no interfaces have a carrier [ 55.815091][ T5502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.835843][ T5502] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller syzkaller login: [ 86.641404][ T31] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts. 2025/09/26 17:44:06 parsed 1 programs [ 185.465626][ T5864] cgroup: Unknown subsys name 'net' [ 185.723766][ T5864] cgroup: Unknown subsys name 'cpuset' [ 185.788817][ T5864] cgroup: Unknown subsys name 'rlimit' [ 187.501801][ T5864] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 192.623008][ T3893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.623029][ T3893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.698913][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.698932][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.203361][ T5913] chnl_net:caif_netlink_parms(): no params data found [ 193.500120][ T5913] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.501444][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.501564][ T5913] bridge_slave_0: entered allmulticast mode [ 193.503256][ T5913] bridge_slave_0: entered promiscuous mode [ 193.509320][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.509452][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.509628][ T5913] bridge_slave_1: entered allmulticast mode [ 193.512213][ T5913] bridge_slave_1: entered promiscuous mode [ 193.742495][ T5913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.745402][ T5913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.993186][ T5913] team0: Port device team_slave_0 added [ 193.995429][ T5913] team0: Port device team_slave_1 added [ 194.161427][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.161516][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.422133][ T5913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.422148][ T5913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.422173][ T5913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.581661][ T5913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.581675][ T5913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.581699][ T5913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.104661][ T5913] hsr_slave_0: entered promiscuous mode [ 195.106087][ T5913] hsr_slave_1: entered promiscuous mode [ 195.605319][ T5913] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 195.623805][ T5913] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 195.663068][ T5913] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 195.702002][ T5913] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 195.830587][ T5913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.855459][ T5913] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.865916][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.866694][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.885894][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.886039][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.111408][ T5913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.161608][ T5913] veth0_vlan: entered promiscuous mode [ 196.169112][ T5913] veth1_vlan: entered promiscuous mode [ 196.202898][ T5913] veth0_macvtap: entered promiscuous mode [ 196.206754][ T5913] veth1_macvtap: entered promiscuous mode [ 196.231167][ T5913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.237402][ T5913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.260877][ T69] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.262452][ T69] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.262908][ T69] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.262945][ T69] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.972558][ T3805] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.180662][ T3805] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.424397][ T3805] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.216139][ T3805] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.341920][ T5963] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.343758][ T5963] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.344430][ T5963] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.346342][ T5963] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.347327][ T5963] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.708754][ T3805] bridge_slave_1: left allmulticast mode [ 199.708943][ T3805] bridge_slave_1: left promiscuous mode [ 199.710122][ T3805] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.801794][ T3805] bridge_slave_0: left allmulticast mode [ 199.801822][ T3805] bridge_slave_0: left promiscuous mode [ 199.802052][ T3805] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.519851][ T3805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.618463][ T3805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.640683][ T3805] bond0 (unregistering): Released all slaves [ 202.017915][ T3805] hsr_slave_0: left promiscuous mode [ 202.057885][ T3805] hsr_slave_1: left promiscuous mode [ 202.058933][ T3805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.058991][ T3805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.109605][ T3805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.109633][ T3805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.227040][ T3805] veth1_macvtap: left promiscuous mode [ 202.227235][ T3805] veth0_macvtap: left promiscuous mode [ 202.227514][ T3805] veth1_vlan: left promiscuous mode [ 202.228379][ T3805] veth0_vlan: left promiscuous mode 2025/09/26 17:44:26 executed programs: 0 [ 202.582256][ T5963] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.597674][ T5963] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.606611][ T5963] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.608753][ T5963] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.610690][ T5963] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.330202][ T3805] team0 (unregistering): Port device team_slave_1 removed [ 204.531076][ T3805] team0 (unregistering): Port device team_slave_0 removed [ 204.639369][ T5963] Bluetooth: hci0: command tx timeout [ 206.718358][ T5963] Bluetooth: hci0: command tx timeout [ 206.772429][ T6003] chnl_net:caif_netlink_parms(): no params data found [ 207.144434][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.144630][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.144834][ T6003] bridge_slave_0: entered allmulticast mode [ 207.149012][ T6003] bridge_slave_0: entered promiscuous mode [ 207.153378][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.153564][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.153760][ T6003] bridge_slave_1: entered allmulticast mode [ 207.157044][ T6003] bridge_slave_1: entered promiscuous mode [ 207.363945][ T6003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.375300][ T6003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.633041][ T6003] team0: Port device team_slave_0 added [ 207.646234][ T6003] team0: Port device team_slave_1 added [ 207.852762][ T6003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.852776][ T6003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.852800][ T6003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.854961][ T6003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.854973][ T6003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.854997][ T6003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.628821][ T6003] hsr_slave_0: entered promiscuous mode [ 208.630081][ T6003] hsr_slave_1: entered promiscuous mode [ 208.798480][ T5963] Bluetooth: hci0: command tx timeout [ 210.483583][ T6003] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 210.532707][ T6003] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.564048][ T6003] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.614321][ T6003] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 210.789873][ T6003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.817265][ T6003] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.832729][ T3805] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.833350][ T3805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.846678][ T3850] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.847502][ T3850] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.878344][ T5963] Bluetooth: hci0: command tx timeout [ 211.204262][ T6003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.275938][ T6003] veth0_vlan: entered promiscuous mode [ 211.293759][ T6003] veth1_vlan: entered promiscuous mode [ 211.356962][ T6003] veth0_macvtap: entered promiscuous mode [ 211.369561][ T6003] veth1_macvtap: entered promiscuous mode [ 211.394179][ T6003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.406346][ T6003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.425543][ T3850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.425746][ T3850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.425938][ T3850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.436227][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.631502][ T3850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.631518][ T3850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.702903][ T3805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.702919][ T3805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/26 17:44:36 executed programs: 2 [ 212.362154][ T6122] loop0: detected capacity change from 0 to 40427 [ 212.364568][ T6122] F2FS-fs: heap/no_heap options were deprecated [ 212.364730][ T6122] F2FS-fs: heap/no_heap options were deprecated [ 212.404701][ T6122] F2FS-fs (loop0): Image doesn't support compression [ 212.424461][ T6122] F2FS-fs (loop0): invalid crc value [ 212.662463][ T6122] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 212.666277][ T6122] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 221.970055][ T6122] F2FS-fs (loop0): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 221.976882][ T6122] syz.0.17: attempt to access beyond end of device [ 221.976882][ T6122] loop0: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 221.989895][ T6122] syz.0.17: attempt to access beyond end of device [ 221.989895][ T6122] loop0: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 221.990061][ T6122] syz.0.17: attempt to access beyond end of device [ 221.990061][ T6122] loop0: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 221.990214][ T6122] syz.0.17: attempt to access beyond end of device [ 221.990214][ T6122] loop0: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 221.990447][ T6122] syz.0.17: attempt to access beyond end of device [ 221.990447][ T6122] loop0: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 221.990607][ T6122] syz.0.17: attempt to access beyond end of device [ 221.990607][ T6122] loop0: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 221.991296][ T6122] syz.0.17: attempt to access beyond end of device [ 221.991296][ T6122] loop0: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 221.991456][ T6122] syz.0.17: attempt to access beyond end of device [ 221.991456][ T6122] loop0: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 221.991616][ T6122] syz.0.17: attempt to access beyond end of device [ 221.991616][ T6122] loop0: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 221.991770][ T6122] syz.0.17: attempt to access beyond end of device [ 221.991770][ T6122] loop0: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 226.926511][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 226.942104][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 226.943620][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 226.945552][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 226.946236][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.008321][ T6122] bio_check_eod: 54909 callbacks suppressed [ 227.008337][ T6122] syz.0.17: attempt to access beyond end of device [ 227.008337][ T6122] loop0: rw=0, sector=89360, nr_sectors = 8 limit=40427 [ 227.008490][ T6122] syz.0.17: attempt to access beyond end of device [ 227.008490][ T6122] loop0: rw=0, sector=89368, nr_sectors = 8 limit=40427 [ 227.008634][ T6122] syz.0.17: attempt to access beyond end of device [ 227.008634][ T6122] loop0: rw=0, sector=89376, nr_sectors = 8 limit=40427 [ 227.008780][ T6122] syz.0.17: attempt to access beyond end of device [ 227.008780][ T6122] loop0: rw=0, sector=89384, nr_sectors = 8 limit=40427 [ 227.008920][ T6122] syz.0.17: attempt to access beyond end of device [ 227.008920][ T6122] loop0: rw=0, sector=89392, nr_sectors = 8 limit=40427 [ 227.009061][ T6122] syz.0.17: attempt to access beyond end of device [ 227.009061][ T6122] loop0: rw=0, sector=89400, nr_sectors = 8 limit=40427 [ 227.009216][ T6122] syz.0.17: attempt to access beyond end of device [ 227.009216][ T6122] loop0: rw=0, sector=89408, nr_sectors = 8 limit=40427 [ 227.009339][ T6122] syz.0.17: attempt to access beyond end of device [ 227.009339][ T6122] loop0: rw=0, sector=89416, nr_sectors = 8 limit=40427 [ 227.009458][ T6122] syz.0.17: attempt to access beyond end of device [ 227.009458][ T6122] loop0: rw=0, sector=89424, nr_sectors = 8 limit=40427 [ 227.009577][ T6122] syz.0.17: attempt to access beyond end of device [ 227.009577][ T6122] loop0: rw=0, sector=89432, nr_sectors = 8 limit=40427 [ 227.372451][ T6167] chnl_net:caif_netlink_parms(): no params data found [ 227.709818][ T6167] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.710030][ T6167] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.710185][ T6167] bridge_slave_0: entered allmulticast mode [ 227.712629][ T6167] bridge_slave_0: entered promiscuous mode [ 227.715928][ T6167] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.716163][ T6167] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.716333][ T6167] bridge_slave_1: entered allmulticast mode [ 227.774776][ T6167] bridge_slave_1: entered promiscuous mode [ 227.979292][ T6167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.983135][ T6167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.196325][ T6167] team0: Port device team_slave_0 added [ 228.200582][ T6167] team0: Port device team_slave_1 added [ 228.568773][ T6167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.568789][ T6167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.568814][ T6167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.571332][ T6167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.571344][ T6167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.571368][ T6167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.879827][ T6167] hsr_slave_0: entered promiscuous mode [ 228.882113][ T6167] hsr_slave_1: entered promiscuous mode [ 228.882964][ T6167] debugfs: 'hsr0' already exists in 'hsr' [ 228.883051][ T6167] Cannot create hsr debugfs directory [ 229.047972][ T60] Bluetooth: hci1: command tx timeout [ 229.514824][ T6167] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 229.555302][ T6167] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 229.597369][ T6167] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 229.636700][ T6167] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 229.850228][ T6167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.871839][ T6167] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.885391][ T3850] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.886507][ T3850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.912665][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.912911][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.286767][ T6167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.386094][ T6167] veth0_vlan: entered promiscuous mode [ 230.404496][ T6167] veth1_vlan: entered promiscuous mode [ 230.455097][ T6167] veth0_macvtap: entered promiscuous mode [ 230.475336][ T6167] veth1_macvtap: entered promiscuous mode [ 230.504719][ T6167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.522972][ T6167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.545437][ T3805] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.546544][ T3805] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.546696][ T3805] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.546837][ T3805] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.828913][ T3850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.828933][ T3850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.874941][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.874957][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/26 17:44:55 executed programs: 3 [ 231.118131][ T60] Bluetooth: hci1: command tx timeout [ 231.572648][ T6187] loop1: detected capacity change from 0 to 40427 [ 231.591619][ T6187] F2FS-fs: heap/no_heap options were deprecated [ 231.591789][ T6187] F2FS-fs: heap/no_heap options were deprecated [ 231.605670][ T6187] F2FS-fs (loop1): Image doesn't support compression [ 231.627508][ T6187] F2FS-fs (loop1): invalid crc value [ 231.896786][ T6187] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 231.904494][ T6187] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 232.022220][ T6122] bio_check_eod: 34538 callbacks suppressed [ 232.022236][ T6122] syz.0.17: attempt to access beyond end of device [ 232.022236][ T6122] loop0: rw=524288, sector=86856, nr_sectors = 8 limit=40427 [ 232.022355][ T6122] syz.0.17: attempt to access beyond end of device [ 232.022355][ T6122] loop0: rw=524288, sector=86864, nr_sectors = 8 limit=40427 [ 232.022472][ T6122] syz.0.17: attempt to access beyond end of device [ 232.022472][ T6122] loop0: rw=524288, sector=86872, nr_sectors = 8 limit=40427 [ 232.022589][ T6122] syz.0.17: attempt to access beyond end of device [ 232.022589][ T6122] loop0: rw=524288, sector=86880, nr_sectors = 8 limit=40427 [ 232.022705][ T6122] syz.0.17: attempt to access beyond end of device [ 232.022705][ T6122] loop0: rw=524288, sector=86888, nr_sectors = 8 limit=40427 [ 232.022820][ T6122] syz.0.17: attempt to access beyond end of device [ 232.022820][ T6122] loop0: rw=524288, sector=86896, nr_sectors = 8 limit=40427 [ 232.022937][ T6122] syz.0.17: attempt to access beyond end of device [ 232.022937][ T6122] loop0: rw=524288, sector=86904, nr_sectors = 8 limit=40427 [ 232.023052][ T6122] syz.0.17: attempt to access beyond end of device [ 232.023052][ T6122] loop0: rw=524288, sector=86912, nr_sectors = 8 limit=40427 [ 232.023173][ T6122] syz.0.17: attempt to access beyond end of device [ 232.023173][ T6122] loop0: rw=524288, sector=86920, nr_sectors = 8 limit=40427 [ 232.023315][ T6122] syz.0.17: attempt to access beyond end of device [ 232.023315][ T6122] loop0: rw=524288, sector=86928, nr_sectors = 8 limit=40427 [ 233.208043][ T60] Bluetooth: hci1: command tx timeout [ 235.278843][ T60] Bluetooth: hci1: command tx timeout [ 237.032979][ T6122] bio_check_eod: 32492 callbacks suppressed [ 237.032999][ T6122] syz.0.17: attempt to access beyond end of device [ 237.032999][ T6122] loop0: rw=524288, sector=87624, nr_sectors = 8 limit=40427 [ 237.033119][ T6122] syz.0.17: attempt to access beyond end of device [ 237.033119][ T6122] loop0: rw=524288, sector=87632, nr_sectors = 8 limit=40427 [ 237.033261][ T6122] syz.0.17: attempt to access beyond end of device [ 237.033261][ T6122] loop0: rw=524288, sector=87640, nr_sectors = 8 limit=40427 [ 237.033378][ T6122] syz.0.17: attempt to access beyond end of device [ 237.033378][ T6122] loop0: rw=524288, sector=87648, nr_sectors = 8 limit=40427 [ 237.033493][ T6122] syz.0.17: attempt to access beyond end of device [ 237.033493][ T6122] loop0: rw=524288, sector=87656, nr_sectors = 8 limit=40427 [ 237.033609][ T6122] syz.0.17: attempt to access beyond end of device [ 237.033609][ T6122] loop0: rw=524288, sector=87664, nr_sectors = 8 limit=40427 [ 237.033723][ T6122] syz.0.17: attempt to access beyond end of device [ 237.033723][ T6122] loop0: rw=524288, sector=87672, nr_sectors = 8 limit=40427 [ 237.033848][ T6122] syz.0.17: attempt to access beyond end of device [ 237.033848][ T6122] loop0: rw=524288, sector=87680, nr_sectors = 8 limit=40427 [ 237.033963][ T6122] syz.0.17: attempt to access beyond end of device [ 237.033963][ T6122] loop0: rw=524288, sector=87688, nr_sectors = 8 limit=40427 [ 237.034077][ T6122] syz.0.17: attempt to access beyond end of device [ 237.034077][ T6122] loop0: rw=524288, sector=87696, nr_sectors = 8 limit=40427 [ 242.042612][ T6122] bio_check_eod: 32935 callbacks suppressed [ 242.042631][ T6122] syz.0.17: attempt to access beyond end of device [ 242.042631][ T6122] loop0: rw=0, sector=88008, nr_sectors = 8 limit=40427 [ 242.042784][ T6122] syz.0.17: attempt to access beyond end of device [ 242.042784][ T6122] loop0: rw=0, sector=88016, nr_sectors = 8 limit=40427 [ 242.042904][ T6122] syz.0.17: attempt to access beyond end of device [ 242.042904][ T6122] loop0: rw=0, sector=88024, nr_sectors = 8 limit=40427 [ 242.043023][ T6122] syz.0.17: attempt to access beyond end of device [ 242.043023][ T6122] loop0: rw=0, sector=88032, nr_sectors = 8 limit=40427 [ 242.043141][ T6122] syz.0.17: attempt to access beyond end of device [ 242.043141][ T6122] loop0: rw=0, sector=88040, nr_sectors = 8 limit=40427 [ 242.043260][ T6122] syz.0.17: attempt to access beyond end of device [ 242.043260][ T6122] loop0: rw=0, sector=88048, nr_sectors = 8 limit=40427 [ 242.043380][ T6122] syz.0.17: attempt to access beyond end of device [ 242.043380][ T6122] loop0: rw=0, sector=88056, nr_sectors = 8 limit=40427 [ 242.043530][ T6122] syz.0.17: attempt to access beyond end of device [ 242.043530][ T6122] loop0: rw=0, sector=88064, nr_sectors = 8 limit=40427 [ 242.043648][ T6122] syz.0.17: attempt to access beyond end of device [ 242.043648][ T6122] loop0: rw=0, sector=88072, nr_sectors = 8 limit=40427 [ 242.043759][ T6122] syz.0.17: attempt to access beyond end of device [ 242.043759][ T6122] loop0: rw=0, sector=88080, nr_sectors = 8 limit=40427 [ 246.234490][ T5963] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 246.249415][ T5963] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 246.250247][ T5963] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 246.251550][ T5963] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 246.252726][ T5963] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 246.916822][ T6192] chnl_net:caif_netlink_parms(): no params data found [ 247.053421][ T6122] bio_check_eod: 29712 callbacks suppressed [ 247.053437][ T6122] syz.0.17: attempt to access beyond end of device [ 247.053437][ T6122] loop0: rw=524288, sector=86176, nr_sectors = 8 limit=40427 [ 247.053557][ T6122] syz.0.17: attempt to access beyond end of device [ 247.053557][ T6122] loop0: rw=524288, sector=86184, nr_sectors = 8 limit=40427 [ 247.053704][ T6122] syz.0.17: attempt to access beyond end of device [ 247.053704][ T6122] loop0: rw=524288, sector=86192, nr_sectors = 8 limit=40427 [ 247.053821][ T6122] syz.0.17: attempt to access beyond end of device [ 247.053821][ T6122] loop0: rw=524288, sector=86200, nr_sectors = 8 limit=40427 [ 247.053970][ T6122] syz.0.17: attempt to access beyond end of device [ 247.053970][ T6122] loop0: rw=524288, sector=86208, nr_sectors = 8 limit=40427 [ 247.054098][ T6122] syz.0.17: attempt to access beyond end of device [ 247.054098][ T6122] loop0: rw=524288, sector=86216, nr_sectors = 8 limit=40427 [ 247.054223][ T6122] syz.0.17: attempt to access beyond end of device [ 247.054223][ T6122] loop0: rw=524288, sector=86224, nr_sectors = 8 limit=40427 [ 247.054365][ T6122] syz.0.17: attempt to access beyond end of device [ 247.054365][ T6122] loop0: rw=524288, sector=86232, nr_sectors = 8 limit=40427 [ 247.054488][ T6122] syz.0.17: attempt to access beyond end of device [ 247.054488][ T6122] loop0: rw=524288, sector=86240, nr_sectors = 8 limit=40427 [ 247.054615][ T6122] syz.0.17: attempt to access beyond end of device [ 247.054615][ T6122] loop0: rw=524288, sector=86248, nr_sectors = 8 limit=40427 [ 247.612501][ T6192] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.612674][ T6192] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.612885][ T6192] bridge_slave_0: entered allmulticast mode [ 247.615590][ T6192] bridge_slave_0: entered promiscuous mode [ 247.654887][ T6192] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.655042][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.655218][ T6192] bridge_slave_1: entered allmulticast mode [ 247.657615][ T6192] bridge_slave_1: entered promiscuous mode [ 247.852869][ T6192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.856552][ T6192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.051781][ T6192] team0: Port device team_slave_0 added [ 248.055105][ T6192] team0: Port device team_slave_1 added [ 248.300479][ T6192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.300494][ T6192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.300518][ T6192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.302639][ T6192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.302651][ T6192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.302676][ T6192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.317947][ T60] Bluetooth: hci2: command tx timeout [ 248.711181][ T6192] hsr_slave_0: entered promiscuous mode [ 248.712279][ T6192] hsr_slave_1: entered promiscuous mode [ 248.713092][ T6192] debugfs: 'hsr0' already exists in 'hsr' [ 248.713113][ T6192] Cannot create hsr debugfs directory [ 249.764397][ T6192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 249.792407][ T6192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 249.841982][ T6192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 249.929359][ T6192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 249.935669][ T6187] F2FS-fs (loop1): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 250.157276][ T6192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.231480][ T6192] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.282948][ T3805] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.283146][ T3805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.285642][ T3805] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.285793][ T3805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.398101][ T60] Bluetooth: hci2: command tx timeout [ 250.968624][ T6192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.106023][ T6192] veth0_vlan: entered promiscuous mode [ 251.132122][ T6192] veth1_vlan: entered promiscuous mode [ 251.197118][ T6192] veth0_macvtap: entered promiscuous mode [ 251.217243][ T6192] veth1_macvtap: entered promiscuous mode [ 251.261125][ T6192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.282312][ T6192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.305737][ T3850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.305956][ T3850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.350000][ T3893] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.357526][ T3893] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.728261][ T3850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.728285][ T3850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.895722][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.895741][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.058014][ T6187] bio_check_eod: 28995 callbacks suppressed [ 252.058033][ T6187] syz.1.18: attempt to access beyond end of device [ 252.058033][ T6187] loop1: rw=0, sector=88400, nr_sectors = 8 limit=40427 [ 252.058178][ T6187] syz.1.18: attempt to access beyond end of device [ 252.058178][ T6187] loop1: rw=0, sector=88408, nr_sectors = 8 limit=40427 [ 252.058319][ T6187] syz.1.18: attempt to access beyond end of device [ 252.058319][ T6187] loop1: rw=0, sector=88416, nr_sectors = 8 limit=40427 [ 252.058461][ T6187] syz.1.18: attempt to access beyond end of device [ 252.058461][ T6187] loop1: rw=0, sector=88424, nr_sectors = 8 limit=40427 [ 252.058603][ T6187] syz.1.18: attempt to access beyond end of device [ 252.058603][ T6187] loop1: rw=0, sector=88432, nr_sectors = 8 limit=40427 [ 252.058745][ T6187] syz.1.18: attempt to access beyond end of device [ 252.058745][ T6187] loop1: rw=0, sector=88440, nr_sectors = 8 limit=40427 [ 252.058893][ T6187] syz.1.18: attempt to access beyond end of device [ 252.058893][ T6187] loop1: rw=0, sector=88448, nr_sectors = 8 limit=40427 [ 252.059034][ T6187] syz.1.18: attempt to access beyond end of device [ 252.059034][ T6187] loop1: rw=0, sector=88456, nr_sectors = 8 limit=40427 [ 252.059189][ T6187] syz.1.18: attempt to access beyond end of device [ 252.059189][ T6187] loop1: rw=0, sector=88464, nr_sectors = 8 limit=40427 [ 252.059307][ T6187] syz.1.18: attempt to access beyond end of device [ 252.059307][ T6187] loop1: rw=0, sector=88472, nr_sectors = 8 limit=40427 2025/09/26 17:45:16 executed programs: 4 [ 252.488398][ T60] Bluetooth: hci2: command tx timeout [ 253.409216][ T6220] loop2: detected capacity change from 0 to 40427 [ 253.427562][ T6220] F2FS-fs: heap/no_heap options were deprecated [ 253.434410][ T6220] F2FS-fs: heap/no_heap options were deprecated [ 253.460400][ T6220] F2FS-fs (loop2): Image doesn't support compression [ 253.530319][ T6220] F2FS-fs (loop2): invalid crc value [ 253.875327][ T6220] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 253.887451][ T6220] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 254.559093][ T60] Bluetooth: hci2: command tx timeout [ 255.606292][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.606362][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.075738][ T6122] bio_check_eod: 37728 callbacks suppressed [ 257.075758][ T6122] syz.0.17: attempt to access beyond end of device [ 257.075758][ T6122] loop0: rw=524288, sector=88712, nr_sectors = 8 limit=40427 [ 257.075859][ T6122] syz.0.17: attempt to access beyond end of device [ 257.075859][ T6122] loop0: rw=524288, sector=88720, nr_sectors = 8 limit=40427 [ 257.075985][ T6122] syz.0.17: attempt to access beyond end of device [ 257.075985][ T6122] loop0: rw=524288, sector=88728, nr_sectors = 8 limit=40427 [ 257.076136][ T6122] syz.0.17: attempt to access beyond end of device [ 257.076136][ T6122] loop0: rw=524288, sector=88736, nr_sectors = 8 limit=40427 [ 257.076266][ T6122] syz.0.17: attempt to access beyond end of device [ 257.076266][ T6122] loop0: rw=524288, sector=88744, nr_sectors = 8 limit=40427 [ 257.076389][ T6122] syz.0.17: attempt to access beyond end of device [ 257.076389][ T6122] loop0: rw=524288, sector=88752, nr_sectors = 8 limit=40427 [ 257.076512][ T6122] syz.0.17: attempt to access beyond end of device [ 257.076512][ T6122] loop0: rw=524288, sector=88760, nr_sectors = 8 limit=40427 [ 257.076641][ T6122] syz.0.17: attempt to access beyond end of device [ 257.076641][ T6122] loop0: rw=524288, sector=88768, nr_sectors = 8 limit=40427 [ 257.076756][ T6122] syz.0.17: attempt to access beyond end of device [ 257.076756][ T6122] loop0: rw=524288, sector=88776, nr_sectors = 8 limit=40427 [ 257.076871][ T6122] syz.0.17: attempt to access beyond end of device [ 257.076871][ T6122] loop0: rw=524288, sector=88784, nr_sectors = 8 limit=40427 [ 262.077912][ T6187] bio_check_eod: 40879 callbacks suppressed [ 262.077947][ T6187] syz.1.18: attempt to access beyond end of device [ 262.077947][ T6187] loop1: rw=524288, sector=89432, nr_sectors = 8 limit=40427 [ 262.078091][ T6187] syz.1.18: attempt to access beyond end of device [ 262.078091][ T6187] loop1: rw=524288, sector=89440, nr_sectors = 8 limit=40427 [ 262.078235][ T6187] syz.1.18: attempt to access beyond end of device [ 262.078235][ T6187] loop1: rw=524288, sector=89448, nr_sectors = 8 limit=40427 [ 262.078370][ T6187] syz.1.18: attempt to access beyond end of device [ 262.078370][ T6187] loop1: rw=524288, sector=89456, nr_sectors = 8 limit=40427 [ 262.078504][ T6187] syz.1.18: attempt to access beyond end of device [ 262.078504][ T6187] loop1: rw=524288, sector=89464, nr_sectors = 8 limit=40427 [ 262.078639][ T6187] syz.1.18: attempt to access beyond end of device [ 262.078639][ T6187] loop1: rw=524288, sector=89472, nr_sectors = 8 limit=40427 [ 262.078778][ T6187] syz.1.18: attempt to access beyond end of device [ 262.078778][ T6187] loop1: rw=524288, sector=89480, nr_sectors = 8 limit=40427 [ 262.078914][ T6187] syz.1.18: attempt to access beyond end of device [ 262.078914][ T6187] loop1: rw=524288, sector=89488, nr_sectors = 8 limit=40427 [ 262.079049][ T6187] syz.1.18: attempt to access beyond end of device [ 262.079049][ T6187] loop1: rw=524288, sector=89496, nr_sectors = 8 limit=40427 [ 262.079192][ T6187] syz.1.18: attempt to access beyond end of device [ 262.079192][ T6187] loop1: rw=524288, sector=89504, nr_sectors = 8 limit=40427 [ 267.094672][ T6187] bio_check_eod: 39340 callbacks suppressed [ 267.094692][ T6187] syz.1.18: attempt to access beyond end of device [ 267.094692][ T6187] loop1: rw=524288, sector=86528, nr_sectors = 8 limit=40427 [ 267.094815][ T6187] syz.1.18: attempt to access beyond end of device [ 267.094815][ T6187] loop1: rw=524288, sector=86536, nr_sectors = 8 limit=40427 [ 267.094931][ T6187] syz.1.18: attempt to access beyond end of device [ 267.094931][ T6187] loop1: rw=524288, sector=86544, nr_sectors = 8 limit=40427 [ 267.095045][ T6187] syz.1.18: attempt to access beyond end of device [ 267.095045][ T6187] loop1: rw=524288, sector=86552, nr_sectors = 8 limit=40427 [ 267.095185][ T6187] syz.1.18: attempt to access beyond end of device [ 267.095185][ T6187] loop1: rw=524288, sector=86560, nr_sectors = 8 limit=40427 [ 267.095300][ T6187] syz.1.18: attempt to access beyond end of device [ 267.095300][ T6187] loop1: rw=524288, sector=86568, nr_sectors = 8 limit=40427 [ 267.095415][ T6187] syz.1.18: attempt to access beyond end of device [ 267.095415][ T6187] loop1: rw=524288, sector=86576, nr_sectors = 8 limit=40427 [ 267.095529][ T6187] syz.1.18: attempt to access beyond end of device [ 267.095529][ T6187] loop1: rw=524288, sector=86584, nr_sectors = 8 limit=40427 [ 267.095644][ T6187] syz.1.18: attempt to access beyond end of device [ 267.095644][ T6187] loop1: rw=524288, sector=86592, nr_sectors = 8 limit=40427 [ 267.095758][ T6187] syz.1.18: attempt to access beyond end of device [ 267.095758][ T6187] loop1: rw=524288, sector=86600, nr_sectors = 8 limit=40427 [ 267.652995][ T5963] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 267.656441][ T5963] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 267.657208][ T5963] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 267.672356][ T5963] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 267.678699][ T5963] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 268.575416][ T6225] chnl_net:caif_netlink_parms(): no params data found [ 269.465200][ T6225] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.465326][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.465499][ T6225] bridge_slave_0: entered allmulticast mode [ 269.492677][ T6225] bridge_slave_0: entered promiscuous mode [ 269.504051][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.504184][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.504371][ T6225] bridge_slave_1: entered allmulticast mode [ 269.506980][ T6225] bridge_slave_1: entered promiscuous mode [ 269.767869][ T60] Bluetooth: hci3: command tx timeout [ 269.935628][ T6225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.969553][ T6225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.295190][ T6225] team0: Port device team_slave_0 added [ 270.309000][ T6225] team0: Port device team_slave_1 added [ 270.838772][ T6225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.838789][ T6225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.838818][ T6225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.850729][ T6225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.850748][ T6225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.850777][ T6225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.299709][ T6225] hsr_slave_0: entered promiscuous mode [ 271.300799][ T6225] hsr_slave_1: entered promiscuous mode [ 271.301575][ T6225] debugfs: 'hsr0' already exists in 'hsr' [ 271.301596][ T6225] Cannot create hsr debugfs directory [ 271.837900][ T60] Bluetooth: hci3: command tx timeout [ 272.097892][ T6122] bio_check_eod: 31661 callbacks suppressed [ 272.097910][ T6122] syz.0.17: attempt to access beyond end of device [ 272.097910][ T6122] loop0: rw=524288, sector=87152, nr_sectors = 8 limit=40427 [ 272.098064][ T6122] syz.0.17: attempt to access beyond end of device [ 272.098064][ T6122] loop0: rw=524288, sector=87160, nr_sectors = 8 limit=40427 [ 272.098230][ T6122] syz.0.17: attempt to access beyond end of device [ 272.098230][ T6122] loop0: rw=524288, sector=87168, nr_sectors = 8 limit=40427 [ 272.098374][ T6122] syz.0.17: attempt to access beyond end of device [ 272.098374][ T6122] loop0: rw=524288, sector=87176, nr_sectors = 8 limit=40427 [ 272.098522][ T6122] syz.0.17: attempt to access beyond end of device [ 272.098522][ T6122] loop0: rw=524288, sector=87184, nr_sectors = 8 limit=40427 [ 272.098658][ T6122] syz.0.17: attempt to access beyond end of device [ 272.098658][ T6122] loop0: rw=524288, sector=87192, nr_sectors = 8 limit=40427 [ 272.098793][ T6122] syz.0.17: attempt to access beyond end of device [ 272.098793][ T6122] loop0: rw=524288, sector=87200, nr_sectors = 8 limit=40427 [ 272.098928][ T6122] syz.0.17: attempt to access beyond end of device [ 272.098928][ T6122] loop0: rw=524288, sector=87208, nr_sectors = 8 limit=40427 [ 272.099063][ T6122] syz.0.17: attempt to access beyond end of device [ 272.099063][ T6122] loop0: rw=524288, sector=87216, nr_sectors = 8 limit=40427 [ 272.099200][ T6122] syz.0.17: attempt to access beyond end of device [ 272.099200][ T6122] loop0: rw=524288, sector=87224, nr_sectors = 8 limit=40427 [ 272.759412][ T6225] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 272.813507][ T6225] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 272.903855][ T6225] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 272.970700][ T6225] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 273.382144][ T6225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.481228][ T6225] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.559865][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.560055][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.562509][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.562697][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.918092][ T60] Bluetooth: hci3: command tx timeout [ 274.388405][ T6225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.508028][ T6225] veth0_vlan: entered promiscuous mode [ 274.515683][ T6225] veth1_vlan: entered promiscuous mode [ 274.606404][ T6225] veth0_macvtap: entered promiscuous mode [ 274.667488][ T6225] veth1_macvtap: entered promiscuous mode [ 274.744710][ T6225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.770585][ T6225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.794079][ T69] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.796247][ T69] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.796511][ T69] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.796546][ T69] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.317707][ T3893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.317725][ T3893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.541283][ T3534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.541301][ T3534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/26 17:45:40 executed programs: 5 [ 275.997868][ T60] Bluetooth: hci3: command tx timeout [ 277.103034][ T6246] loop3: detected capacity change from 0 to 40427 [ 277.111757][ T6246] F2FS-fs: heap/no_heap options were deprecated [ 277.111976][ T6246] F2FS-fs: heap/no_heap options were deprecated [ 277.119006][ T6187] bio_check_eod: 30419 callbacks suppressed [ 277.119024][ T6187] syz.1.18: attempt to access beyond end of device [ 277.119024][ T6187] loop1: rw=524288, sector=87192, nr_sectors = 8 limit=40427 [ 277.119220][ T6187] syz.1.18: attempt to access beyond end of device [ 277.119220][ T6187] loop1: rw=524288, sector=87200, nr_sectors = 8 limit=40427 [ 277.119386][ T6187] syz.1.18: attempt to access beyond end of device [ 277.119386][ T6187] loop1: rw=524288, sector=87208, nr_sectors = 8 limit=40427 [ 277.119537][ T6187] syz.1.18: attempt to access beyond end of device [ 277.119537][ T6187] loop1: rw=524288, sector=87216, nr_sectors = 8 limit=40427 [ 277.119670][ T6187] syz.1.18: attempt to access beyond end of device [ 277.119670][ T6187] loop1: rw=524288, sector=87224, nr_sectors = 8 limit=40427 [ 277.119803][ T6187] syz.1.18: attempt to access beyond end of device [ 277.119803][ T6187] loop1: rw=524288, sector=87232, nr_sectors = 8 limit=40427 [ 277.119941][ T6187] syz.1.18: attempt to access beyond end of device [ 277.119941][ T6187] loop1: rw=524288, sector=87240, nr_sectors = 8 limit=40427 [ 277.120075][ T6187] syz.1.18: attempt to access beyond end of device [ 277.120075][ T6187] loop1: rw=524288, sector=87248, nr_sectors = 8 limit=40427 [ 277.120224][ T6187] syz.1.18: attempt to access beyond end of device [ 277.120224][ T6187] loop1: rw=524288, sector=87256, nr_sectors = 8 limit=40427 [ 277.120365][ T6187] syz.1.18: attempt to access beyond end of device [ 277.120365][ T6187] loop1: rw=524288, sector=87264, nr_sectors = 8 limit=40427 [ 277.303209][ T6246] F2FS-fs (loop3): Image doesn't support compression [ 277.343533][ T6246] F2FS-fs (loop3): invalid crc value [ 277.804916][ T6246] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 277.838285][ T6246] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 282.136015][ T6187] bio_check_eod: 28700 callbacks suppressed [ 282.136036][ T6187] syz.1.18: attempt to access beyond end of device [ 282.136036][ T6187] loop1: rw=0, sector=87704, nr_sectors = 8 limit=40427 [ 282.136166][ T6187] syz.1.18: attempt to access beyond end of device [ 282.136166][ T6187] loop1: rw=0, sector=87712, nr_sectors = 8 limit=40427 [ 282.136285][ T6187] syz.1.18: attempt to access beyond end of device [ 282.136285][ T6187] loop1: rw=0, sector=87720, nr_sectors = 8 limit=40427 [ 282.136405][ T6187] syz.1.18: attempt to access beyond end of device [ 282.136405][ T6187] loop1: rw=0, sector=87728, nr_sectors = 8 limit=40427 [ 282.136524][ T6187] syz.1.18: attempt to access beyond end of device [ 282.136524][ T6187] loop1: rw=0, sector=87736, nr_sectors = 8 limit=40427 [ 282.136645][ T6187] syz.1.18: attempt to access beyond end of device [ 282.136645][ T6187] loop1: rw=0, sector=87744, nr_sectors = 8 limit=40427 [ 282.136763][ T6187] syz.1.18: attempt to access beyond end of device [ 282.136763][ T6187] loop1: rw=0, sector=87752, nr_sectors = 8 limit=40427 [ 282.136888][ T6187] syz.1.18: attempt to access beyond end of device [ 282.136888][ T6187] loop1: rw=0, sector=87760, nr_sectors = 8 limit=40427 [ 282.137006][ T6187] syz.1.18: attempt to access beyond end of device [ 282.137006][ T6187] loop1: rw=0, sector=87768, nr_sectors = 8 limit=40427 [ 282.137124][ T6187] syz.1.18: attempt to access beyond end of device [ 282.137124][ T6187] loop1: rw=0, sector=87776, nr_sectors = 8 limit=40427 [ 286.887328][ T6220] F2FS-fs (loop2): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 287.137844][ T6220] bio_check_eod: 30673 callbacks suppressed [ 287.137863][ T6220] syz.2.19: attempt to access beyond end of device [ 287.137863][ T6220] loop2: rw=524288, sector=89064, nr_sectors = 8 limit=40427 [ 287.138063][ T6220] syz.2.19: attempt to access beyond end of device [ 287.138063][ T6220] loop2: rw=524288, sector=89072, nr_sectors = 8 limit=40427 [ 287.138252][ T6220] syz.2.19: attempt to access beyond end of device [ 287.138252][ T6220] loop2: rw=524288, sector=89080, nr_sectors = 8 limit=40427 [ 287.138507][ T6220] syz.2.19: attempt to access beyond end of device [ 287.138507][ T6220] loop2: rw=524288, sector=89088, nr_sectors = 8 limit=40427 [ 287.138718][ T6220] syz.2.19: attempt to access beyond end of device [ 287.138718][ T6220] loop2: rw=524288, sector=89096, nr_sectors = 8 limit=40427 [ 287.138901][ T6220] syz.2.19: attempt to access beyond end of device [ 287.138901][ T6220] loop2: rw=524288, sector=89104, nr_sectors = 8 limit=40427 [ 287.139083][ T6220] syz.2.19: attempt to access beyond end of device [ 287.139083][ T6220] loop2: rw=524288, sector=89112, nr_sectors = 8 limit=40427 [ 287.139253][ T6220] syz.2.19: attempt to access beyond end of device [ 287.139253][ T6220] loop2: rw=524288, sector=89120, nr_sectors = 8 limit=40427 [ 287.139408][ T6220] syz.2.19: attempt to access beyond end of device [ 287.139408][ T6220] loop2: rw=524288, sector=89128, nr_sectors = 8 limit=40427 [ 287.139568][ T6220] syz.2.19: attempt to access beyond end of device [ 287.139568][ T6220] loop2: rw=524288, sector=89136, nr_sectors = 8 limit=40427 [ 291.312248][ T5963] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 291.314824][ T5963] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 291.315595][ T5963] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 291.316588][ T5963] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 291.317263][ T5963] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 292.147936][ T6220] bio_check_eod: 40147 callbacks suppressed [ 292.147971][ T6220] syz.2.19: attempt to access beyond end of device [ 292.147971][ T6220] loop2: rw=524288, sector=88288, nr_sectors = 8 limit=40427 [ 292.148053][ T6122] syz.0.17: attempt to access beyond end of device [ 292.148053][ T6122] loop0: rw=524288, sector=86168, nr_sectors = 8 limit=40427 [ 292.148113][ T6220] syz.2.19: attempt to access beyond end of device [ 292.148113][ T6220] loop2: rw=524288, sector=88296, nr_sectors = 8 limit=40427 [ 292.148197][ T6122] syz.0.17: attempt to access beyond end of device [ 292.148197][ T6122] loop0: rw=524288, sector=86176, nr_sectors = 8 limit=40427 [ 292.148259][ T6220] syz.2.19: attempt to access beyond end of device [ 292.148259][ T6220] loop2: rw=524288, sector=88304, nr_sectors = 8 limit=40427 [ 292.148340][ T6122] syz.0.17: attempt to access beyond end of device [ 292.148340][ T6122] loop0: rw=524288, sector=86184, nr_sectors = 8 limit=40427 [ 292.148398][ T6220] syz.2.19: attempt to access beyond end of device [ 292.148398][ T6220] loop2: rw=524288, sector=88312, nr_sectors = 8 limit=40427 [ 292.148482][ T6122] syz.0.17: attempt to access beyond end of device [ 292.148482][ T6122] loop0: rw=524288, sector=86192, nr_sectors = 8 limit=40427 [ 292.148536][ T6220] syz.2.19: attempt to access beyond end of device [ 292.148536][ T6220] loop2: rw=524288, sector=88320, nr_sectors = 8 limit=40427 [ 292.148624][ T6122] syz.0.17: attempt to access beyond end of device [ 292.148624][ T6122] loop0: rw=524288, sector=86200, nr_sectors = 8 limit=40427 [ 292.575983][ T6251] chnl_net:caif_netlink_parms(): no params data found [ 293.358376][ T60] Bluetooth: hci4: command tx timeout [ 293.647361][ T6251] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.647489][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.647656][ T6251] bridge_slave_0: entered allmulticast mode [ 293.650576][ T6251] bridge_slave_0: entered promiscuous mode [ 293.653559][ T6251] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.653693][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.653868][ T6251] bridge_slave_1: entered allmulticast mode [ 293.656506][ T6251] bridge_slave_1: entered promiscuous mode [ 294.233473][ T6251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.237343][ T6251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.039334][ T6251] team0: Port device team_slave_0 added [ 295.042665][ T6251] team0: Port device team_slave_1 added [ 295.440225][ T60] Bluetooth: hci4: command tx timeout [ 295.550793][ T6251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.550807][ T6251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.550831][ T6251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.553092][ T6251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.553104][ T6251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.553127][ T6251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.339225][ T6251] hsr_slave_0: entered promiscuous mode [ 296.342209][ T6251] hsr_slave_1: entered promiscuous mode [ 296.343048][ T6251] debugfs: 'hsr0' already exists in 'hsr' [ 296.343077][ T6251] Cannot create hsr debugfs directory [ 297.164956][ T6187] bio_check_eod: 39596 callbacks suppressed [ 297.164973][ T6187] syz.1.18: attempt to access beyond end of device [ 297.164973][ T6187] loop1: rw=0, sector=89680, nr_sectors = 8 limit=40427 [ 297.165069][ T6187] syz.1.18: attempt to access beyond end of device [ 297.165069][ T6187] loop1: rw=0, sector=89688, nr_sectors = 8 limit=40427 [ 297.165190][ T6187] syz.1.18: attempt to access beyond end of device [ 297.165190][ T6187] loop1: rw=0, sector=89696, nr_sectors = 8 limit=40427 [ 297.165335][ T6187] syz.1.18: attempt to access beyond end of device [ 297.165335][ T6187] loop1: rw=0, sector=89704, nr_sectors = 8 limit=40427 [ 297.165456][ T6187] syz.1.18: attempt to access beyond end of device [ 297.165456][ T6187] loop1: rw=0, sector=89712, nr_sectors = 8 limit=40427 [ 297.165575][ T6187] syz.1.18: attempt to access beyond end of device [ 297.165575][ T6187] loop1: rw=0, sector=89720, nr_sectors = 8 limit=40427 [ 297.165700][ T6187] syz.1.18: attempt to access beyond end of device [ 297.165700][ T6187] loop1: rw=0, sector=89728, nr_sectors = 8 limit=40427 [ 297.165819][ T6187] syz.1.18: attempt to access beyond end of device [ 297.165819][ T6187] loop1: rw=0, sector=89736, nr_sectors = 8 limit=40427 [ 297.165938][ T6187] syz.1.18: attempt to access beyond end of device [ 297.165938][ T6187] loop1: rw=0, sector=89744, nr_sectors = 8 limit=40427 [ 297.166056][ T6187] syz.1.18: attempt to access beyond end of device [ 297.166056][ T6187] loop1: rw=0, sector=89752, nr_sectors = 8 limit=40427 [ 297.538299][ T60] Bluetooth: hci4: command tx timeout [ 298.075249][ T6251] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 298.229243][ T6251] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 298.281922][ T6251] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 298.382198][ T6251] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 299.008344][ T6251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.099609][ T6251] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.142924][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.143195][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.192737][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.192909][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.598297][ T60] Bluetooth: hci4: command tx timeout [ 300.007421][ T6251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.088007][ T6251] veth0_vlan: entered promiscuous mode [ 301.121163][ T6251] veth1_vlan: entered promiscuous mode [ 301.328615][ T6251] veth0_macvtap: entered promiscuous mode [ 301.366485][ T6251] veth1_macvtap: entered promiscuous mode [ 301.492337][ T6251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.551885][ T6251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.587331][ T1170] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.587573][ T1170] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.587623][ T1170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.587654][ T1170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.167928][ T6220] bio_check_eod: 34959 callbacks suppressed [ 302.167943][ T6220] syz.2.19: attempt to access beyond end of device [ 302.167943][ T6220] loop2: rw=0, sector=89664, nr_sectors = 8 limit=40427 [ 302.168106][ T6220] syz.2.19: attempt to access beyond end of device [ 302.168106][ T6220] loop2: rw=0, sector=89672, nr_sectors = 8 limit=40427 [ 302.168249][ T6220] syz.2.19: attempt to access beyond end of device [ 302.168249][ T6220] loop2: rw=0, sector=89680, nr_sectors = 8 limit=40427 [ 302.168391][ T6220] syz.2.19: attempt to access beyond end of device [ 302.168391][ T6220] loop2: rw=0, sector=89688, nr_sectors = 8 limit=40427 [ 302.168539][ T6220] syz.2.19: attempt to access beyond end of device [ 302.168539][ T6220] loop2: rw=0, sector=89696, nr_sectors = 8 limit=40427 [ 302.168678][ T6220] syz.2.19: attempt to access beyond end of device [ 302.168678][ T6220] loop2: rw=0, sector=89704, nr_sectors = 8 limit=40427 [ 302.168817][ T6220] syz.2.19: attempt to access beyond end of device [ 302.168817][ T6220] loop2: rw=0, sector=89712, nr_sectors = 8 limit=40427 [ 302.168956][ T6220] syz.2.19: attempt to access beyond end of device [ 302.168956][ T6220] loop2: rw=0, sector=89720, nr_sectors = 8 limit=40427 [ 302.169096][ T6220] syz.2.19: attempt to access beyond end of device [ 302.169096][ T6220] loop2: rw=0, sector=89728, nr_sectors = 8 limit=40427 [ 302.169233][ T6220] syz.2.19: attempt to access beyond end of device [ 302.169233][ T6220] loop2: rw=0, sector=89736, nr_sectors = 8 limit=40427 [ 302.400531][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.400549][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.547924][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.547941][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/26 17:46:07 executed programs: 6 [ 304.372054][ T6280] loop4: detected capacity change from 0 to 40427 [ 304.373236][ T6280] F2FS-fs: heap/no_heap options were deprecated [ 304.373404][ T6280] F2FS-fs: heap/no_heap options were deprecated [ 304.417912][ T6280] F2FS-fs (loop4): Image doesn't support compression [ 304.484065][ T6280] F2FS-fs (loop4): invalid crc value [ 305.054862][ T6280] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 305.105506][ T6280] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 307.177836][ T6187] bio_check_eod: 33893 callbacks suppressed [ 307.177856][ T6187] syz.1.18: attempt to access beyond end of device [ 307.177856][ T6187] loop1: rw=0, sector=88008, nr_sectors = 8 limit=40427 [ 307.178010][ T6187] syz.1.18: attempt to access beyond end of device [ 307.178010][ T6187] loop1: rw=0, sector=88016, nr_sectors = 8 limit=40427 [ 307.178151][ T6187] syz.1.18: attempt to access beyond end of device [ 307.178151][ T6187] loop1: rw=0, sector=88024, nr_sectors = 8 limit=40427 [ 307.178292][ T6187] syz.1.18: attempt to access beyond end of device [ 307.178292][ T6187] loop1: rw=0, sector=88032, nr_sectors = 8 limit=40427 [ 307.178433][ T6187] syz.1.18: attempt to access beyond end of device [ 307.178433][ T6187] loop1: rw=0, sector=88040, nr_sectors = 8 limit=40427 [ 307.178573][ T6187] syz.1.18: attempt to access beyond end of device [ 307.178573][ T6187] loop1: rw=0, sector=88048, nr_sectors = 8 limit=40427 [ 307.178717][ T6187] syz.1.18: attempt to access beyond end of device [ 307.178717][ T6187] loop1: rw=0, sector=88056, nr_sectors = 8 limit=40427 [ 307.178857][ T6187] syz.1.18: attempt to access beyond end of device [ 307.178857][ T6187] loop1: rw=0, sector=88064, nr_sectors = 8 limit=40427 [ 307.179004][ T6187] syz.1.18: attempt to access beyond end of device [ 307.179004][ T6187] loop1: rw=0, sector=88072, nr_sectors = 8 limit=40427 [ 307.179165][ T6187] syz.1.18: attempt to access beyond end of device [ 307.179165][ T6187] loop1: rw=0, sector=88080, nr_sectors = 8 limit=40427 [ 312.207818][ T6220] bio_check_eod: 36355 callbacks suppressed [ 312.207837][ T6220] syz.2.19: attempt to access beyond end of device [ 312.207837][ T6220] loop2: rw=524288, sector=89128, nr_sectors = 8 limit=40427 [ 312.207993][ T6220] syz.2.19: attempt to access beyond end of device [ 312.207993][ T6220] loop2: rw=524288, sector=89136, nr_sectors = 8 limit=40427 [ 312.208132][ T6220] syz.2.19: attempt to access beyond end of device [ 312.208132][ T6220] loop2: rw=524288, sector=89144, nr_sectors = 8 limit=40427 [ 312.208268][ T6220] syz.2.19: attempt to access beyond end of device [ 312.208268][ T6220] loop2: rw=524288, sector=89152, nr_sectors = 8 limit=40427 [ 312.208403][ T6220] syz.2.19: attempt to access beyond end of device [ 312.208403][ T6220] loop2: rw=524288, sector=89160, nr_sectors = 8 limit=40427 [ 312.208537][ T6220] syz.2.19: attempt to access beyond end of device [ 312.208537][ T6220] loop2: rw=524288, sector=89168, nr_sectors = 8 limit=40427 [ 312.208672][ T6220] syz.2.19: attempt to access beyond end of device [ 312.208672][ T6220] loop2: rw=524288, sector=89176, nr_sectors = 8 limit=40427 [ 312.208839][ T6220] syz.2.19: attempt to access beyond end of device [ 312.208839][ T6220] loop2: rw=524288, sector=89184, nr_sectors = 8 limit=40427 [ 312.208981][ T6220] syz.2.19: attempt to access beyond end of device [ 312.208981][ T6220] loop2: rw=524288, sector=89192, nr_sectors = 8 limit=40427 [ 312.209117][ T6220] syz.2.19: attempt to access beyond end of device [ 312.209117][ T6220] loop2: rw=524288, sector=89200, nr_sectors = 8 limit=40427 [ 317.049451][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.049531][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.217906][ T6122] bio_check_eod: 34833 callbacks suppressed [ 317.217925][ T6122] syz.0.17: attempt to access beyond end of device [ 317.217925][ T6122] loop0: rw=0, sector=89824, nr_sectors = 8 limit=40427 [ 317.218103][ T6122] syz.0.17: attempt to access beyond end of device [ 317.218103][ T6122] loop0: rw=0, sector=89832, nr_sectors = 8 limit=40427 [ 317.218245][ T6122] syz.0.17: attempt to access beyond end of device [ 317.218245][ T6122] loop0: rw=0, sector=89840, nr_sectors = 8 limit=40427 [ 317.218385][ T6122] syz.0.17: attempt to access beyond end of device [ 317.218385][ T6122] loop0: rw=0, sector=89848, nr_sectors = 8 limit=40427 [ 317.218525][ T6122] syz.0.17: attempt to access beyond end of device [ 317.218525][ T6122] loop0: rw=0, sector=89856, nr_sectors = 8 limit=40427 [ 317.218673][ T6122] syz.0.17: attempt to access beyond end of device [ 317.218673][ T6122] loop0: rw=0, sector=89864, nr_sectors = 8 limit=40427 [ 317.218813][ T6122] syz.0.17: attempt to access beyond end of device [ 317.218813][ T6122] loop0: rw=0, sector=89872, nr_sectors = 8 limit=40427 [ 317.218957][ T6122] syz.0.17: attempt to access beyond end of device [ 317.218957][ T6122] loop0: rw=0, sector=89880, nr_sectors = 8 limit=40427 [ 317.219097][ T6122] syz.0.17: attempt to access beyond end of device [ 317.219097][ T6122] loop0: rw=0, sector=89888, nr_sectors = 8 limit=40427 [ 317.219260][ T6122] syz.0.17: attempt to access beyond end of device [ 317.219260][ T6122] loop0: rw=0, sector=89896, nr_sectors = 8 limit=40427 [ 318.185886][ T5963] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 318.195281][ T5963] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 318.198033][ T5963] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 318.227852][ T5963] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 318.257893][ T5963] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 318.433878][ T6246] F2FS-fs (loop3): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 318.985904][ T6291] chnl_net:caif_netlink_parms(): no params data found [ 320.318227][ T60] Bluetooth: hci5: command tx timeout [ 320.411588][ T6291] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.432399][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.432618][ T6291] bridge_slave_0: entered allmulticast mode [ 320.435694][ T6291] bridge_slave_0: entered promiscuous mode [ 320.461312][ T6291] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.461508][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.461674][ T6291] bridge_slave_1: entered allmulticast mode [ 320.464213][ T6291] bridge_slave_1: entered promiscuous mode [ 321.172590][ T6291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.176277][ T6291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.969681][ T6291] team0: Port device team_slave_0 added [ 321.974582][ T6291] team0: Port device team_slave_1 added [ 322.237840][ T6187] bio_check_eod: 38579 callbacks suppressed [ 322.237857][ T6187] syz.1.18: attempt to access beyond end of device [ 322.237857][ T6187] loop1: rw=524288, sector=88512, nr_sectors = 8 limit=40427 [ 322.237999][ T6187] syz.1.18: attempt to access beyond end of device [ 322.237999][ T6187] loop1: rw=524288, sector=88520, nr_sectors = 8 limit=40427 [ 322.238019][ T6220] syz.2.19: attempt to access beyond end of device [ 322.238019][ T6220] loop2: rw=524288, sector=88248, nr_sectors = 8 limit=40427 [ 322.238163][ T6220] syz.2.19: attempt to access beyond end of device [ 322.238163][ T6220] loop2: rw=524288, sector=88256, nr_sectors = 8 limit=40427 [ 322.238167][ T6187] syz.1.18: attempt to access beyond end of device [ 322.238167][ T6187] loop1: rw=524288, sector=88528, nr_sectors = 8 limit=40427 [ 322.238302][ T6220] syz.2.19: attempt to access beyond end of device [ 322.238302][ T6220] loop2: rw=524288, sector=88264, nr_sectors = 8 limit=40427 [ 322.238314][ T6187] syz.1.18: attempt to access beyond end of device [ 322.238314][ T6187] loop1: rw=524288, sector=88536, nr_sectors = 8 limit=40427 [ 322.238441][ T6220] syz.2.19: attempt to access beyond end of device [ 322.238441][ T6220] loop2: rw=524288, sector=88272, nr_sectors = 8 limit=40427 [ 322.238453][ T6187] syz.1.18: attempt to access beyond end of device [ 322.238453][ T6187] loop1: rw=524288, sector=88544, nr_sectors = 8 limit=40427 [ 322.238579][ T6220] syz.2.19: attempt to access beyond end of device [ 322.238579][ T6220] loop2: rw=524288, sector=88280, nr_sectors = 8 limit=40427 [ 322.398099][ T60] Bluetooth: hci5: command tx timeout [ 323.156184][ T6291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.156200][ T6291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.156225][ T6291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.210148][ T6291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.210167][ T6291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.210191][ T6291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.962882][ T6291] hsr_slave_0: entered promiscuous mode [ 323.964151][ T6291] hsr_slave_1: entered promiscuous mode [ 323.964946][ T6291] debugfs: 'hsr0' already exists in 'hsr' [ 323.964967][ T6291] Cannot create hsr debugfs directory [ 324.478316][ T60] Bluetooth: hci5: command tx timeout [ 326.011084][ T6291] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 326.155396][ T6291] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 326.389717][ T6291] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 326.557923][ T6291] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 326.561194][ T60] Bluetooth: hci5: command tx timeout [ 327.244003][ T6291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.248161][ T6246] bio_check_eod: 40980 callbacks suppressed [ 327.248179][ T6246] syz.3.20: attempt to access beyond end of device [ 327.248179][ T6246] loop3: rw=524288, sector=88408, nr_sectors = 8 limit=40427 [ 327.248322][ T6246] syz.3.20: attempt to access beyond end of device [ 327.248322][ T6246] loop3: rw=524288, sector=88416, nr_sectors = 8 limit=40427 [ 327.248459][ T6246] syz.3.20: attempt to access beyond end of device [ 327.248459][ T6246] loop3: rw=524288, sector=88424, nr_sectors = 8 limit=40427 [ 327.248595][ T6246] syz.3.20: attempt to access beyond end of device [ 327.248595][ T6246] loop3: rw=524288, sector=88432, nr_sectors = 8 limit=40427 [ 327.248756][ T6246] syz.3.20: attempt to access beyond end of device [ 327.248756][ T6246] loop3: rw=524288, sector=88440, nr_sectors = 8 limit=40427 [ 327.248893][ T6246] syz.3.20: attempt to access beyond end of device [ 327.248893][ T6246] loop3: rw=524288, sector=88448, nr_sectors = 8 limit=40427 [ 327.249029][ T6246] syz.3.20: attempt to access beyond end of device [ 327.249029][ T6246] loop3: rw=524288, sector=88456, nr_sectors = 8 limit=40427 [ 327.249176][ T6246] syz.3.20: attempt to access beyond end of device [ 327.249176][ T6246] loop3: rw=524288, sector=88464, nr_sectors = 8 limit=40427 [ 327.249310][ T6246] syz.3.20: attempt to access beyond end of device [ 327.249310][ T6246] loop3: rw=524288, sector=88472, nr_sectors = 8 limit=40427 [ 327.249431][ T6246] syz.3.20: attempt to access beyond end of device [ 327.249431][ T6246] loop3: rw=524288, sector=88480, nr_sectors = 8 limit=40427 [ 327.518865][ T6291] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.549016][ T6278] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.549170][ T6278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.652239][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.652379][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.943508][ T6291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.360535][ T60] Bluetooth: hci0: command 0x0406 tx timeout [ 330.487515][ T6291] veth0_vlan: entered promiscuous mode [ 330.550653][ T6291] veth1_vlan: entered promiscuous mode [ 330.784008][ T6291] veth0_macvtap: entered promiscuous mode [ 330.830221][ T6291] veth1_macvtap: entered promiscuous mode [ 330.913194][ T6291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.036967][ T6291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.076429][ T2237] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.076626][ T2237] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.077014][ T2237] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.077381][ T2237] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.967953][ T3782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.967991][ T3782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.086101][ T6278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.086118][ T6278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.257940][ T6246] bio_check_eod: 37214 callbacks suppressed [ 332.257975][ T6246] syz.3.20: attempt to access beyond end of device [ 332.257975][ T6246] loop3: rw=524288, sector=89048, nr_sectors = 8 limit=40427 [ 332.258115][ T6246] syz.3.20: attempt to access beyond end of device [ 332.258115][ T6246] loop3: rw=524288, sector=89056, nr_sectors = 8 limit=40427 [ 332.258249][ T6246] syz.3.20: attempt to access beyond end of device [ 332.258249][ T6246] loop3: rw=524288, sector=89064, nr_sectors = 8 limit=40427 [ 332.258407][ T6246] syz.3.20: attempt to access beyond end of device [ 332.258407][ T6246] loop3: rw=524288, sector=89072, nr_sectors = 8 limit=40427 [ 332.258539][ T6246] syz.3.20: attempt to access beyond end of device [ 332.258539][ T6246] loop3: rw=524288, sector=89080, nr_sectors = 8 limit=40427 [ 332.258683][ T6246] syz.3.20: attempt to access beyond end of device [ 332.258683][ T6246] loop3: rw=524288, sector=89088, nr_sectors = 8 limit=40427 [ 332.258815][ T6246] syz.3.20: attempt to access beyond end of device [ 332.258815][ T6246] loop3: rw=524288, sector=89096, nr_sectors = 8 limit=40427 [ 332.258956][ T6246] syz.3.20: attempt to access beyond end of device [ 332.258956][ T6246] loop3: rw=524288, sector=89104, nr_sectors = 8 limit=40427 [ 332.259092][ T6246] syz.3.20: attempt to access beyond end of device [ 332.259092][ T6246] loop3: rw=524288, sector=89112, nr_sectors = 8 limit=40427 [ 332.259230][ T6246] syz.3.20: attempt to access beyond end of device [ 332.259230][ T6246] loop3: rw=524288, sector=89120, nr_sectors = 8 limit=40427 2025/09/26 17:46:37 executed programs: 7 [ 334.668171][ T6320] loop5: detected capacity change from 0 to 40427 [ 334.699042][ T6320] F2FS-fs: heap/no_heap options were deprecated [ 334.699262][ T6320] F2FS-fs: heap/no_heap options were deprecated [ 334.718045][ T6320] F2FS-fs (loop5): Image doesn't support compression [ 334.808683][ T6320] F2FS-fs (loop5): invalid crc value [ 335.265276][ T6320] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 335.341647][ T6320] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 337.272429][ T6246] bio_check_eod: 38171 callbacks suppressed [ 337.272449][ T6246] syz.3.20: attempt to access beyond end of device [ 337.272449][ T6246] loop3: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 337.272571][ T6246] syz.3.20: attempt to access beyond end of device [ 337.272571][ T6246] loop3: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 337.272713][ T6246] syz.3.20: attempt to access beyond end of device [ 337.272713][ T6246] loop3: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 337.272830][ T6246] syz.3.20: attempt to access beyond end of device [ 337.272830][ T6246] loop3: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 337.272944][ T6246] syz.3.20: attempt to access beyond end of device [ 337.272944][ T6246] loop3: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 337.273067][ T6246] syz.3.20: attempt to access beyond end of device [ 337.273067][ T6246] loop3: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 337.273182][ T6246] syz.3.20: attempt to access beyond end of device [ 337.273182][ T6246] loop3: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 337.273315][ T6246] syz.3.20: attempt to access beyond end of device [ 337.273315][ T6246] loop3: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 337.273439][ T6246] syz.3.20: attempt to access beyond end of device [ 337.273439][ T6246] loop3: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 337.273575][ T6246] syz.3.20: attempt to access beyond end of device [ 337.273575][ T6246] loop3: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 342.277897][ T6122] bio_check_eod: 40027 callbacks suppressed [ 342.277923][ T6122] syz.0.17: attempt to access beyond end of device [ 342.277923][ T6122] loop0: rw=524288, sector=88936, nr_sectors = 8 limit=40427 [ 342.278130][ T6220] syz.2.19: attempt to access beyond end of device [ 342.278130][ T6220] loop2: rw=0, sector=87112, nr_sectors = 8 limit=40427 [ 342.278276][ T6220] syz.2.19: attempt to access beyond end of device [ 342.278276][ T6220] loop2: rw=0, sector=87120, nr_sectors = 8 limit=40427 [ 342.278420][ T6220] syz.2.19: attempt to access beyond end of device [ 342.278420][ T6220] loop2: rw=0, sector=87128, nr_sectors = 8 limit=40427 [ 342.278563][ T6220] syz.2.19: attempt to access beyond end of device [ 342.278563][ T6220] loop2: rw=0, sector=87136, nr_sectors = 8 limit=40427 [ 342.278736][ T6220] syz.2.19: attempt to access beyond end of device [ 342.278736][ T6220] loop2: rw=0, sector=87144, nr_sectors = 8 limit=40427 [ 342.278881][ T6220] syz.2.19: attempt to access beyond end of device [ 342.278881][ T6220] loop2: rw=0, sector=87152, nr_sectors = 8 limit=40427 [ 342.279030][ T6220] syz.2.19: attempt to access beyond end of device [ 342.279030][ T6220] loop2: rw=0, sector=87160, nr_sectors = 8 limit=40427 [ 342.279203][ T6220] syz.2.19: attempt to access beyond end of device [ 342.279203][ T6220] loop2: rw=0, sector=87168, nr_sectors = 8 limit=40427 [ 342.279323][ T6220] syz.2.19: attempt to access beyond end of device [ 342.279323][ T6220] loop2: rw=0, sector=87176, nr_sectors = 8 limit=40427 [ 347.297844][ T6246] bio_check_eod: 40227 callbacks suppressed [ 347.297865][ T6246] syz.3.20: attempt to access beyond end of device [ 347.297865][ T6246] loop3: rw=524288, sector=88992, nr_sectors = 8 limit=40427 [ 347.298010][ T6246] syz.3.20: attempt to access beyond end of device [ 347.298010][ T6246] loop3: rw=524288, sector=89000, nr_sectors = 8 limit=40427 [ 347.298162][ T6246] syz.3.20: attempt to access beyond end of device [ 347.298162][ T6246] loop3: rw=524288, sector=89008, nr_sectors = 8 limit=40427 [ 347.298299][ T6246] syz.3.20: attempt to access beyond end of device [ 347.298299][ T6246] loop3: rw=524288, sector=89016, nr_sectors = 8 limit=40427 [ 347.298467][ T6246] syz.3.20: attempt to access beyond end of device [ 347.298467][ T6246] loop3: rw=524288, sector=89024, nr_sectors = 8 limit=40427 [ 347.298610][ T6246] syz.3.20: attempt to access beyond end of device [ 347.298610][ T6246] loop3: rw=524288, sector=89032, nr_sectors = 8 limit=40427 [ 347.298746][ T6246] syz.3.20: attempt to access beyond end of device [ 347.298746][ T6246] loop3: rw=524288, sector=89040, nr_sectors = 8 limit=40427 [ 347.298880][ T6246] syz.3.20: attempt to access beyond end of device [ 347.298880][ T6246] loop3: rw=524288, sector=89048, nr_sectors = 8 limit=40427 [ 347.299013][ T6246] syz.3.20: attempt to access beyond end of device [ 347.299013][ T6246] loop3: rw=524288, sector=89056, nr_sectors = 8 limit=40427 [ 347.299159][ T6246] syz.3.20: attempt to access beyond end of device [ 347.299159][ T6246] loop3: rw=524288, sector=89064, nr_sectors = 8 limit=40427 [ 348.128337][ T5156] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 348.134036][ T5156] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 348.134829][ T5156] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 348.135858][ T5156] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 348.136547][ T5156] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 349.582068][ T6325] chnl_net:caif_netlink_parms(): no params data found [ 349.837957][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 350.237940][ T5963] Bluetooth: hci6: command tx timeout [ 351.323432][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.350528][ T6325] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.350726][ T6325] bridge_slave_0: entered allmulticast mode [ 351.398646][ T6325] bridge_slave_0: entered promiscuous mode [ 351.411161][ T6325] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.411303][ T6325] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.411508][ T6325] bridge_slave_1: entered allmulticast mode [ 351.414227][ T6325] bridge_slave_1: entered promiscuous mode [ 352.277378][ T6325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.307791][ T6187] bio_check_eod: 35539 callbacks suppressed [ 352.307806][ T6187] syz.1.18: attempt to access beyond end of device [ 352.307806][ T6187] loop1: rw=524288, sector=87568, nr_sectors = 8 limit=40427 [ 352.307937][ T6187] syz.1.18: attempt to access beyond end of device [ 352.307937][ T6187] loop1: rw=524288, sector=87576, nr_sectors = 8 limit=40427 [ 352.308091][ T6187] syz.1.18: attempt to access beyond end of device [ 352.308091][ T6187] loop1: rw=524288, sector=87584, nr_sectors = 8 limit=40427 [ 352.308229][ T6187] syz.1.18: attempt to access beyond end of device [ 352.308229][ T6187] loop1: rw=524288, sector=87592, nr_sectors = 8 limit=40427 [ 352.308399][ T6187] syz.1.18: attempt to access beyond end of device [ 352.308399][ T6187] loop1: rw=524288, sector=87600, nr_sectors = 8 limit=40427 [ 352.308557][ T6187] syz.1.18: attempt to access beyond end of device [ 352.308557][ T6187] loop1: rw=524288, sector=87608, nr_sectors = 8 limit=40427 [ 352.308672][ T6187] syz.1.18: attempt to access beyond end of device [ 352.308672][ T6187] loop1: rw=524288, sector=87616, nr_sectors = 8 limit=40427 [ 352.308819][ T6187] syz.1.18: attempt to access beyond end of device [ 352.308819][ T6187] loop1: rw=524288, sector=87624, nr_sectors = 8 limit=40427 [ 352.308962][ T6187] syz.1.18: attempt to access beyond end of device [ 352.308962][ T6187] loop1: rw=524288, sector=87632, nr_sectors = 8 limit=40427 [ 352.309102][ T6187] syz.1.18: attempt to access beyond end of device [ 352.309102][ T6187] loop1: rw=524288, sector=87640, nr_sectors = 8 limit=40427 [ 352.330393][ T5963] Bluetooth: hci6: command tx timeout [ 352.360639][ T6325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.433363][ T6325] team0: Port device team_slave_0 added [ 353.436658][ T6325] team0: Port device team_slave_1 added [ 354.062139][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.062163][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.062188][ T6325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.064311][ T6325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.064323][ T6325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.064346][ T6325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.408527][ T5963] Bluetooth: hci6: command tx timeout [ 355.052139][ T6325] hsr_slave_0: entered promiscuous mode [ 355.053450][ T6325] hsr_slave_1: entered promiscuous mode [ 355.054317][ T6325] debugfs: 'hsr0' already exists in 'hsr' [ 355.054339][ T6325] Cannot create hsr debugfs directory [ 356.487829][ T5963] Bluetooth: hci6: command tx timeout [ 357.321897][ T6122] bio_check_eod: 37505 callbacks suppressed [ 357.321915][ T6122] syz.0.17: attempt to access beyond end of device [ 357.321915][ T6122] loop0: rw=524288, sector=88560, nr_sectors = 8 limit=40427 [ 357.322048][ T6122] syz.0.17: attempt to access beyond end of device [ 357.322048][ T6122] loop0: rw=524288, sector=88568, nr_sectors = 8 limit=40427 [ 357.322191][ T6122] syz.0.17: attempt to access beyond end of device [ 357.322191][ T6122] loop0: rw=524288, sector=88576, nr_sectors = 8 limit=40427 [ 357.322306][ T6122] syz.0.17: attempt to access beyond end of device [ 357.322306][ T6122] loop0: rw=524288, sector=88584, nr_sectors = 8 limit=40427 [ 357.322421][ T6122] syz.0.17: attempt to access beyond end of device [ 357.322421][ T6122] loop0: rw=524288, sector=88592, nr_sectors = 8 limit=40427 [ 357.322536][ T6122] syz.0.17: attempt to access beyond end of device [ 357.322536][ T6122] loop0: rw=524288, sector=88600, nr_sectors = 8 limit=40427 [ 357.322650][ T6122] syz.0.17: attempt to access beyond end of device [ 357.322650][ T6122] loop0: rw=524288, sector=88608, nr_sectors = 8 limit=40427 [ 357.322765][ T6122] syz.0.17: attempt to access beyond end of device [ 357.322765][ T6122] loop0: rw=524288, sector=88616, nr_sectors = 8 limit=40427 [ 357.322880][ T6122] syz.0.17: attempt to access beyond end of device [ 357.322880][ T6122] loop0: rw=524288, sector=88624, nr_sectors = 8 limit=40427 [ 357.323000][ T6122] syz.0.17: attempt to access beyond end of device [ 357.323000][ T6122] loop0: rw=524288, sector=88632, nr_sectors = 8 limit=40427 [ 357.508691][ T6325] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 357.582256][ T6325] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 357.957833][ T6325] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 358.117824][ T6325] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 358.373753][ T6280] F2FS-fs (loop4): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 358.912515][ T6325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.050907][ T6325] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.140246][ T3805] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.140377][ T3805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.142882][ T3805] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.143015][ T3805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.676343][ T6325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.332839][ T6187] bio_check_eod: 40767 callbacks suppressed [ 362.332855][ T6187] syz.1.18: attempt to access beyond end of device [ 362.332855][ T6187] loop1: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 362.332920][ T6122] syz.0.17: attempt to access beyond end of device [ 362.332920][ T6122] loop0: rw=0, sector=86616, nr_sectors = 8 limit=40427 [ 362.332981][ T6187] syz.1.18: attempt to access beyond end of device [ 362.332981][ T6187] loop1: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 362.333047][ T6122] syz.0.17: attempt to access beyond end of device [ 362.333047][ T6122] loop0: rw=0, sector=86624, nr_sectors = 8 limit=40427 [ 362.333099][ T6187] syz.1.18: attempt to access beyond end of device [ 362.333099][ T6187] loop1: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 362.333168][ T6122] syz.0.17: attempt to access beyond end of device [ 362.333168][ T6122] loop0: rw=0, sector=86632, nr_sectors = 8 limit=40427 [ 362.333217][ T6187] syz.1.18: attempt to access beyond end of device [ 362.333217][ T6187] loop1: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 362.333289][ T6122] syz.0.17: attempt to access beyond end of device [ 362.333289][ T6122] loop0: rw=0, sector=86640, nr_sectors = 8 limit=40427 [ 362.333337][ T6187] syz.1.18: attempt to access beyond end of device [ 362.333337][ T6187] loop1: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 362.333421][ T6122] syz.0.17: attempt to access beyond end of device [ 362.333421][ T6122] loop0: rw=0, sector=86648, nr_sectors = 8 limit=40427 [ 362.386586][ T6325] veth0_vlan: entered promiscuous mode [ 362.688553][ T6325] veth1_vlan: entered