Warning: Permanently added '10.128.0.108' (ED25519) to the list of known hosts. 2026/09/09 06:43:38 parsed 1 programs [ 161.688465][ T6033] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 166.251586][ T6043] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.252152][ T6043] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.252667][ T6043] bridge_slave_0: entered allmulticast mode [ 166.262042][ T6043] bridge_slave_0: entered promiscuous mode [ 166.273046][ T6043] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.273663][ T6043] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.274151][ T6043] bridge_slave_1: entered allmulticast mode [ 166.296408][ T6043] bridge_slave_1: entered promiscuous mode [ 166.455534][ T6043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.467418][ T6043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.613208][ T6043] team0: Port device team_slave_0 added [ 166.620709][ T6043] team0: Port device team_slave_1 added [ 166.752497][ T6043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.752614][ T6043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.752701][ T6043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.760774][ T6043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.760821][ T6043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.760910][ T6043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.977742][ T6043] hsr_slave_0: entered promiscuous mode [ 166.986988][ T6043] hsr_slave_1: entered promiscuous mode [ 169.156730][ T6043] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 169.188221][ T6043] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 169.197623][ T6043] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 169.226904][ T6043] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 169.236031][ T6043] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 169.276652][ T6043] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 169.283069][ T6043] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 169.315818][ T6043] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 169.486957][ T6043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.530865][ T6043] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.548769][ T172] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.548945][ T172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.581262][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.588722][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.334610][ T6043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.457526][ T6043] veth0_vlan: entered promiscuous mode [ 170.478151][ T6043] veth1_vlan: entered promiscuous mode [ 170.558277][ T6043] veth0_macvtap: entered promiscuous mode [ 170.574651][ T6043] veth1_macvtap: entered promiscuous mode [ 170.613787][ T6043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.643641][ T6043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.690578][ T172] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.690698][ T172] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.690832][ T172] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.690961][ T172] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.640729][ T172] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.250788][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.267521][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.273929][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.309374][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.311478][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.646006][ T172] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.425044][ T172] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.864943][ T172] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.231902][ T3381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.239874][ T3381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.349880][ T3381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.349953][ T3381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.850545][ T172] bridge_slave_1: left allmulticast mode [ 174.850660][ T172] bridge_slave_1: left promiscuous mode [ 174.851040][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.991753][ T172] bridge_slave_0: left allmulticast mode [ 174.991852][ T172] bridge_slave_0: left promiscuous mode [ 174.992614][ T172] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.920696][ T172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.980453][ T172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.003731][ T172] bond0 (unregistering): Released all slaves [ 176.539802][ T172] hsr_slave_0: left promiscuous mode [ 176.590244][ T172] hsr_slave_1: left promiscuous mode [ 176.597306][ T172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.597345][ T172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.640985][ T172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.641082][ T172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.761359][ T172] veth1_macvtap: left promiscuous mode [ 176.767261][ T172] veth0_macvtap: left promiscuous mode [ 176.767470][ T172] veth1_vlan: left promiscuous mode [ 176.767614][ T172] veth0_vlan: left promiscuous mode [ 177.440487][ T172] team0 (unregistering): Port device team_slave_1 removed [ 177.500924][ T172] team0 (unregistering): Port device team_slave_0 removed [ 177.902366][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1 [ 178.967303][ T5254] 8021q: adding VLAN 0 to HW filter on device eth2 [ 180.414657][ T5254] 8021q: adding VLAN 0 to HW filter on device eth3 [ 181.366256][ T5254] 8021q: adding VLAN 0 to HW filter on device eth4 2026/09/09 06:44:05 executed programs: 0 [ 182.553096][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 182.580947][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 182.598012][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 182.606888][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 182.615834][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 183.853271][ T6375] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.853852][ T6375] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.854453][ T6375] bridge_slave_0: entered allmulticast mode [ 183.868698][ T6375] bridge_slave_0: entered promiscuous mode [ 183.887799][ T6375] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.888174][ T6375] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.888739][ T6375] bridge_slave_1: entered allmulticast mode [ 183.908817][ T6375] bridge_slave_1: entered promiscuous mode [ 184.084559][ T6375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.097950][ T6375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.284082][ T6375] team0: Port device team_slave_0 added [ 184.291867][ T6375] team0: Port device team_slave_1 added [ 184.482908][ T6375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.484448][ T6375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.484479][ T6375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.532154][ T6375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.532240][ T6375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 184.532306][ T6375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.663928][ T59] Bluetooth: hci0: command tx timeout [ 185.286254][ T6375] hsr_slave_0: entered promiscuous mode [ 185.293592][ T6375] hsr_slave_1: entered promiscuous mode [ 186.739812][ T59] Bluetooth: hci0: command tx timeout [ 187.597466][ T6375] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 187.651281][ T6375] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 187.668482][ T6375] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 187.708006][ T6375] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 187.719088][ T6375] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 187.758399][ T6375] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 187.767824][ T6375] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 187.823925][ T6375] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 187.990768][ T6375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.041959][ T6375] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.071979][ T172] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.080435][ T172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.110143][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.121953][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.820181][ T59] Bluetooth: hci0: command tx timeout [ 188.876755][ T6375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.004732][ T6375] veth0_vlan: entered promiscuous mode [ 189.024971][ T6375] veth1_vlan: entered promiscuous mode [ 189.107465][ T6375] veth0_macvtap: entered promiscuous mode [ 189.127060][ T6375] veth1_macvtap: entered promiscuous mode [ 189.166465][ T6375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.196707][ T6375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.241578][ T3287] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.241691][ T3287] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.241738][ T3287] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.241783][ T3287] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.816381][ T172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.816463][ T172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.941732][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.941813][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/09 06:44:13 executed programs: 2 [ 190.616118][ T6506] loop0: detected capacity change from 0 to 40427 [ 190.641174][ T6506] F2FS-fs: heap/no_heap options were deprecated [ 190.646689][ T6506] F2FS-fs: heap/no_heap options were deprecated [ 190.779373][ T6506] F2FS-fs (loop0): Image doesn't support compression [ 190.806905][ T6506] F2FS-fs (loop0): invalid crc value [ 190.902078][ T59] Bluetooth: hci0: command tx timeout [ 191.362047][ T6506] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 191.387006][ T6506] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 194.587692][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.597293][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.081056][ T6536] F2FS-fs (loop0): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 201.096629][ T6536] syz.0.17: attempt to access beyond end of device [ 201.096629][ T6536] loop0: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 201.099152][ T6536] syz.0.17: attempt to access beyond end of device [ 201.099152][ T6536] loop0: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 201.112082][ T6536] syz.0.17: attempt to access beyond end of device [ 201.112082][ T6536] loop0: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 201.112738][ T6536] syz.0.17: attempt to access beyond end of device [ 201.112738][ T6536] loop0: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 201.127494][ T6536] syz.0.17: attempt to access beyond end of device [ 201.127494][ T6536] loop0: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 201.128172][ T6536] syz.0.17: attempt to access beyond end of device [ 201.128172][ T6536] loop0: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 201.128653][ T6536] syz.0.17: attempt to access beyond end of device [ 201.128653][ T6536] loop0: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 201.131300][ T6536] syz.0.17: attempt to access beyond end of device [ 201.131300][ T6536] loop0: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 201.131840][ T6536] syz.0.17: attempt to access beyond end of device [ 201.131840][ T6536] loop0: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 201.132322][ T6536] syz.0.17: attempt to access beyond end of device [ 201.132322][ T6536] loop0: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 205.232386][ T4908] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 205.271866][ T4908] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 205.280575][ T4908] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 205.291855][ T4908] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 205.302334][ T4908] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.101379][ T6536] bio_check_eod: 46545 callbacks suppressed [ 206.102247][ T6536] syz.0.17: attempt to access beyond end of device [ 206.102247][ T6536] loop0: rw=524288, sector=89224, nr_sectors = 8 limit=40427 [ 206.102623][ T6536] syz.0.17: attempt to access beyond end of device [ 206.102623][ T6536] loop0: rw=524288, sector=89232, nr_sectors = 8 limit=40427 [ 206.102931][ T6536] syz.0.17: attempt to access beyond end of device [ 206.102931][ T6536] loop0: rw=524288, sector=89240, nr_sectors = 8 limit=40427 [ 206.103269][ T6536] syz.0.17: attempt to access beyond end of device [ 206.103269][ T6536] loop0: rw=524288, sector=89248, nr_sectors = 8 limit=40427 [ 206.103784][ T6536] syz.0.17: attempt to access beyond end of device [ 206.103784][ T6536] loop0: rw=524288, sector=89256, nr_sectors = 8 limit=40427 [ 206.104156][ T6536] syz.0.17: attempt to access beyond end of device [ 206.104156][ T6536] loop0: rw=524288, sector=89264, nr_sectors = 8 limit=40427 [ 206.104418][ T6536] syz.0.17: attempt to access beyond end of device [ 206.104418][ T6536] loop0: rw=524288, sector=89272, nr_sectors = 8 limit=40427 [ 206.104798][ T6536] syz.0.17: attempt to access beyond end of device [ 206.104798][ T6536] loop0: rw=524288, sector=89280, nr_sectors = 8 limit=40427 [ 206.106570][ T6536] syz.0.17: attempt to access beyond end of device [ 206.106570][ T6536] loop0: rw=524288, sector=89288, nr_sectors = 8 limit=40427 [ 206.106767][ T6536] syz.0.17: attempt to access beyond end of device [ 206.106767][ T6536] loop0: rw=524288, sector=89296, nr_sectors = 8 limit=40427 [ 206.832142][ T6546] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.839996][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.848102][ T6546] bridge_slave_0: entered allmulticast mode [ 206.857304][ T6546] bridge_slave_0: entered promiscuous mode [ 206.866905][ T6546] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.867153][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.867328][ T6546] bridge_slave_1: entered allmulticast mode [ 206.891630][ T6546] bridge_slave_1: entered promiscuous mode [ 207.130861][ T6546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.148966][ T6546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.390131][ T59] Bluetooth: hci1: command tx timeout [ 207.456047][ T6546] team0: Port device team_slave_0 added [ 207.471866][ T6546] team0: Port device team_slave_1 added [ 207.675507][ T6546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.675591][ T6546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.675620][ T6546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.701004][ T6546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.701064][ T6546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.701191][ T6546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.007882][ T6546] hsr_slave_0: entered promiscuous mode [ 208.013902][ T6546] hsr_slave_1: entered promiscuous mode [ 208.015273][ T6546] debugfs: 'hsr0' already exists in 'hsr' [ 208.015496][ T6546] Cannot create hsr debugfs directory [ 208.835362][ T6546] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 208.895939][ T6546] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 208.909100][ T6546] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 208.949348][ T6546] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 208.993207][ T6546] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 209.032966][ T6546] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 209.038169][ T6546] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 209.064910][ T6546] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 209.228236][ T6546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.276542][ T6546] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.297724][ T1385] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.298247][ T1385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.348595][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.349113][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.460200][ T59] Bluetooth: hci1: command tx timeout [ 210.258257][ T6546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.368281][ T6546] veth0_vlan: entered promiscuous mode [ 210.387170][ T6546] veth1_vlan: entered promiscuous mode [ 210.470167][ T6546] veth0_macvtap: entered promiscuous mode [ 210.512442][ T6546] veth1_macvtap: entered promiscuous mode [ 210.558560][ T6546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.578060][ T6546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.030176][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.072901][ T167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.081873][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.083112][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.115298][ T6536] bio_check_eod: 34081 callbacks suppressed [ 211.116446][ T6536] syz.0.17: attempt to access beyond end of device [ 211.116446][ T6536] loop0: rw=524288, sector=86992, nr_sectors = 8 limit=40427 [ 211.116591][ T6536] syz.0.17: attempt to access beyond end of device [ 211.116591][ T6536] loop0: rw=524288, sector=87000, nr_sectors = 8 limit=40427 [ 211.116685][ T6536] syz.0.17: attempt to access beyond end of device [ 211.116685][ T6536] loop0: rw=524288, sector=87008, nr_sectors = 8 limit=40427 [ 211.116903][ T6536] syz.0.17: attempt to access beyond end of device [ 211.116903][ T6536] loop0: rw=524288, sector=87016, nr_sectors = 8 limit=40427 [ 211.117346][ T6536] syz.0.17: attempt to access beyond end of device [ 211.117346][ T6536] loop0: rw=524288, sector=87024, nr_sectors = 8 limit=40427 [ 211.117443][ T6536] syz.0.17: attempt to access beyond end of device [ 211.117443][ T6536] loop0: rw=524288, sector=87032, nr_sectors = 8 limit=40427 [ 211.141552][ T6536] syz.0.17: attempt to access beyond end of device [ 211.141552][ T6536] loop0: rw=524288, sector=87040, nr_sectors = 8 limit=40427 [ 211.141949][ T6536] syz.0.17: attempt to access beyond end of device [ 211.141949][ T6536] loop0: rw=524288, sector=87048, nr_sectors = 8 limit=40427 [ 211.142280][ T6536] syz.0.17: attempt to access beyond end of device [ 211.142280][ T6536] loop0: rw=524288, sector=87056, nr_sectors = 8 limit=40427 [ 211.142604][ T6536] syz.0.17: attempt to access beyond end of device [ 211.142604][ T6536] loop0: rw=524288, sector=87064, nr_sectors = 8 limit=40427 [ 211.337318][ T1385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.346004][ T1385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.541600][ T59] Bluetooth: hci1: command tx timeout [ 211.615301][ T1385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.615394][ T1385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/09 06:44:34 executed programs: 3 [ 212.468320][ T6583] loop1: detected capacity change from 0 to 40427 [ 212.475895][ T6583] F2FS-fs: heap/no_heap options were deprecated [ 212.479593][ T6583] F2FS-fs: heap/no_heap options were deprecated [ 212.593215][ T6583] F2FS-fs (loop1): Image doesn't support compression [ 212.620098][ T6583] F2FS-fs (loop1): invalid crc value [ 212.964260][ T6583] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 212.987038][ T6583] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 213.620058][ T59] Bluetooth: hci1: command tx timeout [ 216.119751][ T6536] bio_check_eod: 26472 callbacks suppressed [ 216.120391][ T6536] syz.0.17: attempt to access beyond end of device [ 216.120391][ T6536] loop0: rw=524288, sector=86736, nr_sectors = 8 limit=40427 [ 216.120808][ T6536] syz.0.17: attempt to access beyond end of device [ 216.120808][ T6536] loop0: rw=524288, sector=86744, nr_sectors = 8 limit=40427 [ 216.121170][ T6536] syz.0.17: attempt to access beyond end of device [ 216.121170][ T6536] loop0: rw=524288, sector=86752, nr_sectors = 8 limit=40427 [ 216.121404][ T6536] syz.0.17: attempt to access beyond end of device [ 216.121404][ T6536] loop0: rw=524288, sector=86760, nr_sectors = 8 limit=40427 [ 216.124173][ T6536] syz.0.17: attempt to access beyond end of device [ 216.124173][ T6536] loop0: rw=524288, sector=86768, nr_sectors = 8 limit=40427 [ 216.124598][ T6536] syz.0.17: attempt to access beyond end of device [ 216.124598][ T6536] loop0: rw=524288, sector=86776, nr_sectors = 8 limit=40427 [ 216.124918][ T6536] syz.0.17: attempt to access beyond end of device [ 216.124918][ T6536] loop0: rw=524288, sector=86784, nr_sectors = 8 limit=40427 [ 216.125248][ T6536] syz.0.17: attempt to access beyond end of device [ 216.125248][ T6536] loop0: rw=524288, sector=86792, nr_sectors = 8 limit=40427 [ 216.128593][ T6536] syz.0.17: attempt to access beyond end of device [ 216.128593][ T6536] loop0: rw=524288, sector=86800, nr_sectors = 8 limit=40427 [ 216.128935][ T6536] syz.0.17: attempt to access beyond end of device [ 216.128935][ T6536] loop0: rw=524288, sector=86808, nr_sectors = 8 limit=40427 [ 221.131447][ T6536] bio_check_eod: 32030 callbacks suppressed [ 221.133351][ T6536] syz.0.17: attempt to access beyond end of device [ 221.133351][ T6536] loop0: rw=0, sector=87736, nr_sectors = 8 limit=40427 [ 221.133891][ T6536] syz.0.17: attempt to access beyond end of device [ 221.133891][ T6536] loop0: rw=0, sector=87744, nr_sectors = 8 limit=40427 [ 221.134258][ T6536] syz.0.17: attempt to access beyond end of device [ 221.134258][ T6536] loop0: rw=0, sector=87752, nr_sectors = 8 limit=40427 [ 221.134540][ T6536] syz.0.17: attempt to access beyond end of device [ 221.134540][ T6536] loop0: rw=0, sector=87760, nr_sectors = 8 limit=40427 [ 221.136916][ T6536] syz.0.17: attempt to access beyond end of device [ 221.136916][ T6536] loop0: rw=0, sector=87768, nr_sectors = 8 limit=40427 [ 221.137306][ T6536] syz.0.17: attempt to access beyond end of device [ 221.137306][ T6536] loop0: rw=0, sector=87776, nr_sectors = 8 limit=40427 [ 221.137652][ T6536] syz.0.17: attempt to access beyond end of device [ 221.137652][ T6536] loop0: rw=0, sector=87784, nr_sectors = 8 limit=40427 [ 221.137907][ T6536] syz.0.17: attempt to access beyond end of device [ 221.137907][ T6536] loop0: rw=0, sector=87792, nr_sectors = 8 limit=40427 [ 221.139785][ T6536] syz.0.17: attempt to access beyond end of device [ 221.139785][ T6536] loop0: rw=0, sector=87800, nr_sectors = 8 limit=40427 [ 221.140248][ T6536] syz.0.17: attempt to access beyond end of device [ 221.140248][ T6536] loop0: rw=0, sector=87808, nr_sectors = 8 limit=40427 [ 226.141268][ T6536] bio_check_eod: 30523 callbacks suppressed [ 226.141392][ T6536] syz.0.17: attempt to access beyond end of device [ 226.141392][ T6536] loop0: rw=0, sector=88464, nr_sectors = 8 limit=40427 [ 226.141900][ T6536] syz.0.17: attempt to access beyond end of device [ 226.141900][ T6536] loop0: rw=0, sector=88472, nr_sectors = 8 limit=40427 [ 226.142251][ T6536] syz.0.17: attempt to access beyond end of device [ 226.142251][ T6536] loop0: rw=0, sector=88480, nr_sectors = 8 limit=40427 [ 226.142576][ T6536] syz.0.17: attempt to access beyond end of device [ 226.142576][ T6536] loop0: rw=0, sector=88488, nr_sectors = 8 limit=40427 [ 226.146268][ T6536] syz.0.17: attempt to access beyond end of device [ 226.146268][ T6536] loop0: rw=0, sector=88496, nr_sectors = 8 limit=40427 [ 226.146608][ T6536] syz.0.17: attempt to access beyond end of device [ 226.146608][ T6536] loop0: rw=0, sector=88504, nr_sectors = 8 limit=40427 [ 226.146939][ T6536] syz.0.17: attempt to access beyond end of device [ 226.146939][ T6536] loop0: rw=0, sector=88512, nr_sectors = 8 limit=40427 [ 226.147286][ T6536] syz.0.17: attempt to access beyond end of device [ 226.147286][ T6536] loop0: rw=0, sector=88520, nr_sectors = 8 limit=40427 [ 226.150892][ T6536] syz.0.17: attempt to access beyond end of device [ 226.150892][ T6536] loop0: rw=0, sector=88528, nr_sectors = 8 limit=40427 [ 226.151296][ T6536] syz.0.17: attempt to access beyond end of device [ 226.151296][ T6536] loop0: rw=0, sector=88536, nr_sectors = 8 limit=40427 [ 227.046744][ T4908] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 227.094363][ T4908] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 227.102968][ T4908] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 227.119370][ T4908] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 227.134949][ T4908] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 229.032247][ T6589] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.040026][ T6589] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.048824][ T6589] bridge_slave_0: entered allmulticast mode [ 229.073603][ T6589] bridge_slave_0: entered promiscuous mode [ 229.100588][ T6589] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.107970][ T6589] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.108187][ T6589] bridge_slave_1: entered allmulticast mode [ 229.126195][ T6589] bridge_slave_1: entered promiscuous mode [ 229.219879][ T4908] Bluetooth: hci2: command tx timeout [ 229.392137][ T6589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.413278][ T6589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.789966][ T6589] team0: Port device team_slave_0 added [ 229.801933][ T6589] team0: Port device team_slave_1 added [ 230.079088][ T6589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.079263][ T6589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.079366][ T6589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.135223][ T6589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.135328][ T6589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.135358][ T6589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.221686][ T6587] F2FS-fs (loop1): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 230.693787][ T6589] hsr_slave_0: entered promiscuous mode [ 230.715380][ T6589] hsr_slave_1: entered promiscuous mode [ 230.731365][ T6589] debugfs: 'hsr0' already exists in 'hsr' [ 230.731456][ T6589] Cannot create hsr debugfs directory [ 231.149756][ T6587] bio_check_eod: 28872 