Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. 2026/01/10 01:07:46 parsed 1 programs [ 177.293620][ T5824] cgroup: Unknown subsys name 'net' [ 177.535873][ T5824] cgroup: Unknown subsys name 'cpuset' [ 177.590246][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 179.396883][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 182.918781][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 183.281494][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.282860][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.283031][ T5837] bridge_slave_0: entered allmulticast mode [ 183.284701][ T5837] bridge_slave_0: entered promiscuous mode [ 183.289186][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.289321][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.290999][ T5837] bridge_slave_1: entered allmulticast mode [ 183.296970][ T5837] bridge_slave_1: entered promiscuous mode [ 183.485033][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.488468][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.633553][ T5837] team0: Port device team_slave_0 added [ 183.636350][ T5837] team0: Port device team_slave_1 added [ 183.772300][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.772314][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.772331][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.775536][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.775556][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.775574][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.177016][ T5837] hsr_slave_0: entered promiscuous mode [ 184.178195][ T5837] hsr_slave_1: entered promiscuous mode [ 184.550335][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 184.587670][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 184.603496][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 184.624898][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 184.761607][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.812178][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.831608][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.831764][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.855357][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.855636][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.083786][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.134680][ T5837] veth0_vlan: entered promiscuous mode [ 185.152548][ T5837] veth1_vlan: entered promiscuous mode [ 185.195052][ T5837] veth0_macvtap: entered promiscuous mode [ 185.198751][ T5837] veth1_macvtap: entered promiscuous mode [ 185.225926][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.242363][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.264233][ T1016] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.264296][ T1016] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.264329][ T1016] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.264361][ T1016] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.044514][ T1016] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.291999][ T1016] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.533480][ T1016] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.327702][ T1016] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.712929][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.712956][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.772701][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.772723][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.543865][ T1016] bridge_slave_1: left allmulticast mode [ 188.543969][ T1016] bridge_slave_1: left promiscuous mode [ 188.545612][ T1016] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.671955][ T1016] bridge_slave_0: left allmulticast mode [ 188.671984][ T1016] bridge_slave_0: left promiscuous mode [ 188.672226][ T1016] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.520457][ T1016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.580599][ T1016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.622287][ T1016] bond0 (unregistering): Released all slaves [ 191.029781][ T1016] hsr_slave_0: left promiscuous mode [ 191.054105][ T1016] hsr_slave_1: left promiscuous mode [ 191.055321][ T1016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.055382][ T1016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.111705][ T1016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.111741][ T1016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.189430][ T1016] veth1_macvtap: left promiscuous mode [ 191.191555][ T1016] veth0_macvtap: left promiscuous mode [ 191.191817][ T1016] veth1_vlan: left promiscuous mode [ 191.192075][ T1016] veth0_vlan: left promiscuous mode [ 193.340451][ T1016] team0 (unregistering): Port device team_slave_1 removed [ 193.542126][ T1016] team0 (unregistering): Port device team_slave_0 removed [ 196.263815][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 196.267497][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 196.270552][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 196.277405][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 196.281718][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/01/10 01:08:11 executed programs: 0 [ 199.068983][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.091047][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.092205][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.093509][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.094305][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.376413][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.376505][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.027841][ T5997] chnl_net:caif_netlink_parms(): no params data found [ 200.611664][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.611885][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.612028][ T5997] bridge_slave_0: entered allmulticast mode [ 200.614352][ T5997] bridge_slave_0: entered promiscuous mode [ 200.618670][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.618800][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.618906][ T5997] bridge_slave_1: entered allmulticast mode [ 200.633919][ T5997] bridge_slave_1: entered promiscuous mode [ 200.846170][ T5997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.848988][ T5997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.112599][ T5997] team0: Port device team_slave_0 added [ 201.132204][ T61] Bluetooth: hci0: command tx timeout [ 201.201834][ T5997] team0: Port device team_slave_1 added [ 201.450561][ T5997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.450575][ T5997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.450595][ T5997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.504624][ T5997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.504647][ T5997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.504666][ T5997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.740333][ T5997] hsr_slave_0: entered promiscuous mode [ 201.741788][ T5997] hsr_slave_1: entered promiscuous mode [ 203.217876][ T61] Bluetooth: hci0: command tx timeout [ 203.274865][ T5997] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 203.310515][ T5997] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 203.346774][ T5997] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 203.364674][ T5997] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 203.513412][ T5997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.543696][ T5997] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.557709][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.557837][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.589831][ T3177] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.589971][ T3177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.915265][ T5997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.986478][ T5997] veth0_vlan: entered promiscuous mode [ 204.004790][ T5997] veth1_vlan: entered promiscuous mode [ 204.064539][ T5997] veth0_macvtap: entered promiscuous mode [ 204.069350][ T5997] veth1_macvtap: entered promiscuous mode [ 204.113779][ T5997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.128104][ T5997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.151205][ T1016] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.154319][ T1016] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.154363][ T1016] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.154399][ T1016] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.410117][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.410140][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.477340][ T3509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.477362][ T3509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/10 01:08:16 executed programs: 2 [ 205.067257][ T6087] loop0: detected capacity change from 0 to 40427 [ 205.145229][ T6087] F2FS-fs (loop0): invalid crc value [ 205.290213][ T61] Bluetooth: hci0: command tx timeout [ 205.346588][ T6087] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 205.362728][ T6087] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 205.686282][ T38] audit: type=1800 audit(1768007297.958:2): pid=6087 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.17" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 207.369703][ T61] Bluetooth: hci0: command tx timeout [ 215.317574][ T6087] F2FS-fs (loop0): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 215.332269][ T6087] syz.0.17: attempt to access beyond end of device [ 215.332269][ T6087] loop0: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 215.332993][ T6087] syz.0.17: attempt to access beyond end of device [ 215.332993][ T6087] loop0: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 215.333124][ T6087] syz.0.17: attempt to access beyond end of device [ 215.333124][ T6087] loop0: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 215.333232][ T6087] syz.0.17: attempt to access beyond end of device [ 215.333232][ T6087] loop0: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 215.333340][ T6087] syz.0.17: attempt to access beyond end of device [ 215.333340][ T6087] loop0: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 215.333450][ T6087] syz.0.17: attempt to access beyond end of device [ 215.333450][ T6087] loop0: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 215.333558][ T6087] syz.0.17: attempt to access beyond end of device [ 215.333558][ T6087] loop0: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 215.333665][ T6087] syz.0.17: attempt to access beyond end of device [ 215.333665][ T6087] loop0: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 215.333773][ T6087] syz.0.17: attempt to access beyond end of device [ 215.333773][ T6087] loop0: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 215.333880][ T6087] syz.0.17: attempt to access beyond end of device [ 215.333880][ T6087] loop0: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 219.805587][ T5941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.808226][ T5941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.809116][ T5941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.839744][ T5941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.841433][ T5941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.226308][ T6148] chnl_net:caif_netlink_parms(): no params data found [ 220.342106][ T6087] bio_check_eod: 53291 callbacks suppressed [ 220.342122][ T6087] syz.0.17: attempt to access beyond end of device [ 220.342122][ T6087] loop0: rw=524288, sector=88200, nr_sectors = 8 limit=40427 [ 220.342202][ T6087] syz.0.17: attempt to access beyond end of device [ 220.342202][ T6087] loop0: rw=524288, sector=88208, nr_sectors = 8 limit=40427 [ 220.342297][ T6087] syz.0.17: attempt to access beyond end of device [ 220.342297][ T6087] loop0: rw=524288, sector=88216, nr_sectors = 8 limit=40427 [ 220.342372][ T6087] syz.0.17: attempt to access beyond end of device [ 220.342372][ T6087] loop0: rw=524288, sector=88224, nr_sectors = 8 limit=40427 [ 220.342446][ T6087] syz.0.17: attempt to access beyond end of device [ 220.342446][ T6087] loop0: rw=524288, sector=88232, nr_sectors = 8 limit=40427 [ 220.342521][ T6087] syz.0.17: attempt to access beyond end of device [ 220.342521][ T6087] loop0: rw=524288, sector=88240, nr_sectors = 8 limit=40427 [ 220.342595][ T6087] syz.0.17: attempt to access beyond end of device [ 220.342595][ T6087] loop0: rw=524288, sector=88248, nr_sectors = 8 limit=40427 [ 220.342669][ T6087] syz.0.17: attempt to access beyond end of device [ 220.342669][ T6087] loop0: rw=524288, sector=88256, nr_sectors = 8 limit=40427 [ 220.342743][ T6087] syz.0.17: attempt to access beyond end of device [ 220.342743][ T6087] loop0: rw=524288, sector=88264, nr_sectors = 8 limit=40427 [ 220.342817][ T6087] syz.0.17: attempt to access beyond end of device [ 220.342817][ T6087] loop0: rw=524288, sector=88272, nr_sectors = 8 limit=40427 [ 220.711821][ T6148] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.712076][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.712262][ T6148] bridge_slave_0: entered allmulticast mode [ 220.714982][ T6148] bridge_slave_0: entered promiscuous mode [ 220.719309][ T6148] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.722090][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.722579][ T6148] bridge_slave_1: entered allmulticast mode [ 220.731105][ T6148] bridge_slave_1: entered promiscuous mode [ 220.926587][ T6148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.940384][ T6148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.134037][ T6148] team0: Port device team_slave_0 added [ 221.137563][ T6148] team0: Port device team_slave_1 added [ 221.472629][ T6148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.472654][ T6148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.472683][ T6148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.475090][ T6148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.475104][ T6148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.475132][ T6148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.806647][ T6148] hsr_slave_0: entered promiscuous mode [ 221.808001][ T6148] hsr_slave_1: entered promiscuous mode [ 221.809200][ T6148] debugfs: 'hsr0' already exists in 'hsr' [ 221.809303][ T6148] Cannot create hsr debugfs directory [ 221.929599][ T61] Bluetooth: hci1: command tx timeout [ 222.304437][ T6148] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 222.412460][ T6148] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 222.467084][ T6148] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 222.504361][ T6148] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 222.674786][ T6148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.707311][ T6148] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.722717][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.722913][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.755463][ T1016] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.759708][ T1016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.097222][ T6148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.173262][ T6148] veth0_vlan: entered promiscuous mode [ 223.192765][ T6148] veth1_vlan: entered promiscuous mode [ 223.246673][ T6148] veth0_macvtap: entered promiscuous mode [ 223.262684][ T6148] veth1_macvtap: entered promiscuous mode [ 223.291898][ T6148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.312767][ T6148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.344346][ T3571] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.346428][ T3571] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.360274][ T3571] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.365627][ T3509] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.595291][ T3177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.595314][ T3177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.657362][ T3571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.657385][ T3571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/10 01:08:36 executed programs: 3 [ 224.009698][ T61] Bluetooth: hci1: command tx timeout [ 224.325796][ T6169] loop1: detected capacity change from 0 to 40427 [ 224.367832][ T6169] F2FS-fs (loop1): invalid crc value [ 224.563385][ T6169] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 224.565140][ T6169] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 224.834670][ T38] audit: type=1800 audit(1768007317.108:3): pid=6169 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.18" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 225.354484][ T6087] bio_check_eod: 35517 callbacks suppressed [ 225.354505][ T6087] syz.0.17: attempt to access beyond end of device [ 225.354505][ T6087] loop0: rw=524288, sector=89600, nr_sectors = 8 limit=40427 [ 225.354646][ T6087] syz.0.17: attempt to access beyond end of device [ 225.354646][ T6087] loop0: rw=524288, sector=89608, nr_sectors = 8 limit=40427 [ 225.354754][ T6087] syz.0.17: attempt to access beyond end of device [ 225.354754][ T6087] loop0: rw=524288, sector=89616, nr_sectors = 8 limit=40427 [ 225.354861][ T6087] syz.0.17: attempt to access beyond end of device [ 225.354861][ T6087] loop0: rw=524288, sector=89624, nr_sectors = 8 limit=40427 [ 225.354987][ T6087] syz.0.17: attempt to access beyond end of device [ 225.354987][ T6087] loop0: rw=524288, sector=89632, nr_sectors = 8 limit=40427 [ 225.355100][ T6087] syz.0.17: attempt to access beyond end of device [ 225.355100][ T6087] loop0: rw=524288, sector=89640, nr_sectors = 8 limit=40427 [ 225.355213][ T6087] syz.0.17: attempt to access beyond end of device [ 225.355213][ T6087] loop0: rw=524288, sector=89648, nr_sectors = 8 limit=40427 [ 225.355326][ T6087] syz.0.17: attempt to access beyond end of device [ 225.355326][ T6087] loop0: rw=524288, sector=89656, nr_sectors = 8 limit=40427 [ 225.355438][ T6087] syz.0.17: attempt to access beyond end of device [ 225.355438][ T6087] loop0: rw=524288, sector=89664, nr_sectors = 8 limit=40427 [ 225.355562][ T6087] syz.0.17: attempt to access beyond end of device [ 225.355562][ T6087] loop0: rw=524288, sector=89672, nr_sectors = 8 limit=40427 [ 226.089752][ T61] Bluetooth: hci1: command tx timeout [ 228.170988][ T61] Bluetooth: hci1: command tx timeout [ 230.363291][ T6087] bio_check_eod: 35618 callbacks suppressed [ 230.363315][ T6087] syz.0.17: attempt to access beyond end of device [ 230.363315][ T6087] loop0: rw=0, sector=87880, nr_sectors = 8 limit=40427 [ 230.363451][ T6087] syz.0.17: attempt to access beyond end of device [ 230.363451][ T6087] loop0: rw=0, sector=87888, nr_sectors = 8 limit=40427 [ 230.363579][ T6087] syz.0.17: attempt to access beyond end of device [ 230.363579][ T6087] loop0: rw=0, sector=87896, nr_sectors = 8 limit=40427 [ 230.363714][ T6087] syz.0.17: attempt to access beyond end of device [ 230.363714][ T6087] loop0: rw=0, sector=87904, nr_sectors = 8 limit=40427 [ 230.363840][ T6087] syz.0.17: attempt to access beyond end of device [ 230.363840][ T6087] loop0: rw=0, sector=87912, nr_sectors = 8 limit=40427 [ 230.363965][ T6087] syz.0.17: attempt to access beyond end of device [ 230.363965][ T6087] loop0: rw=0, sector=87920, nr_sectors = 8 limit=40427 [ 230.364121][ T6087] syz.0.17: attempt to access beyond end of device [ 230.364121][ T6087] loop0: rw=0, sector=87928, nr_sectors = 8 limit=40427 [ 230.364264][ T6087] syz.0.17: attempt to access beyond end of device [ 230.364264][ T6087] loop0: rw=0, sector=87936, nr_sectors = 8 limit=40427 [ 230.364390][ T6087] syz.0.17: attempt to access beyond end of device [ 230.364390][ T6087] loop0: rw=0, sector=87944, nr_sectors = 8 limit=40427 [ 230.364515][ T6087] syz.0.17: attempt to access beyond end of device [ 230.364515][ T6087] loop0: rw=0, sector=87952, nr_sectors = 8 limit=40427 [ 235.369631][ T6087] bio_check_eod: 35303 callbacks suppressed [ 235.369655][ T6087] syz.0.17: attempt to access beyond end of device [ 235.369655][ T6087] loop0: rw=0, sector=87568, nr_sectors = 8 limit=40427 [ 235.369785][ T6087] syz.0.17: attempt to access beyond end of device [ 235.369785][ T6087] loop0: rw=0, sector=87576, nr_sectors = 8 limit=40427 [ 235.369911][ T6087] syz.0.17: attempt to access beyond end of device [ 235.369911][ T6087] loop0: rw=0, sector=87584, nr_sectors = 8 limit=40427 [ 235.370036][ T6087] syz.0.17: attempt to access beyond end of device [ 235.370036][ T6087] loop0: rw=0, sector=87592, nr_sectors = 8 limit=40427 [ 235.370190][ T6087] syz.0.17: attempt to access beyond end of device [ 235.370190][ T6087] loop0: rw=0, sector=87600, nr_sectors = 8 limit=40427 [ 235.370346][ T6087] syz.0.17: attempt to access beyond end of device [ 235.370346][ T6087] loop0: rw=0, sector=87608, nr_sectors = 8 limit=40427 [ 235.370475][ T6087] syz.0.17: attempt to access beyond end of device [ 235.370475][ T6087] loop0: rw=0, sector=87616, nr_sectors = 8 limit=40427 [ 235.370605][ T6087] syz.0.17: attempt to access beyond end of device [ 235.370605][ T6087] loop0: rw=0, sector=87624, nr_sectors = 8 limit=40427 [ 235.370734][ T6087] syz.0.17: attempt to access beyond end of device [ 235.370734][ T6087] loop0: rw=0, sector=87632, nr_sectors = 8 limit=40427 [ 235.370863][ T6087] syz.0.17: attempt to access beyond end of device [ 235.370863][ T6087] loop0: rw=0, sector=87640, nr_sectors = 8 limit=40427 [ 239.015760][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.022832][ T5941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.025433][ T5941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.029318][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.045200][ T5941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.528525][ T6169] F2FS-fs (loop1): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 239.591648][ T6175] chnl_net:caif_netlink_parms(): no params data found [ 240.001696][ T6175] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.001928][ T6175] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.002116][ T6175] bridge_slave_0: entered allmulticast mode [ 240.004782][ T6175] bridge_slave_0: entered promiscuous mode [ 240.044236][ T6175] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.044445][ T6175] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.044654][ T6175] bridge_slave_1: entered allmulticast mode [ 240.047162][ T6175] bridge_slave_1: entered promiscuous mode [ 240.296878][ T6175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.318256][ T6175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.379541][ T6169] bio_check_eod: 35008 callbacks suppressed [ 240.379560][ T6169] syz.1.18: attempt to access beyond end of device [ 240.379560][ T6169] loop1: rw=524288, sector=87200, nr_sectors = 8 limit=40427 [ 240.379685][ T6169] syz.1.18: attempt to access beyond end of device [ 240.379685][ T6169] loop1: rw=524288, sector=87208, nr_sectors = 8 limit=40427 [ 240.379807][ T6169] syz.1.18: attempt to access beyond end of device [ 240.379807][ T6169] loop1: rw=524288, sector=87216, nr_sectors = 8 limit=40427 [ 240.379929][ T6169] syz.1.18: attempt to access beyond end of device [ 240.379929][ T6169] loop1: rw=524288, sector=87224, nr_sectors = 8 limit=40427 [ 240.380057][ T6169] syz.1.18: attempt to access beyond end of device [ 240.380057][ T6169] loop1: rw=524288, sector=87232, nr_sectors = 8 limit=40427 [ 240.380194][ T6169] syz.1.18: attempt to access beyond end of device [ 240.380194][ T6169] loop1: rw=524288, sector=87240, nr_sectors = 8 limit=40427 [ 240.380372][ T6169] syz.1.18: attempt to access beyond end of device [ 240.380372][ T6169] loop1: rw=524288, sector=87248, nr_sectors = 8 limit=40427 [ 240.380500][ T6169] syz.1.18: attempt to access beyond end of device [ 240.380500][ T6169] loop1: rw=524288, sector=87256, nr_sectors = 8 limit=40427 [ 240.380627][ T6169] syz.1.18: attempt to access beyond end of device [ 240.380627][ T6169] loop1: rw=524288, sector=87264, nr_sectors = 8 limit=40427 [ 240.380754][ T6169] syz.1.18: attempt to access beyond end of device [ 240.380754][ T6169] loop1: rw=524288, sector=87272, nr_sectors = 8 limit=40427 [ 240.745538][ T6175] team0: Port device team_slave_0 added [ 240.749261][ T6175] team0: Port device team_slave_1 added [ 241.004115][ T6175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.004133][ T6175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.004161][ T6175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.006490][ T6175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.006505][ T6175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.006533][ T6175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.129623][ T5116] Bluetooth: hci2: command tx timeout [ 241.341661][ T6175] hsr_slave_0: entered promiscuous mode [ 241.351691][ T6175] hsr_slave_1: entered promiscuous mode [ 241.363154][ T6175] debugfs: 'hsr0' already exists in 'hsr' [ 241.363183][ T6175] Cannot create hsr debugfs directory [ 242.302958][ T6175] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 242.335043][ T6175] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 242.367433][ T6175] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 242.408228][ T6175] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 242.581481][ T6175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.618617][ T6175] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.640469][ T3177] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.640714][ T3177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.677895][ T3177] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.678051][ T3177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.209726][ T5116] Bluetooth: hci2: command tx timeout [ 243.274148][ T6175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.418474][ T6175] veth0_vlan: entered promiscuous mode [ 243.446769][ T6175] veth1_vlan: entered promiscuous mode [ 243.553441][ T6175] veth0_macvtap: entered promiscuous mode [ 243.575054][ T6175] veth1_macvtap: entered promiscuous mode [ 243.642757][ T6175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.677259][ T6175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.704892][ T4520] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.704951][ T4520] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.704989][ T4520] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.705026][ T4520] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.040906][ T3571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.040930][ T3571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.128145][ T4520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.128167][ T4520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/10 01:08:56 executed programs: 4 [ 245.304745][ T5116] Bluetooth: hci2: command tx timeout [ 245.335130][ T6197] loop2: detected capacity change from 0 to 40427 [ 245.392039][ T6197] F2FS-fs (loop2): invalid crc value [ 245.392232][ T6087] bio_check_eod: 46706 callbacks suppressed [ 245.392246][ T6087] syz.0.17: attempt to access beyond end of device [ 245.392246][ T6087] loop0: rw=524288, sector=87448, nr_sectors = 8 limit=40427 [ 245.392372][ T6087] syz.0.17: attempt to access beyond end of device [ 245.392372][ T6087] loop0: rw=524288, sector=87456, nr_sectors = 8 limit=40427 [ 245.392482][ T6087] syz.0.17: attempt to access beyond end of device [ 245.392482][ T6087] loop0: rw=524288, sector=87464, nr_sectors = 8 limit=40427 [ 245.392588][ T6087] syz.0.17: attempt to access beyond end of device [ 245.392588][ T6087] loop0: rw=524288, sector=87472, nr_sectors = 8 limit=40427 [ 245.392702][ T6087] syz.0.17: attempt to access beyond end of device [ 