Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. 2026/08/14 10:45:28 parsed 1 programs 2026/08/14 10:45:28 serving rpc on tcp://42951 [ 84.271481][ T5630] cgroup: Unknown subsys name 'net' [ 84.370337][ T5630] cgroup: Unknown subsys name 'cpuset' [ 84.378945][ T5630] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.083747][ T5630] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.285971][ T25] cfg80211: failed to load regulatory.db [ 89.455119][ T206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.460630][ T206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.498399][ T206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.498463][ T206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.552652][ T5644] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.062305][ T5671] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.071233][ T5671] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.084286][ T5671] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.089771][ T5671] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.090520][ T5671] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.710811][ T5696] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.711771][ T5696] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.711920][ T5696] bridge_slave_0: entered allmulticast mode [ 92.714266][ T5696] bridge_slave_0: entered promiscuous mode [ 92.721063][ T5696] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.721220][ T5696] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.721373][ T5696] bridge_slave_1: entered allmulticast mode [ 92.723720][ T5696] bridge_slave_1: entered promiscuous mode [ 92.773695][ T5696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.777893][ T5696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.805399][ T5696] team0: Port device team_slave_0 added [ 92.808531][ T5696] team0: Port device team_slave_1 added [ 92.832341][ T5696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.832379][ T5696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.833275][ T5696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.837549][ T5696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.837566][ T5696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.837588][ T5696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.927144][ T5696] hsr_slave_0: entered promiscuous mode [ 92.929005][ T5696] hsr_slave_1: entered promiscuous mode [ 93.080430][ T5696] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.092495][ T5696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.093653][ T5696] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.106005][ T5696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.106859][ T5696] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.118786][ T5696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.120794][ T5696] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.127143][ T5696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.168258][ T5696] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.168396][ T5696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.169052][ T5696] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.169441][ T5696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.235884][ T5696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.252694][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.261280][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.279970][ T5696] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.290138][ T206] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.290262][ T206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.308123][ T206] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.308237][ T206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.632924][ T5696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.685538][ T5696] veth0_vlan: entered promiscuous mode [ 93.701066][ T5696] veth1_vlan: entered promiscuous mode [ 93.732069][ T5696] veth0_macvtap: entered promiscuous mode [ 93.740220][ T5696] veth1_macvtap: entered promiscuous mode [ 93.757027][ T5696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.761351][ T5696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.838475][ T1100] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.838805][ T1100] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.838839][ T1100] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.838868][ T1100] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.982312][ T1145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.063482][ T1145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.159276][ T1145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.267847][ T1145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/08/14 10:45:42 executed programs: 0 [ 95.288839][ T4935] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.296674][ T4935] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.297649][ T4935] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.299229][ T4935] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.299917][ T4935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.749818][ T5751] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.750006][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.750151][ T5751] bridge_slave_0: entered allmulticast