callbacks suppressed [ 231.151417][ T6587] syz.1.18: attempt to access beyond end of device [ 231.151417][ T6587] loop1: rw=0, sector=88384, nr_sectors = 8 limit=40427 [ 231.151922][ T6587] syz.1.18: attempt to access beyond end of device [ 231.151922][ T6587] loop1: rw=0, sector=88392, nr_sectors = 8 limit=40427 [ 231.152284][ T6587] syz.1.18: attempt to access beyond end of device [ 231.152284][ T6587] loop1: rw=0, sector=88400, nr_sectors = 8 limit=40427 [ 231.152573][ T6587] syz.1.18: attempt to access beyond end of device [ 231.152573][ T6587] loop1: rw=0, sector=88408, nr_sectors = 8 limit=40427 [ 231.155714][ T6587] syz.1.18: attempt to access beyond end of device [ 231.155714][ T6587] loop1: rw=0, sector=88416, nr_sectors = 8 limit=40427 [ 231.156235][ T6587] syz.1.18: attempt to access beyond end of device [ 231.156235][ T6587] loop1: rw=0, sector=88424, nr_sectors = 8 limit=40427 [ 231.156605][ T6587] syz.1.18: attempt to access beyond end of device [ 231.156605][ T6587] loop1: rw=0, sector=88432, nr_sectors = 8 limit=40427 [ 231.159538][ T6587] syz.1.18: attempt to access beyond end of device [ 231.159538][ T6587] loop1: rw=0, sector=88440, nr_sectors = 8 limit=40427 [ 231.162299][ T6587] syz.1.18: attempt to access beyond end of device [ 231.162299][ T6587] loop1: rw=0, sector=88448, nr_sectors = 8 limit=40427 [ 231.162653][ T6587] syz.1.18: attempt to access beyond end of device [ 231.162653][ T6587] loop1: rw=0, sector=88456, nr_sectors = 8 limit=40427 [ 231.299788][ T4908] Bluetooth: hci2: command tx timeout [ 232.225387][ T6589] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 232.257558][ T6589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 232.283374][ T6589] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 232.381988][ T6589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 232.394683][ T6589] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 232.443195][ T6589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 232.452829][ T6589] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 232.538482][ T6589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 232.946469][ T6589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.033642][ T6589] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.129502][ T3287] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.130430][ T3287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.177756][ T1393] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.198540][ T1393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.379773][ T4908] Bluetooth: hci2: command tx timeout [ 234.871008][ T6589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.064248][ T6589] veth0_vlan: entered promiscuous mode [ 235.153281][ T6589] veth1_vlan: entered promiscuous mode [ 235.378820][ T6589] veth0_macvtap: entered promiscuous mode [ 235.418809][ T6589] veth1_macvtap: entered promiscuous mode [ 235.459843][ T4908] Bluetooth: hci2: command tx timeout [ 235.487207][ T6589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.513510][ T6589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.820034][ T3335] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.820145][ T3335] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.820187][ T3335] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.164144][ T6587] bio_check_eod: 39255 callbacks suppressed [ 236.164167][ T6587] syz.1.18: attempt to access beyond end of device [ 236.164167][ T6587] loop1: rw=524288, sector=89240, nr_sectors = 8 limit=40427 [ 236.164302][ T6587] syz.1.18: attempt to access beyond end of device [ 236.164302][ T6587] loop1: rw=524288, sector=89248, nr_sectors = 8 limit=40427 [ 236.164423][ T6587] syz.1.18: attempt to access beyond end of device [ 236.164423][ T6587] loop1: rw=524288, sector=89256, nr_sectors = 8 limit=40427 [ 236.164550][ T6587] syz.1.18: attempt to access beyond end of device [ 236.164550][ T6587] loop1: rw=524288, sector=89264, nr_sectors = 8 limit=40427 [ 236.164707][ T6587] syz.1.18: attempt to access beyond end of device [ 236.164707][ T6587] loop1: rw=524288, sector=89272, nr_sectors = 8 limit=40427 [ 236.164830][ T6587] syz.1.18: attempt to access beyond end of device [ 236.164830][ T6587] loop1: rw=524288, sector=89280, nr_sectors = 8 limit=40427 [ 236.164946][ T6587] syz.1.18: attempt to access beyond end of device [ 236.164946][ T6587] loop1: rw=524288, sector=89288, nr_sectors = 8 limit=40427 [ 236.170734][ T6536] syz.0.17: attempt to access beyond end of device [ 236.170734][ T6536] loop0: rw=0, sector=88352, nr_sectors = 8 limit=40427 [ 236.170946][ T6536] syz.0.17: attempt to access beyond end of device [ 236.170946][ T6536] loop0: rw=0, sector=88360, nr_sectors = 8 limit=40427 [ 236.171103][ T6536] syz.0.17: attempt to access beyond end of device [ 236.171103][ T6536] loop0: rw=0, sector=88368, nr_sectors = 8 limit=40427 [ 236.603886][ T3287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.603981][ T3287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.639972][ T3287] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.872965][ T1052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.884117][ T1052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/09 06:45:00 executed programs: 4 [ 238.532558][ T6627] loop2: detected capacity change from 0 to 40427 [ 238.539208][ T6627] F2FS-fs: heap/no_heap options were deprecated [ 238.544827][ T6627] F2FS-fs: heap/no_heap options were deprecated [ 238.698668][ T6627] F2FS-fs (loop2): Image doesn't support compression [ 238.737415][ T6627] F2FS-fs (loop2): invalid crc value [ 239.334318][ T6627] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 239.497234][ T6627] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 241.169677][ T6587] bio_check_eod: 39494 callbacks suppressed [ 241.169804][ T6536] syz.0.17: attempt to access beyond end of device [ 241.169804][ T6536] loop0: rw=524288, sector=86248, nr_sectors = 8 limit=40427 [ 241.169923][ T6536] syz.0.17: attempt to access beyond end of device [ 241.169923][ T6536] loop0: rw=524288, sector=86256, nr_sectors = 8 limit=40427 [ 241.170058][ T6536] syz.0.17: attempt to access beyond end of device [ 241.170058][ T6536] loop0: rw=524288, sector=86264, nr_sectors = 8 limit=40427 [ 241.170165][ T6536] syz.0.17: attempt to access beyond end of device [ 241.170165][ T6536] loop0: rw=524288, sector=86272, nr_sectors = 8 limit=40427 [ 241.170273][ T6536] syz.0.17: attempt to access beyond end of device [ 241.170273][ T6536] loop0: rw=524288, sector=86280, nr_sectors = 8 limit=40427 [ 241.170385][ T6536] syz.0.17: attempt to access beyond end of device [ 241.170385][ T6536] loop0: rw=524288, sector=86288, nr_sectors = 8 limit=40427 [ 241.170527][ T6536] syz.0.17: attempt to access beyond end of device [ 241.170527][ T6536] loop0: rw=524288, sector=86296, nr_sectors = 8 limit=40427 [ 241.170651][ T6536] syz.0.17: attempt to access beyond end of device [ 241.170651][ T6536] loop0: rw=524288, sector=86304, nr_sectors = 8 limit=40427 [ 241.170775][ T6536] syz.0.17: attempt to access beyond end of device [ 241.170775][ T6536] loop0: rw=524288, sector=86312, nr_sectors = 8 limit=40427 [ 241.176506][ T6587] syz.1.18: attempt to access beyond end of device [ 241.176506][ T6587] loop1: rw=524288, sector=89208, nr_sectors = 8 limit=40427 [ 246.182390][ T6587] bio_check_eod: 41416 callbacks suppressed [ 246.182848][ T6536] syz.0.17: attempt to access beyond end of device [ 246.182848][ T6536] loop0: rw=524288, sector=87280, nr_sectors = 8 limit=40427 [ 246.184011][ T6587] syz.1.18: attempt to access beyond end of device [ 246.184011][ T6587] loop1: rw=524288, sector=89632, nr_sectors = 8 limit=40427 [ 246.189323][ T6587] syz.1.18: attempt to access beyond end of device [ 246.189323][ T6587] loop1: rw=524288, sector=89640, nr_sectors = 8 limit=40427 [ 246.189784][ T6587] syz.1.18: attempt to access beyond end of device [ 246.189784][ T6587] loop1: rw=524288, sector=89648, nr_sectors = 8 limit=40427 [ 246.190189][ T6587] syz.1.18: attempt to access beyond end of device [ 246.190189][ T6587] loop1: rw=524288, sector=89656, nr_sectors = 8 limit=40427 [ 246.192321][ T6587] syz.1.18: attempt to access beyond end of device [ 246.192321][ T6587] loop1: rw=524288, sector=89664, nr_sectors = 8 limit=40427 [ 246.192718][ T6587] syz.1.18: attempt to access beyond end of device [ 246.192718][ T6587] loop1: rw=524288, sector=89672, nr_sectors = 8 limit=40427 [ 246.193098][ T6587] syz.1.18: attempt to access beyond end of device [ 246.193098][ T6587] loop1: rw=524288, sector=89680, nr_sectors = 8 limit=40427 [ 246.195463][ T6587] syz.1.18: attempt to access beyond end of device [ 246.195463][ T6587] loop1: rw=524288, sector=89688, nr_sectors = 8 limit=40427 [ 246.195893][ T6587] syz.1.18: attempt to access beyond end of device [ 246.195893][ T6587] loop1: rw=524288, sector=89696, nr_sectors = 8 limit=40427 [ 251.189942][ T6587] bio_check_eod: 40835 callbacks suppressed [ 251.190054][ T6587] syz.1.18: attempt to access beyond end of device [ 251.190054][ T6587] loop1: rw=0, sector=89096, nr_sectors = 8 limit=40427 [ 251.190443][ T6587] syz.1.18: attempt to access beyond end of device [ 251.190443][ T6587] loop1: rw=0, sector=89104, nr_sectors = 8 limit=40427 [ 251.190813][ T6587] syz.1.18: attempt to access beyond end of device [ 251.190813][ T6587] loop1: rw=0, sector=89112, nr_sectors = 8 limit=40427 [ 251.191130][ T6587] syz.1.18: attempt to access beyond end of device [ 251.191130][ T6587] loop1: rw=0, sector=89120, nr_sectors = 8 limit=40427 [ 251.193267][ T6587] syz.1.18: attempt to access beyond end of device [ 251.193267][ T6587] loop1: rw=0, sector=89128, nr_sectors = 8 limit=40427 [ 251.193619][ T6587] syz.1.18: attempt to access beyond end of device [ 251.193619][ T6587] loop1: rw=0, sector=89136, nr_sectors = 8 limit=40427 [ 251.193945][ T6587] syz.1.18: attempt to access beyond end of device [ 251.193945][ T6587] loop1: rw=0, sector=89144, nr_sectors = 8 limit=40427 [ 251.194426][ T6587] syz.1.18: attempt to access beyond end of device [ 251.194426][ T6587] loop1: rw=0, sector=89152, nr_sectors = 8 limit=40427 [ 251.196424][ T6587] syz.1.18: attempt to access beyond end of device [ 251.196424][ T6587] loop1: rw=0, sector=89160, nr_sectors = 8 limit=40427 [ 251.196755][ T6587] syz.1.18: attempt to access beyond end of device [ 251.196755][ T6587] loop1: rw=0, sector=89168, nr_sectors = 8 limit=40427 [ 252.644501][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 252.701396][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 252.710144][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 252.712320][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 252.727987][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.820442][ T4908] Bluetooth: hci3: command tx timeout [ 256.004802][ T6633] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.014163][ T6633] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.014403][ T6633] bridge_slave_0: entered allmulticast mode [ 256.017379][ T6633] bridge_slave_0: entered promiscuous mode [ 256.036108][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.036189][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.081419][ T6633] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.088950][ T6633] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.089188][ T6633] bridge_slave_1: entered allmulticast mode [ 256.140158][ T6633] bridge_slave_1: entered promiscuous mode [ 256.200252][ T6536] bio_check_eod: 33237 callbacks suppressed [ 256.201316][ T6536] syz.0.17: attempt to access beyond end of device [ 256.201316][ T6536] loop0: rw=0, sector=89008, nr_sectors = 8 limit=40427 [ 256.201800][ T6536] syz.0.17: attempt to access beyond end of device [ 256.201800][ T6536] loop0: rw=0, sector=89016, nr_sectors = 8 limit=40427 [ 256.202102][ T6536] syz.0.17: attempt to access beyond end of device [ 256.202102][ T6536] loop0: rw=0, sector=89024, nr_sectors = 8 limit=40427 [ 256.204619][ T6536] syz.0.17: attempt to access beyond end of device [ 256.204619][ T6536] loop0: rw=0, sector=89032, nr_sectors = 8 limit=40427 [ 256.205156][ T6536] syz.0.17: attempt to access beyond end of device [ 256.205156][ T6536] loop0: rw=0, sector=89040, nr_sectors = 8 limit=40427 [ 256.205497][ T6536] syz.0.17: attempt to access beyond end of device [ 256.205497][ T6536] loop0: rw=0, sector=89048, nr_sectors = 8 limit=40427 [ 256.205847][ T6536] syz.0.17: attempt to access beyond end of device [ 256.205847][ T6536] loop0: rw=0, sector=89056, nr_sectors = 8 limit=40427 [ 256.206185][ T6536] syz.0.17: attempt to access beyond end of device [ 256.206185][ T6536] loop0: rw=0, sector=89064, nr_sectors = 8 limit=40427 [ 256.206489][ T6536] syz.0.17: attempt to access beyond end of device [ 256.206489][ T6536] loop0: rw=0, sector=89072, nr_sectors = 8 limit=40427 [ 256.206769][ T6536] syz.0.17: attempt to access beyond end of device [ 256.206769][ T6536] loop0: rw=0, sector=89080, nr_sectors = 8 limit=40427 [ 256.679017][ T6633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.731036][ T6633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.899758][ T4908] Bluetooth: hci3: command tx timeout [ 257.184968][ T6633] team0: Port device team_slave_0 added [ 257.195357][ T6633] team0: Port device team_slave_1 added [ 257.611119][ T6633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.611214][ T6633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.611281][ T6633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.627921][ T6633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.627977][ T6633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.632492][ T6633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.288134][ T6633] hsr_slave_0: entered promiscuous mode [ 258.296045][ T6633] hsr_slave_1: entered promiscuous mode [ 258.304572][ T6633] debugfs: 'hsr0' already exists in 'hsr' [ 258.304665][ T6633] Cannot create hsr debugfs directory [ 258.981235][ T4908] Bluetooth: hci3: command tx timeout [ 260.012971][ T6633] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 260.095351][ T6633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 260.104480][ T6633] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 260.304602][ T6633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 260.322101][ T6633] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 260.413047][ T6633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 260.430037][ T6633] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 260.475708][ T6633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 261.059718][ T4908] Bluetooth: hci3: command tx timeout [ 261.129769][ T6633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.211353][ T6536] bio_check_eod: 32115 callbacks suppressed [ 261.217624][ T6536] syz.0.17: attempt to access beyond end of device [ 261.217624][ T6536] loop0: rw=524288, sector=89688, nr_sectors = 8 limit=40427 [ 261.225441][ T6587] syz.1.18: attempt to access beyond end of device [ 261.225441][ T6587] loop1: rw=524288, sector=88512, nr_sectors = 8 limit=40427 [ 261.225840][ T6587] syz.1.18: attempt to access beyond end of device [ 261.225840][ T6587] loop1: rw=524288, sector=88520, nr_sectors = 8 limit=40427 [ 261.226154][ T6587] syz.1.18: attempt to access beyond end of device [ 261.226154][ T6587] loop1: rw=524288, sector=88528, nr_sectors = 8 limit=40427 [ 261.226486][ T6587] syz.1.18: attempt to access beyond end of device [ 261.226486][ T6587] loop1: rw=524288, sector=88536, nr_sectors = 8 limit=40427 [ 261.239221][ T6587] syz.1.18: attempt to access beyond end of device [ 261.239221][ T6587] loop1: rw=524288, sector=88544, nr_sectors = 8 limit=40427 [ 261.240145][ T6587] syz.1.18: attempt to access beyond end of device [ 261.240145][ T6587] loop1: rw=524288, sector=88552, nr_sectors = 8 limit=40427 [ 261.240537][ T6587] syz.1.18: attempt to access beyond end of device [ 261.240537][ T6587] loop1: rw=524288, sector=88560, nr_sectors = 8 limit=40427 [ 261.240858][ T6587] syz.1.18: attempt to access beyond end of device [ 261.240858][ T6587] loop1: rw=524288, sector=88568, nr_sectors = 8 limit=40427 [ 261.264958][ T6587] syz.1.18: attempt to access beyond end of device [ 261.264958][ T6587] loop1: rw=524288, sector=88576, nr_sectors = 8 limit=40427 [ 261.429812][ T6633] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.522533][ T1393] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.523022][ T1393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.613447][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.617010][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.443594][ T6633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.730904][ T6633] veth0_vlan: entered promiscuous mode [ 263.758410][ T6633] veth1_vlan: entered promiscuous mode [ 264.006345][ T6633] veth0_macvtap: entered promiscuous mode [ 264.069924][ T6633] veth1_macvtap: entered promiscuous mode [ 264.176359][ T6633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.285885][ T6633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.355463][ T1384] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.356243][ T1384] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.356369][ T1384] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.356475][ T1384] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.167492][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.175686][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.519871][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.519957][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/09 06:45:28 executed programs: 5 [ 266.219902][ T6587] bio_check_eod: 27255 callbacks suppressed [ 266.226213][ T6587] syz.1.18: attempt to access beyond end of device [ 266.226213][ T6587] loop1: rw=0, sector=89736, nr_sectors = 8 limit=40427 [ 266.251377][ T6536] syz.0.17: attempt to access beyond end of device [ 266.251377][ T6536] loop0: rw=0, sector=86616, nr_sectors = 8 limit=40427 [ 266.265643][ T6536] syz.0.17: attempt to access beyond end of device [ 266.265643][ T6536] loop0: rw=0, sector=86624, nr_sectors = 8 limit=40427 [ 266.265755][ T6536] syz.0.17: attempt to access beyond end of device [ 266.265755][ T6536] loop0: rw=0, sector=86632, nr_sectors = 8 limit=40427 [ 266.265852][ T6536] syz.0.17: attempt to access beyond end of device [ 266.265852][ T6536] loop0: rw=0, sector=86640, nr_sectors = 8 limit=40427 [ 266.265949][ T6536] syz.0.17: attempt to access beyond end of device [ 266.265949][ T6536] loop0: rw=0, sector=86648, nr_sectors = 8 limit=40427 [ 266.266048][ T6536] syz.0.17: attempt to access beyond end of device [ 266.266048][ T6536] loop0: rw=0, sector=86656, nr_sectors = 8 limit=40427 [ 266.266146][ T6536] syz.0.17: attempt to access beyond end of device [ 266.266146][ T6536] loop0: rw=0, sector=86664, nr_sectors = 8 limit=40427 [ 266.266254][ T6536] syz.0.17: attempt to access beyond end of device [ 266.266254][ T6536] loop0: rw=0, sector=86672, nr_sectors = 8 limit=40427 [ 266.266356][ T6536] syz.0.17: attempt to access beyond end of device [ 266.266356][ T6536] loop0: rw=0, sector=86680, nr_sectors = 8 limit=40427 [ 267.233364][ T6678] loop3: detected capacity change from 0 to 40427 [ 267.263835][ T6678] F2FS-fs: heap/no_heap options were deprecated [ 267.277419][ T6678] F2FS-fs: heap/no_heap options were deprecated [ 267.327134][ T6678] F2FS-fs (loop3): Image doesn't support compression [ 267.377406][ T6678] F2FS-fs (loop3): invalid crc value [ 267.862169][ T6678] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 268.079021][ T6678] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 269.884521][ T6631] F2FS-fs (loop2): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 271.230316][ T6587] bio_check_eod: 33311 callbacks suppressed [ 271.230437][ T6587] syz.1.18: attempt to access beyond end of device [ 271.230437][ T6587] loop1: rw=0, sector=87816, nr_sectors = 8 limit=40427 [ 271.230638][ T6587] syz.1.18: attempt to access beyond end of device [ 271.230638][ T6587] loop1: rw=0, sector=87824, nr_sectors = 8 limit=40427 [ 271.231254][ T6587] syz.1.18: attempt to access beyond end of device [ 271.231254][ T6587] loop1: rw=0, sector=87832, nr_sectors = 8 limit=40427 [ 271.231344][ T6631] syz.2.19: attempt to access beyond end of device [ 271.231344][ T6631] loop2: rw=524288, sector=87760, nr_sectors = 8 limit=40427 [ 271.231542][ T6631] syz.2.19: attempt to access beyond end of device [ 271.231542][ T6631] loop2: rw=524288, sector=87768, nr_sectors = 8 limit=40427 [ 271.231752][ T6631] syz.2.19: attempt to access beyond end of device [ 271.231752][ T6631] loop2: rw=524288, sector=87776, nr_sectors = 8 limit=40427 [ 271.231957][ T6631] syz.2.19: attempt to access beyond end of device [ 271.231957][ T6631] loop2: rw=524288, sector=87784, nr_sectors = 8 limit=40427 [ 271.232140][ T6631] syz.2.19: attempt to access beyond end of device [ 271.232140][ T6631] loop2: rw=524288, sector=87792, nr_sectors = 8 limit=40427 [ 271.232322][ T6631] syz.2.19: attempt to access beyond end of device [ 271.232322][ T6631] loop2: rw=524288, sector=87800, nr_sectors = 8 limit=40427 [ 271.232503][ T6631] syz.2.19: attempt to access beyond end of device [ 271.232503][ T6631] loop2: rw=524288, sector=87808, nr_sectors = 8 limit=40427 [ 276.243987][ T6631] bio_check_eod: 45547 callbacks suppressed [ 276.244113][ T6631] syz.2.19: attempt to access beyond end of device [ 276.244113][ T6631] loop2: rw=0, sector=86832, nr_sectors = 8 limit=40427 [ 276.244504][ T6631] syz.2.19: attempt to access beyond end of device [ 276.244504][ T6631] loop2: rw=0, sector=86840, nr_sectors = 8 limit=40427 [ 276.244838][ T6631] syz.2.19: attempt to access beyond end of device [ 276.244838][ T6631] loop2: rw=0, sector=86848, nr_sectors = 8 limit=40427 [ 276.245164][ T6631] syz.2.19: attempt to access beyond end of device [ 276.245164][ T6631] loop2: rw=0, sector=86856, nr_sectors = 8 limit=40427 [ 276.245571][ T6631] syz.2.19: attempt to access beyond end of device [ 276.245571][ T6631] loop2: rw=0, sector=86864, nr_sectors = 8 limit=40427 [ 276.245915][ T6631] syz.2.19: attempt to access beyond end of device [ 276.245915][ T6631] loop2: rw=0, sector=86872, nr_sectors = 8 limit=40427 [ 276.246255][ T6631] syz.2.19: attempt to access beyond end of device [ 276.246255][ T6631] loop2: rw=0, sector=86880, nr_sectors = 8 limit=40427 [ 276.246595][ T6631] syz.2.19: attempt to access beyond end of device [ 276.246595][ T6631] loop2: rw=0, sector=86888, nr_sectors = 8 limit=40427 [ 276.246918][ T6631] syz.2.19: attempt to access beyond end of device [ 276.246918][ T6631] loop2: rw=0, sector=86896, nr_sectors = 8 limit=40427 [ 276.247243][ T6631] syz.2.19: attempt to access beyond end of device [ 276.247243][ T6631] loop2: rw=0, sector=86904, nr_sectors = 8 limit=40427 [ 281.239483][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.265985][ T6631] bio_check_eod: 41870 callbacks suppressed [ 281.267253][ T6631] syz.2.19: attempt to access beyond end of device [ 281.267253][ T6631] loop2: rw=0, sector=88752, nr_sectors = 8 limit=40427 [ 281.267485][ T6631] syz.2.19: attempt to access beyond end of device [ 281.267485][ T6631] loop2: rw=0, sector=88760, nr_sectors = 8 limit=40427 [ 281.267652][ T6631] syz.2.19: attempt to access beyond end of device [ 281.267652][ T6631] loop2: rw=0, sector=88768, nr_sectors = 8 limit=40427 [ 281.267803][ T6631] syz.2.19: attempt to access beyond end of device [ 281.267803][ T6631] loop2: rw=0, sector=88776, nr_sectors = 8 limit=40427 [ 281.310292][ T6587] syz.1.18: attempt to access beyond end of device [ 281.310292][ T6587] loop1: rw=0, sector=87376, nr_sectors = 8 limit=40427 [ 281.310785][ T6587] syz.1.18: attempt to access beyond end of device [ 281.310785][ T6587] loop1: rw=0, sector=87384, nr_sectors = 8 limit=40427 [ 281.311156][ T6587] syz.1.18: attempt to access beyond end of device [ 281.311156][ T6587] loop1: rw=0, sector=87392, nr_sectors = 8 limit=40427 [ 281.315752][ T6587] syz.1.18: attempt to access beyond end of device [ 281.315752][ T6587] loop1: rw=0, sector=87400, nr_sectors = 8 limit=40427 [ 281.316173][ T6587] syz.1.18: attempt to access beyond end of device [ 281.316173][ T6587] loop1: rw=0, sector=87408, nr_sectors = 8 limit=40427 [ 281.316528][ T6587] syz.1.18: attempt to access beyond end of device [ 281.316528][ T6587] loop1: rw=0, sector=87416, nr_sectors = 8 limit=40427 [ 281.327144][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.341098][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.365925][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.369142][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 283.540144][ T4908] Bluetooth: hci4: command tx timeout [ 285.431995][ T6684] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.432516][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.434825][ T6684] bridge_slave_0: entered allmulticast mode [ 285.499970][ T6684] bridge_slave_0: entered promiscuous mode [ 285.594014][ T6684] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.594603][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.604997][ T6684] bridge_slave_1: entered allmulticast mode [ 285.619789][ T4908] Bluetooth: hci4: command tx timeout [ 285.642668][ T6684] bridge_slave_1: entered promiscuous mode [ 286.133505][ T6684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.159107][ T6684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.270877][ T6536] bio_check_eod: 38482 callbacks suppressed [ 286.275111][ T6587] syz.1.18: attempt to access beyond end of device [ 286.275111][ T6587] loop1: rw=0, sector=89216, nr_sectors = 8 limit=40427 [ 286.275586][ T6587] syz.1.18: attempt to access beyond end of device [ 286.275586][ T6587] loop1: rw=0, sector=89224, nr_sectors = 8 limit=40427 [ 286.275932][ T6587] syz.1.18: attempt to access beyond end of device [ 286.275932][ T6587] loop1: rw=0, sector=89232, nr_sectors = 8 limit=40427 [ 286.276378][ T6631] syz.2.19: attempt to access beyond end of device [ 286.276378][ T6631] loop2: rw=0, sector=88464, nr_sectors = 8 limit=40427 [ 286.276741][ T6631] syz.2.19: attempt to access beyond end of device [ 286.276741][ T6631] loop2: rw=0, sector=88472, nr_sectors = 8 limit=40427 [ 286.277018][ T6631] syz.2.19: attempt to access beyond end of device [ 286.277018][ T6631] loop2: rw=0, sector=88480, nr_sectors = 8 limit=40427 [ 286.277385][ T6631] syz.2.19: attempt to access beyond end of device [ 286.277385][ T6631] loop2: rw=0, sector=88488, nr_sectors = 8 limit=40427 [ 286.277722][ T6631] syz.2.19: attempt to access beyond end of device [ 286.277722][ T6631] loop2: rw=0, sector=88496, nr_sectors = 8 limit=40427 [ 286.281228][ T6587] syz.1.18: attempt to access beyond end of device [ 286.281228][ T6587] loop1: rw=0, sector=89240, nr_sectors = 8 limit=40427 [ 286.329694][ T6536] syz.0.17: attempt to access beyond end of device [ 286.329694][ T6536] loop0: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 286.882887][ T6684] team0: Port device team_slave_0 added [ 286.926047][ T6684] team0: Port device team_slave_1 added [ 287.394930][ T6684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.398032][ T6684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.398105][ T6684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.471334][ T6684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.471478][ T6684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.471577][ T6684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.699784][ T4908] Bluetooth: hci4: command tx timeout [ 288.130248][ T6684] hsr_slave_0: entered promiscuous mode [ 288.165125][ T6684] hsr_slave_1: entered promiscuous mode [ 288.173557][ T6684] debugfs: 'hsr0' already exists in 'hsr' [ 288.191838][ T6684] Cannot create hsr debugfs directory [ 289.779709][ T4908] Bluetooth: hci4: command tx timeout [ 290.798443][ T6684] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 290.944598][ T6684] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 291.003701][ T6684] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 291.125519][ T6684] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 291.161108][ T6684] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 291.204044][ T6684] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 291.217571][ T6684] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 291.264811][ T6684] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 291.279687][ T6631] bio_check_eod: 37594 callbacks suppressed [ 291.279857][ T6631] syz.2.19: attempt to access beyond end of device [ 291.279857][ T6631] loop2: rw=0, sector=86200, nr_sectors = 8 limit=40427 [ 291.280258][ T6631] syz.2.19: attempt to access beyond end of device [ 291.280258][ T6631] loop2: rw=0, sector=86208, nr_sectors = 8 limit=40427 [ 291.280613][ T6631] syz.2.19: attempt to access beyond end of device [ 291.280613][ T6631] loop2: rw=0, sector=86216, nr_sectors = 8 limit=40427 [ 291.280940][ T6631] syz.2.19: attempt to access beyond end of device [ 291.280940][ T6631] loop2: rw=0, sector=86224, nr_sectors = 8 limit=40427 [ 291.284205][ T6536] syz.0.17: attempt to access beyond end of device [ 291.284205][ T6536] loop0: rw=0, sector=86648, nr_sectors = 8 limit=40427 [ 291.284611][ T6536] syz.0.17: attempt to access beyond end of device [ 291.284611][ T6536] loop0: rw=0, sector=86656, nr_sectors = 8 limit=40427 [ 291.284987][ T6536] syz.0.17: attempt to access beyond end of device [ 291.284987][ T6536] loop0: rw=0, sector=86664, nr_sectors = 8 limit=40427 [ 291.285325][ T6536] syz.0.17: attempt to access beyond end of device [ 291.285325][ T6536] loop0: rw=0, sector=86672, nr_sectors = 8 limit=40427 [ 291.289808][ T6631] syz.2.19: attempt to access beyond end of device [ 291.289808][ T6631] loop2: rw=0, sector=86232, nr_sectors = 8 limit=40427 [ 291.289978][ T6631] syz.2.19: attempt to access beyond end of device [ 291.289978][ T6631] loop2: rw=0, sector=86240, nr_sectors = 8 limit=40427 [ 292.299521][ T6684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.574118][ T6684] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.605998][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.606555][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.698405][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.701531][ T1052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.089308][ T6684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.289738][ T6631] bio_check_eod: 35751 callbacks suppressed [ 296.291644][ T6587] syz.1.18: attempt to access beyond end of device [ 296.291644][ T6587] loop1: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 296.292057][ T6587] syz.1.18: attempt to access beyond end of device [ 296.292057][ T6587] loop1: rw=524288, sector=86096, nr_sectors = 8 limit=40427 [ 296.292605][ T6587] syz.1.18: attempt to access beyond end of device [ 296.292605][ T6587] loop1: rw=524288, sector=86104, nr_sectors = 8 limit=40427 [ 296.292991][ T6536] syz.0.17: attempt to access beyond end of device [ 296.292991][ T6536] loop0: rw=524288, sector=86232, nr_sectors = 8 limit=40427 [ 296.293494][ T6536] syz.0.17: attempt to access beyond end of device [ 296.293494][ T6536] loop0: rw=524288, sector=86240, nr_sectors = 8 limit=40427 [ 296.293848][ T6536] syz.0.17: attempt to access beyond end of device [ 296.293848][ T6536] loop0: rw=524288, sector=86248, nr_sectors = 8 limit=40427 [ 296.294266][ T6536] syz.0.17: attempt to access beyond end of device [ 296.294266][ T6536] loop0: rw=524288, sector=86256, nr_sectors = 8 limit=40427 [ 296.294691][ T6536] syz.0.17: attempt to access beyond end of device [ 296.294691][ T6536] loop0: rw=524288, sector=86264, nr_sectors = 8 limit=40427 [ 296.295098][ T6536] syz.0.17: attempt to access beyond end of device [ 296.295098][ T6536] loop0: rw=524288, sector=86272, nr_sectors = 8 limit=40427 [ 296.321362][ T6631] syz.2.19: attempt to access beyond end of device [ 296.321362][ T6631] loop2: rw=524288, sector=89096, nr_sectors = 8 limit=40427 [ 296.700091][ T6684] veth0_vlan: entered promiscuous mode [ 296.785979][ T6684] veth1_vlan: entered promiscuous mode [ 297.003699][ T6684] veth0_macvtap: entered promiscuous mode [ 297.068763][ T6684] veth1_macvtap: entered promiscuous mode [ 297.189802][ T6684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.244784][ T6684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.923621][ T1052] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.993043][ T1382] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.994014][ T1382] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.994059][ T1382] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.590090][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.591426][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.071623][ T1382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.079807][ T1382] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/09 06:46:02 executed programs: 6 [ 301.299744][ T6631] bio_check_eod: 32117 callbacks suppressed [ 301.299829][ T6631] syz.2.19: attempt to access beyond end of device [ 301.299829][ T6631] loop2: rw=524288, sector=87760, nr_sectors = 8 limit=40427 [ 301.300002][ T6631] syz.2.19: attempt to access beyond end of device [ 301.300002][ T6631] loop2: rw=524288, sector=87768, nr_sectors = 8 limit=40427 [ 301.300167][ T6631] syz.2.19: attempt to access beyond end of device [ 301.300167][ T6631] loop2: rw=524288, sector=87776, nr_sectors = 8 limit=40427 [ 301.300328][ T6631] syz.2.19: attempt to access beyond end of device [ 301.300328][ T6631] loop2: rw=524288, sector=87784, nr_sectors = 8 limit=40427 [ 301.300497][ T6631] syz.2.19: attempt to access beyond end of device [ 301.300497][ T6631] loop2: rw=524288, sector=87792, nr_sectors = 8 limit=40427 [ 301.300656][ T6631] syz.2.19: attempt to access beyond end of device [ 301.300656][ T6631] loop2: rw=524288, sector=87800, nr_sectors = 8 limit=40427 [ 301.300815][ T6631] syz.2.19: attempt to access beyond end of device [ 301.300815][ T6631] loop2: rw=524288, sector=87808, nr_sectors = 8 limit=40427 [ 301.300976][ T6631] syz.2.19: attempt to access beyond end of device [ 301.300976][ T6631] loop2: rw=524288, sector=87816, nr_sectors = 8 limit=40427 [ 301.301156][ T6631] syz.2.19: attempt to access beyond end of device [ 301.301156][ T6631] loop2: rw=524288, sector=87824, nr_sectors = 8 limit=40427 [ 301.303367][ T6536] syz.0.17: attempt to access beyond end of device [ 301.303367][ T6536] loop0: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 301.717870][ T6728] loop4: detected capacity change from 0 to 40427 [ 301.791218][ T6728] F2FS-fs: heap/no_heap options were deprecated [ 301.791483][ T6728] F2FS-fs: heap/no_heap options were deprecated [ 301.958697][ T6728] F2FS-fs (loop4): Image doesn't support compression [ 301.981409][ T6728] F2FS-fs (loop4): invalid crc value [ 302.814674][ T6728] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 306.309849][ T6587] bio_check_eod: 35851 callbacks suppressed [ 306.309948][ T6587] syz.1.18: attempt to access beyond end of device [ 306.309948][ T6587] loop1: rw=0, sector=88936, nr_sectors = 8 limit=40427 [ 306.310346][ T6587] syz.1.18: attempt to access beyond end of device [ 306.310346][ T6587] loop1: rw=0, sector=88944, nr_sectors = 8 limit=40427 [ 306.310745][ T6587] syz.1.18: attempt to access beyond end of device [ 306.310745][ T6587] loop1: rw=0, sector=88952, nr_sectors = 8 limit=40427 [ 306.311089][ T6587] syz.1.18: attempt to access beyond end of device [ 306.311089][ T6587] loop1: rw=0, sector=88960, nr_sectors = 8 limit=40427 [ 306.311422][ T6631] syz.2.19: attempt to access beyond end of device [ 306.311422][ T6631] loop2: rw=524288, sector=88480, nr_sectors = 8 limit=40427 [ 306.313756][ T6631] syz.2.19: attempt to access beyond end of device [ 306.313756][ T6631] loop2: rw=524288, sector=88488, nr_sectors = 8 limit=40427 [ 306.314087][ T6631] syz.2.19: attempt to access beyond end of device [ 306.314087][ T6631] loop2: rw=524288, sector=88496, nr_sectors = 8 limit=40427 [ 306.314458][ T6631] syz.2.19: attempt to access beyond end of device [ 306.314458][ T6631] loop2: rw=524288, sector=88504, nr_sectors = 8 limit=40427 [ 306.314801][ T6631] syz.2.19: attempt to access beyond end of device [ 306.314801][ T6631] loop2: rw=524288, sector=88512, nr_sectors = 8 limit=40427 [ 306.315240][ T6587] syz.1.18: attempt to access beyond end of device [ 306.315240][ T6587] loop1: rw=0, sector=88968, nr_sectors = 8 limit=40427 [ 306.543174][ T6733] loop4: detected capacity change from 0 to 40427 [ 306.554306][ T6733] F2FS-fs: heap/no_heap options were deprecated [ 306.554497][ T6733] F2FS-fs: heap/no_heap options were deprecated [ 306.584732][ T6733] F2FS-fs (loop4): Image doesn't support compression [ 306.646929][ T6733] F2FS-fs (loop4): invalid crc value [ 307.395853][ T6733] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 307.601913][ T6733] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 309.299768][ T4908] Bluetooth: hci0: command 0x0406 tx timeout [ 310.798548][ T6682] F2FS-fs (loop3): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 311.319803][ T6536] bio_check_eod: 33999 callbacks suppressed [ 311.319913][ T6536] syz.0.17: attempt to access beyond end of device [ 311.319913][ T6536] loop0: rw=0, sector=87328, nr_sectors = 8 limit=40427 [ 311.320304][ T6536] syz.0.17: attempt to access beyond end of device [ 311.320304][ T6536] loop0: rw=0, sector=87336, nr_sectors = 8 limit=40427 [ 311.320646][ T6536] syz.0.17: attempt to access beyond end of device [ 311.320646][ T6536] loop0: rw=0, sector=87344, nr_sectors = 8 limit=40427 [ 311.321047][ T6536] syz.0.17: attempt to access beyond end of device [ 311.321047][ T6536] loop0: rw=0, sector=87352, nr_sectors = 8 limit=40427 [ 311.321629][ T6587] syz.1.18: attempt to access beyond end of device [ 311.321629][ T6587] loop1: rw=0, sector=86320, nr_sectors = 8 limit=40427 [ 311.323949][ T6587] syz.1.18: attempt to access beyond end of device [ 311.323949][ T6587] loop1: rw=0, sector=86328, nr_sectors = 8 limit=40427 [ 311.324367][ T6587] syz.1.18: attempt to access beyond end of device [ 311.324367][ T6587] loop1: rw=0, sector=86336, nr_sectors = 8 limit=40427 [ 311.324712][ T6587] syz.1.18: attempt to access beyond end of device [ 311.324712][ T6587] loop1: rw=0, sector=86344, nr_sectors = 8 limit=40427 [ 311.325086][ T6587] syz.1.18: attempt to access beyond end of device [ 311.325086][ T6587] loop1: rw=0, sector=86352, nr_sectors = 8 limit=40427 [ 311.327118][ T6536] syz.0.17: attempt to access beyond end of device [ 311.327118][ T6536] loop0: rw=0, sector=87360, nr_sectors = 8 limit=40427 [ 316.329831][ T6587] bio_check_eod: 46580 callbacks suppressed [ 316.335936][ T6587] syz.1.18: attempt to access beyond end of device [ 316.335936][ T6587] loop1: rw=524288, sector=89480, nr_sectors = 8 limit=40427 [ 316.337764][ T6631] syz.2.19: attempt to access beyond end of device [ 316.337764][ T6631] loop2: rw=0, sector=86832, nr_sectors = 8 limit=40427 [ 316.338158][ T6631] syz.2.19: attempt to access beyond end of device [ 316.338158][ T6631] loop2: rw=0, sector=86840, nr_sectors = 8 limit=40427 [ 316.338504][ T6631] syz.2.19: attempt to access beyond end of device [ 316.338504][ T6631] loop2: rw=0, sector=86848, nr_sectors = 8 limit=40427 [ 316.338839][ T6631] syz.2.19: attempt to access beyond end of device [ 316.338839][ T6631] loop2: rw=0, sector=86856, nr_sectors = 8 limit=40427 [ 316.342060][ T6587] syz.1.18: attempt to access beyond end of device [ 316.342060][ T6587] loop1: rw=524288, sector=89488, nr_sectors = 8 limit=40427 [ 316.342199][ T6587] syz.1.18: attempt to access beyond end of device [ 316.342199][ T6587] loop1: rw=524288, sector=89496, nr_sectors = 8 limit=40427 [ 316.346645][ T6631] syz.2.19: attempt to access beyond end of device [ 316.346645][ T6631] loop2: rw=0, sector=86864, nr_sectors = 8 limit=40427 [ 316.347029][ T6631] syz.2.19: attempt to access beyond end of device [ 316.347029][ T6631] loop2: rw=0, sector=86872, nr_sectors = 8 limit=40427 [ 316.347395][ T6631] syz.2.19: attempt to access beyond end of device [ 316.347395][ T6631] loop2: rw=0, sector=86880, nr_sectors = 8 limit=40427 [ 317.464804][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.464994][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.516428][ T4908] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 319.556370][ T4908] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 319.569877][ T4908] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 319.617253][ T4908] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 319.629272][ T4908] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 321.339624][ T6631] bio_check_eod: 41551 callbacks suppressed [ 321.339774][ T6631] syz.2.19: attempt to access beyond end of device [ 321.339774][ T6631] loop2: rw=0, sector=88824, nr_sectors = 8 limit=40427 [ 321.340197][ T6631] syz.2.19: attempt to access beyond end of device [ 321.340197][ T6631] loop2: rw=0, sector=88832, nr_sectors = 8 limit=40427 [ 321.340641][ T6631] syz.2.19: attempt to access beyond end of device [ 321.340641][ T6631] loop2: rw=0, sector=88840, nr_sectors = 8 limit=40427 [ 321.340967][ T6631] syz.2.19: attempt to access beyond end of device [ 321.340967][ T6631] loop2: rw=0, sector=88848, nr_sectors = 8 limit=40427 [ 321.345210][ T6587] syz.1.18: attempt to access beyond end of device [ 321.345210][ T6587] loop1: rw=0, sector=89488, nr_sectors = 8 limit=40427 [ 321.345630][ T6587] syz.1.18: attempt to access beyond end of device [ 321.345630][ T6587] loop1: rw=0, sector=89496, nr_sectors = 8 limit=40427 [ 321.345932][ T6587] syz.1.18: attempt to access beyond end of device [ 321.345932][ T6587] loop1: rw=0, sector=89504, nr_sectors = 8 limit=40427 [ 321.346273][ T6587] syz.1.18: attempt to access beyond end of device [ 321.346273][ T6587] loop1: rw=0, sector=89512, nr_sectors = 8 limit=40427 [ 321.346613][ T6587] syz.1.18: attempt to access beyond end of device [ 321.346613][ T6587] loop1: rw=0, sector=89520, nr_sectors = 8 limit=40427 [ 321.347019][ T6631] syz.2.19: attempt to access beyond end of device [ 321.347019][ T6631] loop2: rw=0, sector=88856, nr_sectors = 8 limit=40427 [ 321.699758][ T4908] Bluetooth: hci5: command tx timeout [ 323.634423][ T6739] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.640014][ T6739] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.640263][ T6739] bridge_slave_0: entered allmulticast mode [ 323.664070][ T6739] bridge_slave_0: entered promiscuous mode [ 323.705103][ T6739] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.705499][ T6739] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.706082][ T6739] bridge_slave_1: entered allmulticast mode [ 323.739874][ T6739] bridge_slave_1: entered promiscuous mode [ 323.779809][ T4908] Bluetooth: hci5: command tx timeout [ 324.176254][ T6739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.221993][ T6739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.629399][ T6739] team0: Port device team_slave_0 added [ 324.653965][ T6739] team0: Port device team_slave_1 added [ 325.324671][ T6739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.336292][ T6739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.336331][ T6739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.362992][ T6739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.363046][ T6739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.363129][ T6739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.859786][ T4908] Bluetooth: hci5: command tx timeout [ 326.026029][ T6739] hsr_slave_0: entered promiscuous mode [ 326.036046][ T6739] hsr_slave_1: entered promiscuous mode [ 326.037028][ T6739] debugfs: 'hsr0' already exists in 'hsr' [ 326.037055][ T6739] Cannot create hsr debugfs directory [ 326.349774][ T6631] bio_check_eod: 39294 callbacks suppressed [ 326.350687][ T6631] syz.2.19: attempt to access beyond end of device [ 326.350687][ T6631] loop2: rw=0, sector=89504, nr_sectors = 8 limit=40427 [ 326.351243][ T6631] syz.2.19: attempt to access beyond end of device [ 326.351243][ T6631] loop2: rw=0, sector=89512, nr_sectors = 8 limit=40427 [ 326.351598][ T6631] syz.2.19: attempt to access beyond end of device [ 326.351598][ T6631] loop2: rw=0, sector=89520, nr_sectors = 8 limit=40427 [ 326.352009][ T6631] syz.2.19: attempt to access beyond end of device [ 326.352009][ T6631] loop2: rw=0, sector=89528, nr_sectors = 8 limit=40427 [ 326.353355][ T6682] syz.3.20: attempt to access beyond end of device [ 326.353355][ T6682] loop3: rw=524288, sector=86760, nr_sectors = 8 limit=40427 [ 326.353777][ T6682] syz.3.20: attempt to access beyond end of device [ 326.353777][ T6682] loop3: rw=524288, sector=86768, nr_sectors = 8 limit=40427 [ 326.354167][ T6682] syz.3.20: attempt to access beyond end of device [ 326.354167][ T6682] loop3: rw=524288, sector=86776, nr_sectors = 8 limit=40427 [ 326.354599][ T6682] syz.3.20: attempt to access beyond end of device [ 326.354599][ T6682] loop3: rw=524288, sector=86784, nr_sectors = 8 limit=40427 [ 326.358299][ T6631] syz.2.19: attempt to access beyond end of device [ 326.358299][ T6631] loop2: rw=0, sector=89536, nr_sectors = 8 limit=40427 [ 326.358710][ T6631] syz.2.19: attempt to access beyond end of device [ 326.358710][ T6631] loop2: rw=0, sector=89544, nr_sectors = 8 limit=40427 [ 327.941372][ T59] Bluetooth: hci5: command tx timeout [ 329.779194][ T6739] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 329.780019][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 329.879118][ T6739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 329.973071][ T6739] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 330.044329][ T6739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 330.092268][ T6739] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 330.161406][ T6739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 330.171948][ T6739] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 330.248139][ T6739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 330.824786][ T6739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.212922][ T6739] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.328845][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.335234][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.359583][ T6587] bio_check_eod: 37032 callbacks suppressed [ 331.359673][ T6587] syz.1.18: attempt to access beyond end of device [ 331.359673][ T6587] loop1: rw=524288, sector=86176, nr_sectors = 8 limit=40427 [ 331.359860][ T6587] syz.1.18: attempt to access beyond end of device [ 331.359860][ T6587] loop1: rw=524288, sector=86184, nr_sectors = 8 limit=40427 [ 331.360037][ T6587] syz.1.18: attempt to access beyond end of device [ 331.360037][ T6587] loop1: rw=524288, sector=86192, nr_sectors = 8 limit=40427 [ 331.360200][ T6587] syz.1.18: attempt to access beyond end of device [ 331.360200][ T6587] loop1: rw=524288, sector=86200, nr_sectors = 8 limit=40427 [ 331.360361][ T6587] syz.1.18: attempt to access beyond end of device [ 331.360361][ T6587] loop1: rw=524288, sector=86208, nr_sectors = 8 limit=40427 [ 331.361494][ T6587] syz.1.18: attempt to access beyond end of device [ 331.361494][ T6587] loop1: rw=524288, sector=86216, nr_sectors = 8 limit=40427 [ 331.361636][ T6631] syz.2.19: attempt to access beyond end of device [ 331.361636][ T6631] loop2: rw=524288, sector=87384, nr_sectors = 8 limit=40427 [ 331.361801][ T6631] syz.2.19: attempt to access beyond end of device [ 331.361801][ T6631] loop2: rw=524288, sector=87392, nr_sectors = 8 limit=40427 [ 331.361979][ T6631] syz.2.19: attempt to access beyond end of device [ 331.361979][ T6631] loop2: rw=524288, sector=87400, nr_sectors = 8 limit=40427 [ 331.362199][ T6587] syz.1.18: attempt to access beyond end of device [ 331.362199][ T6587] loop1: rw=524288, sector=86224, nr_sectors = 8 limit=40427 [ 331.526312][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.526904][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.587952][ T6739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.310102][ T6739] veth0_vlan: entered promiscuous mode [ 336.360885][ T6739] veth1_vlan: entered promiscuous mode [ 336.369797][ T6682] bio_check_eod: 36440 callbacks suppressed [ 336.375856][ T6682] syz.3.20: attempt to access beyond end of device [ 336.375856][ T6682] loop3: rw=0, sector=87024, nr_sectors = 8 limit=40427 [ 336.377007][ T6631] syz.2.19: attempt to access beyond end of device [ 336.377007][ T6631] loop2: rw=524288, sector=86448, nr_sectors = 8 limit=40427 [ 336.377396][ T6631] syz.2.19: attempt to access beyond end of device [ 336.377396][ T6631] loop2: rw=524288, sector=86456, nr_sectors = 8 limit=40427 [ 336.377745][ T6631] syz.2.19: attempt to access beyond end of device [ 336.377745][ T6631] loop2: rw=524288, sector=86464, nr_sectors = 8 limit=40427 [ 336.378074][ T6631] syz.2.19: attempt to access beyond end of device [ 336.378074][ T6631] loop2: rw=524288, sector=86472, nr_sectors = 8 limit=40427 [ 336.394272][ T6631] syz.2.19: attempt to access beyond end of device [ 336.394272][ T6631] loop2: rw=524288, sector=86480, nr_sectors = 8 limit=40427 [ 336.394664][ T6631] syz.2.19: attempt to access beyond end of device [ 336.394664][ T6631] loop2: rw=524288, sector=86488, nr_sectors = 8 limit=40427 [ 336.395001][ T6631] syz.2.19: attempt to access beyond end of device [ 336.395001][ T6631] loop2: rw=524288, sector=86496, nr_sectors = 8 limit=40427 [ 336.395349][ T6631] syz.2.19: attempt to access beyond end of device [ 336.395349][ T6631] loop2: rw=524288, sector=86504, nr_sectors = 8 limit=40427 [ 336.399018][ T6631] syz.2.19: attempt to access beyond end of device [ 336.399018][ T6631] loop2: rw=524288, sector=86512, nr_sectors = 8 limit=40427 [ 336.831709][ T6739] veth0_macvtap: entered promiscuous mode [ 336.916866][ T6739] veth1_macvtap: entered promiscuous mode [ 337.040173][ T6739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.131693][ T6739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.282829][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.282973][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.283143][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.289863][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.402539][ T1387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.404150][ T1387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.005527][ T1387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.013540][ T1387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/09 06:46:43 executed programs: 8 [ 341.380205][ T6631] bio_check_eod: 33289 callbacks suppressed [ 341.380302][ T6631] syz.2.19: attempt to access beyond end of device [ 341.380302][ T6631] loop2: rw=0, sector=88616, nr_sectors = 8 limit=40427 [ 341.380628][ T6631] syz.2.19: attempt to access beyond end of device [ 341.380628][ T6631] loop2: rw=0, sector=88624, nr_sectors = 8 limit=40427 [ 341.380964][ T6631] syz.2.19: attempt to access beyond end of device [ 341.380964][ T6631] loop2: rw=0, sector=88632, nr_sectors = 8 limit=40427 [ 341.381395][ T6631] syz.2.19: attempt to access beyond end of device [ 341.381395][ T6631] loop2: rw=0, sector=88640, nr_sectors = 8 limit=40427 [ 341.381784][ T6631] syz.2.19: attempt to access beyond end of device [ 341.381784][ T6631] loop2: rw=0, sector=88648, nr_sectors = 8 limit=40427 [ 341.382141][ T6631] syz.2.19: attempt to access beyond end of device [ 341.382141][ T6631] loop2: rw=0, sector=88656, nr_sectors = 8 limit=40427 [ 341.382459][ T6631] syz.2.19: attempt to access beyond end of device [ 341.382459][ T6631] loop2: rw=0, sector=88664, nr_sectors = 8 limit=40427 [ 341.382792][ T6631] syz.2.19: attempt to access beyond end of device [ 341.382792][ T6631] loop2: rw=0, sector=88672, nr_sectors = 8 limit=40427 [ 341.383135][ T6631] syz.2.19: attempt to access beyond end of device [ 341.383135][ T6631] loop2: rw=0, sector=88680, nr_sectors = 8 limit=40427 [ 341.383436][ T6631] syz.2.19: attempt to access beyond end of device [ 341.383436][ T6631] loop2: rw=0, sector=88688, nr_sectors = 8 limit=40427 [ 342.073918][ T6790] loop5: detected capacity change from 0 to 40427 [ 342.165174][ T6790] F2FS-fs: heap/no_heap options were deprecated [ 342.180075][ T6790] F2FS-fs: heap/no_heap options were deprecated [ 342.390236][ T6790] F2FS-fs (loop5): Image doesn't support compression [ 342.406423][ T6790] F2FS-fs (loop5): invalid crc value [ 343.133935][ T6790] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 343.423461][ T6790] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 346.389846][ T6682] bio_check_eod: 36386 callbacks suppressed [ 346.391506][ T6682] syz.3.20: attempt to access beyond end of device [ 346.391506][ T6682] loop3: rw=0, sector=88368, nr_sectors = 8 limit=40427 [ 346.391941][ T6682] syz.3.20: attempt to access beyond end of device [ 346.391941][ T6682] loop3: rw=0, sector=88376, nr_sectors = 8 limit=40427 [ 346.392263][ T6682] syz.3.20: attempt to access beyond end of device [ 346.392263][ T6682] loop3: rw=0, sector=88384, nr_sectors = 8 limit=40427 [ 346.392602][ T6682] syz.3.20: attempt to access beyond end of device [ 346.392602][ T6682] loop3: rw=0, sector=88392, nr_sectors = 8 limit=40427 [ 346.398161][ T6682] syz.3.20: attempt to access beyond end of device [ 346.398161][ T6682] loop3: rw=0, sector=88400, nr_sectors = 8 limit=40427 [ 346.398537][ T6682] syz.3.20: attempt to access beyond end of device [ 346.398537][ T6682] loop3: rw=0, sector=88408, nr_sectors = 8 limit=40427 [ 346.398881][ T6682] syz.3.20: attempt to access beyond end of device [ 346.398881][ T6682] loop3: rw=0, sector=88416, nr_sectors = 8 limit=40427 [ 346.399207][ T6682] syz.3.20: attempt to access beyond end of device [ 346.399207][ T6682] loop3: rw=0, sector=88424, nr_sectors = 8 limit=40427 [ 346.425908][ T6682] syz.3.20: attempt to access beyond end of device [ 346.425908][ T6682] loop3: rw=0, sector=88432, nr_sectors = 8 limit=40427 [ 346.426262][ T6682] syz.3.20: attempt to access beyond end of device [ 346.426262][ T6682] loop3: rw=0, sector=88440, nr_sectors = 8 limit=40427 [ 348.798663][ T6795] loop5: detected capacity change from 0 to 40427 [ 348.843681][ T6795] F2FS-fs: heap/no_heap options were deprecated [ 348.844325][ T6795] F2FS-fs: heap/no_heap options were deprecated [ 348.860583][ T6795] F2FS-fs (loop5): Image doesn't support compression [ 348.994007][ T6795] F2FS-fs (loop5): invalid crc value [ 349.821064][ T6795] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 350.269371][ T4908] Bluetooth: hci2: command 0x0406 tx timeout 2026/09/09 06:46:53 executed programs: 10 [ 351.403060][ T6536] bio_check_eod: 36800 callbacks suppressed [ 351.404278][ T6682] syz.3.20: attempt to access beyond end of device [ 351.404278][ T6682] loop3: rw=0, sector=89400, nr_sectors = 8 limit=40427 [ 351.404656][ T6682] syz.3.20: attempt to access beyond end of device [ 351.404656][ T6682] loop3: rw=0, sector=89408, nr_sectors = 8 limit=40427 [ 351.405030][ T6682] syz.3.20: attempt to access beyond end of device [ 351.405030][ T6682] loop3: rw=0, sector=89416, nr_sectors = 8 limit=40427 [ 351.406096][ T6631] syz.2.19: attempt to access beyond end of device [ 351.406096][ T6631] loop2: rw=0, sector=88264, nr_sectors = 8 limit=40427 [ 351.406472][ T6631] syz.2.19: attempt to access beyond end of device [ 351.406472][ T6631] loop2: rw=0, sector=88272, nr_sectors = 8 limit=40427 [ 351.406871][ T6631] syz.2.19: attempt to access beyond end of device [ 351.406871][ T6631] loop2: rw=0, sector=88280, nr_sectors = 8 limit=40427 [ 351.407252][ T6631] syz.2.19: attempt to access beyond end of device [ 351.407252][ T6631] loop2: rw=0, sector=88288, nr_sectors = 8 limit=40427 [ 351.410773][ T6682] syz.3.20: attempt to access beyond end of device [ 351.410773][ T6682] loop3: rw=0, sector=89424, nr_sectors = 8 limit=40427 [ 351.411195][ T6682] syz.3.20: attempt to access beyond end of device [ 351.411195][ T6682] loop3: rw=0, sector=89432, nr_sectors = 8 limit=40427 [ 351.422829][ T6536] syz.0.17: attempt to access beyond end of device [ 351.422829][ T6536] loop0: rw=524288, sector=87368, nr_sectors = 8 limit=40427 [ 353.924525][ T6800] loop5: detected capacity change from 0 to 40427 [ 353.975038][ T6800] F2FS-fs: heap/no_heap options were deprecated [ 353.984741][ T6800] F2FS-fs: heap/no_heap options were deprecated [ 354.002543][ T6800] F2FS-fs (loop5): Image doesn't support compression [ 354.056426][ T6800] F2FS-fs (loop5): invalid crc value [ 354.665727][ T6800] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 356.409796][ T6682] bio_check_eod: 37705 callbacks suppressed [ 356.409882][ T6587] syz.1.18: attempt to access beyond end of device [ 356.409882][ T6587] loop1: rw=0, sector=89392, nr_sectors = 8 limit=40427 [ 356.409954][ T6631] syz.2.19: attempt to access beyond end of device [ 356.409954][ T6631] loop2: rw=0, sector=87832, nr_sectors = 8 limit=40427 [ 356.410503][ T6682] syz.3.20: attempt to access beyond end of device [ 356.410503][ T6682] loop3: rw=0, sector=86936, nr_sectors = 8 limit=40427 [ 356.410936][ T6682] syz.3.20: attempt to access beyond end of device [ 356.410936][ T6682] loop3: rw=0, sector=86944, nr_sectors = 8 limit=40427 [ 356.411266][ T6682] syz.3.20: attempt to access beyond end of device [ 356.411266][ T6682] loop3: rw=0, sector=86952, nr_sectors = 8 limit=40427 [ 356.411518][ T6682] syz.3.20: attempt to access beyond end of device [ 356.411518][ T6682] loop3: rw=0, sector=86960, nr_sectors = 8 limit=40427 [ 356.415013][ T6631] syz.2.19: attempt to access beyond end of device [ 356.415013][ T6631] loop2: rw=0, sector=87840, nr_sectors = 8 limit=40427 [ 356.415501][ T6631] syz.2.19: attempt to access beyond end of device [ 356.415501][ T6631] loop2: rw=0, sector=87848, nr_sectors = 8 limit=40427 [ 356.415847][ T6631] syz.2.19: attempt to access beyond end of device [ 356.415847][ T6631] loop2: rw=0, sector=87856, nr_sectors = 8 limit=40427 [ 356.416245][ T6631] syz.2.19: attempt to access beyond end of device [ 356.416245][ T6631] loop2: rw=0, sector=87864, nr_sectors = 8 limit=40427 [ 358.786051][ T6805] loop5: detected capacity change from 0 to 40427 [ 358.799231][ T6805] F2FS-fs: heap/no_heap options were deprecated [ 358.812525][ T6805] F2FS-fs: heap/no_heap options were deprecated [ 358.838538][ T6805] F2FS-fs (loop5): Image doesn't support compression [ 358.857078][ T6805] F2FS-fs (loop5): invalid crc value [ 359.766254][ T6805] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 2026/09/09 06:47:03 executed programs: 12 [ 361.421478][ T6631] bio_check_eod: 35052 callbacks suppressed [ 361.421919][ T6631] syz.2.19: attempt to access beyond end of device [ 361.421919][ T6631] loop2: rw=524288, sector=86200, nr_sectors = 8 limit=40427 [ 361.422356][ T6587] syz.1.18: attempt to access beyond end of device [ 361.422356][ T6587] loop1: rw=524288, sector=88512, nr_sectors = 8 limit=40427 [ 361.422544][ T6587] syz.1.18: attempt to access beyond end of device [ 361.422544][ T6587] loop1: rw=524288, sector=88520, nr_sectors = 8 limit=40427 [ 361.422702][ T6587] syz.1.18: attempt to access beyond end of device [ 361.422702][ T6587] loop1: rw=524288, sector=88528, nr_sectors = 8 limit=40427 [ 361.423167][ T6587] syz.1.18: attempt to access beyond end of device [ 361.423167][ T6587] loop1: rw=524288, sector=88536, nr_sectors = 8 limit=40427 [ 361.423561][ T6587] syz.1.18: attempt to access beyond end of device [ 361.423561][ T6587] loop1: rw=524288, sector=88544, nr_sectors = 8 limit=40427 [ 361.425668][ T6631] syz.2.19: attempt to access beyond end of device [ 361.425668][ T6631] loop2: rw=524288, sector=86208, nr_sectors = 8 limit=40427 [ 361.426187][ T6631] syz.2.19: attempt to access beyond end of device [ 361.426187][ T6631] loop2: rw=524288, sector=86216, nr_sectors = 8 limit=40427 [ 361.426573][ T6631] syz.2.19: attempt to access beyond end of device [ 361.426573][ T6631] loop2: rw=524288, sector=86224, nr_sectors = 8 limit=40427 [ 361.432354][ T6587] syz.1.18: attempt to access beyond end of device [ 361.432354][ T6587] loop1: rw=524288, sector=88552, nr_sectors = 8 limit=40427 [ 363.829943][ T6810] loop5: detected capacity change from 0 to 40427 [ 363.839911][ T6810] F2FS-fs: heap/no_heap options were deprecated [ 363.840166][ T6810] F2FS-fs: heap/no_heap options were deprecated [ 363.953490][ T6810] F2FS-fs (loop5): Image doesn't support compression [ 363.981163][ T6810] F2FS-fs (loop5): invalid crc value [ 364.756240][ T6737] F2FS-fs (loop4): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 364.788423][ T6810] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 366.429836][ T6587] bio_check_eod: 36263 callbacks suppressed [ 366.429935][ T6587] syz.1.18: attempt to access beyond end of device [ 366.429935][ T6587] loop1: rw=0, sector=88608, nr_sectors = 8 limit=40427 [ 366.430152][ T6587] syz.1.18: attempt to access beyond end of device [ 366.430152][ T6587] loop1: rw=0, sector=88616, nr_sectors = 8 limit=40427 [ 366.430348][ T6587] syz.1.18: attempt to access beyond end of device [ 366.430348][ T6587] loop1: rw=0, sector=88624, nr_sectors = 8 limit=40427 [ 366.430538][ T6587] syz.1.18: attempt to access beyond end of device [ 366.430538][ T6587] loop1: rw=0, sector=88632, nr_sectors = 8 limit=40427 [ 366.430732][ T6587] syz.1.18: attempt to access beyond end of device [ 366.430732][ T6587] loop1: rw=0, sector=88640, nr_sectors = 8 limit=40427 [ 366.430923][ T6587] syz.1.18: attempt to access beyond end of device [ 366.430923][ T6587] loop1: rw=0, sector=88648, nr_sectors = 8 limit=40427 [ 366.431143][ T6587] syz.1.18: attempt to access beyond end of device [ 366.431143][ T6587] loop1: rw=0, sector=88656, nr_sectors = 8 limit=40427 [ 366.431235][ T6737] syz.4.22: attempt to access beyond end of device [ 366.431235][ T6737] loop4: rw=524288, sector=89040, nr_sectors = 8 limit=40427 [ 366.431342][ T6587] syz.1.18: attempt to access beyond end of device [ 366.431342][ T6587] loop1: rw=0, sector=88664, nr_sectors = 8 limit=40427 [ 366.431430][ T6737] syz.4.22: attempt to access beyond end of device [ 366.431430][ T6737] loop4: rw=524288, sector=89048, nr_sectors = 8 limit=40427 [ 369.088150][ T6815] loop5: detected capacity change from 0 to 40427 [ 369.143810][ T6815] F2FS-fs: heap/no_heap options were deprecated [ 369.154294][ T6815] F2FS-fs: heap/no_heap options were deprecated [ 369.178656][ T6815] F2FS-fs (loop5): Image doesn't support compression [ 369.212816][ T6815] F2FS-fs (loop5): invalid crc value [ 369.986052][ T6815] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 370.579905][ T38] INFO: task kworker/u8:6:167 blocked for more than 143 seconds. [ 370.595717][ T38] Not tainted syzkaller #0 [ 370.595825][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 370.595834][ T38] task:kworker/u8:6 state:D stack:21792 pid:167 tgid:167 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 370.595906][ T38] Workqueue: writeback wb_workfn (flush-7:0) [ 370.596077][ T38] Call Trace: [ 370.596141][ T38] [ 370.596177][ T38] __schedule+0x16d9/0x5700 [ 370.596348][ T38] ? __lock_acquire+0x747/0x2de0 [ 370.596413][ T38] ? __pfx___schedule+0x10/0x10 [ 370.596432][ T38] ? irqentry_exit+0x218/0x910 [ 370.596458][ T38] ? irqentry_exit+0x218/0x910 [ 370.596480][ T38] ? trace_irq_disable+0x3b/0x140 [ 370.596529][ T38] ? __pfx___schedule+0x10/0x10 [ 370.596565][ T38] rt_mutex_schedule+0x76/0xf0 [ 370.596595][ T38] ? __rt_mutex_slowlock_locked+0x1d6/0x25b0 [ 370.596615][ T38] __rt_mutex_slowlock_locked+0x1f88/0x25b0 [ 370.596646][ T38] ? __rt_mutex_slowlock_locked+0x1d6/0x25b0 [ 370.596672][ T38] ? __pfx___rt_mutex_slowlock_locked+0x10/0x10 [ 370.596705][ T38] ? rcu_is_watching+0x16/0xb0 [ 370.596832][ T38] rt_mutex_slowlock+0xbd/0x180 [ 370.596863][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 370.596892][ T38] ? lock_acquire+0x115/0x350 [ 370.596921][ T38] rwbase_write_lock+0x14c/0x720 [ 370.596956][ T38] f2fs_down_write_trace+0x34/0x1f0 [ 370.597021][ T38] f2fs_balance_fs+0x5d1/0x810 [ 370.597040][ T38] ? __pfx_from_kgid+0x10/0x10 [ 370.597072][ T38] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 370.597088][ T38] ? f2fs_inode_chksum_set+0x13e/0x630 [ 370.597120][ T38] ? set_raw_inline+0x28b/0x390 [ 370.597146][ T38] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 370.597225][ T38] ? f2fs_update_inode+0x139a/0x25c0 [ 370.597258][ T38] ? folio_unlock+0x101/0x160 [ 370.597302][ T38] ? f2fs_update_inode_page+0x27f/0x360 [ 370.597326][ T38] ? rt_spin_unlock+0x159/0x200 [ 370.597347][ T38] f2fs_write_inode+0x408/0x5f0 [ 370.597376][ T38] __writeback_single_inode+0x6a0/0x1230 [ 370.597406][ T38] writeback_sb_inodes+0x9db/0x1ab0 [ 370.597432][ T38] ? mark_lock+0x182/0x190 [ 370.597471][ T38] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 370.597521][ T38] ? __pfx_down_read_trylock+0x10/0x10 [ 370.597554][ T38] __writeback_inodes_wb+0x114/0x240 [ 370.597582][ T38] wb_writeback+0x42f/0xad0 [ 370.597603][ T38] ? queue_io+0x2a1/0x450 [ 370.597626][ T38] ? __pfx_wb_writeback+0x10/0x10 [ 370.597659][ T38] wb_workfn+0xc98/0x10f0 [ 370.597702][ T38] ? __pfx_wb_workfn+0x10/0x10 [ 370.597749][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 370.597778][ T38] ? lock_acquire+0x115/0x350 [ 370.597809][ T38] ? rcu_is_watching+0x16/0xb0 [ 370.597840][ T38] ? process_scheduled_works+0x97a/0x1630 [ 370.597888][ T38] process_scheduled_works+0xc3d/0x1630 [ 370.597942][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 370.597974][ T38] ? assign_work+0x3cf/0x5d0 [ 370.598003][ T38] worker_thread+0xa47/0xfb0 [ 370.598055][ T38] kthread+0x38b/0x470 [ 370.598075][ T38] ? __pfx_worker_thread+0x10/0x10 [ 370.598100][ T38] ? __pfx_kthread+0x10/0x10 [ 370.598120][ T38] ret_from_fork+0x514/0xb70 [ 370.598167][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 370.598187][ T38] ? __switch_to+0xc89/0x1420 [ 370.598217][ T38] ? __pfx_kthread+0x10/0x10 [ 370.598239][ T38] ret_from_fork_asm+0x1a/0x30 [ 370.598288][ T38] [ 370.598600][ T38] [ 370.598600][ T38] Showing all locks held in the system: [ 370.598615][ T38] locks held by kworker/u8:1/13: 4, on CPU#1: [ 370.598661][ T38] #0: ffff88801f2be138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 370.598751][ T38] #1: ffffc90000127c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 370.598803][ T38] #2: ffff888033c4c0e0 (&type->s_umount_key#57){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 370.598871][ T38] #3: ffff888033751ab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 370.598932][ T38] locks held by rcuc/1/28: 3, last CPU#1: [ 370.598945][ T38] #0: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 370.599005][ T38] #1: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 370.599055][ T38] #2: ffffffff8e1c3c60 (rcu_callback){....