[ 132.970604][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.970695][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. 2025/12/06 05:54:40 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 139.608308][ T6261] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 142.939982][ T6276] chnl_net:caif_netlink_parms(): no params data found [ 143.433417][ T6276] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.433622][ T6276] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.433912][ T6276] bridge_slave_0: entered allmulticast mode [ 143.435384][ T6276] bridge_slave_0: entered promiscuous mode [ 143.438089][ T6276] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.438270][ T6276] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.438405][ T6276] bridge_slave_1: entered allmulticast mode [ 143.439822][ T6276] bridge_slave_1: entered promiscuous mode [ 143.607973][ T6276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.611788][ T6276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.776269][ T6276] team0: Port device team_slave_0 added [ 143.778365][ T6276] team0: Port device team_slave_1 added [ 144.075054][ T6276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.075071][ T6276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.075094][ T6276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.076835][ T6276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.076847][ T6276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.076869][ T6276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.238792][ T6276] hsr_slave_0: entered promiscuous mode [ 144.239524][ T6276] hsr_slave_1: entered promiscuous mode [ 145.742302][ T6276] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 145.797400][ T6276] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 145.848409][ T6276] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 145.888609][ T6276] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 146.038123][ T6276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.060815][ T6276] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.076428][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.076757][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.091716][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.092563][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.395260][ T6276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.467945][ T6276] veth0_vlan: entered promiscuous mode [ 146.492493][ T6276] veth1_vlan: entered promiscuous mode [ 146.538553][ T6276] veth0_macvtap: entered promiscuous mode [ 146.545549][ T6276] veth1_macvtap: entered promiscuous mode [ 146.567275][ T6276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.577537][ T6276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.599704][ T3751] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.599920][ T3751] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.600482][ T3751] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.601073][ T3751] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.976414][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.982041][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.998896][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.005787][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.006587][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.468429][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.100977][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.100997][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.326016][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.376847][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.376867][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.377924][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.750889][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.157217][ T13] bridge_slave_1: left allmulticast mode [ 150.157243][ T13] bridge_slave_1: left promiscuous mode [ 150.157476][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.235182][ T13] bridge_slave_0: left allmulticast mode [ 150.235211][ T13] bridge_slave_0: left promiscuous mode [ 150.235444][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.983576][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.043714][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.065195][ T13] bond0 (unregistering): Released all slaves [ 152.404618][ T13] hsr_slave_0: left promiscuous mode [ 152.423068][ T13] hsr_slave_1: left promiscuous mode [ 152.425625][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.425655][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.464836][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.464864][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.553030][ T13] veth1_macvtap: left promiscuous mode [ 152.553145][ T13] veth0_macvtap: left promiscuous mode [ 152.553396][ T13] veth1_vlan: left promiscuous mode [ 152.554732][ T13] veth0_vlan: left promiscuous mode [ 154.633964][ T13] team0 (unregistering): Port device team_slave_1 removed [ 154.873627][ T13] team0 (unregistering): Port device team_slave_0 removed 2025/12/06 05:55:06 executed programs: 0 [ 161.620474][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 161.623520][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 161.630315][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 161.648256][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 161.649056][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 162.051411][ T6590] chnl_net:caif_netlink_parms(): no params data found [ 162.414325][ T6590] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.414478][ T6590] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.414612][ T6590] bridge_slave_0: entered allmulticast mode [ 162.416093][ T6590] bridge_slave_0: entered promiscuous mode [ 162.418190][ T6590] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.418304][ T6590] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.418413][ T6590] bridge_slave_1: entered allmulticast mode [ 162.419808][ T6590] bridge_slave_1: entered promiscuous mode [ 162.658071][ T6590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.661960][ T6590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.809362][ T6590] team0: Port device team_slave_0 added [ 162.812043][ T6590] team0: Port device team_slave_1 added [ 163.014936][ T6590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.014952][ T6590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.014972][ T6590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.016377][ T6590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.016390][ T6590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.016410][ T6590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.410639][ T6590] hsr_slave_0: entered promiscuous mode [ 163.411424][ T6590] hsr_slave_1: entered promiscuous mode [ 163.683164][ T61] Bluetooth: hci0: command tx timeout [ 164.911428][ T6590] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 164.948610][ T6590] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 164.986677][ T6590] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 165.028244][ T6590] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 165.171597][ T6590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.200335][ T6590] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.220097][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.220304][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.247492][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.253357][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.591355][ T6590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.663789][ T6590] veth0_vlan: entered