no interfaces have a carrier
[   59.267118][ T5469] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.295945][ T5469] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK

syzkaller
syzkaller login: [   86.956506][    T9] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.106' (ED25519) to the list of known hosts.
2025/12/26 16:56:26 parsed 1 programs
[  182.837120][ T5836] cgroup: Unknown subsys name 'net'
[  183.080881][ T5836] cgroup: Unknown subsys name 'cpuset'
[  183.133688][ T5836] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  185.031274][ T5836] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  189.697389][ T5122] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  189.716648][ T5122] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  189.718414][ T5122] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  189.719682][ T5122] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  189.720451][ T5122] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  191.047382][ T5882] chnl_net:caif_netlink_parms(): no params data found
[  191.485542][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.487233][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.487397][ T5882] bridge_slave_0: entered allmulticast mode
[  191.489028][ T5882] bridge_slave_0: entered promiscuous mode
[  191.496214][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.496430][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.496596][ T5882] bridge_slave_1: entered allmulticast mode
[  191.499146][ T5882] bridge_slave_1: entered promiscuous mode
[  191.700296][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  191.704991][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  191.857638][ T5882] team0: Port device team_slave_0 added
[  191.859871][ T5882] team0: Port device team_slave_1 added
[  192.096441][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0
[  192.096455][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  192.096470][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  192.098820][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1
[  192.098837][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  192.098858][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  192.320222][ T5882] hsr_slave_0: entered promiscuous mode
[  192.321326][ T5882] hsr_slave_1: entered promiscuous mode
[  192.682654][ T5882] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  192.735417][ T5882] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  192.758875][ T5882] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  192.798928][ T5882] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  192.928188][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.033770][ T5882] 8021q: adding VLAN 0 to HW filter on device team0
[  193.041792][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.042920][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.080690][ T3913] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.080833][ T3913] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.310869][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.362710][ T5882] veth0_vlan: entered promiscuous mode
[  193.371930][ T5882] veth1_vlan: entered promiscuous mode
[  193.411286][ T5882] veth0_macvtap: entered promiscuous mode
[  193.421605][ T5882] veth1_macvtap: entered promiscuous mode
[  193.440879][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.457974][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.478959][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.481243][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.481290][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.481339][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  194.258436][ T3913] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.479026][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  194.479105][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  194.505227][ T3913] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.715350][ T3913] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.235160][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.235183][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.314619][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.314635][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.502278][ T3913] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.603533][ T3913] bridge_slave_1: left allmulticast mode
[  196.603659][ T3913] bridge_slave_1: left promiscuous mode
[  196.605362][ T3913] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.684523][ T3913] bridge_slave_0: left allmulticast mode
[  196.684543][ T3913] bridge_slave_0: left promiscuous mode
[  196.684706][ T3913] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.475403][ T3913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  198.534981][ T3913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  198.575522][ T3913] bond0 (unregistering): Released all slaves
[  198.943274][ T3913] hsr_slave_0: left promiscuous mode
[  199.008023][ T3913] hsr_slave_1: left promiscuous mode
[  199.009194][ T3913] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.009269][ T3913] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.058213][ T3913] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.058243][ T3913] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.170016][ T3913] veth1_macvtap: left promiscuous mode
[  199.170188][ T3913] veth0_macvtap: left promiscuous mode
[  199.171705][ T3913] veth1_vlan: left promiscuous mode
[  199.171972][ T3913] veth0_vlan: left promiscuous mode
[  201.306489][ T3913] team0 (unregistering): Port device team_slave_1 removed
[  201.503785][ T3913] team0 (unregistering): Port device team_slave_0 removed
2025/12/26 16:56:51 executed programs: 0
[  205.222894][   T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  205.226748][   T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  205.227564][   T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  205.243558][   T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  205.256598][   T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  206.113290][ T6004] chnl_net:caif_netlink_parms(): no params data found
[  206.454775][ T6004] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.454912][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.455022][ T6004] bridge_slave_0: entered allmulticast mode
[  206.456594][ T6004] bridge_slave_0: entered promiscuous mode
[  206.458799][ T6004] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.458958][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.459054][ T6004] bridge_slave_1: entered allmulticast mode
[  206.460574][ T6004] bridge_slave_1: entered promiscuous mode
[  206.958183][ T6004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  206.975578][ T6004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.355155][   T61] Bluetooth: hci0: command tx timeout
[  207.477009][ T6004] team0: Port device team_slave_0 added
[  207.595592][ T6004] team0: Port device team_slave_1 added
[  207.804080][ T6004] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.804095][ T6004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  207.804111][ T6004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.904070][ T6004] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.904087][ T6004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  207.904101][ T6004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.224825][ T6004] hsr_slave_0: entered promiscuous mode
[  208.229223][ T6004] hsr_slave_1: entered promiscuous mode
[  209.434770][   T61] Bluetooth: hci0: command tx timeout
[  210.037426][ T6004] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  210.068299][ T6004] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  210.108574][ T6004] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  210.146947][ T6004] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  210.347208][ T6004] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.380951][ T6004] 8021q: adding VLAN 0 to HW filter on device team0
[  210.389640][   T68] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.389788][   T68] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.399647][ T3445] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.400468][ T3445] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.729736][ T6004] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.802669][ T6004] veth0_vlan: entered promiscuous mode
[  210.819296][ T6004] veth1_vlan: entered promiscuous mode
[  210.866547][ T6004] veth0_macvtap: entered promiscuous mode
[  210.872206][ T6004] veth1_macvtap: entered promiscuous mode
[  210.905854][ T6004] batman_adv: batadv0: Interface activated: batadv_slave_0
[  210.927495][ T6004] batman_adv: batadv0: Interface activated: batadv_slave_1
[  210.947298][ T3913] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.947567][ T3913] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.948504][ T3913] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.948732][ T3913] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  211.232473][ T3445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.232496][ T3445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.306228][ T3445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.306252][ T3445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/12/26 16:56:58 executed programs: 2
[  211.516263][   T61] Bluetooth: hci0: command tx timeout
[  212.005624][ T6095] loop0: detected capacity change from 0 to 40427
[  212.110435][ T6095] F2FS-fs (loop0): invalid crc value
[  212.403185][ T6095] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  212.422717][ T6095] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  213.593168][   T61] Bluetooth: hci0: command tx timeout
[  220.961891][ T6095] F2FS-fs (loop0): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials
[  220.976189][ T6095] syz.0.17: attempt to access beyond end of device
[  220.976189][ T6095] loop0: rw=524288, sector=86016, nr_sectors = 8 limit=40427
[  220.976823][ T6095] syz.0.17: attempt to access beyond end of device
[  220.976823][ T6095] loop0: rw=524288, sector=86024, nr_sectors = 8 limit=40427
[  220.976936][ T6095] syz.0.17: attempt to access beyond end of device
[  220.976936][ T6095] loop0: rw=524288, sector=86032, nr_sectors = 8 limit=40427
[  220.977047][ T6095] syz.0.17: attempt to access beyond end of device
[  220.977047][ T6095] loop0: rw=524288, sector=86040, nr_sectors = 8 limit=40427
[  220.977146][ T6095] syz.0.17: attempt to access beyond end of device
[  220.977146][ T6095] loop0: rw=524288, sector=86048, nr_sectors = 8 limit=40427
[  220.977248][ T6095] syz.0.17: attempt to access beyond end of device
[  220.977248][ T6095] loop0: rw=524288, sector=86056, nr_sectors = 8 limit=40427
[  220.977362][ T6095] syz.0.17: attempt to access beyond end of device
[  220.977362][ T6095] loop0: rw=524288, sector=86064, nr_sectors = 8 limit=40427
[  220.977465][ T6095] syz.0.17: attempt to access beyond end of device
[  220.977465][ T6095] loop0: rw=524288, sector=86072, nr_sectors = 8 limit=40427
[  220.977568][ T6095] syz.0.17: attempt to access beyond end of device
[  220.977568][ T6095] loop0: rw=524288, sector=86080, nr_sectors = 8 limit=40427
[  220.977675][ T6095] syz.0.17: attempt to access beyond end of device
[  220.977675][ T6095] loop0: rw=524288, sector=86088, nr_sectors = 8 limit=40427
[  225.983091][ T6095] bio_check_eod: 58760 callbacks suppressed
[  225.983117][ T6095] syz.0.17: attempt to access beyond end of device
[  225.983117][ T6095] loop0: rw=0, sector=88744, nr_sectors = 8 limit=40427
[  225.983234][ T6095] syz.0.17: attempt to access beyond end of device
[  225.983234][ T6095] loop0: rw=0, sector=88752, nr_sectors = 8 limit=40427
[  225.983310][ T6095] syz.0.17: attempt to access beyond end of device
[  225.983310][ T6095] loop0: rw=0, sector=88760, nr_sectors = 8 limit=40427
[  225.983384][ T6095] syz.0.17: attempt to access beyond end of device
[  225.983384][ T6095] loop0: rw=0, sector=88768, nr_sectors = 8 limit=40427
[  225.983457][ T6095] syz.0.17: attempt to access beyond end of device
[  225.983457][ T6095] loop0: rw=0, sector=88776, nr_sectors = 8 limit=40427
[  225.983531][ T6095] syz.0.17: attempt to access beyond end of device
[  225.983531][ T6095] loop0: rw=0, sector=88784, nr_sectors = 8 limit=40427
[  225.983604][ T6095] syz.0.17: attempt to access beyond end of device
[  225.983604][ T6095] loop0: rw=0, sector=88792, nr_sectors = 8 limit=40427
[  225.983677][ T6095] syz.0.17: attempt to access beyond end of device
[  225.983677][ T6095] loop0: rw=0, sector=88800, nr_sectors = 8 limit=40427
[  225.983750][ T6095] syz.0.17: attempt to access beyond end of device
[  225.983750][ T6095] loop0: rw=0, sector=88808, nr_sectors = 8 limit=40427
[  225.983823][ T6095] syz.0.17: attempt to access beyond end of device
[  225.983823][ T6095] loop0: rw=0, sector=88816, nr_sectors = 8 limit=40427
[  226.574448][ T5122] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  226.580548][ T5122] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  226.582436][ T5122] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  226.585814][ T5122] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  226.586715][ T5122] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  227.026726][ T6155] chnl_net:caif_netlink_parms(): no params data found
[  227.460769][ T6155] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.461022][ T6155] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.461220][ T6155] bridge_slave_0: entered allmulticast mode
[  227.491611][ T6155] bridge_slave_0: entered promiscuous mode
[  227.501626][ T6155] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.502340][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.502529][ T6155] bridge_slave_1: entered allmulticast mode