245.392702][ T6087] loop0: rw=524288, sector=87480, nr_sectors = 8 limit=40427 [ 245.392810][ T6087] syz.0.17: attempt to access beyond end of device [ 245.392810][ T6087] loop0: rw=524288, sector=87488, nr_sectors = 8 limit=40427 [ 245.393278][ T6087] syz.0.17: attempt to access beyond end of device [ 245.393278][ T6087] loop0: rw=524288, sector=87496, nr_sectors = 8 limit=40427 [ 245.393398][ T6087] syz.0.17: attempt to access beyond end of device [ 245.393398][ T6087] loop0: rw=524288, sector=87504, nr_sectors = 8 limit=40427 [ 245.393536][ T6087] syz.0.17: attempt to access beyond end of device [ 245.393536][ T6087] loop0: rw=524288, sector=87512, nr_sectors = 8 limit=40427 [ 245.393670][ T6087] syz.0.17: attempt to access beyond end of device [ 245.393670][ T6087] loop0: rw=524288, sector=87520, nr_sectors = 8 limit=40427 [ 245.898805][ T6197] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 245.943238][ T6197] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 246.459646][ T38] audit: type=1800 audit(1768007338.708:4): pid=6197 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.19" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 247.369572][ T5116] Bluetooth: hci2: command tx timeout [ 250.404339][ T6087] bio_check_eod: 47386 callbacks suppressed [ 250.404363][ T6087] syz.0.17: attempt to access beyond end of device [ 250.404363][ T6087] loop0: rw=524288, sector=89816, nr_sectors = 8 limit=40427 [ 250.404505][ T6087] syz.0.17: attempt to access beyond end of device [ 250.404505][ T6087] loop0: rw=524288, sector=89824, nr_sectors = 8 limit=40427 [ 250.404627][ T6087] syz.0.17: attempt to access beyond end of device [ 250.404627][ T6087] loop0: rw=524288, sector=89832, nr_sectors = 8 limit=40427 [ 250.404760][ T6087] syz.0.17: attempt to access beyond end of device [ 250.404760][ T6087] loop0: rw=524288, sector=89840, nr_sectors = 8 limit=40427 [ 250.404874][ T6087] syz.0.17: attempt to access beyond end of device [ 250.404874][ T6087] loop0: rw=524288, sector=89848, nr_sectors = 8 limit=40427 [ 250.404993][ T6087] syz.0.17: attempt to access beyond end of device [ 250.404993][ T6087] loop0: rw=524288, sector=89856, nr_sectors = 8 limit=40427 [ 250.405138][ T6087] syz.0.17: attempt to access beyond end of device [ 250.405138][ T6087] loop0: rw=524288, sector=89864, nr_sectors = 8 limit=40427 [ 250.405251][ T6087] syz.0.17: attempt to access beyond end of device [ 250.405251][ T6087] loop0: rw=524288, sector=89872, nr_sectors = 8 limit=40427 [ 250.405364][ T6087] syz.0.17: attempt to access beyond end of device [ 250.405364][ T6087] loop0: rw=524288, sector=89880, nr_sectors = 8 limit=40427 [ 250.405477][ T6087] syz.0.17: attempt to access beyond end of device [ 250.405477][ T6087] loop0: rw=524288, sector=89888, nr_sectors = 8 limit=40427 [ 255.409655][ T6087] bio_check_eod: 46141 callbacks suppressed [ 255.409678][ T6087] syz.0.17: attempt to access beyond end of device [ 255.409678][ T6087] loop0: rw=524288, sector=89800, nr_sectors = 8 limit=40427 [ 255.409805][ T6087] syz.0.17: attempt to access beyond end of device [ 255.409805][ T6087] loop0: rw=524288, sector=89808, nr_sectors = 8 limit=40427 [ 255.409956][ T6087] syz.0.17: attempt to access beyond end of device [ 255.409956][ T6087] loop0: rw=524288, sector=89816, nr_sectors = 8 limit=40427 [ 255.410078][ T6087] syz.0.17: attempt to access beyond end of device [ 255.410078][ T6087] loop0: rw=524288, sector=89824, nr_sectors = 8 limit=40427 [ 255.410223][ T6087] syz.0.17: attempt to access beyond end of device [ 255.410223][ T6087] loop0: rw=524288, sector=89832, nr_sectors = 8 limit=40427 [ 255.410349][ T6087] syz.0.17: attempt to access beyond end of device [ 255.410349][ T6087] loop0: rw=524288, sector=89840, nr_sectors = 8 limit=40427 [ 255.410476][ T6087] syz.0.17: attempt to access beyond end of device [ 255.410476][ T6087] loop0: rw=524288, sector=89848, nr_sectors = 8 limit=40427 [ 255.410636][ T6087] syz.0.17: attempt to access beyond end of device [ 255.410636][ T6087] loop0: rw=524288, sector=89856, nr_sectors = 8 limit=40427 [ 255.410763][ T6087] syz.0.17: attempt to access beyond end of device [ 255.410763][ T6087] loop0: rw=524288, sector=89864, nr_sectors = 8 limit=40427 [ 255.410895][ T6087] syz.0.17: attempt to access beyond end of device [ 255.410895][ T6087] loop0: rw=524288, sector=89872, nr_sectors = 8 limit=40427 [ 259.824777][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 259.829076][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 259.851323][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 259.852686][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 259.853487][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 260.422453][ T6087] bio_check_eod: 44496 callbacks suppressed [ 260.422474][ T6087] syz.0.17: attempt to access beyond end of device [ 260.422474][ T6087] loop0: rw=0, sector=89248, nr_sectors = 8 limit=40427 [ 260.422610][ T6087] syz.0.17: attempt to access beyond end of device [ 260.422610][ T6087] loop0: rw=0, sector=89256, nr_sectors = 8 limit=40427 [ 260.422737][ T6087] syz.0.17: attempt to access beyond end of device [ 260.422737][ T6087] loop0: rw=0, sector=89264, nr_sectors = 8 limit=40427 [ 260.422869][ T6087] syz.0.17: attempt to access beyond end of device [ 260.422869][ T6087] loop0: rw=0, sector=89272, nr_sectors = 8 limit=40427 [ 260.422984][ T6087] syz.0.17: attempt to access beyond end of device [ 260.422984][ T6087] loop0: rw=0, sector=89280, nr_sectors = 8 limit=40427 [ 260.423130][ T6087] syz.0.17: attempt to access beyond end of device [ 260.423130][ T6087] loop0: rw=0, sector=89288, nr_sectors = 8 limit=40427 [ 260.423291][ T6087] syz.0.17: attempt to access beyond end of device [ 260.423291][ T6087] loop0: rw=0, sector=89296, nr_sectors = 8 limit=40427 [ 260.423425][ T6087] syz.0.17: attempt to access beyond end of device [ 260.423425][ T6087] loop0: rw=0, sector=89304, nr_sectors = 8 limit=40427 [ 260.423553][ T6087] syz.0.17: attempt to access beyond end of device [ 260.423553][ T6087] loop0: rw=0, sector=89312, nr_sectors = 8 limit=40427 [ 260.423680][ T6087] syz.0.17: attempt to access beyond end of device [ 260.423680][ T6087] loop0: rw=0, sector=89320, nr_sectors = 8 limit=40427 [ 260.628915][ T6209] chnl_net:caif_netlink_parms(): no params data found [ 260.821245][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.821331][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.277188][ T6209] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.277317][ T6209] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.277583][ T6209] bridge_slave_0: entered allmulticast mode [ 261.312003][ T6209] bridge_slave_0: entered promiscuous mode [ 261.315529][ T6209] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.315683][ T6209] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.315860][ T6209] bridge_slave_1: entered allmulticast mode [ 261.318430][ T6209] bridge_slave_1: entered promiscuous mode [ 261.645031][ T6209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.649191][ T6209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.929611][ T5116] Bluetooth: hci3: command tx timeout [ 261.962126][ T6209] team0: Port device team_slave_0 added [ 261.981338][ T6209] team0: Port device team_slave_1 added [ 262.302802][ T6209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.302818][ T6209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.302844][ T6209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.305200][ T6209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.305213][ T6209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.305237][ T6209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.899752][ T6209] hsr_slave_0: entered promiscuous mode [ 262.901197][ T6209] hsr_slave_1: entered promiscuous mode [ 262.902134][ T6209] debugfs: 'hsr0' already exists in 'hsr' [ 262.902156][ T6209] Cannot create hsr debugfs directory [ 263.886362][ T6209] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 263.951622][ T6209] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 263.985163][ T6209] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 264.013551][ T5116] Bluetooth: hci3: command tx timeout [ 264.043092][ T6209] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 264.400064][ T6209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.469347][ T6209] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.523095][ T4520] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.523319][ T4520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.555789][ T4520] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.555932][ T4520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.313244][ T6209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.404363][ T6209] veth0_vlan: entered promiscuous mode [ 265.430419][ T6169] bio_check_eod: 35360 callbacks suppressed [ 265.430440][ T6169] syz.1.18: attempt to access beyond end of device [ 265.430440][ T6169] loop1: rw=0, sector=86264, nr_sectors = 8 limit=40427 [ 265.430572][ T6169] syz.1.18: attempt to access beyond end of device [ 265.430572][ T6169] loop1: rw=0, sector=86272, nr_sectors = 8 limit=40427 [ 265.430698][ T6169] syz.1.18: attempt to access beyond end of device [ 265.430698][ T6169] loop1: rw=0, sector=86280, nr_sectors = 8 limit=40427 [ 265.430824][ T6169] syz.1.18: attempt to access beyond end of device [ 265.430824][ T6169] loop1: rw=0, sector=86288, nr_sectors = 8 limit=40427 [ 265.430953][ T6169] syz.1.18: attempt to access beyond end of device [ 265.430953][ T6169] loop1: rw=0, sector=86296, nr_sectors = 8 limit=40427 [ 265.431083][ T6169] syz.1.18: attempt to access beyond end of device [ 265.431083][ T6169] loop1: rw=0, sector=86304, nr_sectors = 8 limit=40427 [ 265.431191][ T6169] syz.1.18: attempt to access beyond end of device [ 265.431191][ T6169] loop1: rw=0, sector=86312, nr_sectors = 8 limit=40427 [ 265.431326][ T6169] syz.1.18: attempt to access beyond end of device [ 265.431326][ T6169] loop1: rw=0, sector=86320, nr_sectors = 8 limit=40427 [ 265.431453][ T6169] syz.1.18: attempt to access beyond end of device [ 265.431453][ T6169] loop1: rw=0, sector=86328, nr_sectors = 8 limit=40427 [ 265.431589][ T6169] syz.1.18: attempt to access beyond end of device [ 265.431589][ T6169] loop1: rw=0, sector=86336, nr_sectors = 8 limit=40427 [ 265.436712][ T6209] veth1_vlan: entered promiscuous mode [ 265.730557][ T6209] veth0_macvtap: entered promiscuous mode [ 265.760926][ T6209] veth1_macvtap: entered promiscuous mode [ 265.846821][ T6209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.884658][ T6209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.903806][ T3571] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.904040][ T3571] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.944151][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.952349][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.089902][ T5116] Bluetooth: hci3: command tx timeout [ 266.335248][ T3571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.335271][ T3571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.412811][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.412832][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/10 01:09:19 executed programs: 5 [ 267.949047][ T6232] loop3: detected capacity change from 0 to 40427 [ 267.998537][ T6232] F2FS-fs (loop3): invalid crc value [ 268.127068][ T6232] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 268.169566][ T5116] Bluetooth: hci3: command tx timeout [ 268.169770][ T6232] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 268.813980][ T38] audit: type=1800 audit(1768007361.078:5): pid=6232 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.20" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 270.444156][ T6087] bio_check_eod: 32945 callbacks suppressed [ 270.444181][ T6087] syz.0.17: attempt to access beyond end of device [ 270.444181][ T6087] loop0: rw=0, sector=87896, nr_sectors = 8 limit=40427 [ 270.444319][ T6087] syz.0.17: attempt to access beyond end of device [ 270.444319][ T6087] loop0: rw=0, sector=87904, nr_sectors = 8 limit=40427 [ 270.444446][ T6087] syz.0.17: attempt to access beyond end of device [ 270.444446][ T6087] loop0: rw=0, sector=87912, nr_sectors = 8 limit=40427 [ 270.444572][ T6087] syz.0.17: attempt to access beyond end of device [ 270.444572][ T6087] loop0: rw=0, sector=87920, nr_sectors = 8 limit=40427 [ 270.444702][ T6087] syz.0.17: attempt to access beyond end of device [ 270.444702][ T6087] loop0: rw=0, sector=87928, nr_sectors = 8 limit=40427 [ 270.444841][ T6087] syz.0.17: attempt to access beyond end of device [ 270.444841][ T6087] loop0: rw=0, sector=87936, nr_sectors = 8 limit=40427 [ 270.444966][ T6087] syz.0.17: attempt to access beyond end of device [ 270.444966][ T6087] loop0: rw=0, sector=87944, nr_sectors = 8 limit=40427 [ 270.445105][ T6087] syz.0.17: attempt to access beyond end of device [ 270.445105][ T6087] loop0: rw=0, sector=87952, nr_sectors = 8 limit=40427 [ 270.445230][ T6087] syz.0.17: attempt to access beyond end of device [ 270.445230][ T6087] loop0: rw=0, sector=87960, nr_sectors = 8 limit=40427 [ 270.445355][ T6087] syz.0.17: attempt to access beyond end of device [ 270.445355][ T6087] loop0: rw=0, sector=87968, nr_sectors = 8 limit=40427 [ 275.028103][ T6197] F2FS-fs (loop2): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 275.449612][ T6087] bio_check_eod: 36046 callbacks suppressed [ 275.449633][ T6087] syz.0.17: attempt to access beyond end of device [ 275.449633][ T6087] loop0: rw=524288, sector=89056, nr_sectors = 8 limit=40427 [ 275.449759][ T6087] syz.0.17: attempt to access beyond end of device [ 275.449759][ T6087] loop0: rw=524288, sector=89064, nr_sectors = 8 limit=40427 [ 275.449883][ T6087] syz.0.17: attempt to access beyond end of device [ 