Warning: Permanently added '10.128.0.152' (ED25519) to the list of known hosts. 2026/08/17 07:57:47 parsed 1 programs 2026/08/17 07:57:47 serving rpc on tcp://35007 [ 86.916063][ T5630] cgroup: Unknown subsys name 'net' [ 87.008628][ T5630] cgroup: Unknown subsys name 'cpuset' [ 87.017795][ T5630] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.722398][ T5630] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.893359][ T189] cfg80211: failed to load regulatory.db [ 92.155630][ T5646] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.556854][ T5712] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.569250][ T5712] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.578215][ T5712] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.587240][ T5712] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.595694][ T5712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.751171][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.751224][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.144179][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.144228][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.776978][ T5685] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.778165][ T5685] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.778599][ T5685] bridge_slave_0: entered allmulticast mode [ 95.784805][ T5685] bridge_slave_0: entered promiscuous mode [ 95.804440][ T5685] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.804864][ T5685] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.805224][ T5685] bridge_slave_1: entered allmulticast mode [ 95.810253][ T5685] bridge_slave_1: entered promiscuous mode [ 95.880912][ T5685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.892202][ T5685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.950850][ T5685] team0: Port device team_slave_0 added [ 95.961800][ T5685] team0: Port device team_slave_1 added [ 95.993845][ T5685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.993883][ T5685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.994168][ T5685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.002098][ T5685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.002139][ T5685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.002212][ T5685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.114053][ T5685] hsr_slave_0: entered promiscuous mode [ 96.116945][ T5685] hsr_slave_1: entered promiscuous mode [ 96.359083][ T5685] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.375577][ T5685] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.383303][ T5685] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.400401][ T5685] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.407606][ T5685] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.420931][ T5685] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.429287][ T5685] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.442316][ T5685] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.479715][ T5685] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.480033][ T5685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.482222][ T5685] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.482553][ T5685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.560909][ T5685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.579466][ T1279] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.588986][ T1279] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.607638][ T5685] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.621293][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.621738][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.646220][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.646452][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.683666][ T5712] Bluetooth: hci0: command tx timeout [ 97.026547][ T5685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.240652][ T5685] veth0_vlan: entered promiscuous mode [ 97.259653][ T5685] veth1_vlan: entered promiscuous mode [ 97.291970][ T5685] veth0_macvtap: entered promiscuous mode [ 97.302036][ T5685] veth1_macvtap: entered promiscuous mode [ 97.321982][ T5685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.332190][ T5685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.365281][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.365356][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.365466][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.393242][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 2026/08/17 07:58:02 executed programs: 0 [ 97.625750][ T4936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.646259][ T4936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.655240][ T4936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.660082][ T4936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.665986][ T4936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.748412][ T5712] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.758718][ T5712] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.759556][ T5712] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.767697][ T5712] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.768556][ T5712] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.916156][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.924560][ T5775] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.925680][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.926473][ T5775] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.926777][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.949079][ T5775] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.964829][ T5775] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.972056][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.980221][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.988292][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.023680][ T5775] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 98.037580][ T5775] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.047085][ T5775] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.059113][ T5775] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.068237][ T5775] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 99.146111][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.723254][ T5775] Bluetooth: hci1: command tx timeout [ 99.812270][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.847737][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.848241][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.848615][ T5774] bridge_slave_0: entered allmulticast mode [ 99.854176][ T5774] bridge_slave_0: entered promiscuous mode [ 99.882983][ T5775] Bluetooth: hci2: command tx timeout [ 99.904153][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.904520][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.907125][ T5774] bridge_slave_1: entered allmulticast mode [ 99.912333][ T5774] bridge_slave_1: entered promiscuous mode [ 99.989513][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.042885][ T5775] Bluetooth: hci3: command tx timeout [ 100.043207][ T5775] Bluetooth: hci4: command tx timeout [ 100.070112][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.203497][ T5778] Bluetooth: hci5: command tx timeout [ 100.238019][ T5774] team0: Port device team_slave_0 added [ 100.270648][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.271034][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.271421][ T5762] bridge_slave_0: entered allmulticast mode [ 100.281415][ T5762] bridge_slave_0: entered promiscuous mode [ 100.297631][ T5774] team0: Port device team_slave_1 added [ 100.327963][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.328321][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.328712][ T5762] bridge_slave_1: entered allmulticast mode [ 100.334595][ T5762] bridge_slave_1: entered promiscuous mode [ 100.417591][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.417631][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.417658][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.493073][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.510641][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.510676][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.510722][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.571057][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.624499][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.643565][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.643794][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.643915][ T5766] bridge_slave_0: entered allmulticast mode [ 100.648766][ T5766] bridge_slave_0: entered promiscuous mode [ 100.657540][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.657821][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.658717][ T5766] bridge_slave_1: entered allmulticast mode [ 100.664630][ T5766] bridge_slave_1: entered promiscuous mode [ 100.710045][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.765160][ T5762] team0: Port device team_slave_0 added [ 100.813706][ T5762] team0: Port device team_slave_1 added [ 100.843267][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.851119][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.881150][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.881535][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.881888][ T5771] bridge_slave_0: entered allmulticast mode [ 100.888884][ T5771] bridge_slave_0: entered promiscuous mode [ 100.926412][ T5774] hsr_slave_0: entered promiscuous mode [ 100.929927][ T5774] hsr_slave_1: entered promiscuous mode [ 100.932248][ T5774] debugfs: 'hsr0' already exists in 'hsr' [ 100.932507][ T5774] Cannot create hsr debugfs directory [ 100.944372][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.944418][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.944489][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.006778][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.008093][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.008452][ T5771] bridge_slave_1: entered allmulticast mode [ 101.015217][ T5771] bridge_slave_1: entered promiscuous mode [ 101.057181][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.057224][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.057899][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.067538][ T5766] team0: Port device team_slave_0 added [ 101.070202][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.070466][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.070822][ T5768] bridge_slave_0: entered allmulticast mode [ 101.079256][ T5768] bridge_slave_0: entered promiscuous mode [ 101.151810][ T5766] team0: Port device team_slave_1 added [ 101.152349][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.152625][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.158557][ T5768] bridge_slave_1: entered allmulticast mode [ 101.164409][ T5768] bridge_slave_1: entered promiscuous mode [ 101.210656][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.263172][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.302187][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.360280][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.365091][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.365179][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.383337][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.450939][ T5762] hsr_slave_0: entered promiscuous mode [ 101.454593][ T5762] hsr_slave_1: entered promiscuous mode [ 101.456510][ T5762] debugfs: 'hsr0' already exists in 'hsr' [ 101.456570][ T5762] Cannot create hsr debugfs directory [ 101.478898][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.483434][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.483565][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.540095][ T5771] team0: Port device team_slave_0 added [ 101.572565][ T5768] team0: Port device team_slave_0 added [ 101.579189][ T5771] team0: Port device team_slave_1 added [ 101.588372][ T12] bridge_slave_1: left allmulticast mode [ 101.588430][ T12] bridge_slave_1: left promiscuous mode [ 101.592528][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.610734][ T12] bridge_slave_0: left allmulticast mode [ 101.610781][ T12] bridge_slave_0: left promiscuous mode [ 101.617412][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.756854][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.772443][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.784187][ T12] bond0 (unregistering): Released all slaves [ 101.803205][ T5778] Bluetooth: hci1: command tx timeout [ 101.934012][ T5768] team0: Port device team_slave_1 added [ 101.963777][ T5778] Bluetooth: hci2: command tx timeout [ 102.066054][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.066099][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.066142][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.113281][ T12] hsr_slave_0: left promiscuous mode [ 102.118796][ T12] hsr_slave_1: left promiscuous mode [ 102.121649][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.121745][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.134039][ T5775] Bluetooth: hci3: command tx timeout [ 102.136622][ T5778] Bluetooth: hci4: command tx timeout [ 102.152587][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.152624][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.171436][ T12] veth1_macvtap: left promiscuous mode [ 102.171525][ T12] veth0_macvtap: left promiscuous mode [ 102.171955][ T12] veth1_vlan: left promiscuous mode [ 102.172191][ T12] veth0_vlan: left promiscuous mode [ 102.282957][ T5778] Bluetooth: hci5: command tx timeout [ 102.395400][ T12] team0 (unregistering): Port device team_slave_1 removed [ 102.410263][ T12] team0 (unregistering): Port device team_slave_0 removed [ 102.546122][ T5766] hsr_slave_0: entered promiscuous mode [ 102.549175][ T5766] hsr_slave_1: entered promiscuous mode [ 102.581916][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.581957][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.581985][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.597984][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.600224][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.600329][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.699674][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.699716][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.699745][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.954200][ T5768] hsr_slave_0: entered promiscuous mode [ 102.960769][ T5768] hsr_slave_1: entered promiscuous mode [ 102.964133][ T5768] debugfs: 'hsr0' already exists in 'hsr' [ 102.964193][ T5768] Cannot create hsr debugfs directory [ 103.018701][ T5771] hsr_slave_0: entered promiscuous mode [ 103.021379][ T5771] hsr_slave_1: entered promiscuous mode [ 103.024398][ T5771] debugfs: 'hsr0' already exists in 'hsr' [ 103.024420][ T5771] Cannot create hsr debugfs directory [ 103.407783][ T5762] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.422340][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.430558][ T5762] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.441737][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.450504][ T5762] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.460708][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.464834][ T5762] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.476338][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.549145][ T5774] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.560590][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.563905][ T5774] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.580351][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.591140][ T5774] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.603973][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.612508][ T5774] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.622659][ T5774] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.718941][ T5766] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.733838][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.741728][ T5766] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 103.752367][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.759252][ T5766] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 103.770563][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.783336][ T5766] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 103.796944][ T5766] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.883538][ T5778] Bluetooth: hci1: command tx timeout [ 103.915292][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.928640][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.939031][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.946892][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.957306][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.975689][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.986314][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.993770][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.004637][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.042876][ T5778] Bluetooth: hci2: command tx timeout [ 104.064249][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.113465][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.113607][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.120993][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.121198][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.190950][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.201418][ T5771] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.205730][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.214125][ T5778] Bluetooth: hci4: command tx timeout [ 104.216115][ T5775] Bluetooth: hci3: command tx timeout [ 104.226045][ T5771] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.245630][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.257417][ T5771] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.273342][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.286615][ T5771] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.318595][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.365246][ T5778] Bluetooth: hci5: command tx timeout [ 104.414498][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.447613][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.447851][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.479501][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.509707][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.528105][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.528384][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.565557][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.608737][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.609046][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.666009][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.666226][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.707340][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.753832][ T3340] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.754062][ T3340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.802446][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.802563][ T3324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.830518][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.897143][ T5766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.956179][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.021914][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.022040][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.071889][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.072197][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.571357][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.741153][ T5762] veth0_vlan: entered promiscuous mode [ 105.761089][ T5762] veth1_vlan: entered promiscuous mode [ 105.907271][ T5762] veth0_macvtap: entered promiscuous mode [ 105.935048][ T5762] veth1_macvtap: entered promiscuous mode [ 105.965015][ T5778] Bluetooth: hci1: command tx timeout [ 105.981333][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.021884][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.059967][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.123949][ T5778] Bluetooth: hci2: command tx timeout [ 106.254558][ T1032] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.284119][ T5778] Bluetooth: hci4: command tx timeout [ 106.286039][ T5778] Bluetooth: hci3: command tx timeout [ 106.304474][ T1032] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.350865][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.445192][ T5775] Bluetooth: hci5: command tx timeout [ 106.480658][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.480707][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.642926][ T1271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.674674][ T3340] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.684291][ T3340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.684333][ T3340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.704044][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.725521][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 2026/08/17 07:58:11 executed programs: 10 [ 106.810987][ T5766] veth0_vlan: entered promiscuous mode [ 106.889228][ T5766] veth1_vlan: entered promiscuous mode [ 106.947067][ T5771] veth0_vlan: entered promiscuous mode [ 106.982606][ T5768] veth0_vlan: entered promiscuous mode [ 106.992121][ T5774] veth0_vlan: entered promiscuous mode [ 107.015016][ T5771] veth1_vlan: entered promiscuous mode [ 107.057952][ T5774] veth1_vlan: entered promiscuous mode [ 107.065469][ T5768] veth1_vlan: entered promiscuous mode [ 107.087127][ T5766] veth0_macvtap: entered promiscuous mode [ 107.118784][ T5766] veth1_macvtap: entered promiscuous mode [ 107.186098][ T5945] loop0: detected capacity change from 0 to 40427 [ 107.204928][ T5945] F2FS-fs (loop0): build fault injection rate: 174 [ 107.204978][ T5945] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 107.226802][ T5771] veth0_macvtap: entered promiscuous mode [ 107.241981][ T5945] F2FS-fs (loop0): invalid crc value [ 107.253900][ T5771] veth1_macvtap: entered promiscuous mode [ 107.285177][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.320760][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.346374][ T5768] veth0_macvtap: entered promiscuous mode [ 107.364694][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.426471][ T5768] veth1_macvtap: entered promiscuous mode [ 107.439244][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.452625][ T5774] veth0_macvtap: entered promiscuous mode [ 107.470548][ T5945] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 107.504099][ T5945] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 107.531209][ T5774] veth1_macvtap: entered promiscuous mode [ 107.564956][ T1271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.565053][ T1271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.565140][ T1271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.565263][ T1271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.565377][ T1271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.565468][ T1271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.565605][ T1271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.628706][ T5949] F2FS-fs (loop0): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8bf/0xd90 [ 107.628812][ T5949] F2FS-fs (loop0): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 107.640608][ T5949] syz.0.17: attempt to access beyond end of device [ 107.640608][ T5949] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 107.681560][ T5945] F2FS-fs (loop0): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 107.701878][ T5945] F2FS-fs (loop0): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 107.722576][ T5945] F2FS-fs (loop0): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 107.743225][ T5945] F2FS-fs (loop0): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 107.745071][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.770809][ T5945] F2FS-fs (loop0): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 107.781151][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.781220][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.806969][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.829456][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.836181][ T5762] syz-executor: attempt to access beyond end of device [ 107.836181][ T5762] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 107.850593][ T5762] CPU: 0 UID: 0 PID: 5762 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 107.850679][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.850731][ T5762] Call Trace: [ 107.850763][ T5762] [ 107.850785][ T5762] dump_stack_lvl+0xe8/0x150 [ 107.850893][ T5762] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 107.850990][ T5762] f2fs_write_end_bio+0x1211/0x16e0 [ 107.851084][ T5762] ? blkg_put+0x22/0x240 [ 107.851193][ T5762] __submit_merged_bio+0x258/0x6a0 [ 107.851266][ T5762] ? rcu_is_watching+0x16/0xb0 [ 107.851351][ T5762] __submit_merged_write_cond+0x3c9/0x4e0 [ 107.851444][ T5762] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 107.851574][ T5762] f2fs_write_data_pages+0x2a27/0x36f0 [ 107.851658][ T5762] ? __lock_acquire+0x6df/0x2e50 [ 107.851816][ T5762] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 107.851889][ T5762] ? __bfs+0x153/0x290 [ 107.851910][ T5762] ? __pfx_hlock_conflict+0x10/0x10 [ 107.851959][ T5762] ? lockdep_unlock+0x5c/0xd0 [ 107.851991][ T5762] ? __lock_acquire+0x14b9/0x2e50 [ 107.852033][ T5762] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 107.852064][ T5762] do_writepages+0x338/0x560 [ 107.852101][ T5762] ? do_raw_spin_unlock+0xf5/0x200 [ 107.852136][ T5762] filemap_fdatawrite+0x1e9/0x2f0 [ 107.852169][ T5762] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 107.852240][ T5762] ? do_raw_spin_unlock+0xf5/0x200 [ 107.852274][ T5762] f2fs_sync_dirty_inodes+0x30e/0x830 [ 107.852360][ T5762] f2fs_write_checkpoint+0xa3d/0x2710 [ 107.852443][ T5762] ? __lock_acquire+0x6df/0x2e50 [ 107.852600][ T5762] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 