[  227.530648][ T6155] bridge_slave_1: entered promiscuous mode
[  227.730664][ T6155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.745075][ T6155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  227.948310][ T6155] team0: Port device team_slave_0 added
[  227.952451][ T6155] team0: Port device team_slave_1 added
[  228.276782][ T6155] batman_adv: batadv0: Adding interface: batadv_slave_0
[  228.276802][ T6155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  228.276829][ T6155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  228.279351][ T6155] batman_adv: batadv0: Adding interface: batadv_slave_1
[  228.279365][ T6155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  228.279392][ T6155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  228.624868][ T6155] hsr_slave_0: entered promiscuous mode
[  228.626384][ T6155] hsr_slave_1: entered promiscuous mode
[  228.627649][ T6155] debugfs: 'hsr0' already exists in 'hsr'
[  228.627748][ T6155] Cannot create hsr debugfs directory
[  228.633222][   T61] Bluetooth: hci1: command tx timeout
[  229.249462][ T6155] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  229.290987][ T6155] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  229.328345][ T6155] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  229.373179][ T6155] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  229.572710][ T6155] 8021q: adding VLAN 0 to HW filter on device bond0
[  229.612885][ T6155] 8021q: adding VLAN 0 to HW filter on device team0
[  229.630731][ T2150] bridge0: port 1(bridge_slave_0) entered blocking state
[  229.630960][ T2150] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.671476][ T2150] bridge0: port 2(bridge_slave_1) entered blocking state
[  229.672011][ T2150] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.039771][ T6155] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.132816][ T6155] veth0_vlan: entered promiscuous mode
[  230.158517][ T6155] veth1_vlan: entered promiscuous mode
[  230.221458][ T6155] veth0_macvtap: entered promiscuous mode
[  230.232319][ T6155] veth1_macvtap: entered promiscuous mode
[  230.272176][ T6155] batman_adv: batadv0: Interface activated: batadv_slave_0
[  230.314479][ T6155] batman_adv: batadv0: Interface activated: batadv_slave_1
[  230.338107][ T2150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  230.338160][ T2150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  230.338197][ T2150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  230.338231][ T2150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.603138][ T3445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.603163][ T3445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.680894][ T3445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.680923][ T3445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.713228][   T61] Bluetooth: hci1: command tx timeout
2025/12/26 16:57:17 executed programs: 3
[  230.994311][ T6095] bio_check_eod: 39913 callbacks suppressed
[  230.994328][ T6095] syz.0.17: attempt to access beyond end of device
[  230.994328][ T6095] loop0: rw=0, sector=86032, nr_sectors = 8 limit=40427
[  230.994412][ T6095] syz.0.17: attempt to access beyond end of device
[  230.994412][ T6095] loop0: rw=0, sector=86040, nr_sectors = 8 limit=40427
[  230.994487][ T6095] syz.0.17: attempt to access beyond end of device
[  230.994487][ T6095] loop0: rw=0, sector=86048, nr_sectors = 8 limit=40427
[  230.994582][ T6095] syz.0.17: attempt to access beyond end of device
[  230.994582][ T6095] loop0: rw=0, sector=86056, nr_sectors = 8 limit=40427
[  230.994658][ T6095] syz.0.17: attempt to access beyond end of device
[  230.994658][ T6095] loop0: rw=0, sector=86064, nr_sectors = 8 limit=40427
[  230.994731][ T6095] syz.0.17: attempt to access beyond end of device
[  230.994731][ T6095] loop0: rw=0, sector=86072, nr_sectors = 8 limit=40427
[  230.994811][ T6095] syz.0.17: attempt to access beyond end of device
[  230.994811][ T6095] loop0: rw=0, sector=86080, nr_sectors = 8 limit=40427
[  230.994885][ T6095] syz.0.17: attempt to access beyond end of device
[  230.994885][ T6095] loop0: rw=0, sector=86088, nr_sectors = 8 limit=40427
[  230.994958][ T6095] syz.0.17: attempt to access beyond end of device
[  230.994958][ T6095] loop0: rw=0, sector=86096, nr_sectors = 8 limit=40427
[  230.995032][ T6095] syz.0.17: attempt to access beyond end of device
[  230.995032][ T6095] loop0: rw=0, sector=86104, nr_sectors = 8 limit=40427
[  231.584565][ T6176] loop1: detected capacity change from 0 to 40427
[  231.637147][ T6176] F2FS-fs (loop1): invalid crc value
[  231.907876][ T6176] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  231.924445][ T6176] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  232.793116][   T61] Bluetooth: hci1: command tx timeout
[  234.874507][   T61] Bluetooth: hci1: command tx timeout
[  236.005184][ T6095] bio_check_eod: 29222 callbacks suppressed
[  236.005207][ T6095] syz.0.17: attempt to access beyond end of device
[  236.005207][ T6095] loop0: rw=524288, sector=88136, nr_sectors = 8 limit=40427
[  236.005348][ T6095] syz.0.17: attempt to access beyond end of device
[  236.005348][ T6095] loop0: rw=524288, sector=88144, nr_sectors = 8 limit=40427
[  236.005485][ T6095] syz.0.17: attempt to access beyond end of device
[  236.005485][ T6095] loop0: rw=524288, sector=88152, nr_sectors = 8 limit=40427
[  236.005622][ T6095] syz.0.17: attempt to access beyond end of device
[  236.005622][ T6095] loop0: rw=524288, sector=88160, nr_sectors = 8 limit=40427
[  236.005759][ T6095] syz.0.17: attempt to access beyond end of device
[  236.005759][ T6095] loop0: rw=524288, sector=88168, nr_sectors = 8 limit=40427
[  236.005894][ T6095] syz.0.17: attempt to access beyond end of device
[  236.005894][ T6095] loop0: rw=524288, sector=88176, nr_sectors = 8 limit=40427
[  236.006045][ T6095] syz.0.17: attempt to access beyond end of device
[  236.006045][ T6095] loop0: rw=524288, sector=88184, nr_sectors = 8 limit=40427
[  236.006189][ T6095] syz.0.17: attempt to access beyond end of device
[  236.006189][ T6095] loop0: rw=524288, sector=88192, nr_sectors = 8 limit=40427
[  236.006325][ T6095] syz.0.17: attempt to access beyond end of device
[  236.006325][ T6095] loop0: rw=524288, sector=88200, nr_sectors = 8 limit=40427
[  236.006461][ T6095] syz.0.17: attempt to access beyond end of device
[  236.006461][ T6095] loop0: rw=524288, sector=88208, nr_sectors = 8 limit=40427
[  241.013080][ T6095] bio_check_eod: 30832 callbacks suppressed
[  241.013104][ T6095] syz.0.17: attempt to access beyond end of device
[  241.013104][ T6095] loop0: rw=0, sector=87408, nr_sectors = 8 limit=40427
[  241.013255][ T6095] syz.0.17: attempt to access beyond end of device
[  241.013255][ T6095] loop0: rw=0, sector=87416, nr_sectors = 8 limit=40427
[  241.013399][ T6095] syz.0.17: attempt to access beyond end of device
[  241.013399][ T6095] loop0: rw=0, sector=87424, nr_sectors = 8 limit=40427
[  241.013541][ T6095] syz.0.17: attempt to access beyond end of device
[  241.013541][ T6095] loop0: rw=0, sector=87432, nr_sectors = 8 limit=40427
[  241.013683][ T6095] syz.0.17: attempt to access beyond end of device
[  241.013683][ T6095] loop0: rw=0, sector=87440, nr_sectors = 8 limit=40427
[  241.013833][ T6095] syz.0.17: attempt to access beyond end of device
[  241.013833][ T6095] loop0: rw=0, sector=87448, nr_sectors = 8 limit=40427
[  241.013975][ T6095] syz.0.17: attempt to access beyond end of device
[  241.013975][ T6095] loop0: rw=0, sector=87456, nr_sectors = 8 limit=40427
[  241.014116][ T6095] syz.0.17: attempt to access beyond end of device
[  241.014116][ T6095] loop0: rw=0, sector=87464, nr_sectors = 8 limit=40427
[  241.014257][ T6095] syz.0.17: attempt to access beyond end of device
[  241.014257][ T6095] loop0: rw=0, sector=87472, nr_sectors = 8 limit=40427
[  241.014405][ T6095] syz.0.17: attempt to access beyond end of device
[  241.014405][ T6095] loop0: rw=0, sector=87480, nr_sectors = 8 limit=40427
[  246.020251][ T5122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  246.022131][ T5122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  246.023124][ T5122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  246.048129][ T6095] bio_check_eod: 30747 callbacks suppressed
[  246.048150][ T6095] syz.0.17: attempt to access beyond end of device
[  246.048150][ T6095] loop0: rw=0, sector=89928, nr_sectors = 8 limit=40427
[  246.048550][ T6095] syz.0.17: attempt to access beyond end of device
[  246.048550][ T6095] loop0: rw=0, sector=89936, nr_sectors = 8 limit=40427
[  246.048562][ T5122] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  246.049337][ T5122] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  246.087935][ T6095] syz.0.17: attempt to access beyond end of device
[  246.087935][ T6095] loop0: rw=524288, sector=86016, nr_sectors = 8 limit=40427
[  246.088108][ T6095] syz.0.17: attempt to access beyond end of device
[  246.088108][ T6095] loop0: rw=524288, sector=86024, nr_sectors = 8 limit=40427
[  246.088228][ T6095] syz.0.17: attempt to access beyond end of device
[  246.088228][ T6095] loop0: rw=524288, sector=86032, nr_sectors = 8 limit=40427
[  246.088347][ T6095] syz.0.17: attempt to access beyond end of device
[  246.088347][ T6095] loop0: rw=524288, sector=86040, nr_sectors = 8 limit=40427
[  246.088465][ T6095] syz.0.17: attempt to access beyond end of device
[  246.088465][ T6095] loop0: rw=524288, sector=86048, nr_sectors = 8 limit=40427
[  246.088583][ T6095] syz.0.17: attempt to access beyond end of device
[  246.088583][ T6095] loop0: rw=524288, sector=86056, nr_sectors = 8 limit=40427
[  246.088701][ T6095] syz.0.17: attempt to access beyond end of device
[  246.088701][ T6095] loop0: rw=524288, sector=86064, nr_sectors = 8 limit=40427
[  246.088818][ T6095] syz.0.17: attempt to access beyond end of device
[  246.088818][ T6095] loop0: rw=524288, sector=86072, nr_sectors = 8 limit=40427
[  246.746471][ T6182] chnl_net:caif_netlink_parms(): no params data found
[  247.265420][ T6182] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.265862][ T6182] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.266067][ T6182] bridge_slave_0: entered allmulticast mode
[  247.269013][ T6182] bridge_slave_0: entered promiscuous mode
[  247.303960][ T6182] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.304190][ T6182] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.304390][ T6182] bridge_slave_1: entered allmulticast mode
[  247.307413][ T6182] bridge_slave_1: entered promiscuous mode
[  247.522790][ T6182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  247.544147][ T6182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  247.818099][ T6182] team0: Port device team_slave_0 added
[  247.831230][ T6182] team0: Port device team_slave_1 added
[  248.016279][ T6182] batman_adv: batadv0: Adding interface: batadv_slave_0
[  248.016298][ T6182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  248.016326][ T6182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  248.024799][ T6182] batman_adv: batadv0: Adding interface: batadv_slave_1
[  248.024814][ T6182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  248.024907][ T6182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  248.073233][   T61] Bluetooth: hci2: command tx timeout
[  248.309682][ T6182] hsr_slave_0: entered promiscuous mode
[  248.312700][ T6182] hsr_slave_1: entered promiscuous mode
[  248.314189][ T6182] debugfs: 'hsr0' already exists in 'hsr'
[  248.314213][ T6182] Cannot create hsr debugfs directory
[  248.401856][ T6176] F2FS-fs (loop1): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials
[  249.212003][ T6182] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  249.251709][ T6182] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  249.298500][ T6182] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  249.321144][ T6182] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  249.695116][ T6182] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.754433][ T6182] 8021q: adding VLAN 0 to HW filter on device team0
[  249.778995][ T3673] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.779257][ T3673] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.808846][ T3673] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.809081][ T3673] bridge0: port 2(bridge_slave_1) entered forwarding state
[  250.153179][   T61] Bluetooth: hci2: command tx timeout
[  250.517728][ T6182] 8021q: adding VLAN 0 to HW filter on device batadv0
[  250.709104][ T6182] veth0_vlan: entered promiscuous mode
[  250.755887][ T6182] veth1_vlan: entered promiscuous mode
[  250.855696][ T6182] veth0_macvtap: entered promiscuous mode
[  250.869395][ T6182] veth1_macvtap: entered promiscuous mode
[  250.939723][ T6182] batman_adv: batadv0: Interface activated: batadv_slave_0
[  250.995630][ T6182] batman_adv: batadv0: Interface activated: batadv_slave_1
[  251.049755][ T3445] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.055806][ T3445] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.055849][ T3445] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.055881][ T3445] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.058903][ T6095] bio_check_eod: 32680 callbacks suppressed
[  251.058918][ T6095] syz.0.17: attempt to access beyond end of device
[  251.058918][ T6095] loop0: rw=0, sector=87568, nr_sectors = 8 limit=40427
[  251.059066][ T6095] syz.0.17: attempt to access beyond end of device
[  251.059066][ T6095] loop0: rw=0, sector=87576, nr_sectors = 8 limit=40427
[  251.059189][ T6095] syz.0.17: attempt to access beyond end of device
[  251.059189][ T6095] loop0: rw=0, sector=87584, nr_sectors = 8 limit=40427
[  251.059311][ T6095] syz.0.17: attempt to access beyond end of device
[  251.059311][ T6095] loop0: rw=0, sector=87592, nr_sectors = 8 limit=40427