275.449883][ T6087] loop0: rw=524288, sector=89072, nr_sectors = 8 limit=40427 [ 275.449997][ T6087] syz.0.17: attempt to access beyond end of device [ 275.449997][ T6087] loop0: rw=524288, sector=89080, nr_sectors = 8 limit=40427 [ 275.450111][ T6087] syz.0.17: attempt to access beyond end of device [ 275.450111][ T6087] loop0: rw=524288, sector=89088, nr_sectors = 8 limit=40427 [ 275.450249][ T6087] syz.0.17: attempt to access beyond end of device [ 275.450249][ T6087] loop0: rw=524288, sector=89096, nr_sectors = 8 limit=40427 [ 275.450376][ T6087] syz.0.17: attempt to access beyond end of device [ 275.450376][ T6087] loop0: rw=524288, sector=89104, nr_sectors = 8 limit=40427 [ 275.450502][ T6087] syz.0.17: attempt to access beyond end of device [ 275.450502][ T6087] loop0: rw=524288, sector=89112, nr_sectors = 8 limit=40427 [ 275.450625][ T6087] syz.0.17: attempt to access beyond end of device [ 275.450625][ T6087] loop0: rw=524288, sector=89120, nr_sectors = 8 limit=40427 [ 275.450750][ T6087] syz.0.17: attempt to access beyond end of device [ 275.450750][ T6087] loop0: rw=524288, sector=89128, nr_sectors = 8 limit=40427 [ 280.460010][ T6087] bio_check_eod: 50828 callbacks suppressed [ 280.460032][ T6087] syz.0.17: attempt to access beyond end of device [ 280.460032][ T6087] loop0: rw=524288, sector=86464, nr_sectors = 8 limit=40427 [ 280.460153][ T6087] syz.0.17: attempt to access beyond end of device [ 280.460153][ T6087] loop0: rw=524288, sector=86472, nr_sectors = 8 limit=40427 [ 280.460297][ T6087] syz.0.17: attempt to access beyond end of device [ 280.460297][ T6087] loop0: rw=524288, sector=86480, nr_sectors = 8 limit=40427 [ 280.460425][ T6087] syz.0.17: attempt to access beyond end of device [ 280.460425][ T6087] loop0: rw=524288, sector=86488, nr_sectors = 8 limit=40427 [ 280.460552][ T6087] syz.0.17: attempt to access beyond end of device [ 280.460552][ T6087] loop0: rw=524288, sector=86496, nr_sectors = 8 limit=40427 [ 280.460708][ T6087] syz.0.17: attempt to access beyond end of device [ 280.460708][ T6087] loop0: rw=524288, sector=86504, nr_sectors = 8 limit=40427 [ 280.460836][ T6087] syz.0.17: attempt to access beyond end of device [ 280.460836][ T6087] loop0: rw=524288, sector=86512, nr_sectors = 8 limit=40427 [ 280.460967][ T6087] syz.0.17: attempt to access beyond end of device [ 280.460967][ T6087] loop0: rw=524288, sector=86520, nr_sectors = 8 limit=40427 [ 280.461094][ T6087] syz.0.17: attempt to access beyond end of device [ 280.461094][ T6087] loop0: rw=524288, sector=86528, nr_sectors = 8 limit=40427 [ 280.461221][ T6087] syz.0.17: attempt to access beyond end of device [ 280.461221][ T6087] loop0: rw=524288, sector=86536, nr_sectors = 8 limit=40427 [ 282.120585][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 282.127263][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.128293][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.150683][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.151563][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 283.258123][ T6238] chnl_net:caif_netlink_parms(): no params data found [ 284.032275][ T6238] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.047219][ T6238] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.047474][ T6238] bridge_slave_0: entered allmulticast mode [ 284.076307][ T6238] bridge_slave_0: entered promiscuous mode [ 284.086420][ T6238] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.086665][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.086874][ T6238] bridge_slave_1: entered allmulticast mode [ 284.110387][ T6238] bridge_slave_1: entered promiscuous mode [ 284.249648][ T5116] Bluetooth: hci4: command tx timeout [ 284.520793][ T6238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.525211][ T6238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.894325][ T6238] team0: Port device team_slave_0 added [ 284.897667][ T6238] team0: Port device team_slave_1 added [ 285.471305][ T6197] bio_check_eod: 41769 callbacks suppressed [ 285.471328][ T6197] syz.2.19: attempt to access beyond end of device [ 285.471328][ T6197] loop2: rw=0, sector=88240, nr_sectors = 8 limit=40427 [ 285.471491][ T6197] syz.2.19: attempt to access beyond end of device [ 285.471491][ T6197] loop2: rw=0, sector=88248, nr_sectors = 8 limit=40427 [ 285.471619][ T6197] syz.2.19: attempt to access beyond end of device [ 285.471619][ T6197] loop2: rw=0, sector=88256, nr_sectors = 8 limit=40427 [ 285.471773][ T6197] syz.2.19: attempt to access beyond end of device [ 285.471773][ T6197] loop2: rw=0, sector=88264, nr_sectors = 8 limit=40427 [ 285.471904][ T6197] syz.2.19: attempt to access beyond end of device [ 285.471904][ T6197] loop2: rw=0, sector=88272, nr_sectors = 8 limit=40427 [ 285.472034][ T6197] syz.2.19: attempt to access beyond end of device [ 285.472034][ T6197] loop2: rw=0, sector=88280, nr_sectors = 8 limit=40427 [ 285.472162][ T6197] syz.2.19: attempt to access beyond end of device [ 285.472162][ T6197] loop2: rw=0, sector=88288, nr_sectors = 8 limit=40427 [ 285.472292][ T6197] syz.2.19: attempt to access beyond end of device [ 285.472292][ T6197] loop2: rw=0, sector=88296, nr_sectors = 8 limit=40427 [ 285.472422][ T6197] syz.2.19: attempt to access beyond end of device [ 285.472422][ T6197] loop2: rw=0, sector=88304, nr_sectors = 8 limit=40427 [ 285.472551][ T6197] syz.2.19: attempt to access beyond end of device [ 285.472551][ T6197] loop2: rw=0, sector=88312, nr_sectors = 8 limit=40427 [ 285.626887][ T6238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.626905][ T6238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.626932][ T6238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.629145][ T6238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.629158][ T6238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 285.629185][ T6238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.091815][ T6238] hsr_slave_0: entered promiscuous mode [ 286.093084][ T6238] hsr_slave_1: entered promiscuous mode [ 286.093958][ T6238] debugfs: 'hsr0' already exists in 'hsr' [ 286.093982][ T6238] Cannot create hsr debugfs directory [ 286.329608][ T5116] Bluetooth: hci4: command tx timeout [ 287.348253][ T6238] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 287.416814][ T6238] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 287.506077][ T6238] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 287.635269][ T6238] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 288.146569][ T6238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.238882][ T6238] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.281105][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.281326][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.354939][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.355164][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.409780][ T5116] Bluetooth: hci4: command tx timeout [ 288.557528][ T6238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.160245][ T6238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.065670][ T6238] veth0_vlan: entered promiscuous mode [ 290.095341][ T6238] veth1_vlan: entered promiscuous mode [ 290.284718][ T6238] veth0_macvtap: entered promiscuous mode [ 290.317758][ T6238] veth1_macvtap: entered promiscuous mode [ 290.424442][ T6238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.481747][ T6197] bio_check_eod: 39511 callbacks suppressed [ 290.481768][ T6197] syz.2.19: attempt to access beyond end of device [ 290.481768][ T6197] loop2: rw=524288, sector=87576, nr_sectors = 8 limit=40427 [ 290.481907][ T6197] syz.2.19: attempt to access beyond end of device [ 290.481907][ T6197] loop2: rw=524288, sector=87584, nr_sectors = 8 limit=40427 [ 290.482020][ T6197] syz.2.19: attempt to access beyond end of device [ 290.482020][ T6197] loop2: rw=524288, sector=87592, nr_sectors = 8 limit=40427 [ 290.482132][ T6197] syz.2.19: attempt to access beyond end of device [ 290.482132][ T6197] loop2: rw=524288, sector=87600, nr_sectors = 8 limit=40427 [ 290.482285][ T6197] syz.2.19: attempt to access beyond end of device [ 290.482285][ T6197] loop2: rw=524288, sector=87608, nr_sectors = 8 limit=40427 [ 290.482411][ T6197] syz.2.19: attempt to access beyond end of device [ 290.482411][ T6197] loop2: rw=524288, sector=87616, nr_sectors = 8 limit=40427 [ 290.482526][ T6197] syz.2.19: attempt to access beyond end of device [ 290.482526][ T6197] loop2: rw=524288, sector=87624, nr_sectors = 8 limit=40427 [ 290.482645][ T6197] syz.2.19: attempt to access beyond end of device [ 290.482645][ T6197] loop2: rw=524288, sector=87632, nr_sectors = 8 limit=40427 [ 290.482784][ T6197] syz.2.19: attempt to access beyond end of device [ 290.482784][ T6197] loop2: rw=524288, sector=87640, nr_sectors = 8 limit=40427 [ 290.482903][ T6197] syz.2.19: attempt to access beyond end of device [ 290.482903][ T6197] loop2: rw=524288, sector=87648, nr_sectors = 8 limit=40427 [ 290.489995][ T5116] Bluetooth: hci4: command tx timeout [ 290.543919][ T6238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.723735][ T3616] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.740414][ T3616] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.740465][ T3616] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.740503][ T3616] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.118668][ T4520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.118691][ T4520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.264054][ T3177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.264077][ T3177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/10 01:09:43 executed programs: 6 [ 293.201340][ T6267] loop4: detected capacity change from 0 to 40427 [ 293.300336][ T6267] F2FS-fs (loop4): invalid crc value [ 293.742641][ T6267] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 293.759620][ T6267] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 294.537821][ T38] audit: type=1800 audit(1768007386.808:6): pid=6267 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.21" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 295.492598][ T6087] bio_check_eod: 40319 callbacks suppressed [ 295.492621][ T6087] syz.0.17: attempt to access beyond end of device [ 295.492621][ T6087] loop0: rw=0, sector=88312, nr_sectors = 8 limit=40427 [ 295.492761][ T6087] syz.0.17: attempt to access beyond end of device [ 295.492761][ T6087] loop0: rw=0, sector=88320, nr_sectors = 8 limit=40427 [ 295.492888][ T6087] syz.0.17: attempt to access beyond end of device [ 295.492888][ T6087] loop0: rw=0, sector=88328, nr_sectors = 8 limit=40427 [ 295.492966][ T6197] syz.2.19: attempt to access beyond end of device [ 295.492966][ T6197] loop2: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 295.493009][ T6087] syz.0.17: attempt to access beyond end of device [ 295.493009][ T6087] loop0: rw=0, sector=88336, nr_sectors = 8 limit=40427 [ 295.493100][ T6197] syz.2.19: attempt to access beyond end of device [ 295.493100][ T6197] loop2: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 295.493136][ T6087] syz.0.17: attempt to access beyond end of device [ 295.493136][ T6087] loop0: rw=0, sector=88344, nr_sectors = 8 limit=40427 [ 295.493224][ T6197] syz.2.19: attempt to access beyond end of device [ 295.493224][ T6197] loop2: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 295.493273][ T6087] syz.0.17: attempt to access beyond end of device [ 295.493273][ T6087] loop0: rw=0, sector=88352, nr_sectors = 8 limit=40427 [ 295.493349][ T6197] syz.2.19: attempt to access beyond end of device [ 295.493349][ T6197] loop2: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 300.499578][ T6197] bio_check_eod: 41442 callbacks suppressed [ 300.499600][ T6197] syz.2.19: attempt to access beyond end of device [ 300.499600][ T6197] loop2: rw=524288, sector=87304, nr_sectors = 8 limit=40427 [ 300.499726][ T6197] syz.2.19: attempt to access beyond end of device [ 300.499726][ T6197] loop2: rw=524288, sector=87312, nr_sectors = 8 limit=40427 [ 300.499849][ T6197] syz.2.19: attempt to access beyond end of device [ 300.499849][ T6197] loop2: rw=524288, sector=87320, nr_sectors = 8 limit=40427 [ 300.499971][ T6197] syz.2.19: attempt to access beyond end of device [ 300.499971][ T6197] loop2: rw=524288, sector=87328, nr_sectors = 8 limit=40427 [ 300.500093][ T6197] syz.2.19: attempt to access beyond end of device [ 300.500093][ T6197] loop2: rw=524288, sector=87336, nr_sectors = 8 limit=40427 [ 300.500221][ T6197] syz.2.19: attempt to access beyond end of device [ 300.500221][ T6197] loop2: rw=524288, sector=87344, nr_sectors = 8 limit=40427 [ 300.500372][ T6197] syz.2.19: attempt to access beyond end of device [ 300.500372][ T6197] loop2: rw=524288, sector=87352, nr_sectors = 8 limit=40427 [ 300.500499][ T6197] syz.2.19: attempt to access beyond end of device [ 300.500499][ T6197] loop2: rw=524288, sector=87360, nr_sectors = 8 limit=40427 [ 300.500623][ T6197] syz.2.19: attempt to access beyond end of device [ 300.500623][ T6197] loop2: rw=524288, sector=87368, nr_sectors = 8 limit=40427 [ 300.500780][ T6197] syz.2.19: attempt to access beyond end of device [ 300.500780][ T6197] loop2: rw=524288, sector=87376, nr_sectors = 8 limit=40427 [ 305.511088][ T6087] bio_check_eod: 43264 callbacks suppressed [ 305.511111][ T6087] syz.0.17: attempt to access beyond end of device [ 305.511111][ T6087] loop0: rw=0, sector=86472, nr_sectors = 8 limit=40427 [ 305.511247][ T6087] syz.0.17: attempt to access beyond end of device [ 305.511247][ T6087] loop0: rw=0, sector=86480, nr_sectors = 8 limit=40427 [ 305.511379][ T6087] syz.0.17: attempt to access beyond end of device [ 305.511379][ T6087] loop0: rw=0, sector=86488, nr_sectors = 8 limit=40427 [ 305.511552][ T6087] syz.0.17: attempt to access beyond end of device [ 305.511552][ T6087] loop0: rw=0, sector=86496, nr_sectors = 8 limit=40427 [ 305.511670][ T6087] syz.0.17: attempt to access beyond end of device [ 305.511670][ T6087] loop0: rw=0, sector=86504, nr_sectors = 8 limit=40427 [ 305.511787][ T6087] syz.0.17: attempt to access beyond end of device [ 305.511787][ T6087] loop0: rw=0, sector=86512, nr_sectors = 8 limit=40427 [ 305.511909][ T6087] syz.0.17: attempt to access beyond end of device [ 305.511909][ T6087] loop0: rw=0, sector=86520, nr_sectors = 8 limit=40427 [ 305.512027][ T6087] syz.0.17: attempt to access beyond end of device [ 305.512027][ T6087] loop0: rw=0, sector=86528, nr_sectors = 8 limit=40427 [ 305.512144][ T6087] syz.0.17: attempt to access beyond end of device [ 305.512144][ T6087] loop0: rw=0, sector=86536, nr_sectors = 8 limit=40427 [ 305.512261][ T6087] syz.0.17: attempt to access beyond end of device [ 305.512261][ T6087] loop0: rw=0, sector=86544, nr_sectors = 8 limit=40427 [ 306.477419][ T6232] F2FS-fs (loop3): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 306.866526][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 306.873450][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 306.874444][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 306.875719][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 306.877174][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 308.386346][ T6277] chnl_net:caif_netlink_parms(): no params data found [ 308.969659][ T5116] Bluetooth: hci5: command tx timeout [ 309.311743][ T6277] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.330345][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.330595][ T6277] bridge_slave_0: entered allmulticast mode [ 309.333785][ T6277] bridge_slave_0: entered promiscuous mode [ 309.381382][ T6277] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.389853][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.390545][ T6277] bridge_slave_1: entered allmulticast mode [ 309.426583][ T6277] bridge_slave_1: entered promiscuous mode [ 310.003503][ T6277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.007624][ T6277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.525276][ T6197] bio_check_eod: 41708 callbacks suppressed [ 310.525300][ T6197] syz.2.19: attempt to access beyond end of device [ 310.525300][ T6197] loop2: rw=524288, sector=87320, nr_sectors = 8 limit=40427 [ 310.525421][ T6197] syz.2.19: attempt to access beyond end of device [ 310.525421][ T6197] loop2: rw=524288, sector=87328, nr_sectors = 8 limit=40427 [ 310.525566][ T6197] syz.2.19: attempt to access beyond end of device [ 310.525566][ T6197] loop2: rw=524288, sector=87336, nr_sectors = 8 limit=40427 [ 310.525680][ T6197] syz.2.19: attempt to access beyond end of device [ 310.525680][ T6197] loop2: rw=524288, sector=87344, nr_sectors = 8 limit=40427 [ 310.525800][ T6197] syz.2.19: attempt to access beyond end of device [ 310.525800][ T6197] loop2: rw=524288, sector=87352, nr_sectors = 8 limit=40427 [ 310.525913][ T6197] syz.2.19: attempt to access beyond end of device [ 310.525913][ T6197] loop2: rw=524288, sector=87360, nr_sectors = 8 limit=40427 [ 310.526027][ T6197] syz.2.19: attempt to access beyond end of device [ 310.526027][ T6197] loop2: rw=524288, sector=87368, nr_sectors = 8 limit=40427 [ 310.526140][ T6197] syz.2.19: attempt to access beyond end of device [ 310.526140][ T6197] loop2: rw=524288, sector=87376, nr_sectors = 8 limit=40427 [ 310.526253][ T6197] syz.2.19: attempt to access beyond end of device [ 310.526253][ T6197] loop2: rw=524288, sector=87384, nr_sectors = 8 limit=40427 [ 310.526367][ T6197] syz.2.19: attempt to access beyond end of device [ 310.526367][ T6197] loop2: rw=524288, sector=87392, nr_sectors = 8 limit=40427 [ 311.021801][ T6277] team0: Port device team_slave_0 added [ 311.025512][ T6277] team0: Port device team_slave_1 added [ 311.049549][ T5116] Bluetooth: hci5: command tx timeout [ 311.580458][ T6277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.580478][ T6277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.580507][ T6277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.583060][ T6277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.583075][ T6277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.583102][ T6277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.313131][ T6277] hsr_slave_0: entered promiscuous mode [ 312.336145][ T6277] hsr_slave_1: entered promiscuous mode [ 312.337100][ T6277] debugfs: 'hsr0' already exists in 'hsr' [ 312.337123][ T6277] Cannot create hsr debugfs directory [ 313.139537][ T5116] Bluetooth: hci5: command tx timeout [ 314.292883][ T6277] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 314.403118][ T6277] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 314.531525][ T6277] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 314.656277][ T6277] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 315.214918][ T5116] Bluetooth: hci5: command tx timeout [ 315.283976][ T6277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.410866][ T6277] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.530261][ T6169] bio_check_eod: 47766 callbacks suppressed [ 315.530283][ T6169] syz.1.18: attempt to access beyond end of device [ 315.530283][ T6169] loop1: rw=0, sector=88368, nr_sectors = 8 limit=40427 [ 315.530419][ T6169] syz.1.18: attempt to access beyond end of device [ 315.530419][ T6169] loop1: rw=0, sector=88376, nr_sectors = 8 limit=40427 [ 315.530551][ T6169] syz.1.18: attempt to access beyond end of device [ 315.530551][ T6169] loop1: rw=0, sector=88384, nr_sectors = 8 limit=40427 [ 315.530682][ T6169] syz.1.18: attempt to access beyond end of device [ 315.530682][ T6169] loop1: rw=0, sector=88392, nr_sectors = 8 limit=40427 [ 315.530828][ T6169] syz.1.18: attempt to access beyond end of device [ 315.530828][ T6169] loop1: rw=0, sector=88400, nr_sectors = 8 limit=40427 [ 315.530960][ T6169] syz.1.18: attempt to access beyond end of device [ 315.530960][ T6169] loop1: rw=0, sector=88408, nr_sectors = 8 limit=40427 [ 315.531124][ T6169] syz.1.18: attempt to access beyond end of device [ 315.531124][ T6169] loop1: rw=0, sector=88416, nr_sectors = 8 limit=40427 [ 315.531256][ T6169] syz.1.18: attempt to access beyond end of device [ 315.531256][ T6169] loop1: rw=0, sector=88424, nr_sectors = 8 limit=40427 [ 315.531385][ T6169] syz.1.18: attempt to access beyond end of device [ 315.531385][ T6169] loop1: rw=0, sector=88432, nr_sectors = 8 limit=40427 [ 315.531524][ T6169] syz.1.18: attempt to access beyond end of device [ 315.531524][ T6169] loop1: rw=0, sector=88440, nr_sectors = 8 limit=40427 [ 315.659941][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.660474][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.668625][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.668992][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.933843][ T6277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.302833][ T6277] veth0_vlan: entered promiscuous mode [ 318.360637][ T6277] veth1_vlan: entered promiscuous mode [ 318.395327][ T6277] veth0_macvtap: entered promiscuous mode [ 318.408397][ T6277] veth1_macvtap: entered promiscuous mode [ 318.594448][ T6277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.643574][ T6277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.748277][ T3571] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.748563][ T3571] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.748609][ T3571] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.748645][ T3571] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.436389][ T1514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.436412][ T1514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.508422][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.508443][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/10 01:10:12 executed programs: 7 [ 320.541031][ T6087] bio_check_eod: 41004 callbacks suppressed [ 320.541056][ T6087] syz.0.17: attempt to access beyond end of device [ 320.541056][ T6087] loop0: rw=524288, sector=89896, nr_sectors = 8 limit=40427 [ 320.541193][ T6232] syz.3.20: attempt to access beyond end of device [ 320.541193][ T6232] loop3: rw=0, sector=86424, nr_sectors = 8 limit=40427 [ 320.541205][ T6087] syz.0.17: attempt to access beyond end of device [ 320.541205][ T6087] loop0: rw=524288, sector=89904, nr_sectors = 8 limit=40427 [ 320.541333][ T6232] syz.3.20: attempt to access beyond end of device [ 320.541333][ T6232] loop3: rw=0, sector=86432, nr_sectors = 8 limit=40427 [ 320.541346][ T6087] syz.0.17: attempt to access beyond end of device [ 320.541346][ T6087] loop0: rw=524288, sector=89912, nr_sectors = 8 limit=40427 [ 320.541477][ T6232] syz.3.20: attempt to access beyond end of device [ 320.541477][ T6232] loop3: rw=0, sector=86440, nr_sectors = 8 limit=40427 [ 320.541485][ T6087] syz.0.17: attempt to access beyond end of device [ 320.541485][ T6087] loop0: rw=524288, sector=89920, nr_sectors = 8 limit=40427 [ 320.541609][ T6087] syz.0.17: attempt to access beyond end of device [ 320.541609][ T6087] loop0: rw=524288, sector=89928, nr_sectors = 8 limit=40427 [ 320.541616][ T6232] syz.3.20: attempt to access beyond end of device [ 320.541616][ T6232] loop3: rw=0, sector=86448, nr_sectors = 8 limit=40427 [ 320.541734][ T6087] syz.0.17: attempt to access beyond end of device [ 320.541734][ T6087] loop0: rw=524288, sector=89936, nr_sectors = 8 limit=40427 [ 321.984693][ T6311] loop5: detected capacity change from 0 to 40427 [ 322.099689][ T6311] F2FS-fs (loop5): invalid crc value [ 322.255569][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.255624][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.684080][ T6311] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 322.724696][ T6311] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 323.382963][ T38] audit: type=1800 audit(1768007415.658:7): pid=6311 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.22" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 324.329524][ T5116] Bluetooth: hci0: command 0x0406 tx timeout [ 325.549628][ T6232] bio_check_eod: 42620 callbacks suppressed [ 325.549663][ T6232] syz.3.20: attempt to access beyond end of device [ 325.549663][ T6232] loop3: rw=524288, sector=87752, nr_sectors = 8 limit=40427 [ 325.549782][ T6232] syz.3.20: attempt to access beyond end of device [ 325.549782][ T6232] loop3: rw=524288, sector=87760, nr_sectors = 8 limit=40427 [ 325.549896][ T6232] syz.3.20: attempt to access beyond end of device [ 325.549896][ T6232] loop3: rw=524288, sector=87768, nr_sectors = 8 limit=40427 [ 325.550011][ T6232] syz.3.20: attempt to access beyond end of device [ 325.550011][ T6232] loop3: rw=524288, sector=87776, nr_sectors = 8 limit=40427 [ 325.550125][ T6232] syz.3.20: attempt to access beyond end of device [ 325.550125][ T6232] loop3: rw=524288, sector=87784, nr_sectors = 8 limit=40427 [ 325.550273][ T6232] syz.3.20: attempt to access beyond end of device [ 325.550273][ T6232] loop3: rw=524288, sector=87792, nr_sectors = 8 limit=40427 [ 325.550400][ T6232] syz.3.20: attempt to access beyond end of device [ 325.550400][ T6232] loop3: rw=524288, sector=87800, nr_sectors = 8 limit=40427 [ 325.550527][ T6232] syz.3.20: attempt to access beyond end of device [ 325.550527][ T6232] loop3: rw=524288, sector=87808, nr_sectors = 8 limit=40427 [ 325.550654][ T6232] syz.3.20: attempt to access beyond end of device [ 325.550654][ T6232] loop3: rw=524288, sector=87816, nr_sectors = 8 limit=40427 [ 325.550782][ T6232] syz.3.20: attempt to access beyond end of device [ 325.550782][ T6232] loop3: rw=524288, sector=87824, nr_sectors = 8 limit=40427 [ 330.559527][ T6232] bio_check_eod: 45446 callbacks suppressed [ 330.559548][ T6232] syz.3.20: attempt to access beyond end of device [ 330.559548][ T6232] loop3: rw=524288, sector=87920, nr_sectors = 8 limit=40427 [ 330.559653][ T6169] syz.1.18: attempt to access beyond end of device [ 330.559653][ T6169] loop1: rw=0, sector=88832, nr_sectors = 8 limit=40427 [ 330.559669][ T6232] syz.3.20: attempt to access beyond end of device [ 330.559669][ T6232] loop3: rw=524288, sector=87928, nr_sectors = 8 limit=40427 [ 330.559776][ T6169] syz.1.18: attempt to access beyond end of device [ 330.559776][ T6169] loop1: rw=0, sector=88840, nr_sectors = 8 limit=40427 [ 330.559786][ T6232] syz.3.20: attempt to access beyond end of device [ 330.559786][ T6232] loop3: rw=524288, sector=87936, nr_sectors = 8 limit=40427 [ 330.559897][ T6169] syz.1.18: attempt to access beyond end of device [ 330.559897][ T6169] loop1: rw=0, sector=88848, nr_sectors = 8 limit=40427 [ 330.559902][ T6232] syz.3.20: attempt to access beyond end of device [ 330.559902][ T6232] loop3: rw=524288, sector=87944, nr_sectors = 8 limit=40427 [ 330.560019][ T6232] syz.3.20: attempt to access beyond end of device [ 330.560019][ T6232] loop3: rw=524288, sector=87952, nr_sectors = 8 limit=40427 [ 330.560026][ T6169] syz.1.18: attempt to access beyond end of device [ 330.560026][ T6169] loop1: rw=0, sector=88856, nr_sectors = 8 limit=40427 [ 330.560138][ T6232] syz.3.20: attempt to access beyond end of device [ 330.560138][ T6232] loop3: rw=524288, sector=87960, nr_sectors = 8 limit=40427 [ 335.569607][ T6169] bio_check_eod: 45134 callbacks suppressed [ 335.569631][ T6169] syz.1.18: attempt to access beyond end of device [ 335.569631][ T6169] loop1: rw=0, sector=89584, nr_sectors = 8 limit=40427 [ 335.569761][ T6169] syz.1.18: attempt to access beyond end of device [ 335.569761][ T6169] loop1: rw=0, sector=89592, nr_sectors = 8 limit=40427 [ 335.569888][ T6169] syz.1.18: attempt to access beyond end of device [ 335.569888][ T6169] loop1: rw=0, sector=89600, nr_sectors = 8 limit=40427 [ 335.570014][ T6169] syz.1.18: attempt to access beyond end of device [ 335.570014][ T6169] loop1: rw=0, sector=89608, nr_sectors = 8 limit=40427 [ 335.570567][ T6169] syz.1.18: attempt to access beyond end of device [ 335.570567][ T6169] loop1: rw=0, sector=89616, nr_sectors = 8 limit=40427 [ 335.570698][ T6169] syz.1.18: attempt to access beyond end of device [ 335.570698][ T6169] loop1: rw=0, sector=89624, nr_sectors = 8 limit=40427 [ 335.570827][ T6169] syz.1.18: attempt to access beyond end of device [ 335.570827][ T6169] loop1: rw=0, sector=89632, nr_sectors = 8 limit=40427 [ 335.570958][ T6169] syz.1.18: attempt to access beyond end of device [ 335.570958][ T6169] loop1: rw=0, sector=89640, nr_sectors = 8 limit=40427 [ 335.571094][ T6169] syz.1.18: attempt to access beyond end of device [ 335.571094][ T6169] loop1: rw=0, sector=89648, nr_sectors = 8 limit=40427 [ 335.571223][ T6169] syz.1.18: attempt to access beyond end of device [ 335.571223][ T6169] loop1: rw=0, sector=89656, nr_sectors = 8 limit=40427 [ 335.773097][ T5116] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 335.778793][ T5116] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 335.781437][ T5116] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 335.875755][ T5116] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 335.876755][ T5116] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.225035][ T6320] chnl_net:caif_netlink_parms(): no params data found [ 337.939488][ T5116] Bluetooth: hci6: command tx timeout [ 338.774746][ T6320] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.774863][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.775066][ T6320] bridge_slave_0: entered allmulticast mode [ 338.826035][ T6320] bridge_slave_0: entered promiscuous mode [ 338.840235][ T6320] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.840479][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.840723][ T6320] bridge_slave_1: entered allmulticast mode [ 338.843288][ T6320] bridge_slave_1: entered promiscuous mode [ 339.403209][ T6320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.407575][ T6320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.905620][ T6320] team0: Port device team_slave_0 added [ 339.909211][ T6320] team0: Port device team_slave_1 added [ 340.009663][ T5116] Bluetooth: hci6: command tx timeout [ 340.579573][ T6169] bio_check_eod: 38956 callbacks suppressed [ 340.579596][ T6169] syz.1.18: attempt to access beyond end of device [ 340.579596][ T6169] loop1: rw=524288, sector=87912, nr_sectors = 8 limit=40427 [ 340.579727][ T6169] syz.1.18: attempt to access beyond end of device [ 340.579727][ T6169] loop1: rw=524288, sector=87920, nr_sectors = 8 limit=40427 [ 340.579854][ T6169] syz.1.18: attempt to access beyond end of device [ 340.579854][ T6169] loop1: rw=524288, sector=87928, nr_sectors = 8 limit=40427 [ 340.580004][ T6169] syz.1.18: attempt to access beyond end of device [ 340.580004][ T6169] loop1: rw=524288, sector=87936, nr_sectors = 8 limit=40427 [ 340.580117][ T6169] syz.1.18: attempt to access beyond end of device [ 340.580117][ T6169] loop1: rw=524288, sector=87944, nr_sectors = 8 limit=40427 [ 340.580235][ T6169] syz.1.18: attempt to access beyond end of device [ 340.580235][ T6169] loop1: rw=524288, sector=87952, nr_sectors = 8 limit=40427 [ 340.580374][ T6169] syz.1.18: attempt to access beyond end of device [ 340.580374][ T6169] loop1: rw=524288, sector=87960, nr_sectors = 8 limit=40427 [ 340.580516][ T6169] syz.1.18: attempt to access beyond end of device [ 340.580516][ T6169] loop1: rw=524288, sector=87968, nr_sectors = 8 limit=40427 [ 340.580643][ T6169] syz.1.18: attempt to access beyond end of device [ 340.580643][ T6169] loop1: rw=524288, sector=87976, nr_sectors = 8 limit=40427 [ 340.580770][ T6169] syz.1.18: attempt to access beyond end of device [ 340.580770][ T6169] loop1: rw=524288, sector=87984, nr_sectors = 8 limit=40427 [ 340.745572][ T6320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.745590][ T6320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.745618][ T6320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.748363][ T6320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.748378][ T6320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.748420][ T6320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.703299][ T6320] hsr_slave_0: entered promiscuous mode [ 341.704559][ T6320] hsr_slave_1: entered promiscuous mode [ 341.705487][ T6320] debugfs: 'hsr0' already exists in 'hsr' [ 341.705509][ T6320] Cannot create hsr debugfs directory [ 342.091191][ T5116] Bluetooth: hci6: command tx timeout [ 343.423688][ T6267] F2FS-fs (loop4): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 343.970102][ T6320] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 344.107577][ T6320] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 344.169685][ T61] Bluetooth: hci6: command tx timeout [ 344.301218][ T6320] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 344.404672][ T6320] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 344.810040][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 345.177668][ T6320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.333496][ T6320] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.406867][ T3616] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.407143][ T3616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.416300][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.416404][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.589518][ T6197] bio_check_eod: 44205 callbacks suppressed [ 345.589537][ T6197] syz.2.19: attempt to access beyond end of device [ 345.589537][ T6197] loop2: rw=0, sector=87912, nr_sectors = 8 limit=40427 [ 345.589658][ T6197] syz.2.19: attempt to access beyond end of device [ 345.589658][ T6197] loop2: rw=0, sector=87920, nr_sectors = 8 limit=40427 [ 345.589782][ T6197] syz.2.19: attempt to access beyond end of device [ 345.589782][ T6197] loop2: rw=0, sector=87928, nr_sectors = 8 limit=40427 [ 345.589900][ T6197] syz.2.19: attempt to access beyond end of device [ 345.589900][ T6197] loop2: rw=0, sector=87936, nr_sectors = 8 limit=40427 [ 345.590018][ T6197] syz.2.19: attempt to access beyond end of device [ 345.590018][ T6197] loop2: rw=0, sector=87944, nr_sectors = 8 limit=40427 [ 345.590135][ T6197] syz.2.19: attempt to access beyond end of device [ 345.590135][ T6197] loop2: rw=0, sector=87952, nr_sectors = 8 limit=40427 [ 345.590274][ T6197] syz.2.19: attempt to access beyond end of device [ 345.590274][ T6197] loop2: rw=0, sector=87960, nr_sectors = 8 limit=40427 [ 345.590400][ T6197] syz.2.19: attempt to access beyond end of device [ 345.590400][ T6197] loop2: rw=0, sector=87968, nr_sectors = 8 limit=40427 [ 345.590526][ T6197] syz.2.19: attempt to access beyond end of device [ 345.590526][ T6197] loop2: rw=0, sector=87976, nr_sectors = 8 limit=40427 [ 345.590652][ T6197] syz.2.19: attempt to access beyond end of device [ 345.590652][ T6197] loop2: rw=0, sector=87984, nr_sectors = 8 limit=40427 [ 346.911588][ T6320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.463068][ T6320] veth0_vlan: entered promiscuous mode [ 348.554559][ T6320] veth1_vlan: entered promiscuous mode [ 348.773035][ T6320] veth0_macvtap: entered promiscuous mode [ 348.806192][ T6320] veth1_macvtap: entered promiscuous mode [ 348.972706][ T6320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.048123][ T6320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.064814][ T6268] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.064880][ T6268] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.064916][ T6268] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.064951][ T6268] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.811903][ T6342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.811924][ T6342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.925531][ T6338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.925553][ T6338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/10 01:10:42 executed programs: 8 [ 350.605134][ T6087] bio_check_eod: 44353 callbacks suppressed [ 350.605156][ T6087] syz.0.17: attempt to access beyond end of device [ 350.605156][ T6087] loop0: rw=524288, sector=89816, nr_sectors = 8 limit=40427 [ 350.605312][ T6087] syz.0.17: attempt to access beyond end of device [ 350.605312][ T6087] loop0: rw=524288, sector=89824, nr_sectors = 8 limit=40427 [ 350.605436][ T6087] syz.0.17: attempt to access beyond end of device [ 350.605436][ T6087] loop0: rw=524288, sector=89832, nr_sectors = 8 limit=40427 [ 350.605559][ T6087] syz.0.17: attempt to access beyond end of device [ 350.605559][ T6087] loop0: rw=524288, sector=89840, nr_sectors = 8 limit=40427 [ 350.605681][ T6087] syz.0.17: attempt to access beyond end of device [ 350.605681][ T6087] loop0: rw=524288, sector=89848, nr_sectors = 8 limit=40427 [ 350.605802][ T6087] syz.0.17: attempt to access beyond end of device [ 350.605802][ T6087] loop0: rw=524288, sector=89856, nr_sectors = 8 limit=40427 [ 350.605925][ T6087] syz.0.17: attempt to access beyond end of device [ 350.605925][ T6087] loop0: rw=524288, sector=89864, nr_sectors = 8 limit=40427 [ 350.606046][ T6087] syz.0.17: attempt to access beyond end of device [ 350.606046][ T6087] loop0: rw=524288, sector=89872, nr_sectors = 8 limit=40427 [ 350.606199][ T6087] syz.0.17: attempt to access beyond end of device [ 350.606199][ T6087] loop0: rw=524288, sector=89880, nr_sectors = 8 limit=40427 [ 350.606338][ T6087] syz.0.17: attempt to access beyond end of device [ 350.606338][ T6087] loop0: rw=524288, sector=89888, nr_sectors = 8 limit=40427 [ 352.638511][ T6351] loop6: detected capacity change from 0 to 40427 [ 352.731898][ T6351] F2FS-fs (loop6): invalid crc value [ 353.418128][ T6351] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 355.609860][ T6267] bio_check_eod: 45651 callbacks suppressed [ 355.609882][ T6267] syz.4.21: attempt to access beyond end of device [ 355.609882][ T6267] loop4: rw=0, sector=87192, nr_sectors = 8 limit=40427 [ 355.610017][ T6267] syz.4.21: attempt to access beyond end of device [ 355.610017][ T6267] loop4: rw=0, sector=87200, nr_sectors = 8 limit=40427 [ 355.610153][ T6267] syz.4.21: attempt to access beyond end of device [ 355.610153][ T6267] loop4: rw=0, sector=87208, nr_sectors = 8 limit=40427 [ 355.610298][ T6267] syz.4.21: attempt to access beyond end of device [ 355.610298][ T6267] loop4: rw=0, sector=87216, nr_sectors = 8 limit=40427 [ 355.610429][ T6267] syz.4.21: attempt to access beyond end of device [ 355.610429][ T6267] loop4: rw=0, sector=87224, nr_sectors = 8 limit=40427 [ 355.610559][ T6267] syz.4.21: attempt to access beyond end of device [ 355.610559][ T6267] loop4: rw=0, sector=87232, nr_sectors = 8 limit=40427 [ 355.610689][ T6267] syz.4.21: attempt to access beyond end of device [ 355.610689][ T6267] loop4: rw=0, sector=87240, nr_sectors = 8 limit=40427 [ 355.610821][ T6267] syz.4.21: attempt to access beyond end of device [ 355.610821][ T6267] loop4: rw=0, sector=87248, nr_sectors = 8 limit=40427 [ 355.610951][ T6267] syz.4.21: attempt to access beyond end of device [ 355.610951][ T6267] loop4: rw=0, sector=87256, nr_sectors = 8 limit=40427 [ 355.611114][ T6267] syz.4.21: attempt to access beyond end of device [ 355.611114][ T6267] loop4: rw=0, sector=87264, nr_sectors = 8 limit=40427 [ 356.645669][ T6356] loop6: detected capacity change from 0 to 40427 [ 356.743515][ T6356] F2FS-fs (loop6): invalid crc value [ 357.304291][ T6356] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 357.409649][ T6356] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 2026/01/10 01:10:51 executed programs: 10 [ 358.803986][ T6320] CPU: 0 UID: 0 PID: 6320 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 358.804025][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 358.804046][ T6320] Call Trace: [ 358.804058][ T6320] [ 358.804068][ T6320] dump_stack_lvl+0xe8/0x150 [ 358.804111][ T6320] f2fs_handle_critical_error+0x354/0x510 [ 358.804154][ T6320] f2fs_write_end_io+0x886/0xb60 [ 358.804200][ T6320] __submit_merged_bio+0x256/0x660 [ 358.804241][ T6320] __submit_merged_write_cond+0x269/0x530 [ 358.804283][ T6320] f2fs_write_data_pages+0x2756/0x3290 [ 358.804304][ T6320] ? rcu_is_watching+0x15/0xb0 [ 358.804366][ T6320] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 358.804463][ T6320] ? do_raw_spin_lock+0x121/0x290 [ 358.804503][ T6320] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 358.804525][ T6320] ? lockdep_hardirqs_on+0x7b/0x110 [ 358.804546][ T6320] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 358.804567][ T6320] ? rt_mutex_slowunlock+0x493/0x8a0 [ 358.804627][ T6320] ? reacquire_held_locks+0x104/0x190 [ 358.804657][ T6320] ? rt_spin_lock+0x1c1/0x3e0 [ 358.804693][ T6320] ? rt_spin_unlock+0x150/0x200 [ 358.804726][ T6320] ? rt_spin_unlock+0x161/0x200 [ 358.804752][ T6320] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 358.804775][ T6320] do_writepages+0x32e/0x550 [ 358.804799][ T6320] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 358.804829][ T6320] ? rt_spin_unlock+0x150/0x200 [ 358.804868][ T6320] filemap_fdatawrite+0x19c/0x240 [ 358.804891][ T6320] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 358.804911][ T6320] ? __lock_acquire+0x6b6/0x2cf0 [ 358.804979][ T6320] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 358.805023][ T6320] ? rt_spin_unlock+0x161/0x200 [ 358.805054][ T6320] f2fs_sync_dirty_inodes+0x30f/0x810 [ 358.805095][ T6320] f2fs_write_checkpoint+0x935/0x2430 [ 358.805153][ T6320] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 358.805239][ T6320] kill_f2fs_super+0x2d2/0x6c0 [ 358.805270][ T6320] ? __pfx_kill_f2fs_super+0x10/0x10 [ 358.805321][ T6320] deactivate_locked_super+0xbc/0x130 [ 358.805349][ T6320] cleanup_mnt+0x425/0x4c0 [ 358.805375][ T6320] ? _raw_spin_unlock_irq+0x23/0x50 [ 358.805400][ T6320] task_work_run+0x1d4/0x260 [ 358.805434][ T6320] ? __pfx_task_work_run+0x10/0x10 [ 