107.852791][ T5762] ? try_to_wake_up+0x8b6/0x14d0 [ 107.852901][ T5762] kill_f2fs_super+0x2dd/0x700 [ 107.853010][ T5762] ? __pfx_kill_f2fs_super+0x10/0x10 [ 107.853127][ T5762] ? call_rcu+0x64d/0x8b0 [ 107.853195][ T5762] ? lockdep_hardirqs_on+0x7b/0x110 [ 107.853301][ T5762] deactivate_locked_super+0xbc/0x110 [ 107.853367][ T5762] cleanup_mnt+0x3d3/0x460 [ 107.853466][ T5762] task_work_run+0x1d9/0x270 [ 107.853535][ T5762] ? __pfx_task_work_run+0x10/0x10 [ 107.853622][ T5762] exit_to_user_mode_loop+0x204/0x770 [ 107.853686][ T5762] ? rcu_is_watching+0x16/0xb0 [ 107.853772][ T5762] do_syscall_64+0x328/0x520 [ 107.853854][ T5762] ? trace_irq_disable+0x3b/0x140 [ 107.853914][ T5762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.853985][ T5762] ? clear_bhb_loop+0x70/0xc0 [ 107.854054][ T5762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.854117][ T5762] RIP: 0033:0x7f1befd9f317 [ 107.854182][ T5762] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 107.854233][ T5762] RSP: 002b:00007ffc20e63f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 107.854299][ T5762] RAX: 0000000000000000 RBX: 00007f1befe34474 RCX: 00007f1befd9f317 [ 107.854341][ T5762] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc20e64010 [ 107.854384][ T5762] RBP: 00007ffc20e64010 R08: 00007ffc20e65010 R09: 00000000ffffffff [ 107.854426][ T5762] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc20e650a0 [ 107.854446][ T5762] R13: 00007f1befe34474 R14: 000000000001a4e1 R15: 00007ffc20e650e0 [ 107.854542][ T5762] [ 107.875209][ T5762] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 108.201415][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.233787][ T1271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.234207][ T1271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.237440][ T1271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.237492][ T1271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.267777][ T5775] [ 108.270490][ T5775] ============================= [ 108.275985][ T5775] WARNING: suspicious RCU usage [ 108.281465][ T5775] syzkaller #0 Not tainted [ 108.286785][ T5775] ----------------------------- [ 108.291667][ T5775] ./include/linux/radix-tree.h:179 suspicious rcu_dereference_check() usage! [ 108.300564][ T5775] [ 108.300564][ T5775] other info that might help us debug this: [ 108.300564][ T5775] [ 108.310948][ T5775] [ 108.310948][ T5775] rcu_scheduler_active = 2, debug_locks = 1 [ 108.313151][ T1271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.327900][ T5775] locks held by kworker/u9:3/5775: 4, last CPU#0: [ 108.334409][ T5775] #0: ffff88807f597940 ((wq_completion)f2fs_evict_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 108.346082][ T5775] #1: ffffc90003fb7c40 ((work_completion)(&ew->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 108.357823][ T5775] #2: ffff8880b863a820 (lock){+.+.}-{3:3}, at: __radix_tree_preload+0x82/0x870 [ 108.367226][ T5775] #3: ffff8880338688c8 (&im->ino_lock){+.+.}-{3:3}, at: __f2fs_add_ino_entry+0x14c/0x830 [ 108.377252][ T5775] [ 108.377252][ T5775] stack backtrace: [ 108.383668][ T5775] CPU: 0 UID: 0 PID: 5775 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 108.393149][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.403220][ T5775] Workqueue: f2fs_evict_wq f2fs_evict_inode_work [ 108.409593][ T5775] Call Trace: [ 108.412887][ T5775] [ 108.415837][ T5775] dump_stack_lvl+0xe8/0x150 [ 108.420462][ T5775] lockdep_rcu_suspicious+0x140/0x1d0 [ 108.425854][ T5775] __f2fs_add_ino_entry+0x782/0x830 [ 108.431082][ T5775] ? process_scheduled_works+0x97a/0x1630 [ 108.436818][ T5775] f2fs_evict_inode_work+0xa1/0x120 [ 108.442044][ T5775] process_scheduled_works+0xc3d/0x1630 [ 108.447627][ T5775] ? __pfx_process_scheduled_works+0x10/0x10 [ 108.453642][ T5775] ? assign_work+0x3cf/0x5d0 [ 108.458260][ T5775] worker_thread+0xa47/0xfb0 [ 108.462903][ T5775] kthread+0x38b/0x480 [ 108.467013][ T5775] ? __pfx_worker_thread+0x10/0x10 [ 108.472138][ T5775] ? __pfx_kthread+0x10/0x10 [ 108.476736][ T5775] ret_from_fork+0x514/0xb70 [ 108.481364][ T5775] ? __pfx_ret_from_fork+0x10/0x10 [ 108.486498][ T5775] ? __switch_to+0xc89/0x1420 [ 108.491214][ T5775] ? __pfx_kthread+0x10/0x10 [ 108.495813][ T5775] ret_from_fork_asm+0x1a/0x30 [ 108.500617][ T5775] [ 108.528180][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.528253][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.598024][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.598063][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.604646][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.609995][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.733628][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.865769][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.865808][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.026576][ T3340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.026613][ T3340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.161092][ T5952] loop1: detected capacity change from 0 to 40427 [ 109.186054][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.186123][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.206640][ T5952] F2FS-fs (loop1): build fault injection rate: 174 [ 109.216348][ T5952] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 109.227676][ T5952] F2FS-fs (loop1): invalid crc value [ 109.343079][ T5952] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 109.358620][ T5952] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 109.391274][ T3340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.391330][ T3340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.405384][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.478036][ T5952] F2FS-fs (loop1): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 109.541898][ T5960] F2FS-fs (loop1): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8bf/0xd90 [ 109.541977][ T5960] F2FS-fs (loop1): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 109.542314][ T5960] syz.1.18: attempt to access beyond end of device [ 109.542314][ T5960] loop1: rw=2049, sector=45096, nr_sectors = 240 limit=40427 [ 109.566678][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.566705][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.730943][ T5766] syz-executor: attempt to access beyond end of device [ 109.730943][ T5766] loop1: rw=2049, sector=45336, nr_sectors = 8 limit=40427 [ 109.751363][ T5766] CPU: 1 UID: 0 PID: 5766 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 109.751397][ T5766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.751411][ T5766] Call Trace: [ 109.751421][ T5766] [ 109.751431][ T5766] dump_stack_lvl+0xe8/0x150 [ 109.751470][ T5766] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 109.751504][ T5766] f2fs_write_end_bio+0x1211/0x16e0 [ 109.751541][ T5766] ? blkg_put+0x22/0x240 [ 109.751582][ T5766] __submit_merged_bio+0x258/0x6a0 [ 109.751608][ T5766] ? rcu_is_watching+0x16/0xb0 [ 109.751640][ T5766] __submit_merged_write_cond+0x3c9/0x4e0 [ 109.751676][ T5766] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 109.751725][ T5766] f2fs_write_data_pages+0x2a27/0x36f0 [ 109.751755][ T5766] ? __lock_acquire+0x6df/0x2e50 [ 109.751812][ T5766] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 109.751885][ T5766] ? __bfs+0x153/0x290 [ 109.751906][ T5766] ? __pfx_hlock_conflict+0x10/0x10 [ 109.751948][ T5766] ? lockdep_unlock+0x5c/0xd0 [ 109.751978][ T5766] ? __lock_acquire+0x14b9/0x2e50 [ 109.752032][ T5766] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 109.752063][ T5766] do_writepages+0x338/0x560 [ 109.752102][ T5766] ? do_raw_spin_unlock+0xf5/0x200 [ 109.752139][ T5766] filemap_fdatawrite+0x1e9/0x2f0 [ 109.752173][ T5766] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 109.752266][ T5766] ? do_raw_spin_unlock+0xf5/0x200 [ 109.752302][ T5766] f2fs_sync_dirty_inodes+0x30e/0x830 [ 109.752349][ T5766] f2fs_write_checkpoint+0xa3d/0x2710 [ 109.752382][ T5766] ? __lock_acquire+0x6df/0x2e50 [ 109.752437][ T5766] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 109.752506][ T5766] ? try_to_wake_up+0x8b6/0x14d0 [ 109.752551][ T5766] kill_f2fs_super+0x2dd/0x700 [ 109.752595][ T5766] ? __pfx_kill_f2fs_super+0x10/0x10 [ 109.752639][ T5766] ? call_rcu+0x64d/0x8b0 [ 109.752665][ T5766] ? lockdep_hardirqs_on+0x7b/0x110 [ 109.752706][ T5766] deactivate_locked_super+0xbc/0x110 [ 109.752732][ T5766] cleanup_mnt+0x3d3/0x460 [ 109.752765][ T5766] task_work_run+0x1d9/0x270 [ 109.752792][ T5766] ? __pfx_task_work_run+0x10/0x10 [ 109.752827][ T5766] exit_to_user_mode_loop+0x204/0x770 [ 109.752851][ T5766] ? rcu_is_watching+0x16/0xb0 [ 109.752881][ T5766] do_syscall_64+0x328/0x520 [ 109.752907][ T5766] ? trace_irq_disable+0x3b/0x140 [ 109.752929][ T5766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.752952][ T5766] ? clear_bhb_loop+0x70/0xc0 [ 109.752978][ T5766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.753001][ T5766] RIP: 0033:0x7f8c15b9f317 [ 109.753022][ T5766] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 109.753041][ T5766] RSP: 002b:00007ffdf215f298 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 109.753065][ T5766] RAX: 0000000000000000 RBX: 00007f8c15c34474 RCX: 00007f8c15b9f317 [ 109.753080][ T5766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf215f350 [ 109.753094][ T5766] RBP: 00007ffdf215f350 R08: 00007ffdf2160350 R09: 00000000ffffffff [ 109.753109][ T5766] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf21603e0 [ 109.753124][ T5766] R13: 00007f8c15c34474 R14: 000000000001ac5b R15: 00007ffdf2160420 [ 109.753157][ T5766] [ 109.873972][ T5766] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 110.581697][ T5959] loop0: detected capacity change from 0 to 40427 [ 110.595506][ T5959] F2FS-fs (loop0): build fault injection rate: 174 [ 110.595560][ T5959] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 110.596617][ T5959] F2FS-fs (loop0): invalid crc value [ 110.628863][ T5955] loop2: detected capacity change from 0 to 40427 [ 110.652481][ T5955] F2FS-fs (loop2): build fault injection rate: 174 [ 110.652520][ T5955] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 110.672514][ T5955] F2FS-fs (loop2): invalid crc value [ 111.032123][ T5959] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 111.051850][ T5959] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 111.132057][ T5955] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 111.151061][ T5972] syz.0.22: attempt to access beyond end of device [ 111.151061][ T5972] loop0: rw=2049, sector=45096, nr_sectors = 256 limit=40427 [ 111.205795][ T5955] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 111.269337][ T5962] loop3: detected capacity change from 0 to 40427 [ 111.303312][ T5962] F2FS-fs (loop3): build fault injection rate: 174 [ 111.310063][ T5962] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 111.326819][ T5962] F2FS-fs (loop3): invalid crc value [ 111.370364][ T5762] syz-executor: attempt to access beyond end of device [ 111.370364][ T5762] loop0: rw=2049, sector=45352, nr_sectors = 8 limit=40427 [ 111.397268][ T5762] CPU: 0 UID: 0 PID: 5762 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 111.397302][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.397316][ T5762] Call Trace: [ 111.397325][ T5762] [ 111.397335][ T5762] dump_stack_lvl+0xe8/0x150 [ 111.397374][ T5762] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 111.397409][ T5762] f2fs_write_end_bio+0x1211/0x16e0 [ 111.397445][ T5762] ? blkg_put+0x22/0x240 [ 111.397486][ T5762] __submit_merged_bio+0x258/0x6a0 [ 111.397513][ T5762] ? rcu_is_watching+0x16/0xb0 [ 111.397546][ T5762] __submit_merged_write_cond+0x3c9/0x4e0 [ 111.397591][ T5762] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 111.397642][ T5762] f2fs_write_data_pages+0x2a27/0x36f0 [ 111.397674][ T5762] ? __lock_acquire+0x6df/0x2e50 [ 111.397733][ T5762] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 111.397818][ T5762] ? __bfs+0x153/0x290 [ 111.397845][ T5762] ? __pfx_hlock_conflict+0x10/0x10 [ 111.397894][ T5762] ? lockdep_unlock+0x5c/0xd0 [ 111.397931][ T5762] ? __lock_acquire+0x14b9/0x2e50 [ 111.397981][ T5762] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 111.398015][ T5762] do_writepages+0x338/0x560 [ 111.398056][ T5762] ? do_raw_spin_unlock+0xf5/0x200 [ 111.398095][ T5762] filemap_fdatawrite+0x1e9/0x2f0 [ 111.398130][ T5762] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 111.398208][ T5762] ? do_raw_spin_unlock+0xf5/0x200 [ 111.398245][ T5762] f2fs_sync_dirty_inodes+0x30e/0x830 [ 111.398294][ T5762] f2fs_write_checkpoint+0xa3d/0x2710 [ 111.398326][ T5762] ? __lock_acquire+0x6df/0x2e50 [ 111.398382][ T5762] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 111.398454][ T5762] ? try_to_wake_up+0x8b6/0x14d0 [ 111.398495][ T5762] kill_f2fs_super+0x2dd/0x700 [ 111.398538][ T5762] ? __pfx_kill_f2fs_super+0x10/0x10 [ 111.398597][ T5762] ? call_rcu+0x64d/0x8b0 [ 111.398625][ T5762] ? lockdep_hardirqs_on+0x7b/0x110 [ 111.398666][ T5762] deactivate_locked_super+0xbc/0x110 [ 111.398693][ T5762] cleanup_mnt+0x3d3/0x460 [ 111.398726][ T5762] task_work_run+0x1d9/0x270 [ 111.398754][ T5762] ? __pfx_task_work_run+0x10/0x10 [ 111.398790][ T5762] exit_to_user_mode_loop+0x204/0x770 [ 111.398814][ T5762] ? rcu_is_watching+0x16/0xb0 [ 111.398846][ T5762] do_syscall_64+0x328/0x520 [ 111.398871][ T5762] ? trace_irq_disable+0x3b/0x140 [ 111.398894][ T5762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.398917][ T5762] ? clear_bhb_loop+0x70/0xc0 [ 111.398946][ T5762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.398969][ T5762] RIP: 0033:0x7f1befd9f317 [ 111.398991][ T5762] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 111.399009][ T5762] RSP: 002b:00007ffc20e63f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 111.399033][ T5762] RAX: 0000000000000000 RBX: 00007f1befe34474 RCX: 00007f1befd9f317 [ 111.399049][ T5762] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc20e64010 [ 111.399063][ T5762] RBP: 00007ffc20e64010 R08: 00007ffc20e65010 R09: 00000000ffffffff [ 111.399079][ T5762] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc20e650a0 [ 111.399094][ T5762] R13: 00007f1befe34474 R14: 000000000001b2a2 R15: 00007ffc20e650e0 [ 111.399130][ T5762] [ 111.433775][ T5762] F2FS-fs (loop0): Stopped filesystem due to reason: 3 2026/08/17 07:58:16 executed programs: 18 [ 111.788953][ T5962] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 111.819467][ T5771] syz-executor: attempt to access beyond end of device [ 111.819467][ T5771] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 111.835382][ T5962] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 111.870732][ T5771] CPU: 0 UID: 0 PID: 5771 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 111.870768][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.870782][ T5771] Call Trace: [ 111.870791][ T5771] [ 111.870801][ T5771] dump_stack_lvl+0xe8/0x150 [ 111.870841][ T5771] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 111.870876][ T5771] f2fs_write_end_bio+0x1211/0x16e0 [ 111.870912][ T5771] ? blkg_put+0x22/0x240 [ 111.870954][ T5771] __submit_merged_bio+0x258/0x6a0 [ 111.870981][ T5771] ? rcu_is_watching+0x16/0xb0 [ 111.871014][ T5771] __submit_merged_write_cond+0x3c9/0x4e0 [ 111.871063][ T5771] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 111.871126][ T5771] f2fs_write_data_pages+0x2a27/0x36f0 [ 111.871163][ T5771] ? __lock_acquire+0x6df/0x2e50 [ 111.871223][ T5771] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 111.871253][ T5771] ? is_bpf_text_address+0x26/0x2b0 [ 111.871298][ T5771] ? arch_stack_walk+0xfb/0x150 [ 111.871356][ T5771] ? add_lock_to_list+0xc7/0x100 [ 111.871386][ T5771] ? lockdep_unlock+0x5c/0xd0 [ 111.871417][ T5771] ? __lock_acquire+0x14b9/0x2e50 [ 111.871469][ T5771] ? do_raw_spin_lock+0x12b/0x2f0 [ 111.871512][ T5771] ? do_raw_spin_unlock+0xf5/0x200 [ 111.871551][ T5771] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 111.871585][ T5771] do_writepages+0x338/0x560 [ 111.871626][ T5771] ? do_raw_spin_unlock+0xf5/0x200 [ 111.871663][ T5771] filemap_fdatawrite+0x1e9/0x2f0 [ 111.871702][ T5771] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 111.871774][ T5771] ? preempt_schedule_common+0x7f/0xd0 [ 111.871800][ T5771] ? preempt_schedule_thunk+0x16/0x40 [ 111.871835][ T5771] f2fs_sync_dirty_inodes+0x30e/0x830 [ 111.871884][ T5771] f2fs_write_checkpoint+0xa3d/0x2710 [ 111.871916][ T5771] ? __lock_acquire+0x6df/0x2e50 [ 111.871972][ T5771] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 111.872044][ T5771] ? try_to_wake_up+0x8f2/0x14d0 [ 111.872086][ T5771] kill_f2fs_super+0x2dd/0x700 [ 111.872128][ T5771] ? __pfx_kill_f2fs_super+0x10/0x10 [ 111.872173][ T5771] ? call_rcu+0x64d/0x8b0 [ 111.872200][ T5771] ? lockdep_hardirqs_on+0x7b/0x110 [ 111.872240][ T5771] deactivate_locked_super+0xbc/0x110 [ 111.872266][ T5771] cleanup_mnt+0x3d3/0x460 [ 111.872299][ T5771] task_work_run+0x1d9/0x270 [ 111.872328][ T5771] ? __pfx_task_work_run+0x10/0x10 [ 111.872363][ T5771] exit_to_user_mode_loop+0x204/0x770 [ 111.872387][ T5771] ? rcu_is_watching+0x16/0xb0 [ 111.872419][ T5771] do_syscall_64+0x328/0x520 [ 111.872444][ T5771] ? trace_irq_disable+0x3b/0x140 [ 111.872467][ T5771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.872490][ T5771] ? clear_bhb_loop+0x70/0xc0 [ 111.872518][ T5771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.872548][ T5771] RIP: 0033:0x7f959639f317 [ 111.872571][ T5771] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 111.872589][ T5771] RSP: 002b:00007ffed5a7d9f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 