[ 133.109075][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.109199][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '10.128.0.79' (ED25519) to the list of known hosts. 2026/05/10 21:14:42 parsed 1 programs [ 141.164558][ T6129] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 148.201451][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.230755][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.240674][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.249554][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.250445][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.723836][ T6193] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.724252][ T6193] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.724504][ T6193] bridge_slave_0: entered allmulticast mode [ 149.727848][ T6193] bridge_slave_0: entered promiscuous mode [ 149.736896][ T6193] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.737215][ T6193] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.737470][ T6193] bridge_slave_1: entered allmulticast mode [ 149.740828][ T6193] bridge_slave_1: entered promiscuous mode [ 150.019568][ T6193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.033957][ T6193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.276936][ T6193] team0: Port device team_slave_0 added [ 150.286307][ T6193] team0: Port device team_slave_1 added [ 150.456712][ T6193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.456723][ T6193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.456737][ T6193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.458688][ T6193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.458697][ T6193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.458711][ T6193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.778327][ T6193] hsr_slave_0: entered promiscuous mode [ 150.779522][ T6193] hsr_slave_1: entered promiscuous mode [ 152.809364][ T6193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 152.849863][ T6193] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 152.852010][ T6193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 152.889895][ T6193] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 152.902311][ T6193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 152.947200][ T6193] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 152.948721][ T6193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 152.996239][ T6193] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 153.166689][ T6193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.219048][ T6193] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.243823][ T3371] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.244040][ T3371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.281320][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.282527][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.020831][ T6193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.169405][ T6193] veth0_vlan: entered promiscuous mode [ 154.189993][ T6193] veth1_vlan: entered promiscuous mode [ 154.278744][ T6193] veth0_macvtap: entered promiscuous mode [ 154.288779][ T6193] veth1_macvtap: entered promiscuous mode [ 154.327717][ T6193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.350845][ T6193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.393763][ T3304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.393814][ T3304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.393846][ T3304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.399642][ T3304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.253302][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.547823][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.547843][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.644379][ T3304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.644398][ T3304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.137795][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/05/10 21:15:02 executed programs: 0 [ 156.983177][ T4928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.031470][ T4928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.049667][ T4928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.068406][ T4928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.069391][ T4928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.096659][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.484722][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.212588][ T57] bridge_slave_1: left allmulticast mode [ 158.212622][ T57] bridge_slave_1: left promiscuous mode [ 158.214396][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.292871][ T57] bridge_slave_0: left allmulticast mode [ 158.292896][ T57] bridge_slave_0: left promiscuous mode [ 158.293075][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.832419][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.892488][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.933728][ T57] bond0 (unregistering): Released all slaves [ 159.182669][ T4928] Bluetooth: hci0: command tx timeout [ 159.271984][ T57] hsr_slave_0: left promiscuous mode [ 159.312086][ T57] hsr_slave_1: left promiscuous mode [ 159.312881][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.312898][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.332920][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.332946][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.392847][ T57] veth1_macvtap: left promiscuous mode [ 159.392909][ T57] veth0_macvtap: left promiscuous mode [ 159.393070][ T57] veth1_vlan: left promiscuous mode [ 159.393180][ T57] veth0_vlan: left promiscuous mode [ 159.993203][ T57] team0 (unregistering): Port device team_slave_1 removed [ 160.042374][ T57] team0 (unregistering): Port device team_slave_0 removed [ 160.705064][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 160.705693][ T6379] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.705978][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.706232][ T6379] bridge_slave_0: entered allmulticast mode [ 160.708495][ T6379] bridge_slave_0: entered promiscuous mode [ 160.716113][ T6379] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.716470][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.716750][ T6379] bridge_slave_1: entered allmulticast mode [ 160.720115][ T6379] bridge_slave_1: entered promiscuous mode [ 160.908108][ T6379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.914619][ T6379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.122659][ T6379] team0: Port device team_slave_0 added [ 161.144580][ T6379] team0: Port device team_slave_1 added [ 161.261792][ T4928] Bluetooth: hci0: command tx timeout [ 161.526650][ T6379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.526666][ T6379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.526691][ T6379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.530256][ T6379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.530270][ T6379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.530292][ T6379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.634521][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 161.721093][ T6379] hsr_slave_0: entered promiscuous mode [ 161.723202][ T6379] hsr_slave_1: entered promiscuous mode [ 162.674209][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 163.342189][ T4928] Bluetooth: hci0: command tx timeout [ 164.546021][ T6379] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 164.577126][ T6379] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 164.578372][ T6379] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 164.616436][ T6379] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 164.617679][ T6379] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 164.657362][ T6379] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 164.658912][ T6379] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 164.697198][ T6379] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 164.868888][ T6379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.940778][ T6379] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.970145][ T3371] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.979232][ T3371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.014400][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.014628][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.421807][ T4928] Bluetooth: hci0: command tx timeout [ 165.455282][ T6379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.548703][ T6379] veth0_vlan: entered promiscuous mode [ 165.559837][ T6379] veth1_vlan: entered promiscuous mode [ 165.601318][ T6379] veth0_macvtap: entered promiscuous mode [ 165.610400][ T6379] veth1_macvtap: entered promiscuous mode [ 165.639751][ T6379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.656759][ T6379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.676018][ T3371] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.676688][ T3371] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.677678][ T3371] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.677915][ T3371] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.099490][ T3304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.099509][ T3304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.166581][ T3371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.166601][ T3371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/10 21:15:11 executed programs: 2 [ 166.579243][ T6550] loop0: detected capacity change from 0 to 40427 [ 166.644332][ T772] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.647516][ T772] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.648243][ T1439] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.653136][ T3304] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.668947][ T3304] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.673716][ T3304] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.696083][ T3304] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.703240][ T3304] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.704909][ T1439] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.717884][ T1439] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.719770][ T3371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.722943][ T3371] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.723004][ T772] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.729402][ T6550] F2FS-fs (loop0): invalid crc value [ 166.730837][ T772] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.734393][ T772] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.737845][ T772] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.756127][ T772] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.757605][ T772] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.758363][ T772] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.759028][ T772] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.763035][ T772] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.764908][ T3304] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.769826][ T3304] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.770593][ T3304] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.774697][ T3304] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.775400][ T3304] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.776214][ T772] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.776927][ T772] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.777913][ T772] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.778543][ T772] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.780317][ T3304] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.781001][ T3304] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.788229][ T3304] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.791736][ T3304] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.793106][ T3304] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.798322][ T3304] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.804367][ T3304] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.804473][ T3304] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.840604][ T772] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.849708][ T772] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.864285][ T772] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 166.993302][ T3304] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 167.128515][ T3304] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 167.140448][ T6550] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 167.151300][ T3304] lo_rw_aio(loop0) starting read with raw_refcnt=0x0, refcnt=1 [ 167.160007][ T6550] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 173.334167][ T6555] F2FS-fs (loop0): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 173.339701][ T6555] syz.0.16: attempt to access beyond end of device [ 173.339701][ T6555] loop0: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 173.346279][ T6555] syz.0.16: attempt to access beyond end of device [ 173.346279][ T6555] loop0: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 173.346451][ T6555] syz.0.16: attempt to access beyond end of device [ 173.346451][ T6555] loop0: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 173.346600][ T6555] syz.0.16: attempt to access beyond end of device [ 173.346600][ T6555] loop0: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 173.346748][ T6555] syz.0.16: attempt to access beyond end of device [ 173.346748][ T6555] loop0: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 173.346903][ T6555] syz.0.16: attempt to access beyond end of device [ 173.346903][ T6555] loop0: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 173.347050][ T6555] syz.0.16: attempt to access beyond end of device [ 173.347050][ T6555] loop0: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 173.347194][ T6555] syz.0.16: attempt to access beyond end of device [ 173.347194][ T6555] loop0: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 173.347341][ T6555] syz.0.16: attempt to access beyond end of device [ 173.347341][ T6555] loop0: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 173.347488][ T6555] syz.0.16: attempt to access beyond end of device [ 173.347488][ T6555] loop0: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 178.341852][ T6555] bio_check_eod: 67440 callbacks suppressed [ 178.341866][ T6555] syz.0.16: attempt to access beyond end of device [ 178.341866][ T6555] loop0: rw=0, sector=87480, nr_sectors = 8 limit=40427 [ 178.341935][ T6555] syz.0.16: attempt to access beyond end of device [ 178.341935][ T6555] loop0: rw=0, sector=87488, nr_sectors = 8 limit=40427 [ 178.342000][ T6555] syz.0.16: attempt to access beyond end of device [ 178.342000][ T6555] loop0: rw=0, sector=87496, nr_sectors = 8 limit=40427 [ 178.342063][ T6555] syz.0.16: attempt to access beyond end of device [ 178.342063][ T6555] loop0: rw=0, sector=87504, nr_sectors = 8 limit=40427 [ 178.342127][ T6555] syz.0.16: attempt to access beyond end of device [ 178.342127][ T6555] loop0: rw=0, sector=87512, nr_sectors = 8 limit=40427 [ 178.342193][ T6555] syz.0.16: attempt to access beyond end of device [ 178.342193][ T6555] loop0: rw=0, sector=87520, nr_sectors = 8 limit=40427 [ 178.342256][ T6555] syz.0.16: attempt to access beyond end of device [ 178.342256][ T6555] loop0: rw=0, sector=87528, nr_sectors = 8 limit=40427 [ 178.342321][ T6555] syz.0.16: attempt to access beyond end of device [ 178.342321][ T6555] loop0: rw=0, sector=87536, nr_sectors = 8 limit=40427 [ 178.342384][ T6555] syz.0.16: attempt to access beyond end of device [ 178.342384][ T6555] loop0: rw=0, sector=87544, nr_sectors = 8 limit=40427 [ 178.342453][ T6555] syz.0.16: attempt to access beyond end of device [ 178.342453][ T6555] loop0: rw=0, sector=87552, nr_sectors = 8 limit=40427 [ 181.470085][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 181.492165][ T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 181.493787][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 181.495695][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 181.496635][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 182.736140][ T6558] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.736531][ T6558] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.736814][ T6558] bridge_slave_0: entered allmulticast mode [ 182.740392][ T6558] bridge_slave_0: entered promiscuous mode [ 182.748531][ T6558] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.748897][ T6558] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.749141][ T6558] bridge_slave_1: entered allmulticast mode [ 182.753241][ T6558] bridge_slave_1: entered promiscuous mode [ 182.940891][ T6558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.987679][ T6558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.188270][ T6558] team0: Port device team_slave_0 added [ 183.197101][ T6558] team0: Port device team_slave_1 added [ 183.355454][ T6555] bio_check_eod: 58351 callbacks suppressed [ 183.355474][ T6555] syz.0.16: attempt to access beyond end of device [ 183.355474][ T6555] loop0: rw=524288, sector=86936, nr_sectors = 8 limit=40427 [ 183.355568][ T6555] syz.0.16: attempt to access beyond end of device [ 183.355568][ T6555] loop0: rw=524288, sector=86944, nr_sectors = 8 limit=40427 [ 183.355687][ T6555] syz.0.16: attempt to access beyond end of device [ 183.355687][ T6555] loop0: rw=524288, sector=86952, nr_sectors = 8 limit=40427 [ 183.355807][ T6555] syz.0.16: attempt to access beyond end of device [ 183.355807][ T6555] loop0: rw=524288, sector=86960, nr_sectors = 8 limit=40427 [ 183.355916][ T6555] syz.0.16: attempt to access beyond end of device [ 183.355916][ T6555] loop0: rw=524288, sector=86968, nr_sectors = 8 limit=40427 [ 183.355987][ T6555] syz.0.16: attempt to access beyond end of device [ 183.355987][ T6555] loop0: rw=524288, sector=86976, nr_sectors = 8 limit=40427 [ 183.356048][ T6555] syz.0.16: attempt to access beyond end of device [ 183.356048][ T6555] loop0: rw=524288, sector=86984, nr_sectors = 8 limit=40427 [ 183.356110][ T6555] syz.0.16: attempt to access beyond end of device [ 183.356110][ T6555] loop0: rw=524288, sector=86992, nr_sectors = 8 limit=40427 [ 183.356171][ T6555] syz.0.16: attempt to access beyond end of device [ 183.356171][ T6555] loop0: rw=524288, sector=87000, nr_sectors = 8 limit=40427 [ 183.356231][ T6555] syz.0.16: attempt to access beyond end of device [ 183.356231][ T6555] loop0: rw=524288, sector=87008, nr_sectors = 8 limit=40427 [ 183.565859][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.565874][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.565898][ T6558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.570522][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.570537][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.570560][ T6558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.581817][ T4928] Bluetooth: hci1: command tx timeout [ 183.835030][ T6558] hsr_slave_0: entered promiscuous mode [ 183.837129][ T6558] hsr_slave_1: entered promiscuous mode [ 183.839025][ T6558] debugfs: 'hsr0' already exists in 'hsr' [ 183.839137][ T6558] Cannot create hsr debugfs directory [ 184.517089][ T6558] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 184.561271][ T6558] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 184.569582][ T6558] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 184.606504][ T6558] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 184.607989][ T6558] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 184.648213][ T6558] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 184.650058][ T6558] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 184.687311][ T6558] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 184.915908][ T6558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.965313][ T6558] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.979450][ T1439] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.979679][ T1439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.000339][ T1439] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.000568][ T1439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.662901][ T4928] Bluetooth: hci1: command tx timeout [ 185.745292][ T6558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.885920][ T6558] veth0_vlan: entered promiscuous mode [ 185.908038][ T6558] veth1_vlan: entered promiscuous mode [ 185.988966][ T6558] veth0_macvtap: entered promiscuous mode [ 186.020361][ T6558] veth1_macvtap: entered promiscuous mode [ 186.065860][ T6558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.097801][ T6558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.127404][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.128532][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.128571][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.128605][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.628781][ T772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.628801][ T772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.770996][ T3304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.771015][ T3304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/10 21:15:32 executed programs: 3 [ 187.550710][ T6600] loop1: detected capacity change from 0 to 40427 [ 187.566245][ T3371] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.569207][ T3371] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.580830][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.604833][ T3371] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.606606][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.606920][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.607035][ T6600] F2FS-fs (loop1): invalid crc value [ 187.614749][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.617616][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.620775][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.625923][ T3371] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.629959][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.637684][ T3371] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.638188][ T3371] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.642050][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.646377][ T3371] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.648696][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.667034][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.667928][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.674445][ T3371] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.707962][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.713887][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.714659][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.715682][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.720625][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.722507][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.724978][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.731244][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.732163][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.746309][ T4928] Bluetooth: hci1: command tx timeout [ 187.764213][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.768942][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.783709][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.784539][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.785285][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.787685][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.790824][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.805235][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.809844][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.817344][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.817396][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.817425][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.827077][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.827176][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 187.989770][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 188.050837][ T6600] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 188.084226][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 188.099236][ T6600] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 188.259781][ T6558] CPU: 0 UID: 0 PID: 6558 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 188.259815][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 188.259834][ T6558] Call Trace: [ 188.259842][ T6558] [ 188.259851][ T6558] dump_stack_lvl+0xe8/0x150 [ 188.259883][ T6558] f2fs_stop_checkpoint+0x383/0x540 [ 188.259913][ T6558] f2fs_write_end_io+0x1274/0x1740 [ 188.259961][ T6558] __submit_merged_bio+0x256/0x6a0 [ 188.259993][ T6558] __submit_merged_write_cond+0x3c9/0x4e0 [ 188.260025][ T6558] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 188.260072][ T6558] f2fs_write_data_pages+0x287e/0x34f0 [ 188.260140][ T6558] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 188.260216][ T6558] ? do_raw_spin_lock+0x12b/0x2f0 [ 188.260255][ T6558] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 188.260279][ T6558] ? lockdep_hardirqs_on+0x7a/0x110 [ 188.260301][ T6558] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 188.260323][ T6558] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 188.260352][ T6558] ? reacquire_held_locks+0x104/0x190 [ 188.260375][ T6558] ? rt_spin_lock+0x1e0/0x400 [ 188.260401][ T6558] ? rt_spin_unlock+0x14f/0x200 [ 188.260432][ T6558] ? rt_spin_unlock+0x160/0x200 [ 188.260458][ T6558] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 188.260493][ T6558] do_writepages+0x32e/0x550 [ 188.260519][ T6558] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 188.260550][ T6558] ? rt_spin_unlock+0x14f/0x200 [ 188.260587][ T6558] filemap_fdatawrite+0x1ec/0x2f0 [ 188.260616][ T6558] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 188.260639][ T6558] ? __lock_acquire+0x6b5/0x2d10 [ 188.260694][ T6558] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 188.260730][ T6558] ? rt_spin_unlock+0x160/0x200 [ 188.260761][ T6558] f2fs_sync_dirty_inodes+0x30e/0x830 [ 188.260804][ T6558] f2fs_write_checkpoint+0x9df/0x26a0 [ 188.260832][ T6558] ? __lock_acquire+0x6b5/0x2d10 [ 188.260882][ T6558] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 188.260961][ T6558] kill_f2fs_super+0x314/0x730 [ 188.260995][ T6558] ? __pfx_kill_f2fs_super+0x10/0x10 [ 188.261035][ T6558] ? lockdep_hardirqs_on+0x7a/0x110 [ 188.261070][ T6558] deactivate_locked_super+0xbc/0x130 [ 188.261099][ T6558] cleanup_mnt+0x437/0x4d0 [ 188.261127][ T6558] ? _raw_spin_unlock_irq+0x23/0x50 [ 188.261152][ T6558] task_work_run+0x1d9/0x270 [ 188.261179][ T6558] ? __pfx_task_work_run+0x10/0x10 [ 188.261211][ T6558] exit_to_user_mode_loop+0xf3/0x4d0 [ 188.261230][ T6558] ? rcu_is_watching+0x15/0xb0 [ 188.261254][ T6558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.261275][ T6558] do_syscall_64+0x33e/0xf80 [ 188.261297][ T6558] ? trace_irq_disable+0x3b/0x140 [ 188.261326][ T6558] ? clear_bhb_loop+0x40/0x90 [ 188.261349][ T6558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.261368][ T6558] RIP: 0033:0x7fb89952b2d7 [ 188.261394][ T6558] Code: a2 c7 05 9c 42 20 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 188.261409][ T6558] RSP: 002b:00007ffd76b80068 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 188.261436][ T6558] RAX: 0000000000000000 RBX: 00007fb8995bbee3 RCX: 00007fb89952b2d7 [ 188.261449][ T6558] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd76b80120 [ 188.261460][ T6558] RBP: 00007ffd76b80120 R08: 00007ffd76b81120 R09: 00000000ffffffff [ 188.261473][ T6558] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd76b811b0 [ 188.261490][ T6558] R13: 00007fb8995bbee3 R14: 000000000002ddea R15: 00007ffd76b811f0 [ 188.261521][ T6558] [ 188.282124][ T6558] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 188.336319][ T57] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 188.364824][ T6555] bio_check_eod: 34816 callbacks suppressed [ 188.364843][ T6555] syz.0.16: attempt to access beyond end of device [ 188.364843][ T6555] loop0: rw=0, sector=86648, nr_sectors = 8 limit=40427 [ 188.364967][ T6555] syz.0.16: attempt to access beyond end of device [ 188.364967][ T6555] loop0: rw=0, sector=86656, nr_sectors = 8 limit=40427 [ 188.365081][ T6555] syz.0.16: attempt to access beyond end of device [ 188.365081][ T6555] loop0: rw=0, sector=86664, nr_sectors = 8 limit=40427 [ 188.365194][ T6555] syz.0.16: attempt to access beyond end of device [ 188.365194][ T6555] loop0: rw=0, sector=86672, nr_sectors = 8 limit=40427 [ 188.365306][ T6555] syz.0.16: attempt to access beyond end of device [ 188.365306][ T6555] loop0: rw=0, sector=86680, nr_sectors = 8 limit=40427 [ 188.365418][ T6555] syz.0.16: attempt to access beyond end of device [ 188.365418][ T6555] loop0: rw=0, sector=86688, nr_sectors = 8 limit=40427 [ 188.365537][ T6555] syz.0.16: attempt to access beyond end of device [ 188.365537][ T6555] loop0: rw=0, sector=86696, nr_sectors = 8 limit=40427 [ 188.365649][ T6555] syz.0.16: attempt to access beyond end of device [ 188.365649][ T6555] loop0: rw=0, sector=86704, nr_sectors = 8 limit=40427 [ 188.365760][ T6555] syz.0.16: attempt to access beyond end of device [ 188.365760][ T6555] loop0: rw=0, sector=86712, nr_sectors = 8 limit=40427 [ 188.365873][ T6555] syz.0.16: attempt to access beyond end of device [ 188.365873][ T6555] loop0: rw=0, sector=86720, nr_sectors = 8 limit=40427 [ 188.415363][ T3304] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 188.883415][ T6558] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 189.583899][ T6607] loop1: detected capacity change from 0 to 40427 [ 189.588580][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.588934][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.589526][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.589738][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.589962][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.590067][ T6607] F2FS-fs (loop1): invalid crc value [ 189.646755][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.647368][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.648305][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.648365][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.649984][ T3371] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.660412][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.671121][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.721787][ T3371] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.724572][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.725260][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.725937][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.726557][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.727178][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.727835][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.728485][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.729186][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.729881][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.730295][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.731339][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.748253][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.782024][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.789802][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.790581][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.796340][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.797139][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.797806][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.800019][ T772] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.803420][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.804878][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.808430][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.811755][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.814862][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.824753][ T4928] Bluetooth: hci1: command tx timeout [ 189.824815][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.824867][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.824895][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.877187][ T3371] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 189.908448][ T3371] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 190.066297][ T3371] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 190.091219][ T6607] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 190.152396][ T3304] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 190.174865][ T6607] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 193.375135][ T6555] bio_check_eod: 33493 callbacks suppressed [ 193.375158][ T6555] syz.0.16: attempt to access beyond end of device [ 193.375158][ T6555] loop0: rw=0, sector=87568, nr_sectors = 8 limit=40427 [ 193.375362][ T6555] syz.0.16: attempt to access beyond end of device [ 193.375362][ T6555] loop0: rw=0, sector=87576, nr_sectors = 8 limit=40427 [ 193.375493][ T6555] syz.0.16: attempt to access beyond end of device [ 193.375493][ T6555] loop0: rw=0, sector=87584, nr_sectors = 8 limit=40427 [ 193.375613][ T6555] syz.0.16: attempt to access beyond end of device [ 193.375613][ T6555] loop0: rw=0, sector=87592, nr_sectors = 8 limit=40427 [ 193.375732][ T6555] syz.0.16: attempt to access beyond end of device [ 193.375732][ T6555] loop0: rw=0, sector=87600, nr_sectors = 8 limit=40427 [ 193.375864][ T6555] syz.0.16: attempt to access beyond end of device [ 193.375864][ T6555] loop0: rw=0, sector=87608, nr_sectors = 8 limit=40427 [ 193.375984][ T6555] syz.0.16: attempt to access beyond end of device [ 193.375984][ T6555] loop0: rw=0, sector=87616, nr_sectors = 8 limit=40427 [ 193.376103][ T6555] syz.0.16: attempt to access beyond end of device [ 193.376103][ T6555] loop0: rw=0, sector=87624, nr_sectors = 8 limit=40427 [ 193.376222][ T6555] syz.0.16: attempt to access beyond end of device [ 193.376222][ T6555] loop0: rw=0, sector=87632, nr_sectors = 8 limit=40427 [ 193.376341][ T6555] syz.0.16: attempt to access beyond end of device [ 193.376341][ T6555] loop0: rw=0, sector=87640, nr_sectors = 8 limit=40427 [ 194.546198][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.546301][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.381831][ T6555] bio_check_eod: 35641 callbacks suppressed [ 198.381850][ T6555] syz.0.16: attempt to access beyond end of device [ 198.381850][ T6555] loop0: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 198.381964][ T6555] syz.0.16: attempt to access beyond end of device [ 198.381964][ T6555] loop0: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 198.382079][ T6555] syz.0.16: attempt to access beyond end of device [ 198.382079][ T6555] loop0: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 198.382190][ T6555] syz.0.16: attempt to access beyond end of device [ 198.382190][ T6555] loop0: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 198.382304][ T6555] syz.0.16: attempt to access beyond end of device [ 198.382304][ T6555] loop0: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 198.382431][ T6555] syz.0.16: attempt to access beyond end of device [ 198.382431][ T6555] loop0: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 198.382543][ T6555] syz.0.16: attempt to access beyond end of device [ 198.382543][ T6555] loop0: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 198.382655][ T6555] syz.0.16: attempt to access beyond end of device [ 198.382655][ T6555] loop0: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 198.382766][ T6555] syz.0.16: attempt to access beyond end of device [ 198.382766][ T6555] loop0: rw=524288, sector=86096, nr_sectors = 8 limit=40427 [ 198.382879][ T6555] syz.0.16: attempt to access beyond end of device [ 198.382879][ T6555] loop0: rw=524288, sector=86104, nr_sectors = 8 limit=40427 [ 203.056321][ T6612] F2FS-fs (loop1): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 203.392561][ T6555] bio_check_eod: 37272 callbacks suppressed [ 203.392581][ T6555] syz.0.16: attempt to access beyond end of device [ 203.392581][ T6555] loop0: rw=524288, sector=87784, nr_sectors = 8 limit=40427 [ 203.392699][ T6555] syz.0.16: attempt to access beyond end of device [ 203.392699][ T6555] loop0: rw=524288, sector=87792, nr_sectors = 8 limit=40427 [ 203.392809][ T6555] syz.0.16: attempt to access beyond end of device [ 203.392809][ T6555] loop0: rw=524288, sector=87800, nr_sectors = 8 limit=40427 [ 203.392918][ T6555] syz.0.16: attempt to access beyond end of device [ 203.392918][ T6555] loop0: rw=524288, sector=87808, nr_sectors = 8 limit=40427 [ 203.393029][ T6555] syz.0.16: attempt to access beyond end of device [ 203.393029][ T6555] loop0: rw=524288, sector=87816, nr_sectors = 8 limit=40427 [ 203.393135][ T6555] syz.0.16: attempt to access beyond end of device [ 203.393135][ T6555] loop0: rw=524288, sector=87824, nr_sectors = 8 limit=40427 [ 203.393243][ T6555] syz.0.16: attempt to access beyond end of device [ 203.393243][ T6555] loop0: rw=524288, sector=87832, nr_sectors = 8 limit=40427 [ 203.393359][ T6555] syz.0.16: attempt to access beyond end of device [ 203.393359][ T6555] loop0: rw=524288, sector=87840, nr_sectors = 8 limit=40427 [ 203.393470][ T6555] syz.0.16: attempt to access beyond end of device [ 203.393470][ T6555] loop0: rw=524288, sector=87848, nr_sectors = 8 limit=40427 [ 203.393597][ T6555] syz.0.16: attempt to access beyond end of device [ 203.393597][ T6555] loop0: rw=524288, sector=87856, nr_sectors = 8 limit=40427 [ 203.651303][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.695080][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.697318][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.698616][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.700117][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.821821][ T4928] Bluetooth: hci2: command tx timeout [ 206.139821][ T6614] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.152370][ T6614] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.152663][ T6614] bridge_slave_0: entered allmulticast mode [ 206.158987][ T6614] bridge_slave_0: entered promiscuous mode [ 206.178619][ T6614] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.180482][ T6614] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.181510][ T6614] bridge_slave_1: entered allmulticast mode [ 206.193507][ T6614] bridge_slave_1: entered promiscuous mode [ 206.508192][ T6614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.527893][ T6614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.774542][ T6614] team0: Port device team_slave_0 added [ 206.828411][ T6614] team0: Port device team_slave_1 added [ 207.172720][ T6614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.172739][ T6614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.172763][ T6614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.181000][ T6614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.181014][ T6614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.181078][ T6614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.743851][ T6614] hsr_slave_0: entered promiscuous mode [ 207.746061][ T6614] hsr_slave_1: entered promiscuous mode [ 207.747778][ T6614] debugfs: 'hsr0' already exists in 'hsr' [ 207.747801][ T6614] Cannot create hsr debugfs directory [ 207.905070][ T4928] Bluetooth: hci2: command tx timeout [ 208.401727][ T6555] bio_check_eod: 50543 callbacks suppressed [ 208.401746][ T6555] syz.0.16: attempt to access beyond end of device [ 208.401746][ T6555] loop0: rw=0, sector=88832, nr_sectors = 8 limit=40427 [ 208.401756][ T6612] syz.1.18: attempt to access beyond end of device [ 208.401756][ T6612] loop1: rw=0, sector=86712, nr_sectors = 8 limit=40427 [ 208.401873][ T6612] syz.1.18: attempt to access beyond end of device [ 208.401873][ T6612] loop1: rw=0, sector=86720, nr_sectors = 8 limit=40427 [ 208.401955][ T6555] syz.0.16: attempt to access beyond end of device [ 208.401955][ T6555] loop0: rw=0, sector=88840, nr_sectors = 8 limit=40427 [ 208.401989][ T6612] syz.1.18: attempt to access beyond end of device [ 208.401989][ T6612] loop1: rw=0, sector=86728, nr_sectors = 8 limit=40427 [ 208.402078][ T6555] syz.0.16: attempt to access beyond end of device [ 208.402078][ T6555] loop0: rw=0, sector=88848, nr_sectors = 8 limit=40427 [ 208.402108][ T6612] syz.1.18: attempt to access beyond end of device [ 208.402108][ T6612] loop1: rw=0, sector=86736, nr_sectors = 8 limit=40427 [ 208.402196][ T6555] syz.0.16: attempt to access beyond end of device [ 208.402196][ T6555] loop0: rw=0, sector=88856, nr_sectors = 8 limit=40427 [ 208.402227][ T6612] syz.1.18: attempt to access beyond end of device [ 208.402227][ T6612] loop1: rw=0, sector=86744, nr_sectors = 8 limit=40427 [ 208.402345][ T6612] syz.1.18: attempt to access beyond end of device [ 208.402345][ T6612] loop1: rw=0, sector=86752, nr_sectors = 8 limit=40427 [ 209.086324][ T6614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 209.153394][ T6614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 209.154828][ T6614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 209.218958][ T6614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 209.229910][ T6614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 209.287275][ T6614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 209.288378][ T6614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 209.330405][ T6614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 209.730586][ T6614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.773823][ T6614] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.798795][ T3371] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.799024][ T3371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.973739][ T3371] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.973942][ T3371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.983826][ T4928] Bluetooth: hci2: command tx timeout [ 211.278470][ T6614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.584964][ T6614] veth0_vlan: entered promiscuous mode [ 211.662891][ T6614] veth1_vlan: entered promiscuous mode [ 211.822866][ T6614] veth0_macvtap: entered promiscuous mode [ 211.890287][ T6614] veth1_macvtap: entered promiscuous mode [ 211.948014][ T6614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.997415][ T6614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.061728][ T4928] Bluetooth: hci2: command tx timeout [ 212.079643][ T1439] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.079690][ T1439] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.079723][ T1439] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.079755][ T1439] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.934325][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.934345][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.287259][ T3371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.287279][ T3371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.411881][ T6612] bio_check_eod: 44693 callbacks suppressed [ 213.411898][ T6612] syz.1.18: attempt to access beyond end of device [ 213.411898][ T6612] loop1: rw=524288, sector=88712, nr_sectors = 8 limit=40427 [ 213.412019][ T6612] syz.1.18: attempt to access beyond end of device [ 213.412019][ T6612] loop1: rw=524288, sector=88720, nr_sectors = 8 limit=40427 [ 213.412131][ T6612] syz.1.18: attempt to access beyond end of device [ 213.412131][ T6612] loop1: rw=524288, sector=88728, nr_sectors = 8 limit=40427 [ 213.412246][ T6612] syz.1.18: attempt to access beyond end of device [ 213.412246][ T6612] loop1: rw=524288, sector=88736, nr_sectors = 8 limit=40427 [ 213.412359][ T6612] syz.1.18: attempt to access beyond end of device [ 213.412359][ T6612] loop1: rw=524288, sector=88744, nr_sectors = 8 limit=40427 [ 213.412481][ T6612] syz.1.18: attempt to access beyond end of device [ 213.412481][ T6612] loop1: rw=524288, sector=88752, nr_sectors = 8 limit=40427 [ 213.412597][ T6612] syz.1.18: attempt to access beyond end of device [ 213.412597][ T6612] loop1: rw=524288, sector=88760, nr_sectors = 8 limit=40427 [ 213.412710][ T6612] syz.1.18: attempt to access beyond end of device [ 213.412710][ T6612] loop1: rw=524288, sector=88768, nr_sectors = 8 limit=40427 [ 213.412820][ T6612] syz.1.18: attempt to access beyond end of device [ 213.412820][ T6612] loop1: rw=524288, sector=88776, nr_sectors = 8 limit=40427 [ 213.412932][ T6612] syz.1.18: attempt to access beyond end of device [ 213.412932][ T6612] loop1: rw=524288, sector=88784, nr_sectors = 8 limit=40427 2026/05/10 21:15:59 executed programs: 5 [ 214.514831][ T6652] loop2: detected capacity change from 0 to 40427 [ 214.564436][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.567859][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.568575][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.569181][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.588215][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.670599][ T57] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.679535][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.681096][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.681192][ T6652] F2FS-fs (loop2): invalid crc value [ 214.688781][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.698125][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.778725][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.778807][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.779880][ T3371] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.780038][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.781159][ T3371] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.781280][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.791998][ T3371] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.793040][ T3371] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.795311][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.795971][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.796616][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.798763][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.799411][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.800502][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.808379][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.815439][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.819220][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.821515][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.828130][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.831772][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.843288][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.845415][ T3371] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.849604][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.854097][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.858050][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.863464][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.868926][ T3371] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.868972][ T3371] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.869050][ T3371] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.889186][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.897249][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 