loop0: detected capacity change from 0 to 40427 [ 176.110881][ T6733] F2FS-fs (loop0): build fault injection rate: 771 [ 176.114745][ T6733] F2FS-fs (loop0): invalid crc value [ 176.127223][ T6733] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 176.130884][ T6733] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 176.167595][ T6663] syz-executor: attempt to access beyond end of device [ 176.167595][ T6663] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 176.167646][ T6663] CPU: 1 UID: 0 PID: 6663 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 176.167660][ T6663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 176.167667][ T6663] Call trace: [ 176.167670][ T6663] show_stack+0x2c/0x3c (C) [ 176.167687][ T6663] __dump_stack+0x30/0x40 [ 176.167696][ T6663] dump_stack_lvl+0xd8/0x12c [ 176.167702][ T6663] dump_stack+0x1c/0x28 [ 176.167707][ T6663] f2fs_handle_critical_error+0x34c/0x4b8 [ 176.167715][ T6663] f2fs_stop_checkpoint+0x5c/0x70 [ 176.167721][ T6663] f2fs_write_end_io+0x768/0xa70 [ 176.167727][ T6663] bio_endio+0x858/0x894 [ 176.167735][ T6663] submit_bio_noacct+0x158/0x177c [ 176.167741][ T6663] submit_bio+0x3b4/0x550 [ 176.167746][ T6663] f2fs_submit_write_bio+0x13c/0x324 [ 176.167752][ T6663] __submit_merged_bio+0x254/0x704 [ 176.167758][ T6663] __submit_merged_write_cond+0x23c/0x4ac [ 176.167764][ T6663] f2fs_write_data_pages+0x1d28/0x2634 [ 176.167771][ T6663] do_writepages+0x270/0x468 [ 176.167778][ T6663] filemap_fdatawrite+0x14c/0x1f4 [ 176.167785][ T6663] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 176.167791][ T6663] f2fs_write_checkpoint+0x690/0x16a0 [ 176.167796][ T6663] kill_f2fs_super+0x21c/0x584 [ 176.167803][ T6663] deactivate_locked_super+0xc4/0x12c [ 176.167808][ T6663] deactivate_super+0xe0/0x100 [ 176.167813][ T6663] cleanup_mnt+0x31c/0x3ac [ 176.167819][ T6663] __cleanup_mnt+0x20/0x30 [ 176.167824][ T6663] task_work_run+0x1dc/0x260 [ 176.167831][ T6663] exit_to_user_mode_loop+0xfc/0x168 [ 176.167837][ T6663] el0_svc+0x170/0x254 [ 176.167846][ T6663] el0t_64_sync_handler+0x84/0x12c [ 176.167853][ T6663] el0t_64_sync+0x198/0x19c [ 176.167860][ T6663] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 176.337478][ T6739] loop0: detected capacity change from 0 to 40427 [ 176.341781][ T6739] F2FS-fs (loop0): build fault injection rate: 771 [ 176.342411][ T6739] F2FS-fs (loop0): invalid crc value [ 176.350480][ T6739] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 176.352282][ T6739] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 178.168831][ T6122] Bluetooth: hci0: command tx timeout [ 180.248831][ T6122] Bluetooth: hci0: command tx timeout [ 181.310700][ T6739] F2FS-fs (loop0): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 181.313341][ T6739] syz.0.19: attempt to access beyond end of device [ 181.313341][ T6739] loop0: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 181.315894][ T6739] syz.0.19: attempt to access beyond end of device [ 181.315894][ T6739] loop0: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 181.315956][ T6739] syz.0.19: attempt to access beyond end of device [ 181.315956][ T6739] loop0: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 181.315997][ T6739] syz.0.19: attempt to access beyond end of device [ 181.315997][ T6739] loop0: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 181.316033][ T6739] syz.0.19: attempt to access beyond end of device [ 181.316033][ T6739] loop0: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 181.316069][ T6739] syz.0.19: attempt to access beyond end of device [ 181.316069][ T6739] loop0: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 181.316103][ T6739] syz.0.19: attempt to access beyond end of device [ 181.316103][ T6739] loop0: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 181.316137][ T6739] syz.0.19: attempt to access beyond end of device [ 181.316137][ T6739] loop0: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 181.316169][ T6739] syz.0.19: attempt to access beyond end of device [ 181.316169][ T6739] loop0: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 181.316202][ T6739] syz.0.19: attempt to access beyond end of device [ 181.316202][ T6739] loop0: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 186.318863][ T6739] bio_check_eod: 221074 callbacks suppressed [ 186.318896][ T6739] syz.0.19: attempt to access beyond end of device [ 186.318896][ T6739] loop0: rw=0, sector=86768, nr_sectors = 8 limit=40427 [ 186.318934][ T6739] syz.0.19: attempt to access beyond end of device [ 186.318934][ T6739] loop0: rw=0, sector=86776, nr_sectors = 8 limit=40427 [ 186.318963][ T6739] syz.0.19: attempt to access beyond end of device [ 186.318963][ T6739] loop0: rw=0, sector=86784, nr_sectors = 8 limit=40427 [ 186.318989][ T6739] syz.0.19: attempt to access beyond end of device [ 186.318989][ T6739] loop0: rw=0, sector=86792, nr_sectors = 8 limit=40427 [ 186.319014][ T6739] syz.0.19: attempt to access beyond end of device [ 186.319014][ T6739] loop0: rw=0, sector=86800, nr_sectors = 8 limit=40427 [ 186.319040][ T6739] syz.0.19: attempt to access beyond end of device [ 186.319040][ T6739] loop0: rw=0, sector=86808, nr_sectors = 8 limit=40427 [ 186.319064][ T6739] syz.0.19: attempt to access beyond end of device [ 186.319064][ T6739] loop0: rw=0, sector=86816, nr_sectors = 8 limit=40427 [ 186.319089][ T6739] syz.0.19: attempt to access beyond end of device [ 186.319089][ T6739] loop0: rw=0, sector=86824, nr_sectors = 8 limit=40427 [ 186.319114][ T6739] syz.0.19: attempt to access beyond end of device [ 186.319114][ T6739] loop0: rw=0, sector=86832, nr_sectors = 8 limit=40427 [ 186.319139][ T6739] syz.0.19: attempt to access beyond end of device [ 186.319139][ T6739] loop0: rw=0, sector=86840, nr_sectors = 8 limit=40427 [ 187.373380][ T2414] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.373434][ T2414] ieee802154 phy1 wpan1: encryption failed: -22 [ 191.278152][ T6574] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 191.280271][ T6574] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 191.281839][ T6574] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 191.283578][ T6574] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 191.285195][ T6574] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 191.328880][ T6739] bio_check_eod: 216174 callbacks suppressed [ 191.330064][ T6739] syz.0.19: attempt to access beyond end of device [ 191.330064][ T6739] loop0: rw=524288, sector=87520, nr_sectors = 8 limit=40427 [ 191.332314][ T6739] syz.0.19: attempt to access beyond end of device [ 191.332314][ T6739] loop0: rw=524288, sector=87528, nr_sectors = 8 limit=40427 [ 191.334593][ T6739] syz.0.19: attempt to access beyond end of device [ 191.334593][ T6739] loop0: rw=524288, sector=87536, nr_sectors = 8 limit=40427 [ 191.336950][ T6739] syz.0.19: attempt to access beyond end of device [ 191.336950][ T6739] loop0: rw=524288, sector=87544, nr_sectors = 8 limit=40427 [ 191.339302][ T6739] syz.0.19: attempt to access beyond end of device [ 191.339302][ T6739] loop0: rw=524288, sector=87552, nr_sectors = 8 limit=40427 [ 191.341551][ T6739] syz.0.19: attempt to access beyond end of device [ 191.341551][ T6739] loop0: rw=524288, sector=87560, nr_sectors = 8 limit=40427 [ 191.343828][ T6739] syz.0.19: attempt to access beyond end of device [ 191.343828][ T6739] loop0: rw=524288, sector=87568, nr_sectors = 8 limit=40427 [ 191.345022][ T6745] chnl_net:caif_netlink_parms(): no params data found [ 191.347017][ T6739] syz.0.19: attempt to access beyond end of device [ 191.347017][ T6739] loop0: rw=524288, sector=87576, nr_sectors = 8 limit=40427 [ 191.353151][ T6739] syz.0.19: attempt to access beyond end of device [ 191.353151][ T6739] loop0: rw=524288, sector=87584, nr_sectors = 8 limit=40427 [ 191.353507][ T6739] syz.0.19: attempt to access beyond end of device [ 191.353507][ T6739] loop0: rw=524288, sector=87592, nr_sectors = 8 limit=40427 [ 191.374574][ T6745] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.374647][ T6745] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.374697][ T6745] bridge_slave_0: entered allmulticast mode [ 191.375117][ T6745] bridge_slave_0: entered promiscuous mode [ 191.376273][ T6745] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.376313][ T6745] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.376356][ T6745] bridge_slave_1: entered allmulticast mode [ 191.376742][ T6745] bridge_slave_1: entered promiscuous mode [ 191.385942][ T6745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.386795][ T6745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.395049][ T6745] team0: Port device team_slave_0 added [ 191.395769][ T6745] team0: Port device team_slave_1 added [ 191.402527][ T6745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.402556][ T6745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.402568][ T6745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.403119][ T6745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.403125][ T6745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.403137][ T6745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.418571][ T6745] hsr_slave_0: entered promiscuous mode [ 191.420497][ T6745] hsr_slave_1: entered promiscuous mode [ 191.478199][ T6745] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 191.483805][ T6745] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 191.484840][ T6745] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 191.486068][ T6745] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 191.503147][ T6745] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.503192][ T6745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.503415][ T6745] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.503445][ T6745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.520174][ T6745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.524336][ T4883] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.525769][ T4883] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.534351][ T6745] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.538290][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.538325][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.543246][ T4883] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.543285][ T4883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.553854][ T6745] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.555673][ T6745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.596829][ T6745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.617515][ T6745] veth0_vlan: entered promiscuous mode [ 191.621564][ T6745] veth1_vlan: entered promiscuous mode [ 191.628533][ T6745] veth0_macvtap: entered promiscuous mode [ 191.631030][ T6745] veth1_macvtap: entered promiscuous mode [ 191.634156][ T6745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.637614][ T6745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.640345][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.640455][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.640936][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.641000][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.667008][ T4883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.667046][ T4883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.683218][ T4883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.683252][ T4883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:03:11 executed programs: 5 [ 191.830983][ T6767] loop1: detected capacity change from 0 to 40427 [ 191.835907][ T6767] F2FS-fs (loop1): build fault injection rate: 771 [ 191.837707][ T6767] F2FS-fs (loop1): invalid crc value [ 191.860302][ T6767] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 191.860989][ T6767] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 193.380179][ T6574] Bluetooth: hci1: command tx timeout [ 195.459637][ T6574] Bluetooth: hci1: command tx timeout [ 196.339482][ T6739] bio_check_eod: 197043 callbacks suppressed [ 196.340155][ T6739] syz.0.19: attempt to access beyond end of device [ 196.340155][ T6739] loop0: rw=524288, sector=88104, nr_sectors = 8 limit=40427 [ 196.340182][ T6739] syz.0.19: attempt to access beyond end of device [ 196.340182][ T6739] loop0: rw=524288, sector=88112, nr_sectors = 8 limit=40427 [ 196.340205][ T6739] syz.0.19: attempt to access beyond end of device [ 196.340205][ T6739] loop0: rw=524288, sector=88120, nr_sectors = 8 limit=40427 [ 196.340228][ T6739] syz.0.19: attempt to access beyond end of device [ 196.340228][ T6739] loop0: rw=524288, sector=88128, nr_sectors = 8 limit=40427 [ 196.340255][ T6739] syz.0.19: attempt to access beyond end of device [ 196.340255][ T6739] loop0: rw=524288, sector=88136, nr_sectors = 8 limit=40427 [ 196.340277][ T6739] syz.0.19: attempt to access beyond end of device [ 196.340277][ T6739] loop0: rw=524288, sector=88144, nr_sectors = 8 limit=40427 [ 196.340299][ T6739] syz.0.19: attempt to access beyond end of device [ 196.340299][ T6739] loop0: rw=524288, sector=88152, nr_sectors = 8 limit=40427 [ 196.340320][ T6739] syz.0.19: attempt to access beyond end of device [ 196.340320][ T6739] loop0: rw=524288, sector=88160, nr_sectors = 8 limit=40427 [ 196.340342][ T6739] syz.0.19: attempt to access beyond end of device [ 196.340342][ T6739] loop0: rw=524288, sector=88168, nr_sectors = 8 limit=40427 [ 196.340363][ T6739] syz.0.19: attempt to access beyond end of device [ 196.340363][ T6739] loop0: rw=524288, sector=88176, nr_sectors = 8 limit=40427 [ 197.308923][ T6767] F2FS-fs (loop1): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 197.530694][ T6574] Bluetooth: hci1: command tx timeout [ 199.608903][ T6574] Bluetooth: hci1: command tx timeout [ 201.349588][ T6767] bio_check_eod: 354982 callbacks suppressed [ 201.353394][ T6767] syz.1.20: attempt to access beyond end of device [ 201.353394][ T6767] loop1: rw=524288, sector=89064, nr_sectors = 8 limit=40427 [ 201.353493][ T6767] syz.1.20: attempt to access beyond end of device [ 201.353493][ T6767] loop1: rw=524288, sector=89072, nr_sectors = 8 limit=40427 [ 201.353544][ T6767] syz.1.20: attempt to access beyond end of device [ 201.353544][ T6767] loop1: rw=524288, sector=89080, nr_sectors = 8 limit=40427 [ 201.353582][ T6767] syz.1.20: attempt to access beyond end of device [ 201.353582][ T6767] loop1: rw=524288, sector=89088, nr_sectors = 8 limit=40427 [ 201.353615][ T6767] syz.1.20: attempt to access beyond end of device [ 201.353615][ T6767] loop1: rw=524288, sector=89096, nr_sectors = 8 limit=40427 [ 201.353647][ T6767] syz.1.20: attempt to access beyond end of device [ 201.353647][ T6767] loop1: rw=524288, sector=89104, nr_sectors = 8 limit=40427 [ 201.353675][ T6767] syz.1.20: attempt to access beyond end of device [ 201.353675][ T6767] loop1: rw=524288, sector=89112, nr_sectors = 8 limit=40427 [ 201.353703][ T6767] syz.1.20: attempt to access beyond end of device [ 201.353703][ T6767] loop1: rw=524288, sector=89120, nr_sectors = 8 limit=40427 [ 201.353729][ T6767] syz.1.20: attempt to access beyond end of device [ 201.353729][ T6767] loop1: rw=524288, sector=89128, nr_sectors = 8 limit=40427 [ 201.353755][ T6767] syz.1.20: attempt to access beyond end of device [ 201.353755][ T6767] loop1: rw=524288, sector=89136, nr_sectors = 8 limit=40427 [ 206.358853][ T6739] bio_check_eod: 402687 callbacks suppressed [ 206.363434][ T6739] syz.0.19: attempt to access beyond end of device [ 206.363434][ T6739] loop0: rw=524288, sector=86432, nr_sectors = 8 limit=40427 [ 206.363544][ T6739] syz.0.19: attempt to access beyond end of device [ 206.363544][ T6739] loop0: rw=524288, sector=86440, nr_sectors = 8 limit=40427 [ 206.363582][ T6739] syz.0.19: attempt to access beyond end of device [ 206.363582][ T6739] loop0: rw=524288, sector=86448, nr_sectors = 8 limit=40427 [ 206.363616][ T6739] syz.0.19: attempt to access beyond end of device [ 206.363616][ T6739] loop0: rw=524288, sector=86456, nr_sectors = 8 limit=40427 [ 206.363648][ T6739] syz.0.19: attempt to access beyond end of device [ 206.363648][ T6739] loop0: rw=524288, sector=86464, nr_sectors = 8 limit=40427 [ 206.363677][ T6739] syz.0.19: attempt to access beyond end of device [ 206.363677][ T6739] loop0: rw=524288, sector=86472, nr_sectors = 8 limit=40427 [ 206.363703][ T6739] syz.0.19: attempt to access beyond end of device [ 206.363703][ T6739] loop0: rw=524288, sector=86480, nr_sectors = 8 limit=40427 [ 206.363727][ T6739] syz.0.19: attempt to access beyond end of device [ 206.363727][ T6739] loop0: rw=524288, sector=86488, nr_sectors = 8 limit=40427 [ 206.363752][ T6739] syz.0.19: attempt to access beyond end of device [ 206.363752][ T6739] loop0: rw=524288, sector=86496, nr_sectors = 8 limit=40427 [ 206.363775][ T6739] syz.0.19: attempt to access beyond end of device [ 206.363775][ T6739] loop0: rw=524288, sector=86504, nr_sectors = 8 limit=40427 [ 206.999144][ T6122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.001121][ T6122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.002686][ T6122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.004721][ T6122] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.006347][ T6122] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.156433][ T6778] chnl_net:caif_netlink_parms(): no params data found [ 207.242662][ T6778] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.244003][ T6778] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.245358][ T6778] bridge_slave_0: entered allmulticast mode [ 207.252396][ T6778] bridge_slave_0: entered promiscuous mode [ 207.253274][ T6778] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.253298][ T6778] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.253352][ T6778] bridge_slave_1: entered allmulticast mode [ 207.253737][ T6778] bridge_slave_1: entered promiscuous mode [ 207.292819][ T6778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.293847][ T6778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.322567][ T6778] team0: Port device team_slave_0 added [ 207.323280][ T6778] team0: Port device team_slave_1 added [ 207.343996][ T6778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.344028][ T6778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.344043][ T6778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.344543][ T6778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.344550][ T6778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.344561][ T6778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.366965][ T6778] hsr_slave_0: entered promiscuous mode [ 207.367292][ T6778] hsr_slave_1: entered promiscuous mode [ 207.367484][ T6778] debugfs: 'hsr0' already exists in 'hsr' [ 207.367495][ T6778] Cannot create hsr debugfs directory [ 207.502116][ T6778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.504522][ T6778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.506598][ T6778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.510444][ T6778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.529977][ T6778] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.530033][ T6778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.530105][ T6778] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.530129][ T6778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.562160][ T6778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.564980][ T6778] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.567048][ T4883] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.568465][ T4883] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.595834][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.595880][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.596216][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.596230][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.616444][ T6778] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.616484][ T6778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.739406][ T6778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.746819][ T6778] veth0_vlan: entered promiscuous mode [ 207.763338][ T6778] veth1_vlan: entered promiscuous mode [ 207.786574][ T6778] veth0_macvtap: entered promiscuous mode [ 207.787575][ T6778] veth1_macvtap: entered promiscuous mode [ 207.803238][ T6778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.804299][ T6778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.837639][ T4883] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.837685][ T4883] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.837711][ T4883] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.837728][ T4883] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.858276][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.858309][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.894947][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.894984][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:03:27 executed programs: 6 [ 208.223675][ T6799] loop2: detected capacity change from 0 to 40427 [ 208.237446][ T6799] F2FS-fs (loop2): build fault injection rate: 771 [ 208.250810][ T6799] F2FS-fs (loop2): invalid crc value [ 208.289854][ T6799] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 208.299071][ T6799] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 208.405379][ T6778] CPU: 1 UID: 0 PID: 6778 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 208.405399][ T6778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 208.405404][ T6778] Call trace: [ 208.405408][ T6778] show_stack+0x2c/0x3c (C) [ 208.405425][ T6778] __dump_stack+0x30/0x40 [ 208.405435][ T6778] dump_stack_lvl+0xd8/0x12c [ 208.405442][ T6778] dump_stack+0x1c/0x28 [ 208.405448][ T6778] f2fs_handle_critical_error+0x34c/0x4b8 [ 208.405456][ T6778] f2fs_stop_checkpoint+0x5c/0x70 [ 208.405462][ T6778] f2fs_write_end_io+0x768/0xa70 [ 208.405468][ T6778] bio_endio+0x858/0x894 [ 208.405476][ T6778] submit_bio_noacct+0x158/0x177c [ 208.405482][ T6778] submit_bio+0x3b4/0x550 [ 208.405487][ T6778] f2fs_submit_write_bio+0x13c/0x324 [ 208.405493][ T6778] __submit_merged_bio+0x254/0x704 [ 208.405499][ T6778] __submit_merged_write_cond+0x23c/0x4ac [ 208.405506][ T6778] f2fs_write_data_pages+0x1d28/0x2634 [ 208.405512][ T6778] do_writepages+0x270/0x468 [ 208.405520][ T6778] filemap_fdatawrite+0x14c/0x1f4 [ 208.405527][ T6778] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 208.405532][ T6778] f2fs_write_checkpoint+0x690/0x16a0 [ 208.405538][ T6778] kill_f2fs_super+0x21c/0x584 [ 208.405544][ T6778] deactivate_locked_super+0xc4/0x12c [ 208.405550][ T6778] deactivate_super+0xe0/0x100 [ 208.405555][ T6778] cleanup_mnt+0x31c/0x3ac [ 208.405560][ T6778] __cleanup_mnt+0x20/0x30 [ 208.405565][ T6778] task_work_run+0x1dc/0x260 [ 208.405572][ T6778] exit_to_user_mode_loop+0xfc/0x168 [ 208.405578][ T6778] el0_svc+0x170/0x254 [ 208.405587][ T6778] el0t_64_sync_handler+0x84/0x12c [ 208.405594][ T6778] el0t_64_sync+0x198/0x19c [ 208.407628][ T6778] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 208.688205][ T6805] loop2: detected capacity change from 0 to 40427 [ 208.709988][ T6805] F2FS-fs (loop2): build fault injection rate: 771 [ 208.713445][ T6805] F2FS-fs (loop2): invalid crc value [ 208.770327][ T6805] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 208.773943][ T6805] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 209.060268][ T6122] Bluetooth: hci2: command tx timeout [ 211.129225][ T6122] Bluetooth: hci2: command tx timeout [ 211.368854][ T6767] bio_check_eod: 278011 callbacks suppressed [ 211.369451][ T6739] syz.0.19: attempt to access beyond end of device [ 211.369451][ T6739] loop0: rw=524288, sector=87048, nr_sectors = 8 limit=40427 [ 211.370275][ T6739] syz.0.19: attempt to access beyond end of device [ 211.370275][ T6739] loop0: rw=524288, sector=87056, nr_sectors = 8 limit=40427 [ 211.371245][ T6739] syz.0.19: attempt to access beyond end of device [ 211.371245][ T6739] loop0: rw=524288, sector=87064, nr_sectors = 8 limit=40427 [ 211.371279][ T6739] syz.0.19: attempt to access beyond end of device [ 211.371279][ T6739] loop0: rw=524288, sector=87072, nr_sectors = 8 limit=40427 [ 211.371309][ T6739] syz.0.19: attempt to access beyond end of device [ 211.371309][ T6739] loop0: rw=524288, sector=87080, nr_sectors = 8 limit=40427 [ 211.371334][ T6739] syz.0.19: attempt to access beyond end of device [ 211.371334][ T6739] loop0: rw=524288, sector=87088, nr_sectors = 8 limit=40427 [ 211.371358][ T6739] syz.0.19: attempt to access beyond end of device [ 211.371358][ T6739] loop0: rw=524288, sector=87096, nr_sectors = 8 limit=40427 [ 211.371381][ T6739] syz.0.19: attempt to access beyond end of device [ 211.371381][ T6739] loop0: rw=524288, sector=87104, nr_sectors = 8 limit=40427 [ 211.371404][ T6739] syz.0.19: attempt to access beyond end of device [ 211.371404][ T6739] loop0: rw=524288, sector=87112, nr_sectors = 8 limit=40427 [ 211.398980][ T6767] syz.1.20: attempt to access beyond end of device [ 211.398980][ T6767] loop1: rw=0, sector=89784, nr_sectors = 8 limit=40427 [ 213.209029][ T6122] Bluetooth: hci2: command tx timeout [ 215.288972][ T6122] Bluetooth: hci2: command tx timeout [ 216.378847][ T6767] bio_check_eod: 274994 callbacks suppressed [ 216.378888][ T6767] syz.1.20: attempt to access beyond end of device [ 216.378888][ T6767] loop1: rw=524288, sector=88088, nr_sectors = 8 limit=40427 [ 216.378965][ T6767] syz.1.20: attempt to access beyond end of device [ 216.378965][ T6767] loop1: rw=524288, sector=88096, nr_sectors = 8 limit=40427 [ 216.378994][ T6767] syz.1.20: attempt to access beyond end of device [ 216.378994][ T6767] loop1: rw=524288, sector=88104, nr_sectors = 8 limit=40427 [ 216.379020][ T6767] syz.1.20: attempt to access beyond end of device [ 216.379020][ T6767] loop1: rw=524288, sector=88112, nr_sectors = 8 limit=40427 [ 216.379046][ T6767] syz.1.20: attempt to access beyond end of device [ 216.379046][ T6767] loop1: rw=524288, sector=88120, nr_sectors = 8 limit=40427 [ 216.379072][ T6767] syz.1.20: attempt to access beyond end of device [ 216.379072][ T6767] loop1: rw=524288, sector=88128, nr_sectors = 8 limit=40427 [ 216.379097][ T6767] syz.1.20: attempt to access beyond end of device [ 216.379097][ T6767] loop1: rw=524288, sector=88136, nr_sectors = 8 limit=40427 [ 216.379122][ T6767] syz.1.20: attempt to access beyond end of device [ 216.379122][ T6767] loop1: rw=524288, sector=88144, nr_sectors = 8 limit=40427 [ 216.379148][ T6767] syz.1.20: attempt to access beyond end of device [ 216.379148][ T6767] loop1: rw=524288, sector=88152, nr_sectors = 8 limit=40427 [ 216.379172][ T6767] syz.1.20: attempt to access beyond end of device [ 216.379172][ T6767] loop1: rw=524288, sector=88160, nr_sectors = 8 limit=40427 [ 217.595895][ T6805] F2FS-fs (loop2): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 221.388929][ T6767] bio_check_eod: 365064 callbacks suppressed [ 221.390082][ T6767] syz.1.20: attempt to access beyond end of device [ 221.390082][ T6767] loop1: rw=524288, sector=86336, nr_sectors = 8 limit=40427 [ 221.392393][ T6767] syz.1.20: attempt to access beyond end of device [ 221.392393][ T6767] loop1: rw=524288, sector=86344, nr_sectors = 8 limit=40427 [ 221.394607][ T6767] syz.1.20: attempt to access beyond end of device [ 221.394607][ T6767] loop1: rw=524288, sector=86352, nr_sectors = 8 limit=40427 [ 221.396987][ T6767] syz.1.20: attempt to access beyond end of device [ 221.396987][ T6767] loop1: rw=524288, sector=86360, nr_sectors = 8 limit=40427 [ 221.398296][ T6739] syz.0.19: attempt to access beyond end of device [ 221.398296][ T6739] loop0: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 221.398354][ T6739] syz.0.19: attempt to access beyond end of device [ 221.398354][ T6739] loop0: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 221.398390][ T6739] syz.0.19: attempt to access beyond end of device [ 221.398390][ T6739] loop0: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 221.398416][ T6739] syz.0.19: attempt to access beyond end of device [ 221.398416][ T6739] loop0: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 221.398442][ T6739] syz.0.19: attempt to access beyond end of device [ 221.398442][ T6739] loop0: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 221.398468][ T6739] syz.0.19: attempt to access beyond end of device [ 221.398468][ T6739] loop0: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 224.278471][ T6574] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 224.280039][ T6574] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 224.282871][ T6574] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 224.284845][ T6574] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 224.289119][ T6574] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 224.484043][ T6811] chnl_net:caif_netlink_parms(): no params data found [ 224.682065][ T6811] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.684072][ T6811] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.685235][ T6811] bridge_slave_0: entered allmulticast mode [ 224.692151][ T6811] bridge_slave_0: entered promiscuous mode [ 224.695446][ T6811] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.695505][ T6811] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.695565][ T6811] bridge_slave_1: entered allmulticast mode [ 224.695992][ T6811] bridge_slave_1: entered promiscuous mode [ 224.716032][ T6811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.718456][ T6811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.730339][ T6811] team0: Port device team_slave_0 added [ 224.731104][ T6811] team0: Port device team_slave_1 added [ 224.746034][ T6811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.746061][ T6811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.746079][ T6811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.748318][ T6811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.748324][ T6811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.748333][ T6811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.787717][ T6811] hsr_slave_0: entered promiscuous mode [ 224.790723][ T6811] hsr_slave_1: entered promiscuous mode [ 224.801801][ T6811] debugfs: 'hsr0' already exists in 'hsr' [ 224.801835][ T6811] Cannot create hsr debugfs directory [ 224.962605][ T6811] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 224.997843][ T6811] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 225.013059][ T6811] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 225.020384][ T6811] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 225.096758][ T6811] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.096811][ T6811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.096876][ T6811] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.096899][ T6811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.175986][ T6811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.190272][ T6811] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.245089][ T6811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.402999][ T6811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.432571][ T6811] veth0_vlan: entered promiscuous mode [ 225.451265][ T6811] veth1_vlan: entered promiscuous mode [ 225.455903][ T6811] veth0_macvtap: entered promiscuous mode [ 225.470668][ T6811] veth1_macvtap: entered promiscuous mode [ 225.473801][ T6811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.474746][ T6811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.477412][ T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.477558][ T41] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.477615][ T41] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.477667][ T41] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.605560][ T2225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.605595][ T2225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.655192][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.655225][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:03:45 executed programs: 8 [ 225.999539][ T6833] loop3: detected capacity change from 0 to 40427 [ 226.000917][ T6833] F2FS-fs (loop3): build fault injection rate: 771 [ 226.001641][ T6833] F2FS-fs (loop3): invalid crc value [ 226.030022][ T6833] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 226.032269][ T6833] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 226.165305][ T6811] CPU: 1 UID: 0 PID: 6811 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 226.165324][ T6811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 226.165329][ T6811] Call trace: [ 226.165332][ T6811] show_stack+0x2c/0x3c (C) [ 226.165348][ T6811] __dump_stack+0x30/0x40 [ 226.165359][ T6811] dump_stack_lvl+0xd8/0x12c [ 226.165365][ T6811] dump_stack+0x1c/0x28 [ 226.165371][ T6811] f2fs_handle_critical_error+0x34c/0x4b8 [ 226.165379][ T6811] f2fs_stop_checkpoint+0x5c/0x70 [ 226.165385][ T6811] f2fs_write_end_io+0x768/0xa70 [ 226.165391][ T6811] bio_endio+0x858/0x894 [ 226.165399][ T6811] submit_bio_noacct+0x158/0x177c [ 226.165404][ T6811] submit_bio+0x3b4/0x550 [ 226.165410][ T6811] f2fs_submit_write_bio+0x13c/0x324 [ 226.165416][ T6811] __submit_merged_bio+0x254/0x704 [ 226.165422][ T6811] __submit_merged_write_cond+0x23c/0x4ac [ 226.165428][ T6811] f2fs_write_data_pages+0x1d28/0x2634 [ 226.165434][ T6811] do_writepages+0x270/0x468 [ 226.165441][ T6811] filemap_fdatawrite+0x14c/0x1f4 [ 226.165448][ T6811] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 226.165454][ T6811] f2fs_write_checkpoint+0x690/0x16a0 [ 226.165459][ T6811] kill_f2fs_super+0x21c/0x584 [ 226.165465][ T6811] deactivate_locked_super+0xc4/0x12c [ 226.165471][ T6811] deactivate_super+0xe0/0x100 [ 226.165475][ T6811] cleanup_mnt+0x31c/0x3ac [ 226.165481][ T6811] __cleanup_mnt+0x20/0x30 [ 226.165486][ T6811] task_work_run+0x1dc/0x260 [ 226.165492][ T6811] exit_to_user_mode_loop+0xfc/0x168 [ 226.165498][ T6811] el0_svc+0x170/0x254 [ 226.165506][ T6811] el0t_64_sync_handler+0x84/0x12c [ 226.165513][ T6811] el0t_64_sync+0x198/0x19c [ 226.165537][ T6811] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 226.334015][ T6122] Bluetooth: hci3: command tx timeout [ 226.408558][ T6739] bio_check_eod: 333704 callbacks suppressed [ 226.408604][ T6739] syz.0.19: attempt to access beyond end of device [ 226.408604][ T6739] loop0: rw=524288, sector=89152, nr_sectors = 8 limit=40427 [ 226.408656][ T6739] syz.0.19: attempt to access beyond end of device [ 226.408656][ T6739] loop0: rw=524288, sector=89160, nr_sectors = 8 limit=40427 [ 226.408695][ T6739] syz.0.19: attempt to access beyond end of device [ 226.408695][ T6739] loop0: rw=524288, sector=89168, nr_sectors = 8 limit=40427 [ 226.408739][ T6739] syz.0.19: attempt to access beyond end of device [ 226.408739][ T6739] loop0: rw=524288, sector=89176, nr_sectors = 8 limit=40427 [ 226.408769][ T6739] syz.0.19: attempt to access beyond end of device [ 226.408769][ T6739] loop0: rw=524288, sector=89184, nr_sectors = 8 limit=40427 [ 226.409085][ T6739] syz.0.19: attempt to access beyond end of device [ 226.409085][ T6739] loop0: rw=524288, sector=89192, nr_sectors = 8 limit=40427 [ 226.409124][ T6739] syz.0.19: attempt to access beyond end of device [ 226.409124][ T6739] loop0: rw=524288, sector=89200, nr_sectors = 8 limit=40427 [ 226.409153][ T6739] syz.0.19: attempt to access beyond end of device [ 226.409153][ T6739] loop0: rw=524288, sector=89208, nr_sectors = 8 limit=40427 [ 226.409181][ T6739] syz.0.19: attempt to access beyond end of device [ 226.409181][ T6739] loop0: rw=524288, sector=89216, nr_sectors = 8 limit=40427 [ 226.409208][ T6739] syz.0.19: attempt to access beyond end of device [ 226.409208][ T6739] loop0: rw=524288, sector=89224, nr_sectors = 8 limit=40427 [ 226.487004][ T6839] loop3: detected capacity change from 0 to 40427 [ 226.496004][ T6839] F2FS-fs (loop3): build fault injection rate: 771 [ 226.519908][ T6839] F2FS-fs (loop3): invalid crc value [ 226.556737][ T6839] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 226.591616][ T6839] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 226.701458][ T6811] CPU: 0 UID: 0 PID: 6811 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 226.701489][ T6811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 226.701499][ T6811] Call trace: [ 226.701504][ T6811] show_stack+0x2c/0x3c (C) [ 226.701521][ T6811] __dump_stack+0x30/0x40 [ 226.701528][ T6811] dump_stack_lvl+0xd8/0x12c [ 226.701534][ T6811] dump_stack+0x1c/0x28 [ 226.701539][ T6811] f2fs_handle_critical_error+0x34c/0x4b8 [ 226.701547][ T6811] f2fs_stop_checkpoint+0x5c/0x70 [ 226.701552][ T6811] f2fs_write_end_io+0x768/0xa70 [ 226.701559][ T6811] bio_endio+0x858/0x894 [ 226.701566][ T6811] submit_bio_noacct+0x158/0x177c [ 226.701571][ T6811] submit_bio+0x3b4/0x550 [ 226.701577][ T6811] f2fs_submit_write_bio+0x13c/0x324 [ 226.701583][ T6811] __submit_merged_bio+0x254/0x704 [ 226.701588][ T6811] __submit_merged_write_cond+0x23c/0x4ac [ 226.701594][ T6811] f2fs_write_data_pages+0x1d28/0x2634 [ 226.701601][ T6811] do_writepages+0x270/0x468 [ 226.701608][ T6811] filemap_fdatawrite+0x14c/0x1f4 [ 226.701614][ T6811] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 226.701620][ T6811] f2fs_write_checkpoint+0x690/0x16a0 [ 226.701625][ T6811] kill_f2fs_super+0x21c/0x584 [ 226.701631][ T6811] deactivate_locked_super+0xc4/0x12c [ 226.701637][ T6811] deactivate_super+0xe0/0x100 [ 226.701642][ T6811] cleanup_mnt+0x31c/0x3ac [ 226.701647][ T6811] __cleanup_mnt+0x20/0x30 [ 226.701652][ T6811] task_work_run+0x1dc/0x260 [ 226.701658][ T6811] exit_to_user_mode_loop+0xfc/0x168 [ 226.701664][ T6811] el0_svc+0x170/0x254 [ 226.701672][ T6811] el0t_64_sync_handler+0x84/0x12c [ 226.701679][ T6811] el0t_64_sync+0x198/0x19c [ 226.701710][ T6811] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 227.188491][ T6845] loop3: detected capacity change from 0 to 40427 [ 227.200150][ T6845] F2FS-fs (loop3): build fault injection rate: 771 [ 227.206658][ T6845] F2FS-fs (loop3): invalid crc value [ 227.292658][ T6845] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 227.294768][ T6845] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 227.435322][ T6811] CPU: 0 UID: 0 PID: 6811 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 227.435342][ T6811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 227.435347][ T6811] Call trace: [ 227.435351][ T6811] show_stack+0x2c/0x3c (C) [ 227.435367][ T6811] __dump_stack+0x30/0x40 [ 227.435377][ T6811] dump_stack_lvl+0xd8/0x12c [ 227.435384][ T6811] dump_stack+0x1c/0x28 [ 227.435390][ T6811] f2fs_handle_critical_error+0x34c/0x4b8 [ 227.435398][ T6811] f2fs_stop_checkpoint+0x5c/0x70 [ 227.435404][ T6811] f2fs_write_end_io+0x768/0xa70 [ 227.435411][ T6811] bio_endio+0x858/0x894 [ 227.435418][ T6811] submit_bio_noacct+0x158/0x177c [ 227.435424][ T6811] submit_bio+0x3b4/0x550 [ 227.435429][ T6811] f2fs_submit_write_bio+0x13c/0x324 [ 227.435436][ T6811] __submit_merged_bio+0x254/0x704 [ 227.435442][ T6811] __submit_merged_write_cond+0x23c/0x4ac [ 227.435448][ T6811] f2fs_write_data_pages+0x1d28/0x2634 [ 227.435454][ T6811] do_writepages+0x270/0x468 [ 227.435462][ T6811] filemap_fdatawrite+0x14c/0x1f4 [ 227.435469][ T6811] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 227.435475][ T6811] f2fs_write_checkpoint+0x690/0x16a0 [ 227.435480][ T6811] kill_f2fs_super+0x21c/0x584 [ 227.435487][ T6811] deactivate_locked_super+0xc4/0x12c [ 227.435492][ T6811] deactivate_super+0xe0/0x100 [ 227.435497][ T6811] cleanup_mnt+0x31c/0x3ac [ 227.435503][ T6811] __cleanup_mnt+0x20/0x30 [ 227.435508][ T6811] task_work_run+0x1dc/0x260 [ 227.435515][ T6811] exit_to_user_mode_loop+0xfc/0x168 [ 227.435521][ T6811] el0_svc+0x170/0x254 [ 227.435530][ T6811] el0t_64_sync_handler+0x84/0x12c [ 227.435537][ T6811] el0t_64_sync+0x198/0x19c [ 227.435565][ T6811] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 227.983740][ T6851] loop3: detected capacity change from 0 to 40427 [ 227.995345][ T6851] F2FS-fs (loop3): build fault injection rate: 771 [ 227.996058][ T6851] F2FS-fs (loop3): invalid crc value [ 228.020988][ T6851] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 228.024646][ T6851] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 228.410792][ T6122] Bluetooth: hci3: command tx timeout [ 230.489099][ T6122] Bluetooth: hci3: command tx timeout [ 231.411019][ T6739] bio_check_eod: 292726 callbacks suppressed [ 231.412212][ T6739] syz.0.19: attempt to access beyond end of device [ 231.412212][ T6739] loop0: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 231.414660][ T6739] syz.0.19: attempt to access beyond end of device [ 231.414660][ T6739] loop0: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 231.414871][ T6805] syz.2.22: attempt to access beyond end of device [ 231.414871][ T6805] loop2: rw=524288, sector=87368, nr_sectors = 8 limit=40427 [ 231.414975][ T6805] syz.2.22: attempt to access beyond end of device [ 231.414975][ T6805] loop2: rw=524288, sector=87376, nr_sectors = 8 limit=40427 [ 231.415018][ T6805] syz.2.22: attempt to access beyond end of device [ 231.415018][ T6805] loop2: rw=524288, sector=87384, nr_sectors = 8 limit=40427 [ 231.415047][ T6805] syz.2.22: attempt to access beyond end of device [ 231.415047][ T6805] loop2: rw=524288, sector=87392, nr_sectors = 8 limit=40427 [ 231.415073][ T6805] syz.2.22: attempt to access beyond end of device [ 231.415073][ T6805] loop2: rw=524288, sector=87400, nr_sectors = 8 limit=40427 [ 231.415097][ T6805] syz.2.22: attempt to access beyond end of device [ 231.415097][ T6805] loop2: rw=524288, sector=87408, nr_sectors = 8 limit=40427 [ 231.415120][ T6805] syz.2.22: attempt to access beyond end of device [ 231.415120][ T6805] loop2: rw=524288, sector=87416, nr_sectors = 8 limit=40427 [ 231.415143][ T6805] syz.2.22: attempt to access beyond end of device [ 231.415143][ T6805] loop2: rw=524288, sector=87424, nr_sectors = 8 limit=40427 [ 232.569717][ T6122] Bluetooth: hci3: command tx timeout [ 236.418924][ T6767] bio_check_eod: 310279 callbacks suppressed [ 236.420118][ T6767] syz.1.20: attempt to access beyond end of device [ 236.420118][ T6767] loop1: rw=0, sector=86456, nr_sectors = 8 limit=40427 [ 236.422877][ T6767] syz.1.20: attempt to access beyond end of device [ 236.422877][ T6767] loop1: rw=0, sector=86464, nr_sectors = 8 limit=40427 [ 236.424851][ T6739] syz.0.19: attempt to access beyond end of device [ 236.424851][ T6739] loop0: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 236.424904][ T6739] syz.0.19: attempt to access beyond end of device [ 236.424904][ T6739] loop0: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 236.424939][ T6739] syz.0.19: attempt to access beyond end of device [ 236.424939][ T6739] loop0: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 236.424971][ T6739] syz.0.19: attempt to access beyond end of device [ 236.424971][ T6739] loop0: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 236.424996][ T6739] syz.0.19: attempt to access beyond end of device [ 236.424996][ T6739] loop0: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 236.425020][ T6739] syz.0.19: attempt to access beyond end of device [ 236.425020][ T6739] loop0: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 236.425045][ T6739] syz.0.19: attempt to access beyond end of device [ 236.425045][ T6739] loop0: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 236.425068][ T6739] syz.0.19: attempt to access beyond end of device [ 236.425068][ T6739] loop0: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 241.188421][ T6851] F2FS-fs (loop3): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 241.428896][ T6851] bio_check_eod: 309217 callbacks suppressed [ 241.429633][ T6851] syz.3.26: attempt to access beyond end of device [ 241.429633][ T6851] loop3: rw=524288, sector=88448, nr_sectors = 8 limit=40427 [ 241.429884][ T6851] syz.3.26: attempt to access beyond end of device [ 241.429884][ T6851] loop3: rw=524288, sector=88456, nr_sectors = 8 limit=40427 [ 241.429918][ T6851] syz.3.26: attempt to access beyond end of device [ 241.429918][ T6851] loop3: rw=524288, sector=88464, nr_sectors = 8 limit=40427 [ 241.429953][ T6851] syz.3.26: attempt to access beyond end of device [ 241.429953][ T6851] loop3: rw=524288, sector=88472, nr_sectors = 8 limit=40427 [ 241.429987][ T6851] syz.3.26: attempt to access beyond end of device [ 241.429987][ T6851] loop3: rw=524288, sector=88480, nr_sectors = 8 limit=40427 [ 241.430022][ T6851] syz.3.26: attempt to access beyond end of device [ 241.430022][ T6851] loop3: rw=524288, sector=88488, nr_sectors = 8 limit=40427 [ 241.430049][ T6851] syz.3.26: attempt to access beyond end of device [ 241.430049][ T6851] loop3: rw=524288, sector=88496, nr_sectors = 8 limit=40427 [ 241.430075][ T6851] syz.3.26: attempt to access beyond end of device [ 241.430075][ T6851] loop3: rw=524288, sector=88504, nr_sectors = 8 limit=40427 [ 241.430101][ T6851] syz.3.26: attempt to access beyond end of device [ 241.430101][ T6851] loop3: rw=524288, sector=88512, nr_sectors = 8 limit=40427 [ 241.430127][ T6851] syz.3.26: attempt to access beyond end of device [ 241.430127][ T6851] loop3: rw=524288, sector=88520, nr_sectors = 8 limit=40427 [ 243.486348][ T6574] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 243.488037][ T6574] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 243.493378][ T6574] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 243.494985][ T6574] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 243.496414][ T6574] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 243.944424][ T6857] chnl_net:caif_netlink_parms(): no params data found [ 244.236667][ T6857] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.236709][ T6857] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.236790][ T6857] bridge_slave_0: entered allmulticast mode [ 244.237228][ T6857] bridge_slave_0: entered promiscuous mode [ 244.237828][ T6857] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.237861][ T6857] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.237926][ T6857] bridge_slave_1: entered allmulticast mode [ 244.238319][ T6857] bridge_slave_1: entered promiscuous mode [ 244.316640][ T6857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.317685][ T6857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.382168][ T6857] team0: Port device team_slave_0 added [ 244.382961][ T6857] team0: Port device team_slave_1 added [ 244.492434][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.492464][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.492496][ T6857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.493059][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.493067][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.493080][ T6857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.525157][ T6857] hsr_slave_0: entered promiscuous mode [ 244.525512][ T6857] hsr_slave_1: entered promiscuous mode [ 244.525705][ T6857] debugfs: 'hsr0' already exists in 'hsr' [ 244.525715][ T6857] Cannot create hsr debugfs directory [ 244.849716][ T6857] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 