}-{0:0}, at: rcu_cpu_kthread+0x217/0x1740 [ 370.599109][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 370.599122][ T38] #0: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 370.599183][ T38] locks held by kworker/u8:6/167: 4, on CPU#1: [ 370.599196][ T38] #0: ffff88801f2be138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 370.599248][ T38] #1: ffffc9000416fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 370.599300][ T38] #2: ffff888035bc00e0 (&type->s_umount_key#57){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 370.599349][ T38] #3: ffff888044b71ab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 370.599411][ T38] locks held by kworker/u8:13/1384: 4, on CPU#0: [ 370.599424][ T38] #0: ffff88801f2be138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 370.599474][ ** replaying previous printk message ** [ 370.599474][ T38] #1: ffffc90006b67c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 370.965189][ T38] #2: ffff88801d6c20e0 (&type->s_umount_key#57){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 370.965434][ T38] #3: ffff888037ce5ab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 370.965626][ T38] locks held by kworker/u8:14/1385: 4, on CPU#1: [ 370.965669][ T38] #0: ffff88801f2be138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 370.965828][ T38] #1: ffffc90006b87c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 370.966004][ T38] #2: ffff888026f620e0 (&type->s_umount_key#57){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 370.966171][ T38] #3: ffff888026405ab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 370.966574][ T38] locks held by kworker/u8:21/3335: 4, on CPU#0: [ 370.966620][ T38] #0: ffff88801f2be138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 370.966820][ T38] #1: ffffc9000f767c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 370.983496][ T38] #2: ffff88802648e0e0 (&type->s_umount_key#57){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 370.983700][ T38] #3: ffff88803a77dab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 370.983884][ T38] locks held by klogd/4948: 2, last CPU#1: [ 370.983934][ T38] #0: ffffffff8e311530 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 370.984134][ T38] #1: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 370.984330][ T38] locks held by getty/5352: 2, on CPU#0: [ 370.984381][ T38] #0: ffff888036f480a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 370.984683][ T38] #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 370.984850][ T38] locks held by syz.0.17/6536: 8, last CPU#1: [ 370.984893][ T38] #0: ffff888035bc0510 (sb_writers#12){.+.+}-{0:0}, at: vfs_fallocate+0x5e9/0x7f0 [ 371.004279][ T38] #1: ffff88804532ceb8 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: f2fs_fallocate+0x23f/0x980 [ 371.004446][ T38] #2: ffff888044b71d88 (&sbi->pin_sem){+.+.}-{4:4}, at: f2fs_expand_inode_data+0x57a/0xb10 [ 371.004618][ T38] #3: ffff888044b71ab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 371.004708][ T38] #4: ffff8880b873c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 371.004884][ T38] #5: ffff8880b8724548 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x790 [ 371.005155][ T38] #6: ffff8880b8724548 (psi_seq){-...}-{0:0}, at: psi_task_change+0xc9/0x320 [ 371.005299][ T38] #7: ffffffff99b27748 (&____s->seqcount#2){--..}-{0:0}, at: ktime_get+0x45/0x220 [ 371.005531][ T38] locks held by syz.1.18/6587: 7, on CPU#1: [ 371.005583][ T38] #0: ffff888026f62510 (sb_writers#12){.+.+}-{0:0}, at: vfs_fallocate+0x5e9/0x7f0 [ 371.014766][ T38] #1: ffff88804515e208 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: f2fs_fallocate+0x23f/0x980 [ 371.014985][ T38] #2: ffff888026405d88 (&sbi->pin_sem){+.+.}-{4:4}, at: f2fs_expand_inode_data+0x57a/0xb10 [ 371.015161][ T38] #3: ffff888026405ab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 371.015362][ T38] #4: ffff88804515e880 (&fi->i_gc_rwsem[1]){+.+.}-{4:4}, at: do_garbage_collect+0x2b4a/0x68d0 [ 371.015524][ T38] #5: ffff88804515e7e8 (&fi->i_gc_rwsem[0]){+.+.}-{4:4}, at: do_garbage_collect+0x2b6b/0x68d0 [ 371.015687][ T38] #6: ffff88813ffbb658 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x5a0 [ 371.015894][ T38] locks held by syz.2.19/6631: 6, on CPU#1: [ 371.015942][ T38] #0: ffff88801d6c2510 (sb_writers#12){.+.+}-{0:0}, at: vfs_fallocate+0x5e9/0x7f0 [ 371.016127][ T38] #1: ffff888045328b20 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: f2fs_fallocate+0x23f/0x980 [ 371.025423][ T38] #2: ffff888037ce5d88 (&sbi->pin_sem){+.+.}-{4:4}, at: f2fs_expand_inode_data+0x57a/0xb10 [ 371.025593][ T38] #3: ffff888037ce5ab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 371.025781][ T38] #4: ffff888045329198 (&fi->i_gc_rwsem[1]){+.+.}-{4:4}, at: do_garbage_collect+0x31f7/0x68d0 [ 371.025931][ T38] #5: ffff88813ffbb658 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x5a0 [ 371.026101][ T38] locks held by syz.3.20/6682: 6, on CPU#1: [ 371.026144][ T38] #0: ffff88802648e510 (sb_writers#12){.+.+}-{0:0}, at: vfs_fallocate+0x5e9/0x7f0 [ 371.026436][ T38] #1: ffff88805cc6d860 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: f2fs_fallocate+0x23f/0x980 [ 371.026671][ T38] #2: ffff88803a77dd88 (&sbi->pin_sem){+.+.}-{4:4}, at: f2fs_expand_inode_data+0x57a/0xb10 [ 371.044184][ T38] #3: ffff88803a77dab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 371.044447][ T38] #4: ffff8880b873c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 371.044722][ T38] #5: ffff8880b8724548 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x790 [ 371.044928][ T38] locks held by syz.4.22/6737: 7, last CPU#1: [ 371.044979][ T38] #0: ffff888033c4c510 (sb_writers#12){.+.+}-{0:0}, at: vfs_fallocate+0x5e9/0x7f0 [ 371.045127][ T38] #1: ffff88805cc69e70 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: f2fs_fallocate+0x23f/0x980 [ 371.045288][ T38] #2: ffff888033751d88 (&sbi->pin_sem){+.+.}-{4:4}, at: f2fs_expand_inode_data+0x57a/0xb10 [ 371.045478][ T38] #3: ffff888033751ab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 371.083404][ T38] #4: ffff88805cc6a4e8 (&fi->i_gc_rwsem[1]){+.+.}-{4:4}, at: do_garbage_collect+0x2b4a/0x68d0 [ 371.083682][ T38] #5: ffff88805cc6a450 (&fi->i_gc_rwsem[0]){+.+.}-{4:4}, at: do_garbage_collect+0x2b6b/0x68d0 [ 371.083858][ T38] #6: ffff8880b873c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 371.084043][ T38] locks held by syz.5.28/6815: 1, last CPU#1: [ 371.084087][ T38] #0: ffff88803e4ac0e0 (&type->s_umount_key#56/1){+.+.}-{4:4}, at: sget_fc+0x97c/0x1a60 [ 371.084331][ T38] [ 371.084352][ T38] ============================================= [ 371.084352][ T38] [ 371.084392][ T38] NMI backtrace for cpu 1 [ 371.084445][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 371.084517][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 371.084551][ T38] Call Trace: [ 371.084573][ T38] [ 371.084603][ T38] dump_stack_lvl+0xe8/0x150 [ 371.084692][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 371.084835][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 371.084969][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 371.085036][ T38] sys_info+0x135/0x170 [ 371.085156][ T38] watchdog+0xfd7/0x1030 [ 371.085268][ T38] ? watchdog+0x1c7/0x1030 [ 371.085366][ T38] kthread+0x38b/0x470 [ 371.085445][ T38] ? __pfx_watchdog+0x10/0x10 [ 371.085520][ T38] ? __pfx_kthread+0x10/0x10 [ 371.085584][ T38] ret_from_fork+0x514/0xb70 [ 371.085658][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 371.085708][ T38] ? __switch_to+0xc89/0x1420 [ 371.085824][ T38] ? __pfx_kthread+0x10/0x10 [ 371.085904][ T38] ret_from_fork_asm+0x1a/0x30 [ 371.086008][ T38] [ 371.086092][ T38] Sending NMI from CPU 1 to CPUs 0: [ 371.086160][ C0] NMI backtrace for cpu 0 [ 371.086175][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 371.086283][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 371.086304][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 371.086415][ C0] Code: e8 8e 7f 65 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ef 65 d1 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 371.086432][ C0] RSP: 0018:ffffc900001678b8 EFLAGS: 00000202 [ 371.086479][ C0] RAX: 1ffffffff33d3800 RBX: 00000000000003fd RCX: 0000000000000000 [ 371.086492][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 371.086504][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 371.086516][ C0] R10: dffffc0000000000 R11: ffffffff85610e30 R12: dffffc0000000000 [ 371.086530][ C0] R13: 0000000000000000 R14: ffffffff99e9c220 R15: 0000000000000000 [ 371.086542][ C0] FS: 0000000000000000(0000) GS:ffff888125bd1000(0000) knlGS:0000000000000000 [ 371.086557][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 371.086570][ C0] CR2: 0000562cf4b66a38 CR3: 000000005b542000 CR4: 00000000003526f0 [ 371.086587][ C0] Call Trace: [ 371.086596][ C0] [ 371.086605][ C0] wait_for_lsr+0x190/0x300 [ 371.086672][ C0] __serial8250_console_fifo_write+0xd0/0x3f0 [ 371.086730][ C0] serial8250_console_write+0xac5/0x1230 [ 371.086757][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 371.086789][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 371.086825][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 371.086856][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 371.086893][ C0] nbcon_kthread_func+0x679/0x880 [ 371.086923][ C0] ? nbcon_kthread_func+0x163/0x880 [ 371.086948][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 371.086976][ C0] ? __kthread_parkme+0x71/0x1f0 [ 371.087006][ C0] ? __kthread_parkme+0x199/0x1f0 [ 371.087036][ C0] kthread+0x38b/0x470 [ 371.087055][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 371.087079][ C0] ? __pfx_kthread+0x10/0x10 [ 371.087098][ C0] ret_from_fork+0x514/0xb70 [ 371.087119][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 371.087137][ C0] ? __switch_to+0xc89/0x1420 [ 371.087168][ C0] ? __pfx_kthread+0x10/0x10 [ 371.087188][ C0] ret_from_fork_asm+0x1a/0x30 [ 371.087215][ C0] [ 371.157744][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 372.137557][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 372.147226][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.157409][ T38] Call Trace: [ 372.160731][ T38] [ 372.163965][ T38] vpanic+0x56d/0xa60 [ 372.167990][ T38] ? __pfx___schedule+0x10/0x10 [ 372.172930][ T38] ? __pfx_vpanic+0x10/0x10 [ 372.177838][ T38] panic+0xc5/0xd0 [ 372.181672][ T38] ? __pfx_panic+0x10/0x10 [ 372.186135][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 372.191695][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 372.197208][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 372.203669][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 372.210822][ T38] watchdog+0x1030/0x1030 [ 372.215231][ T38] ? watchdog+0x1c7/0x1030 [ 372.220183][ T38] kthread+0x38b/0x470 [ 372.224304][ T38] ? __pfx_watchdog+0x10/0x10 [ 372.229164][ T38] ? __pfx_kthread+0x10/0x10 [ 372.233950][ T38] ret_from_fork+0x514/0xb70 [ 372.238694][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 372.243979][ T38] ? __switch_to+0xc89/0x1420 [ 372.248727][ T38] ? __pfx_kthread+0x10/0x10 [ 372.253414][ T38] ret_from_fork_asm+0x1a/0x30 [ 372.258515][ T38] [ 372.262645][ T38] Kernel Offset: disabled [ 372.267084][ T38] Rebooting in 86400 seconds..