214.921421][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 215.144727][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 215.170627][ T6652] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 215.190229][ T1439] lo_rw_aio(loop2) starting read with raw_refcnt=0x0, refcnt=1 [ 215.214742][ T6652] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 218.421716][ T6612] bio_check_eod: 44557 callbacks suppressed [ 218.421739][ T6612] syz.1.18: attempt to access beyond end of device [ 218.421739][ T6612] loop1: rw=0, sector=89592, nr_sectors = 8 limit=40427 [ 218.421785][ T6555] syz.0.16: attempt to access beyond end of device [ 218.421785][ T6555] loop0: rw=524288, sector=89144, nr_sectors = 8 limit=40427 [ 218.421869][ T6612] syz.1.18: attempt to access beyond end of device [ 218.421869][ T6612] loop1: rw=0, sector=89600, nr_sectors = 8 limit=40427 [ 218.421902][ T6555] syz.0.16: attempt to access beyond end of device [ 218.421902][ T6555] loop0: rw=524288, sector=89152, nr_sectors = 8 limit=40427 [ 218.421989][ T6612] syz.1.18: attempt to access beyond end of device [ 218.421989][ T6612] loop1: rw=0, sector=89608, nr_sectors = 8 limit=40427 [ 218.422018][ T6555] syz.0.16: attempt to access beyond end of device [ 218.422018][ T6555] loop0: rw=524288, sector=89160, nr_sectors = 8 limit=40427 [ 218.422107][ T6612] syz.1.18: attempt to access beyond end of device [ 218.422107][ T6612] loop1: rw=0, sector=89616, nr_sectors = 8 limit=40427 [ 218.422141][ T6555] syz.0.16: attempt to access beyond end of device [ 218.422141][ T6555] loop0: rw=524288, sector=89168, nr_sectors = 8 limit=40427 [ 218.422226][ T6612] syz.1.18: attempt to access beyond end of device [ 218.422226][ T6612] loop1: rw=0, sector=89624, nr_sectors = 8 limit=40427 [ 218.422256][ T6555] syz.0.16: attempt to access beyond end of device [ 218.422256][ T6555] loop0: rw=524288, sector=89176, nr_sectors = 8 limit=40427 [ 223.431679][ T6555] bio_check_eod: 48504 callbacks suppressed [ 223.431699][ T6555] syz.0.16: attempt to access beyond end of device [ 223.431699][ T6555] loop0: rw=524288, sector=87536, nr_sectors = 8 limit=40427 [ 223.431821][ T6555] syz.0.16: attempt to access beyond end of device [ 223.431821][ T6555] loop0: rw=524288, sector=87544, nr_sectors = 8 limit=40427 [ 223.431973][ T6555] syz.0.16: attempt to access beyond end of device [ 223.431973][ T6555] loop0: rw=524288, sector=87552, nr_sectors = 8 limit=40427 [ 223.432089][ T6555] syz.0.16: attempt to access beyond end of device [ 223.432089][ T6555] loop0: rw=524288, sector=87560, nr_sectors = 8 limit=40427 [ 223.432204][ T6555] syz.0.16: attempt to access beyond end of device [ 223.432204][ T6555] loop0: rw=524288, sector=87568, nr_sectors = 8 limit=40427 [ 223.432336][ T6555] syz.0.16: attempt to access beyond end of device [ 223.432336][ T6555] loop0: rw=524288, sector=87576, nr_sectors = 8 limit=40427 [ 223.432453][ T6555] syz.0.16: attempt to access beyond end of device [ 223.432453][ T6555] loop0: rw=524288, sector=87584, nr_sectors = 8 limit=40427 [ 223.432574][ T6555] syz.0.16: attempt to access beyond end of device [ 223.432574][ T6555] loop0: rw=524288, sector=87592, nr_sectors = 8 limit=40427 [ 223.432688][ T6555] syz.0.16: attempt to access beyond end of device [ 223.432688][ T6555] loop0: rw=524288, sector=87600, nr_sectors = 8 limit=40427 [ 223.432802][ T6555] syz.0.16: attempt to access beyond end of device [ 223.432802][ T6555] loop0: rw=524288, sector=87608, nr_sectors = 8 limit=40427 [ 228.441793][ T6555] bio_check_eod: 47170 callbacks suppressed [ 228.441814][ T6555] syz.0.16: attempt to access beyond end of device [ 228.441814][ T6555] loop0: rw=0, sector=88664, nr_sectors = 8 limit=40427 [ 228.441936][ T6555] syz.0.16: attempt to access beyond end of device [ 228.441936][ T6555] loop0: rw=0, sector=88672, nr_sectors = 8 limit=40427 [ 228.442056][ T6555] syz.0.16: attempt to access beyond end of device [ 228.442056][ T6555] loop0: rw=0, sector=88680, nr_sectors = 8 limit=40427 [ 228.442181][ T6555] syz.0.16: attempt to access beyond end of device [ 228.442181][ T6555] loop0: rw=0, sector=88688, nr_sectors = 8 limit=40427 [ 228.442300][ T6555] syz.0.16: attempt to access beyond end of device [ 228.442300][ T6555] loop0: rw=0, sector=88696, nr_sectors = 8 limit=40427 [ 228.442419][ T6555] syz.0.16: attempt to access beyond end of device [ 228.442419][ T6555] loop0: rw=0, sector=88704, nr_sectors = 8 limit=40427 [ 228.442538][ T6555] syz.0.16: attempt to access beyond end of device [ 228.442538][ T6555] loop0: rw=0, sector=88712, nr_sectors = 8 limit=40427 [ 228.442657][ T6555] syz.0.16: attempt to access beyond end of device [ 228.442657][ T6555] loop0: rw=0, sector=88720, nr_sectors = 8 limit=40427 [ 228.442776][ T6555] syz.0.16: attempt to access beyond end of device [ 228.442776][ T6555] loop0: rw=0, sector=88728, nr_sectors = 8 limit=40427 [ 228.442894][ T6555] syz.0.16: attempt to access beyond end of device [ 228.442894][ T6555] loop0: rw=0, sector=88736, nr_sectors = 8 limit=40427 [ 228.863619][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 228.889208][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 228.899304][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 228.911102][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 228.919977][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 231.022323][ T4928] Bluetooth: hci3: command tx timeout [ 231.244060][ T6659] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.244405][ T6659] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.244749][ T6659] bridge_slave_0: entered allmulticast mode [ 231.261914][ T6659] bridge_slave_0: entered promiscuous mode [ 231.303153][ T6659] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.303718][ T6659] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.304002][ T6659] bridge_slave_1: entered allmulticast mode [ 231.317487][ T6659] bridge_slave_1: entered promiscuous mode [ 231.595929][ T6659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.639443][ T6659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.942638][ T6659] team0: Port device team_slave_0 added [ 231.957932][ T6659] team0: Port device team_slave_1 added [ 232.524789][ T6659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.524806][ T6659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.524830][ T6659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.531470][ T6659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.600848][ T6659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.600879][ T6659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.094190][ T6659] hsr_slave_0: entered promiscuous mode [ 233.096361][ T6659] hsr_slave_1: entered promiscuous mode [ 233.101268][ T6659] debugfs: 'hsr0' already exists in 'hsr' [ 233.101294][ T6659] Cannot create hsr debugfs directory [ 233.101867][ T4928] Bluetooth: hci3: command tx timeout [ 233.452456][ T6555] bio_check_eod: 35963 callbacks suppressed [ 233.452476][ T6555] syz.0.16: attempt to access beyond end of device [ 233.452476][ T6555] loop0: rw=524288, sector=88096, nr_sectors = 8 limit=40427 [ 233.452594][ T6555] syz.0.16: attempt to access beyond end of device [ 233.452594][ T6555] loop0: rw=524288, sector=88104, nr_sectors = 8 limit=40427 [ 233.452714][ T6555] syz.0.16: attempt to access beyond end of device [ 233.452714][ T6555] loop0: rw=524288, sector=88112, nr_sectors = 8 limit=40427 [ 233.452829][ T6555] syz.0.16: attempt to access beyond end of device [ 233.452829][ T6555] loop0: rw=524288, sector=88120, nr_sectors = 8 limit=40427 [ 233.452958][ T6555] syz.0.16: attempt to access beyond end of device [ 233.452958][ T6555] loop0: rw=524288, sector=88128, nr_sectors = 8 limit=40427 [ 233.453072][ T6555] syz.0.16: attempt to access beyond end of device [ 233.453072][ T6555] loop0: rw=524288, sector=88136, nr_sectors = 8 limit=40427 [ 233.453185][ T6555] syz.0.16: attempt to access beyond end of device [ 233.453185][ T6555] loop0: rw=524288, sector=88144, nr_sectors = 8 limit=40427 [ 233.453299][ T6555] syz.0.16: attempt to access beyond end of device [ 233.453299][ T6555] loop0: rw=524288, sector=88152, nr_sectors = 8 limit=40427 [ 233.453413][ T6555] syz.0.16: attempt to access beyond end of device [ 233.453413][ T6555] loop0: rw=524288, sector=88160, nr_sectors = 8 limit=40427 [ 233.453527][ T6555] syz.0.16: attempt to access beyond end of device [ 233.453527][ T6555] loop0: rw=524288, sector=88168, nr_sectors = 8 limit=40427 [ 234.846379][ T6659] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 234.954467][ T6659] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 234.957022][ T6659] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 235.063132][ T6659] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 235.098016][ T6659] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 235.148989][ T6659] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 235.150544][ T6659] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 235.186723][ T4928] Bluetooth: hci3: command tx timeout [ 235.335668][ T6659] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 236.023681][ T6659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.094808][ T6659] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.138435][ T1439] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.141169][ T1439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.283731][ T1439] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.283899][ T1439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.261899][ T4928] Bluetooth: hci3: command tx timeout [ 237.851700][ T6659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.148097][ T6659] veth0_vlan: entered promiscuous mode [ 238.230492][ T6659] veth1_vlan: entered promiscuous mode [ 238.367924][ T6657] F2FS-fs (loop2): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 238.456291][ T6659] veth0_macvtap: entered promiscuous mode [ 238.468656][ T6555] bio_check_eod: 35556 callbacks suppressed [ 238.468672][ T6555] syz.0.16: attempt to access beyond end of device [ 238.468672][ T6555] loop0: rw=0, sector=89592, nr_sectors = 8 limit=40427 [ 238.468792][ T6555] syz.0.16: attempt to access beyond end of device [ 238.468792][ T6555] loop0: rw=0, sector=89600, nr_sectors = 8 limit=40427 [ 238.468906][ T6555] syz.0.16: attempt to access beyond end of device [ 238.468906][ T6555] loop0: rw=0, sector=89608, nr_sectors = 8 limit=40427 [ 238.469030][ T6555] syz.0.16: attempt to access beyond end of device [ 238.469030][ T6555] loop0: rw=0, sector=89616, nr_sectors = 8 limit=40427 [ 238.469142][ T6555] syz.0.16: attempt to access beyond end of device [ 238.469142][ T6555] loop0: rw=0, sector=89624, nr_sectors = 8 limit=40427 [ 238.469261][ T6555] syz.0.16: attempt to access beyond end of device [ 238.469261][ T6555] loop0: rw=0, sector=89632, nr_sectors = 8 limit=40427 [ 238.469435][ T6555] syz.0.16: attempt to access beyond end of device [ 238.469435][ T6555] loop0: rw=0, sector=89640, nr_sectors = 8 limit=40427 [ 238.469546][ T6555] syz.0.16: attempt to access beyond end of device [ 238.469546][ T6555] loop0: rw=0, sector=89648, nr_sectors = 8 limit=40427 [ 238.469656][ T6555] syz.0.16: attempt to access beyond end of device [ 238.469656][ T6555] loop0: rw=0, sector=89656, nr_sectors = 8 limit=40427 [ 238.469766][ T6555] syz.0.16: attempt to access beyond end of device [ 238.469766][ T6555] loop0: rw=0, sector=89664, nr_sectors = 8 limit=40427 [ 238.604426][ T6659] veth1_macvtap: entered promiscuous mode [ 238.698726][ T6659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.870537][ T6659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.948884][ T3371] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.965242][ T3371] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.965459][ T3371] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.965490][ T3371] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.832052][ T3181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.832072][ T3181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.215343][ T1439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.215362][ T1439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/10 21:16:26 executed programs: 6 [ 242.300289][ T6697] loop3: detected capacity change from 0 to 40427 [ 242.317958][ T3181] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.337883][ T772] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.358585][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.409382][ T772] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.420780][ T1439] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.426756][ T1439] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.429005][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.429146][ T6697] F2FS-fs (loop3): invalid crc value [ 242.438138][ T1439] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.441867][ T1439] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.442377][ T1439] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.486965][ T772] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.509669][ T3181] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.509670][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.553049][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.561372][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.569401][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.583857][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.586581][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.588819][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.589507][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.599989][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.601990][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.602788][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.603398][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.614224][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.615199][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.664110][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.664971][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.667217][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.669401][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.672379][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.674749][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.678598][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.682204][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.736765][ T772] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.740680][ T772] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.748778][ T772] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.755069][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.758127][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.758182][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.769679][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.779273][ T772] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.958061][ T772] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 242.998779][ T6697] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 243.030480][ T13] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 243.085198][ T6697] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 243.471762][ T6555] bio_check_eod: 45871 callbacks suppressed [ 243.471782][ T6555] syz.0.16: attempt to access beyond end of device [ 243.471782][ T6555] loop0: rw=0, sector=86128, nr_sectors = 8 limit=40427 [ 243.472038][ T6657] syz.2.19: attempt to access beyond end of device [ 243.472038][ T6657] loop2: rw=0, sector=88688, nr_sectors = 8 limit=40427 [ 243.472158][ T6657] syz.2.19: attempt to access beyond end of device [ 