244.851205][ T6857] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 244.853424][ T6857] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 244.855025][ T6857] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 244.904717][ T6857] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.904769][ T6857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.904839][ T6857] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.904862][ T6857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.990895][ T751] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.041328][ T751] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.125265][ T6857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.128628][ T6857] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.140565][ T246] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.140605][ T246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.145629][ T246] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.145673][ T246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.460390][ T6857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.531318][ T6574] Bluetooth: hci4: command tx timeout [ 245.739637][ T6857] veth0_vlan: entered promiscuous mode [ 245.741264][ T6857] veth1_vlan: entered promiscuous mode [ 245.748175][ T6857] veth0_macvtap: entered promiscuous mode [ 245.775415][ T6857] veth1_macvtap: entered promiscuous mode [ 245.778689][ T6857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.808022][ T6857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.819012][ T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.819438][ T41] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.819823][ T41] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.820212][ T41] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.930607][ T751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.930632][ T751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.975532][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.975562][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:04:06 executed programs: 12 [ 246.282672][ T6889] loop4: detected capacity change from 0 to 40427 [ 246.293749][ T6889] F2FS-fs (loop4): build fault injection rate: 771 [ 246.295795][ T6889] F2FS-fs (loop4): invalid crc value [ 246.330016][ T6889] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 246.360802][ T6889] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 246.438851][ T6805] bio_check_eod: 323737 callbacks suppressed [ 246.440058][ T6805] syz.2.22: attempt to access beyond end of device [ 246.440058][ T6805] loop2: rw=0, sector=86720, nr_sectors = 8 limit=40427 [ 246.442373][ T6805] syz.2.22: attempt to access beyond end of device [ 246.442373][ T6805] loop2: rw=0, sector=86728, nr_sectors = 8 limit=40427 [ 246.444652][ T6805] syz.2.22: attempt to access beyond end of device [ 246.444652][ T6805] loop2: rw=0, sector=86736, nr_sectors = 8 limit=40427 [ 246.446427][ T6851] syz.3.26: attempt to access beyond end of device [ 246.446427][ T6851] loop3: rw=524288, sector=87400, nr_sectors = 8 limit=40427 [ 246.446470][ T6851] syz.3.26: attempt to access beyond end of device [ 246.446470][ T6851] loop3: rw=524288, sector=87408, nr_sectors = 8 limit=40427 [ 246.446499][ T6851] syz.3.26: attempt to access beyond end of device [ 246.446499][ T6851] loop3: rw=524288, sector=87416, nr_sectors = 8 limit=40427 [ 246.446525][ T6851] syz.3.26: attempt to access beyond end of device [ 246.446525][ T6851] loop3: rw=524288, sector=87424, nr_sectors = 8 limit=40427 [ 246.446550][ T6851] syz.3.26: attempt to access beyond end of device [ 246.446550][ T6851] loop3: rw=524288, sector=87432, nr_sectors = 8 limit=40427 [ 246.446573][ T6851] syz.3.26: attempt to access beyond end of device [ 246.446573][ T6851] loop3: rw=524288, sector=87440, nr_sectors = 8 limit=40427 [ 246.446596][ T6851] syz.3.26: attempt to access beyond end of device [ 246.446596][ T6851] loop3: rw=524288, sector=87448, nr_sectors = 8 limit=40427 [ 247.613019][ T6574] Bluetooth: hci4: command tx timeout [ 248.809969][ T2414] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.810008][ T2414] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.688971][ T6574] Bluetooth: hci4: command tx timeout [ 251.448941][ T6851] bio_check_eod: 317217 callbacks suppressed [ 251.449709][ T6851] syz.3.26: attempt to access beyond end of device [ 251.449709][ T6851] loop3: rw=0, sector=89344, nr_sectors = 8 limit=40427 [ 251.450451][ T6851] syz.3.26: attempt to access beyond end of device [ 251.450451][ T6851] loop3: rw=0, sector=89352, nr_sectors = 8 limit=40427 [ 251.451202][ T6851] syz.3.26: attempt to access beyond end of device [ 251.451202][ T6851] loop3: rw=0, sector=89360, nr_sectors = 8 limit=40427 [ 251.451933][ T6851] syz.3.26: attempt to access beyond end of device [ 251.451933][ T6851] loop3: rw=0, sector=89368, nr_sectors = 8 limit=40427 [ 251.452648][ T6851] syz.3.26: attempt to access beyond end of device [ 251.452648][ T6851] loop3: rw=0, sector=89376, nr_sectors = 8 limit=40427 [ 251.453367][ T6851] syz.3.26: attempt to access beyond end of device [ 251.453367][ T6851] loop3: rw=0, sector=89384, nr_sectors = 8 limit=40427 [ 251.453390][ T6851] syz.3.26: attempt to access beyond end of device [ 251.453390][ T6851] loop3: rw=0, sector=89392, nr_sectors = 8 limit=40427 [ 251.453413][ T6851] syz.3.26: attempt to access beyond end of device [ 251.453413][ T6851] loop3: rw=0, sector=89400, nr_sectors = 8 limit=40427 [ 251.453435][ T6851] syz.3.26: attempt to access beyond end of device [ 251.453435][ T6851] loop3: rw=0, sector=89408, nr_sectors = 8 limit=40427 [ 251.453468][ T6851] syz.3.26: attempt to access beyond end of device [ 251.453468][ T6851] loop3: rw=0, sector=89416, nr_sectors = 8 limit=40427 [ 251.769894][ T6574] Bluetooth: hci4: command tx timeout [ 256.460016][ T6805] bio_check_eod: 313272 callbacks suppressed [ 256.460062][ T6805] syz.2.22: attempt to access beyond end of device [ 256.460062][ T6805] loop2: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 256.460110][ T6805] syz.2.22: attempt to access beyond end of device [ 256.460110][ T6805] loop2: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 256.460141][ T6805] syz.2.22: attempt to access beyond end of device [ 256.460141][ T6805] loop2: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 256.460170][ T6805] syz.2.22: attempt to access beyond end of device [ 256.460170][ T6805] loop2: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 256.460197][ T6805] syz.2.22: attempt to access beyond end of device [ 256.460197][ T6805] loop2: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 256.460225][ T6805] syz.2.22: attempt to access beyond end of device [ 256.460225][ T6805] loop2: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 256.460251][ T6805] syz.2.22: attempt to access beyond end of device [ 256.460251][ T6805] loop2: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 256.460277][ T6805] syz.2.22: attempt to access beyond end of device [ 256.460277][ T6805] loop2: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 256.460303][ T6805] syz.2.22: attempt to access beyond end of device [ 256.460303][ T6805] loop2: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 256.460328][ T6805] syz.2.22: attempt to access beyond end of device [ 256.460328][ T6805] loop2: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 261.468914][ T6851] bio_check_eod: 315843 callbacks suppressed [ 261.468968][ T6851] syz.3.26: attempt to access beyond end of device [ 261.468968][ T6851] loop3: rw=0, sector=86096, nr_sectors = 8 limit=40427 [ 261.469023][ T6851] syz.3.26: attempt to access beyond end of device [ 261.469023][ T6851] loop3: rw=0, sector=86104, nr_sectors = 8 limit=40427 [ 261.469061][ T6851] syz.3.26: attempt to access beyond end of device [ 261.469061][ T6851] loop3: rw=0, sector=86112, nr_sectors = 8 limit=40427 [ 261.469096][ T6851] syz.3.26: attempt to access beyond end of device [ 261.469096][ T6851] loop3: rw=0, sector=86120, nr_sectors = 8 limit=40427 [ 261.469126][ T6851] syz.3.26: attempt to access beyond end of device [ 261.469126][ T6851] loop3: rw=0, sector=86128, nr_sectors = 8 limit=40427 [ 261.469154][ T6851] syz.3.26: attempt to access beyond end of device [ 261.469154][ T6851] loop3: rw=0, sector=86136, nr_sectors = 8 limit=40427 [ 261.469181][ T6851] syz.3.26: attempt to access beyond end of device [ 261.469181][ T6851] loop3: rw=0, sector=86144, nr_sectors = 8 limit=40427 [ 261.469207][ T6851] syz.3.26: attempt to access beyond end of device [ 261.469207][ T6851] loop3: rw=0, sector=86152, nr_sectors = 8 limit=40427 [ 261.469236][ T6851] syz.3.26: attempt to access beyond end of device [ 261.469236][ T6851] loop3: rw=0, sector=86160, nr_sectors = 8 limit=40427 [ 261.469261][ T6851] syz.3.26: attempt to access beyond end of device [ 261.469261][ T6851] loop3: rw=0, sector=86168, nr_sectors = 8 limit=40427 [ 261.954528][ T6122] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 261.956227][ T6122] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 261.962355][ T6122] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 261.969381][ T6122] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 261.970791][ T6122] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 262.260436][ T6896] chnl_net:caif_netlink_parms(): no params data found [ 262.523666][ T6896] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.523712][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.523776][ T6896] bridge_slave_0: entered allmulticast mode [ 262.524237][ T6896] bridge_slave_0: entered promiscuous mode [ 262.525037][ T6896] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.533327][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.533472][ T6896] bridge_slave_1: entered allmulticast mode [ 262.533977][ T6896] bridge_slave_1: entered promiscuous mode [ 262.645317][ T6896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.646238][ T6896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.740194][ T6896] team0: Port device team_slave_0 added [ 262.740999][ T6896] team0: Port device team_slave_1 added [ 262.896656][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.896775][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.898343][ T6896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.901458][ T6896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.901470][ T6896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.901486][ T6896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.020801][ T6896] hsr_slave_0: entered promiscuous mode [ 263.022207][ T6896] hsr_slave_1: entered promiscuous mode [ 263.023707][ T6896] debugfs: 'hsr0' already exists in 'hsr' [ 263.024898][ T6896] Cannot create hsr debugfs directory [ 263.283789][ T6896] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 263.310151][ T6896] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 263.329857][ T6896] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 263.342686][ T6896] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 263.456302][ T6896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.477035][ T6896] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.480398][ T6892] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.480440][ T6892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.495656][ T6896] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 263.508817][ T6896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.513532][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.513588][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.625017][ T6896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.780798][ T6896] veth0_vlan: entered promiscuous mode [ 263.783927][ T6896] veth1_vlan: entered promiscuous mode [ 263.795547][ T6896] veth0_macvtap: entered promiscuous mode [ 263.812345][ T6896] veth1_macvtap: entered promiscuous mode [ 263.824490][ T6896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.854251][ T6896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.918662][ T42] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.920425][ T42] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.923354][ T42] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.924697][ T42] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.012162][ T6574] Bluetooth: hci5: command tx timeout [ 264.013273][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.013301][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.077329][ T751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.079244][ T751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:04:24 executed programs: 13 [ 264.581072][ T6932] loop5: detected capacity change from 0 to 40427 [ 264.596225][ T6932] F2FS-fs (loop5): build fault injection rate: 771 [ 264.648091][ T6932] F2FS-fs (loop5): invalid crc value [ 264.676318][ T6932] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 264.684684][ T6932] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 264.912748][ T6896] CPU: 1 UID: 0 PID: 6896 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 264.912770][ T6896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 264.912776][ T6896] Call trace: [ 264.912780][ T6896] show_stack+0x2c/0x3c (C) [ 264.912798][ T6896] __dump_stack+0x30/0x40 [ 264.912808][ T6896] dump_stack_lvl+0xd8/0x12c [ 264.912815][ T6896] dump_stack+0x1c/0x28 [ 264.912820][ T6896] f2fs_handle_critical_error+0x34c/0x4b8 [ 264.912830][ T6896] f2fs_stop_checkpoint+0x5c/0x70 [ 264.912835][ T6896] f2fs_write_end_io+0x768/0xa70 [ 264.912842][ T6896] bio_endio+0x858/0x894 [ 264.912850][ T6896] submit_bio_noacct+0x158/0x177c [ 264.912855][ T6896] submit_bio+0x3b4/0x550 [ 264.912861][ T6896] f2fs_submit_write_bio+0x13c/0x324 [ 264.912867][ T6896] __submit_merged_bio+0x254/0x704 [ 264.912873][ T6896] __submit_merged_write_cond+0x23c/0x4ac [ 264.912878][ T6896] f2fs_write_data_pages+0x1d28/0x2634 [ 264.912885][ T6896] do_writepages+0x270/0x468 [ 264.912893][ T6896] filemap_fdatawrite+0x14c/0x1f4 [ 264.912900][ T6896] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 264.912905][ T6896] f2fs_write_checkpoint+0x690/0x16a0 [ 264.912911][ T6896] kill_f2fs_super+0x21c/0x584 [ 264.912917][ T6896] deactivate_locked_super+0xc4/0x12c [ 264.912922][ T6896] deactivate_super+0xe0/0x100 [ 264.912927][ T6896] cleanup_mnt+0x31c/0x3ac [ 264.912937][ T6896] __cleanup_mnt+0x20/0x30 [ 264.912942][ T6896] task_work_run+0x1dc/0x260 [ 264.912949][ T6896] exit_to_user_mode_loop+0xfc/0x168 [ 264.912956][ T6896] el0_svc+0x170/0x254 [ 264.912965][ T6896] el0t_64_sync_handler+0x84/0x12c [ 264.912972][ T6896] el0t_64_sync+0x198/0x19c [ 264.913001][ T6896] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 265.181718][ T6889] F2FS-fs (loop4): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 265.643617][ T6939] loop5: detected capacity change from 0 to 40427 [ 265.689194][ T6939] F2FS-fs (loop5): build fault injection rate: 771 [ 265.693540][ T6939] F2FS-fs (loop5): invalid crc value [ 265.749939][ T6939] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 265.762543][ T6939] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 265.965041][ T6896] CPU: 1 UID: 0 PID: 6896 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 265.965064][ T6896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 265.965069][ T6896] Call trace: [ 265.965073][ T6896] show_stack+0x2c/0x3c (C) [ 265.965090][ T6896] __dump_stack+0x30/0x40 [ 265.965100][ T6896] dump_stack_lvl+0xd8/0x12c [ 265.965107][ T6896] dump_stack+0x1c/0x28 [ 265.965112][ T6896] f2fs_handle_critical_error+0x34c/0x4b8 [ 265.965121][ T6896] f2fs_stop_checkpoint+0x5c/0x70 [ 