[  251.059432][ T6095] syz.0.17: attempt to access beyond end of device
[  251.059432][ T6095] loop0: rw=0, sector=87600, nr_sectors = 8 limit=40427
[  251.059553][ T6095] syz.0.17: attempt to access beyond end of device
[  251.059553][ T6095] loop0: rw=0, sector=87608, nr_sectors = 8 limit=40427
[  251.059683][ T6095] syz.0.17: attempt to access beyond end of device
[  251.059683][ T6095] loop0: rw=0, sector=87616, nr_sectors = 8 limit=40427
[  251.059837][ T6095] syz.0.17: attempt to access beyond end of device
[  251.059837][ T6095] loop0: rw=0, sector=87624, nr_sectors = 8 limit=40427
[  251.059959][ T6095] syz.0.17: attempt to access beyond end of device
[  251.059959][ T6095] loop0: rw=0, sector=87632, nr_sectors = 8 limit=40427
[  251.060081][ T6095] syz.0.17: attempt to access beyond end of device
[  251.060081][ T6095] loop0: rw=0, sector=87640, nr_sectors = 8 limit=40427
[  251.598039][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.598061][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.788507][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.788533][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/12/26 16:57:38 executed programs: 4
[  252.233190][   T61] Bluetooth: hci2: command tx timeout
[  253.080385][ T6208] loop2: detected capacity change from 0 to 40427
[  253.137823][ T6208] F2FS-fs (loop2): invalid crc value
[  253.563255][ T6208] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  253.567346][ T6208] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  254.313089][   T61] Bluetooth: hci2: command tx timeout
[  255.918645][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  255.918744][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  256.063081][ T6176] bio_check_eod: 39473 callbacks suppressed
[  256.063104][ T6176] syz.1.18: attempt to access beyond end of device
[  256.063104][ T6176] loop1: rw=524288, sector=87216, nr_sectors = 8 limit=40427
[  256.063249][ T6176] syz.1.18: attempt to access beyond end of device
[  256.063249][ T6176] loop1: rw=524288, sector=87224, nr_sectors = 8 limit=40427
[  256.063385][ T6176] syz.1.18: attempt to access beyond end of device
[  256.063385][ T6176] loop1: rw=524288, sector=87232, nr_sectors = 8 limit=40427
[  256.063530][ T6176] syz.1.18: attempt to access beyond end of device
[  256.063530][ T6176] loop1: rw=524288, sector=87240, nr_sectors = 8 limit=40427
[  256.063666][ T6176] syz.1.18: attempt to access beyond end of device
[  256.063666][ T6176] loop1: rw=524288, sector=87248, nr_sectors = 8 limit=40427
[  256.063801][ T6176] syz.1.18: attempt to access beyond end of device
[  256.063801][ T6176] loop1: rw=524288, sector=87256, nr_sectors = 8 limit=40427
[  256.063937][ T6176] syz.1.18: attempt to access beyond end of device
[  256.063937][ T6176] loop1: rw=524288, sector=87264, nr_sectors = 8 limit=40427
[  256.064073][ T6176] syz.1.18: attempt to access beyond end of device
[  256.064073][ T6176] loop1: rw=524288, sector=87272, nr_sectors = 8 limit=40427
[  256.064208][ T6176] syz.1.18: attempt to access beyond end of device
[  256.064208][ T6176] loop1: rw=524288, sector=87280, nr_sectors = 8 limit=40427
[  256.064344][ T6176] syz.1.18: attempt to access beyond end of device
[  256.064344][ T6176] loop1: rw=524288, sector=87288, nr_sectors = 8 limit=40427
[  261.073061][ T6176] bio_check_eod: 39693 callbacks suppressed
[  261.073085][ T6176] syz.1.18: attempt to access beyond end of device
[  261.073085][ T6176] loop1: rw=0, sector=88032, nr_sectors = 8 limit=40427
[  261.073235][ T6176] syz.1.18: attempt to access beyond end of device
[  261.073235][ T6176] loop1: rw=0, sector=88040, nr_sectors = 8 limit=40427
[  261.073376][ T6176] syz.1.18: attempt to access beyond end of device
[  261.073376][ T6176] loop1: rw=0, sector=88048, nr_sectors = 8 limit=40427
[  261.073515][ T6176] syz.1.18: attempt to access beyond end of device
[  261.073515][ T6176] loop1: rw=0, sector=88056, nr_sectors = 8 limit=40427
[  261.073656][ T6176] syz.1.18: attempt to access beyond end of device
[  261.073656][ T6176] loop1: rw=0, sector=88064, nr_sectors = 8 limit=40427
[  261.073804][ T6176] syz.1.18: attempt to access beyond end of device
[  261.073804][ T6176] loop1: rw=0, sector=88072, nr_sectors = 8 limit=40427
[  261.073945][ T6176] syz.1.18: attempt to access beyond end of device
[  261.073945][ T6176] loop1: rw=0, sector=88080, nr_sectors = 8 limit=40427
[  261.074084][ T6176] syz.1.18: attempt to access beyond end of device
[  261.074084][ T6176] loop1: rw=0, sector=88088, nr_sectors = 8 limit=40427
[  261.074254][ T6176] syz.1.18: attempt to access beyond end of device
[  261.074254][ T6176] loop1: rw=0, sector=88096, nr_sectors = 8 limit=40427
[  261.074400][ T6176] syz.1.18: attempt to access beyond end of device
[  261.074400][ T6176] loop1: rw=0, sector=88104, nr_sectors = 8 limit=40427
[  266.086103][ T6095] bio_check_eod: 41656 callbacks suppressed
[  266.086129][ T6095] syz.0.17: attempt to access beyond end of device
[  266.086129][ T6095] loop0: rw=0, sector=86056, nr_sectors = 8 limit=40427
[  266.086273][ T6095] syz.0.17: attempt to access beyond end of device
[  266.086273][ T6095] loop0: rw=0, sector=86064, nr_sectors = 8 limit=40427
[  266.086279][ T6176] syz.1.18: attempt to access beyond end of device
[  266.086279][ T6176] loop1: rw=0, sector=88760, nr_sectors = 8 limit=40427
[  266.086413][ T6095] syz.0.17: attempt to access beyond end of device
[  266.086413][ T6095] loop0: rw=0, sector=86072, nr_sectors = 8 limit=40427
[  266.086462][ T6176] syz.1.18: attempt to access beyond end of device
[  266.086462][ T6176] loop1: rw=0, sector=88768, nr_sectors = 8 limit=40427
[  266.086566][ T6095] syz.0.17: attempt to access beyond end of device
[  266.086566][ T6095] loop0: rw=0, sector=86080, nr_sectors = 8 limit=40427
[  266.086605][ T6176] syz.1.18: attempt to access beyond end of device
[  266.086605][ T6176] loop1: rw=0, sector=88776, nr_sectors = 8 limit=40427
[  266.086708][ T6095] syz.0.17: attempt to access beyond end of device
[  266.086708][ T6095] loop0: rw=0, sector=86088, nr_sectors = 8 limit=40427
[  266.086754][ T6176] syz.1.18: attempt to access beyond end of device
[  266.086754][ T6176] loop1: rw=0, sector=88784, nr_sectors = 8 limit=40427
[  266.086851][ T6095] syz.0.17: attempt to access beyond end of device
[  266.086851][ T6095] loop0: rw=0, sector=86096, nr_sectors = 8 limit=40427
[  267.231401][ T5122] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  267.257955][ T5122] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  267.296464][ T5122] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  267.297849][ T5122] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  267.299215][ T5122] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  268.089868][ T6216] chnl_net:caif_netlink_parms(): no params data found
[  268.646894][ T6216] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.660516][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.660778][ T6216] bridge_slave_0: entered allmulticast mode
[  268.664296][ T6216] bridge_slave_0: entered promiscuous mode
[  268.668048][ T6216] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.668238][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.668507][ T6216] bridge_slave_1: entered allmulticast mode
[  268.704560][ T6216] bridge_slave_1: entered promiscuous mode
[  269.109473][ T6216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  269.125539][ T6216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  269.353549][ T5122] Bluetooth: hci3: command tx timeout
[  269.448182][ T6216] team0: Port device team_slave_0 added
[  269.452173][ T6216] team0: Port device team_slave_1 added
[  269.853238][ T6216] batman_adv: batadv0: Adding interface: batadv_slave_0
[  269.853260][ T6216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  269.853289][ T6216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  269.861037][ T6216] batman_adv: batadv0: Adding interface: batadv_slave_1
[  269.861054][ T6216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  269.861081][ T6216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  270.388257][ T6216] hsr_slave_0: entered promiscuous mode
[  270.389811][ T6216] hsr_slave_1: entered promiscuous mode
[  270.390949][ T6216] debugfs: 'hsr0' already exists in 'hsr'
[  270.390974][ T6216] Cannot create hsr debugfs directory
[  271.093076][ T6176] bio_check_eod: 32284 callbacks suppressed
[  271.093099][ T6176] syz.1.18: attempt to access beyond end of device
[  271.093099][ T6176] loop1: rw=0, sector=88160, nr_sectors = 8 limit=40427
[  271.093253][ T6176] syz.1.18: attempt to access beyond end of device
[  271.093253][ T6176] loop1: rw=0, sector=88168, nr_sectors = 8 limit=40427
[  271.093402][ T6176] syz.1.18: attempt to access beyond end of device
[  271.093402][ T6176] loop1: rw=0, sector=88176, nr_sectors = 8 limit=40427
[  271.093542][ T6176] syz.1.18: attempt to access beyond end of device
[  271.093542][ T6176] loop1: rw=0, sector=88184, nr_sectors = 8 limit=40427
[  271.093681][ T6176] syz.1.18: attempt to access beyond end of device
[  271.093681][ T6176] loop1: rw=0, sector=88192, nr_sectors = 8 limit=40427
[  271.093822][ T6176] syz.1.18: attempt to access beyond end of device
[  271.093822][ T6176] loop1: rw=0, sector=88200, nr_sectors = 8 limit=40427
[  271.093963][ T6176] syz.1.18: attempt to access beyond end of device
[  271.093963][ T6176] loop1: rw=0, sector=88208, nr_sectors = 8 limit=40427
[  271.094102][ T6176] syz.1.18: attempt to access beyond end of device
[  271.094102][ T6176] loop1: rw=0, sector=88216, nr_sectors = 8 limit=40427
[  271.094242][ T6176] syz.1.18: attempt to access beyond end of device
[  271.094242][ T6176] loop1: rw=0, sector=88224, nr_sectors = 8 limit=40427
[  271.094389][ T6176] syz.1.18: attempt to access beyond end of device
[  271.094389][ T6176] loop1: rw=0, sector=88232, nr_sectors = 8 limit=40427
[  271.433088][ T5122] Bluetooth: hci3: command tx timeout
[  271.874253][ T6216] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  271.935126][ T6216] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  271.978564][ T6216] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  272.111995][ T6216] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  272.573828][ T6216] 8021q: adding VLAN 0 to HW filter on device bond0
[  272.638930][ T6216] 8021q: adding VLAN 0 to HW filter on device team0
[  272.689122][ T3913] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.689442][ T3913] bridge0: port 1(bridge_slave_0) entered forwarding state
[  272.727240][ T3913] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.729279][ T3913] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.488436][ T6216] 8021q: adding VLAN 0 to HW filter on device batadv0
[  273.513162][ T5122] Bluetooth: hci3: command tx timeout
[  273.641807][ T6216] veth0_vlan: entered promiscuous mode
[  273.666544][ T6216] veth1_vlan: entered promiscuous mode
[  273.829501][ T6216] veth0_macvtap: entered promiscuous mode
[  273.860954][ T6216] veth1_macvtap: entered promiscuous mode
[  273.894826][ T6216] batman_adv: batadv0: Interface activated: batadv_slave_0
[  273.957499][ T6216] batman_adv: batadv0: Interface activated: batadv_slave_1
[  274.045338][ T1158] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.045390][ T1158] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.045428][ T1158] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.045465][ T1158] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.556886][ T3874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.556910][ T3874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.667651][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.667674][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/12/26 16:58:01 executed programs: 5
[  275.593148][ T5122] Bluetooth: hci3: command tx timeout
[  276.103035][ T6095] bio_check_eod: 30768 callbacks suppressed
[  276.103058][ T6095] syz.0.17: attempt to access beyond end of device
[  276.103058][ T6095] loop0: rw=0, sector=87000, nr_sectors = 8 limit=40427
[  276.103085][ T6176] syz.1.18: attempt to access beyond end of device
[  276.103085][ T6176] loop1: rw=0, sector=89608, nr_sectors = 8 limit=40427
[  276.103213][ T6095] syz.0.17: attempt to access beyond end of device
[  276.103213][ T6095] loop0: rw=0, sector=87008, nr_sectors = 8 limit=40427
[  276.103232][ T6176] syz.1.18: attempt to access beyond end of device
[  276.103232][ T6176] loop1: rw=0, sector=89616, nr_sectors = 8 limit=40427
[  276.103355][ T6095] syz.0.17: attempt to access beyond end of device
[  276.103355][ T6095] loop0: rw=0, sector=87016, nr_sectors = 8 limit=40427
[  276.103387][ T6176] syz.1.18: attempt to access beyond end of device
[  276.103387][ T6176] loop1: rw=0, sector=89624, nr_sectors = 8 limit=40427
[  276.103498][ T6095] syz.0.17: attempt to access beyond end of device
[  276.103498][ T6095] loop0: rw=0, sector=87024, nr_sectors = 8 limit=40427
[  276.103528][ T6176] syz.1.18: attempt to access beyond end of device
[  276.103528][ T6176] loop1: rw=0, sector=89632, nr_sectors = 8 limit=40427
[  276.103651][ T6095] syz.0.17: attempt to access beyond end of device
[  276.103651][ T6095] loop0: rw=0, sector=87032, nr_sectors = 8 limit=40427
[  276.103671][ T6176] syz.1.18: attempt to access beyond end of device
[  276.103671][ T6176] loop1: rw=0, sector=89640, nr_sectors = 8 limit=40427
[  276.227845][ T6237] loop3: detected capacity change from 0 to 40427
[  276.349388][ T6237] F2FS-fs (loop3): invalid crc value
[  276.859695][ T6237] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  276.885907][ T6237] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  281.113223][ T6176] bio_check_eod: 30839 callbacks suppressed
[  281.113246][ T6176] syz.1.18: attempt to access beyond end of device
[  281.113246][ T6176] loop1: rw=0, sector=88832, nr_sectors = 8 limit=40427