promiscuous mode [ 165.672237][ T6590] veth1_vlan: entered promiscuous mode [ 165.731303][ T6590] veth0_macvtap: entered promiscuous mode [ 165.738640][ T6590] veth1_macvtap: entered promiscuous mode [ 165.763121][ T61] Bluetooth: hci0: command tx timeout [ 165.770061][ T6590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.795129][ T6590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.816665][ T3751] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.816710][ T3751] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.816742][ T3751] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.816772][ T3751] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.029039][ T3751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.029058][ T3751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.108076][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.108098][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.729302][ T6687] loop0: detected capacity change from 0 to 40427 [ 166.795734][ T6687] F2FS-fs (loop0): build fault injection rate: 14 [ 166.795758][ T6687] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 166.820520][ T6687] F2FS-fs (loop0): invalid crc value [ 166.829417][ C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 166.866274][ C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 167.076190][ T6687] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 167.076479][ T6687] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 167.085920][ T6687] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 167.095953][ T6687] syz.0.17: attempt to access beyond end of device [ 167.095953][ T6687] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 167.101352][ T6687] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40 [ 167.106697][ T6687] F2FS-fs (loop0): inject inconsistent footer in sanity_check_node_footer of read_inline_xattr+0x1af/0x320 [ 167.106737][ T6687] F2FS-fs (loop0): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 167.843468][ T61] Bluetooth: hci0: command tx timeout [ 169.923059][ T61] Bluetooth: hci0: command tx timeout [ 181.302514][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 181.308926][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 181.310442][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 181.319263][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 181.320081][ T5870] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 181.688255][ T6742] chnl_net:caif_netlink_parms(): no params data found [ 181.995088][ T6742] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.995309][ T6742] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.995479][ T6742] bridge_slave_0: entered allmulticast mode [ 181.998156][ T6742] bridge_slave_0: entered promiscuous mode [ 182.002435][ T6742] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.002641][ T6742] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.045585][ T6742] bridge_slave_1: entered allmulticast mode [ 182.048205][ T6742] bridge_slave_1: entered promiscuous mode [ 182.228380][ T6742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.242544][ T6742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.409794][ T6742] team0: Port device team_slave_0 added [ 182.419752][ T6742] team0: Port device team_slave_1 added [ 182.585866][ T6742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.585883][ T6742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.585906][ T6742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.590896][ T6742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.590911][ T6742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.590934][ T6742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.945254][ T6742] hsr_slave_0: entered promiscuous mode [ 182.946653][ T6742] hsr_slave_1: entered promiscuous mode [ 182.947628][ T6742] debugfs: 'hsr0' already exists in 'hsr' [ 182.947741][ T6742] Cannot create hsr debugfs directory [ 183.363431][ T5870] Bluetooth: hci1: command tx timeout [ 183.448315][ T6742] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 183.498296][ T6742] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 183.516284][ T6742] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 183.567457][ T6742] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 183.721836][ T6742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.794025][ T6742] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.802239][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.802444][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.815093][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.815626][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.128665][ T6742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.218704][ T6742] veth0_vlan: entered promiscuous mode [ 184.237563][ T6742] veth1_vlan: entered promiscuous mode [ 184.282107][ T6742] veth0_macvtap: entered promiscuous mode [ 184.294438][ T6742] veth1_macvtap: entered promiscuous mode [ 184.318602][ T6742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.335551][ T6742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.352414][ T3590] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.352677][ T3590] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.352712][ T3590] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.352743][ T3590] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.578040][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.578060][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.662816][ T3590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.662839][ T3590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/06 05:55:29 executed programs: 3 [ 185.268784][ T6766] loop1: detected capacity change from 0 to 40427 [ 185.290354][ T6766] F2FS-fs (loop1): build fault injection rate: 14 [ 185.290375][ T6766] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 185.323071][ T6766] F2FS-fs (loop1): invalid crc value [ 185.341009][ C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 185.365865][ C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 185.445681][ T5870] Bluetooth: hci1: command tx timeout [ 185.537313][ T6766] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 185.537347][ T6766] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 185.562685][ T6766] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 185.574118][ T6766] syz.1.18: attempt to access beyond end of device [ 185.574118][ T6766] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 185.575346][ T6766] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40 [ 185.576651][ T6766] F2FS-fs (loop1): inject inconsistent footer in sanity_check_node_footer of read_inline_xattr+0x1af/0x320 [ 185.576685][ T6766] F2FS-fs (loop1): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 187.522974][ T5870] Bluetooth: hci1: command tx timeout [ 189.603365][ T5870] Bluetooth: hci1: command tx timeout [ 194.407640][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.419514][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.993937][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 199.997598][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 200.003808][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 200.028862][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 200.029747][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 200.458822][ T6775] chnl_net:caif_netlink_parms(): no params data found [ 200.925077][ T6775] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.933156][ T6775] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.933369][ T6775] bridge_slave_0: entered allmulticast mode [ 200.936469][ T6775] bridge_slave_0: entered promiscuous mode [ 200.941353][ T6775] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.943617][ T6775] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.943820][ T6775] bridge_slave_1: entered allmulticast mode [ 200.953034][ T6775] bridge_slave_1: entered promiscuous mode [ 201.140007][ T6775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.144665][ T6775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.307471][ T6775] team0: Port device team_slave_0 added [ 201.310899][ T6775] team0: Port device team_slave_1 added [ 201.545743][ T6775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.545760][ T6775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.545782][ T6775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.555973][ T6775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.555987][ T6775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.556010][ T6775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.778024][ T6775] hsr_slave_0: entered promiscuous mode [ 201.782739][ T6775] hsr_slave_1: entered promiscuous mode [ 201.785042][ T6775] debugfs: 'hsr0' already exists in 'hsr' [ 201.785066][ T6775] Cannot create hsr debugfs directory [ 202.091358][ T61] Bluetooth: hci2: command tx timeout [ 202.537525][ T6775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 202.560815][ T6775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 202.579085][ T6775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 202.599478][ T6775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 202.876957][ T6775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.909716][ T6775] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.927417][ T1511] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.929550][ T1511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.961703][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.961907][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.419517][ T6775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.545131][ T6775] veth0_vlan: entered promiscuous mode [ 203.573574][ T6775] veth1_vlan: entered promiscuous mode [ 203.646667][ T6775] veth0_macvtap: entered promiscuous mode [ 203.655100][ T6775] veth1_macvtap: entered promiscuous mode [ 203.704878][ T6775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.716937][ T6775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.739763][ T3590] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.740033][ T3590] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.740067][ T3590] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.740099][ T3590] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.025099][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.025119][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.155669][ T3590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.155688][ T3590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.163044][ T61] Bluetooth: hci2: command tx timeout 2025/12/06 05:55:49 executed programs: 4 [ 205.386202][ T6796] loop2: detected capacity change from 0 to 40427 [ 205.410139][ T6796] F2FS-fs (loop2): build fault injection rate: 14 [ 205.410162][ T6796] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 205.430281][ T6796] F2FS-fs (loop2): invalid crc value [ 205.453000][ C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 205.493812][ C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 205.770267][ T6796] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 205.770302][ T6796] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 205.783981][ T6796] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 205.789293][ T6796] syz.2.19: attempt to access beyond end of device [ 205.789293][ T6796] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 205.790357][ T6796] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40 [ 205.791646][ T6796] F2FS-fs (loop2): inject inconsistent footer in sanity_check_node_footer of read_inline_xattr+0x1af/0x320 [ 205.791684][ T6796] F2FS-fs (loop2): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 206.243025][ T61] Bluetooth: hci2: command tx timeout [ 208.324317][ T61] Bluetooth: hci2: command tx timeout [ 219.623851][ T5870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.627596][ T5870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.628521][ T5870] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.634141][ T5870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.638450][ T5870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.481964][ T6802] chnl_net:caif_netlink_parms(): no params data found [ 221.075090][ T6802] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.075305][ T6802] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.075500][ T6802] bridge_slave_0: entered allmulticast mode [ 221.078115][ T6802] bridge_slave_0: entered promiscuous mode [ 221.114181][ T6802] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.114402][ T6802] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.114590][ T6802] bridge_slave_1: entered allmulticast mode [ 221.117187][ T6802] bridge_slave_1: entered promiscuous mode [ 221.338502][ T6802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.366587][ T6802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.587712][ T6802] team0: Port device team_slave_0 added [ 221.591691][ T6802] team0: Port device team_slave_1 added [ 221.683045][ T5870] Bluetooth: hci3: command tx timeout [ 221.824447][ T6802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.824464][ T6802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.824487][ T6802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.826801][ T6802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.826813][ T6802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.826835][ T6802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.146892][ T6802] hsr_slave_0: entered promiscuous mode [ 222.148261][ T6802] hsr_slave_1: entered promiscuous mode [ 222.149285][ T6802] debugfs: 'hsr0' already exists in 'hsr' [ 222.149308][ T6802] Cannot create hsr debugfs directory [ 223.171659][ T6802] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 223.188214][ T6802] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 223.237609][ T6802] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 223.258101][ T6802] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 223.612119][ T6802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.660015][ T6802] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.676120][ T3590] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.676266][ T3590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.705283][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.705421][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.763082][ T5870] Bluetooth: hci3: command tx timeout [ 224.331358][ T6802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.448197][ T6802] veth0_vlan: entered promiscuous mode [ 224.467373][ T6802] veth1_vlan: entered promiscuous mode [ 224.568898][ T6802] veth0_macvtap: entered promiscuous mode [ 224.597966][ T6802] veth1_macvtap: entered promiscuous mode [ 224.661613][ T6802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.696433][ T6802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.738627][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.755663][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.756083][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.756118][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.114936][ T1267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.114958][ T1267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.256812][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.256834][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/06 