358.805477][ T6320] exit_to_user_mode_loop+0xef/0x4e0 [ 358.805505][ T6320] ? rcu_is_watching+0x15/0xb0 [ 358.805528][ T6320] do_syscall_64+0x2c1/0xf80 [ 358.805548][ T6320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.805568][ T6320] ? trace_irq_disable+0x37/0x100 [ 358.805588][ T6320] ? clear_bhb_loop+0x60/0xb0 [ 358.805613][ T6320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.805633][ T6320] RIP: 0033:0x7f6800050a77 [ 358.805660][ T6320] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 358.805677][ T6320] RSP: 002b:00007ffe2a6702f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 358.805702][ T6320] RAX: 0000000000000000 RBX: 00007f68000d3d7d RCX: 00007f6800050a77 [ 358.805715][ T6320] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2a6703b0 [ 358.805727][ T6320] RBP: 00007ffe2a6703b0 R08: 0000000000000000 R09: 0000000000000000 [ 358.805739][ T6320] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe2a671440 [ 358.805751][ T6320] R13: 00007f68000d3d7d R14: 00000000000573b4 R15: 00007ffe2a671480 [ 358.805786][ T6320] [ 358.805794][ T6320] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 360.619659][ T6267] bio_check_eod: 40807 callbacks suppressed [ 360.619680][ T6267] syz.4.21: attempt to access beyond end of device [ 360.619680][ T6267] loop4: rw=0, sector=87392, nr_sectors = 8 limit=40427 [ 360.619813][ T6267] syz.4.21: attempt to access beyond end of device [ 360.619813][ T6267] loop4: rw=0, sector=87400, nr_sectors = 8 limit=40427 [ 360.619911][ T6267] syz.4.21: attempt to access beyond end of device [ 360.619911][ T6267] loop4: rw=0, sector=87408, nr_sectors = 8 limit=40427 [ 360.620014][ T6267] syz.4.21: attempt to access beyond end of device [ 360.620014][ T6267] loop4: rw=0, sector=87416, nr_sectors = 8 limit=40427 [ 360.620109][ T6267] syz.4.21: attempt to access beyond end of device [ 360.620109][ T6267] loop4: rw=0, sector=87424, nr_sectors = 8 limit=40427 [ 360.620218][ T6267] syz.4.21: attempt to access beyond end of device [ 360.620218][ T6267] loop4: rw=0, sector=87432, nr_sectors = 8 limit=40427 [ 360.620337][ T6267] syz.4.21: attempt to access beyond end of device [ 360.620337][ T6267] loop4: rw=0, sector=87440, nr_sectors = 8 limit=40427 [ 360.620433][ T6267] syz.4.21: attempt to access beyond end of device [ 360.620433][ T6267] loop4: rw=0, sector=87448, nr_sectors = 8 limit=40427 [ 360.620531][ T6267] syz.4.21: attempt to access beyond end of device [ 360.620531][ T6267] loop4: rw=0, sector=87456, nr_sectors = 8 limit=40427 [ 360.620624][ T6267] syz.4.21: attempt to access beyond end of device [ 360.620624][ T6267] loop4: rw=0, sector=87464, nr_sectors = 8 limit=40427 [ 363.242846][ T6362] loop6: detected capacity change from 0 to 40427 [ 363.339588][ T6362] F2FS-fs (loop6): invalid crc value [ 364.010853][ T6362] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 2026/01/10 01:10:56 executed programs: 11 [ 365.301537][ T5116] Bluetooth: hci2: command 0x0406 tx timeout [ 365.629540][ T6169] bio_check_eod: 44793 callbacks suppressed [ 365.629560][ T6169] syz.1.18: attempt to access beyond end of device [ 365.629560][ T6169] loop1: rw=524288, sector=86224, nr_sectors = 8 limit=40427 [ 365.629674][ T6169] syz.1.18: attempt to access beyond end of device [ 365.629674][ T6169] loop1: rw=524288, sector=86232, nr_sectors = 8 limit=40427 [ 365.629778][ T6169] syz.1.18: attempt to access beyond end of device [ 365.629778][ T6169] loop1: rw=524288, sector=86240, nr_sectors = 8 limit=40427 [ 365.629869][ T6169] syz.1.18: attempt to access beyond end of device [ 365.629869][ T6169] loop1: rw=524288, sector=86248, nr_sectors = 8 limit=40427 [ 365.629974][ T6169] syz.1.18: attempt to access beyond end of device [ 365.629974][ T6169] loop1: rw=524288, sector=86256, nr_sectors = 8 limit=40427 [ 365.630062][ T6169] syz.1.18: attempt to access beyond end of device [ 365.630062][ T6169] loop1: rw=524288, sector=86264, nr_sectors = 8 limit=40427 [ 365.630151][ T6169] syz.1.18: attempt to access beyond end of device [ 365.630151][ T6169] loop1: rw=524288, sector=86272, nr_sectors = 8 limit=40427 [ 365.630242][ T6169] syz.1.18: attempt to access beyond end of device [ 365.630242][ T6169] loop1: rw=524288, sector=86280, nr_sectors = 8 limit=40427 [ 365.630349][ T6169] syz.1.18: attempt to access beyond end of device [ 365.630349][ T6169] loop1: rw=524288, sector=86288, nr_sectors = 8 limit=40427 [ 365.630440][ T6169] syz.1.18: attempt to access beyond end of device [ 365.630440][ T6169] loop1: rw=524288, sector=86296, nr_sectors = 8 limit=40427 [ 367.718429][ T6367] loop6: detected capacity change from 0 to 40427 [ 367.796260][ T6367] F2FS-fs (loop6): invalid crc value [ 368.256541][ T6367] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 370.639592][ T6169] bio_check_eod: 45568 callbacks suppressed [ 370.639616][ T6169] syz.1.18: attempt to access beyond end of device [ 370.639616][ T6169] loop1: rw=524288, sector=89360, nr_sectors = 8 limit=40427 [ 370.639790][ T6169] syz.1.18: attempt to access beyond end of device [ 370.639790][ T6169] loop1: rw=524288, sector=89368, nr_sectors = 8 limit=40427 [ 370.639923][ T6169] syz.1.18: attempt to access beyond end of device [ 370.639923][ T6169] loop1: rw=524288, sector=89376, nr_sectors = 8 limit=40427 [ 370.640048][ T6169] syz.1.18: attempt to access beyond end of device [ 370.640048][ T6169] loop1: rw=524288, sector=89384, nr_sectors = 8 limit=40427 [ 370.640169][ T6169] syz.1.18: attempt to access beyond end of device [ 370.640169][ T6169] loop1: rw=524288, sector=89392, nr_sectors = 8 limit=40427 [ 370.640310][ T6169] syz.1.18: attempt to access beyond end of device [ 370.640310][ T6169] loop1: rw=524288, sector=89400, nr_sectors = 8 limit=40427 [ 370.640435][ T6169] syz.1.18: attempt to access beyond end of device [ 370.640435][ T6169] loop1: rw=524288, sector=89408, nr_sectors = 8 limit=40427 [ 370.640560][ T6169] syz.1.18: attempt to access beyond end of device [ 370.640560][ T6169] loop1: rw=524288, sector=89416, nr_sectors = 8 limit=40427 [ 370.640687][ T6169] syz.1.18: attempt to access beyond end of device [ 370.640687][ T6169] loop1: rw=524288, sector=89424, nr_sectors = 8 limit=40427 [ 370.640813][ T6169] syz.1.18: attempt to access beyond end of device [ 370.640813][ T6169] loop1: rw=524288, sector=89432, nr_sectors = 8 limit=40427 [ 371.426282][ T6373] loop6: detected capacity change from 0 to 40427 [ 371.488654][ T6373] F2FS-fs (loop6): invalid crc value [ 372.028457][ T6373] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 372.129598][ T6373] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 2026/01/10 01:11:05 executed programs: 13 [ 373.430076][ T6320] CPU: 0 UID: 0 PID: 6320 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 373.430109][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 373.430126][ T6320] Call Trace: [ 373.430138][ T6320] [ 373.430147][ T6320] dump_stack_lvl+0xe8/0x150 [ 373.430184][ T6320] f2fs_handle_critical_error+0x354/0x510 [ 373.430231][ T6320] f2fs_write_end_io+0x886/0xb60 [ 373.430277][ T6320] __submit_merged_bio+0x256/0x660 [ 373.430336][ T6320] __submit_merged_write_cond+0x269/0x530 [ 373.430379][ T6320] f2fs_write_data_pages+0x2756/0x3290 [ 373.430447][ T6320] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 373.430536][ T6320] ? do_raw_spin_lock+0x121/0x290 [ 373.430580][ T6320] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 373.430605][ T6320] ? lockdep_hardirqs_on+0x7b/0x110 [ 373.430627][ T6320] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 373.430650][ T6320] ? rt_mutex_slowunlock+0x493/0x8a0 [ 373.430682][ T6320] ? reacquire_held_locks+0x104/0x190 [ 373.430714][ T6320] ? rt_spin_lock+0x1c1/0x3e0 [ 373.430761][ T6320] ? rt_spin_unlock+0x150/0x200 [ 373.430797][ T6320] ? rt_spin_unlock+0x161/0x200 [ 373.430826][ T6320] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 373.430852][ T6320] do_writepages+0x32e/0x550 [ 373.430877][ T6320] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 373.430911][ T6320] ? rt_spin_unlock+0x150/0x200 [ 373.430955][ T6320] filemap_fdatawrite+0x19c/0x240 [ 373.430980][ T6320] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 373.431002][ T6320] ? __lock_acquire+0x6b6/0x2cf0 [ 373.431078][ T6320] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 373.431119][ T6320] ? rt_spin_unlock+0x161/0x200 [ 373.431153][ T6320] f2fs_sync_dirty_inodes+0x30f/0x810 [ 373.431198][ T6320] f2fs_write_checkpoint+0x935/0x2430 [ 373.431262][ T6320] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 373.431358][ T6320] kill_f2fs_super+0x2d2/0x6c0 [ 373.431393][ T6320] ? __pfx_kill_f2fs_super+0x10/0x10 [ 373.431448][ T6320] deactivate_locked_super+0xbc/0x130 [ 373.431491][ T6320] cleanup_mnt+0x425/0x4c0 [ 373.431519][ T6320] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.431546][ T6320] task_work_run+0x1d4/0x260 [ 373.431583][ T6320] ? __pfx_task_work_run+0x10/0x10 [ 373.431629][ T6320] exit_to_user_mode_loop+0xef/0x4e0 [ 373.431659][ T6320] ? rcu_is_watching+0x15/0xb0 [ 373.431683][ T6320] do_syscall_64+0x2c1/0xf80 [ 373.431705][ T6320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.431726][ T6320] ? trace_irq_disable+0x37/0x100 [ 373.431748][ T6320] ? clear_bhb_loop+0x60/0xb0 [ 373.431782][ T6320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.431803][ T6320] RIP: 0033:0x7f6800050a77 [ 373.431823][ T6320] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 373.431841][ T6320] RSP: 002b:00007ffe2a6702f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 373.431864][ T6320] RAX: 0000000000000000 RBX: 00007f68000d3d7d RCX: 00007f6800050a77 [ 373.431878][ T6320] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2a6703b0 [ 373.431891][ T6320] RBP: 00007ffe2a6703b0 R08: 0000000000000000 R09: 0000000000000000 [ 373.431904][ T6320] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe2a671440 [ 373.431919][ T6320] R13: 00007f68000d3d7d R14: 000000000005acda R15: 00007ffe2a671480 [ 373.431957][ T6320] [ 373.431966][ T6320] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 375.659734][ T6197] bio_check_eod: 43266 callbacks suppressed [ 375.659758][ T6197] syz.2.19: attempt to access beyond end of device [ 375.659758][ T6197] loop2: rw=524288, sector=89512, nr_sectors = 8 limit=40427 [ 375.659927][ T6197] syz.2.19: attempt to access beyond end of device [ 375.659927][ T6197] loop2: rw=524288, sector=89520, nr_sectors = 8 limit=40427 [ 375.660051][ T6197] syz.2.19: attempt to access beyond end of device [ 375.660051][ T6197] loop2: rw=524288, sector=89528, nr_sectors = 8 limit=40427 [ 375.660173][ T6197] syz.2.19: attempt to access beyond end of device [ 375.660173][ T6197] loop2: rw=524288, sector=89536, nr_sectors = 8 limit=40427 [ 375.660950][ T6232] syz.3.20: attempt to access beyond end of device [ 375.660950][ T6232] loop3: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 375.661070][ T6232] syz.3.20: attempt to access beyond end of device [ 375.661070][ T6232] loop3: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 375.661166][ T6232] syz.3.20: attempt to access beyond end of device [ 375.661166][ T6232] loop3: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 375.661260][ T6232] syz.3.20: attempt to access beyond end of device [ 375.661260][ T6232] loop3: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 375.661353][ T6232] syz.3.20: attempt to access beyond end of device [ 375.661353][ T6232] loop3: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 375.661479][ T6232] syz.3.20: attempt to access beyond end of device [ 375.661479][ T6232] loop3: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 377.754060][ T6380] loop6: detected capacity change from 0 to 40427 [ 377.781651][ T6380] F2FS-fs (loop6): invalid crc value [ 378.357271][ T6380] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 2026/01/10 01:11:10 executed programs: 14 [ 380.669681][ T6169] bio_check_eod: 44560 callbacks suppressed [ 380.669703][ T6169] syz.1.18: attempt to access beyond end of device [ 380.669703][ T6169] loop1: rw=0, sector=87032, nr_sectors = 8 limit=40427 [ 380.669839][ T6169] syz.1.18: attempt to access beyond end of device [ 380.669839][ T6169] loop1: rw=0, sector=87040, nr_sectors = 8 limit=40427 [ 380.669999][ T6169] syz.1.18: attempt to access beyond end of device [ 380.669999][ T6169] loop1: rw=0, sector=87048, nr_sectors = 8 limit=40427 [ 380.670126][ T6169] syz.1.18: attempt to access beyond end of device [ 380.670126][ T6169] loop1: rw=0, sector=87056, nr_sectors = 8 limit=40427 [ 380.670305][ T6169] syz.1.18: attempt to access beyond end of device [ 380.670305][ T6169] loop1: rw=0, sector=87064, nr_sectors = 8 limit=40427 [ 380.670438][ T6169] syz.1.18: attempt to access beyond end of device [ 380.670438][ T6169] loop1: rw=0, sector=87072, nr_sectors = 8 limit=40427 [ 380.670569][ T6169] syz.1.18: attempt to access beyond end of device [ 380.670569][ T6169] loop1: rw=0, sector=87080, nr_sectors = 8 limit=40427 [ 380.670700][ T6169] syz.1.18: attempt to access beyond end of device [ 380.670700][ T6169] loop1: rw=0, sector=87088, nr_sectors = 8 limit=40427 [ 380.670830][ T6169] syz.1.18: attempt to access beyond end of device [ 380.670830][ T6169] loop1: rw=0, sector=87096, nr_sectors = 8 limit=40427 [ 380.670960][ T6169] syz.1.18: attempt to access beyond end of device [ 380.670960][ T6169] loop1: rw=0, sector=87104, nr_sectors = 8 limit=40427 [ 380.894695][ T6387] loop6: detected capacity change from 0 to 40427 [ 381.019650][ T6387] F2FS-fs (loop6): invalid crc value [ 381.703378][ T6387] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 381.773173][ T39] INFO: task kworker/u8:8:1016 blocked for more than 143 seconds. [ 381.773320][ T39] Not tainted syzkaller #0 [ 381.773332][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.773341][ T39] task:kworker/u8:8 state:D stack:21216 pid:1016 tgid:1016 