/0x10 [ 384.895343][ T38] ret_from_fork+0x436/0x7d0 [ 384.895366][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 384.895392][ T38] ? __switch_to_asm+0x39/0x70 [ 384.895407][ T38] ? __switch_to_asm+0x33/0x70 [ 384.895422][ T38] ? __pfx_kthread+0x10/0x10 [ 384.895447][ T38] ret_from_fork_asm+0x1a/0x30 [ 384.895478][ T38] [ 384.895485][ T38] Sending NMI from CPU 0 to CPUs 1: [ 384.895508][ C1] NMI backtrace for cpu 1 [ 384.895520][ C1] CPU: 1 UID: 0 PID: 6207 Comm: syz.5.22 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 384.895538][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 384.895546][ C1] RIP: 0010:__lock_acquire+0x332/0xd20 [ 384.895565][ C1] Code: e5 15 09 d5 09 cd 44 09 f5 41 89 6c c7 20 45 89 44 c7 24 4c 89 7c 24 10 4d 8d 34 c7 81 e5 ff 1f 00 00 48 0f a3 2d 7e e8 61 11 <73> 10 48 69 c5 c8 00 00 00 48 8d 80 f0 f2 9e 92 eb 40 83 3d 25 78 [ 384.895577][ C1] RSP: 0018:ffffc90000116970 EFLAGS: 00000003 [ 384.895590][ C1] RAX: 0000000000000014 RBX: ffffffff8d9a8d80 RCX: 000000000000000b [ 384.895601][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880299dbb80 [ 384.895610][ C1] RBP: 000000000000000b R08: 0000000000000000 R09: ffffffff8af5ba90 [ 384.895619][ C1] R10: ffffc90000116ac0 R11: fffff52000022d5b R12: 0000000000020000 [ 384.895630][ C1] R13: 0000000000000000 R14: ffff8880299dc740 R15: ffff8880299dc6a0 [ 384.895640][ C1] FS: 000055557ad01500(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 384.895653][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 384.895664][ C1] CR2: 00007f07d4da8000 CR3: 00000000580d0000 CR4: 00000000003526f0 [ 384.895678][ C1] Call Trace: [ 384.895683][ C1] [ 384.895692][ C1] ? xa_load+0x60/0x210 [ 384.895706][ C1] lock_acquire+0x120/0x360 [ 384.895722][ C1] ? xa_load+0x60/0x210 [ 384.895739][ C1] ? xa_load+0x60/0x210 [ 384.895753][ C1] xa_load+0x7c/0x210 [ 384.895766][ C1] ? xa_load+0x60/0x210 [ 384.895782][ C1] f2fs_ra_node_page+0xfc/0x230 [ 384.895799][ C1] do_garbage_collect+0x2110/0x6410 [ 384.895823][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 384.895842][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 384.895861][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.895887][ C1] ? __pfx_do_garbage_collect+0x10/0x10 [ 384.895902][ C1] ? __lock_acquire+0xab9/0xd20 [ 384.895921][ C1] ? do_raw_spin_lock+0x121/0x290 [ 384.895939][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 384.895958][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.895976][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 384.895995][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 384.896013][ C1] ? do_raw_spin_lock+0x121/0x290 [ 384.896031][ C1] ? rt_mutex_slowunlock+0x493/0x8a0 [ 384.896045][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.896063][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 384.896084][ C1] ? f2fs_gc+0xa3d/0x2580 [ 384.896100][ C1] f2fs_gc+0xca9/0x2580 [ 384.896125][ C1] ? __pfx_f2fs_gc+0x10/0x10 [ 384.896140][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.896163][ C1] ? rwbase_write_lock+0x56f/0x750 [ 384.896182][ C1] f2fs_balance_fs+0x5fb/0x7f0 [ 384.896199][ C1] ? __pfx_f2fs_get_dnode_of_data+0x10/0x10 [ 384.896213][ C1] ? f2fs_map_blocks+0x345f/0x4130 [ 384.896230][ C1] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 384.896254][ C1] f2fs_map_blocks+0x345f/0x4130 [ 384.896286][ C1] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 384.896302][ C1] ? rt_mutex_slowunlock+0x493/0x8a0 [ 384.896316][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.896341][ C1] ? f2fs_allocate_pinning_section+0x1ac/0x370 [ 384.896357][ C1] f2fs_expand_inode_data+0x5b1/0xa60 [ 384.896379][ C1] ? __pfx_f2fs_expand_inode_data+0x10/0x10 [ 384.896398][ C1] ? mnt_put_write_access_file+0xc6/0x100 [ 384.896415][ C1] ? file_modified_flags+0x4c7/0x560 [ 384.896431][ C1] f2fs_fallocate+0x4f8/0x990 [ 384.896449][ C1] vfs_fallocate+0x672/0x7f0 [ 384.896468][ C1] ? __pfx_vfs_fallocate+0x10/0x10 [ 384.896488][ C1] file_ioctl+0x61d/0x780 [ 384.896510][ C1] ? __pfx_file_ioctl+0x10/0x10 [ 384.896529][ C1] ? kasan_quarantine_put+0xdd/0x220 [ 384.896548][ C1] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 384.896565][ C1] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 384.896581][ C1] do_vfs_ioctl+0xb36/0x1440 [ 384.896597][ C1] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 384.896612][ C1] ? __pfx_smack_log+0x10/0x10 [ 384.896630][ C1] ? smk_access+0x14c/0x4e0 [ 384.896651][ C1] ? smk_tskacc+0x2fc/0x370 [ 384.896670][ C1] ? smack_file_ioctl+0x24d/0x340 [ 384.896686][ C1] ? __pfx_smack_file_ioctl+0x10/0x10 [ 384.896705][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 384.896722][ C1] ? bpf_lsm_file_ioctl+0x9/0x20 [ 384.896739][ C1] __se_sys_ioctl+0x82/0x170 [ 384.896755][ C1] do_syscall_64+0xfa/0x3b0 [ 384.896768][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.896786][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.896800][ C1] ? clear_bhb_loop+0x60/0xb0 [ 384.896816][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.896830][ C1] RIP: 0033:0x7faa0a90eec9 [ 384.896843][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.896854][ C1] RSP: 002b:00007ffec6b17218 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 384.896869][ C1] RAX: ffffffffffffffda RBX: 00007faa0ab65fa0 RCX: 00007faa0a90eec9 [ 384.896879][ C1] RDX: 00002000000000c0 RSI: 0000000040305828 RDI: 0000000000000004 [ 384.896889][ C1] RBP: 00007faa0a991f91 R08: 0000000000000000 R09: 0000000000000000 [ 384.896898][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.896907][ C1] R13: 00007faa0ab65fa0 R14: 00007faa0ab65fa0 R15: 0000000000000003 [ 384.896923][ C1] [ 384.897510][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 384.897524][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 384.897544][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 384.897554][ T38] Call Trace: [ 384.897561][ T38] [ 384.897568][ T38] dump_stack_lvl+0x99/0x250 [ 384.897591][ T38] ? __asan_memcpy+0x40/0x70 [ 384.897610][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.897633][ T38] ? __pfx__printk+0x10/0x10 [ 384.897664][ T38] vpanic+0x281/0x750 [ 384.897690][ T38] ? __pfx_vpanic+0x10/0x10 [ 384.897711][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 384.897729][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.897768][ T38] panic+0xb9/0xc0 [ 384.897789][ T38] ? __pfx_panic+0x10/0x10 [ 384.897814][ T38] ? irq_work_queue+0xc3/0x140 [ 384.897839][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 384.897863][ T38] watchdog+0xfd2/0xfe0 [ 384.897889][ T38] ? watchdog+0x1de/0xfe0 [ 384.897915][ T38] kthread+0x70e/0x8a0 [ 384.897942][ T38] ? __pfx_watchdog+0x10/0x10 [ 384.897962][ T38] ? __pfx_kthread+0x10/0x10 [ 384.897990][ T38] ? __pfx_kthread+0x10/0x10 [ 384.898014][ T38] ret_from_fork+0x436/0x7d0 [ 384.898038][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 384.898065][ T38] ? __switch_to_asm+0x39/0x70 [ 384.898081][ T38] ? __switch_to_asm+0x33/0x70 [ 384.898096][ T38] ? __pfx_kthread+0x10/0x10 [ 384.898121][ T38] ret_from_fork_asm+0x1a/0x30 [ 384.898153][ T38] [ 384.898447][ T38] Kernel Offset: disabled