111.872614][ T5771] RAX: 0000000000000000 RBX: 00007f9596434474 RCX: 00007f959639f317 [ 111.872630][ T5771] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed5a7dab0 [ 111.872644][ T5771] RBP: 00007ffed5a7dab0 R08: 00007ffed5a7eab0 R09: 00000000ffffffff [ 111.872660][ T5771] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed5a7eb40 [ 111.872674][ T5771] R13: 00007f9596434474 R14: 000000000001b37b R15: 00007ffed5a7eb80 [ 111.872710][ T5771] [ 111.905388][ T5771] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 112.041178][ T5978] CPU: 0 UID: 0 PID: 5978 Comm: syz.3.20 Not tainted syzkaller #0 PREEMPT(full) [ 112.041265][ T5978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.041305][ T5978] Call Trace: [ 112.041329][ T5978] [ 112.041352][ T5978] dump_stack_lvl+0xe8/0x150 [ 112.041450][ T5978] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 112.041482][ T5978] ? f2fs_write_single_data_page+0xfd7/0x1840 [ 112.041521][ T5978] f2fs_balance_fs+0x349/0x810 [ 112.041554][ T5978] ? f2fs_write_single_data_page+0xfd7/0x1840 [ 112.041585][ T5978] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 112.041692][ T5978] ? __lock_acquire+0x6df/0x2e50 [ 112.041811][ T5978] ? folio_unlock+0x101/0x160 [ 112.041905][ T5978] f2fs_write_single_data_page+0xfd7/0x1840 [ 112.042026][ T5978] ? __pfx_f2fs_write_single_data_page+0x10/0x10 [ 112.042161][ T5978] ? folio_clear_dirty_for_io+0x1bf/0x820 [ 112.042245][ T5978] ? folio_clear_dirty_for_io+0x1bf/0x820 [ 112.042319][ T5978] ? folio_clear_dirty_for_io+0x646/0x820 [ 112.042408][ T5978] f2fs_write_data_pages+0x1d2e/0x36f0 [ 112.042607][ T5978] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 112.042824][ T5978] ? __lock_acquire+0x6df/0x2e50 [ 112.042949][ T5978] ? __lock_acquire+0x6df/0x2e50 [ 112.043026][ T5978] ? do_raw_spin_lock+0x12b/0x2f0 [ 112.043156][ T5978] ? do_raw_spin_unlock+0xf5/0x200 [ 112.043248][ T5978] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 112.043332][ T5978] do_writepages+0x338/0x560 [ 112.043436][ T5978] ? do_raw_spin_unlock+0xf5/0x200 [ 112.043532][ T5978] filemap_write_and_wait_range+0x335/0x3f0 [ 112.043626][ T5978] ? __pfx_filemap_write_and_wait_range+0x10/0x10 [ 112.043849][ T5978] ? __lock_acquire+0x6df/0x2e50 [ 112.043925][ T5978] f2fs_bmap+0x182/0xb20 [ 112.044018][ T5978] ? __pfx_f2fs_bmap+0x10/0x10 [ 112.044122][ T5978] ? lock_acquire+0x115/0x350 [ 112.044238][ T5978] ? __pfx_f2fs_bmap+0x10/0x10 [ 112.044314][ T5978] bmap+0xac/0xe0 [ 112.044384][ T5978] file_ioctl+0x45f/0x7d0 [ 112.044485][ T5978] ? __pfx_file_ioctl+0x10/0x10 [ 112.044630][ T5978] ? kasan_quarantine_put+0xbb/0x1f0 [ 112.044734][ T5978] ? tomoyo_path_number_perm+0x219/0x5f0 [ 112.044832][ T5978] ? tomoyo_path_number_perm+0x219/0x5f0 [ 112.044929][ T5978] do_vfs_ioctl+0xc27/0x1530 [ 112.045027][ T5978] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 112.045112][ T5978] ? do_raw_spin_lock+0x12b/0x2f0 [ 112.045216][ T5978] ? hook_file_ioctl+0x1f2/0x600 [ 112.045334][ T5978] ? __fget_files+0x2a/0x420 [ 112.045400][ T5978] ? __fget_files+0x2a/0x420 [ 112.045455][ T5978] ? __fget_files+0x3a2/0x420 [ 112.045527][ T5978] ? __fget_files+0x2a/0x420 [ 112.045592][ T5978] ? bpf_lsm_file_ioctl+0x9/0x20 [ 112.045673][ T5978] __se_sys_ioctl+0x82/0x170 [ 112.045758][ T5978] do_syscall_64+0x166/0x520 [ 112.045830][ T5978] ? trace_irq_disable+0x3b/0x140 [ 112.045899][ T5978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.045967][ T5978] ? clear_bhb_loop+0x70/0xc0 [ 112.046036][ T5978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.046092][ T5978] RIP: 0033:0x7f1e9c39e0d9 [ 112.046155][ T5978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.046201][ T5978] RSP: 002b:00007f1e9b9dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.046262][ T5978] RAX: ffffffffffffffda RBX: 00007f1e9c626090 RCX: 00007f1e9c39e0d9 [ 112.046303][ T5978] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 0000000000000004 [ 112.046344][ T5978] RBP: 00007f1e9c435024 R08: 0000000000000000 R09: 0000000000000000 [ 112.046375][ T5978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.046408][ T5978] R13: 00007f1e9c626128 R14: 00007f1e9c626090 R15: 00007fff6c6e9498 [ 112.046504][ T5978] [ 112.272148][ T5978] F2FS-fs (loop3): Stopped filesystem due to reason: 1 [ 112.757130][ T5964] loop4: detected capacity change from 0 to 40427 [ 112.790257][ T5964] F2FS-fs (loop4): build fault injection rate: 174 [ 112.790311][ T5964] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 112.818195][ T5964] F2FS-fs (loop4): invalid crc value [ 113.210068][ T5964] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 113.258099][ T5964] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 113.350699][ T5964] f2fs_printk: 9 callbacks suppressed [ 113.350766][ T5964] F2FS-fs (loop4): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 113.406986][ T5984] syz.4.21: attempt to access beyond end of device [ 113.406986][ T5984] loop4: rw=2049, sector=45096, nr_sectors = 256 limit=40427 [ 113.445226][ T5964] F2FS-fs (loop4): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 113.496831][ T5964] F2FS-fs (loop4): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8bf/0xd90 [ 113.496903][ T5964] F2FS-fs (loop4): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 113.572127][ T5774] syz-executor: attempt to access beyond end of device [ 113.572127][ T5774] loop4: rw=2049, sector=45352, nr_sectors = 8 limit=40427 [ 113.602135][ T5774] CPU: 0 UID: 0 PID: 5774 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 113.602169][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.602183][ T5774] Call Trace: [ 113.602192][ T5774] [ 113.602211][ T5774] dump_stack_lvl+0xe8/0x150 [ 113.602251][ T5774] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 113.602292][ T5774] f2fs_write_end_bio+0x1211/0x16e0 [ 113.602330][ T5774] ? blkg_put+0x22/0x240 [ 113.602372][ T5774] __submit_merged_bio+0x258/0x6a0 [ 113.602400][ T5774] ? rcu_is_watching+0x16/0xb0 [ 113.602434][ T5774] __submit_merged_write_cond+0x3c9/0x4e0 [ 113.602478][ T5774] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 113.602531][ T5774] f2fs_write_data_pages+0x2a27/0x36f0 [ 113.602601][ T5774] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 113.602648][ T5774] ? lock_acquire+0x115/0x350 [ 113.602718][ T5774] ? __bfs+0x153/0x290 [ 113.602739][ T5774] ? __pfx_hlock_conflict+0x10/0x10 [ 113.602783][ T5774] ? lockdep_unlock+0x5c/0xd0 [ 113.602815][ T5774] ? __lock_acquire+0x14b9/0x2e50 [ 113.602866][ T5774] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 113.602900][ T5774] do_writepages+0x338/0x560 [ 113.602940][ T5774] ? do_raw_spin_unlock+0xf5/0x200 [ 113.602977][ T5774] filemap_fdatawrite+0x1e9/0x2f0 [ 113.603013][ T5774] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 113.603091][ T5774] ? do_raw_spin_unlock+0xf5/0x200 [ 113.603128][ T5774] f2fs_sync_dirty_inodes+0x30e/0x830 [ 113.603177][ T5774] f2fs_write_checkpoint+0xa3d/0x2710 [ 113.603217][ T5774] ? __lock_acquire+0x6df/0x2e50 [ 113.603274][ T5774] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 113.603346][ T5774] ? try_to_wake_up+0x8b6/0x14d0 [ 113.603388][ T5774] kill_f2fs_super+0x2dd/0x700 [ 113.603431][ T5774] ? __pfx_kill_f2fs_super+0x10/0x10 [ 113.603476][ T5774] ? call_rcu+0x64d/0x8b0 [ 113.603504][ T5774] ? lockdep_hardirqs_on+0x7b/0x110 [ 113.603545][ T5774] deactivate_locked_super+0xbc/0x110 [ 113.603572][ T5774] cleanup_mnt+0x3d3/0x460 [ 113.603605][ T5774] task_work_run+0x1d9/0x270 [ 113.603634][ T5774] ? __pfx_task_work_run+0x10/0x10 [ 113.603670][ T5774] exit_to_user_mode_loop+0x204/0x770 [ 113.603694][ T5774] ? rcu_is_watching+0x16/0xb0 [ 113.603726][ T5774] do_syscall_64+0x328/0x520 [ 113.603751][ T5774] ? trace_irq_disable+0x3b/0x140 [ 113.603773][ T5774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.603796][ T5774] ? clear_bhb_loop+0x70/0xc0 [ 113.603825][ T5774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.603848][ T5774] RIP: 0033:0x7f7d02f9f317 [ 113.603879][ T5774] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 113.603897][ T5774] RSP: 002b:00007fffe53d3d38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 113.603927][ T5774] RAX: 0000000000000000 RBX: 00007f7d03034474 RCX: 00007f7d02f9f317 [ 113.603943][ T5774] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe53d3df0 [ 113.603957][ T5774] RBP: 00007fffe53d3df0 R08: 00007fffe53d4df0 R09: 00000000ffffffff [ 113.603973][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffe53d4e80 [ 113.603987][ T5774] R13: 00007f7d03034474 R14: 000000000001bb3c R15: 00007fffe53d4ec0 [ 113.604023][ T5774] [ 113.649226][ T5774] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 113.818551][ T5970] loop1: detected capacity change from 0 to 40427 [ 114.506881][ T5983] loop0: detected capacity change from 