[  281.113387][ T6176] syz.1.18: attempt to access beyond end of device
[  281.113387][ T6176] loop1: rw=0, sector=88840, nr_sectors = 8 limit=40427
[  281.113538][ T6176] syz.1.18: attempt to access beyond end of device
[  281.113538][ T6176] loop1: rw=0, sector=88848, nr_sectors = 8 limit=40427
[  281.113680][ T6176] syz.1.18: attempt to access beyond end of device
[  281.113680][ T6176] loop1: rw=0, sector=88856, nr_sectors = 8 limit=40427
[  281.113822][ T6176] syz.1.18: attempt to access beyond end of device
[  281.113822][ T6176] loop1: rw=0, sector=88864, nr_sectors = 8 limit=40427
[  281.113962][ T6176] syz.1.18: attempt to access beyond end of device
[  281.113962][ T6176] loop1: rw=0, sector=88872, nr_sectors = 8 limit=40427
[  281.114102][ T6176] syz.1.18: attempt to access beyond end of device
[  281.114102][ T6176] loop1: rw=0, sector=88880, nr_sectors = 8 limit=40427
[  281.114245][ T6176] syz.1.18: attempt to access beyond end of device
[  281.114245][ T6176] loop1: rw=0, sector=88888, nr_sectors = 8 limit=40427
[  281.114392][ T6176] syz.1.18: attempt to access beyond end of device
[  281.114392][ T6176] loop1: rw=0, sector=88896, nr_sectors = 8 limit=40427
[  281.114543][ T6176] syz.1.18: attempt to access beyond end of device
[  281.114543][ T6176] loop1: rw=0, sector=88904, nr_sectors = 8 limit=40427
[  285.695438][ T6208] F2FS-fs (loop2): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials
[  286.142687][ T6095] bio_check_eod: 31283 callbacks suppressed
[  286.142711][ T6095] syz.0.17: attempt to access beyond end of device
[  286.142711][ T6095] loop0: rw=0, sector=86208, nr_sectors = 8 limit=40427
[  286.142858][ T6095] syz.0.17: attempt to access beyond end of device
[  286.142858][ T6095] loop0: rw=0, sector=86216, nr_sectors = 8 limit=40427
[  286.143290][ T6208] syz.2.19: attempt to access beyond end of device
[  286.143290][ T6208] loop2: rw=524288, sector=86016, nr_sectors = 8 limit=40427
[  286.143469][ T6208] syz.2.19: attempt to access beyond end of device
[  286.143469][ T6208] loop2: rw=524288, sector=86024, nr_sectors = 8 limit=40427
[  286.143604][ T6208] syz.2.19: attempt to access beyond end of device
[  286.143604][ T6208] loop2: rw=524288, sector=86032, nr_sectors = 8 limit=40427
[  286.143729][ T6208] syz.2.19: attempt to access beyond end of device
[  286.143729][ T6208] loop2: rw=524288, sector=86040, nr_sectors = 8 limit=40427
[  286.143846][ T6208] syz.2.19: attempt to access beyond end of device
[  286.143846][ T6208] loop2: rw=524288, sector=86048, nr_sectors = 8 limit=40427
[  286.143964][ T6208] syz.2.19: attempt to access beyond end of device
[  286.143964][ T6208] loop2: rw=524288, sector=86056, nr_sectors = 8 limit=40427
[  286.144081][ T6208] syz.2.19: attempt to access beyond end of device
[  286.144081][ T6208] loop2: rw=524288, sector=86064, nr_sectors = 8 limit=40427
[  286.144217][ T6208] syz.2.19: attempt to access beyond end of device
[  286.144217][ T6208] loop2: rw=524288, sector=86072, nr_sectors = 8 limit=40427
[  290.463894][   T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  290.469808][   T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  290.470799][   T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  290.472245][   T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  290.475120][   T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  291.144760][ T6095] bio_check_eod: 39876 callbacks suppressed
[  291.144785][ T6095] syz.0.17: attempt to access beyond end of device
[  291.144785][ T6095] loop0: rw=524288, sector=87616, nr_sectors = 8 limit=40427
[  291.144932][ T6095] syz.0.17: attempt to access beyond end of device
[  291.144932][ T6095] loop0: rw=524288, sector=87624, nr_sectors = 8 limit=40427
[  291.145070][ T6095] syz.0.17: attempt to access beyond end of device
[  291.145070][ T6095] loop0: rw=524288, sector=87632, nr_sectors = 8 limit=40427
[  291.145209][ T6095] syz.0.17: attempt to access beyond end of device
[  291.145209][ T6095] loop0: rw=524288, sector=87640, nr_sectors = 8 limit=40427
[  291.145354][ T6095] syz.0.17: attempt to access beyond end of device
[  291.145354][ T6095] loop0: rw=524288, sector=87648, nr_sectors = 8 limit=40427
[  291.145492][ T6095] syz.0.17: attempt to access beyond end of device
[  291.145492][ T6095] loop0: rw=524288, sector=87656, nr_sectors = 8 limit=40427
[  291.145635][ T6095] syz.0.17: attempt to access beyond end of device
[  291.145635][ T6095] loop0: rw=524288, sector=87664, nr_sectors = 8 limit=40427
[  291.145772][ T6095] syz.0.17: attempt to access beyond end of device
[  291.145772][ T6095] loop0: rw=524288, sector=87672, nr_sectors = 8 limit=40427
[  291.145908][ T6095] syz.0.17: attempt to access beyond end of device
[  291.145908][ T6095] loop0: rw=524288, sector=87680, nr_sectors = 8 limit=40427
[  291.146076][ T6095] syz.0.17: attempt to access beyond end of device
[  291.146076][ T6095] loop0: rw=524288, sector=87688, nr_sectors = 8 limit=40427
[  291.612856][ T6244] chnl_net:caif_netlink_parms(): no params data found
[  292.391921][ T6244] bridge0: port 1(bridge_slave_0) entered blocking state
[  292.423328][ T6244] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.423592][ T6244] bridge_slave_0: entered allmulticast mode
[  292.428393][ T6244] bridge_slave_0: entered promiscuous mode
[  292.460817][ T6244] bridge0: port 2(bridge_slave_1) entered blocking state
[  292.461055][ T6244] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.461255][ T6244] bridge_slave_1: entered allmulticast mode
[  292.485094][ T6244] bridge_slave_1: entered promiscuous mode
[  292.555580][ T5122] Bluetooth: hci4: command tx timeout
[  292.898747][ T6244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  292.934445][ T6244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  293.403253][ T6244] team0: Port device team_slave_0 added
[  293.409324][ T6244] team0: Port device team_slave_1 added
[  293.982418][ T6244] batman_adv: batadv0: Adding interface: batadv_slave_0
[  293.982438][ T6244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  293.982465][ T6244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  294.003142][ T6244] batman_adv: batadv0: Adding interface: batadv_slave_1
[  294.003159][ T6244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  294.003183][ T6244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  294.468091][ T6244] hsr_slave_0: entered promiscuous mode
[  294.469635][ T6244] hsr_slave_1: entered promiscuous mode
[  294.470692][ T6244] debugfs: 'hsr0' already exists in 'hsr'
[  294.470716][ T6244] Cannot create hsr debugfs directory
[  294.634721][ T5122] Bluetooth: hci4: command tx timeout
[  296.017450][ T6244] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  296.060847][ T6244] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  296.154310][ T6208] bio_check_eod: 38005 callbacks suppressed
[  296.154334][ T6208] syz.2.19: attempt to access beyond end of device
[  296.154334][ T6208] loop2: rw=524288, sector=86864, nr_sectors = 8 limit=40427
[  296.154459][ T6208] syz.2.19: attempt to access beyond end of device
[  296.154459][ T6208] loop2: rw=524288, sector=86872, nr_sectors = 8 limit=40427
[  296.154574][ T6208] syz.2.19: attempt to access beyond end of device
[  296.154574][ T6208] loop2: rw=524288, sector=86880, nr_sectors = 8 limit=40427
[  296.154685][ T6208] syz.2.19: attempt to access beyond end of device
[  296.154685][ T6208] loop2: rw=524288, sector=86888, nr_sectors = 8 limit=40427
[  296.154798][ T6208] syz.2.19: attempt to access beyond end of device
[  296.154798][ T6208] loop2: rw=524288, sector=86896, nr_sectors = 8 limit=40427
[  296.154956][ T6208] syz.2.19: attempt to access beyond end of device
[  296.154956][ T6208] loop2: rw=524288, sector=86904, nr_sectors = 8 limit=40427
[  296.155069][ T6208] syz.2.19: attempt to access beyond end of device
[  296.155069][ T6208] loop2: rw=524288, sector=86912, nr_sectors = 8 limit=40427
[  296.155197][ T6208] syz.2.19: attempt to access beyond end of device
[  296.155197][ T6208] loop2: rw=524288, sector=86920, nr_sectors = 8 limit=40427
[  296.155318][ T6208] syz.2.19: attempt to access beyond end of device
[  296.155318][ T6208] loop2: rw=524288, sector=86928, nr_sectors = 8 limit=40427
[  296.155430][ T6208] syz.2.19: attempt to access beyond end of device
[  296.155430][ T6208] loop2: rw=524288, sector=86936, nr_sectors = 8 limit=40427
[  296.208170][ T6244] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  296.369697][ T6244] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  296.713171][ T5122] Bluetooth: hci4: command tx timeout
[  296.937937][ T6244] 8021q: adding VLAN 0 to HW filter on device bond0
[  297.014083][ T6244] 8021q: adding VLAN 0 to HW filter on device team0
[  297.026333][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.026548][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  297.075270][ T3874] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.075510][ T3874] bridge0: port 2(bridge_slave_1) entered forwarding state
[  298.079219][ T6244] 8021q: adding VLAN 0 to HW filter on device batadv0
[  298.793169][ T5122] Bluetooth: hci4: command tx timeout
[  299.128915][ T6244] veth0_vlan: entered promiscuous mode
[  299.170196][ T6244] veth1_vlan: entered promiscuous mode
[  299.375847][ T6244] veth0_macvtap: entered promiscuous mode
[  299.407633][ T6244] veth1_macvtap: entered promiscuous mode
[  299.567284][ T6244] batman_adv: batadv0: Interface activated: batadv_slave_0
[  299.616748][ T6244] batman_adv: batadv0: Interface activated: batadv_slave_1
[  299.670901][ T3913] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  299.671169][ T3913] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  299.671235][ T3913] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  299.671272][ T3913] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  300.283092][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.283115][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.478148][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.478172][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/12/26 16:58:27 executed programs: 6
[  301.163325][ T6208] bio_check_eod: 34971 callbacks suppressed
[  301.163348][ T6208] syz.2.19: attempt to access beyond end of device
[  301.163348][ T6208] loop2: rw=0, sector=86768, nr_sectors = 8 limit=40427
[  301.163502][ T6095] syz.0.17: attempt to access beyond end of device
[  301.163502][ T6095] loop0: rw=0, sector=86600, nr_sectors = 8 limit=40427
[  301.163531][ T6208] syz.2.19: attempt to access beyond end of device
[  301.163531][ T6208] loop2: rw=0, sector=86776, nr_sectors = 8 limit=40427
[  301.163676][ T6208] syz.2.19: attempt to access beyond end of device
[  301.163676][ T6208] loop2: rw=0, sector=86784, nr_sectors = 8 limit=40427
[  301.163689][ T6095] syz.0.17: attempt to access beyond end of device
[  301.163689][ T6095] loop0: rw=0, sector=86608, nr_sectors = 8 limit=40427
[  301.163832][ T6095] syz.0.17: attempt to access beyond end of device
[  301.163832][ T6095] loop0: rw=0, sector=86616, nr_sectors = 8 limit=40427
[  301.163848][ T6208] syz.2.19: attempt to access beyond end of device
[  301.163848][ T6208] loop2: rw=0, sector=86792, nr_sectors = 8 limit=40427
[  301.163972][ T6095] syz.0.17: attempt to access beyond end of device
[  301.163972][ T6095] loop0: rw=0, sector=86624, nr_sectors = 8 limit=40427
[  301.164001][ T6208] syz.2.19: attempt to access beyond end of device
[  301.164001][ T6208] loop2: rw=0, sector=86800, nr_sectors = 8 limit=40427
[  301.164115][ T6095] syz.0.17: attempt to access beyond end of device
[  301.164115][ T6095] loop0: rw=0, sector=86632, nr_sectors = 8 limit=40427
[  302.506069][ T6274] loop4: detected capacity change from 0 to 40427
[  302.525339][ T6274] F2FS-fs (loop4): invalid crc value
[  302.903639][ T6274] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  302.977134][ T6274] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  306.173269][ T6095] bio_check_eod: 35693 callbacks suppressed
[  306.173293][ T6095] syz.0.17: attempt to access beyond end of device
[  306.173293][ T6095] loop0: rw=0, sector=88736, nr_sectors = 8 limit=40427
[  306.173440][ T6095] syz.0.17: attempt to access beyond end of device
[  306.173440][ T6095] loop0: rw=0, sector=88744, nr_sectors = 8 limit=40427
[  306.173613][ T6095] syz.0.17: attempt to access beyond end of device
[  306.173613][ T6095] loop0: rw=0, sector=88752, nr_sectors = 8 limit=40427
[  306.173756][ T6095] syz.0.17: attempt to access beyond end of device
[  306.173756][ T6095] loop0: rw=0, sector=88760, nr_sectors = 8 limit=40427
[  306.173907][ T6095] syz.0.17: attempt to access beyond end of device
[  306.173907][ T6095] loop0: rw=0, sector=88768, nr_sectors = 8 limit=40427
[  306.174048][ T6095] syz.0.17: attempt to access beyond end of device
[  306.174048][ T6095] loop0: rw=0, sector=88776, nr_sectors = 8 limit=40427
[  306.174188][ T6095] syz.0.17: attempt to access beyond end of device
[  306.174188][ T6095] loop0: rw=0, sector=88784, nr_sectors = 8 limit=40427
[  306.174330][ T6095] syz.0.17: attempt to access beyond end of device
[  306.174330][ T6095] loop0: rw=0, sector=88792, nr_sectors = 8 limit=40427
[  306.174469][ T6095] syz.0.17: attempt to access beyond end of device
[  306.174469][ T6095] loop0: rw=0, sector=88800, nr_sectors = 8 limit=40427
[  306.174607][ T6095] syz.0.17: attempt to access beyond end of device
[  306.174607][ T6095] loop0: rw=0, sector=88808, nr_sectors = 8 limit=40427
[  311.184460][ T6176] bio_check_eod: 35566 callbacks suppressed
[  311.184485][ T6176] syz.1.18: attempt to access beyond end of device
[  311.184485][ T6176] loop1: rw=524288, sector=87064, nr_sectors = 8 limit=40427
[  311.184634][ T6176] syz.1.18: attempt to access beyond end of device
[  311.184634][ T6176] loop1: rw=524288, sector=87072, nr_sectors = 8 limit=40427