05:56:10 executed programs: 5 [ 225.848128][ T5870] Bluetooth: hci3: command tx timeout [ 226.438435][ T6825] loop3: detected capacity change from 0 to 40427 [ 226.464367][ T6825] F2FS-fs (loop3): build fault injection rate: 14 [ 226.464391][ T6825] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 226.513768][ T6825] F2FS-fs (loop3): invalid crc value [ 226.534341][ C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 226.606058][ C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 226.900345][ T6825] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 226.900378][ T6825] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 226.943093][ T6825] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 226.945135][ T6825] syz.3.20: attempt to access beyond end of device [ 226.945135][ T6825] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 226.946107][ T6825] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40 [ 226.947459][ T6825] F2FS-fs (loop3): inject inconsistent footer in sanity_check_node_footer of read_inline_xattr+0x1af/0x320 [ 226.947493][ T6825] F2FS-fs (loop3): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 227.923246][ T5870] Bluetooth: hci3: command tx timeout [ 240.774090][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.781708][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.782726][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.803839][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.805104][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 241.407570][ T6831] chnl_net:caif_netlink_parms(): no params data found [ 242.056589][ T6831] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.056794][ T6831] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.057013][ T6831] bridge_slave_0: entered allmulticast mode [ 242.059612][ T6831] bridge_slave_0: entered promiscuous mode [ 242.104439][ T6831] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.104687][ T6831] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.104913][ T6831] bridge_slave_1: entered allmulticast mode [ 242.109240][ T6831] bridge_slave_1: entered promiscuous mode [ 242.464300][ T6831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.468488][ T6831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.757614][ T6831] team0: Port device team_slave_0 added [ 242.761424][ T6831] team0: Port device team_slave_1 added [ 242.883109][ T5870] Bluetooth: hci4: command tx timeout [ 243.095899][ T6831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.095916][ T6831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.095939][ T6831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.098412][ T6831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.098425][ T6831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.098447][ T6831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.454903][ T6831] hsr_slave_0: entered promiscuous mode [ 243.456265][ T6831] hsr_slave_1: entered promiscuous mode [ 243.457209][ T6831] debugfs: 'hsr0' already exists in 'hsr' [ 243.457245][ T6831] Cannot create hsr debugfs directory [ 244.757958][ T6831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 244.820919][ T6831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 244.847604][ T6831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 244.909218][ T6831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 244.963091][ T5870] Bluetooth: hci4: command tx timeout [ 245.318956][ T6831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.369528][ T6831] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.407178][ T3590] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.407387][ T3590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.431208][ T3590] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.431350][ T3590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.208597][ T6831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.043069][ T5870] Bluetooth: hci4: command tx timeout [ 247.167959][ T6831] veth0_vlan: entered promiscuous mode [ 247.224562][ T6831] veth1_vlan: entered promiscuous mode [ 247.373655][ T6831] veth0_macvtap: entered promiscuous mode [ 247.414178][ T6831] veth1_macvtap: entered promiscuous mode [ 247.496594][ T6831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.537528][ T6831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.584371][ T141] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.615292][ T1267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.619326][ T1267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.619369][ T1267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.023153][ T1267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.023175][ T1267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.248238][ T1511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.248260][ T1511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/06 05:56:33 executed programs: 6 [ 249.123914][ T5870] Bluetooth: hci4: command tx timeout [ 249.860764][ T6867] loop4: detected capacity change from 0 to 40427 [ 249.933101][ T6867] F2FS-fs (loop4): build fault injection rate: 14 [ 249.933124][ T6867] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 249.945525][ T6867] F2FS-fs (loop4): invalid crc value [ 249.950694][ C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 250.053330][ C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 250.411413][ T6867] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 250.411448][ T6867] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 250.444102][ T6867] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 250.445478][ T6867] syz.4.21: attempt to access beyond end of device [ 250.445478][ T6867] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 250.446203][ T6867] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40 [ 250.447615][ T6867] F2FS-fs (loop4): inject inconsistent footer in sanity_check_node_footer of read_inline_xattr+0x1af/0x320 [ 250.447649][ T6867] F2FS-fs (loop4): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 255.873705][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.873774][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.994081][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 264.001148][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 264.002172][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 264.005848][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 264.006630][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 264.976475][ T6874] chnl_net:caif_netlink_parms(): no params data found [ 265.806677][ T6874] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.806892][ T6874] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.807101][ T6874] bridge_slave_0: entered allmulticast mode [ 265.813722][ T6874] bridge_slave_0: entered promiscuous mode [ 265.825338][ T6874] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.833204][ T6874] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.833476][ T6874] bridge_slave_1: entered allmulticast mode [ 265.835969][ T6874] bridge_slave_1: entered promiscuous mode [ 266.089075][ T5870] Bluetooth: hci5: command tx timeout [ 266.242561][ T6874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.279648][ T6874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.588942][ T6874] team0: Port device team_slave_0 added [ 266.592569][ T6874] team0: Port device team_slave_1 added [ 267.075283][ T6874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.075300][ T6874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.075324][ T6874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.083649][ T6874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.083663][ T6874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.083685][ T6874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.526889][ T6874] hsr_slave_0: entered promiscuous mode [ 267.528336][ T6874] hsr_slave_1: entered promiscuous mode [ 267.544809][ T6874] debugfs: 'hsr0' already exists in 'hsr' [ 267.544842][ T6874] Cannot create hsr debugfs directory [ 268.163049][ T5870] Bluetooth: hci5: command tx timeout [ 268.933879][ T6874] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 269.009496][ T6874] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 269.114985][ T6874] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 269.168425][ T6874] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 269.550186][ T6874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.647187][ T6874] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.723483][ T1511] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.723692][ T1511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.793563][ T1467] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.793702][ T1467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.247353][ T5870] Bluetooth: hci5: command tx timeout [ 270.599684][ T6874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.665904][ T6874] veth0_vlan: entered promiscuous mode [ 271.715160][ T6874] veth1_vlan: entered promiscuous mode [ 271.846395][ T6874] veth0_macvtap: entered promiscuous mode [ 271.872176][ T6874] veth1_macvtap: entered promiscuous mode [ 271.980348][ T6874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.045466][ T6874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.072128][ T1467] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.072326][ T1467] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.072632][ T1467] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.072671][ T1467] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.323232][ T5870] Bluetooth: hci5: command tx timeout [ 272.513107][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.513128][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.598912][ T3492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.598932][ T3492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/06 05:56:57 executed programs: 7 [ 274.316988][ T6904] loop5: detected capacity change from 0 to 40427 [ 274.363073][ T6904] F2FS-fs (loop5): build fault injection rate: 14 [ 274.363093][ T6904] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 274.384562][ T6904] F2FS-fs (loop5): invalid crc value [ 274.402518][ C0] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 274.514328][ C0] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 274.950260][ T6904] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 274.950291][ T6904] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 274.993777][ T6904] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 274.995301][ T6904] syz.5.22: attempt to access beyond end of device [ 274.995301][ T6904] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 274.996167][ T6904] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40 [ 275.014384][ T6904] F2FS-fs (loop5): inject inconsistent footer in sanity_check_node_footer of read_inline_xattr+0x1af/0x320 [ 275.014423][ T6904] F2FS-fs (loop5): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 288.502672][ T5120] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 288.519588][ T5120] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 288.521268][ T5120] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 288.539527][ T5120] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 288.573230][ T5120] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 288.644575][ T5120] Bluetooth: hci0: command 0x0406 tx timeout [ 289.976710][ T6912] chnl_net:caif_netlink_parms(): no params data found [ 290.643689][ T61] Bluetooth: hci6: command tx timeout [ 290.695107][ T6912] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.704981][ T6912] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.705245][ T6912] bridge_slave_0: entered allmulticast mode [ 290.726255][ T6912] bridge_slave_0: entered promiscuous mode [ 290.735880][ T6912] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.768205][ T6912] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.768471][ T6912] bridge_slave_1: entered allmulticast mode [ 290.771155][ T6912] bridge_slave_1: entered promiscuous mode [ 291.256487][ T6912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.260720][ T6912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.648604][ T6912] team0: Port device team_slave_0 added [ 291.652617][ T6912] team0: Port device team_slave_1 added [ 292.235095][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.235111][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.235134][ T6912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.237592][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.237605][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.237627][ T6912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.723053][ T61] Bluetooth: hci6: command tx timeout [ 292.865103][ T6912] hsr_slave_0: entered promiscuous mode [ 292.866546][ T6912] hsr_slave_1: entered promiscuous mode [ 292.867495][ T6912] debugfs: 'hsr0' already exists in 'hsr' [ 292.867515][ T6912] Cannot create hsr debugfs directory [ 294.600287][ T6912] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 294.684575][ T6912] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 294.778881][ T6912] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 294.813047][ T61] Bluetooth: hci6: command tx timeout [ 294.854987][ T6912] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 295.298346][ T6912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.399793][ T6912] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.445884][ T1296] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.446026][ T1296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.514171][ T1296] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.514303][ T1296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.628156][ T6912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.884007][ T61] Bluetooth: hci6: command tx timeout [ 298.028443][ T6912] veth0_vlan: entered promiscuous mode [ 298.064956][ T6912] veth1_vlan: entered promiscuous mode [ 298.263281][ T6912] veth0_macvtap: entered promiscuous mode [ 298.286883][ T6912] veth1_macvtap: entered promiscuous mode [ 298.408222][ T6912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.454797][ T6912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.615630][ T1467] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.624160][ T1467] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.654078][ T2920] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.656822][ T1467] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.114507][ T3590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.114528][ T3590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.347708][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.347730][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/06 05:57:24 executed programs: 8 [ 301.325648][ T6945] loop6: detected capacity change from 0 to 40427 [ 301.383235][ T6945] F2FS-fs (loop6): build fault injection rate: 14 [ 301.383258][ T6945] F2FS-fs (loop6): build fault injection type: 0x3bfe8c [ 301.466131][ T6945] F2FS-fs (loop6): invalid crc value [ 301.478083][ C1] F2FS-fs (loop6): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 301.557348][ C1] F2FS-fs (loop6): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 302.082562][ T6945] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 302.082597][ T6945] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 