0 to 40427 [ 114.540902][ T5983] F2FS-fs (loop0): build fault injection rate: 174 [ 114.540948][ T5983] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 114.549612][ T5983] F2FS-fs (loop0): invalid crc value [ 114.885737][ T5983] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 114.904472][ T5983] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 114.979687][ T5983] F2FS-fs (loop0): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 115.022417][ T5994] F2FS-fs (loop0): inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xfd7/0x1840 [ 115.035895][ T5994] syz.0.24: attempt to access beyond end of device [ 115.035895][ T5994] loop0: rw=2049, sector=45096, nr_sectors = 56 limit=40427 [ 115.051373][ T5994] CPU: 1 UID: 0 PID: 5994 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT(full) [ 115.051409][ T5994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.051422][ T5994] Call Trace: [ 115.051430][ T5994] [ 115.051439][ T5994] dump_stack_lvl+0xe8/0x150 [ 115.051475][ T5994] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 115.051506][ T5994] ? f2fs_write_single_data_page+0xfd7/0x1840 [ 115.051539][ T5994] f2fs_balance_fs+0x349/0x810 [ 115.051580][ T5994] ? f2fs_write_single_data_page+0xfd7/0x1840 [ 115.051611][ T5994] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 115.051649][ T5994] ? do_raw_spin_lock+0x12b/0x2f0 [ 115.051693][ T5994] ? folio_unlock+0x101/0x160 [ 115.051728][ T5994] f2fs_write_single_data_page+0xfd7/0x1840 [ 115.051780][ T5994] ? __pfx_f2fs_write_single_data_page+0x10/0x10 [ 115.051834][ T5994] ? folio_clear_dirty_for_io+0x1bf/0x820 [ 115.051868][ T5994] ? folio_clear_dirty_for_io+0x1bf/0x820 [ 115.051896][ T5994] ? folio_clear_dirty_for_io+0x646/0x820 [ 115.051932][ T5994] f2fs_write_data_pages+0x1d2e/0x36f0 [ 115.052012][ T5994] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 115.052107][ T5994] ? __lock_acquire+0x6df/0x2e50 [ 115.052147][ T5994] ? __lock_acquire+0x6df/0x2e50 [ 115.052180][ T5994] ? do_raw_spin_lock+0x12b/0x2f0 [ 115.052223][ T5994] ? do_raw_spin_unlock+0xf5/0x200 [ 115.052255][ T5994] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 115.052287][ T5994] do_writepages+0x338/0x560 [ 115.052328][ T5994] ? do_raw_spin_unlock+0xf5/0x200 [ 115.052363][ T5994] filemap_write_and_wait_range+0x335/0x3f0 [ 115.052400][ T5994] ? __pfx_filemap_write_and_wait_range+0x10/0x10 [ 115.052480][ T5994] ? __lock_acquire+0x6df/0x2e50 [ 115.052511][ T5994] f2fs_bmap+0x182/0xb20 [ 115.052548][ T5994] ? __pfx_f2fs_bmap+0x10/0x10 [ 115.052596][ T5994] ? lock_acquire+0x115/0x350 [ 115.052637][ T5994] ? __pfx_f2fs_bmap+0x10/0x10 [ 115.052666][ T5994] bmap+0xac/0xe0 [ 115.052694][ T5994] file_ioctl+0x45f/0x7d0 [ 115.052727][ T5994] ? __pfx_file_ioctl+0x10/0x10 [ 115.052772][ T5994] ? kasan_quarantine_put+0xbb/0x1f0 [ 115.052811][ T5994] ? tomoyo_path_number_perm+0x219/0x5f0 [ 115.052847][ T5994] ? tomoyo_path_number_perm+0x219/0x5f0 [ 115.052886][ T5994] do_vfs_ioctl+0xc27/0x1530 [ 115.052919][ T5994] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 115.052954][ T5994] ? do_raw_spin_lock+0x12b/0x2f0 [ 115.052993][ T5994] ? hook_file_ioctl+0x1f2/0x600 [ 115.053039][ T5994] ? __fget_files+0x2a/0x420 [ 115.053065][ T5994] ? __fget_files+0x2a/0x420 [ 115.053086][ T5994] ? __fget_files+0x3a2/0x420 [ 115.053107][ T5994] ? __fget_files+0x2a/0x420 [ 115.053131][ T5994] ? bpf_lsm_file_ioctl+0x9/0x20 [ 115.053158][ T5994] __se_sys_ioctl+0x82/0x170 [ 115.053190][ T5994] do_syscall_64+0x166/0x520 [ 115.053216][ T5994] ? trace_irq_disable+0x3b/0x140 [ 115.053238][ T5994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.053262][ T5994] ? clear_bhb_loop+0x70/0xc0 [ 115.053291][ T5994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.053314][ T5994] RIP: 0033:0x7f1befd9e0d9 [ 115.053335][ T5994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.053354][ T5994] RSP: 002b:00007f1bef3dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.053379][ T5994] RAX: ffffffffffffffda RBX: 00007f1bf0026090 RCX: 00007f1befd9e0d9 [ 115.053396][ T5994] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 0000000000000004 [ 115.053410][ T5994] RBP: 00007f1befe35024 R08: 0000000000000000 R09: 0000000000000000 [ 115.053424][ T5994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.053438][ T5994] R13: 00007f1bf0026128 R14: 00007f1bf0026090 R15: 00007ffc20e64ce8 [ 115.053475][ T5994] [ 115.224001][ T5994] F2FS-fs (loop0): Stopped filesystem due to reason: 1 [ 115.402482][ T5989] loop2: detected capacity change from 0 to 40427 [ 115.487169][ T5989] F2FS-fs (loop2): build fault injection rate: 174 [ 115.487220][ T5989] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 115.499716][ T5989] F2FS-fs (loop2): invalid crc value [ 115.657778][ T5987] loop1: detected capacity change from 0 to 40427 [ 115.684661][ T5987] F2FS-fs (loop1): build fault injection rate: 174 [ 115.684707][ T5987] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 115.703315][ T5987] F2FS-fs (loop1): invalid crc value [ 115.826945][ T5996] loop4: detected capacity change from 0 to 40427 [ 115.835903][ T5996] F2FS-fs (loop4): build fault injection rate: 174 [ 115.843855][ T5996] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 115.882132][ T5996] F2FS-fs (loop4): invalid crc value [ 115.932376][ T5987] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 115.955504][ T5987] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 115.980756][ T5987] F2FS-fs (loop1): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 116.003451][ T5987] F2FS-fs (loop1): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8bf/0xd90 [ 116.016633][ T5987] F2FS-fs (loop1): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 116.063274][ T5996] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 116.075738][ T5996] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 116.111883][ T5989] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 116.134922][ T5987] F2FS-fs (loop1): inject page get in f2fs_filemap_get_folio of generic_perform_write+0x2d5/0x8f0 [ 116.155588][ T5990] loop3: detected capacity change from 0 to 40427 [ 116.181301][ T5990] F2FS-fs (loop3): build fault injection rate: 174 [ 116.181352][ T5990] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 116.196152][ T5990] F2FS-fs (loop3): invalid crc value [ 116.220546][ T5989] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 116.234563][ T6009] syz.4.27: attempt to access beyond end of device [ 116.234563][ T6009] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 116.346918][ T6010] syz.2.25: attempt to access beyond end of device [ 116.346918][ T6010] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 116.365031][ T6010] CPU: 1 UID: 0 PID: 6010 Comm: syz.2.25 Not tainted syzkaller #0 PREEMPT(full) [ 116.365062][ T6010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.365075][ T6010] Call Trace: [ 116.365084][ T6010] [ 116.365094][ T6010] dump_stack_lvl+0xe8/0x150 [ 116.365135][ T6010] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 116.365163][ T6010] ? f2fs_write_single_data_page+0xfd7/0x1840 [ 116.365194][ T6010] f2fs_balance_fs+0x349/0x810 [ 116.365225][ T6010] ? f2fs_write_single_data_page+0xfd7/0x1840 [ 116.365257][ T6010] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 116.365295][ T6010] ? do_raw_spin_lock+0x12b/0x2f0 [ 116.365340][ T6010] ? folio_unlock+0x101/0x160 [ 116.365377][ T6010] f2fs_write_single_data_page+0xfd7/0x1840 [ 116.365426][ T6010] ? __pfx_f2fs_write_single_data_page+0x10/0x10 [ 116.365486][ T6010] ? folio_clear_dirty_for_io+0x1bf/0x820 [ 116.365530][ T6010] ? folio_clear_dirty_for_io+0x1bf/0x820 [ 116.365559][ T6010] ? folio_clear_dirty_for_io+0x646/0x820 [ 116.365596][ T6010] f2fs_write_data_pages+0x1d2e/0x36f0 [ 116.365670][ T6010] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 116.365758][ T6010] ? __lock_acquire+0x6df/0x2e50 [ 116.365799][ T6010] ? __lock_acquire+0x6df/0x2e50 [ 116.365832][ T6010] ? do_raw_spin_lock+0x12b/0x2f0 [ 116.365874][ T6010] ? do_raw_spin_unlock+0xf5/0x200 [ 116.365905][ T6010] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 116.365939][ T6010] do_writepages+0x338/0x560 [ 116.365980][ T6010] ? do_raw_spin_unlock+0xf5/0x200 [ 116.366017][ T6010] filemap_write_and_wait_range+0x335/0x3f0 [ 116.366055][ T6010] ? __pfx_filemap_write_and_wait_range+0x10/0x10 [ 116.366139][ T6010] ? __lock_acquire+0x6df/0x2e50 [ 116.366170][ T6010] f2fs_bmap+0x182/0xb20 [ 116.366208][ T6010] ? __pfx_f2fs_bmap+0x10/0x10 [ 116.366247][ T6010] ? lock_acquire+0x115/0x350 [ 116.366288][ T6010] ? __pfx_f2fs_bmap+0x10/0x10 [ 116.366317][ T6010] bmap+0xac/0xe0 [ 116.366345][ T6010] file_ioctl+0x45f/0x7d0 [ 116.366377][ T6010] ? __pfx_file_ioctl+0x10/0x10 [ 116.366422][ T6010] ? kasan_quarantine_put+0xbb/0x1f0 [ 116.366462][ T6010] ? tomoyo_path_number_perm+0x219/0x5f0 [ 116.366499][ T6010] ? tomoyo_path_number_perm+0x219/0x5f0 [ 116.366545][ T6010] do_vfs_ioctl+0xc27/0x1530 [ 116.366579][ T6010] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 116.366615][ T6010] ? do_raw_spin_lock+0x12b/0x2f0 [ 116.366653][ T6010] ? hook_file_ioctl+0x1f2/0x600 [ 116.366699][ T6010] ? __fget_files+0x2a/0x420 [ 116.366725][ T6010] ? __fget_files+0x2a/0x420 [ 116.366747][ T6010] ? __fget_files+0x3a2/0x420 [ 116.366769][ T6010] ? __fget_files+0x2a/0x420 [ 116.366796][ T6010] ? bpf_lsm_file_ioctl+0x9/0x20 [ 116.366825][ T6010] __se_sys_ioctl+0x82/0x170 [ 116.366858][ T6010] do_syscall_64+0x166/0x520 [ 116.366884][ T6010] ? trace_irq_disable+0x3b/0x140 [ 116.366906][ T6010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.366929][ T6010] ? clear_bhb_loop+0x70/0xc0 [ 116.366956][ T6010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.366979][ T6010] RIP: 0033:0x7f959639e0d9 [ 116.367000][ T6010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.367019][ T6010] RSP: 002b:00007f9597283028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.367044][ T6010] RAX: ffffffffffffffda RBX: 00007f9596626090 RCX: 00007f959639e0d9 [ 116.367061][ T6010] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 0000000000000004 [ 116.367075][ T6010] RBP: 00007f9596435024 R08: 0000000000000000 R09: 0000000000000000 [ 116.367089][ T6010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.367102][ T6010] R13: 00007f9596626128 R14: 00007f9596626090 R15: 00007ffed5a7e788 [ 116.367140][ T6010] [ 116.691487][ T6010] F2FS-fs (loop2): Stopped filesystem due to reason: 1 [ 116.751828][ T5766] syz-executor: attempt to access beyond end of device [ 116.751828][ T5766] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.777315][ T5766] CPU: 1 UID: 0 PID: 5766 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 116.777347][ T5766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 2026/08/17 07:58:21 executed programs: 24 [ 116.777361][ T5766] Call Trace: [ 116.777370][ T5766] [ 116.777380][ T5766] dump_stack_lvl+0xe8/0x150 [ 116.777428][ T5766] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 116.777461][ T5766] f2fs_write_end_bio+0x1211/0x16e0 [ 116.777498][ T5766] ? blkg_put+0x22/0x240 [ 116.777539][ T5766] __submit_merged_bio+0x258/0x6a0 [ 116.777567][ T5766] ? rcu_is_watching+0x16/0xb0 [ 116.777600][ T5766] __submit_merged_write_cond+0x3c9/0x4e0 [ 116.777636][ T5766] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 116.777693][ T5766] f2fs_write_data_pages+0x2a27/0x36f0 [ 116.777724][ T5766] ? __lock_acquire+0x6df/0x2e50 [ 116.777787][ T5766] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 116.777869][ T5766] ? __bfs+0x153/0x290 [ 116.777891][ T5766] ? __pfx_hlock_conflict+0x10/0x10 [ 116.777935][ T5766] ? lockdep_unlock+0x5c/0xd0 [ 116.777964][ T5766] ? __lock_acquire+0x14b9/0x2e50 [ 116.778013][ T5766] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 116.778045][ T5766] do_writepages+0x338/0x560 [ 116.778084][ T5766] ? do_raw_spin_unlock+0xf5/0x200 [ 116.778121][ T5766] filemap_fdatawrite+0x1e9/0x2f0 [ 116.778155][ T5766] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 116.778245][ T5766] ? do_raw_spin_unlock+0xf5/0x200 [ 116.778281][ T5766] f2fs_sync_dirty_inodes+0x30e/0x830 [ 116.778330][ T5766] f2fs_write_checkpoint+0xa3d/0x2710 [ 116.778362][ T5766] ? __lock_acquire+0x6df/0x2e50 [ 116.778425][ T5766] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 116.778498][ T5766] ? try_to_wake_up+0x8b6/0x14d0 [ 116.778540][ T5766] kill_f2fs_super+0x2dd/0x700 [ 116.778583][ T5766] ? __pfx_kill_f2fs_super+0x10/0x10 [ 116.778628][ T5766] ? call_rcu+0x64d/0x8b0 [ 116.778655][ T5766] ? lockdep_hardirqs_on+0x7b/0x110 [ 116.778697][ T5766] deactivate_locked_super+0xbc/0x110 [ 116.778725][ T5766] cleanup_mnt+0x3d3/0x460 [ 116.778757][ T5766] task_work_run+0x1d9/0x270 [ 116.778789][ T5766] ? __pfx_task_work_run+0x10/0x10 [ 116.778825][ T5766] exit_to_user_mode_loop+0x204/0x770 [ 116.778848][ T5766] ? rcu_is_watching+0x16/0xb0 [ 116.778880][ T5766] do_syscall_64+0x328/0x520 [ 116.778905][ T5766] ? trace_irq_disable+0x3b/0x140 [ 116.778927][ T5766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.778950][ T5766] ? clear_bhb_loop+0x70/0xc0 [ 116.778979][ T5766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.779001][ T5766] RIP: 0033:0x7f8c15b9f317 [ 116.779023][ T5766] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 116.779042][ T5766] RSP: 002b:00007ffdf215f298 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 116.779066][ T5766] RAX: 0000000000000000 RBX: 00007f8c15c34474 RCX: 00007f8c15b9f317 [ 116.779082][ T5766] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf215f350 [ 116.779096][ T5766] RBP: 00007ffdf215f350 R08: 00007ffdf2160350 R09: 00000000ffffffff [ 116.779112][ T5766] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdf21603e0 [ 116.779126][ T5766] R13: 00007f8c15c34474 R14: 000000000001c5b4 R15: 00007ffdf2160420 [ 116.779162][ T5766] [ 116.806062][ T5774] syz-executor: attempt to access beyond end of device [ 116.806062][ T5774] loop4: rw=2049, sector=45224, nr_sectors = 8 limit=40427 [ 116.892689][ T5774] CPU: 0 UID: 0 PID: 5774 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 116.892769][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 116.892809][ T5774] Call Trace: [ 116.892830][ T5774] [ 116.892852][ T5774] dump_stack_lvl+0xe8/0x150 [ 116.892965][ T5774] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 116.893048][ T5774] f2fs_write_end_bio+0x1211/0x16e0 [ 116.893084][ T5774] ? blkg_put+0x22/0x240 [ 116.893165][ T5774] __submit_merged_bio+0x258/0x6a0 [ 116.893245][ T5774] ? rcu_is_watching+0x16/0xb0 [ 116.893338][ T5774] __submit_merged_write_cond+0x3c9/0x4e0 [ 116.893419][ T5774] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 116.893552][ T5774] f2fs_write_data_pages+0x2a27/0x36f0 [ 116.893635][ T5774] ? __lock_acquire+0x6df/0x2e50 [ 116.893788][ T5774] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 116.893981][ T5774] ? __bfs+0x153/0x290 [ 116.894032][ T5774] ? __pfx_hlock_conflict+0x10/0x10 [ 116.894156][ T5774] ? lockdep_unlock+0x5c/0xd0 [ 116.894239][ T5774] ? __lock_acquire+0x14b9/0x2e50 [ 116.894378][ T5774] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 116.894455][ T5774] do_writepages+0x338/0x560 [ 116.894582][ T5774] ? do_raw_spin_unlock+0xf5/0x200 [ 116.894693][ T5774] filemap_fdatawrite+0x1e9/0x2f0 [ 116.894835][ T5774] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 116.895037][ T5774] ? do_raw_spin_unlock+0xf5/0x200 [ 116.895129][ T5774] f2fs_sync_dirty_inodes+0x30e/0x830 [ 116.895261][ T5774] f2fs_write_checkpoint+0xa3d/0x2710 [ 116.895339][ T5774] ? __lock_acquire+0x6df/0x2e50 [ 116.895476][ T5774] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 116.895656][ T5774] ? try_to_wake_up+0x8b6/0x14d0 [ 116.895761][ T5774] kill_f2fs_super+0x2dd/0x700 [ 116.895876][ T5774] ? __pfx_kill_f2fs_super+0x10/0x10 [ 116.895998][ T5774] ? call_rcu+0x64d/0x8b0 [ 116.896077][ T5774] ? lockdep_hardirqs_on+0x7b/0x110 [ 116.896187][ T5774] deactivate_locked_super+0xbc/0x110 [ 116.896246][ T5774] cleanup_mnt+0x3d3/0x460 [ 116.896330][ T5774] task_work_run+0x1d9/0x270 [ 116.896390][ T5774] ? __pfx_task_work_run+0x10/0x10 [ 116.896483][ T5774] exit_to_user_mode_loop+0x204/0x770 [ 116.896543][ T5774] ? rcu_is_watching+0x16/0xb0 [ 116.896622][ T5774] do_syscall_64+0x328/0x520 [ 116.896692][ T5774] ? trace_irq_disable+0x3b/0x140 [ 116.896747][ T5774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.896810][ T5774] ? clear_bhb_loop+0x70/0xc0 [ 116.896893][ T5774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.896955][ T5774] RIP: 0033:0x7f7d02f9f317 [ 116.897011][ T5774] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 116.897062][ T5774] RSP: 002b:00007fffe53d3d38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 116.897124][ T5774] RAX: 0000000000000000 RBX: 00007f7d03034474 RCX: 00007f7d02f9f317 [ 116.897159][ T5774] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe53d3df0 [ 116.897199][ T5774] RBP: 00007fffe53d3df0 R08: 00007fffe53d4df0 R09: 00000000ffffffff [ 116.897241][ T5774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffe53d4e80 [ 116.897274][ T5774] R13: 00007f7d03034474 R14: 000000000001c6a4 R15: 00007fffe53d4ec0 [ 116.897377][ T5774] [ 116.997891][ T5774] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 117.053011][ T5766] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 117.619811][ T5990] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 118.145919][ T6013] loop0: detected capacity change from 0 to 40427 [ 118.171368][ T6013] F2FS-fs (loop0): build fault injection rate: 174 [ 118.171414][ T6013] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 118.192527][ T6013] F2FS-fs (loop0): invalid crc value