[  311.184772][ T6176] syz.1.18: attempt to access beyond end of device
[  311.184772][ T6176] loop1: rw=524288, sector=87080, nr_sectors = 8 limit=40427
[  311.184918][ T6176] syz.1.18: attempt to access beyond end of device
[  311.184918][ T6176] loop1: rw=524288, sector=87088, nr_sectors = 8 limit=40427
[  311.185056][ T6176] syz.1.18: attempt to access beyond end of device
[  311.185056][ T6176] loop1: rw=524288, sector=87096, nr_sectors = 8 limit=40427
[  311.185192][ T6176] syz.1.18: attempt to access beyond end of device
[  311.185192][ T6176] loop1: rw=524288, sector=87104, nr_sectors = 8 limit=40427
[  311.185322][ T6208] syz.2.19: attempt to access beyond end of device
[  311.185322][ T6208] loop2: rw=524288, sector=88112, nr_sectors = 8 limit=40427
[  311.185329][ T6176] syz.1.18: attempt to access beyond end of device
[  311.185329][ T6176] loop1: rw=524288, sector=87112, nr_sectors = 8 limit=40427
[  311.185467][ T6176] syz.1.18: attempt to access beyond end of device
[  311.185467][ T6176] loop1: rw=524288, sector=87120, nr_sectors = 8 limit=40427
[  311.185467][ T6208] syz.2.19: attempt to access beyond end of device
[  311.185467][ T6208] loop2: rw=524288, sector=88120, nr_sectors = 8 limit=40427
[  316.024073][   T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  316.031110][   T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  316.032141][   T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  316.107136][   T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  316.108138][   T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  316.192992][ T6176] bio_check_eod: 33798 callbacks suppressed
[  316.193014][ T6176] syz.1.18: attempt to access beyond end of device
[  316.193014][ T6176] loop1: rw=524288, sector=89288, nr_sectors = 8 limit=40427
[  316.193162][ T6176] syz.1.18: attempt to access beyond end of device
[  316.193162][ T6176] loop1: rw=524288, sector=89296, nr_sectors = 8 limit=40427
[  316.193186][ T6208] syz.2.19: attempt to access beyond end of device
[  316.193186][ T6208] loop2: rw=524288, sector=87592, nr_sectors = 8 limit=40427
[  316.193303][ T6176] syz.1.18: attempt to access beyond end of device
[  316.193303][ T6176] loop1: rw=524288, sector=89304, nr_sectors = 8 limit=40427
[  316.193328][ T6208] syz.2.19: attempt to access beyond end of device
[  316.193328][ T6208] loop2: rw=524288, sector=87600, nr_sectors = 8 limit=40427
[  316.193443][ T6176] syz.1.18: attempt to access beyond end of device
[  316.193443][ T6176] loop1: rw=524288, sector=89312, nr_sectors = 8 limit=40427
[  316.193467][ T6208] syz.2.19: attempt to access beyond end of device
[  316.193467][ T6208] loop2: rw=524288, sector=87608, nr_sectors = 8 limit=40427
[  316.193586][ T6176] syz.1.18: attempt to access beyond end of device
[  316.193586][ T6176] loop1: rw=524288, sector=89320, nr_sectors = 8 limit=40427
[  316.193605][ T6208] syz.2.19: attempt to access beyond end of device
[  316.193605][ T6208] loop2: rw=524288, sector=87616, nr_sectors = 8 limit=40427
[  316.193742][ T6208] syz.2.19: attempt to access beyond end of device
[  316.193742][ T6208] loop2: rw=524288, sector=87624, nr_sectors = 8 limit=40427
[  317.361119][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  317.361195][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  317.649614][ T6284] chnl_net:caif_netlink_parms(): no params data found
[  318.153114][   T61] Bluetooth: hci5: command tx timeout
[  318.457606][ T6284] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.482821][ T6284] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.483182][ T6284] bridge_slave_0: entered allmulticast mode
[  318.494813][ T6284] bridge_slave_0: entered promiscuous mode
[  318.498330][ T6284] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.498526][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.498705][ T6284] bridge_slave_1: entered allmulticast mode
[  318.513158][ T6284] bridge_slave_1: entered promiscuous mode
[  318.991047][ T6284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  319.038831][ T6284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  319.321190][ T6237] F2FS-fs (loop3): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials
[  319.529296][ T6284] team0: Port device team_slave_0 added
[  319.758525][ T6284] team0: Port device team_slave_1 added
[  320.233191][   T61] Bluetooth: hci5: command tx timeout
[  320.283247][ T6284] batman_adv: batadv0: Adding interface: batadv_slave_0
[  320.283267][ T6284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  320.283292][ T6284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  320.303270][ T6284] batman_adv: batadv0: Adding interface: batadv_slave_1
[  320.303288][ T6284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  320.303315][ T6284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  321.100433][ T6284] hsr_slave_0: entered promiscuous mode
[  321.101955][ T6284] hsr_slave_1: entered promiscuous mode
[  321.108336][ T6284] debugfs: 'hsr0' already exists in 'hsr'
[  321.108364][ T6284] Cannot create hsr debugfs directory
[  321.203111][ T6095] bio_check_eod: 34988 callbacks suppressed
[  321.203136][ T6095] syz.0.17: attempt to access beyond end of device
[  321.203136][ T6095] loop0: rw=0, sector=86472, nr_sectors = 8 limit=40427
[  321.203315][ T6095] syz.0.17: attempt to access beyond end of device
[  321.203315][ T6095] loop0: rw=0, sector=86480, nr_sectors = 8 limit=40427
[  321.203463][ T6095] syz.0.17: attempt to access beyond end of device
[  321.203463][ T6095] loop0: rw=0, sector=86488, nr_sectors = 8 limit=40427
[  321.203607][ T6095] syz.0.17: attempt to access beyond end of device
[  321.203607][ T6095] loop0: rw=0, sector=86496, nr_sectors = 8 limit=40427
[  321.203822][ T6095] syz.0.17: attempt to access beyond end of device
[  321.203822][ T6095] loop0: rw=0, sector=86504, nr_sectors = 8 limit=40427
[  321.203967][ T6095] syz.0.17: attempt to access beyond end of device
[  321.203967][ T6095] loop0: rw=0, sector=86512, nr_sectors = 8 limit=40427
[  321.204112][ T6095] syz.0.17: attempt to access beyond end of device
[  321.204112][ T6095] loop0: rw=0, sector=86520, nr_sectors = 8 limit=40427
[  321.204257][ T6095] syz.0.17: attempt to access beyond end of device
[  321.204257][ T6095] loop0: rw=0, sector=86528, nr_sectors = 8 limit=40427
[  321.204414][ T6095] syz.0.17: attempt to access beyond end of device
[  321.204414][ T6095] loop0: rw=0, sector=86536, nr_sectors = 8 limit=40427
[  321.204565][ T6095] syz.0.17: attempt to access beyond end of device
[  321.204565][ T6095] loop0: rw=0, sector=86544, nr_sectors = 8 limit=40427
[  322.313057][   T61] Bluetooth: hci5: command tx timeout
[  323.239074][ T6284] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  323.385493][ T6284] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  323.459135][ T6284] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  323.625703][ T6284] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  324.163808][ T6284] 8021q: adding VLAN 0 to HW filter on device bond0
[  324.229012][ T6284] 8021q: adding VLAN 0 to HW filter on device team0
[  324.332775][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.341353][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  324.379196][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.379315][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  324.393985][   T61] Bluetooth: hci5: command tx timeout
[  325.710841][ T6284] 8021q: adding VLAN 0 to HW filter on device batadv0
[  326.215255][ T6208] bio_check_eod: 38697 callbacks suppressed
[  326.215283][ T6208] syz.2.19: attempt to access beyond end of device
[  326.215283][ T6208] loop2: rw=0, sector=89672, nr_sectors = 8 limit=40427
[  326.215432][ T6208] syz.2.19: attempt to access beyond end of device
[  326.215432][ T6208] loop2: rw=0, sector=89680, nr_sectors = 8 limit=40427
[  326.215574][ T6208] syz.2.19: attempt to access beyond end of device
[  326.215574][ T6208] loop2: rw=0, sector=89688, nr_sectors = 8 limit=40427
[  326.215708][ T6208] syz.2.19: attempt to access beyond end of device
[  326.215708][ T6208] loop2: rw=0, sector=89696, nr_sectors = 8 limit=40427
[  326.215849][ T6208] syz.2.19: attempt to access beyond end of device
[  326.215849][ T6208] loop2: rw=0, sector=89704, nr_sectors = 8 limit=40427
[  326.216002][ T6208] syz.2.19: attempt to access beyond end of device
[  326.216002][ T6208] loop2: rw=0, sector=89712, nr_sectors = 8 limit=40427
[  326.216144][ T6208] syz.2.19: attempt to access beyond end of device
[  326.216144][ T6208] loop2: rw=0, sector=89720, nr_sectors = 8 limit=40427
[  326.216284][ T6208] syz.2.19: attempt to access beyond end of device
[  326.216284][ T6208] loop2: rw=0, sector=89728, nr_sectors = 8 limit=40427
[  326.216425][ T6208] syz.2.19: attempt to access beyond end of device
[  326.216425][ T6208] loop2: rw=0, sector=89736, nr_sectors = 8 limit=40427
[  326.216566][ T6208] syz.2.19: attempt to access beyond end of device
[  326.216566][ T6208] loop2: rw=0, sector=89744, nr_sectors = 8 limit=40427
[  327.076223][ T6284] veth0_vlan: entered promiscuous mode
[  327.117298][ T6284] veth1_vlan: entered promiscuous mode
[  327.176885][ T6284] veth0_macvtap: entered promiscuous mode
[  327.182717][ T6284] veth1_macvtap: entered promiscuous mode
[  327.324448][ T6284] batman_adv: batadv0: Interface activated: batadv_slave_0
[  327.353924][ T6284] batman_adv: batadv0: Interface activated: batadv_slave_1
[  327.396023][ T3986] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  327.396075][ T3986] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  327.396112][ T3986] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  327.396148][ T3986] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  328.093317][ T3673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.093340][ T3673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.395773][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.395797][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/12/26 16:58:55 executed programs: 7
[  329.687209][ T5122] Bluetooth: hci0: command 0x0406 tx timeout
[  330.869210][ T6315] loop5: detected capacity change from 0 to 40427
[  331.048786][ T6315] F2FS-fs (loop5): invalid crc value
[  331.223047][ T6237] bio_check_eod: 34142 callbacks suppressed
[  331.223059][ T6176] syz.1.18: attempt to access beyond end of device
[  331.223059][ T6176] loop1: rw=0, sector=86072, nr_sectors = 8 limit=40427
[  331.223072][ T6237] syz.3.20: attempt to access beyond end of device
[  331.223072][ T6237] loop3: rw=524288, sector=89096, nr_sectors = 8 limit=40427
[  331.223212][ T6237] syz.3.20: attempt to access beyond end of device
[  331.223212][ T6237] loop3: rw=524288, sector=89104, nr_sectors = 8 limit=40427
[  331.223214][ T6176] syz.1.18: attempt to access beyond end of device
[  331.223214][ T6176] loop1: rw=0, sector=86080, nr_sectors = 8 limit=40427
[  331.223351][ T6237] syz.3.20: attempt to access beyond end of device
[  331.223351][ T6237] loop3: rw=524288, sector=89112, nr_sectors = 8 limit=40427
[  331.223357][ T6176] syz.1.18: attempt to access beyond end of device
[  331.223357][ T6176] loop1: rw=0, sector=86088, nr_sectors = 8 limit=40427
[  331.223490][ T6237] syz.3.20: attempt to access beyond end of device
[  331.223490][ T6237] loop3: rw=524288, sector=89120, nr_sectors = 8 limit=40427
[  331.223500][ T6176] syz.1.18: attempt to access beyond end of device
[  331.223500][ T6176] loop1: rw=0, sector=86096, nr_sectors = 8 limit=40427
[  331.223627][ T6237] syz.3.20: attempt to access beyond end of device
[  331.223627][ T6237] loop3: rw=524288, sector=89128, nr_sectors = 8 limit=40427
[  331.223655][ T6176] syz.1.18: attempt to access beyond end of device
[  331.223655][ T6176] loop1: rw=0, sector=86104, nr_sectors = 8 limit=40427
[  331.766037][ T6315] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  331.788903][ T6315] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  333.017049][ T6284] CPU: 1 UID: 0 PID: 6284 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  333.017084][ T6284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  333.017098][ T6284] Call Trace:
[  333.017108][ T6284]  <TASK>
[  333.017117][ T6284]  dump_stack_lvl+0xe8/0x150
[  333.017155][ T6284]  f2fs_handle_critical_error+0x354/0x510
[  333.017195][ T6284]  f2fs_write_end_io+0x886/0xb60
[  333.017241][ T6284]  __submit_merged_bio+0x256/0x660
[  333.017281][ T6284]  __submit_merged_write_cond+0x269/0x530
[  333.017322][ T6284]  f2fs_write_data_pages+0x2756/0x3290
[  333.017342][ T6284]  ? rcu_is_watching+0x15/0xb0
[  333.017404][ T6284]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  333.017490][ T6284]  ? do_raw_spin_lock+0x121/0x290
[  333.017532][ T6284]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  333.017565][ T6284]  ? lockdep_hardirqs_on+0x7b/0x110
[  333.017586][ T6284]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  333.017607][ T6284]  ? rt_mutex_slowunlock+0x493/0x8a0
[  333.017637][ T6284]  ? reacquire_held_locks+0x104/0x190
[  333.017668][ T6284]  ? rt_spin_lock+0x1c1/0x3e0
[  333.017706][ T6284]  ? rt_spin_unlock+0x150/0x200
[  333.017740][ T6284]  ? rt_spin_unlock+0x161/0x200
[  333.017767][ T6284]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  333.017789][ T6284]  do_writepages+0x32e/0x550
[  333.017814][ T6284]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  333.017846][ T6284]  ? rt_spin_unlock+0x150/0x200
[  333.017887][ T6284]  filemap_fdatawrite+0x19c/0x240
[  333.017912][ T6284]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  333.017934][ T6284]  ? __lock_acquire+0x6b6/0x2cf0
[  333.018008][ T6284]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  333.018047][ T6284]  ? rt_spin_unlock+0x161/0x200
[  333.018080][ T6284]  f2fs_sync_dirty_inodes+0x30f/0x810