265.965126][ T6896] f2fs_write_end_io+0x768/0xa70 [ 265.965133][ T6896] bio_endio+0x858/0x894 [ 265.965140][ T6896] submit_bio_noacct+0x158/0x177c [ 265.965146][ T6896] submit_bio+0x3b4/0x550 [ 265.965151][ T6896] f2fs_submit_write_bio+0x13c/0x324 [ 265.965157][ T6896] __submit_merged_bio+0x254/0x704 [ 265.965163][ T6896] __submit_merged_write_cond+0x23c/0x4ac [ 265.965169][ T6896] f2fs_write_data_pages+0x1d28/0x2634 [ 265.965175][ T6896] do_writepages+0x270/0x468 [ 265.965183][ T6896] filemap_fdatawrite+0x14c/0x1f4 [ 265.965189][ T6896] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 265.965195][ T6896] f2fs_write_checkpoint+0x690/0x16a0 [ 265.965200][ T6896] kill_f2fs_super+0x21c/0x584 [ 265.965206][ T6896] deactivate_locked_super+0xc4/0x12c [ 265.965212][ T6896] deactivate_super+0xe0/0x100 [ 265.965216][ T6896] cleanup_mnt+0x31c/0x3ac [ 265.965222][ T6896] __cleanup_mnt+0x20/0x30 [ 265.965227][ T6896] task_work_run+0x1dc/0x260 [ 265.965233][ T6896] exit_to_user_mode_loop+0xfc/0x168 [ 265.965240][ T6896] el0_svc+0x170/0x254 [ 265.965248][ T6896] el0t_64_sync_handler+0x84/0x12c [ 265.965255][ T6896] el0t_64_sync+0x198/0x19c [ 265.965996][ T6896] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 266.088962][ T6574] Bluetooth: hci5: command tx timeout [ 266.478905][ T6805] bio_check_eod: 260091 callbacks suppressed [ 266.478967][ T6805] syz.2.22: attempt to access beyond end of device [ 266.478967][ T6805] loop2: rw=524288, sector=88712, nr_sectors = 8 limit=40427 [ 266.479008][ T6851] syz.3.26: attempt to access beyond end of device [ 266.479008][ T6851] loop3: rw=0, sector=87264, nr_sectors = 8 limit=40427 [ 266.479032][ T6805] syz.2.22: attempt to access beyond end of device [ 266.479032][ T6805] loop2: rw=524288, sector=88720, nr_sectors = 8 limit=40427 [ 266.479078][ T6805] syz.2.22: attempt to access beyond end of device [ 266.479078][ T6805] loop2: rw=524288, sector=88728, nr_sectors = 8 limit=40427 [ 266.479117][ T6805] syz.2.22: attempt to access beyond end of device [ 266.479117][ T6805] loop2: rw=524288, sector=88736, nr_sectors = 8 limit=40427 [ 266.479150][ T6805] syz.2.22: attempt to access beyond end of device [ 266.479150][ T6805] loop2: rw=524288, sector=88744, nr_sectors = 8 limit=40427 [ 266.479181][ T6805] syz.2.22: attempt to access beyond end of device [ 266.479181][ T6805] loop2: rw=524288, sector=88752, nr_sectors = 8 limit=40427 [ 266.479210][ T6805] syz.2.22: attempt to access beyond end of device [ 266.479210][ T6805] loop2: rw=524288, sector=88760, nr_sectors = 8 limit=40427 [ 266.479237][ T6805] syz.2.22: attempt to access beyond end of device [ 266.479237][ T6805] loop2: rw=524288, sector=88768, nr_sectors = 8 limit=40427 [ 266.479264][ T6805] syz.2.22: attempt to access beyond end of device [ 266.479264][ T6805] loop2: rw=524288, sector=88776, nr_sectors = 8 limit=40427 [ 266.577728][ T6946] loop5: detected capacity change from 0 to 40427 [ 266.621585][ T6946] F2FS-fs (loop5): build fault injection rate: 771 [ 266.622303][ T6946] F2FS-fs (loop5): invalid crc value [ 266.713298][ T6946] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 266.719748][ T6946] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 266.866933][ T6896] CPU: 0 UID: 0 PID: 6896 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 266.866960][ T6896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 266.866968][ T6896] Call trace: [ 266.866972][ T6896] show_stack+0x2c/0x3c (C) [ 266.866986][ T6896] __dump_stack+0x30/0x40 [ 266.866993][ T6896] dump_stack_lvl+0xd8/0x12c [ 266.866999][ T6896] dump_stack+0x1c/0x28 [ 266.867004][ T6896] f2fs_handle_critical_error+0x34c/0x4b8 [ 266.867014][ T6896] f2fs_stop_checkpoint+0x5c/0x70 [ 266.867020][ T6896] f2fs_write_end_io+0x768/0xa70 [ 266.867028][ T6896] bio_endio+0x858/0x894 [ 266.867036][ T6896] submit_bio_noacct+0x158/0x177c [ 266.867041][ T6896] submit_bio+0x3b4/0x550 [ 266.867047][ T6896] f2fs_submit_write_bio+0x13c/0x324 [ 266.867053][ T6896] __submit_merged_bio+0x254/0x704 [ 266.867059][ T6896] __submit_merged_write_cond+0x23c/0x4ac [ 266.867065][ T6896] f2fs_write_data_pages+0x1d28/0x2634 [ 266.867072][ T6896] do_writepages+0x270/0x468 [ 266.867080][ T6896] filemap_fdatawrite+0x14c/0x1f4 [ 266.867087][ T6896] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 266.867093][ T6896] f2fs_write_checkpoint+0x690/0x16a0 [ 266.867098][ T6896] kill_f2fs_super+0x21c/0x584 [ 266.867105][ T6896] deactivate_locked_super+0xc4/0x12c [ 266.867110][ T6896] deactivate_super+0xe0/0x100 [ 266.867115][ T6896] cleanup_mnt+0x31c/0x3ac [ 266.867121][ T6896] __cleanup_mnt+0x20/0x30 [ 266.867126][ T6896] task_work_run+0x1dc/0x260 [ 266.867133][ T6896] exit_to_user_mode_loop+0xfc/0x168 [ 266.867140][ T6896] el0_svc+0x170/0x254 [ 266.867149][ T6896] el0t_64_sync_handler+0x84/0x12c [ 266.867156][ T6896] el0t_64_sync+0x198/0x19c [ 266.867186][ T6896] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 267.624963][ T6952] loop5: detected capacity change from 0 to 40427 [ 267.634375][ T6952] F2FS-fs (loop5): build fault injection rate: 771 [ 267.651288][ T6952] F2FS-fs (loop5): invalid crc value [ 267.740006][ T6952] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 267.779012][ T6952] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 268.175545][ T6574] Bluetooth: hci5: command tx timeout [ 270.249145][ T6574] Bluetooth: hci5: command tx timeout [ 271.488942][ T6805] bio_check_eod: 322602 callbacks suppressed [ 271.490111][ T6805] syz.2.22: attempt to access beyond end of device [ 271.490111][ T6805] loop2: rw=0, sector=88248, nr_sectors = 8 limit=40427 [ 271.492476][ T6805] syz.2.22: attempt to access beyond end of device [ 271.492476][ T6805] loop2: rw=0, sector=88256, nr_sectors = 8 limit=40427 [ 271.494584][ T6805] syz.2.22: attempt to access beyond end of device [ 271.494584][ T6805] loop2: rw=0, sector=88264, nr_sectors = 8 limit=40427 [ 271.496738][ T6739] syz.0.19: attempt to access beyond end of device [ 271.496738][ T6739] loop0: rw=0, sector=86088, nr_sectors = 8 limit=40427 [ 271.505543][ T6889] syz.4.27: attempt to access beyond end of device [ 271.505543][ T6889] loop4: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 271.506882][ T6805] syz.2.22: attempt to access beyond end of device [ 271.506882][ T6805] loop2: rw=0, sector=88272, nr_sectors = 8 limit=40427 [ 271.506917][ T6805] syz.2.22: attempt to access beyond end of device [ 271.506917][ T6805] loop2: rw=0, sector=88280, nr_sectors = 8 limit=40427 [ 271.506949][ T6805] syz.2.22: attempt to access beyond end of device [ 271.506949][ T6805] loop2: rw=0, sector=88288, nr_sectors = 8 limit=40427 [ 271.506982][ T6805] syz.2.22: attempt to access beyond end of device [ 271.506982][ T6805] loop2: rw=0, sector=88296, nr_sectors = 8 limit=40427 [ 271.507007][ T6805] syz.2.22: attempt to access beyond end of device [ 271.507007][ T6805] loop2: rw=0, sector=88304, nr_sectors = 8 limit=40427 [ 276.498944][ T6767] bio_check_eod: 325363 callbacks suppressed [ 276.499661][ T6767] syz.1.20: attempt to access beyond end of device [ 276.499661][ T6767] loop1: rw=0, sector=86728, nr_sectors = 8 limit=40427 [ 276.499725][ T6767] syz.1.20: attempt to access beyond end of device [ 276.499725][ T6767] loop1: rw=0, sector=86736, nr_sectors = 8 limit=40427 [ 276.499761][ T6767] syz.1.20: attempt to access beyond end of device [ 276.499761][ T6767] loop1: rw=0, sector=86744, nr_sectors = 8 limit=40427 [ 276.499791][ T6767] syz.1.20: attempt to access beyond end of device [ 276.499791][ T6767] loop1: rw=0, sector=86752, nr_sectors = 8 limit=40427 [ 276.499819][ T6767] syz.1.20: attempt to access beyond end of device [ 276.499819][ T6767] loop1: rw=0, sector=86760, nr_sectors = 8 limit=40427 [ 276.499846][ T6767] syz.1.20: attempt to access beyond end of device [ 276.499846][ T6767] loop1: rw=0, sector=86768, nr_sectors = 8 limit=40427 [ 276.499873][ T6767] syz.1.20: attempt to access beyond end of device [ 276.499873][ T6767] loop1: rw=0, sector=86776, nr_sectors = 8 limit=40427 [ 276.499899][ T6767] syz.1.20: attempt to access beyond end of device [ 276.499899][ T6767] loop1: rw=0, sector=86784, nr_sectors = 8 limit=40427 [ 276.499927][ T6767] syz.1.20: attempt to access beyond end of device [ 276.499927][ T6767] loop1: rw=0, sector=86792, nr_sectors = 8 limit=40427 [ 276.499960][ T6767] syz.1.20: attempt to access beyond end of device [ 276.499960][ T6767] loop1: rw=0, sector=86800, nr_sectors = 8 limit=40427 [ 281.508823][ T6739] bio_check_eod: 325142 callbacks suppressed [ 281.512419][ T6805] syz.2.22: attempt to access beyond end of device [ 281.512419][ T6805] loop2: rw=0, sector=87912, nr_sectors = 8 limit=40427 [ 281.512478][ T6805] syz.2.22: attempt to access beyond end of device [ 281.512478][ T6805] loop2: rw=0, sector=87920, nr_sectors = 8 limit=40427 [ 281.512519][ T6805] syz.2.22: attempt to access beyond end of device [ 281.512519][ T6805] loop2: rw=0, sector=87928, nr_sectors = 8 limit=40427 [ 281.512550][ T6805] syz.2.22: attempt to access beyond end of device [ 281.512550][ T6805] loop2: rw=0, sector=87936, nr_sectors = 8 limit=40427 [ 281.512578][ T6805] syz.2.22: attempt to access beyond end of device [ 281.512578][ T6805] loop2: rw=0, sector=87944, nr_sectors = 8 limit=40427 [ 281.512606][ T6805] syz.2.22: attempt to access beyond end of device [ 281.512606][ T6805] loop2: rw=0, sector=87952, nr_sectors = 8 limit=40427 [ 281.512637][ T6805] syz.2.22: attempt to access beyond end of device [ 281.512637][ T6805] loop2: rw=0, sector=87960, nr_sectors = 8 limit=40427 [ 281.512669][ T6805] syz.2.22: attempt to access beyond end of device [ 281.512669][ T6805] loop2: rw=0, sector=87968, nr_sectors = 8 limit=40427 [ 281.512695][ T6805] syz.2.22: attempt to access beyond end of device [ 281.512695][ T6805] loop2: rw=0, sector=87976, nr_sectors = 8 limit=40427 [ 281.513462][ T6739] syz.0.19: attempt to access beyond end of device [ 281.513462][ T6739] loop0: rw=0, sector=88456, nr_sectors = 8 limit=40427 [ 283.481209][ T6122] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 283.482867][ T6122] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 283.484325][ T6122] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 283.486106][ T6122] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 283.487779][ T6122] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 284.122888][ T6958] chnl_net:caif_netlink_parms(): no params data found [ 284.552713][ T6958] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.552760][ T6958] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.552832][ T6958] bridge_slave_0: entered allmulticast mode [ 284.553339][ T6958] bridge_slave_0: entered promiscuous mode [ 284.554117][ T6958] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.554132][ T6958] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.554181][ T6958] bridge_slave_1: entered allmulticast mode [ 284.554589][ T6958] bridge_slave_1: entered promiscuous mode [ 284.719703][ T6958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.720785][ T6958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.831256][ T6958] team0: Port device team_slave_0 added [ 284.833175][ T6958] team0: Port device team_slave_1 added [ 285.013085][ T6958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.014325][ T6958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.022389][ T6958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.026061][ T6958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.027430][ T6958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.034682][ T6958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.423430][ T6958] hsr_slave_0: entered promiscuous mode [ 285.442844][ T6958] hsr_slave_1: entered promiscuous mode [ 285.443081][ T6958] debugfs: 'hsr0' already exists in 'hsr' [ 285.443097][ T6958] Cannot create hsr debugfs directory [ 285.528965][ T6574] Bluetooth: hci6: command tx timeout [ 285.574248][ T6958] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 285.590039][ T6958] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 285.613771][ T6958] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 285.615950][ T6958] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 285.737255][ T6958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.752050][ T6958] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.819319][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.819357][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.819854][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.819885][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.856991][ T6958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.131650][ T6958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.387696][ T6958] veth0_vlan: entered promiscuous mode [ 286.416579][ T6958] veth1_vlan: entered promiscuous mode [ 286.452183][ T6958] veth0_macvtap: entered promiscuous mode [ 286.454615][ T6958] veth1_macvtap: entered promiscuous mode [ 286.463617][ T6958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.473035][ T6958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.518877][ T6805] bio_check_eod: 283242 callbacks suppressed [ 286.521419][ T6805] syz.2.22: attempt to access beyond end of device [ 286.521419][ T6805] loop2: rw=0, sector=87688, nr_sectors = 8 limit=40427 [ 286.523694][ T6805] syz.2.22: attempt to access beyond end of device [ 286.523694][ T6805] loop2: rw=0, sector=87696, nr_sectors = 8 limit=40427 [ 286.525948][ T6805] syz.2.22: attempt to access beyond end of device [ 286.525948][ T6805] loop2: rw=0, sector=87704, nr_sectors = 8 limit=40427 [ 286.533609][ T6739] syz.0.19: attempt to access beyond end of device [ 286.533609][ T6739] loop0: rw=0, sector=86464, nr_sectors = 8 limit=40427 [ 286.536980][ T42] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.537033][ T42] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.537048][ T42] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.537062][ T42] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.539896][ T6805] syz.2.22: attempt to access beyond end of device [ 286.539896][ T6805] loop2: rw=0, sector=87712, nr_sectors = 8 limit=40427 [ 286.539948][ T6805] syz.2.22: attempt to access beyond end of device [ 286.539948][ T6805] loop2: rw=0, sector=87720, nr_sectors = 8 limit=40427 [ 286.539977][ T6805] syz.2.22: attempt to access beyond end of device [ 286.539977][ T6805] loop2: rw=0, sector=87728, nr_sectors = 8 limit=40427 [ 286.540003][ T6805] syz.2.22: attempt to access beyond end of device [ 286.540003][ T6805] loop2: rw=0, sector=87736, nr_sectors = 8 limit=40427 [ 286.540028][ T6805] syz.2.22: attempt to access beyond end of device [ 286.540028][ T6805] loop2: rw=0, sector=87744, nr_sectors = 8 limit=40427 [ 286.540054][ T6805] syz.2.22: attempt to access beyond end of device [ 286.540054][ T6805] loop2: rw=0, sector=87752, nr_sectors = 8 limit=40427 [ 286.584490][ T2225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.585802][ T2225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.653748][ T751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.653795][ T751] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:04:46 executed programs: 17 [ 287.317456][ T6989] loop6: detected capacity change from 0 to 40427 [ 287.401510][ T6989] F2FS-fs (loop6): build fault injection rate: 771 [ 287.412848][ T6989] F2FS-fs (loop6): invalid crc value [ 287.539885][ T6989] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 287.543809][ T6989] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 287.615118][ T6574] Bluetooth: hci6: command tx timeout [ 287.729219][ T6958] CPU: 1 UID: 0 PID: 6958 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 