promiscuous mode [ 362.728377][ T6325] veth0_macvtap: entered promiscuous mode [ 362.733972][ T6325] veth1_macvtap: entered promiscuous mode [ 362.892218][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.956085][ T6325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.068058][ T3805] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.068267][ T3805] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.068713][ T3805] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.068886][ T3805] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.142295][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.142314][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.427674][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.427693][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/26 17:47:09 executed programs: 8 [ 367.337927][ T6246] bio_check_eod: 40845 callbacks suppressed [ 367.337946][ T6246] syz.3.20: attempt to access beyond end of device [ 367.337946][ T6246] loop3: rw=524288, sector=89096, nr_sectors = 8 limit=40427 [ 367.338110][ T6246] syz.3.20: attempt to access beyond end of device [ 367.338110][ T6246] loop3: rw=524288, sector=89104, nr_sectors = 8 limit=40427 [ 367.338249][ T6246] syz.3.20: attempt to access beyond end of device [ 367.338249][ T6246] loop3: rw=524288, sector=89112, nr_sectors = 8 limit=40427 [ 367.338411][ T6246] syz.3.20: attempt to access beyond end of device [ 367.338411][ T6246] loop3: rw=524288, sector=89120, nr_sectors = 8 limit=40427 [ 367.338544][ T6246] syz.3.20: attempt to access beyond end of device [ 367.338544][ T6246] loop3: rw=524288, sector=89128, nr_sectors = 8 limit=40427 [ 367.338678][ T6246] syz.3.20: attempt to access beyond end of device [ 367.338678][ T6246] loop3: rw=524288, sector=89136, nr_sectors = 8 limit=40427 [ 367.338815][ T6246] syz.3.20: attempt to access beyond end of device [ 367.338815][ T6246] loop3: rw=524288, sector=89144, nr_sectors = 8 limit=40427 [ 367.338951][ T6246] syz.3.20: attempt to access beyond end of device [ 367.338951][ T6246] loop3: rw=524288, sector=89152, nr_sectors = 8 limit=40427 [ 367.339085][ T6246] syz.3.20: attempt to access beyond end of device [ 367.339085][ T6246] loop3: rw=524288, sector=89160, nr_sectors = 8 limit=40427 [ 367.339261][ T6246] syz.3.20: attempt to access beyond end of device [ 367.339261][ T6246] loop3: rw=524288, sector=89168, nr_sectors = 8 limit=40427 [ 367.562927][ T6354] loop6: detected capacity change from 0 to 40427 [ 367.625169][ T6354] F2FS-fs: heap/no_heap options were deprecated [ 367.625335][ T6354] F2FS-fs: heap/no_heap options were deprecated [ 367.651741][ T6354] F2FS-fs (loop6): Image doesn't support compression [ 367.715698][ T6354] F2FS-fs (loop6): invalid crc value [ 368.414979][ T6354] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 370.317944][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 372.006935][ T6358] loop6: detected capacity change from 0 to 40427 [ 372.054860][ T6358] F2FS-fs: heap/no_heap options were deprecated [ 372.055033][ T6358] F2FS-fs: heap/no_heap options were deprecated [ 372.055486][ T6358] F2FS-fs (loop6): Image doesn't support compression [ 372.168042][ T6358] F2FS-fs (loop6): invalid crc value [ 372.357871][ T6246] bio_check_eod: 40330 callbacks suppressed [ 372.357888][ T6246] syz.3.20: attempt to access beyond end of device [ 372.357888][ T6246] loop3: rw=524288, sector=88184, nr_sectors = 8 limit=40427 [ 372.358035][ T6246] syz.3.20: attempt to access beyond end of device [ 372.358035][ T6246] loop3: rw=524288, sector=88192, nr_sectors = 8 limit=40427 [ 372.358168][ T6246] syz.3.20: attempt to access beyond end of device [ 372.358168][ T6246] loop3: rw=524288, sector=88200, nr_sectors = 8 limit=40427 [ 372.358302][ T6246] syz.3.20: attempt to access beyond end of device [ 372.358302][ T6246] loop3: rw=524288, sector=88208, nr_sectors = 8 limit=40427 [ 372.358865][ T6246] syz.3.20: attempt to access beyond end of device [ 372.358865][ T6246] loop3: rw=524288, sector=88216, nr_sectors = 8 limit=40427 [ 372.359000][ T6246] syz.3.20: attempt to access beyond end of device [ 372.359000][ T6246] loop3: rw=524288, sector=88224, nr_sectors = 8 limit=40427 [ 372.359133][ T6246] syz.3.20: attempt to access beyond end of device [ 372.359133][ T6246] loop3: rw=524288, sector=88232, nr_sectors = 8 limit=40427 [ 372.359264][ T6246] syz.3.20: attempt to access beyond end of device [ 372.359264][ T6246] loop3: rw=524288, sector=88240, nr_sectors = 8 limit=40427 [ 372.359376][ T6246] syz.3.20: attempt to access beyond end of device [ 372.359376][ T6246] loop3: rw=524288, sector=88248, nr_sectors = 8 limit=40427 [ 372.359488][ T6246] syz.3.20: attempt to access beyond end of device [ 372.359488][ T6246] loop3: rw=524288, sector=88256, nr_sectors = 8 limit=40427 [ 372.735073][ T6358] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 372.873243][ T6358] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 377.367886][ T6122] bio_check_eod: 40335 callbacks suppressed [ 377.367906][ T6122] syz.0.17: attempt to access beyond end of device [ 377.367906][ T6122] loop0: rw=0, sector=87056, nr_sectors = 8 limit=40427 [ 377.368059][ T6122] syz.0.17: attempt to access beyond end of device [ 377.368059][ T6122] loop0: rw=0, sector=87064, nr_sectors = 8 limit=40427 [ 377.368232][ T6122] syz.0.17: attempt to access beyond end of device [ 377.368232][ T6122] loop0: rw=0, sector=87072, nr_sectors = 8 limit=40427 [ 377.368376][ T6122] syz.0.17: attempt to access beyond end of device [ 377.368376][ T6122] loop0: rw=0, sector=87080, nr_sectors = 8 limit=40427 [ 377.368517][ T6122] syz.0.17: attempt to access beyond end of device [ 377.368517][ T6122] loop0: rw=0, sector=87088, nr_sectors = 8 limit=40427 [ 377.368667][ T6122] syz.0.17: attempt to access beyond end of device [ 377.368667][ T6122] loop0: rw=0, sector=87096, nr_sectors = 8 limit=40427 [ 377.368809][ T6122] syz.0.17: attempt to access beyond end of device [ 377.368809][ T6122] loop0: rw=0, sector=87104, nr_sectors = 8 limit=40427 [ 377.368950][ T6122] syz.0.17: attempt to access beyond end of device [ 377.368950][ T6122] loop0: rw=0, sector=87112, nr_sectors = 8 limit=40427 [ 377.369091][ T6122] syz.0.17: attempt to access beyond end of device [ 377.369091][ T6122] loop0: rw=0, sector=87120, nr_sectors = 8 limit=40427 [ 377.369244][ T6122] syz.0.17: attempt to access beyond end of device [ 377.369244][ T6122] loop0: rw=0, sector=87128, nr_sectors = 8 limit=40427 [ 378.490918][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.491012][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.378519][ T6187] bio_check_eod: 41112 callbacks suppressed [ 382.378540][ T6187] syz.1.18: attempt to access beyond end of device [ 382.378540][ T6187] loop1: rw=0, sector=89544, nr_sectors = 8 limit=40427 [ 382.378690][ T6187] syz.1.18: attempt to access beyond end of device [ 382.378690][ T6187] loop1: rw=0, sector=89552, nr_sectors = 8 limit=40427 [ 382.378832][ T6187] syz.1.18: attempt to access beyond end of device [ 382.378832][ T6187] loop1: rw=0, sector=89560, nr_sectors = 8 limit=40427 [ 382.378971][ T6187] syz.1.18: attempt to access beyond end of device [ 382.378971][ T6187] loop1: rw=0, sector=89568, nr_sectors = 8 limit=40427 [ 382.379139][ T6187] syz.1.18: attempt to access beyond end of device [ 382.379139][ T6187] loop1: rw=0, sector=89576, nr_sectors = 8 limit=40427 [ 382.379274][ T6187] syz.1.18: attempt to access beyond end of device [ 382.379274][ T6187] loop1: rw=0, sector=89584, nr_sectors = 8 limit=40427 [ 382.379392][ T6187] syz.1.18: attempt to access beyond end of device [ 382.379392][ T6187] loop1: rw=0, sector=89592, nr_sectors = 8 limit=40427 [ 382.379510][ T6187] syz.1.18: attempt to access beyond end of device [ 382.379510][ T6187] loop1: rw=0, sector=89600, nr_sectors = 8 limit=40427 [ 382.379627][ T6187] syz.1.18: attempt to access beyond end of device [ 382.379627][ T6187] loop1: rw=0, sector=89608, nr_sectors = 8 limit=40427 [ 382.379745][ T6187] syz.1.18: attempt to access beyond end of device [ 382.379745][ T6187] loop1: rw=0, sector=89616, nr_sectors = 8 limit=40427 [ 384.678820][ T60] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 384.685898][ T60] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 384.697857][ T60] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 384.730086][ T60] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 384.738036][ T60] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 386.196020][ T6369] chnl_net:caif_netlink_parms(): no params data found [ 386.798740][ T60] Bluetooth: hci7: command tx timeout [ 387.387866][ T6187] bio_check_eod: 38019 callbacks suppressed [ 387.387883][ T6187] syz.1.18: attempt to access beyond end of device [ 387.387883][ T6187] loop1: rw=524288, sector=89816, nr_sectors = 8 limit=40427 [ 387.388024][ T6187] syz.1.18: attempt to access beyond end of device [ 387.388024][ T6187] loop1: rw=524288, sector=89824, nr_sectors = 8 limit=40427 [ 387.388161][ T6187] syz.1.18: attempt to access beyond end of device [ 387.388161][ T6187] loop1: rw=524288, sector=89832, nr_sectors = 8 limit=40427 [ 387.388297][ T6187] syz.1.18: attempt to access beyond end of device [ 387.388297][ T6187] loop1: rw=524288, sector=89840, nr_sectors = 8 limit=40427 [ 387.388433][ T6187] syz.1.18: attempt to access beyond end of device [ 387.388433][ T6187] loop1: rw=524288, sector=89848, nr_sectors = 8 limit=40427 [ 387.388567][ T6187] syz.1.18: attempt to access beyond end of device [ 387.388567][ T6187] loop1: rw=524288, sector=89856, nr_sectors = 8 limit=40427 [ 387.388703][ T6187] syz.1.18: attempt to access beyond end of device [ 387.388703][ T6187] loop1: rw=524288, sector=89864, nr_sectors = 8 limit=40427 [ 387.388845][ T6187] syz.1.18: attempt to access beyond end of device [ 387.388845][ T6187] loop1: rw=524288, sector=89872, nr_sectors = 8 limit=40427 [ 387.388982][ T6187] syz.1.18: attempt to access beyond end of device [ 387.388982][ T6187] loop1: rw=524288, sector=89880, nr_sectors = 8 limit=40427 [ 387.389147][ T6187] syz.1.18: attempt to access beyond end of device [ 387.389147][ T6187] loop1: rw=524288, sector=89888, nr_sectors = 8 limit=40427 [ 388.525915][ T6369] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.545061][ T6369] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.545296][ T6369] bridge_slave_0: entered allmulticast mode [ 388.575235][ T6369] bridge_slave_0: entered promiscuous mode [ 388.584601][ T6369] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.584802][ T6369] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.584973][ T6369] bridge_slave_1: entered allmulticast mode [ 388.587583][ T6369] bridge_slave_1: entered promiscuous mode [ 388.877980][ T60] Bluetooth: hci7: command tx timeout [ 389.773884][ T6369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.954634][ T6369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.998436][ T38] INFO: task kworker/u8:1:13 blocked for more than 143 seconds. [ 389.998462][ T38] Not tainted syzkaller #0 [ 389.998473][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 389.998483][ T38] task:kworker/u8:1 state:D stack:20264 pid:13 tgid:13 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 389.998547][ T38] Workqueue: writeback wb_workfn (flush-7:0) [ 389.998601][ T38] Call Trace: [ 389.998608][ T38] [ 389.998622][ T38] __schedule+0x16f3/0x4c20 [ 389.998668][ T38] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 389.998702][ T38] ? rcu_is_watching+0x15/0xb0 [ 389.998745][ T38] ? __pfx___schedule+0x10/0x10 [ 389.998775][ T38] ? rcu_read_unlock_special+0x35b/0x470 [ 389.998806][ T38] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 389.998833][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.998882][ T38] rt_mutex_schedule+0x77/0xf0 [ 389.998901][ T38] ? __rt_mutex_slowlock_locked+0x1a7/0x25e0 [ 389.998926][ T38] __rt_mutex_slowlock_locked+0x1e04/0x25e0 [ 389.998965][ T38] ? __rt_mutex_slowlock_locked+0x1a7/0x25e0 [ 389.999001][ T38] ? __pfx___rt_mutex_slowlock_locked+0x10/0x10 [ 389.999039][ T38] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 389.999079][ T38] ? rt_mutex_pre_schedule+0x7d/0x1d0 [ 389.999107][ T38] rt_mutex_slowlock+0xb5/0x160 [ 389.999135][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 389.999173][ T38] rwbase_write_lock+0x14f/0x750 [ 389.999207][ T38] f2fs_balance_fs+0x5af/0x7f0 [ 389.999248][ T38] ? f2fs_update_inode+0x13df/0x2620 [ 389.999273][ T38] ? f2fs_write_inode+0x3fb/0x5f0 [ 389.999297][ T38] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 389.999343][ T38] f2fs_write_inode+0x3fb/0x5f0 [ 389.999372][ T38] __writeback_single_inode+0x6f1/0x1000 [ 389.999404][ T38] writeback_sb_inodes+0x6b7/0xf60 [ 389.999432][ T38] ? stack_trace_save+0x9c/0xe0 [ 389.999457][ T38] ? mark_lock_irq+0x31a/0x390 [ 389.999495][ T38] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 389.999553][ T38] ? __pfx_down_read_trylock+0x10/0x10 [ 389.999583][ T38] ? __pfx_move_expired_inodes+0x10/0x10 [ 389.999615][ T38] __writeback_inodes_wb+0x111/0x240 [ 389.999647][ T38] wb_writeback+0x44f/0xaf0 [ 389.999678][ T38] ? queue_io+0x3c1/0x560 [ 389.999704][ T38] ? __pfx_wb_writeback+0x10/0x10 [ 389.999743][ T38] wb_workfn+0xaf4/0xf00 [ 389.999777][ T38] ? __pfx_wb_workfn+0x10/0x10 [ 389.999800][ T38] ? __lock_acquire+0xab9/0xd20 [ 