[  333.018122][ T6284]  f2fs_write_checkpoint+0x935/0x2430
[  333.018184][ T6284]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  333.018277][ T6284]  kill_f2fs_super+0x2d2/0x6c0
[  333.018310][ T6284]  ? __pfx_kill_f2fs_super+0x10/0x10
[  333.018364][ T6284]  deactivate_locked_super+0xbc/0x130
[  333.018395][ T6284]  cleanup_mnt+0x425/0x4c0
[  333.018422][ T6284]  ? _raw_spin_unlock_irq+0x23/0x50
[  333.018449][ T6284]  task_work_run+0x1d4/0x260
[  333.018486][ T6284]  ? __pfx_task_work_run+0x10/0x10
[  333.018541][ T6284]  exit_to_user_mode_loop+0xef/0x4e0
[  333.018572][ T6284]  ? rcu_is_watching+0x15/0xb0
[  333.018597][ T6284]  do_syscall_64+0x2b7/0xf80
[  333.018618][ T6284]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.018639][ T6284]  ? trace_irq_disable+0x37/0x100
[  333.018662][ T6284]  ? clear_bhb_loop+0x60/0xb0
[  333.018689][ T6284]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.018710][ T6284] RIP: 0033:0x7f3d13500a77
[  333.018731][ T6284] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  333.018749][ T6284] RSP: 002b:00007fffee930e48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  333.018773][ T6284] RAX: 0000000000000000 RBX: 00007f3d13583d7d RCX: 00007f3d13500a77
[  333.018787][ T6284] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffee930f00
[  333.018799][ T6284] RBP: 00007fffee930f00 R08: 0000000000000000 R09: 0000000000000000
[  333.018813][ T6284] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffee931f90
[  333.018827][ T6284] R13: 00007f3d13583d7d R14: 0000000000050ef0 R15: 00007fffee931fd0
[  333.018866][ T6284]  </TASK>
[  333.018875][ T6284] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  336.239553][ T6176] bio_check_eod: 35705 callbacks suppressed
[  336.239576][ T6176] syz.1.18: attempt to access beyond end of device
[  336.239576][ T6176] loop1: rw=524288, sector=86328, nr_sectors = 8 limit=40427
[  336.239729][ T6176] syz.1.18: attempt to access beyond end of device
[  336.239729][ T6176] loop1: rw=524288, sector=86336, nr_sectors = 8 limit=40427
[  336.239870][ T6176] syz.1.18: attempt to access beyond end of device
[  336.239870][ T6176] loop1: rw=524288, sector=86344, nr_sectors = 8 limit=40427
[  336.240040][ T6176] syz.1.18: attempt to access beyond end of device
[  336.240040][ T6176] loop1: rw=524288, sector=86352, nr_sectors = 8 limit=40427
[  336.240187][ T6176] syz.1.18: attempt to access beyond end of device
[  336.240187][ T6176] loop1: rw=524288, sector=86360, nr_sectors = 8 limit=40427
[  336.240326][ T6176] syz.1.18: attempt to access beyond end of device
[  336.240326][ T6176] loop1: rw=524288, sector=86368, nr_sectors = 8 limit=40427
[  336.240463][ T6176] syz.1.18: attempt to access beyond end of device
[  336.240463][ T6176] loop1: rw=524288, sector=86376, nr_sectors = 8 limit=40427
[  336.240602][ T6176] syz.1.18: attempt to access beyond end of device
[  336.240602][ T6176] loop1: rw=524288, sector=86384, nr_sectors = 8 limit=40427
[  336.240749][ T6176] syz.1.18: attempt to access beyond end of device
[  336.240749][ T6176] loop1: rw=524288, sector=86392, nr_sectors = 8 limit=40427
[  336.240888][ T6176] syz.1.18: attempt to access beyond end of device
[  336.240888][ T6176] loop1: rw=524288, sector=86400, nr_sectors = 8 limit=40427
[  336.756717][ T6325] loop5: detected capacity change from 0 to 40427
[  336.782518][ T6325] F2FS-fs (loop5): invalid crc value
[  337.482348][ T6325] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  337.513248][ T6325] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  341.253072][ T6237] bio_check_eod: 37825 callbacks suppressed
[  341.253095][ T6237] syz.3.20: attempt to access beyond end of device
[  341.253095][ T6237] loop3: rw=524288, sector=89128, nr_sectors = 8 limit=40427
[  341.253165][ T6208] syz.2.19: attempt to access beyond end of device
[  341.253165][ T6208] loop2: rw=524288, sector=88440, nr_sectors = 8 limit=40427
[  341.253289][ T6208] syz.2.19: attempt to access beyond end of device
[  341.253289][ T6208] loop2: rw=524288, sector=88448, nr_sectors = 8 limit=40427
[  341.253401][ T6208] syz.2.19: attempt to access beyond end of device
[  341.253401][ T6208] loop2: rw=524288, sector=88456, nr_sectors = 8 limit=40427
[  341.253524][ T6208] syz.2.19: attempt to access beyond end of device
[  341.253524][ T6208] loop2: rw=524288, sector=88464, nr_sectors = 8 limit=40427
[  341.253632][ T6208] syz.2.19: attempt to access beyond end of device
[  341.253632][ T6208] loop2: rw=524288, sector=88472, nr_sectors = 8 limit=40427
[  341.253747][ T6208] syz.2.19: attempt to access beyond end of device
[  341.253747][ T6208] loop2: rw=524288, sector=88480, nr_sectors = 8 limit=40427
[  341.253888][ T6208] syz.2.19: attempt to access beyond end of device
[  341.253888][ T6208] loop2: rw=524288, sector=88488, nr_sectors = 8 limit=40427
[  341.253995][ T6208] syz.2.19: attempt to access beyond end of device
[  341.253995][ T6208] loop2: rw=524288, sector=88496, nr_sectors = 8 limit=40427
[  341.254103][ T6208] syz.2.19: attempt to access beyond end of device
[  341.254103][ T6208] loop2: rw=524288, sector=88504, nr_sectors = 8 limit=40427
[  346.263085][ T6237] bio_check_eod: 39042 callbacks suppressed
[  346.263108][ T6237] syz.3.20: attempt to access beyond end of device
[  346.263108][ T6237] loop3: rw=524288, sector=88192, nr_sectors = 8 limit=40427
[  346.263278][ T6237] syz.3.20: attempt to access beyond end of device
[  346.263278][ T6237] loop3: rw=524288, sector=88200, nr_sectors = 8 limit=40427
[  346.263415][ T6237] syz.3.20: attempt to access beyond end of device
[  346.263415][ T6237] loop3: rw=524288, sector=88208, nr_sectors = 8 limit=40427
[  346.263553][ T6237] syz.3.20: attempt to access beyond end of device
[  346.263553][ T6237] loop3: rw=524288, sector=88216, nr_sectors = 8 limit=40427
[  346.263658][ T6208] syz.2.19: attempt to access beyond end of device
[  346.263658][ T6208] loop2: rw=524288, sector=86424, nr_sectors = 8 limit=40427
[  346.263694][ T6237] syz.3.20: attempt to access beyond end of device
[  346.263694][ T6237] loop3: rw=524288, sector=88224, nr_sectors = 8 limit=40427
[  346.263805][ T6208] syz.2.19: attempt to access beyond end of device
[  346.263805][ T6208] loop2: rw=524288, sector=86432, nr_sectors = 8 limit=40427
[  346.263831][ T6237] syz.3.20: attempt to access beyond end of device
[  346.263831][ T6237] loop3: rw=524288, sector=88232, nr_sectors = 8 limit=40427
[  346.263946][ T6208] syz.2.19: attempt to access beyond end of device
[  346.263946][ T6208] loop2: rw=524288, sector=86440, nr_sectors = 8 limit=40427
[  346.263969][ T6237] syz.3.20: attempt to access beyond end of device
[  346.263969][ T6237] loop3: rw=524288, sector=88240, nr_sectors = 8 limit=40427
[  348.185995][ T5869] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  348.203659][ T5869] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  348.205151][ T5869] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  348.206548][ T5869] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  348.276093][ T5869] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  349.917440][ T6331] chnl_net:caif_netlink_parms(): no params data found
[  350.160828][ T5869] Bluetooth: hci1: command 0x0406 tx timeout
[  350.313452][ T5869] Bluetooth: hci6: command tx timeout
[  351.274862][ T6095] bio_check_eod: 34923 callbacks suppressed
[  351.274885][ T6095] syz.0.17: attempt to access beyond end of device
[  351.274885][ T6095] loop0: rw=0, sector=89832, nr_sectors = 8 limit=40427
[  351.275032][ T6095] syz.0.17: attempt to access beyond end of device
[  351.275032][ T6095] loop0: rw=0, sector=89840, nr_sectors = 8 limit=40427
[  351.275174][ T6095] syz.0.17: attempt to access beyond end of device
[  351.275174][ T6095] loop0: rw=0, sector=89848, nr_sectors = 8 limit=40427
[  351.275304][ T6095] syz.0.17: attempt to access beyond end of device
[  351.275304][ T6095] loop0: rw=0, sector=89856, nr_sectors = 8 limit=40427
[  351.275470][ T6095] syz.0.17: attempt to access beyond end of device
[  351.275470][ T6095] loop0: rw=0, sector=89864, nr_sectors = 8 limit=40427
[  351.275622][ T6095] syz.0.17: attempt to access beyond end of device
[  351.275622][ T6095] loop0: rw=0, sector=89872, nr_sectors = 8 limit=40427
[  351.275762][ T6095] syz.0.17: attempt to access beyond end of device
[  351.275762][ T6095] loop0: rw=0, sector=89880, nr_sectors = 8 limit=40427
[  351.275903][ T6095] syz.0.17: attempt to access beyond end of device
[  351.275903][ T6095] loop0: rw=0, sector=89888, nr_sectors = 8 limit=40427
[  351.276043][ T6095] syz.0.17: attempt to access beyond end of device
[  351.276043][ T6095] loop0: rw=0, sector=89896, nr_sectors = 8 limit=40427
[  351.276183][ T6095] syz.0.17: attempt to access beyond end of device
[  351.276183][ T6095] loop0: rw=0, sector=89904, nr_sectors = 8 limit=40427
[  351.595072][ T6331] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.595301][ T6331] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.595567][ T6331] bridge_slave_0: entered allmulticast mode
[  351.628064][ T6331] bridge_slave_0: entered promiscuous mode
[  351.644334][ T6331] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.644624][ T6331] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.644882][ T6331] bridge_slave_1: entered allmulticast mode
[  351.647873][ T6331] bridge_slave_1: entered promiscuous mode
[  352.382422][ T6331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  352.395249][ T5122] Bluetooth: hci6: command tx timeout
[  352.457951][ T6331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  353.152728][ T6331] team0: Port device team_slave_0 added
[  353.249414][ T6331] team0: Port device team_slave_1 added
[  353.920206][ T6331] batman_adv: batadv0: Adding interface: batadv_slave_0
[  353.920233][ T6331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  353.920261][ T6331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  353.936985][ T6331] batman_adv: batadv0: Adding interface: batadv_slave_1
[  353.937002][ T6331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  353.937025][ T6331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.484707][ T5122] Bluetooth: hci6: command tx timeout
[  354.732435][ T6331] hsr_slave_0: entered promiscuous mode
[  354.774421][ T6331] hsr_slave_1: entered promiscuous mode
[  354.775523][ T6331] debugfs: 'hsr0' already exists in 'hsr'
[  354.775550][ T6331] Cannot create hsr debugfs directory
[  356.292301][ T6208] bio_check_eod: 35273 callbacks suppressed
[  356.292325][ T6208] syz.2.19: attempt to access beyond end of device
[  356.292325][ T6208] loop2: rw=0, sector=87464, nr_sectors = 8 limit=40427
[  356.292480][ T6208] syz.2.19: attempt to access beyond end of device
[  356.292480][ T6208] loop2: rw=0, sector=87472, nr_sectors = 8 limit=40427
[  356.292628][ T6208] syz.2.19: attempt to access beyond end of device
[  356.292628][ T6208] loop2: rw=0, sector=87480, nr_sectors = 8 limit=40427
[  356.292772][ T6208] syz.2.19: attempt to access beyond end of device
[  356.292772][ T6208] loop2: rw=0, sector=87488, nr_sectors = 8 limit=40427
[  356.293111][ T6208] syz.2.19: attempt to access beyond end of device
[  356.293111][ T6208] loop2: rw=0, sector=87496, nr_sectors = 8 limit=40427
[  356.293296][ T6208] syz.2.19: attempt to access beyond end of device
[  356.293296][ T6208] loop2: rw=0, sector=87504, nr_sectors = 8 limit=40427
[  356.293422][ T6208] syz.2.19: attempt to access beyond end of device
[  356.293422][ T6208] loop2: rw=0, sector=87512, nr_sectors = 8 limit=40427
[  356.293546][ T6208] syz.2.19: attempt to access beyond end of device
[  356.293546][ T6208] loop2: rw=0, sector=87520, nr_sectors = 8 limit=40427
[  356.293669][ T6208] syz.2.19: attempt to access beyond end of device
[  356.293669][ T6208] loop2: rw=0, sector=87528, nr_sectors = 8 limit=40427
[  356.293792][ T6208] syz.2.19: attempt to access beyond end of device
[  356.293792][ T6208] loop2: rw=0, sector=87536, nr_sectors = 8 limit=40427
[  356.563021][ T5122] Bluetooth: hci6: command tx timeout
[  357.323153][ T6331] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  357.475602][ T6331] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  357.625395][ T6331] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  357.726910][ T6331] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  358.430899][ T6331] 8021q: adding VLAN 0 to HW filter on device bond0
[  358.560550][ T6331] 8021q: adding VLAN 0 to HW filter on device team0
[  358.588590][ T6297] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.614846][ T6297] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.674369][ T6297] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.674461][ T6297] bridge0: port 2(bridge_slave_1) entered forwarding state
[  359.449136][ T6274] F2FS-fs (loop4): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials
[  359.700631][ T6331] 8021q: adding VLAN 0 to HW filter on device batadv0
[  361.293097][ T6274] bio_check_eod: 33654 callbacks suppressed
[  361.293120][ T6274] syz.4.21: attempt to access beyond end of device
[  361.293120][ T6274] loop4: rw=524288, sector=89016, nr_sectors = 8 limit=40427
[  361.293287][ T6274] syz.4.21: attempt to access beyond end of device
[  361.293287][ T6274] loop4: rw=524288, sector=89024, nr_sectors = 8 limit=40427
[  361.293425][ T6274] syz.4.21: attempt to access beyond end of device
[  361.293425][ T6274] loop4: rw=524288, sector=89032, nr_sectors = 8 limit=40427
[  361.293562][ T6274] syz.4.21: attempt to access beyond end of device
[  361.293562][ T6274] loop4: rw=524288, sector=89040, nr_sectors = 8 limit=40427
[  361.293729][ T6274] syz.4.21: attempt to access beyond end of device
[  361.293729][ T6274] loop4: rw=524288, sector=89048, nr_sectors = 8 limit=40427
[  361.293867][ T6274] syz.4.21: attempt to access beyond end of device
[  361.293867][ T6274] loop4: rw=524288, sector=89056, nr_sectors = 8 limit=40427