mode [ 95.752809][ T5751] bridge_slave_0: entered promiscuous mode [ 95.756403][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.756571][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.756697][ T5751] bridge_slave_1: entered allmulticast mode [ 95.758449][ T5751] bridge_slave_1: entered promiscuous mode [ 95.796593][ T5751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.799950][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.836888][ T5751] team0: Port device team_slave_0 added [ 95.841515][ T5751] team0: Port device team_slave_1 added [ 95.865837][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.865868][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.866694][ T5751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.869301][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.869313][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.869334][ T5751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.925709][ T5751] hsr_slave_0: entered promiscuous mode [ 95.926885][ T5751] hsr_slave_1: entered promiscuous mode [ 95.927656][ T5751] debugfs: 'hsr0' already exists in 'hsr' [ 95.927733][ T5751] Cannot create hsr debugfs directory [ 96.200101][ T1145] bridge_slave_1: left allmulticast mode [ 96.200159][ T1145] bridge_slave_1: left promiscuous mode [ 96.200871][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.226219][ T1145] bridge_slave_0: left allmulticast mode [ 96.226257][ T1145] bridge_slave_0: left promiscuous mode [ 96.227432][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.388922][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.415452][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.430242][ T1145] bond0 (unregistering): Released all slaves [ 96.570441][ T1145] hsr_slave_0: left promiscuous mode [ 96.577814][ T1145] hsr_slave_1: left promiscuous mode [ 96.578863][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.578896][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.599038][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.599062][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.635966][ T1145] veth1_macvtap: left promiscuous mode [ 96.636047][ T1145] veth0_macvtap: left promiscuous mode [ 96.636186][ T1145] veth1_vlan: left promiscuous mode [ 96.636931][ T1145] veth0_vlan: left promiscuous mode [ 97.109256][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 97.125760][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 97.269697][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 97.359358][ T5671] Bluetooth: hci0: command tx timeout [ 97.971413][ T5751] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.008746][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.031836][ T5751] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.052159][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.099711][ T5751] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.115231][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.118006][ T5751] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.139325][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.299115][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.332508][ T5751] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.347902][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.348040][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.368694][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.368802][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.982144][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.058691][ T5751] veth0_vlan: entered promiscuous mode [ 99.074896][ T5751] veth1_vlan: entered promiscuous mode [ 99.125589][ T5751] veth0_macvtap: entered promiscuous mode [ 99.138346][ T5751] veth1_macvtap: entered promiscuous mode [ 99.166962][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.189387][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.264814][ T206] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.266317][ T1100] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.266358][ T1100] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.266388][ T1100] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.343274][ T206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.343342][ T206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.409799][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.409854][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.434407][ T5671] Bluetooth: hci0: command tx timeout [ 99.872411][ T5845] loop0: detected capacity change from 0 to 40427 [ 99.897333][ T5845] F2FS-fs (loop0): invalid crc value [ 100.019892][ T5845] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 100.023111][ T5845] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 100.050240][ T5751] syz-executor: attempt to access beyond end of device [ 100.050240][ T5751] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.059300][ T5751] CPU: 1 UID: 0 PID: 5751 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 100.059329][ T5751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.059342][ T5751] Call Trace: [ 100.059350][ T5751] [ 100.059357][ T5751] dump_stack_lvl+0xe8/0x150 [ 100.059390][ T5751] f2fs_stop_checkpoint+0x3 ** replaying previous printk message ** [ 100.059390][ T5751] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 100.059419][ T5751] f2fs_write_end_bio+0x1211/0x16e0 [ 100.059446][ T5751] ? blkg_put+0x22/0x240 [ 100.059480][ T5751] __submit_merged_bio+0x258/0x6a0 [ 100.059500][ T5751] ? rcu_is_watching+0x16/0xb0 [ 100.059526][ T5751] __submit_merged_write_cond+0x3c9/0x4e0 [ 100.059555][ T5751] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 100.059598][ T5751] f2fs_write_data_pages+0x2a27/0x36f0 [ 100.059621][ T5751] ? __lock_acquire+0x6df/0x2e50 [ 100.059671][ T5751] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 100.059707][ T5751] ? rcu_is_watching+0x16/0xb0 [ 100.059753][ T5751] ? rcu_is_watching+0x16/0xb0 [ 100.059771][ T5751] ? __bfs+0x153/0x290 [ 100.059787][ T5751] ? __pfx_hlock_conflict+0x10/0x10 [ 100.059824][ T5751] ? lockdep_unlock+0x5c/0xd0 [ 100.059847][ T5751] ? __lock_acquire+0x14b9/0x2e50 [ 100.059889][ T5751] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 100.059913][ T5751] do_writepages+0x338/0x560 [ 100.059946][ T5751] ? do_raw_spin_unlock+0xf5/0x200 [ 100.059973][ T5751] filemap_fdatawrite+0x1e9/0x2f0 [ 100.059999][ T5751] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 100.060071][ T5751] ? do_raw_spin_unlock+0xf5/0x200 [ 100.060098][ T5751] f2fs_sync_dirty_inodes+0x30e/0x830 [ 100.060136][ T5751] f2fs_write_checkpoint+0xa3d/0x2710 [ 100.060159][ T5751] ? __lock_acquire+0x6df/0x2e50 [ 100.060211][ T5751] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 100.060270][ T5751] ? try_to_wake_up+0x8f2/0x14d0 [ 100.060304][ T5751] kill_f2fs_super+0x2dd/0x700 [ 100.060336][ T5751] ? __pfx_kill_f2fs_super+0x10/0x10 [ 100.060371][ T5751] ? call_rcu+0x64d/0x8b0 [ 100.060391][ T5751] ? lockdep_hardirqs_on+0x7b/0x110 [ 100.060427][ T5751] deactivate_locked_super+0xbc/0x110 [ 100.060448][ T5751] cleanup_mnt+0x3d3/0x460 [ 100.060474][ T5751] task_work_run+0x1d9/0x270 [ 100.060496][ T5751] ? __pfx_task_work_run+0x10/0x10 [ 100.060525][ T5751] exit_to_user_mode_loop+0x204/0x770 [ 100.060543][ T5751] ? rcu_is_watching+0x16/0xb0 [ 100.060567][ T5751] do_syscall_64+0x328/0x520 [ 100.060589][ T5751] ? trace_irq_disable+0x3b/0x140 [ 100.060606][ T5751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.060624][ T5751] ? clear_bhb_loop+0x70/0xc0 [ 100.060646][ T5751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.060663][ T5751] RIP: 0033:0x7f7d70b9f317 [ 100.060681][ T5751] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 100.060694][ T5751] RSP: 002b:00007ffe8791b688 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 100.060715][ T5751] RAX: 0000000000000000 RBX: 00007f7d70c34474 RCX: 00007f7d70b9f317 [ 100.060726][ T5751] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe8791b740 [ 100.060737][ T5751] RBP: 00007ffe8791b740 R08: 00007ffe8791c740 R09: 00000000ffffffff [ 100.060749][ T5751] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe8791c7d0 [ 100.060759][ T5751] R13: 00007f7d70c34474 R14: 000000000001867b R15: 00007ffe8791c810 [ 100.060789][ T5751] [ 100.062814][ T5751] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 100.101337][ T5671] [ 100.414874][ T5671] ============================= [ 100.419935][ T5671] WARNING: suspicious RCU usage [ 100.425028][ T5671] syzkaller #0 Not tainted [ 100.429465][ T5671] ----------------------------- [ 100.434342][ T5671] ./include/linux/radix-tree.h:179 suspicious rcu_dereference_check() usage! [ 100.443113][ T5671] [ 100.443113][ T5671] other info that might help us debug this: [ 100.443113][ T5671] [ 100.454005][ T5671] [ 100.454005][ T5671] rcu_scheduler_active = 2, debug_locks = 1 [ 100.462355][ T5671] locks held by kworker/u9:2/5671: 4, last CPU#1: [ 100.468825][ T5671] #0: ffff888035719940 ((wq_completion)f2fs_evict_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 100.480666][ T5671] #1: ffffc90004437c40 ((work_completion)(&ew->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 100.492947][ T5671] #2: ffff8880b873a820 (lock){+.+.}-{3:3}, at: __radix_tree_preload+0x82/0x870 [ 100.502061][ T5671] #3: ffff88802c3308c8 (&im->ino_lock){+.+.}-{3:3}, at: __f2fs_add_ino_entry+0x14c/0x830 [ 100.512314][ T5671] [ 100.512314][ T5671] stack backtrace: [ 100.518682][ T5671] CPU: 1 UID: 0 PID: 5671 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 100.528151][ T5671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.538211][ T5671] Workqueue: f2fs_evict_wq f2fs_evict_inode_work [ 100.544548][ T5671] Call Trace: [ 100.547908][ T5671] [ 100.550861][ T5671] dump_stack_lvl+0xe8/0x150 [ 100.555476][ T5671] lockdep_rcu_suspicious+0x140/0x1d0 [ 100.560856][ T5671] __f2fs_add_ino_entry+0x782/0x830 [ 100.566162][ T5671] ? process_scheduled_works+0x97a/0x1630 [ 100.572414][ T5671] f2fs_evict_inode_work+0xa1/0x120 [ 100.577734][ T5671] process_scheduled_works+0xc3d/0x1630 [ 100.583401][ T5671] ? __pfx_process_scheduled_works+0x10/0x10 [ 100.589417][ T5671] ? assign_work+0x3cf/0x5d0 [ 100.594120][ T5671] worker_thread+0xa47/0xfb0 [ 100.598973][ T5671] ? __kthread_parkme+0x71/0x1f0 [ 100.603939][ T5671] kthread+0x38b/0x480 [ 100.608217][ T5671] ? __pfx_worker_thread+0x10/0x10 [ 100.613324][ T5671] ? __pfx_kthread+0x10/0x10 [ 100.618018][ T5671] ret_from_fork+0x514/0xb70 [ 100.623881][ T5671] ? __pfx_ret_from_fork+0x10/0x10 [ 100.629343][ T5671] ? __switch_to+0xc89/0x1420 [ 100.634216][ T5671] ? __pfx_kthread+0x10/0x10 [ 100.638815][ T5671] ret_from_fork_asm+0x1a/0x30 [ 100.643611][ T5671]