287.729240][ T6958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 287.729245][ T6958] Call trace: [ 287.729248][ T6958] show_stack+0x2c/0x3c (C) [ 287.729265][ T6958] __dump_stack+0x30/0x40 [ 287.729276][ T6958] dump_stack_lvl+0xd8/0x12c [ 287.729284][ T6958] dump_stack+0x1c/0x28 [ 287.729290][ T6958] f2fs_handle_critical_error+0x34c/0x4b8 [ 287.729301][ T6958] f2fs_stop_checkpoint+0x5c/0x70 [ 287.729308][ T6958] f2fs_write_end_io+0x768/0xa70 [ 287.729316][ T6958] bio_endio+0x858/0x894 [ 287.729324][ T6958] submit_bio_noacct+0x158/0x177c [ 287.729331][ T6958] submit_bio+0x3b4/0x550 [ 287.729336][ T6958] f2fs_submit_write_bio+0x13c/0x324 [ 287.729342][ T6958] __submit_merged_bio+0x254/0x704 [ 287.729348][ T6958] __submit_merged_write_cond+0x23c/0x4ac [ 287.729354][ T6958] f2fs_write_data_pages+0x1d28/0x2634 [ 287.729361][ T6958] do_writepages+0x270/0x468 [ 287.729369][ T6958] filemap_fdatawrite+0x14c/0x1f4 [ 287.729377][ T6958] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 287.729383][ T6958] f2fs_write_checkpoint+0x690/0x16a0 [ 287.729388][ T6958] kill_f2fs_super+0x21c/0x584 [ 287.729395][ T6958] deactivate_locked_super+0xc4/0x12c [ 287.729401][ T6958] deactivate_super+0xe0/0x100 [ 287.729406][ T6958] cleanup_mnt+0x31c/0x3ac [ 287.729411][ T6958] __cleanup_mnt+0x20/0x30 [ 287.729417][ T6958] task_work_run+0x1dc/0x260 [ 287.729423][ T6958] exit_to_user_mode_loop+0xfc/0x168 [ 287.729430][ T6958] el0_svc+0x170/0x254 [ 287.729439][ T6958] el0t_64_sync_handler+0x84/0x12c [ 287.729445][ T6958] el0t_64_sync+0x198/0x19c [ 287.729476][ T6958] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 288.674798][ T6995] loop6: detected capacity change from 0 to 40427 [ 288.702725][ T6995] F2FS-fs (loop6): build fault injection rate: 771 [ 288.715635][ T6995] F2FS-fs (loop6): invalid crc value [ 288.816989][ T6995] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 288.831504][ T6995] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 288.997801][ T6958] CPU: 0 UID: 0 PID: 6958 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 288.997823][ T6958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 288.997828][ T6958] Call trace: [ 288.997832][ T6958] show_stack+0x2c/0x3c (C) [ 288.997848][ T6958] __dump_stack+0x30/0x40 [ 288.997858][ T6958] dump_stack_lvl+0xd8/0x12c [ 288.997864][ T6958] dump_stack+0x1c/0x28 [ 288.997869][ T6958] f2fs_handle_critical_error+0x34c/0x4b8 [ 288.997877][ T6958] f2fs_stop_checkpoint+0x5c/0x70 [ 288.997883][ T6958] f2fs_write_end_io+0x768/0xa70 [ 288.997889][ T6958] bio_endio+0x858/0x894 [ 288.997896][ T6958] submit_bio_noacct+0x158/0x177c [ 288.997902][ T6958] submit_bio+0x3b4/0x550 [ 288.997907][ T6958] f2fs_submit_write_bio+0x13c/0x324 [ 288.997913][ T6958] __submit_merged_bio+0x254/0x704 [ 288.997925][ T6958] __submit_merged_write_cond+0x23c/0x4ac [ 288.997933][ T6958] f2fs_write_data_pages+0x1d28/0x2634 [ 288.997941][ T6958] do_writepages+0x270/0x468 [ 288.997949][ T6958] filemap_fdatawrite+0x14c/0x1f4 [ 288.997957][ T6958] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 288.997963][ T6958] f2fs_write_checkpoint+0x690/0x16a0 [ 288.997968][ T6958] kill_f2fs_super+0x21c/0x584 [ 288.997974][ T6958] deactivate_locked_super+0xc4/0x12c [ 288.997979][ T6958] deactivate_super+0xe0/0x100 [ 288.997984][ T6958] cleanup_mnt+0x31c/0x3ac [ 288.997989][ T6958] __cleanup_mnt+0x20/0x30 [ 288.997994][ T6958] task_work_run+0x1dc/0x260 [ 288.998000][ T6958] exit_to_user_mode_loop+0xfc/0x168 [ 288.998007][ T6958] el0_svc+0x170/0x254 [ 288.998015][ T6958] el0t_64_sync_handler+0x84/0x12c [ 288.998021][ T6958] el0t_64_sync+0x198/0x19c [ 288.998050][ T6958] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 289.694052][ T6574] Bluetooth: hci6: command tx timeout [ 289.791680][ T7001] loop6: detected capacity change from 0 to 40427 [ 289.818875][ T7001] F2FS-fs (loop6): build fault injection rate: 771 [ 289.833744][ T7001] F2FS-fs (loop6): invalid crc value [ 289.912748][ T7001] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 289.927373][ T7001] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 290.059161][ T6958] CPU: 1 UID: 0 PID: 6958 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 290.059181][ T6958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 290.059186][ T6958] Call trace: [ 290.059190][ T6958] show_stack+0x2c/0x3c (C) [ 290.059207][ T6958] __dump_stack+0x30/0x40 [ 290.059215][ T6958] dump_stack_lvl+0xd8/0x12c [ 290.059220][ T6958] dump_stack+0x1c/0x28 [ 290.059226][ T6958] f2fs_handle_critical_error+0x34c/0x4b8 [ 290.059237][ T6958] f2fs_stop_checkpoint+0x5c/0x70 [ 290.059243][ T6958] f2fs_write_end_io+0x768/0xa70 [ 290.059251][ T6958] bio_endio+0x858/0x894 [ 290.059259][ T6958] submit_bio_noacct+0x158/0x177c [ 290.059265][ T6958] submit_bio+0x3b4/0x550 [ 290.059271][ T6958] f2fs_submit_write_bio+0x13c/0x324 [ 290.059277][ T6958] __submit_merged_bio+0x254/0x704 [ 290.059283][ T6958] __submit_merged_write_cond+0x23c/0x4ac [ 290.059289][ T6958] f2fs_write_data_pages+0x1d28/0x2634 [ 290.059296][ T6958] do_writepages+0x270/0x468 [ 290.059304][ T6958] filemap_fdatawrite+0x14c/0x1f4 [ 290.059312][ T6958] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 290.059317][ T6958] f2fs_write_checkpoint+0x690/0x16a0 [ 290.059323][ T6958] kill_f2fs_super+0x21c/0x584 [ 290.059329][ T6958] deactivate_locked_super+0xc4/0x12c [ 290.059335][ T6958] deactivate_super+0xe0/0x100 [ 290.059339][ T6958] cleanup_mnt+0x31c/0x3ac [ 290.059345][ T6958] __cleanup_mnt+0x20/0x30 [ 290.059350][ T6958] task_work_run+0x1dc/0x260 [ 290.059357][ T6958] exit_to_user_mode_loop+0xfc/0x168 [ 290.059364][ T6958] el0_svc+0x170/0x254 [ 290.059372][ T6958] el0t_64_sync_handler+0x84/0x12c [ 290.059379][ T6958] el0t_64_sync+0x198/0x19c [ 290.059408][ T6958] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 290.377743][ T6952] F2FS-fs (loop5): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 290.605249][ T7007] loop6: detected capacity change from 0 to 40427 [ 290.639345][ T7007] F2FS-fs (loop6): build fault injection rate: 771 [ 290.641391][ T7007] F2FS-fs (loop6): invalid crc value [ 290.750018][ T7007] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 290.762126][ T7007] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 291.530217][ T6851] bio_check_eod: 275634 callbacks suppressed [ 291.531466][ T6851] syz.3.26: attempt to access beyond end of device [ 291.531466][ T6851] loop3: rw=0, sector=88544, nr_sectors = 8 limit=40427 [ 291.532652][ T6851] syz.3.26: attempt to access beyond end of device [ 291.532652][ T6851] loop3: rw=0, sector=88552, nr_sectors = 8 limit=40427 [ 291.533746][ T6851] syz.3.26: attempt to access beyond end of device [ 291.533746][ T6851] loop3: rw=0, sector=88560, nr_sectors = 8 limit=40427 [ 291.534749][ T6851] syz.3.26: attempt to access beyond end of device [ 291.534749][ T6851] loop3: rw=0, sector=88568, nr_sectors = 8 limit=40427 [ 291.535676][ T6851] syz.3.26: attempt to access beyond end of device [ 291.535676][ T6851] loop3: rw=0, sector=88576, nr_sectors = 8 limit=40427 [ 291.536536][ T6851] syz.3.26: attempt to access beyond end of device [ 291.536536][ T6851] loop3: rw=0, sector=88584, nr_sectors = 8 limit=40427 [ 291.537325][ T6851] syz.3.26: attempt to access beyond end of device [ 291.537325][ T6851] loop3: rw=0, sector=88592, nr_sectors = 8 limit=40427 [ 291.538077][ T6851] syz.3.26: attempt to access beyond end of device [ 291.538077][ T6851] loop3: rw=0, sector=88600, nr_sectors = 8 limit=40427 [ 291.539353][ T6889] syz.4.27: attempt to access beyond end of device [ 291.539353][ T6889] loop4: rw=0, sector=86176, nr_sectors = 8 limit=40427 [ 291.539422][ T6889] syz.4.27: attempt to access beyond end of device [ 291.539422][ T6889] loop4: rw=0, sector=86184, nr_sectors = 8 limit=40427 [ 291.782801][ T6574] Bluetooth: hci6: command tx timeout [ 296.538885][ T6805] bio_check_eod: 327281 callbacks suppressed [ 296.539948][ T6805] syz.2.22: attempt to access beyond end of device [ 296.539948][ T6805] loop2: rw=0, sector=89280, nr_sectors = 8 limit=40427 [ 296.542163][ T6805] syz.2.22: attempt to access beyond end of device [ 296.542163][ T6805] loop2: rw=0, sector=89288, nr_sectors = 8 limit=40427 [ 296.544662][ T6805] syz.2.22: attempt to access beyond end of device [ 296.544662][ T6805] loop2: rw=0, sector=89296, nr_sectors = 8 limit=40427 [ 296.546695][ T6805] syz.2.22: attempt to access beyond end of device [ 296.546695][ T6805] loop2: rw=0, sector=89304, nr_sectors = 8 limit=40427 [ 296.557057][ T6805] syz.2.22: attempt to access beyond end of device [ 296.557057][ T6805] loop2: rw=0, sector=89312, nr_sectors = 8 limit=40427 [ 296.559268][ T6805] syz.2.22: attempt to access beyond end of device [ 296.559268][ T6805] loop2: rw=0, sector=89320, nr_sectors = 8 limit=40427 [ 296.561370][ T6805] syz.2.22: attempt to access beyond end of device [ 296.561370][ T6805] loop2: rw=0, sector=89328, nr_sectors = 8 limit=40427 [ 296.563503][ T6805] syz.2.22: attempt to access beyond end of device [ 296.563503][ T6805] loop2: rw=0, sector=89336, nr_sectors = 8 limit=40427 [ 296.565636][ T6805] syz.2.22: attempt to access beyond end of device [ 296.565636][ T6805] loop2: rw=0, sector=89344, nr_sectors = 8 limit=40427 [ 296.566259][ T6889] syz.4.27: attempt to access beyond end of device [ 296.566259][ T6889] loop4: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 296.971869][ T6122] Bluetooth: hci0: command 0x0406 tx timeout [ 301.552577][ T6851] bio_check_eod: 315645 callbacks suppressed [ 301.552629][ T6851] syz.3.26: attempt to access beyond end of device [ 301.552629][ T6851] loop3: rw=524288, sector=88344, nr_sectors = 8 limit=40427 [ 301.552674][ T6851] syz.3.26: attempt to access beyond end of device [ 301.552674][ T6851] loop3: rw=524288, sector=88352, nr_sectors = 8 limit=40427 [ 301.552714][ T6851] syz.3.26: attempt to access beyond end of device [ 301.552714][ T6851] loop3: rw=524288, sector=88360, nr_sectors = 8 limit=40427 [ 301.552746][ T6851] syz.3.26: attempt to access beyond end of device [ 301.552746][ T6851] loop3: rw=524288, sector=88368, nr_sectors = 8 limit=40427 [ 301.552776][ T6851] syz.3.26: attempt to access beyond end of device [ 301.552776][ T6851] loop3: rw=524288, sector=88376, nr_sectors = 8 limit=40427 [ 301.552804][ T6851] syz.3.26: attempt to access beyond end of device [ 301.552804][ T6851] loop3: rw=524288, sector=88384, nr_sectors = 8 limit=40427 [ 301.552831][ T6851] syz.3.26: attempt to access beyond end of device [ 301.552831][ T6851] loop3: rw=524288, sector=88392, nr_sectors = 8 limit=40427 [ 301.552857][ T6851] syz.3.26: attempt to access beyond end of device [ 301.552857][ T6851] loop3: rw=524288, sector=88400, nr_sectors = 8 limit=40427 [ 301.552883][ T6851] syz.3.26: attempt to access beyond end of device [ 301.552883][ T6851] loop3: rw=524288, sector=88408, nr_sectors = 8 limit=40427 [ 301.552909][ T6851] syz.3.26: attempt to access beyond end of device [ 301.552909][ T6851] loop3: rw=524288, sector=88416, nr_sectors = 8 limit=40427 [ 306.568903][ T6739] bio_check_eod: 312967 callbacks suppressed [ 306.568973][ T6739] syz.0.19: attempt to access beyond end of device [ 306.568973][ T6739] loop0: rw=524288, sector=87672, nr_sectors = 8 limit=40427 [ 306.569055][ T6739] syz.0.19: attempt to access beyond end of device [ 306.569055][ T6739] loop0: rw=524288, sector=87680, nr_sectors = 8 limit=40427 [ 306.569098][ T6739] syz.0.19: attempt to access beyond end of device [ 306.569098][ T6739] loop0: rw=524288, sector=87688, nr_sectors = 8 limit=40427 [ 306.569139][ T6739] syz.0.19: attempt to access beyond end of device [ 306.569139][ T6739] loop0: rw=524288, sector=87696, nr_sectors = 8 limit=40427 [ 306.569173][ T6739] syz.0.19: attempt to access beyond end of device [ 306.569173][ T6739] loop0: rw=524288, sector=87704, nr_sectors = 8 limit=40427 [ 306.569203][ T6739] syz.0.19: attempt to access beyond end of device [ 306.569203][ T6739] loop0: rw=524288, sector=87712, nr_sectors = 8 limit=40427 [ 306.569240][ T6739] syz.0.19: attempt to access beyond end of device [ 306.569240][ T6739] loop0: rw=524288, sector=87720, nr_sectors = 8 limit=40427 [ 306.569272][ T6739] syz.0.19: attempt to access beyond end of device [ 306.569272][ T6739] loop0: rw=524288, sector=87728, nr_sectors = 8 limit=40427 [ 306.569299][ T6739] syz.0.19: attempt to access beyond end of device [ 306.569299][ T6739] loop0: rw=524288, sector=87736, nr_sectors = 8 limit=40427 [ 306.569325][ T6739] syz.0.19: attempt to access beyond end of device [ 306.569325][ T6739] loop0: rw=524288, sector=87744, nr_sectors = 8 limit=40427 [ 306.667327][ T6122] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 306.667831][ T6122] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 306.668022][ T6122] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 306.668400][ T6122] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 306.668592][ T6122] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 307.190635][ T7014] chnl_net:caif_netlink_parms(): no params data found [ 307.235896][ T7014] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.235984][ T7014] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.236052][ T7014] bridge_slave_0: entered allmulticast mode [ 307.236499][ T7014] bridge_slave_0: entered promiscuous mode [ 307.332854][ T7014] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.332908][ T7014] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.333084][ T7014] bridge_slave_1: entered allmulticast mode [ 307.374898][ T7014] bridge_slave_1: entered promiscuous mode [ 307.497358][ T7014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.517790][ T7014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.662852][ T7014] team0: Port device team_slave_0 added [ 307.665538][ T7014] team0: Port device team_slave_1 added [ 307.764246][ T7014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.764982][ T7014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.764992][ T7014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.766799][ T7014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.766805][ T7014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.766818][ T7014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.909778][ T7014] hsr_slave_0: entered promiscuous mode [ 307.911313][ T7014] hsr_slave_1: entered promiscuous mode [ 307.912599][ T7014] debugfs: 'hsr0' already exists in 'hsr' [ 307.913521][ T7014] Cannot create hsr debugfs directory [ 308.502056][ T7014] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 308.510359][ T7014] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 308.560266][ T7014] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 308.589387][ T7014] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 308.735251][ T6122] Bluetooth: hci7: command tx timeout [ 308.813868][ T7014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.843687][ T7014] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.872769][ T6892] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.872828][ T6892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.873407][ T6892] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.873423][ T6892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.966047][ T7014] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 308.966093][ T7014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 309.329624][ T7014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.796544][ T7014] veth0_vlan: entered promiscuous mode [ 309.883744][ T7014] veth1_vlan: entered promiscuous mode [ 309.977313][ T7014] veth0_macvtap: entered promiscuous mode [ 309.978431][ T7014] veth1_macvtap: entered promiscuous mode [ 310.022537][ T7014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.023590][ T7014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.105886][ T7029] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.105957][ T7029] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.105994][ T7029] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.106013][ T7029] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.259307][ T2414] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.259357][ T2414] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.292458][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.292499][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.338596][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.340365][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:05:10 executed programs: 21 [ 310.828826][ T6122] Bluetooth: hci7: command tx timeout [ 311.284128][ T7048] loop7: detected capacity change from 0 to 40427 [ 311.330636][ T7048] F2FS-fs (loop7): build fault injection rate: 771 [ 311.352421][ T7048] F2FS-fs (loop7): invalid crc value [ 311.453797][ T7048] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 311.508994][ T7048] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 311.578864][ T6739] bio_check_eod: 289844 callbacks suppressed [ 311.578908][ T6739] syz.0.19: attempt to access beyond end of device [ 311.578908][ T6739] loop0: rw=0, sector=87680, nr_sectors = 8 limit=40427 [ 311.578948][ T6739] syz.0.19: attempt to access beyond end of device [ 311.578948][ T6739] loop0: rw=0, sector=87688, nr_sectors = 8 limit=40427 [ 311.578981][ T6739] syz.0.19: attempt to access beyond end of device [ 311.578981][ T6739] loop0: rw=0, sector=87696, nr_sectors = 8 limit=40427 [ 311.579011][ T6739] syz.0.19: attempt to access beyond end of device [ 311.579011][ T6739] loop0: rw=0, sector=87704, nr_sectors = 8 limit=40427 [ 311.579037][ T6739] syz.0.19: attempt to access beyond end of device [ 311.579037][ T6739] loop0: rw=0, sector=87712, nr_sectors = 8 limit=40427 [ 311.579063][ T6739] syz.0.19: attempt to access beyond end of device [ 311.579063][ T6739] loop0: rw=0, sector=87720, nr_sectors = 8 limit=40427 [ 311.579090][ T6739] syz.0.19: attempt to access beyond end of device [ 311.579090][ T6739] loop0: rw=0, sector=87728, nr_sectors = 8 limit=40427 [ 311.579116][ T6739] syz.0.19: attempt to access beyond end of device [ 311.579116][ T6739] loop0: rw=0, sector=87736, nr_sectors = 8 limit=40427 [ 311.579141][ T6739] syz.0.19: attempt to access beyond end of device [ 311.579141][ T6739] loop0: rw=0, sector=87744, nr_sectors = 8 limit=40427 [ 311.579166][ T6739] syz.0.19: attempt to access beyond end of device [ 311.579166][ T6739] loop0: rw=0, sector=87752, nr_sectors = 8 limit=40427 [ 311.769186][ T7014] CPU: 0 UID: 0 PID: 7014 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 311.769214][ T7014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 311.769221][ T7014] Call trace: [ 311.769225][ T7014] show_stack+0x2c/0x3c (C) [ 311.769243][ T7014] __dump_stack+0x30/0x40 [ 311.769251][ T7014] dump_stack_lvl+0xd8/0x12c [ 311.769257][ T7014] dump_stack+0x1c/0x28 [ 311.769262][ T7014] f2fs_handle_critical_error+0x34c/0x4b8 [ 311.769271][ T7014] f2fs_stop_checkpoint+0x5c/0x70 [ 311.769276][ T7014] f2fs_write_end_io+0x768/0xa70 [ 311.769283][ T7014] bio_endio+0x858/0x894 [ 311.769290][ T7014] submit_bio_noacct+0x158/0x177c [ 311.769296][ T7014] submit_bio+0x3b4/0x550 [ 311.769301][ T7014] f2fs_submit_write_bio+0x13c/0x324 [ 311.769307][ T7014] __submit_merged_bio+0x254/0x704 [ 311.769313][ T7014] __submit_merged_write_cond+0x23c/0x4ac [ 311.769318][ T7014] f2fs_write_data_pages+0x1d28/0x2634 [ 311.769325][ T7014] do_writepages+0x270/0x468 [ 311.769332][ T7014] filemap_fdatawrite+0x14c/0x1f4 [ 311.769339][ T7014] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 311.769344][ T7014] f2fs_write_checkpoint+0x690/0x16a0 [ 311.769350][ T7014] kill_f2fs_super+0x21c/0x584 [ 311.769356][ T7014] deactivate_locked_super+0xc4/0x12c [ 311.769361][ T7014] deactivate_super+0xe0/0x100 [ 311.769365][ T7014] cleanup_mnt+0x31c/0x3ac [ 311.769371][ T7014] __cleanup_mnt+0x20/0x30 [ 311.769376][ T7014] task_work_run+0x1dc/0x260 [ 311.769382][ T7014] exit_to_user_mode_loop+0xfc/0x168 [ 311.769388][ T7014] el0_svc+0x170/0x254 [ 311.769396][ T7014] el0t_64_sync_handler+0x84/0x12c [ 311.769403][ T7014] el0t_64_sync+0x198/0x19c [ 311.770137][ T7014] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 312.723335][ T7054] loop7: detected capacity change from 0 to 40427 [ 312.789005][ T7054] F2FS-fs (loop7): build fault injection rate: 771 [ 312.794285][ T7054] F2FS-fs (loop7): invalid crc value [ 312.874079][ T7054] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 312.879295][ T7054] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 312.888980][ T6122] Bluetooth: hci7: command tx timeout [ 313.231608][ T7014] CPU: 0 UID: 0 PID: 7014 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 313.231631][ T7014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 313.231637][ T7014] Call trace: [ 313.231640][ T7014] show_stack+0x2c/0x3c (C) [ 313.231658][ T7014] __dump_stack+0x30/0x40 [ 313.231671][ T7014] dump_stack_lvl+0xd8/0x12c [ 313.231678][ T7014] dump_stack+0x1c/0x28 [ 313.231684][ T7014] f2fs_handle_critical_error+0x34c/0x4b8 [ 313.231693][ T7014] f2fs_stop_checkpoint+0x5c/0x70 [ 313.231699][ T7014] f2fs_write_end_io+0x768/0xa70 [ 313.231706][ T7014] bio_endio+0x858/0x894 [ 313.231714][ T7014] submit_bio_noacct+0x158/0x177c [ 313.231719][ T7014] submit_bio+0x3b4/0x550 [ 313.231724][ T7014] f2fs_submit_write_bio+0x13c/0x324 [ 313.231731][ T7014] __submit_merged_bio+0x254/0x704 [ 313.231737][ T7014] __submit_merged_write_cond+0x23c/0x4ac [ 313.231743][ T7014] f2fs_write_data_pages+0x1d28/0x2634 [ 313.231749][ T7014] do_writepages+0x270/0x468 [ 313.231757][ T7014] filemap_fdatawrite+0x14c/0x1f4 [ 313.231764][ T7014] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 313.231769][ T7014] f2fs_write_checkpoint+0x690/0x16a0 [ 313.231775][ T7014] kill_f2fs_super+0x21c/0x584 [ 313.231781][ T7014] deactivate_locked_super+0xc4/0x12c [ 313.231787][ T7014] deactivate_super+0xe0/0x100 [ 313.231792][ T7014] cleanup_mnt+0x31c/0x3ac [ 313.231798][ T7014] __cleanup_mnt+0x20/0x30 [ 313.231803][ T7014] task_work_run+0x1dc/0x260 [ 313.231810][ T7014] exit_to_user_mode_loop+0xfc/0x168 [ 313.231817][ T7014] el0_svc+0x170/0x254 [ 313.231825][ T7014] el0t_64_sync_handler+0x84/0x12c [ 313.231832][ T7014] el0t_64_sync+0x198/0x19c [ 313.236474][ T7014] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 314.580163][ T7060] loop7: detected capacity change from 0 to 40427 [ 314.618912][ T7060] F2FS-fs (loop7): build fault injection rate: 771 [ 314.689684][ T7060] F2FS-fs (loop7): invalid crc value [ 314.709881][ T7060] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 314.738949][ T7060] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 314.970029][ T6122] Bluetooth: hci7: command tx timeout [ 315.021284][ T7014] CPU: 0 UID: 0 PID: 7014 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 315.021303][ T7014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 315.021308][ T7014] Call trace: [ 315.021311][ T7014] show_stack+0x2c/0x3c (C) [ 315.021327][ T7014] __dump_stack+0x30/0x40 [ 315.021337][ T7014] dump_stack_lvl+0xd8/0x12c [ 315.021344][ T7014] dump_stack+0x1c/0x28 [ 315.021349][ T7014] f2fs_handle_critical_error+0x34c/0x4b8 [ 315.021357][ T7014] f2fs_stop_checkpoint+0x5c/0x70 [ 315.021363][ T7014] f2fs_write_end_io+0x768/0xa70 [ 315.021369][ T7014] bio_endio+0x858/0x894 [ 315.021376][ T7014] submit_bio_noacct+0x158/0x177c [ 315.021382][ T7014] submit_bio+0x3b4/0x550 [ 315.021387][ T7014] f2fs_submit_write_bio+0x13c/0x324 [ 315.021393][ T7014] __submit_merged_bio+0x254/0x704 [ 315.021399][ T7014] __submit_merged_write_cond+0x23c/0x4ac [ 315.021405][ T7014] f2fs_write_data_pages+0x1d28/0x2634 [ 315.021411][ T7014] do_writepages+0x270/0x468 [ 315.021419][ T7014] filemap_fdatawrite+0x14c/0x1f4 [ 315.021426][ T7014] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 315.021431][ T7014] f2fs_write_checkpoint+0x690/0x16a0 [ 315.021436][ T7014] kill_f2fs_super+0x21c/0x584 [ 315.021442][ T7014] deactivate_locked_super+0xc4/0x12c [ 315.021448][ T7014] deactivate_super+0xe0/0x100 [ 315.021452][ T7014] cleanup_mnt+0x31c/0x3ac [ 315.021457][ T7014] __cleanup_mnt+0x20/0x30 [ 315.021462][ T7014] task_work_run+0x1dc/0x260 [ 315.021468][ T7014] exit_to_user_mode_loop+0xfc/0x168 [ 315.021475][ T7014] el0_svc+0x170/0x254 [ 315.021483][ T7014] el0t_64_sync_handler+0x84/0x12c [ 315.021489][ T7014] el0t_64_sync+0x198/0x19c [ 315.021516][ T7014] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 316.192170][ T7066] loop7: detected capacity change from 0 to 40427 [ 316.210199][ T7066] F2FS-fs (loop7): build fault injection rate: 771 [ 316.212206][ T7066] F2FS-fs (loop7): invalid crc value [ 316.309886][ T7066] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 316.359229][ T7066] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 316.600256][ T6952] bio_check_eod: 268835 callbacks suppressed [ 316.600314][ T6952] syz.5.31: attempt to access beyond end of device [ 316.600314][ T6952] loop5: rw=524288, sector=87880, nr_sectors = 8 limit=40427 [ 316.600365][ T6952] syz.5.31: attempt to access beyond end of device [ 316.600365][ T6952] loop5: rw=524288, sector=87888, nr_sectors = 8 limit=40427 [ 316.600393][ T6952] syz.5.31: attempt to access beyond end of device [ 316.600393][ T6952] loop5: rw=524288, sector=87896, nr_sectors = 8 limit=40427 [ 316.600419][ T6952] syz.5.31: attempt to access beyond end of device [ 316.600419][ T6952] loop5: rw=524288, sector=87904, nr_sectors = 8 limit=40427 [ 316.600443][ T6952] syz.5.31: attempt to access beyond end of device [ 316.600443][ T6952] loop5: rw=524288, sector=87912, nr_sectors = 8 limit=40427 [ 316.600466][ T6952] syz.5.31: attempt to access beyond end of device [ 316.600466][ T6952] loop5: rw=524288, sector=87920, nr_sectors = 8 limit=40427 [ 316.600494][ T6952] syz.5.31: attempt to access beyond end of device [ 316.600494][ T6952] loop5: rw=524288, sector=87928, nr_sectors = 8 limit=40427 [ 316.600516][ T6952] syz.5.31: attempt to access beyond end of device [ 316.600516][ T6952] loop5: rw=524288, sector=87936, nr_sectors = 8 limit=40427 [ 316.600538][ T6952] syz.5.31: attempt to access beyond end of device [ 316.600538][ T6952] loop5: rw=524288, sector=87944, nr_sectors = 8 limit=40427 [ 316.600560][ T6952] syz.5.31: attempt to access beyond end of device [ 316.600560][ T6952] loop5: rw=524288, sector=87952, nr_sectors = 8 limit=40427 [ 317.220720][ T7007] F2FS-fs (loop6): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 317.452700][ T6574] Bluetooth: hci1: command 0x0406 tx timeout [ 321.612397][ T6767] bio_check_eod: 323103 callbacks suppressed [ 321.612462][ T6767] syz.1.20: attempt to access beyond end of device [ 321.612462][ T6767] loop1: rw=524288, sector=89184, nr_sectors = 8 limit=40427 [ 321.612529][ T6767] syz.1.20: attempt to access beyond end of device [ 321.612529][ T6767] loop1: rw=524288, sector=89192, nr_sectors = 8 limit=40427 [ 321.612573][ T6767] syz.1.20: attempt to access beyond end of device [ 321.612573][ T6767] loop1: rw=524288, sector=89200, nr_sectors = 8 limit=40427 [ 321.612608][ T6767] syz.1.20: attempt to access beyond end of device [ 321.612608][ T6767] loop1: rw=524288, sector=89208, nr_sectors = 8 limit=40427 [ 321.612639][ T6767] syz.1.20: attempt to access beyond end of device [ 321.612639][ T6767] loop1: rw=524288, sector=89216, nr_sectors = 8 limit=40427 [ 321.612667][ T6767] syz.1.20: attempt to access beyond end of device [ 321.612667][ T6767] loop1: rw=524288, sector=89224, nr_sectors = 8 limit=40427 [ 321.612695][ T6767] syz.1.20: attempt to access beyond end of device [ 321.612695][ T6767] loop1: rw=524288, sector=89232, nr_sectors = 8 limit=40427 [ 321.612722][ T6767] syz.1.20: attempt to access beyond end of device [ 321.612722][ T6767] loop1: rw=524288, sector=89240, nr_sectors = 8 limit=40427 [ 321.612748][ T6767] syz.1.20: attempt to access beyond end of device [ 321.612748][ T6767] loop1: rw=524288, sector=89248, nr_sectors = 8 limit=40427 [ 321.612775][ T6767] syz.1.20: attempt to access beyond end of device [ 321.612775][ T6767] loop1: rw=524288, sector=89256, nr_sectors = 8 limit=40427 [ 326.618924][ T6739] bio_check_eod: 319035 callbacks suppressed [ 326.618987][ T6739] syz.0.19: attempt to access beyond end of device [ 326.618987][ T6739] loop0: rw=524288, sector=88856, nr_sectors = 8 limit=40427 [ 326.619037][ T6739] syz.0.19: attempt to access beyond end of device [ 326.619037][ T6739] loop0: rw=524288, sector=88864, nr_sectors = 8 limit=40427 [ 326.619077][ T6739] syz.0.19: attempt to access beyond end of device [ 326.619077][ T6739] loop0: rw=524288, sector=88872, nr_sectors = 8 limit=40427 [ 326.619107][ T6739] syz.0.19: attempt to access beyond end of device [ 326.619107][ T6739] loop0: rw=524288, sector=88880, nr_sectors = 8 limit=40427 [ 326.619137][ T6739] syz.0.19: attempt to access beyond end of device [ 326.619137][ T6739] loop0: rw=524288, sector=88888, nr_sectors = 8 limit=40427 [ 326.619164][ T6739] syz.0.19: attempt to access beyond end of device [ 326.619164][ T6739] loop0: rw=524288, sector=88896, nr_sectors = 8 limit=40427 [ 326.619191][ T6739] syz.0.19: attempt to access beyond end of device [ 326.619191][ T6739] loop0: rw=524288, sector=88904, nr_sectors = 8 limit=40427 [ 326.619218][ T6739] syz.0.19: attempt to access beyond end of device [ 326.619218][ T6739] loop0: rw=524288, sector=88912, nr_sectors = 8 limit=40427 [ 326.619244][ T6739] syz.0.19: attempt to access beyond end of device [ 326.619244][ T6739] loop0: rw=524288, sector=88920, nr_sectors = 8 limit=40427 [ 326.619269][ T6739] syz.0.19: attempt to access beyond end of device [ 326.619269][ T6739] loop0: rw=524288, sector=88928, nr_sectors = 8 limit=40427 [ 330.353677][ T6574] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 330.364034][ T6574] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 330.367250][ T6574] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 330.382785][ T6574] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 330.389350][ T6574] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 331.186223][ T7077] chnl_net:caif_netlink_parms(): no params data found [ 331.551425][ T7077] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.551499][ T7077] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.551566][ T7077] bridge_slave_0: entered allmulticast mode [ 331.552019][ T7077] bridge_slave_0: entered promiscuous mode [ 331.552628][ T7077] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.552642][ T7077] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.552694][ T7077] bridge_slave_1: entered allmulticast mode [ 331.553104][ T7077] bridge_slave_1: entered promiscuous mode [ 331.635169][ T6851] bio_check_eod: 310624 callbacks suppressed [ 331.635222][ T6851] syz.3.26: attempt to access beyond end of device [ 331.635222][ T6851] loop3: rw=0, sector=86440, nr_sectors = 8 limit=40427 [ 331.635274][ T6851] syz.3.26: attempt to access beyond end of device [ 331.635274][ T6851] loop3: rw=0, sector=86448, nr_sectors = 8 limit=40427 [ 331.635303][ T6851] syz.3.26: attempt to access beyond end of device [ 331.635303][ T6851] loop3: rw=0, sector=86456, nr_sectors = 8 limit=40427 [ 331.635330][ T6851] syz.3.26: attempt to access beyond end of device [ 331.635330][ T6851] loop3: rw=0, sector=86464, nr_sectors = 8 limit=40427 [ 331.635356][ T6851] syz.3.26: attempt to access beyond end of device [ 331.635356][ T6851] loop3: rw=0, sector=86472, nr_sectors = 8 limit=40427 [ 331.635379][ T6851] syz.3.26: attempt to access beyond end of device [ 331.635379][ T6851] loop3: rw=0, sector=86480, nr_sectors = 8 limit=40427 [ 331.635402][ T6851] syz.3.26: attempt to access beyond end of device [ 331.635402][ T6851] loop3: rw=0, sector=86488, nr_sectors = 8 limit=40427 [ 331.635424][ T6851] syz.3.26: attempt to access beyond end of device [ 331.635424][ T6851] loop3: rw=0, sector=86496, nr_sectors = 8 limit=40427 [ 331.635446][ T6851] syz.3.26: attempt to access beyond end of device [ 331.635446][ T6851] loop3: rw=0, sector=86504, nr_sectors = 8 limit=40427 [ 331.635468][ T6851] syz.3.26: attempt to access beyond end of device [ 331.635468][ T6851] loop3: rw=0, sector=86512, nr_sectors = 8 limit=40427 [ 331.787089][ T7077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.788105][ T7077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.337254][ T7077] team0: Port device team_slave_0 added [ 332.338103][ T7077] team0: Port device team_slave_1 added [ 332.488913][ T52] Bluetooth: hci8: command tx timeout [ 332.653549][ T7077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.653584][ T7077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.653609][ T7077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.654215][ T7077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.654222][ T7077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.654232][ T7077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.809302][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 332.861977][ T7077] hsr_slave_0: entered promiscuous mode [ 332.862361][ T7077] hsr_slave_1: entered promiscuous mode [ 332.862559][ T7077] debugfs: 'hsr0' already exists in 'hsr' [ 332.862575][ T7077] Cannot create hsr debugfs directory [ 333.500074][ T7077] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 333.626919][ T7077] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 333.663588][ T7077] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 333.778927][ T7077] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 334.096733][ T7077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.126153][ T7077] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.169356][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.169400][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.169927][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.169954][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.253790][ T7077] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 334.253831][ T7077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 334.588991][ T6574] Bluetooth: hci8: command tx timeout [ 334.626596][ T7077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.135822][ T7077] veth0_vlan: entered promiscuous mode [ 335.137360][ T7077] veth1_vlan: entered promiscuous mode [ 335.205002][ T7077] veth0_macvtap: entered promiscuous mode [ 335.206322][ T7077] veth1_macvtap: entered promiscuous mode [ 335.285622][ T7077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.286839][ T7077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.409031][ T42] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.411559][ T42] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.412812][ T42] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.413239][ T42] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.553838][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.555259][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.566508][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.567945][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:05:35 executed programs: 25 [ 336.498623][ T7109] loop8: detected capacity change from 0 to 40427 [ 336.502192][ T7109] F2FS-fs (loop8): build fault injection rate: 771 [ 336.502823][ T7109] F2FS-fs (loop8): invalid crc value [ 336.640848][ T6952] bio_check_eod: 295488 callbacks suppressed [ 336.640905][ T6952] syz.5.31: attempt to access beyond end of device [ 336.640905][ T6952] loop5: rw=0, sector=88528, nr_sectors = 8 limit=40427 [ 336.640957][ T6952] syz.5.31: attempt to access beyond end of device [ 336.640957][ T6952] loop5: rw=0, sector=88536, nr_sectors = 8 limit=40427 [ 336.640998][ T6952] syz.5.31: attempt to access beyond end of device [ 336.640998][ T6952] loop5: rw=0, sector=88544, nr_sectors = 8 limit=40427 [ 336.641025][ T6952] syz.5.31: attempt to access beyond end of device [ 336.641025][ T6952] loop5: rw=0, sector=88552, nr_sectors = 8 limit=40427 [ 336.641052][ T6952] syz.5.31: attempt to access beyond end of device [ 336.641052][ T6952] loop5: rw=0, sector=88560, nr_sectors = 8 limit=40427 [ 336.641076][ T6952] syz.5.31: attempt to access beyond end of device [ 336.641076][ T6952] loop5: rw=0, sector=88568, nr_sectors = 8 limit=40427 [ 336.641099][ T6952] syz.5.31: attempt to access beyond end of device [ 336.641099][ T6952] loop5: rw=0, sector=88576, nr_sectors = 8 limit=40427 [ 336.641122][ T6952] syz.5.31: attempt to access beyond end of device [ 336.641122][ T6952] loop5: rw=0, sector=88584, nr_sectors = 8 limit=40427 [ 336.641144][ T6952] syz.5.31: attempt to access beyond end of device [ 336.641144][ T6952] loop5: rw=0, sector=88592, nr_sectors = 8 limit=40427 [ 336.641167][ T6952] syz.5.31: attempt to access beyond end of device [ 336.641167][ T6952] loop5: rw=0, sector=88600, nr_sectors = 8 limit=40427 [ 336.661418][ T6574] Bluetooth: hci8: command tx timeout [ 336.719868][ T7109] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 336.740887][ T7109] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 338.748990][ T6574] Bluetooth: hci8: command tx timeout [ 341.658243][ T6889] bio_check_eod: 290736 callbacks suppressed [ 341.658284][ T6889] syz.4.27: attempt to access beyond end of device [ 341.658284][ T6889] loop4: rw=524288, sector=86208, nr_sectors = 8 limit=40427 [ 341.658327][ T6889] syz.4.27: attempt to access beyond end of device [ 341.658327][ T6889] loop4: rw=524288, sector=86216, nr_sectors = 8 limit=40427 [ 341.658356][ T6889] syz.4.27: attempt to access beyond end of device [ 341.658356][ T6889] loop4: rw=524288, sector=86224, nr_sectors = 8 limit=40427 [ 341.658371][ T6851] syz.3.26: attempt to access beyond end of device [ 341.658371][ T6851] loop3: rw=524288, sector=87856, nr_sectors = 8 limit=40427 [ 341.658384][ T6889] syz.4.27: attempt to access beyond end of device [ 341.658384][ T6889] loop4: rw=524288, sector=86232, nr_sectors = 8 limit=40427 [ 341.658413][ T6889] syz.4.27: attempt to access beyond end of device [ 341.658413][ T6889] loop4: rw=524288, sector=86240, nr_sectors = 8 limit=40427 [ 341.658432][ T6851] syz.3.26: attempt to access beyond end of device [ 341.658432][ T6851] loop3: rw=524288, sector=87864, nr_sectors = 8 limit=40427 [ 341.658440][ T6889] syz.4.27: attempt to access beyond end of device [ 341.658440][ T6889] loop4: rw=524288, sector=86248, nr_sectors = 8 limit=40427 [ 341.658466][ T6889] syz.4.27: attempt to access beyond end of device [ 341.658466][ T6889] loop4: rw=524288, sector=86256, nr_sectors = 8 limit=40427 [ 341.658475][ T6851] syz.3.26: attempt to access beyond end of device [ 341.658475][ T6851] loop3: rw=524288, sector=87872, nr_sectors = 8 limit=40427 [ 346.662197][ T6952] bio_check_eod: 295870 callbacks suppressed [ 346.662261][ T6952] syz.5.31: attempt to access beyond end of device [ 346.662261][ T6952] loop5: rw=524288, sector=88080, nr_sectors = 8 limit=40427 [ 346.662285][ T6889] syz.4.27: attempt to access beyond end of device [ 346.662285][ T6889] loop4: rw=524288, sector=89904, nr_sectors = 8 limit=40427 [ 346.662330][ T6952] syz.5.31: attempt to access beyond end of device [ 346.662330][ T6952] loop5: rw=524288, sector=88088, nr_sectors = 8 limit=40427 [ 346.662353][ T6889] syz.4.27: attempt to access beyond end of device [ 346.662353][ T6889] loop4: rw=524288, sector=89912, nr_sectors = 8 limit=40427 [ 346.662394][ T6952] syz.5.31: attempt to access beyond end of device [ 346.662394][ T6952] loop5: rw=524288, sector=88096, nr_sectors = 8 limit=40427 [ 346.662408][ T6889] syz.4.27: attempt to access beyond end of device [ 346.662408][ T6889] loop4: rw=524288, sector=89920, nr_sectors = 8 limit=40427 [ 346.662429][ T6952] syz.5.31: attempt to access beyond end of device [ 346.662429][ T6952] loop5: rw=524288, sector=88104, nr_sectors = 8 limit=40427 [ 346.662455][ T6889] syz.4.27: attempt to access beyond end of device [ 346.662455][ T6889] loop4: rw=524288, sector=89928, nr_sectors = 8 limit=40427 [ 346.662460][ T6952] syz.5.31: attempt to access beyond end of device [ 346.662460][ T6952] loop5: rw=524288, sector=88112, nr_sectors = 8 limit=40427 [ 346.662485][ T6952] syz.5.31: attempt to access beyond end of device [ 346.662485][ T6952] loop5: rw=524288, sector=88120, nr_sectors = 8 limit=40427 [ 346.900361][ T7066] F2FS-fs (loop7): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 348.168938][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 350.573873][ T32] INFO: task kworker/u8:0:12 blocked for more than 143 seconds. [ 350.573911][ T32] Not tainted syzkaller #0 [ 350.573943][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 350.573953][ T32] task:kworker/u8:0 state:D stack:0 pid:12 tgid:12 ppid:2 task_flags:0x4208160 flags:0x00000010 [ 350.573974][ T32] Workqueue: writeback wb_workfn (flush-7:0) [ 350.574002][ T32] Call trace: [ 350.574008][ T32] __switch_to+0x418/0x87c (T) [ 350.574023][ T32] __schedule+0x13b0/0x2864 [ 350.574034][ T32] schedule+0xb4/0x230 [ 350.574044][ T32] schedule_preempt_disabled+0x18/0x2c [ 350.574054][ T32] rwsem_down_write_slowpath+0x6b4/0x10f4 [ 350.574064][ T32] down_write+0xb4/0xc0 [ 350.574075][ T32] f2fs_balance_fs+0x4b8/0x6ec [ 350.574085][ T32] f2fs_write_inode+0x3a8/0x684 [ 350.574095][ T32] __writeback_single_inode+0x5ac/0x13e8 [ 350.574106][ T32] writeback_sb_inodes+0x55c/0xe40 [ 350.574116][ T32] __writeback_inodes_wb+0xec/0x228 [ 350.574127][ T32] wb_writeback+0x3e0/0xd70 [ 350.574137][ T32] wb_workfn+0xa08/0xdc0 [ 350.574147][ T32] process_one_work+0x7e8/0x155c [ 350.574157][ T32] worker_thread+0x958/0xed8 [ 350.574166][ T32] kthread+0x5fc/0x75c [ 350.574177][ T32] ret_from_fork+0x10/0x20 [ 350.574251][ T32] [ 350.574251][ T32] Showing all locks held in the system: [ 350.574258][ T32] 4 locks held by kworker/u8:0/12: [ 350.574266][ T32] #0: ffff0000c1f7a948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c [ 350.574303][ T32] #1: ffff800097c77be0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c [ 350.574340][ T32] #2: ffff0000cd13a0e0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x24/0xdc [ 350.574380][ T32] #3: ffff0000cb0a9410 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x4b8/0x6ec [ 350.574414][ T32] 4 locks held by kworker/u8:1/14: [ 350.574420][ T32] #0: ffff0000c1f7a948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c [ 350.574454][ T32] #1: ffff800097c97be0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c [ 350.574488][ T32] #2: ffff0000d51a00e0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x24/0xdc [ 350.574530][ T32] #3: ffff0000cec9d410 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x4b8/0x6ec [ 350.574563][ T32] 1 lock held by khungtaskd/32: [ 350.574570][ T32] #0: ffff80008f9d9620 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 [ 350.574606][ T32] 4 locks held by kworker/u8:2/41: [ 350.574615][ T32] #0: ffff0000c1f7a948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c [ 350.574651][ T32] #1: ffff8000992d7be0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c [ 350.574684][ T32] #2: ffff0000d24960e0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x24/0xdc [ 350.574722][ T32] #3: ffff0000f7185410 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x4b8/0x6ec [ 350.574757][ T32] 2 locks held by kworker/u8:5/751: [ 350.574764][ T32] 4 locks held by kworker/u8:6/2225: [ 350.574771][ T32] #0: ffff0000c1f7a948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c [ 350.574804][ T32] #1: ffff8000a1ff7be0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c [ 350.574838][ T32] #2: ffff0000d5ecc0e0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x24/0xdc [ 350.574876][ T32] #3: ffff0000d2431410 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x4b8/0x6ec [ 350.574910][ T32] 4 locks held by kworker/u8:7/4883: [ 350.574920][ T32] #0: ffff0000c1f7a948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c [ 350.574960][ T32] #1: ffff8000a0397be0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c [ 350.574994][ T32] #2: ffff0000cb0360e0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x24/0xdc [ 350.575032][ T32] #3: ffff0000d4779410 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x4b8/0x6ec [ 350.575066][ T32] 2 locks held by getty/6312: [ 350.575072][ T32] #0: ffff0000ce0150a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 350.575107][ T32] #1: ffff800099e8e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x34c/0xfa4 [ 350.575145][ T32] 4 locks held by syz.0.19/6739: [ 350.575152][ T32] 5 locks held by syz.1.20/6767: [ 350.575159][ T32] 9 locks held by syz.2.22/6805: [ 350.575166][ T32] 5 locks held by syz.3.26/6851: [ 350.575173][ T32] 5 locks held by syz.4.27/6889: [ 350.575180][ T32] 4 locks held by kworker/u8:9/6934: [ 350.575186][ T32] #0: ffff0000c1f7a948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c [ 350.575220][ T32] #1: ffff80009eb27be0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c [ 350.575253][ T32] #2: ffff0000f620e0e0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x24/0xdc [ 350.575291][ T32] #3: ffff0000f31cd410 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x4b8/0x6ec [ 350.575324][ T32] 4 locks held by syz.5.31/6952: [ 350.575331][ T32] 5 locks held by syz.6.35/7007: [ 350.575338][ T32] 4 locks held by kworker/u8:10/7029: [ 350.575345][ T32] #0: ffff0000c1f7a948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c [ 350.575378][ T32] #1: ffff80009d8a7be0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c [ 350.575412][ T32] #2: ffff0000ce9660e0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x24/0xdc [ 350.575450][ T32] #3: ffff0001099d1410 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x4b8/0x6ec [ 350.575483][ T32] 4 locks held by kworker/u8:11/7046: [ 350.575490][ T32] #0: ffff0000c1f7a948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c [ 350.575523][ T32] #1: ffff80009e927be0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c [ 350.575556][ T32] #2: ffff0000c75d60e0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x24/0xdc [ 350.575594][ T32] #3: ffff0000f29c1410 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x4b8/0x6ec [ 350.575627][ T32] 6 locks held by syz.7.39/7066: [ 350.575634][ T32] 5 locks held by syz.8.40/7109: [ 350.575641][ T32] [ 350.575647][ T32] ============================================= [ 350.575647][ T32] [ 350.575654][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 350.666747][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 350.668007][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 350.669417][ T32] Call trace: [ 350.669891][ T32] show_stack+0x2c/0x3c (C) [ 350.670586][ T32] __dump_stack+0x30/0x40 [ 350.671231][ T32] dump_stack_lvl+0x30/0x12c [ 350.671906][ T32] dump_stack+0x1c/0x28 [ 350.672547][ T32] vpanic+0x280/0x780 [ 350.673182][ T32] vpanic+0x0/0x780 [ 350.673746][ T32] hung_task_panic+0x0/0x2c [ 350.674457][ T32] kthread+0x5fc/0x75c [ 350.675175][ T32] ret_from_fork+0x10/0x20 [ 350.675888][ T32] SMP: stopping secondary CPUs [ 350.676602][ T32] Kernel Offset: disabled [ 350.677207][ T32] CPU features: 0x080000,0000f000,21381141,5427fea7 [ 350.678222][ T32] Memory Limit: none [ 351.013936][ T32] Rebooting in 86400 seconds..