[  361.294022][ T6274] syz.4.21: attempt to access beyond end of device
[  361.294022][ T6274] loop4: rw=524288, sector=89064, nr_sectors = 8 limit=40427
[  361.294160][ T6274] syz.4.21: attempt to access beyond end of device
[  361.294160][ T6274] loop4: rw=524288, sector=89072, nr_sectors = 8 limit=40427
[  361.294305][ T6274] syz.4.21: attempt to access beyond end of device
[  361.294305][ T6274] loop4: rw=524288, sector=89080, nr_sectors = 8 limit=40427
[  361.294446][ T6274] syz.4.21: attempt to access beyond end of device
[  361.294446][ T6274] loop4: rw=524288, sector=89088, nr_sectors = 8 limit=40427
[  361.526622][ T6331] veth0_vlan: entered promiscuous mode
[  361.636887][ T6331] veth1_vlan: entered promiscuous mode
[  361.904758][ T6331] veth0_macvtap: entered promiscuous mode
[  361.938506][ T6331] veth1_macvtap: entered promiscuous mode
[  362.125660][ T6331] batman_adv: batadv0: Interface activated: batadv_slave_0
[  362.189479][ T6331] batman_adv: batadv0: Interface activated: batadv_slave_1
[  362.289471][ T3673] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  362.289719][ T3673] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  362.289759][ T3673] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  362.289796][ T3673] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.551461][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.551487][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  363.654284][ T6341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  363.654307][ T6341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/12/26 16:59:31 executed programs: 9
[  366.303089][ T6208] bio_check_eod: 39180 callbacks suppressed
[  366.303089][ T6176] syz.1.18: attempt to access beyond end of device
[  366.303089][ T6176] loop1: rw=524288, sector=86376, nr_sectors = 8 limit=40427
[  366.303112][ T6208] syz.2.19: attempt to access beyond end of device
[  366.303112][ T6208] loop2: rw=0, sector=89832, nr_sectors = 8 limit=40427
[  366.303229][ T6176] syz.1.18: attempt to access beyond end of device
[  366.303229][ T6176] loop1: rw=524288, sector=86384, nr_sectors = 8 limit=40427
[  366.303288][ T6208] syz.2.19: attempt to access beyond end of device
[  366.303288][ T6208] loop2: rw=0, sector=89840, nr_sectors = 8 limit=40427
[  366.303368][ T6176] syz.1.18: attempt to access beyond end of device
[  366.303368][ T6176] loop1: rw=524288, sector=86392, nr_sectors = 8 limit=40427
[  366.303426][ T6208] syz.2.19: attempt to access beyond end of device
[  366.303426][ T6208] loop2: rw=0, sector=89848, nr_sectors = 8 limit=40427
[  366.303541][ T6176] syz.1.18: attempt to access beyond end of device
[  366.303541][ T6176] loop1: rw=524288, sector=86400, nr_sectors = 8 limit=40427
[  366.303600][ T6208] syz.2.19: attempt to access beyond end of device
[  366.303600][ T6208] loop2: rw=0, sector=89856, nr_sectors = 8 limit=40427
[  366.303680][ T6176] syz.1.18: attempt to access beyond end of device
[  366.303680][ T6176] loop1: rw=524288, sector=86408, nr_sectors = 8 limit=40427
[  366.303747][ T6208] syz.2.19: attempt to access beyond end of device
[  366.303747][ T6208] loop2: rw=0, sector=89864, nr_sectors = 8 limit=40427
[  366.537865][ T6360] loop6: detected capacity change from 0 to 40427
[  366.761350][ T6360] F2FS-fs (loop6): invalid crc value
[  367.519343][ T6360] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  370.652814][ T5122] Bluetooth: hci2: command 0x0406 tx timeout
[  370.958755][ T6366] loop6: detected capacity change from 0 to 40427
[  371.069841][ T6366] F2FS-fs (loop6): invalid crc value
[  371.313199][ T6237] bio_check_eod: 37596 callbacks suppressed
[  371.313238][ T6237] syz.3.20: attempt to access beyond end of device
[  371.313238][ T6237] loop3: rw=524288, sector=87128, nr_sectors = 8 limit=40427
[  371.313409][ T6237] syz.3.20: attempt to access beyond end of device
[  371.313409][ T6237] loop3: rw=524288, sector=87136, nr_sectors = 8 limit=40427
[  371.313594][ T6237] syz.3.20: attempt to access beyond end of device
[  371.313594][ T6237] loop3: rw=524288, sector=87144, nr_sectors = 8 limit=40427
[  371.313764][ T6237] syz.3.20: attempt to access beyond end of device
[  371.313764][ T6237] loop3: rw=524288, sector=87152, nr_sectors = 8 limit=40427
[  371.313918][ T6237] syz.3.20: attempt to access beyond end of device
[  371.313918][ T6237] loop3: rw=524288, sector=87160, nr_sectors = 8 limit=40427
[  371.314055][ T6237] syz.3.20: attempt to access beyond end of device
[  371.314055][ T6237] loop3: rw=524288, sector=87168, nr_sectors = 8 limit=40427
[  371.314200][ T6237] syz.3.20: attempt to access beyond end of device
[  371.314200][ T6237] loop3: rw=524288, sector=87176, nr_sectors = 8 limit=40427
[  371.314351][ T6237] syz.3.20: attempt to access beyond end of device
[  371.314351][ T6237] loop3: rw=524288, sector=87184, nr_sectors = 8 limit=40427
[  371.314493][ T6237] syz.3.20: attempt to access beyond end of device
[  371.314493][ T6237] loop3: rw=524288, sector=87192, nr_sectors = 8 limit=40427
[  371.314629][ T6237] syz.3.20: attempt to access beyond end of device
[  371.314629][ T6237] loop3: rw=524288, sector=87200, nr_sectors = 8 limit=40427
[  372.011536][ T6366] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
2025/12/26 16:59:39 executed programs: 11
[  375.909102][ T6371] loop6: detected capacity change from 0 to 40427
[  375.983716][ T6371] F2FS-fs (loop6): invalid crc value
[  376.323200][ T6176] bio_check_eod: 38870 callbacks suppressed
[  376.323223][ T6176] syz.1.18: attempt to access beyond end of device
[  376.323223][ T6176] loop1: rw=0, sector=88024, nr_sectors = 8 limit=40427
[  376.323364][ T6176] syz.1.18: attempt to access beyond end of device
[  376.323364][ T6176] loop1: rw=0, sector=88032, nr_sectors = 8 limit=40427
[  376.323503][ T6176] syz.1.18: attempt to access beyond end of device
[  376.323503][ T6176] loop1: rw=0, sector=88040, nr_sectors = 8 limit=40427
[  376.323624][ T6176] syz.1.18: attempt to access beyond end of device
[  376.323624][ T6176] loop1: rw=0, sector=88048, nr_sectors = 8 limit=40427
[  376.323761][ T6176] syz.1.18: attempt to access beyond end of device
[  376.323761][ T6176] loop1: rw=0, sector=88056, nr_sectors = 8 limit=40427
[  376.323897][ T6176] syz.1.18: attempt to access beyond end of device
[  376.323897][ T6176] loop1: rw=0, sector=88064, nr_sectors = 8 limit=40427
[  376.324109][ T6176] syz.1.18: attempt to access beyond end of device
[  376.324109][ T6176] loop1: rw=0, sector=88072, nr_sectors = 8 limit=40427
[  376.324248][ T6176] syz.1.18: attempt to access beyond end of device
[  376.324248][ T6176] loop1: rw=0, sector=88080, nr_sectors = 8 limit=40427
[  376.324386][ T6176] syz.1.18: attempt to access beyond end of device
[  376.324386][ T6176] loop1: rw=0, sector=88088, nr_sectors = 8 limit=40427
[  376.324529][ T6176] syz.1.18: attempt to access beyond end of device
[  376.324529][ T6176] loop1: rw=0, sector=88096, nr_sectors = 8 limit=40427
[  376.891107][ T6371] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  378.803512][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[  378.803593][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[  380.636532][ T6380] loop6: detected capacity change from 0 to 40427
[  380.774194][ T6380] F2FS-fs (loop6): invalid crc value
[  381.334782][ T6274] bio_check_eod: 38661 callbacks suppressed
[  381.334807][ T6274] syz.4.21: attempt to access beyond end of device
[  381.334807][ T6274] loop4: rw=524288, sector=87008, nr_sectors = 8 limit=40427
[  381.334984][ T6274] syz.4.21: attempt to access beyond end of device
[  381.334984][ T6274] loop4: rw=524288, sector=87016, nr_sectors = 8 limit=40427
[  381.335131][ T6274] syz.4.21: attempt to access beyond end of device
[  381.335131][ T6274] loop4: rw=524288, sector=87024, nr_sectors = 8 limit=40427
[  381.335271][ T6274] syz.4.21: attempt to access beyond end of device
[  381.335271][ T6274] loop4: rw=524288, sector=87032, nr_sectors = 8 limit=40427
[  381.335420][ T6274] syz.4.21: attempt to access beyond end of device
[  381.335420][ T6274] loop4: rw=524288, sector=87040, nr_sectors = 8 limit=40427
[  381.335564][ T6274] syz.4.21: attempt to access beyond end of device
[  381.335564][ T6274] loop4: rw=524288, sector=87048, nr_sectors = 8 limit=40427
[  381.335701][ T6274] syz.4.21: attempt to access beyond end of device
[  381.335701][ T6274] loop4: rw=524288, sector=87056, nr_sectors = 8 limit=40427
[  381.335839][ T6274] syz.4.21: attempt to access beyond end of device
[  381.335839][ T6274] loop4: rw=524288, sector=87064, nr_sectors = 8 limit=40427
[  381.335996][ T6274] syz.4.21: attempt to access beyond end of device
[  381.335996][ T6274] loop4: rw=524288, sector=87072, nr_sectors = 8 limit=40427
[  381.336143][ T6274] syz.4.21: attempt to access beyond end of device
[  381.336143][ T6274] loop4: rw=524288, sector=87080, nr_sectors = 8 limit=40427
[  381.638585][ T6380] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
2025/12/26 16:59:49 executed programs: 13
[  385.545707][ T6390] loop6: detected capacity change from 0 to 40427
[  385.571141][ T6390] F2FS-fs (loop6): invalid crc value
[  386.211144][ T6390] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  386.343290][ T6274] bio_check_eod: 37723 callbacks suppressed
[  386.343313][ T6274] syz.4.21: attempt to access beyond end of device
[  386.343313][ T6274] loop4: rw=0, sector=88648, nr_sectors = 8 limit=40427
[  386.343464][ T6274] syz.4.21: attempt to access beyond end of device
[  386.343464][ T6274] loop4: rw=0, sector=88656, nr_sectors = 8 limit=40427
[  386.343606][ T6274] syz.4.21: attempt to access beyond end of device
[  386.343606][ T6274] loop4: rw=0, sector=88664, nr_sectors = 8 limit=40427
[  386.343745][ T6176] syz.1.18: attempt to access beyond end of device
[  386.343745][ T6176] loop1: rw=0, sector=88864, nr_sectors = 8 limit=40427
[  386.343748][ T6274] syz.4.21: attempt to access beyond end of device
[  386.343748][ T6274] loop4: rw=0, sector=88672, nr_sectors = 8 limit=40427
[  386.343893][ T6176] syz.1.18: attempt to access beyond end of device
[  386.343893][ T6176] loop1: rw=0, sector=88872, nr_sectors = 8 limit=40427
[  386.343899][ T6274] syz.4.21: attempt to access beyond end of device
[  386.343899][ T6274] loop4: rw=0, sector=88680, nr_sectors = 8 limit=40427
[  386.344037][ T6176] syz.1.18: attempt to access beyond end of device
[  386.344037][ T6176] loop1: rw=0, sector=88880, nr_sectors = 8 limit=40427
[  386.344041][ T6274] syz.4.21: attempt to access beyond end of device
[  386.344041][ T6274] loop4: rw=0, sector=88688, nr_sectors = 8 limit=40427
[  386.344184][ T6274] syz.4.21: attempt to access beyond end of device
[  386.344184][ T6274] loop4: rw=0, sector=88696, nr_sectors = 8 limit=40427
[  387.122955][   T38] INFO: task kworker/u8:4:68 blocked for more than 143 seconds.
[  387.122981][   T38]       Not tainted syzkaller #0
[  387.122993][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  387.123001][   T38] task:kworker/u8:4    state:D stack:19264 pid:68    tgid:68    ppid:2      task_flags:0x4208060 flags:0x00080000
[  387.123056][   T38] Workqueue: writeback wb_workfn (flush-7:0)
[  387.123090][   T38] Call Trace:
[  387.123097][   T38]  <TASK>
[  387.123109][   T38]  __schedule+0x145f/0x5070
[  387.123152][   T38]  ? preempt_schedule_thunk+0x16/0x30
[  387.123178][   T38]  ? preempt_schedule_common+0x83/0xd0
[  387.123209][   T38]  ? preempt_schedule_thunk+0x16/0x30
[  387.123240][   T38]  ? __pfx___schedule+0x10/0x10
[  387.123268][   T38]  ? rcu_preempt_deferred_qs_irqrestore+0x906/0xbc0
[  387.123317][   T38]  rt_mutex_schedule+0x77/0xf0
[  387.123349][   T38]  ? __rt_mutex_slowlock_locked+0x1a7/0x25e0
[  387.123374][   T38]  __rt_mutex_slowlock_locked+0x1dfe/0x25e0
[  387.123412][   T38]  ? __rt_mutex_slowlock_locked+0x1a7/0x25e0
[  387.123447][   T38]  ? __pfx___rt_mutex_slowlock_locked+0x10/0x10
[  387.123499][   T38]  rt_mutex_slowlock+0xb5/0x160
[  387.123529][   T38]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  387.123558][   T38]  ? f2fs_balance_fs+0x5b2/0x7d0
[  387.123597][   T38]  rwbase_write_lock+0x14f/0x750
[  387.123635][   T38]  f2fs_balance_fs+0x5b2/0x7d0
[  387.123671][   T38]  ? f2fs_write_inode+0x3fb/0x5f0
[  387.123703][   T38]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  387.123747][   T38]  ? folio_unlock+0x101/0x160
[  387.123790][   T38]  f2fs_write_inode+0x3fb/0x5f0
[  387.123825][   T38]  __writeback_single_inode+0x7e4/0x1240
[  387.123856][   T38]  writeback_sb_inodes+0x8c8/0x1840
[  387.123917][   T38]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  387.123990][   T38]  ? __pfx_down_read_trylock+0x10/0x10
[  387.124018][   T38]  ? __pfx_move_expired_inodes+0x10/0x10
[  387.124048][   T38]  ? preempt_count_add+0x91/0x190
[  387.124079][   T38]  __writeback_inodes_wb+0x111/0x240
[  387.124122][   T38]  wb_writeback+0x43f/0xaa0
[  387.124165][   T38]  ? queue_io+0x291/0x420
[  387.124201][   T38]  ? __pfx_wb_writeback+0x10/0x10
[  387.124252][   T38]  wb_workfn+0xad7/0xee0
[  387.124297][   T38]  ? __pfx_wb_workfn+0x10/0x10
[  387.124329][   T38]  ? __pfx___schedule+0x10/0x10
[  387.124361][   T38]  ? do_raw_spin_unlock+0x122/0x240
[  387.124392][   T38]  ? process_scheduled_works+0x9ef/0x1770
[  387.124420][   T38]  ? process_scheduled_works+0x9ef/0x1770
[  387.124454][   T38]  ? preempt_schedule_thunk+0x16/0x30
[  387.124478][   T38]  ? process_scheduled_works+0x9ef/0x1770
[  387.124501][   T38]  ? process_scheduled_works+0x9ef/0x1770
[  387.124527][   T38]  process_scheduled_works+0xad1/0x1770
[  387.124582][   T38]  ? __pfx_process_scheduled_works+0x10/0x10
[  387.124605][   T38]  ? do_raw_spin_lock+0x121/0x290
[  387.124647][   T38]  worker_thread+0x8a0/0xda0
[  387.124700][   T38]  kthread+0x711/0x8a0
[  387.124735][   T38]  ? __pfx_worker_thread+0x10/0x10