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 381.773405][ T39] Workqueue: writeback wb_workfn (flush-7:0) [ 381.773440][ T39] Call Trace: [ 381.773447][ T39] [ 381.773460][ T39] __schedu[ 381.773460][ T39] __schedule+0x145f/0x5070 [ 381.773514][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 381.773537][ T39] ? lockdep_hardirqs_on+0x7b/0x110 [ 381.773560][ T39] ? __pfx___schedule+0x10/0x10 [ 381.773588][ T39] ? rcu_preempt_deferred_qs_irqrestore+0x7b9/0xbc0 [ 381.773634][ T39] rt_mutex_schedule+0x77/0xf0 [ 381.773665][ T39] ? __rt_mutex_slowlock_locked+0x1a7/0x25e0 [ 381.773688][ T39] __rt_mutex_slowlock_locked+0x1dfe/0x25e0 [ 381.773724][ T39] ? __rt_mutex_slowlock_locked+0x1a7/0x25e0 [ 381.773756][ T39] ? __pfx___rt_mutex_slowlock_locked+0x10/0x10 [ 381.773802][ T39] rt_mutex_slowlock+0xb5/0x160 [ 381.773830][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 381.773859][ T39] ? f2fs_balance_fs+0x5b2/0x7d0 [ 381.773895][ T39] rwbase_write_lock+0x14f/0x750 [ 381.773930][ T39] f2fs_balance_fs+0x5b2/0x7d0 [ 381.773965][ T39] ? f2fs_write_inode+0x3fb/0x5f0 [ 381.773995][ T39] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 381.774036][ T39] ? folio_unlock+0x101/0x160 [ 381.774067][ T39] f2fs_write_inode+0x3fb/0x5f0 [ 381.774100][ T39] __writeback_single_inode+0x7e4/0x1240 [ 381.774128][ T39] writeback_sb_inodes+0x8c8/0x1840 [ 381.774184][ T39] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 381.774255][ T39] ? __pfx_down_read_trylock+0x10/0x10 [ 381.774281][ T39] ? __pfx_move_expired_inodes+0x10/0x10 [ 381.774310][ T39] ? preempt_count_add+0x91/0x190 [ 381.774339][ T39] __writeback_inodes_wb+0x111/0x240 [ 381.774380][ T39] wb_writeback+0x43f/0xaa0 [ 381.774418][ T39] ? queue_io+0x251/0x420 [ 381.774452][ T39] ? __pfx_wb_writeback+0x10/0x10 [ 381.774499][ T39] wb_workfn+0xad7/0xee0 [ 381.774539][ T39] ? __pfx_wb_workfn+0x10/0x10 [ 381.774564][ T39] ? finish_task_switch+0x162/0x940 [ 381.774595][ T39] ? do_raw_spin_lock+0x121/0x290 [ 381.774617][ T39] ? lock_acquire+0x107/0x340 [ 381.774650][ T39] ? process_scheduled_works+0x9ef/0x1770 [ 381.774673][ T39] ? process_scheduled_works+0x9ef/0x1770 [ 381.774712][ T39] ? process_scheduled_works+0x9ef/0x1770 [ 381.774734][ T39] ? process_scheduled_works+0x9ef/0x1770 [ 381.774758][ T39] process_scheduled_works+0xad1/0x1770 [ 381.774814][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 381.774836][ T39] ? do_raw_spin_lock+0x121/0x290 [ 381.774874][ T39] worker_thread+0x8a0/0xda0 [ 381.774910][ T39] ? __kthread_parkme+0x7b/0x200 [ 381.774945][ T39] kthread+0x711/0x8a0 [ 381.774975][ T39] ? __pfx_worker_thread+0x10/0x10 [ 381.774998][ T39] ? __pfx_kthread+0x10/0x10 [ 381.775023][ T39] ? rt_spin_unlock+0x150/0x200 [ 381.775055][ T39] ? rt_spin_unlock+0x161/0x200 [ 381.775080][ T39] ? __pfx_kthread+0x10/0x10 [ 381.775109][ T39] ret_from_fork+0x510/0xa50 [ 381.775134][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 381.775155][ T39] ? __switch_to+0xc9e/0x1480 [ 381.775189][ T39] ? __pfx_kthread+0x10/0x10 [ 381.775230][ T39] ret_from_fork_asm+0x1a/0x30 [ 381.775277][ T39] [ 381.775459][ T39] [ 381.775459][ T39] Showing all locks held in the system: [ 381.775470][ T39] 8 locks held by kworker/u8:1/13: [ 381.775485][ T39] 3 locks held by rcuc/1/28: [ 381.775498][ T39] 1 lock held by khungtaskd/39: [ 381.775509][ T39] #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 381.775580][ T39] 4 locks held by kworker/u8:3/58: [ 381.775592][ T39] #0: ffff888140eca938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 381.775645][ T39] #1: ffffc9000124fbc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 381.775698][ T39] #2: ffff8880217c40d0 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 381.775758][ T39] #3: ffff88801e3d9a80 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5b2/0x7d0 [ 381.775818][ T39] 4 locks held by kworker/u8:4/69: [ 381.775830][ T39] #0: ffff888140eca938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 381.775881][ T39] #1: ffffc9000154fbc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 381.775932][ T39] #2: ffff88802ff500d0 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 381.775987][ T39] #3: ffff88803768da80 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5b2/0x7d0 [ 381.776049][ T39] 4 locks held by kworker/u8:7/989: [ 381.776061][ T39] #0: ffff888140eca938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 381.776113][ T39] #1: ffffc90004417bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 381.776163][ T39] #2: ffff88803d9d20d0 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 381.776254][ T39] #3: ffff88803bf0da80 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5b2/0x7d0 [ 381.776324][ T39] 4 locks held by kworker/u8:8/1016: [ 381.776335][ T39] #0: ffff888140eca938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 381.776384][ T39] #1: ffffc90004457bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 381.776432][ T39] #2: ffff88803859a0d0 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 381.776487][ T39] #3: ffff888038815a80 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5b2/0x7d0 [ 381.776555][ T39] 4 locks held by kworker/u8:10/3177: [ 381.776566][ T39] #0: ffff888140eca938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 381.776613][ T39] #1: ffffc9000d487bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 381.776659][ T39] #2: ffff8880368660d0 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 381.776713][ T39] #3: ffff8880409b5a80 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5b2/0x7d0 [ 381.776769][ T39] 4 locks held by kworker/u8:12/3511: [ 381.776781][ T39] #0: ffff888140eca938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 381.776829][ T39] #1: ffffc9000da97bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 381.776877][ T39] #2: ffff888023e6a0d0 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 381.776931][ T39] #3: ffff888036901a80 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5b2/0x7d0 [ 381.776989][ T39] 2 locks held by getty/5557: [ 381.777000][ T39] #0: ffff88814d4c50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 381.777050][ T39] #1: ffffc9000418c2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 381.777097][ T39] 5 locks held by syz.0.17/6087: [ 381.777110][ T39] 6 locks held by syz.1.18/6169: [ 381.777123][ T39] 6 locks held by syz.2.19/6197: [ 381.777136][ T39] 5 locks held by syz.3.20/6232: [ 381.777149][ T39] 7 locks held by syz.4.21/6267: [ 381.777162][ T39] 5 locks held by syz.5.22/6311: [ 381.777175][ T39] 1 lock held by syz.6.29/6387: [ 381.777186][ T39] [ 381.777191][ T39] ============================================= [ 381.777191][ T39] [ 381.777209][ T39] NMI backtrace for cpu 1 [ 381.777223][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 381.777245][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 381.777257][ T39] Call Trace: [ 381.777265][ T39] [ 381.777273][ T39] dump_stack_lvl+0xe8/0x150 [ 381.777301][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 381.777329][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 381.777352][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 381.777382][ T39] sys_info+0x135/0x170 [ 381.777404][ T39] watchdog+0xf95/0xfe0 [ 381.777430][ T39] ? watchdog+0x20a/0xfe0 [ 381.777458][ T39] kthread+0x711/0x8a0 [ 381.777488][ T39] ? __pfx_watchdog+0x10/0x10 [ 381.777509][ T39] ? __pfx_kthread+0x10/0x10 [ 381.777534][ T39] ? rt_spin_unlock+0x150/0x200 [ 381.777565][ T39] ? rt_spin_unlock+0x161/0x200 [ 381.777589][ T39] ? __pfx_kthread+0x10/0x10 [ 381.777617][ T39] ret_from_fork+0x510/0xa50 [ 381.777647][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 381.777667][ T39] ? __switch_to+0xc9e/0x1480 [ 381.777700][ T39] ? __pfx_kthread+0x10/0x10 [ 381.777745][ T39] ret_from_fork_asm+0x1a/0x30 [ 381.777793][ T39] [ 381.777801][ T39] Sending NMI from CPU 1 to CPUs 0: [ 381.777833][ C0] NMI backtrace for cpu 0 [ 381.777849][ C0] CPU: 0 UID: 0 PID: 6197 Comm: syz.2.19 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 381.777869][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 381.777880][ C0] RIP: 0010:debug_check_no_locks_freed+0xa5/0x170 [ 381.777909][ C0] Code: 4c 89 fe e8 ad cc 19 03 4c 89 e7 48 89 ee eb b9 49 89 f7 49 89 fc e8 8a 6b dd 02 85 c0 74 09 83 3d f3 80 3e 0d 00 74 27 9c 58 00 02 00 00 0f 85 a4 00 00 00 41 f7 c5 00 02 00 00 74 01 fb 5b [ 381.777924][ C0] RSP: 0018:ffffc90004616c90 EFLAGS: 00000046 [ 381.777940][ C0] RAX: 0000000000000046 RBX: ffff888031d63c80 RCX: ffff8880438fc000 [ 381.777954][ C0] RDX: ffffea0000a2a380 RSI: ffff888028a8e0c8 RDI: ffff888028a8e000 [ 381.777967][ C0] RBP: 0000000000212210 R08: 0000000000000000 R09: 0000000000000000 [ 381.777979][ C0] R10: dffffc0000000000 R11: ffffffff81f9a840 R12: ffff888028a8e000 [ 381.777992][ C0] R13: 0000000000000202 R14: ffff888031d64900 R15: 0000000000000006 [ 381.778005][ C0] FS: 0000555562873500(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 381.778020][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.778032][ C0] CR2: 00007f14423f1000 CR3: 0000000034464000 CR4: 00000000003526f0 [ 381.778049][ C0] Call Trace: [ 381.778055][ C0] [ 381.778063][ C0] ? mempool_free+0xf5/0x140 [ 381.778082][ C0] kmem_cache_free+0xf9/0x8d0 [ 381.778108][ C0] ? mempool_free+0xf5/0x140 [ 381.778128][ C0] ? __pfx_mempool_free_slab+0x10/0x10 [ 381.778146][ C0] mempool_free+0xf5/0x140 [ 381.778163][ C0] ? __pfx_mempool_free+0x10/0x10 [ 381.778180][ C0] ? bio_put+0x91/0x830 [ 381.778198][ C0] ? bio_free+0x207/0x2a0 [ 381.778217][ C0] f2fs_get_read_data_folio+0x4ae/0x7b0 [ 381.778249][ C0] ? __pfx_f2fs_get_read_data_folio+0x10/0x10 [ 381.778276][ C0] ? inode_dio_wait+0x19e/0x240 [ 381.778301][ C0] ? __pfx_inode_dio_wait+0x10/0x10 [ 381.778326][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 381.778348][ C0] f2fs_get_lock_data_folio+0x54/0x1f0 [ 381.778376][ C0] do_garbage_collect+0x34db/0x6f80 [ 381.778399][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 381.778456][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 381.778479][ C0] ? __pfx_do_garbage_collect+0x10/0x10 [ 381.778510][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 381.778535][ C0] ? do_raw_spin_lock+0x121/0x290 [ 381.778562][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 381.778580][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 381.778599][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 381.778617][ C0] ? rt_mutex_slowunlock+0x493/0x8a0 [ 381.778645][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 381.778663][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 381.778681][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 381.778700][ C0] f2fs_gc+0xcb0/0x2530 [ 381.778738][ C0] ? __pfx_f2fs_gc+0x10/0x10 [ 381.778764][ C0] ? do_raw_spin_lock+0x121/0x290 [ 381.778793][ C0] ? rwbase_write_lock+0x56f/0x750 [ 381.778820][ C0] f2fs_balance_fs+0x5fe/0x7d0 [ 381.778847][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 381.778874][ C0] ? f2fs_map_blocks+0x3449/0x40b0 [ 381.778901][ C0] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 381.778929][ C0] ? percpu_counter_add_batch+0xea/0x1e0 [ 381.778971][ C0] f2fs_map_blocks+0x3449/0x40b0 [ 381.779014][ C0] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 381.779038][ C0] ? rt_mutex_slowunlock+0x493/0x8a0 [ 381.779067][ C0] ? f2fs_allocate_pinning_section+0x1ac/0x370 [ 381.779102][ C0] f2fs_expand_inode_data+0x631/0xa70 [ 381.779151][ C0] ? __pfx_f2fs_expand_inode_data+0x10/0x10 [ 381.779180][ C0] ? rt_spin_unlock+0x161/0x200 [ 381.779205][ C0] ? file_update_time_flags+0x44e/0x4f0 [ 381.779230][ C0] f2fs_fallocate+0x4e8/0x970 [ 381.779254][ C0] vfs_fallocate+0x672/0x7f0 [ 381.779284][ C0] ? __pfx_vfs_fallocate+0x10/0x10 [ 381.779314][ C0] __x64_sys_fallocate+0xc0/0x110 [ 381.779341][ C0] do_syscall_64+0xec/0xf80 [ 381.779358][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.779376][ C0] ? trace_irq_disable+0x37/0x100 [ 381.779399][ C0] ? clear_bhb_loop+0x60/0xb0 [ 381.779421][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.779440][ C0] RIP: 0033:0x7f797398f749 [ 381.779477][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.779491][ C0] RSP: 002b:00007ffe72fcf658 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 381.779508][ C0] RAX: ffffffffffffffda RBX: 00007f7973be5fa0 RCX: 00007f797398f749 [ 381.779521][ C0] RDX: 0000000000000008 RSI: 0000000000000001 RDI: 0000000000000005 [ 381.779531][ C0] RBP: 00007f7973a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 381.779542][ C0] R10: 00000000001101f0 R11: 0000000000000246 R12: 0000000000000000 [ 381.779552][ C0] R13: 00007f7973be5fa0 R14: 00007f7973be5fa0 R15: 0000000000000004 [ 381.779573][ C0] [ 381.832206][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 381.832275][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 381.832344][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 381.832374][ T39] Call Trace: [ 381.832393][ T39] [ 381.832414][ T39] vpanic+0x1e0/0x670 [ 381.832495][ T39] panic+0xb9/0xc0 [ 381.832561][ T39] ? __pfx_panic+0x10/0x10 [ 381.832638][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 381.832704][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 381.832786][ T39] watchdog+0xfdf/0xfe0 [ 381.832852][ T39] ? watchdog+0x20a/0xfe0 [ 381.832924][ T39] kthread+0x711/0x8a0 [ 381.833000][ T39] ? __pfx_watchdog+0x10/0x10 [ 381.833049][ T39] ? __pfx_kthread+0x10/0x10 [ 381.833114][ T39] ? rt_spin_unlock+0x150/0x200 [ 381.833197][ T39] ? rt_spin_unlock+0x161/0x200 [ 381.833264][ T39] ? __pfx_kthread+0x10/0x10 [ 381.833338][ T39] ret_from_fork+0x510/0xa50 [ 381.833419][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 381.833471][ T39] ? __switch_to+0xc9e/0x1480 [ 381.833550][ T39] ? __pfx_kthread+0x10/0x10 [ 381.833614][ T39] ret_from_fork_asm+0x1a/0x30 [ 381.833733][ T39] [ 381.834371][ T39] Kernel Offset: disabled