389.999836][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 389.999866][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.999894][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 389.999917][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 389.999943][ T38] process_scheduled_works+0xade/0x17b0 [ 389.999995][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 390.000035][ T38] worker_thread+0x8a0/0xda0 [ 390.000085][ T38] kthread+0x70e/0x8a0 [ 390.000116][ T38] ? __pfx_worker_thread+0x10/0x10 [ 390.000139][ T38] ? __pfx_kthread+0x10/0x10 [ 390.000173][ T38] ? __pfx_kthread+0x10/0x10 [ 390.000203][ T38] ret_from_fork+0x436/0x7d0 [ 390.000230][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 390.000261][ T38] ? __switch_to_asm+0x39/0x70 [ 390.000279][ T38] ? __switch_to_asm+0x33/0x70 [ 390.000296][ T38] ? __pfx_kthread+0x10/0x10 [ 390.000326][ T38] ret_from_fork_asm+0x1a/0x30 [ 390.000359][ T38] [ 390.000518][ T38] [ 390.000518][ T38] Showing all locks held in the system: [ 390.000527][ T38] 3 locks held by kworker/0:0/9: [ 390.000538][ T38] 2 locks held by kworker/0:1/10: [ 390.000549][ T38] 4 locks held by kworker/u8:1/13: [ 390.000559][ T38] #0: ffff8881404bb938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 390.000616][ T38] #1: ffffc90000127bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 390.000665][ T38] #2: ffff8880487e20d0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 390.000715][ T38] #3: ffff888036865990 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5af/0x7f0 [ 390.000767][ T38] 1 lock held by khungtaskd/38: [ 390.000777][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 390.000821][ T38] 4 locks held by kworker/u8:2/43: [ 390.000831][ T38] #0: ffff8881404bb938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 390.000879][ T38] #1: ffffc90000b47bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 390.000928][ T38] #2: ffff8880237b00d0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 390.000977][ T38] #3: ffff888054b15990 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5af/0x7f0 [ 390.001028][ T38] 6 locks held by kworker/u8:3/58: [ 390.001038][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 390.001087][ T38] #1: ffffc9000124fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 390.001137][ T38] #2: ffff88805714f300 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 390.001195][ T38] #3: ffff888036c77d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 390.001249][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 390.001296][ T38] #5: ffff8880b88365d0 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x8f/0x2b0 [ 390.001345][ T38] 4 locks held by kworker/u8:4/69: [ 390.001356][ T38] #0: ffff8881404bb938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 390.001404][ T38] #1: ffffc9000154fbc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 390.001452][ T38] #2: ffff8880612220d0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 390.001502][ T38] #3: ffff8880270d9990 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5af/0x7f0 [ 390.001557][ T38] 4 locks held by kworker/u8:7/1184: [ 390.001567][ T38] #0: ffff8881404bb938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 390.001620][ T38] #1: ffffc90004b1fbc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 390.001669][ T38] #2: ffff8880357080d0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 390.001718][ T38] #3: ffff888035435990 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5af/0x7f0 [ 390.001780][ T38] 4 locks held by kworker/u8:12/3850: [ 390.001790][ T38] #0: ffff8881404bb938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 390.001838][ T38] #1: ffffc9000df07bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 390.001887][ T38] #2: ffff8880295420d0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 390.001936][ T38] #3: ffff888038c79990 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5af/0x7f0 [ 390.001986][ T38] 4 locks held by kworker/u8:13/3893: [ 390.001996][ T38] #0: ffff8881404bb938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 390.002044][ T38] #1: ffffc9000e317bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 390.002093][ T38] #2: ffff8880576160d0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 390.002141][ T38] #3: ffff88803d3e9990 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5af/0x7f0 [ 390.002191][ T38] 2 locks held by getty/5597: [ 390.002201][ T38] #0: ffff88823bf4a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 390.002255][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 390.002304][ T38] 3 locks held by kworker/u9:2/5963: [ 390.002314][ T38] #0: ffff88805931d938 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 390.002362][ T38] #1: ffffc90004ebfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 390.002410][ T38] #2: ffff888034424e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 390.002457][ T38] 6 locks held by syz.0.17/6122: [ 390.002469][ T38] 5 locks held by syz.1.18/6187: [ 390.002480][ T38] 5 locks held by syz.2.19/6220: [ 390.002491][ T38] 6 locks held by syz.3.20/6246: [ 390.002502][ T38] 2 locks held by kworker/u8:14/6278: [ 390.002513][ T38] 5 locks held by syz.4.21/6280: [ 390.002524][ T38] 4 locks held by syz.5.22/6320: [ 390.002535][ T38] 4 locks held by syz.6.24/6358: [ 390.002545][ T38] 3 locks held by syz-executor/6369: [ 390.002556][ T38] [ 390.002561][ T38] ============================================= [ 390.002561][ T38] [ 390.002582][ T38] NMI backtrace for cpu 1 [ 390.002605][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 390.002625][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 390.002636][ T38] Call Trace: [ 390.002643][ T38] [ 390.002650][ T38] dump_stack_lvl+0x189/0x250 [ 390.002680][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.002707][ T38] ? __pfx__printk+0x10/0x10 [ 390.002739][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 390.002766][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 390.002793][ T38] ? __pfx__printk+0x10/0x10 [ 390.002817][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 390.002842][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 390.002869][ T38] watchdog+0xf93/0xfe0 [ 390.002898][ T38] ? watchdog+0x1de/0xfe0 [ 390.002927][ T38] kthread+0x70e/0x8a0 [ 390.002957][ T38] ? __pfx_watchdog+0x10/0x10 [ 390.002980][ T38] ? __pfx_kthread+0x10/0x10 [ 390.003013][ T38] ? __pfx_kthread+0x10/0x10 [ 390.003042][ T38] ret_from_fork+0x436/0x7d0 [ 390.003068][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 390.003098][ T38] ? __switch_to_asm+0x39/0x70 [ 390.003115][ T38] ? __switch_to_asm+0x33/0x70 [ 390.003132][ T38] ? __pfx_kthread+0x10/0x10 [ 390.003160][ T38] ret_from_fork_asm+0x1a/0x30 [ 390.003193][ T38] [ 390.003199][ T38] Sending NMI from CPU 1 to CPUs 0: [ 390.003222][ C0] NMI backtrace for cpu 0 [ 390.003234][ C0] CPU: 0 UID: 0 PID: 6358 Comm: syz.6.24 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 390.003252][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 390.003265][ C0] RIP: 0010:lock_release+0x140/0x3e0 [ 390.003287][ C0] Code: eb 48 8d 6c dd 00 48 89 ef 4c 89 f6 e8 a9 21 5b 09 44 89 64 24 14 45 89 e5 85 c0 0f 84 dd 00 00 00 48 85 ed 0f 84 19 01 00 00 <83> 7d 24 00 0f 85 ea 01 00 00 8b 45 20 3d 00 00 20 00 48 8b 5c 24 [ 390.003300][ C0] RSP: 0018:ffffc9000508ea30 EFLAGS: 00000086 [ 390.003313][ C0] RAX: 0000000000000001 RBX: 0000000000000014 RCX: 4c01ad67e152b900 [ 390.003323][ C0] RDX: ffffc9000508ef60 RSI: ffff8880558431a0 RDI: ffff888039476500 [ 390.003335][ C0] RBP: ffff888039476500 R08: 0000000000000000 R09: 0000000000000000 [ 390.003345][ C0] R10: dffffc0000000000 R11: fffff52000a11d44 R12: 0000000000000004 [ 390.003356][ C0] R13: 0000000000000004 R14: ffff8880558431a0 R15: ffff888039475940 [ 390.003367][ C0] FS: 000055558aff2500(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 390.003380][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.003390][ C0] CR2: 0000559f15d9ea38 CR3: 000000003c252000 CR4: 00000000003526f0 [ 390.003404][ C0] Call Trace: [ 390.003409][ C0] [ 390.003416][ C0] ? f2fs_get_node_info+0x1e8/0x1520 [ 390.003434][ C0] up_read+0x16/0x40 [ 390.003448][ C0] f2fs_get_node_info+0x1e8/0x1520 [ 390.003469][ C0] do_garbage_collect+0x220d/0x6410 [ 390.003494][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 390.003519][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 390.003541][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.003572][ C0] ? __pfx_do_garbage_collect+0x10/0x10 [ 390.003589][ C0] ? __lock_acquire+0xab9/0xd20 [ 390.003612][ C0] ? do_raw_spin_lock+0x121/0x290 [ 390.003633][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 390.003656][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.003679][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 390.003703][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 390.003726][ C0] ? do_raw_spin_lock+0x121/0x290 [ 390.003747][ C0] ? rt_mutex_slowunlock+0x493/0x8a0 [ 390.003763][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.003786][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 390.003812][ C0] ? f2fs_gc+0xa3d/0x2580 [ 390.003835][ C0] f2fs_gc+0xca9/0x2580 [ 390.003861][ C0] ? __pfx_f2fs_gc+0x10/0x10 [ 390.003878][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.003906][ C0] ? rwbase_write_lock+0x56f/0x750 [ 390.003926][ C0] f2fs_balance_fs+0x5fb/0x7f0 [ 390.003948][ C0] ? __pfx_f2fs_get_dnode_of_data+0x10/0x10 [ 390.003964][ C0] ? f2fs_map_blocks+0x345f/0x4130 [ 390.003984][ C0] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 390.004012][ C0] f2fs_map_blocks+0x345f/0x4130 [ 390.004048][ C0] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 390.004067][ C0] ? rt_mutex_slowunlock+0x493/0x8a0 [ 390.004083][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.004112][ C0] ? f2fs_allocate_pinning_section+0x1ac/0x370 [ 390.004129][ C0] f2fs_expand_inode_data+0x5b1/0xa60 [ 390.004155][ C0] ? __pfx_f2fs_expand_inode_data+0x10/0x10 [ 390.004177][ C0] ? mnt_put_write_access_file+0xc6/0x100 [ 390.004195][ C0] ? file_modified_flags+0x4c7/0x560 [ 390.004213][ C0] f2fs_fallocate+0x4f8/0x990 [ 390.004232][ C0] vfs_fallocate+0x672/0x7f0 [ 390.004255][ C0] ? __pfx_vfs_fallocate+0x10/0x10 [ 390.004279][ C0] file_ioctl+0x61d/0x780 [ 390.004297][ C0] ? __pfx_file_ioctl+0x10/0x10 [ 390.004318][ C0] ? kasan_quarantine_put+0xdd/0x220 [ 390.004338][ C0] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 390.004357][ C0] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 390.004376][ C0] do_vfs_ioctl+0xb36/0x1440 [ 390.004394][ C0] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 390.004410][ C0] ? __pfx_smack_log+0x10/0x10 [ 390.004434][ C0] ? smk_access+0x14c/0x4e0 [ 390.004459][ C0] ? smk_tskacc+0x2fc/0x370 [ 390.004484][ C0] ? smack_file_ioctl+0x24d/0x340 [ 390.004501][ C0] ? __pfx_smack_file_ioctl+0x10/0x10 [ 390.004522][ C0] ? __pfx___se_sys_futex+0x10/0x10 [ 390.004541][ C0] ? bpf_lsm_file_ioctl+0x9/0x20 [ 390.004572][ C0] __se_sys_ioctl+0x82/0x170 [ 390.004591][ C0] do_syscall_64+0xfa/0x3b0 [ 390.004605][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.004628][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.004642][ C0] ? clear_bhb_loop+0x60/0xb0 [ 390.004659][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.004674][ C0] RIP: 0033:0x7fe652e1eec9 [ 390.004690][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.004702][ C0] RSP: 002b:00007ffcbe2a0b58 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 390.004717][ C0] RAX: ffffffffffffffda RBX: 00007fe653075fa0 RCX: 00007fe652e1eec9 [ 390.004728][ C0] RDX: 00002000000000c0 RSI: 0000000040305828 RDI: 0000000000000004 [ 390.004738][ C0] RBP: 00007fe652ea1f91 R08: 0000000000000000 R09: 0000000000000000 [ 390.004747][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.004756][ C0] R13: 00007fe653075fa0 R14: 00007fe653075fa0 R15: 0000000000000003 [ 390.004773][ C0] [ 390.005224][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 390.005237][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 390.005259][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 390.005269][ T38] Call Trace: [ 390.005276][ T38] [ 390.005283][ T38] dump_stack_lvl+0x99/0x250 [ 390.005312][ T38] ? __asan_memcpy+0x40/0x70 [ 390.005332][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.005360][ T38] ? __pfx__printk+0x10/0x10 [ 390.005392][ T38] vpanic+0x281/0x750 [ 390.005422][ T38] ? __pfx_vpanic+0x10/0x10 [ 390.005448][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 390.005467][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.005505][ T38] panic+0xb9/0xc0 [ 390.005532][ T38] ? __pfx_panic+0x10/0x10 [ 390.005562][ T38] ? irq_work_queue+0xc3/0x140 [ 390.005596][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 390.005623][ T38] watchdog+0xfd2/0xfe0 [ 390.005652][ T38] ? watchdog+0x1de/0xfe0 [ 390.005681][ T38] kthread+0x70e/0x8a0 [ 390.005712][ T38] ? __pfx_watchdog+0x10/0x10 [ 390.005736][ T38] ? __pfx_kthread+0x10/0x10 [ 390.005768][ T38] ? __pfx_kthread+0x10/0x10 [ 390.005798][ T38] ret_from_fork+0x436/0x7d0 [ 390.005824][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 390.005855][ T38] ? __switch_to_asm+0x39/0x70 [ 390.005872][ T38] ? __switch_to_asm+0x33/0x70 [ 390.005889][ T38] ? __pfx_kthread+0x10/0x10 [ 390.005918][ T38] ret_from_fork_asm+0x1a/0x30 [ 390.005950][ T38] [ 390.006266][ T38] Kernel Offset: disabled