[  387.124759][   T38]  ? __pfx_kthread+0x10/0x10
[  387.124793][   T38]  ? rt_spin_unlock+0x150/0x200
[  387.124827][   T38]  ? rt_spin_unlock+0x161/0x200
[  387.124853][   T38]  ? __pfx_kthread+0x10/0x10
[  387.124884][   T38]  ret_from_fork+0x510/0xa50
[  387.124911][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  387.124932][   T38]  ? __switch_to+0xc9e/0x1480
[  387.125004][   T38]  ? __pfx_kthread+0x10/0x10
[  387.125035][   T38]  ret_from_fork_asm+0x1a/0x30
[  387.125086][   T38]  </TASK>
[  387.125230][   T38] 
[  387.125230][   T38] Showing all locks held in the system:
[  387.125240][   T38] 4 locks held by kworker/u8:0/12:
[  387.125253][   T38]  #0: ffff88814047b938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  387.125309][   T38]  #1: ffffc90000117bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  387.125361][   T38]  #2: ffff88803805a0d0 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0
[  387.125421][   T38]  #3: ffff888033545a80 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5b2/0x7d0
[  387.125481][   T38] 3 locks held by rcuc/0/20:
[  387.125494][   T38] 1 lock held by khungtaskd/38:
[  387.125505][   T38]  #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  387.125568][   T38] 4 locks held by kworker/u8:4/68:
[  387.125580][   T38]  #0: ffff88814047b938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  387.125632][   T38]  #1: ffffc9000153fbc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  387.125685][   T38]  #2: ffff88803bbe80d0 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0
[  387.125743][   T38]  #3: ffff88804a10da80 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5b2/0x7d0
[  387.125826][   T38] 4 locks held by kworker/u8:15/3509:
[  387.125839][   T38]  #0: ffff88814047b938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  387.125890][   T38]  #1: ffffc9000cb1fbc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  387.125942][   T38]  #2: ffff8880393c20d0 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0
[  387.125999][   T38]  #3: ffff88802ef61a80 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5b2/0x7d0
[  387.126066][   T38] 4 locks held by kworker/u8:16/3540:
[  387.126078][   T38]  #0: ffff88814047b938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  387.126129][   T38]  #1: ffffc9000cbdfbc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  387.126180][   T38]  #2: ffff88803ddc60d0 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0
[  387.126238][   T38]  #3: ffff888032efda80 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5b2/0x7d0
[  387.126295][   T38] 4 locks held by kworker/u8:20/3913:
[  387.126307][   T38]  #0: ffff88814047b938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  387.126365][   T38]  #1: ffffc9000d45fbc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  387.126418][   T38]  #2: ffff8880319720d0 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0
[  387.126485][   T38]  #3: ffff888036309a80 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5b2/0x7d0
[  387.126545][   T38] 2 locks held by udevd/5173:
[  387.126557][   T38] 2 locks held by getty/5570:
[  387.126568][   T38]  #0: ffff8880352f40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  387.126622][   T38]  #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460
[  387.126673][   T38] 7 locks held by syz.0.17/6095:
[  387.126687][   T38] 7 locks held by syz.1.18/6176:
[  387.126700][   T38] 6 locks held by syz.2.19/6208:
[  387.126713][   T38] 10 locks held by syz.3.20/6237:
[  387.126726][   T38] 7 locks held by syz.4.21/6274:
[  387.126739][   T38] 4 locks held by kworker/u8:22/6324:
[  387.126750][   T38]  #0: ffff88814047b938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  387.126809][   T38]  #1: ffffc90004d87bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  387.126861][   T38]  #2: ffff888049cf80d0 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0
[  387.126919][   T38]  #3: ffff888029441a80 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5b2/0x7d0
[  387.126977][   T38] 5 locks held by syz.5.23/6325:
[  387.126989][   T38] 5 locks held by syz-executor/6331:
[  387.127002][   T38] 3 locks held by udevd/6359:
[  387.127013][   T38] 
[  387.127018][   T38] =============================================
[  387.127018][   T38] 
[  387.127027][   T38] NMI backtrace for cpu 1
[  387.127041][   T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  387.127063][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  387.127075][   T38] Call Trace:
[  387.127083][   T38]  <TASK>
[  387.127091][   T38]  dump_stack_lvl+0xe8/0x150
[  387.127120][   T38]  nmi_cpu_backtrace+0x274/0x2d0
[  387.127148][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  387.127174][   T38]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  387.127205][   T38]  sys_info+0x135/0x170
[  387.127228][   T38]  watchdog+0xf95/0xfe0
[  387.127257][   T38]  ? watchdog+0x20a/0xfe0
[  387.127288][   T38]  kthread+0x711/0x8a0
[  387.127321][   T38]  ? __pfx_watchdog+0x10/0x10
[  387.127343][   T38]  ? __pfx_kthread+0x10/0x10
[  387.127369][   T38]  ? rt_spin_unlock+0x150/0x200
[  387.127401][   T38]  ? rt_spin_unlock+0x161/0x200
[  387.127426][   T38]  ? __pfx_kthread+0x10/0x10
[  387.127456][   T38]  ret_from_fork+0x510/0xa50
[  387.127482][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  387.127503][   T38]  ? __switch_to+0xc9e/0x1480
[  387.127538][   T38]  ? __pfx_kthread+0x10/0x10
[  387.127569][   T38]  ret_from_fork_asm+0x1a/0x30
[  387.127616][   T38]  </TASK>
[  387.127624][   T38] Sending NMI from CPU 1 to CPUs 0:
[  387.127652][    C0] NMI backtrace for cpu 0
[  387.127668][    C0] CPU: 0 UID: 0 PID: 6176 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  387.127686][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  387.127695][    C0] RIP: 0010:__lock_acquire+0x461/0x2cf0
[  387.127719][    C0] Code: 0f 44 ca 89 0c 24 45 8b a6 88 0b 00 00 41 8d 4c 24 ff 83 f9 ff 41 bd ff ff ff ff 44 0f 4c e9 41 ff c5 41 8d 5c 24 01 49 ff cc <89> d9 83 c1 fe 78 40 45 89 e7 41 81 e7 ff ff ff 7f 83 f9 31 73 1d
[  387.127732][    C0] RSP: 0018:ffffc90003f36130 EFLAGS: 00000046
[  387.127747][    C0] RAX: 000000000002000b RBX: 0000000000000005 RCX: 0000000000068c69
[  387.127758][    C0] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000000
[  387.127767][    C0] RBP: ffff88802d050c80 R08: ffffffff8173dd35 R09: ffffffff8d5ae940
[  387.127779][    C0] R10: ffffc90003f36448 R11: fffff520007e6c95 R12: 0000000000000003
[  387.127790][    C0] R13: 0000000000000000 R14: ffff88802d050000 R15: 0000000000000004
[  387.127800][    C0] FS:  00005555596e0500(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000
[  387.127813][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  387.127825][    C0] CR2: 00005555594c75c8 CR3: 00000000275b4000 CR4: 00000000003526f0
[  387.127841][    C0] Call Trace:
[  387.127847][    C0]  <TASK>
[  387.127857][    C0]  ? __lock_acquire+0x6b6/0x2cf0
[  387.127879][    C0]  ? __lock_acquire+0x6b6/0x2cf0
[  387.127899][    C0]  ? unwind_next_frame+0xa5/0x23d0
[  387.127919][    C0]  lock_acquire+0x107/0x340
[  387.127938][    C0]  ? unwind_next_frame+0xa5/0x23d0
[  387.127960][    C0]  ? unwind_next_frame+0xa5/0x23d0
[  387.127979][    C0]  ? __unwind_start+0xf8/0x760
[  387.127999][    C0]  ? unwind_next_frame+0xa5/0x23d0
[  387.128018][    C0]  unwind_next_frame+0xc2/0x23d0
[  387.128044][    C0]  ? unwind_next_frame+0xa5/0x23d0
[  387.128063][    C0]  ? unwind_next_frame+0xa5/0x23d0
[  387.128083][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  387.128104][    C0]  ? get_stack_info_noinstr+0x1b/0x130
[  387.128126][    C0]  __unwind_start+0x5b9/0x760
[  387.128146][    C0]  ? mempool_free+0xf5/0x140
[  387.128161][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  387.128182][    C0]  arch_stack_walk+0xe4/0x150
[  387.128203][    C0]  ? __unwind_start+0xf8/0x760
[  387.128224][    C0]  stack_trace_save+0x9c/0xe0
[  387.128242][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  387.128264][    C0]  kasan_save_stack+0x3e/0x60
[  387.128303][    C0]  kasan_record_aux_stack+0xbd/0xd0
[  387.128321][    C0]  ? __pfx_slab_free_after_rcu_debug+0x10/0x10
[  387.128337][    C0]  call_rcu+0xee/0x890
[  387.128353][    C0]  ? __phys_addr+0xd3/0x180
[  387.128376][    C0]  ? mempool_free+0xf5/0x140
[  387.128391][    C0]  kmem_cache_free+0x724/0x8d0
[  387.128413][    C0]  ? mempool_free+0xf5/0x140
[  387.128429][    C0]  ? __pfx_mempool_free_slab+0x10/0x10
[  387.128444][    C0]  mempool_free+0xf5/0x140
[  387.128459][    C0]  ? __pfx_mempool_free+0x10/0x10
[  387.128475][    C0]  ? bio_put+0x91/0x830
[  387.128489][    C0]  ? bio_free+0x207/0x2a0
[  387.128504][    C0]  f2fs_get_read_data_folio+0x4ae/0x7b0
[  387.128529][    C0]  ? __pfx_f2fs_get_read_data_folio+0x10/0x10
[  387.128550][    C0]  ? inode_dio_wait+0x19e/0x240
[  387.128571][    C0]  ? __pfx_inode_dio_wait+0x10/0x10
[  387.128592][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  387.128609][    C0]  f2fs_get_lock_data_folio+0x54/0x1f0
[  387.128632][    C0]  do_garbage_collect+0x34db/0x6f80
[  387.128651][    C0]  ? __lock_acquire+0x6b6/0x2cf0
[  387.128688][    C0]  ? __lock_acquire+0x6b6/0x2cf0
[  387.128707][    C0]  ? __pfx_do_garbage_collect+0x10/0x10
[  387.128731][    C0]  ? __lock_acquire+0x6b6/0x2cf0
[  387.128752][    C0]  ? do_raw_spin_lock+0x121/0x290
[  387.128773][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  387.128788][    C0]  ? lockdep_hardirqs_on+0x7b/0x110
[  387.128803][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  387.128818][    C0]  ? rt_mutex_slowunlock+0x493/0x8a0
[  387.128839][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  387.128854][    C0]  ? lockdep_hardirqs_on+0x7b/0x110
[  387.128868][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  387.128885][    C0]  f2fs_gc+0xcb0/0x2530
[  387.128912][    C0]  ? __pfx_f2fs_gc+0x10/0x10
[  387.128933][    C0]  ? do_raw_spin_lock+0x121/0x290
[  387.128956][    C0]  ? rwbase_write_lock+0x56f/0x750
[  387.128976][    C0]  f2fs_balance_fs+0x5fe/0x7d0
[  387.129000][    C0]  ? f2fs_map_blocks+0x3449/0x40b0
[  387.129021][    C0]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  387.129049][    C0]  ? f2fs_is_valid_blkaddr+0xa1/0x2a0
[  387.129078][    C0]  f2fs_map_blocks+0x3449/0x40b0
[  387.129113][    C0]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  387.129134][    C0]  ? rt_mutex_slowunlock+0x493/0x8a0
[  387.129158][    C0]  ? f2fs_allocate_pinning_section+0x1ac/0x370
[  387.129177][    C0]  f2fs_expand_inode_data+0x631/0xa70
[  387.129203][    C0]  ? __pfx_f2fs_expand_inode_data+0x10/0x10
[  387.129226][    C0]  ? rt_spin_unlock+0x161/0x200
[  387.129247][    C0]  ? file_update_time_flags+0x44e/0x4f0
[  387.129268][    C0]  f2fs_fallocate+0x4e8/0x970
[  387.129288][    C0]  vfs_fallocate+0x672/0x7f0
[  387.129313][    C0]  ? __pfx_vfs_fallocate+0x10/0x10
[  387.129338][    C0]  file_ioctl+0x61d/0x780
[  387.129359][    C0]  ? __pfx_file_ioctl+0x10/0x10
[  387.129387][    C0]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  387.129408][    C0]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  387.129430][    C0]  do_vfs_ioctl+0xb36/0x1440
[  387.129451][    C0]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  387.129471][    C0]  ? __pfx_smack_log+0x10/0x10
[  387.129488][    C0]  ? smk_access+0x14c/0x4e0
[  387.129506][    C0]  ? smk_tskacc+0x2fc/0x370
[  387.129523][    C0]  ? smack_file_ioctl+0x24d/0x340
[  387.129542][    C0]  ? __pfx_smack_file_ioctl+0x10/0x10
[  387.129565][    C0]  ? __pfx___se_sys_futex+0x10/0x10
[  387.129588][    C0]  ? bpf_lsm_file_ioctl+0x9/0x20
[  387.129612][    C0]  __se_sys_ioctl+0x82/0x170
[  387.129632][    C0]  do_syscall_64+0xec/0xf80
[  387.129647][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.129662][    C0]  ? trace_irq_disable+0x37/0x100
[  387.129678][    C0]  ? clear_bhb_loop+0x60/0xb0
[  387.129695][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.129710][    C0] RIP: 0033:0x7f921d7ef749
[  387.129724][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  387.129736][    C0] RSP: 002b:00007fff74fc0368 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  387.129752][    C0] RAX: ffffffffffffffda RBX: 00007f921da45fa0 RCX: 00007f921d7ef749
[  387.129763][    C0] RDX: 00002000000000c0 RSI: 0000000040305828 RDI: 0000000000000004
[  387.129773][    C0] RBP: 00007f921d873f91 R08: 0000000000000000 R09: 0000000000000000
[  387.129783][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  387.129793][    C0] R13: 00007f921da45fa0 R14: 00007f921da45fa0 R15: 0000000000000003
[  387.129809][    C0]  </TASK>
[  387.130651][   T38] Kernel panic - not syncing: hung_task: blocked tasks
[  387.130667][   T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  387.130689][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  387.130701][   T38] Call Trace:
[  387.130709][   T38]  <TASK>
[  387.130717][   T38]  vpanic+0x1e0/0x670
[  387.130750][   T38]  panic+0xb9/0xc0
[  387.130785][   T38]  ? __pfx_panic+0x10/0x10
[  387.130824][   T38]  ? nmi_trigger_cpumask_backtrace+0x234/0x300
[  387.130857][   T38]  watchdog+0xfdf/0xfe0
[  387.130885][   T38]  ? watchdog+0x20a/0xfe0
[  387.130917][   T38]  kthread+0x711/0x8a0
[  387.130949][   T38]  ? __pfx_watchdog+0x10/0x10
[  387.130973][   T38]  ? __pfx_kthread+0x10/0x10
[  387.130999][   T38]  ? rt_spin_unlock+0x150/0x200
[  387.131031][   T38]  ? rt_spin_unlock+0x161/0x200
[  387.131056][   T38]  ? __pfx_kthread+0x10/0x10
[  387.131087][   T38]  ret_from_fork+0x510/0xa50
[  387.131112][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[  387.131134][   T38]  ? __switch_to+0xc9e/0x1480
[  387.131168][   T38]  ? __pfx_kthread+0x10/0x10
[  387.131197][   T38]  ret_from_fork_asm+0x1a/0x30
[  387.131244][   T38]  </TASK>
[  387.131515][   T38] Kernel Offset: disabled