302.196542][ T6945] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 302.198061][ T6945] syz.6.23: attempt to access beyond end of device [ 302.198061][ T6945] loop6: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 302.199036][ T6945] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40 [ 302.200360][ T6945] F2FS-fs (loop6): inject inconsistent footer in sanity_check_node_footer of read_inline_xattr+0x1af/0x320 [ 302.200393][ T6945] F2FS-fs (loop6): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 304.010431][ T5120] Bluetooth: hci1: command 0x0406 tx timeout [ 315.015555][ T5120] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 315.031421][ T5120] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 315.046331][ T5120] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 315.052093][ T5120] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 315.073072][ T5120] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 316.375342][ T6960] chnl_net:caif_netlink_parms(): no params data found [ 317.203112][ T61] Bluetooth: hci7: command tx timeout [ 317.306173][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.306243][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.427324][ T6960] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.483160][ T6960] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.483780][ T6960] bridge_slave_0: entered allmulticast mode [ 317.513227][ T6960] bridge_slave_0: entered promiscuous mode [ 317.525515][ T6960] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.525717][ T6960] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.525943][ T6960] bridge_slave_1: entered allmulticast mode [ 317.528381][ T6960] bridge_slave_1: entered promiscuous mode [ 318.012014][ T6960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.055862][ T6960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.628646][ T6960] team0: Port device team_slave_0 added [ 318.655636][ T6960] team0: Port device team_slave_1 added [ 319.083249][ T6960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.083267][ T6960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.083290][ T6960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.093212][ T6960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.093228][ T6960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.093250][ T6960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.308097][ T61] Bluetooth: hci7: command tx timeout [ 319.815113][ T6960] hsr_slave_0: entered promiscuous mode [ 319.816512][ T6960] hsr_slave_1: entered promiscuous mode [ 319.817425][ T6960] debugfs: 'hsr0' already exists in 'hsr' [ 319.817447][ T6960] Cannot create hsr debugfs directory [ 321.363185][ T61] Bluetooth: hci7: command tx timeout [ 321.605553][ T6960] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 321.705241][ T6960] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 321.813812][ T6960] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 321.894977][ T6960] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 322.529959][ T6960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.648445][ T6960] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.720507][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.720718][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.745387][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.745530][ T3492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.443409][ T61] Bluetooth: hci7: command tx timeout [ 324.078209][ T6960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.486911][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 325.592532][ T6960] veth0_vlan: entered promiscuous mode [ 325.664867][ T6960] veth1_vlan: entered promiscuous mode [ 325.843699][ T6960] veth0_macvtap: entered promiscuous mode [ 325.876191][ T6960] veth1_macvtap: entered promiscuous mode [ 325.979062][ T6960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.086463][ T6960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.153927][ T6909] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.234677][ T6909] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.234915][ T6909] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.235358][ T6909] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.803647][ T6952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.803668][ T6952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.116388][ T6970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.116408][ T6970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/06 05:57:52 executed programs: 9 [ 328.805177][ T38] INFO: task syz.0.17:6686 blocked for more than 143 seconds. [ 328.805201][ T38] Not tainted syzkaller #0 [ 328.805211][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 328.805233][ T38] task:syz.0.17 state:D stack:26840 pid:6686 tgid:6686 ppid:6590 task_flags:0x400040 flags:0x00080002 [ 328.805295][ T38] Call Trace: [ 328.805302][ T38] [ 328.805316][ T38] __schedule+0x1480/0x50a0 [ 328.805349][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 328.805395][ T38] ? lockdep_hardirqs_on+0x98/0x140 [ 328.805414][ T38] ? preempt_schedule+0xae/0xc0 [ 328.805435][ T38] ? __pfx___schedule+0x10/0x10 [ 328.805460][ T38] ? __rt_mutex_slowlock_locked+0x1a7/0x25e0 [ 328.805492][ T38] rt_mutex_schedule+0x77/0xf0 [ 328.805508][ T38] ? __rt_mutex_slowlock_locked+0x1a7/0x25e0 [ 328.805527][ T38] __rt_mutex_slowlock_locked+0x1dfe/0x25e0 [ 328.805559][ T38] ? __rt_mutex_slowlock_locked+0x1a7/0x25e0 [ 328.805587][ T38] ? __pfx___rt_mutex_slowlock_locked+0x10/0x10 [ 328.805617][ T38] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 328.805642][ T38] ? rt_mutex_pre_schedule+0x7d/0x1d0 [ 328.805663][ T38] rt_mutex_slowlock+0xb5/0x160 [ 328.805697][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 328.805730][ T38] rwbase_write_lock+0x14f/0x750 [ 328.805758][ T38] ? __pfx_f2fs_release_file+0x10/0x10 [ 328.805783][ T38] ? __pfx_f2fs_release_file+0x10/0x10 [ 328.805806][ T38] f2fs_release_file+0xe3/0x150 [ 328.805831][ T38] __fput+0x45b/0xa80 [ 328.805862][ T38] task_work_run+0x1d4/0x260 [ 328.805889][ T38] ? __pfx_task_work_run+0x10/0x10 [ 328.805910][ T38] ? __se_sys_close_range+0x4f0/0x650 [ 328.805932][ T38] ? exit_to_user_mode_loop+0x55/0x4f0 [ 328.805959][ T38] exit_to_user_mode_loop+0xff/0x4f0 [ 328.805980][ T38] ? rcu_is_watching+0x15/0xb0 [ 328.806002][ T38] do_syscall_64+0x2e3/0xf80 [ 328.806024][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.806042][ T38] ? clear_bhb_loop+0x60/0xb0 [ 328.806064][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.806081][ T38] RIP: 0033:0x7febda5ff749 [ 328.806101][ T38] RSP: 002b:00007ffd51e7dc88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 328.806119][ T38] RAX: 0000000000000000 RBX: 00007febda857da0 RCX: 00007febda5ff749 [ 328.806132][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 328.806143][ T38] RBP: 00007febda857da0 R08: 0000000000000000 R09: 0000000651e7df7f [ 328.806155][ T38] R10: 00007febda857cb0 R11: 0000000000000246 R12: 0000000000028cbd [ 328.806167][ T38] R13: 00007ffd51e7dd80 R14: ffffffffffffffff R15: 00007ffd51e7dda0 [ 328.806198][ T38] [ 328.806206][ T38] INFO: task syz.0.17:6687 blocked for more than 143 seconds. [ 328.806217][ T38] Not tainted syzkaller #0 [ 328.806226][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 328.806234][ T38] task:syz.0.17 state:D stack:24480 pid:6687 tgid:6686 ppid:6590 task_flags:0x400140 flags:0x00080002 [ 328.806275][ T38] Call Trace: [ 328.806281][ T38] [ 328.806293][ T38] __schedule+0x1480/0x50a0 [ 328.806328][ T38] ? lockdep_unlock+0x89/0x120 [ 328.806348][ T38] ? __lock_acquire+0x146f/0x2cf0 [ 328.806382][ T38] ? __pfx___schedule+0x10/0x10 [ 328.806415][ T38] ? schedule+0x91/0x360 [ 328.806438][ T38] schedule+0x165/0x360 [ 328.806460][ T38] schedule_timeout+0x9a/0x270 [ 328.806479][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 328.806510][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 328.806530][ T38] ? lockdep_hardirqs_on+0x98/0x140 [ 328.806548][ T38] ? wait_for_completion+0x267/0x5d0 [ 328.806570][ T38] wait_for_completion+0x2bf/0x5d0 [ 328.806603][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 328.806636][ T38] f2fs_issue_checkpoint+0x382/0x610 [ 328.806664][ T38] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 328.806694][ T38] ? folio_unlock+0x101/0x160 [ 328.806717][ T38] ? f2fs_folio_put+0x145/0x1a0 [ 328.806742][ T38] ? __get_node_folio+0xf3a/0x14d0 [ 328.806791][ T38] ? f2fs_sync_fs+0x1f0/0x3b0 [ 328.806813][ T38] f2fs_unlink+0x5cb/0xa80 [ 328.806840][ T38] ? __pfx_f2fs_unlink+0x10/0x10 [ 328.806866][ T38] ? try_break_deleg+0x7c/0x130 [ 328.806890][ T38] vfs_unlink+0x386/0x650 [ 328.806921][ T38] do_unlinkat+0x2cf/0x570 [ 328.806949][ T38] ? __pfx_do_unlinkat+0x10/0x10 [ 328.806972][ T38] ? strncpy_from_user+0x150/0x2c0 [ 328.806998][ T38] ? getname_flags+0x1e5/0x540 [ 328.807019][ T38] __x64_sys_unlinkat+0xd3/0xf0 [ 328.807044][ T38] do_syscall_64+0xfa/0xf80 [ 328.807065][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.807082][ T38] ? clear_bhb_loop+0x60/0xb0 [ 328.807103][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.807120][ T38] RIP: 0033:0x7febda5ff749 [ 328.807134][ T38] RSP: 002b:00007febd9c66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 328.807151][ T38] RAX: ffffffffffffffda RBX: 00007febda855fa0 RCX: 00007febda5ff749 [ 328.807164][ T38] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 328.807176][ T38] RBP: 00007febda683f91 R08: 0000000000000000 R09: 0000000000000000 [ 328.807188][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.807198][ T38] R13: 00007febda856038 R14: 00007febda855fa0 R15: 00007ffd51e7db28 [ 328.807229][ T38] [ 328.807301][ T38] [ 328.807301][ T38] Showing all locks held in the system: [ 328.807310][ T38] 3 locks held by kworker/u8:0/12: [ 328.807321][ T38] #0: ffff888140474138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 328.807376][ T38] #1: ffffc90000117b80 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 328.807420][ T38] #2: ffff888028f680d0 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 328.807468][ T38] 3 locks held by kworker/u8:1/13: [ 328.807478][ T38] #0: ffff888140474138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 328.807520][ T38] #1: ffffc90000127b80 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 328.807563][ T38] #2: ffff88803ac680d0 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 328.807612][ T38] 1 lock held by khungtaskd/38: [ 328.807621][ T38] #0: ffffffff8d5aecc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 328.807671][ T38] 3 locks held by kworker/u8:5/85: [ 328.807681][ T38] #0: ffff888140474138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 328.807724][ T38] #1: ffffc9000155fb80 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 328.807766][ T38] #2: ffff88802a0e80d0 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 328.807831][ T38] 3 locks held by kworker/u8:15/3524: [ 328.807841][ T38] #0: ffff888140474138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 328.807883][ T38] #1: ffffc9000e7dfb80 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 328.807925][ T38] #2: ffff888029cae0d0 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 328.807972][ T38] 3 locks held by kworker/u8:17/3751: [ 328.807982][ T38] #0: ffff888140474138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 328.808024][ T38] #1: ffffc9000eddfb80 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 328.808067][ T38] #2: ffff888035a5a0d0 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 328.808115][ T38] 2 locks held by getty/5557: [ 328.808125][ T38] #0: ffff8880351a20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 328.808171][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 328.808215][ T38] 3 locks held by kworker/1:4/6677: [ 328.808226][ T38] 1 lock held by syz.0.17/6686: [ 328.808235][ T38] #0: ffff888057251df8 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: f2fs_release_file+0xe3/0x150 [ 328.808287][ T38] 3 locks held by syz.0.17/6687: [ 328.808296][ T38] #0: ffff88803ac68480 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 328.808344][ T38] #1: ffff888057251478 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: do_unlinkat+0x1b2/0x570 [ 328.808404][ T38] #2: ffff888057251df8 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: vfs_unlink+0xef/0x650 [ 328.808454][ T38] 3 locks held by f2fs_ckpt-7:0/6709: [ 328.808465][ T38] 1 lock held by syz.1.18/6765: [ 328.808475][ T38] #0: ffff8880573f1478 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: f2fs_release_file+0xe3/0x150 [ 328.808525][ T38] 3 locks held by syz.1.18/6770: [ 328.808535][ T38] #0: ffff88802a0e8480 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 328.808590][ T38] #1: ffff8880573f0af8 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: do_unlinkat+0x1b2/0x570 [ 328.808643][ T38] #2: ffff8880573f1478 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: vfs_unlink+0xef/0x650 [ 328.808692][ T38] 6 locks held by f2fs_ckpt-7:1/6771: [ 328.808704][ T38] 1 lock held by syz.2.19/6795: [ 328.808713][ T38] #0: ffff8880573f3a78 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: f2fs_release_file+0xe3/0x150 [ 328.808764][ T38] 3 locks held by syz.2.19/6796: [ 328.808773][ T38] #0: ffff888028f68480 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 328.808820][ T38] #1: ffff8880573f30f8 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: do_unlinkat+0x1b2/0x570 [ 328.808874][ T38] #2: ffff8880573f3a78 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: vfs_unlink+0xef/0x650 [ 328.808923][ T38] 3 locks held by f2fs_ckpt-7:2/6800: [ 328.808935][ T38] 1 lock held by syz.3.20/6824: [ 328.808944][ T38] #0: ffff8880573f43f8 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: f2fs_release_file+0xe3/0x150 [ 328.808995][ T38] 3 locks held by syz.3.20/6825: [ 328.809004][ T38] #0: ffff888035a5a480 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 328.809051][ T38] #1: ffff8880572543f8 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: do_unlinkat+0x1b2/0x570 [ 328.809104][ T38] #2: ffff8880573f43f8 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: vfs_unlink+0xef/0x650 [ 328.809154][ T38] 3 locks held by f2fs_ckpt-7:3/6829: [ 328.809165][ T38] 1 lock held by syz.4.21/6865: [ 328.809174][ T38] #0: ffff8880572569f8 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: f2fs_release_file+0xe3/0x150 [ 328.809225][ T38] 3 locks held by syz.4.21/6867: [ 328.809235][ T38] #0: ffff888029cae480 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 328.809281][ T38] #1: ffff888057256078 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: do_unlinkat+0x1b2/0x570 [ 328.809335][ T38] #2: ffff8880572569f8 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: vfs_unlink+0xef/0x650 [ 328.809389][ T38] 3 locks held by f2fs_ckpt-7:4/6872: [ 328.809400][ T38] 1 lock held by syz.5.22/6903: [ 328.809410][ T38] #0: ffff8880494a9478 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: f2fs_release_file+0xe3/0x150 [ 328.809460][ T38] 3 locks held by syz.5.22/6904: [ 328.809470][ T38] #0: ffff888058642480 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 328.809517][ T38] #1: ffff8880494a8af8 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: do_unlinkat+0x1b2/0x570 [ 328.809570][ T38] #2: ffff8880494a9478 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: vfs_unlink+0xef/0x650 [ 328.809619][ T38] 3 locks held by f2fs_ckpt-7:5/6908: [ 328.809632][ T38] 1 lock held by syz.6.23/6944: [ 328.809641][ T38] #0: ffff8880494ab0f8 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: f2fs_release_file+0xe3/0x150 [ 328.809692][ T38] 3 locks held by syz.6.23/6949: [ 328.809701][ T38] #0: ffff888028fec480 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 328.809748][ T38] #1: ffff8880494aa778 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: do_unlinkat+0x1b2/0x570 [ 328.809801][ T38] #2: ffff8880494ab0f8 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: vfs_unlink+0xef/0x650 [ 328.809850][ T38] 3 locks held by f2fs_ckpt-7:6/6950: [ 328.809862][ T38] 3 locks held by syz.7.24/6990: [ 328.809872][ T38] [ 328.809877][ T38] ============================================= [ 328.809877][ T38] [ 328.809895][ T38] NMI backtrace for cpu 1 [ 328.809913][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 328.809935][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 328.809945][ T38] Call Trace: [ 328.809952][ T38] [ 328.809959][ T38] dump_stack_lvl+0x189/0x250 [ 328.809984][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.810004][ T38] ? __pfx__printk+0x10/0x10 [ 328.810033][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 328.810059][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 328.810085][ T38] ? __pfx__printk+0x10/0x10 [ 328.810107][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 328.810127][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 328.810153][ T38] watchdog+0xf3c/0xf80 [ 328.810176][ T38] ? watchdog+0x1e2/0xf80 [ 328.810199][ T38] kthread+0x711/0x8a0 [ 328.810224][ T38] ? __pfx_watchdog+0x10/0x10 [ 328.810241][ T38] ? __pfx_kthread+0x10/0x10 [ 328.810260][ T38] ? rt_spin_unlock+0x150/0x200 [ 328.810280][ T38] ? rt_spin_unlock+0x161/0x200 [ 328.810295][ T38] ? __pfx_kthread+0x10/0x10 [ 328.810317][ T38] ret_from_fork+0x599/0xb30 [ 328.810338][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 328.810370][ T38] ? __switch_to_asm+0x39/0x70 [ 328.810390][ T38] ? __switch_to_asm+0x33/0x70 [ 328.810409][ T38] ? __pfx_kthread+0x10/0x10 [ 328.810431][ T38] ret_from_fork_asm+0x1a/0x30 [ 328.810468][ T38] [ 328.810474][ T38] Sending NMI from CPU 1 to CPUs 0: [ 328.810503][ C0] NMI backtrace for cpu 0 [ 328.810517][ C0] CPU: 0 UID: 0 PID: 6771 Comm: f2fs_ckpt-7:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 328.810536][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 328.810545][ C0] RIP: 0010:folio_try_get+0xf2/0x340 [ 328.810568][ C0] Code: c7 ff 49 83 c6 34 4c 89 f7 be 04 00 00 00 e8 d5 96 29 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 03 01 00 00 45 8b 3e <31> ff 44 89 fe e8 d4 39 c7 ff 45 85 ff 0f 84 e1 00 00 00 41 8d 4f [ 328.810581][ C0] RSP: 0018:ffffc90004257450 EFLAGS: 00000246 [ 328.810596][ C0] RAX: 0000000000000000 RBX: ffffffff81f8fc0c RCX: ffffffff81f8fccb [ 328.810608][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffea0000c35774 [ 328.810623][ C0] RBP: 0000000000000001 R08: ffffea0000c35777 R09: 1ffffd4000186aee [ 328.810635][ C0] R10: dffffc0000000000 R11: fffff94000186aef R12: dffffc0000000000 [ 328.810647][ C0] R13: dffffc0000000000 R14: ffffea0000c35774 R15: 0000000000000002 [ 328.810659][ C0] FS: 0000000000000000(0000) GS:ffff888126d52000(0000) knlGS:0000000000000000 [ 328.810673][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 328.810684][ C0] CR2: 00007f1e3d701000 CR3: 0000000024ada000 CR4: 00000000003526f0 [ 328.810699][ C0] Call Trace: [ 328.810705][ C0] [ 328.810711][ C0] ? filemap_get_entry+0xad/0x2f0 [ 328.810732][ C0] filemap_get_entry+0x1b8/0x2f0 [ 328.810752][ C0] ? __pfx_filemap_get_entry+0x10/0x10 [ 328.810775][ C0] ? rt_spin_unlock+0x161/0x200 [ 328.810792][ C0] ? writeback_single_inode+0x8e9/0xd60 [ 328.810814][ C0] __filemap_get_folio_mpol+0x3c/0xa50 [ 328.810838][ C0] f2fs_grab_cache_folio+0x2e/0x380 [ 328.810857][ C0] __get_node_folio+0x18e/0x14d0 [ 328.810879][ C0] ? __pfx___get_node_folio+0x10/0x10 [ 328.810898][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 328.810914][ C0] ? rt_spin_unlock+0x150/0x200 [ 328.810931][ C0] f2fs_update_inode_page+0x82/0x190 [ 328.810949][ C0] ? f2fs_write_checkpoint+0xc67/0x2710 [ 328.810973][ C0] f2fs_write_checkpoint+0xc6f/0x2710 [ 328.811007][ C0] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 328.811047][ C0] ? rwbase_write_lock+0x56f/0x750 [ 328.811073][ C0] __checkpoint_and_complete_reqs+0xdf/0x3d0 [ 328.811097][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 328.811112][ C0] ? __pfx___schedule+0x10/0x10 [ 328.811129][ C0] ? __pfx___checkpoint_and_complete_reqs+0x10/0x10 [ 328.811158][ C0] ? schedule+0x91/0x360 [ 328.811179][ C0] issue_checkpoint_thread+0xd9/0x260 [ 328.811202][ C0] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 328.811224][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 328.811245][ C0] ? __kthread_parkme+0x7b/0x200 [ 328.811263][ C0] ? __kthread_parkme+0x1a1/0x200 [ 328.811285][ C0] kthread+0x711/0x8a0 [ 328.811307][ C0] ? __pfx_issue_checkpoint_thread+0x10/0x10 [ 328.811328][ C0] ? __pfx_kthread+0x10/0x10 [ 328.811347][ C0] ? rt_spin_unlock+0x150/0x200 [ 328.811364][ C0] ? rt_spin_unlock+0x161/0x200 [ 328.811378][ C0] ? __pfx_kthread+0x10/0x10 [ 328.811399][ C0] ret_from_fork+0x599/0xb30 [ 328.811416][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 328.811438][ C0] ? __switch_to_asm+0x39/0x70 [ 328.811458][ C0] ? __switch_to_asm+0x33/0x70 [ 328.811479][ C0] ? __pfx_kthread+0x10/0x10 [ 328.811500][ C0] ret_from_fork_asm+0x1a/0x30 [ 328.811529][ C0] [ 330.280268][ T6990] loop7: detected capacity change from 0 to 40427 [ 330.383852][ T6990] F2FS-fs (loop7): build fault injection rate: 14 [ 330.383875][ T6990] F2FS-fs (loop7): build fault injection type: 0x3bfe8c [ 330.545637][ T6990] F2FS-fs (loop7): invalid crc value [ 330.569588][ T6990] F2FS-fs (loop7): Failed to initialize F2FS segment manager (-4) [ 333.172030][ T6999] loop7: detected capacity change from 0 to 40427 [ 333.224640][ T6999] F2FS-fs (loop7): build fault injection rate: 14 [ 333.224662][ T6999] F2FS-fs (loop7): build fault injection type: 0x3bfe8c [ 333.296201][ T6999] F2FS-fs (loop7): invalid crc value [ 333.343328][ C1] F2FS-fs (loop7): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 333.454706][ C1] F2FS-fs (loop7): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 334.009865][ T6999] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 334.009900][ T6999] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 2025/12/06 05:57:59 executed programs: 11 [ 334.053257][ T6999] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 337.809980][ T7004] loop7: detected capacity change from 0 to 40427 [ 337.839396][ T7004] F2FS-fs (loop7): build fault injection rate: 14 [ 337.839416][ T7004] F2FS-fs (loop7): build fault injection type: 0x3bfe8c [ 337.883063][ T7004] F2FS-fs (loop7): invalid crc value [ 337.993102][ C0] F2FS-fs (loop7): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 338.083391][ C1] F2FS-fs (loop7): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 338.620556][ T7004] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 338.620590][ T7004] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 338.634153][ T7004] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 338.635660][ T7004] syz.7.26: attempt to access beyond end of device [ 338.635660][ T7004] loop7: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 338.638945][ T7004] F2FS-fs (loop7): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40 [ 338.640287][ T7004] F2FS-fs (loop7): inject inconsistent footer in sanity_check_node_footer of read_inline_xattr+0x1af/0x320 [ 338.640321][ T7004] F2FS-fs (loop7): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0]