243.472158][ T6657] loop2: rw=0, sector=88696, nr_sectors = 8 limit=40427 [ 243.472275][ T6657] syz.2.19: attempt to access beyond end of device [ 243.472275][ T6657] loop2: rw=0, sector=88704, nr_sectors = 8 limit=40427 [ 243.472393][ T6657] syz.2.19: attempt to access beyond end of device [ 243.472393][ T6657] loop2: rw=0, sector=88712, nr_sectors = 8 limit=40427 [ 243.472512][ T6657] syz.2.19: attempt to access beyond end of device [ 243.472512][ T6657] loop2: rw=0, sector=88720, nr_sectors = 8 limit=40427 [ 243.472633][ T6657] syz.2.19: attempt to access beyond end of device [ 243.472633][ T6657] loop2: rw=0, sector=88728, nr_sectors = 8 limit=40427 [ 243.472749][ T6657] syz.2.19: attempt to access beyond end of device [ 243.472749][ T6657] loop2: rw=0, sector=88736, nr_sectors = 8 limit=40427 [ 243.472867][ T6657] syz.2.19: attempt to access beyond end of device [ 243.472867][ T6657] loop2: rw=0, sector=88744, nr_sectors = 8 limit=40427 [ 243.472993][ T6657] syz.2.19: attempt to access beyond end of device [ 243.472993][ T6657] loop2: rw=0, sector=88752, nr_sectors = 8 limit=40427 [ 248.482113][ T6555] bio_check_eod: 50463 callbacks suppressed [ 248.482133][ T6555] syz.0.16: attempt to access beyond end of device [ 248.482133][ T6555] loop0: rw=0, sector=89680, nr_sectors = 8 limit=40427 [ 248.482255][ T6555] syz.0.16: attempt to access beyond end of device [ 248.482255][ T6555] loop0: rw=0, sector=89688, nr_sectors = 8 limit=40427 [ 248.482373][ T6555] syz.0.16: attempt to access beyond end of device [ 248.482373][ T6555] loop0: rw=0, sector=89696, nr_sectors = 8 limit=40427 [ 248.482500][ T6555] syz.0.16: attempt to access beyond end of device [ 248.482500][ T6555] loop0: rw=0, sector=89704, nr_sectors = 8 limit=40427 [ 248.482618][ T6555] syz.0.16: attempt to access beyond end of device [ 248.482618][ T6555] loop0: rw=0, sector=89712, nr_sectors = 8 limit=40427 [ 248.482735][ T6555] syz.0.16: attempt to access beyond end of device [ 248.482735][ T6555] loop0: rw=0, sector=89720, nr_sectors = 8 limit=40427 [ 248.482852][ T6555] syz.0.16: attempt to access beyond end of device [ 248.482852][ T6555] loop0: rw=0, sector=89728, nr_sectors = 8 limit=40427 [ 248.482969][ T6555] syz.0.16: attempt to access beyond end of device [ 248.482969][ T6555] loop0: rw=0, sector=89736, nr_sectors = 8 limit=40427 [ 248.483126][ T6555] syz.0.16: attempt to access beyond end of device [ 248.483126][ T6555] loop0: rw=0, sector=89744, nr_sectors = 8 limit=40427 [ 248.483244][ T6555] syz.0.16: attempt to access beyond end of device [ 248.483244][ T6555] loop0: rw=0, sector=89752, nr_sectors = 8 limit=40427 [ 253.491673][ T6657] bio_check_eod: 52404 callbacks suppressed [ 253.491693][ T6657] syz.2.19: attempt to access beyond end of device [ 253.491693][ T6657] loop2: rw=0, sector=87424, nr_sectors = 8 limit=40427 [ 253.491822][ T6657] syz.2.19: attempt to access beyond end of device [ 253.491822][ T6657] loop2: rw=0, sector=87432, nr_sectors = 8 limit=40427 [ 253.491940][ T6657] syz.2.19: attempt to access beyond end of device [ 253.491940][ T6657] loop2: rw=0, sector=87440, nr_sectors = 8 limit=40427 [ 253.492065][ T6657] syz.2.19: attempt to access beyond end of device [ 253.492065][ T6657] loop2: rw=0, sector=87448, nr_sectors = 8 limit=40427 [ 253.492183][ T6657] syz.2.19: attempt to access beyond end of device [ 253.492183][ T6657] loop2: rw=0, sector=87456, nr_sectors = 8 limit=40427 [ 253.492301][ T6657] syz.2.19: attempt to access beyond end of device [ 253.492301][ T6657] loop2: rw=0, sector=87464, nr_sectors = 8 limit=40427 [ 253.492405][ T6555] syz.0.16: attempt to access beyond end of device [ 253.492405][ T6555] loop0: rw=0, sector=87864, nr_sectors = 8 limit=40427 [ 253.492414][ T6657] syz.2.19: attempt to access beyond end of device [ 253.492414][ T6657] loop2: rw=0, sector=87472, nr_sectors = 8 limit=40427 [ 253.492531][ T6657] syz.2.19: attempt to access beyond end of device [ 253.492531][ T6657] loop2: rw=0, sector=87480, nr_sectors = 8 limit=40427 [ 253.492531][ T6555] syz.0.16: attempt to access beyond end of device [ 253.492531][ T6555] loop0: rw=0, sector=87872, nr_sectors = 8 limit=40427 [ 255.986860][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.986963][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.358050][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 256.397944][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 256.398956][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 256.401482][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.430378][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 258.501691][ T6657] bio_check_eod: 44319 callbacks suppressed [ 258.501709][ T6657] syz.2.19: attempt to access beyond end of device [ 258.501709][ T6657] loop2: rw=0, sector=89008, nr_sectors = 8 limit=40427 [ 258.501829][ T6657] syz.2.19: attempt to access beyond end of device [ 258.501829][ T6657] loop2: rw=0, sector=89016, nr_sectors = 8 limit=40427 [ 258.501941][ T6657] syz.2.19: attempt to access beyond end of device [ 258.501941][ T6657] loop2: rw=0, sector=89024, nr_sectors = 8 limit=40427 [ 258.502048][ T6657] syz.2.19: attempt to access beyond end of device [ 258.502048][ T6657] loop2: rw=0, sector=89032, nr_sectors = 8 limit=40427 [ 258.502161][ T6657] syz.2.19: attempt to access beyond end of device [ 258.502161][ T6657] loop2: rw=0, sector=89040, nr_sectors = 8 limit=40427 [ 258.502267][ T6657] syz.2.19: attempt to access beyond end of device [ 258.502267][ T6657] loop2: rw=0, sector=89048, nr_sectors = 8 limit=40427 [ 258.502373][ T6657] syz.2.19: attempt to access beyond end of device [ 258.502373][ T6657] loop2: rw=0, sector=89056, nr_sectors = 8 limit=40427 [ 258.502487][ T6657] syz.2.19: attempt to access beyond end of device [ 258.502487][ T6657] loop2: rw=0, sector=89064, nr_sectors = 8 limit=40427 [ 258.502608][ T6657] syz.2.19: attempt to access beyond end of device [ 258.502608][ T6657] loop2: rw=0, sector=89072, nr_sectors = 8 limit=40427 [ 258.502720][ T6657] syz.2.19: attempt to access beyond end of device [ 258.502720][ T6657] loop2: rw=0, sector=89080, nr_sectors = 8 limit=40427 [ 258.546234][ T60] Bluetooth: hci4: command tx timeout [ 259.674220][ T6710] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.674514][ T6710] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.676493][ T6710] bridge_slave_0: entered allmulticast mode [ 259.703283][ T6710] bridge_slave_0: entered promiscuous mode [ 259.727919][ T6710] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.728231][ T6710] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.728521][ T6710] bridge_slave_1: entered allmulticast mode [ 259.741338][ T6710] bridge_slave_1: entered promiscuous mode [ 260.148840][ T6710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.202226][ T6710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.604488][ T6710] team0: Port device team_slave_0 added [ 260.621779][ T60] Bluetooth: hci4: command tx timeout [ 260.646608][ T6710] team0: Port device team_slave_1 added [ 261.118659][ T6710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.118675][ T6710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.118698][ T6710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.182681][ T6710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.182697][ T6710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.182721][ T6710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.619150][ T6710] hsr_slave_0: entered promiscuous mode [ 261.634445][ T6710] hsr_slave_1: entered promiscuous mode [ 261.644133][ T6710] debugfs: 'hsr0' already exists in 'hsr' [ 261.644161][ T6710] Cannot create hsr debugfs directory [ 262.701794][ T60] Bluetooth: hci4: command tx timeout [ 263.511839][ T6612] bio_check_eod: 42499 callbacks suppressed [ 263.511859][ T6612] syz.1.18: attempt to access beyond end of device [ 263.511859][ T6612] loop1: rw=0, sector=89736, nr_sectors = 8 limit=40427 [ 263.511989][ T6612] syz.1.18: attempt to access beyond end of device [ 263.511989][ T6612] loop1: rw=0, sector=89744, nr_sectors = 8 limit=40427 [ 263.512108][ T6612] syz.1.18: attempt to access beyond end of device [ 263.512108][ T6612] loop1: rw=0, sector=89752, nr_sectors = 8 limit=40427 [ 263.512226][ T6612] syz.1.18: attempt to access beyond end of device [ 263.512226][ T6612] loop1: rw=0, sector=89760, nr_sectors = 8 limit=40427 [ 263.512345][ T6612] syz.1.18: attempt to access beyond end of device [ 263.512345][ T6612] loop1: rw=0, sector=89768, nr_sectors = 8 limit=40427 [ 263.512463][ T6612] syz.1.18: attempt to access beyond end of device [ 263.512463][ T6612] loop1: rw=0, sector=89776, nr_sectors = 8 limit=40427 [ 263.512605][ T6612] syz.1.18: attempt to access beyond end of device [ 263.512605][ T6612] loop1: rw=0, sector=89784, nr_sectors = 8 limit=40427 [ 263.512753][ T6612] syz.1.18: attempt to access beyond end of device [ 263.512753][ T6612] loop1: rw=0, sector=89792, nr_sectors = 8 limit=40427 [ 263.512881][ T6612] syz.1.18: attempt to access beyond end of device [ 263.512881][ T6612] loop1: rw=0, sector=89800, nr_sectors = 8 limit=40427 [ 263.513076][ T6612] syz.1.18: attempt to access beyond end of device [ 263.513076][ T6612] loop1: rw=0, sector=89808, nr_sectors = 8 limit=40427 [ 263.827535][ T6710] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 263.927466][ T6710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 263.938811][ T6710] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 264.162462][ T6710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 264.170329][ T6710] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 264.309043][ T6710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 264.346072][ T6710] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 264.527959][ T6710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 264.781757][ T60] Bluetooth: hci4: command tx timeout [ 265.420344][ T6710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.690586][ T6710] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.739183][ T1439] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.739410][ T1439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.825507][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.825679][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.207895][ T6710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.523298][ T6657] bio_check_eod: 39184 callbacks suppressed [ 268.523308][ T6612] syz.1.18: attempt to access beyond end of device [ 268.523308][ T6612] loop1: rw=0, sector=89424, nr_sectors = 8 limit=40427 [ 268.523317][ T6657] syz.2.19: attempt to access beyond end of device [ 268.523317][ T6657] loop2: rw=524288, sector=89448, nr_sectors = 8 limit=40427 [ 268.523432][ T6657] syz.2.19: attempt to access beyond end of device [ 268.523432][ T6657] loop2: rw=524288, sector=89456, nr_sectors = 8 limit=40427 [ 268.523456][ T6612] syz.1.18: attempt to access beyond end of device [ 268.523456][ T6612] loop1: rw=0, sector=89432, nr_sectors = 8 limit=40427 [ 268.523548][ T6657] syz.2.19: attempt to access beyond end of device [ 268.523548][ T6657] loop2: rw=524288, sector=89464, nr_sectors = 8 limit=40427 [ 268.523585][ T6612] syz.1.18: attempt to access beyond end of device [ 268.523585][ T6612] loop1: rw=0, sector=89440, nr_sectors = 8 limit=40427 [ 268.523700][ T6612] syz.1.18: attempt to access beyond end of device [ 268.523700][ T6612] loop1: rw=0, sector=89448, nr_sectors = 8 limit=40427 [ 268.523717][ T6657] syz.2.19: attempt to access beyond end of device [ 268.523717][ T6657] loop2: rw=524288, sector=89472, nr_sectors = 8 limit=40427 [ 268.523819][ T6612] syz.1.18: attempt to access beyond end of device [ 268.523819][ T6612] loop1: rw=0, sector=89456, nr_sectors = 8 limit=40427 [ 268.523842][ T6657] syz.2.19: attempt to access beyond end of device [ 268.523842][ T6657] loop2: rw=524288, sector=89480, nr_sectors = 8 limit=40427 [ 269.638350][ T6710] veth0_vlan: entered promiscuous mode [ 269.688808][ T6710] veth1_vlan: entered promiscuous mode [ 269.979100][ T6710] veth0_macvtap: entered promiscuous mode [ 270.027234][ T6710] veth1_macvtap: entered promiscuous mode [ 270.183347][ T6710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.234653][ T6710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.329415][ T3181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.330142][ T3181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.330185][ T3181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.330219][ T3181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.376031][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.376051][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.950839][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.950859][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/10 21:16:58 executed programs: 7 [ 273.531794][ T6612] bio_check_eod: 39914 callbacks suppressed [ 273.531814][ T6612] syz.1.18: attempt to access beyond end of device [ 273.531814][ T6612] loop1: rw=0, sector=87392, nr_sectors = 8 limit=40427 [ 273.531948][ T6612] syz.1.18: attempt to access beyond end of device [ 273.531948][ T6612] loop1: rw=0, sector=87400, nr_sectors = 8 limit=40427 [ 273.532077][ T6612] syz.1.18: attempt to access beyond end of device [ 273.532077][ T6612] loop1: rw=0, sector=87408, nr_sectors = 8 limit=40427 [ 273.532196][ T6612] syz.1.18: attempt to access beyond end of device [ 273.532196][ T6612] loop1: rw=0, sector=87416, nr_sectors = 8 limit=40427 [ 273.532312][ T6612] syz.1.18: attempt to access beyond end of device [ 273.532312][ T6612] loop1: rw=0, sector=87424, nr_sectors = 8 limit=40427 [ 273.532430][ T6612] syz.1.18: attempt to access beyond end of device [ 273.532430][ T6612] loop1: rw=0, sector=87432, nr_sectors = 8 limit=40427 [ 273.532547][ T6612] syz.1.18: attempt to access beyond end of device [ 273.532547][ T6612] loop1: rw=0, sector=87440, nr_sectors = 8 limit=40427 [ 273.532665][ T6612] syz.1.18: attempt to access beyond end of device [ 273.532665][ T6612] loop1: rw=0, sector=87448, nr_sectors = 8 limit=40427 [ 273.532783][ T6612] syz.1.18: attempt to access beyond end of device [ 273.532783][ T6612] loop1: rw=0, sector=87456, nr_sectors = 8 limit=40427 [ 273.532900][ T6612] syz.1.18: attempt to access beyond end of device [ 273.532900][ T6612] loop1: rw=0, sector=87464, nr_sectors = 8 limit=40427 [ 274.636690][ T6755] loop4: detected capacity change from 0 to 40427 [ 274.673535][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.760640][ T12] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.764955][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.796637][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.891442][ T3181] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.893378][ T3181] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.896096][ T3181] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.907734][ T3181] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.910203][ T3181] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.927428][ T3181] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.930003][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.930058][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.930381][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.930649][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.930798][ T6755] F2FS-fs (loop4): invalid crc value [ 274.937495][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 274.989743][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.000923][ T3181] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.007779][ T3181] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.040811][ T3181] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.047092][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.049327][ T3371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.049477][ T3371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.050595][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.060106][ T3371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.072177][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.083117][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.094668][ T3181] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.098260][ T3181] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.115297][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.124414][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.130411][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.134894][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.138715][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.147837][ T3181] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.167605][ T3371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.171528][ T3371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.221412][ T3371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.231732][ T3371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.231787][ T3371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.231817][ T3371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.236839][ T3181] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.248881][ T3371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.355649][ T3371] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.386034][ T6755] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 275.388941][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 275.422037][ T6755] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 275.608759][ T3181] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 276.622281][ T6702] F2FS-fs (loop3): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 278.545401][ T6555] bio_check_eod: 41738 callbacks suppressed [ 278.545420][ T6555] syz.0.16: attempt to access beyond end of device [ 278.545420][ T6555] loop0: rw=0, sector=89424, nr_sectors = 8 limit=40427 [ 278.545557][ T6555] syz.0.16: attempt to access beyond end of device [ 278.545557][ T6555] loop0: rw=0, sector=89432, nr_sectors = 8 limit=40427 [ 278.545676][ T6555] syz.0.16: attempt to access beyond end of device [ 278.545676][ T6555] loop0: rw=0, sector=89440, nr_sectors = 8 limit=40427 [ 278.545795][ T6555] syz.0.16: attempt to access beyond end of device [ 278.545795][ T6555] loop0: rw=0, sector=89448, nr_sectors = 8 limit=40427 [ 278.545921][ T6555] syz.0.16: attempt to access beyond end of device [ 278.545921][ T6555] loop0: rw=0, sector=89456, nr_sectors = 8 limit=40427 [ 278.546040][ T6555] syz.0.16: attempt to access beyond end of device [ 278.546040][ T6555] loop0: rw=0, sector=89464, nr_sectors = 8 limit=40427 [ 278.546275][ T6555] syz.0.16: attempt to access beyond end of device [ 278.546275][ T6555] loop0: rw=0, sector=89472, nr_sectors = 8 limit=40427 [ 278.546391][ T6555] syz.0.16: attempt to access beyond end of device [ 278.546391][ T6555] loop0: rw=0, sector=89480, nr_sectors = 8 limit=40427 [ 278.546508][ T6555] syz.0.16: attempt to access beyond end of device [ 278.546508][ T6555] loop0: rw=0, sector=89488, nr_sectors = 8 limit=40427 [ 278.546624][ T6555] syz.0.16: attempt to access beyond end of device [ 278.546624][ T6555] loop0: rw=0, sector=89496, nr_sectors = 8 limit=40427 [ 283.555973][ T6555] bio_check_eod: 54273 callbacks suppressed [ 283.555993][ T6555] syz.0.16: attempt to access beyond end of device [ 283.555993][ T6555] loop0: rw=524288, sector=87264, nr_sectors = 8 limit=40427 [ 283.556125][ T6555] syz.0.16: attempt to access beyond end of device [ 283.556125][ T6555] loop0: rw=524288, sector=87272, nr_sectors = 8 limit=40427 [ 283.556247][ T6555] syz.0.16: attempt to access beyond end of device [ 283.556247][ T6555] loop0: rw=524288, sector=87280, nr_sectors = 8 limit=40427 [ 283.556377][ T6555] syz.0.16: attempt to access beyond end of device [ 283.556377][ T6555] loop0: rw=524288, sector=87288, nr_sectors = 8 limit=40427 [ 283.556493][ T6555] syz.0.16: attempt to access beyond end of device [ 283.556493][ T6555] loop0: rw=524288, sector=87296, nr_sectors = 8 limit=40427 [ 283.556685][ T6555] syz.0.16: attempt to access beyond end of device [ 283.556685][ T6555] loop0: rw=524288, sector=87304, nr_sectors = 8 limit=40427 [ 283.556797][ T6555] syz.0.16: attempt to access beyond end of device [ 283.556797][ T6555] loop0: rw=524288, sector=87312, nr_sectors = 8 limit=40427 [ 283.556900][ T6555] syz.0.16: attempt to access beyond end of device [ 283.556900][ T6555] loop0: rw=524288, sector=87320, nr_sectors = 8 limit=40427 [ 283.557011][ T6555] syz.0.16: attempt to access beyond end of device [ 283.557011][ T6555] loop0: rw=524288, sector=87328, nr_sectors = 8 limit=40427 [ 283.557122][ T6555] syz.0.16: attempt to access beyond end of device [ 283.557122][ T6555] loop0: rw=524288, sector=87336, nr_sectors = 8 limit=40427 [ 283.661732][ T4928] Bluetooth: hci0: command 0x0406 tx timeout [ 288.185943][ T4928] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 288.211168][ T4928] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 288.212310][ T4928] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 288.214020][ T4928] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 288.214876][ T4928] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 288.561887][ T6702] bio_check_eod: 50032 callbacks suppressed [ 288.561908][ T6702] syz.3.20: attempt to access beyond end of device [ 288.561908][ T6702] loop3: rw=0, sector=89656, nr_sectors = 8 limit=40427 [ 288.562030][ T6702] syz.3.20: attempt to access beyond end of device [ 288.562030][ T6702] loop3: rw=0, sector=89664, nr_sectors = 8 limit=40427 [ 288.562147][ T6702] syz.3.20: attempt to access beyond end of device [ 288.562147][ T6702] loop3: rw=0, sector=89672, nr_sectors = 8 limit=40427 [ 288.562263][ T6702] syz.3.20: attempt to access beyond end of device [ 288.562263][ T6702] loop3: rw=0, sector=89680, nr_sectors = 8 limit=40427 [ 288.562380][ T6702] syz.3.20: attempt to access beyond end of device [ 288.562380][ T6702] loop3: rw=0, sector=89688, nr_sectors = 8 limit=40427 [ 288.562505][ T6702] syz.3.20: attempt to access beyond end of device [ 288.562505][ T6702] loop3: rw=0, sector=89696, nr_sectors = 8 limit=40427 [ 288.562629][ T6702] syz.3.20: attempt to access beyond end of device [ 288.562629][ T6702] loop3: rw=0, sector=89704, nr_sectors = 8 limit=40427 [ 288.562751][ T6702] syz.3.20: attempt to access beyond end of device [ 288.562751][ T6702] loop3: rw=0, sector=89712, nr_sectors = 8 limit=40427 [ 288.562874][ T6702] syz.3.20: attempt to access beyond end of device [ 288.562874][ T6702] loop3: rw=0, sector=89720, nr_sectors = 8 limit=40427 [ 288.563002][ T6702] syz.3.20: attempt to access beyond end of device [ 288.563002][ T6702] loop3: rw=0, sector=89728, nr_sectors = 8 limit=40427 [ 290.301814][ T60] Bluetooth: hci5: command tx timeout [ 291.858687][ T6763] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.861971][ T6763] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.862290][ T6763] bridge_slave_0: entered allmulticast mode [ 291.903334][ T6763] bridge_slave_0: entered promiscuous mode [ 291.920814][ T6763] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.921232][ T6763] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.921531][ T6763] bridge_slave_1: entered allmulticast mode [ 291.948943][ T6763] bridge_slave_1: entered promiscuous mode [ 292.280120][ T6763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.306939][ T6763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.383747][ T60] Bluetooth: hci5: command tx timeout [ 292.596170][ T6763] team0: Port device team_slave_0 added [ 292.613868][ T6763] team0: Port device team_slave_1 added [ 293.169000][ T6763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.169017][ T6763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.169040][ T6763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.223713][ T6763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.223728][ T6763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.223752][ T6763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.571686][ T6555] bio_check_eod: 45962 callbacks suppressed [ 293.571755][ T6555] syz.0.16: attempt to access beyond end of device [ 293.571755][ T6555] loop0: rw=0, sector=88112, nr_sectors = 8 limit=40427 [ 293.571759][ T6702] syz.3.20: attempt to access beyond end of device [ 293.571759][ T6702] loop3: rw=524288, sector=87920, nr_sectors = 8 limit=40427 [ 293.571877][ T6702] syz.3.20: attempt to access beyond end of device [ 293.571877][ T6702] loop3: rw=524288, sector=87928, nr_sectors = 8 limit=40427 [ 293.571890][ T6555] syz.0.16: attempt to access beyond end of device [ 293.571890][ T6555] loop0: rw=0, sector=88120, nr_sectors = 8 limit=40427 [ 293.571993][ T6702] syz.3.20: attempt to access beyond end of device [ 293.571993][ T6702] loop3: rw=524288, sector=87936, nr_sectors = 8 limit=40427 [ 293.572010][ T6555] syz.0.16: attempt to access beyond end of device [ 293.572010][ T6555] loop0: rw=0, sector=88128, nr_sectors = 8 limit=40427 [ 293.572109][ T6702] syz.3.20: attempt to access beyond end of device [ 293.572109][ T6702] loop3: rw=524288, sector=87944, nr_sectors = 8 limit=40427 [ 293.572130][ T6555] syz.0.16: attempt to access beyond end of device [ 293.572130][ T6555] loop0: rw=0, sector=88136, nr_sectors = 8 limit=40427 [ 293.572225][ T6702] syz.3.20: attempt to access beyond end of device [ 293.572225][ T6702] loop3: rw=524288, sector=87952, nr_sectors = 8 limit=40427 [ 293.572250][ T6555] syz.0.16: attempt to access beyond end of device [ 293.572250][ T6555] loop0: rw=0, sector=88144, nr_sectors = 8 limit=40427 [ 293.926933][ T6763] hsr_slave_0: entered promiscuous mode [ 293.948896][ T6763] hsr_slave_1: entered promiscuous mode [ 293.958574][ T6763] debugfs: 'hsr0' already exists in 'hsr' [ 293.958600][ T6763] Cannot create hsr debugfs directory [ 294.463281][ T60] Bluetooth: hci5: command tx timeout [ 296.545790][ T60] Bluetooth: hci5: command tx timeout [ 297.218350][ T6763] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 297.400198][ T6763] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 297.443010][ T6763] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 297.524953][ T6763] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 297.534081][ T6763] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 297.618287][ T6763] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 297.651123][ T6763] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 297.718987][ T6763] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 298.581837][ T6612] bio_check_eod: 45757 callbacks suppressed [ 298.581865][ T6612] syz.1.18: attempt to access beyond end of device [ 298.581865][ T6612] loop1: rw=524288, sector=88320, nr_sectors = 8 limit=40427 [ 298.581867][ T6555] syz.0.16: attempt to access beyond end of device [ 298.581867][ T6555] loop0: rw=0, sector=86088, nr_sectors = 8 limit=40427 [ 298.581988][ T6612] syz.1.18: attempt to access beyond end of device [ 298.581988][ T6612] loop1: rw=524288, sector=88328, nr_sectors = 8 limit=40427 [ 298.581989][ T6555] syz.0.16: attempt to access beyond end of device [ 298.581989][ T6555] loop0: rw=0, sector=86096, nr_sectors = 8 limit=40427 [ 298.582105][ T6612] syz.1.18: attempt to access beyond end of device [ 298.582105][ T6612] loop1: rw=524288, sector=88336, nr_sectors = 8 limit=40427 [ 298.582179][ T6555] syz.0.16: attempt to access beyond end of device [ 298.582179][ T6555] loop0: rw=0, sector=86104, nr_sectors = 8 limit=40427 [ 298.582208][ T6612] syz.1.18: attempt to access beyond end of device [ 298.582208][ T6612] loop1: rw=524288, sector=88344, nr_sectors = 8 limit=40427 [ 298.582299][ T6555] syz.0.16: attempt to access beyond end of device [ 298.582299][ T6555] loop0: rw=0, sector=86112, nr_sectors = 8 limit=40427 [ 298.582333][ T6612] syz.1.18: attempt to access beyond end of device [ 298.582333][ T6612] loop1: rw=524288, sector=88352, nr_sectors = 8 limit=40427 [ 298.582420][ T6555] syz.0.16: attempt to access beyond end of device [ 298.582420][ T6555] loop0: rw=0, sector=86120, nr_sectors = 8 limit=40427 [ 298.878777][ T6763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.112508][ T6763] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.242590][ T193] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.242754][ T193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.392036][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.392211][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.281614][ T6763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.591790][ T6555] bio_check_eod: 44250 callbacks suppressed [ 303.591810][ T6555] syz.0.16: attempt to access beyond end of device [ 303.591810][ T6555] loop0: rw=0, sector=86976, nr_sectors = 8 limit=40427 [ 303.591927][ T6555] syz.0.16: attempt to access beyond end of device [ 303.591927][ T6555] loop0: rw=0, sector=86984, nr_sectors = 8 limit=40427 [ 303.592057][ T6555] syz.0.16: attempt to access beyond end of device [ 303.592057][ T6555] loop0: rw=0, sector=86992, nr_sectors = 8 limit=40427 [ 303.592153][ T6555] syz.0.16: attempt to access beyond end of device [ 303.592153][ T6555] loop0: rw=0, sector=87000, nr_sectors = 8 limit=40427 [ 303.592286][ T6555] syz.0.16: attempt to access beyond end of device [ 303.592286][ T6555] loop0: rw=0, sector=87008, nr_sectors = 8 limit=40427 [ 303.592407][ T6555] syz.0.16: attempt to access beyond end of device [ 303.592407][ T6555] loop0: rw=0, sector=87016, nr_sectors = 8 limit=40427 [ 303.592528][ T6555] syz.0.16: attempt to access beyond end of device [ 303.592528][ T6555] loop0: rw=0, sector=87024, nr_sectors = 8 limit=40427 [ 303.592643][ T6555] syz.0.16: attempt to access beyond end of device [ 303.592643][ T6555] loop0: rw=0, sector=87032, nr_sectors = 8 limit=40427 [ 303.592758][ T6555] syz.0.16: attempt to access beyond end of device [ 303.592758][ T6555] loop0: rw=0, sector=87040, nr_sectors = 8 limit=40427 [ 303.592896][ T6555] syz.0.16: attempt to access beyond end of device [ 303.592896][ T6555] loop0: rw=0, sector=87048, nr_sectors = 8 limit=40427 [ 303.901534][ T6763] veth0_vlan: entered promiscuous mode [ 304.136825][ T6763] veth1_vlan: entered promiscuous mode [ 304.142145][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 304.460504][ T6763] veth0_macvtap: entered promiscuous mode [ 304.512733][ T6763] veth1_macvtap: entered promiscuous mode [ 304.760502][ T6763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.940226][ T6763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.078159][ T193] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.078420][ T193] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.078458][ T193] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.078492][ T193] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.252733][ T193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.252755][ T193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.402374][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.402393][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/10 21:17:32 executed programs: 8 [ 308.604942][ T6555] bio_check_eod: 41126 callbacks suppressed [ 308.604962][ T6555] syz.0.16: attempt to access beyond end of device [ 308.604962][ T6555] loop0: rw=0, sector=87472, nr_sectors = 8 limit=40427 [ 308.605092][ T6555] syz.0.16: attempt to access beyond end of device [ 308.605092][ T6555] loop0: rw=0, sector=87480, nr_sectors = 8 limit=40427 [ 308.605206][ T6555] syz.0.16: attempt to access beyond end of device [ 308.605206][ T6555] loop0: rw=0, sector=87488, nr_sectors = 8 limit=40427 [ 308.605321][ T6555] syz.0.16: attempt to access beyond end of device [ 308.605321][ T6555] loop0: rw=0, sector=87496, nr_sectors = 8 limit=40427 [ 308.605436][ T6555] syz.0.16: attempt to access beyond end of device [ 308.605436][ T6555] loop0: rw=0, sector=87504, nr_sectors = 8 limit=40427 [ 308.605555][ T6555] syz.0.16: attempt to access beyond end of device [ 308.605555][ T6555] loop0: rw=0, sector=87512, nr_sectors = 8 limit=40427 [ 308.605667][ T6555] syz.0.16: attempt to access beyond end of device [ 308.605667][ T6555] loop0: rw=0, sector=87520, nr_sectors = 8 limit=40427 [ 308.605770][ T6657] syz.2.19: attempt to access beyond end of device [ 308.605770][ T6657] loop2: rw=0, sector=88184, nr_sectors = 8 limit=40427 [ 308.605773][ T6555] syz.0.16: attempt to access beyond end of device [ 308.605773][ T6555] loop0: rw=0, sector=87528, nr_sectors = 8 limit=40427 [ 308.605889][ T6555] syz.0.16: attempt to access beyond end of device [ 308.605889][ T6555] loop0: rw=0, sector=87536, nr_sectors = 8 limit=40427 [ 309.180016][ T6807] loop5: detected capacity change from 0 to 40427 [ 309.191051][ T141] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.247517][ T141] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.254711][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.275075][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.277944][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.278020][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.320607][ T6807] F2FS-fs (loop5): invalid crc value [ 309.325547][ T141] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.328903][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.333823][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.338955][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.382998][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.405844][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.406612][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.407880][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.467116][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.468022][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.468743][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.469454][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.470097][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.470825][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.471486][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.528399][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.529720][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.531452][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.535148][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.553690][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.569392][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.576933][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.585695][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.592354][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.597541][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.649327][ T141] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.681815][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.702152][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.711070][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.711128][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.725216][ T141] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.729359][ T141] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.737265][ T141] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.737314][ T141] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.748084][ T141] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.748149][ T141] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.796376][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 309.859048][ T6807] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 310.041759][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 310.071478][ T6807] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 310.612805][ T13] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 310.701148][ T12] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 310.758741][ T12] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 310.877643][ T12] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 311.015693][ T12] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 311.133800][ T1023] lo_rw_aio(loop5) starting write with raw_refcnt=0x0, refcnt=1 [ 311.666417][ T6763] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 313.611760][ T6612] bio_check_eod: 39295 callbacks suppressed [ 313.611779][ T6612] syz.1.18: attempt to access beyond end of device [ 313.611779][ T6612] loop1: rw=524288, sector=89104, nr_sectors = 8 limit=40427 [ 313.611926][ T6612] syz.1.18: attempt to access beyond end of device [ 313.611926][ T6612] loop1: rw=524288, sector=89112, nr_sectors = 8 limit=40427 [ 313.612043][ T6612] syz.1.18: attempt to access beyond end of device [ 313.612043][ T6612] loop1: rw=524288, sector=89120, nr_sectors = 8 limit=40427 [ 313.612158][ T6612] syz.1.18: attempt to access beyond end of device [ 313.612158][ T6612] loop1: rw=524288, sector=89128, nr_sectors = 8 limit=40427 [ 313.612272][ T6612] syz.1.18: attempt to access beyond end of device [ 313.612272][ T6612] loop1: rw=524288, sector=89136, nr_sectors = 8 limit=40427 [ 313.612387][ T6612] syz.1.18: attempt to access beyond end of device [ 313.612387][ T6612] loop1: rw=524288, sector=89144, nr_sectors = 8 limit=40427 [ 313.612502][ T6612] syz.1.18: attempt to access beyond end of device [ 313.612502][ T6612] loop1: rw=524288, sector=89152, nr_sectors = 8 limit=40427 [ 313.612623][ T6612] syz.1.18: attempt to access beyond end of device [ 313.612623][ T6612] loop1: rw=524288, sector=89160, nr_sectors = 8 limit=40427 [ 313.612686][ T6555] syz.0.16: attempt to access beyond end of device [ 313.612686][ T6555] loop0: rw=0, sector=86520, nr_sectors = 8 limit=40427 [ 313.612734][ T6612] syz.1.18: attempt to access beyond end of device [ 313.612734][ T6612] loop1: rw=524288, sector=89168, nr_sectors = 8 limit=40427 [ 313.956217][ T6818] loop5: detected capacity change from 0 to 40427 [ 313.975318][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 313.985719][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 313.999600][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.016256][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.018033][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.018807][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.025192][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.025673][ T3181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.034043][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.035651][ T3181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.035784][ T6818] F2FS-fs (loop5): invalid crc value [ 314.052142][ T3181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.092784][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.093658][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.100457][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.137445][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.137707][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.159059][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.180881][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.187073][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.197706][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.207638][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.215967][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.224719][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.248483][ T67] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.290989][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.297318][ T13] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.334511][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.339452][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.348552][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.350946][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.367869][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.403890][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.410087][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.434017][ T3181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.464009][ T3181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.466530][ T3181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.468960][ T3181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.503198][ T3181] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.570695][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.570766][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.570820][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 314.613224][ T12] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 315.067476][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 315.185107][ T6818] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 315.386428][ T1023] lo_rw_aio(loop5) starting read with raw_refcnt=0x0, refcnt=1 [ 315.406331][ T6818] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 317.439449][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.439568][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.233261][ T6760] F2FS-fs (loop4): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 318.621863][ T6555] bio_check_eod: 41563 callbacks suppressed [ 318.621883][ T6555] syz.0.16: attempt to access beyond end of device [ 318.621883][ T6555] loop0: rw=524288, sector=88544, nr_sectors = 8 limit=40427 [ 318.622004][ T6555] syz.0.16: attempt to access beyond end of device [ 318.622004][ T6555] loop0: rw=524288, sector=88552, nr_sectors = 8 limit=40427 [ 318.622119][ T6555] syz.0.16: attempt to access beyond end of device [ 318.622119][ T6555] loop0: rw=524288, sector=88560, nr_sectors = 8 limit=40427 [ 318.622253][ T6555] syz.0.16: attempt to access beyond end of device [ 318.622253][ T6555] loop0: rw=524288, sector=88568, nr_sectors = 8 limit=40427 [ 318.622370][ T6555] syz.0.16: attempt to access beyond end of device [ 318.622370][ T6555] loop0: rw=524288, sector=88576, nr_sectors = 8 limit=40427 [ 318.622486][ T6555] syz.0.16: attempt to access beyond end of device [ 318.622486][ T6555] loop0: rw=524288, sector=88584, nr_sectors = 8 limit=40427 [ 318.622597][ T6555] syz.0.16: attempt to access beyond end of device [ 318.622597][ T6555] loop0: rw=524288, sector=88592, nr_sectors = 8 limit=40427 [ 318.622706][ T6555] syz.0.16: attempt to access beyond end of device [ 318.622706][ T6555] loop0: rw=524288, sector=88600, nr_sectors = 8 limit=40427 [ 318.622866][ T6555] syz.0.16: attempt to access beyond end of device [ 318.622866][ T6555] loop0: rw=524288, sector=88608, nr_sectors = 8 limit=40427 [ 318.623000][ T6555] syz.0.16: attempt to access beyond end of device [ 318.623000][ T6555] loop0: rw=524288, sector=88616, nr_sectors = 8 limit=40427 [ 323.633248][ T6555] bio_check_eod: 53541 callbacks suppressed [ 323.633268][ T6555] syz.0.16: attempt to access beyond end of device [ 323.633268][ T6555] loop0: rw=524288, sector=86976, nr_sectors = 8 limit=40427 [ 323.633406][ T6555] syz.0.16: attempt to access beyond end of device [ 323.633406][ T6555] loop0: rw=524288, sector=86984, nr_sectors = 8 limit=40427 [ 323.633569][ T6555] syz.0.16: attempt to access beyond end of device [ 323.633569][ T6555] loop0: rw=524288, sector=86992, nr_sectors = 8 limit=40427 [ 323.633666][ T6702] syz.3.20: attempt to access beyond end of device [ 323.633666][ T6702] loop3: rw=524288, sector=89312, nr_sectors = 8 limit=40427 [ 323.633695][ T6555] syz.0.16: attempt to access beyond end of device [ 323.633695][ T6555] loop0: rw=524288, sector=87000, nr_sectors = 8 limit=40427 [ 323.633785][ T6702] syz.3.20: attempt to access beyond end of device [ 323.633785][ T6702] loop3: rw=524288, sector=89320, nr_sectors = 8 limit=40427 [ 323.633822][ T6555] syz.0.16: attempt to access beyond end of device [ 323.633822][ T6555] loop0: rw=524288, sector=87008, nr_sectors = 8 limit=40427 [ 323.633902][ T6702] syz.3.20: attempt to access beyond end of device [ 323.633902][ T6702] loop3: rw=524288, sector=89328, nr_sectors = 8 limit=40427 [ 323.633938][ T6555] syz.0.16: attempt to access beyond end of device [ 323.633938][ T6555] loop0: rw=524288, sector=87016, nr_sectors = 8 limit=40427 [ 323.634039][ T6555] syz.0.16: attempt to access beyond end of device [ 323.634039][ T6555] loop0: rw=524288, sector=87024, nr_sectors = 8 limit=40427 [ 325.699936][ T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 325.757099][ T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 325.765056][ T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 325.769145][ T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 325.772916][ T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 327.911677][ T4928] Bluetooth: hci6: command tx timeout [ 328.644969][ T6760] bio_check_eod: 46691 callbacks suppressed [ 328.644990][ T6760] syz.4.21: attempt to access beyond end of device [ 328.644990][ T6760] loop4: rw=524288, sector=86512, nr_sectors = 8 limit=40427 [ 328.645117][ T6760] syz.4.21: attempt to access beyond end of device [ 328.645117][ T6760] loop4: rw=524288, sector=86520, nr_sectors = 8 limit=40427 [ 328.645235][ T6760] syz.4.21: attempt to access beyond end of device [ 328.645235][ T6760] loop4: rw=524288, sector=86528, nr_sectors = 8 limit=40427 [ 328.645351][ T6760] syz.4.21: attempt to access beyond end of device [ 328.645351][ T6760] loop4: rw=524288, sector=86536, nr_sectors = 8 limit=40427 [ 328.645466][ T6760] syz.4.21: attempt to access beyond end of device [ 328.645466][ T6760] loop4: rw=524288, sector=86544, nr_sectors = 8 limit=40427 [ 328.645589][ T6760] syz.4.21: attempt to access beyond end of device [ 328.645589][ T6760] loop4: rw=524288, sector=86552, nr_sectors = 8 limit=40427 [ 328.645704][ T6760] syz.4.21: attempt to access beyond end of device [ 328.645704][ T6760] loop4: rw=524288, sector=86560, nr_sectors = 8 limit=40427 [ 328.645820][ T6760] syz.4.21: attempt to access beyond end of device [ 328.645820][ T6760] loop4: rw=524288, sector=86568, nr_sectors = 8 limit=40427 [ 328.645939][ T6760] syz.4.21: attempt to access beyond end of device [ 328.645939][ T6760] loop4: rw=524288, sector=86576, nr_sectors = 8 limit=40427 [ 328.646054][ T6760] syz.4.21: attempt to access beyond end of device [ 328.646054][ T6760] loop4: rw=524288, sector=86584, nr_sectors = 8 limit=40427 [ 329.748842][ T4928] Bluetooth: hci2: command 0x0406 tx timeout [ 329.982390][ T60] Bluetooth: hci6: command tx timeout [ 330.647797][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.650875][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.656471][ T6826] bridge_slave_0: entered allmulticast mode [ 330.670994][ T6826] bridge_slave_0: entered promiscuous mode [ 330.715853][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.719068][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.725996][ T6826] bridge_slave_1: entered allmulticast mode [ 330.745533][ T6826] bridge_slave_1: entered promiscuous mode [ 331.248482][ T6826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.339612][ T6826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.910589][ T6826] team0: Port device team_slave_0 added [ 331.940835][ T6826] team0: Port device team_slave_1 added [ 332.073346][ T60] Bluetooth: hci6: command tx timeout [ 332.618502][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.618520][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.618546][ T6826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.630613][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.630630][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.630656][ T6826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.244370][ T6826] hsr_slave_0: entered promiscuous mode [ 333.263038][ T6826] hsr_slave_1: entered promiscuous mode [ 333.283737][ T6826] debugfs: 'hsr0' already exists in 'hsr' [ 333.283765][ T6826] Cannot create hsr debugfs directory [ 333.654488][ T6612] bio_check_eod: 45652 callbacks suppressed [ 333.654508][ T6612] syz.1.18: attempt to access beyond end of device [ 333.654508][ T6612] loop1: rw=524288, sector=89296, nr_sectors = 8 limit=40427 [ 333.654621][ T6612] syz.1.18: attempt to access beyond end of device [ 333.654621][ T6612] loop1: rw=524288, sector=89304, nr_sectors = 8 limit=40427 [ 333.654734][ T6612] syz.1.18: attempt to access beyond end of device [ 333.654734][ T6612] loop1: rw=524288, sector=89312, nr_sectors = 8 limit=40427 [ 333.654851][ T6612] syz.1.18: attempt to access beyond end of device [ 333.654851][ T6612] loop1: rw=524288, sector=89320, nr_sectors = 8 limit=40427 [ 333.654973][ T6612] syz.1.18: attempt to access beyond end of device [ 333.654973][ T6612] loop1: rw=524288, sector=89328, nr_sectors = 8 limit=40427 [ 333.655089][ T6612] syz.1.18: attempt to access beyond end of device [ 333.655089][ T6612] loop1: rw=524288, sector=89336, nr_sectors = 8 limit=40427 [ 333.655205][ T6612] syz.1.18: attempt to access beyond end of device [ 333.655205][ T6612] loop1: rw=524288, sector=89344, nr_sectors = 8 limit=40427 [ 333.655320][ T6612] syz.1.18: attempt to access beyond end of device [ 333.655320][ T6612] loop1: rw=524288, sector=89352, nr_sectors = 8 limit=40427 [ 333.655434][ T6612] syz.1.18: attempt to access beyond end of device [ 333.655434][ T6612] loop1: rw=524288, sector=89360, nr_sectors = 8 limit=40427 [ 333.655550][ T6612] syz.1.18: attempt to access beyond end of device [ 333.655550][ T6612] loop1: rw=524288, sector=89368, nr_sectors = 8 limit=40427 [ 334.144937][ T60] Bluetooth: hci6: command tx timeout [ 337.868541][ T6826] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 337.952038][ T6826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 337.976256][ T6826] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 338.038157][ T6826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 338.051041][ T6826] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 338.131635][ T6826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 338.156140][ T6826] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 338.210618][ T6826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 338.664276][ T6612] bio_check_eod: 46073 callbacks suppressed [ 338.664295][ T6612] syz.1.18: attempt to access beyond end of device [ 338.664295][ T6612] loop1: rw=0, sector=88680, nr_sectors = 8 limit=40427 [ 338.664423][ T6612] syz.1.18: attempt to access beyond end of device [ 338.664423][ T6612] loop1: rw=0, sector=88688, nr_sectors = 8 limit=40427 [ 338.664552][ T6612] syz.1.18: attempt to access beyond end of device [ 338.664552][ T6612] loop1: rw=0, sector=88696, nr_sectors = 8 limit=40427 [ 338.664671][ T6612] syz.1.18: attempt to access beyond end of device [ 338.664671][ T6612] loop1: rw=0, sector=88704, nr_sectors = 8 limit=40427 [ 338.664787][ T6612] syz.1.18: attempt to access beyond end of device [ 338.664787][ T6612] loop1: rw=0, sector=88712, nr_sectors = 8 limit=40427 [ 338.664901][ T6612] syz.1.18: attempt to access beyond end of device [ 338.664901][ T6612] loop1: rw=0, sector=88720, nr_sectors = 8 limit=40427 [ 338.664912][ T6555] syz.0.16: attempt to access beyond end of device [ 338.664912][ T6555] loop0: rw=524288, sector=89176, nr_sectors = 8 limit=40427 [ 338.665019][ T6612] syz.1.18: attempt to access beyond end of device [ 338.665019][ T6612] loop1: rw=0, sector=88728, nr_sectors = 8 limit=40427 [ 338.665031][ T6555] syz.0.16: attempt to access beyond end of device [ 338.665031][ T6555] loop0: rw=524288, sector=89184, nr_sectors = 8 limit=40427 [ 338.665138][ T6612] syz.1.18: attempt to access beyond end of device [ 338.665138][ T6612] loop1: rw=0, sector=88736, nr_sectors = 8 limit=40427 [ 339.689753][ T6826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.028187][ T6826] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.133544][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.133720][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.265609][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.265790][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.472008][ T6826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.671716][ T6702] bio_check_eod: 46361 callbacks suppressed [ 343.671731][ T6760] syz.4.21: attempt to access beyond end of device [ 343.671731][ T6760] loop4: rw=0, sector=89104, nr_sectors = 8 limit=40427 [ 343.671735][ T6702] syz.3.20: attempt to access beyond end of device [ 343.671735][ T6702] loop3: rw=524288, sector=89032, nr_sectors = 8 limit=40427 [ 343.671860][ T6702] syz.3.20: attempt to access beyond end of device [ 343.671860][ T6702] loop3: rw=524288, sector=89040, nr_sectors = 8 limit=40427 [ 343.671860][ T6760] syz.4.21: attempt to access beyond end of device [ 343.671860][ T6760] loop4: rw=0, sector=89112, nr_sectors = 8 limit=40427 [ 343.671978][ T6702] syz.3.20: attempt to access beyond end of device [ 343.671978][ T6702] loop3: rw=524288, sector=89048, nr_sectors = 8 limit=40427 [ 343.671983][ T6760] syz.4.21: attempt to access beyond end of device [ 343.671983][ T6760] loop4: rw=0, sector=89120, nr_sectors = 8 limit=40427 [ 343.672101][ T6760] syz.4.21: attempt to access beyond end of device [ 343.672101][ T6760] loop4: rw=0, sector=89128, nr_sectors = 8 limit=40427 [ 343.672130][ T6702] syz.3.20: attempt to access beyond end of device [ 343.672130][ T6702] loop3: rw=524288, sector=89056, nr_sectors = 8 limit=40427 [ 343.672222][ T6760] syz.4.21: attempt to access beyond end of device [ 343.672222][ T6760] loop4: rw=0, sector=89136, nr_sectors = 8 limit=40427 [ 343.672247][ T6702] syz.3.20: attempt to access beyond end of device [ 343.672247][ T6702] loop3: rw=524288, sector=89064, nr_sectors = 8 limit=40427 [ 345.051402][ T6826] veth0_vlan: entered promiscuous mode [ 345.115867][ T6826] veth1_vlan: entered promiscuous mode [ 345.474164][ T6826] veth0_macvtap: entered promiscuous mode [ 345.565604][ T6826] veth1_macvtap: entered promiscuous mode [ 345.679525][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.750501][ T6826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.831382][ T141] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.866482][ T141] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.875320][ T141] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.877497][ T141] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.297643][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.297662][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.073574][ T1023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.073594][ T1023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.686330][ T6657] bio_check_eod: 43861 callbacks suppressed [ 348.686352][ T6657] syz.2.19: attempt to access beyond end of device [ 348.686352][ T6657] loop2: rw=524288, sector=87080, nr_sectors = 8 limit=40427 [ 348.686498][ T6657] syz.2.19: attempt to access beyond end of device [ 348.686498][ T6657] loop2: rw=524288, sector=87088, nr_sectors = 8 limit=40427 [ 348.686614][ T6657] syz.2.19: attempt to access beyond end of device 2026/05/10 21:18:14 executed programs: 10 [ 348.686614][ T6657] loop2: rw=524288, sector=87096, nr_sectors = 8 limit=40427 [ 348.686727][ T6657] syz.2.19: attempt to access beyond end of device [ 348.686727][ T6657] loop2: rw=524288, sector=87104, nr_sectors = 8 limit=40427 [ 348.686837][ T6657] syz.2.19: attempt to access beyond end of device [ 348.686837][ T6657] loop2: rw=524288, sector=87112, nr_sectors = 8 limit=40427 [ 348.686932][ T6657] syz.2.19: attempt to access beyond end of device [ 348.686932][ T6657] loop2: rw=524288, sector=87120, nr_sectors = 8 limit=40427 [ 348.687016][ T6657] syz.2.19: attempt to access beyond end of device [ 348.687016][ T6657] loop2: rw=524288, sector=87128, nr_sectors = 8 limit=40427 [ 348.687099][ T6657] syz.2.19: attempt to access beyond end of device [ 348.687099][ T6657] loop2: rw=524288, sector=87136, nr_sectors = 8 limit=40427 [ 348.687182][ T6657] syz.2.19: attempt to access beyond end of device [ 348.687182][ T6657] loop2: rw=524288, sector=87144, nr_sectors = 8 limit=40427 [ 348.687264][ T6657] syz.2.19: attempt to access beyond end of device [ 348.687264][ T6657] loop2: rw=524288, sector=87152, nr_sectors = 8 limit=40427 [ 350.064620][ T38] INFO: task kworker/u8:15:3304 blocked for more than 143 seconds. [ 350.064646][ T38] Not tainted syzkaller #0 [ 350.064656][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 350.064666][ T38] task:kworker/u8:15 stat[ 350.064666][ T38] task:kworker/u8:15 state:D stack:21600 pid:3304 tgid:3304 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 350.064730][ T38] Workqueue: writeback wb_workfn (flush-7:0) [ 350.064778][ T38] Call Trace: [ 350.064784][ T38] [ 350.064796][ T38] __schedule+0x16f9/0x5500 [ 350.064847][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 350.064872][ T38] ? __pfx___schedule+0x10/0x10 [ 350.064891][ T38] ? rcu_preempt_deferred_qs_irqrestore+0x856/0xc60 [ 350.064939][ T38] rt_mutex_schedule+0x76/0xf0 [ 350.064964][ T38] ? __rt_mutex_slowlock_locked+0x1e0/0x2550 [ 350.064993][ T38] __rt_mutex_slowlock_locked+0x1f28/0x2550 [ 350.065031][ T38] ? __rt_mutex_slowlock_locked+0x1e0/0x2550 [ 350.065067][ T38] ? __pfx___rt_mutex_slowlock_locked+0x10/0x10 [ 350.065110][ T38] ? rcu_is_watching+0x15/0xb0 [ 350.065139][ T38] rt_mutex_slowlock+0xbd/0x170 [ 350.065168][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 350.065197][ T38] ? f2fs_down_write_trace+0x3e/0x1d0 [ 350.065229][ T38] rwbase_write_lock+0x14d/0x730 [ 350.065267][ T38] f2fs_down_write_trace+0x3e/0x1d0 [ 350.065295][ T38] f2fs_balance_fs+0x612/0x840 [ 350.065324][ T38] ? f2fs_write_inode+0x3fb/0x5f0 [ 350.065346][ T38] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 350.065369][ T38] ? f2fs_inode_chksum_set+0x13e/0x640 [ 350.065395][ T38] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 350.065424][ T38] ? folio_unlock+0x101/0x160 [ 350.065455][ T38] ? f2fs_update_inode_page+0x27f/0x360 [ 350.065481][ T38] f2fs_write_inode+0x3fb/0x5f0 [ 350.065506][ T38] __writeback_single_inode+0x75d/0x10e0 [ 350.065539][ T38] writeback_sb_inodes+0x97f/0x1980 [ 350.065588][ T38] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 350.065645][ T38] ? __pfx_down_read_trylock+0x10/0x10 [ 350.065675][ T38] ? __pfx_move_expired_inodes+0x10/0x10 [ 350.065697][ T38] ? preempt_count_add+0x91/0x190 [ 350.065738][ T38] __writeback_inodes_wb+0x111/0x240 [ 350.065770][ T38] wb_writeback+0x459/0xb00 [ 350.065797][ T38] ? queue_io+0x281/0x440 [ 350.065824][ T38] ? __pfx_wb_writeback+0x10/0x10 [ 350.065862][ T38] wb_workfn+0xb17/0xf20 [ 350.065890][ T38] ? look_up_lock_class+0x57/0x110 [ 350.065929][ T38] ? __pfx_wb_workfn+0x10/0x10 [ 350.067766][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 350.067811][ T38] ? process_one_work+0x8be/0x1630 [ 350.067841][ T38] ? process_one_work+0x8be/0x1630 [ 350.067880][ T38] ? process_one_work+0x8be/0x1630 [ 350.067905][ T38] process_one_work+0x98b/0x1630 [ 350.067954][ T38] ? __pfx_process_one_work+0x10/0x10 [ 350.067979][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 350.068024][ T38] worker_thread+0xb49/0x1140 [ 350.068077][ T38] kthread+0x388/0x470 [ 350.068099][ T38] ? __pfx_worker_thread+0x10/0x10 [ 350.068126][ T38] ? __pfx_kthread+0x10/0x10 [ 350.068148][ T38] ret_from_fork+0x514/0xb70 [ 350.068176][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 350.068200][ T38] ? __switch_to+0xc79/0x1410 [ 350.068224][ T38] ? __pfx_kthread+0x10/0x10 [ 350.068247][ T38] ret_from_fork_asm+0x1a/0x30 [ 350.068291][ T38] [ 350.068385][ T38] [ 350.068385][ T38] Showing all locks held in the system: [ 350.068397][ T38] 1 lock held by khungtaskd/38: [ 350.068408][ T38] #0: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 350.068469][ T38] 4 locks held by kworker/u8:3/57: [ 350.068480][ T38] #0: ffff88801fea6938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 350.068532][ T38] #1: ffffc9000123fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 350.068584][ T38] #2: ffff88803dd080d0 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 350.068641][ T38] #3: ffff88802a501bc0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x3e/0x1d0 [ 350.068693][ T38] 2 locks held by kworker/u8:4/67: [ 350.068704][ T38] #0: ffff888032be1138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 350.068761][ T38] #1: ffffc9000152fc40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 350.068813][ T38] 4 locks held by kworker/u8:7/772: [ 350.068822][ T38] #0: ffff88801fea6938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 350.068862][ T38] #1: ffffc90004ea7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 350.068909][ T38] #2: ffff888029a9e0d0 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 350.068959][ T38] #3: ffff88803aea5bc0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x3e/0x1d0 [ 350.069011][ T38] 4 locks held by kworker/u8:12/1439: [ 350.069022][ T38] #0: ffff88801fea6938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 350.069071][ T38] #1: ffffc900064b7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 350.069120][ T38] #2: ffff88802c0f40d0 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 350.069172][ T38] #3: ffff8880333b5bc0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x3e/0x1d0 [ 350.069231][ T38] 4 locks held by kworker/u8:14/3181: [ 350.074510][ T38] #0: ffff88801fea6938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 350.074577][ T38] #1: ffffc9000dbe7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 350.074627][ T38] #2: ffff8880253f00d0 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 350.074682][ T38] #3: ffff88802b059bc0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x3e/0x1d0 [ 350.074741][ T38] 4 locks held by kworker/u8:15/3304: [ 350.074752][ T38] #0: ffff88801fea6938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 350.074801][ T38] #1: ffffc9000de37c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 350.074850][ T38] #2: ffff888034b160d0 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 350.074903][ T38] #3: ffff888022399bc0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x3e/0x1d0 [ 350.074952][ T38] 4 locks held by kworker/u8:16/3371: [ 350.074963][ T38] #0: ffff88801fea6938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 350.075012][ T38] #1: ffffc9000dff7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 350.075061][ T38] #2: ffff88803cec60d0 (&type->s_umount_key#55){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 350.075113][ T38] #3: ffff888028c79bc0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x3e/0x1d0 [ 350.075163][ T38] 2 locks held by klogd/4967: [ 350.075173][ T38] #0: ffffffff8e10d270 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 350.075219][ T38] #1: ffff88801feecf58 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0 [ 350.075285][ T38] 2 locks held by getty/5369: [ 350.075294][ T38] #0: ffff8880367d10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 350.075360][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 350.075411][ T38] 5 locks held by syz.0.16/6555: [ 350.075422][ T38] #0: ffff888034b16480 (sb_writers#12){.+.+}-{0:0}, at: vfs_fallocate+0x5f9/0x7f0 [ 350.075471][ T38] #1: ffff88805dba4eb8 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: f2fs_fallocate+0x251/0x980 [ 350.075530][ T38] #2: ffff888022399d48 (&sbi->pin_sem){+.+.}-{4:4}, at: f2fs_expand_inode_data+0x584/0xb20 [ 350.075577][ T38] #3: ffff888022399bc0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x3e/0x1d0 [ 350.075627][ T38] #4: ffff88805dba5530 (&fi->i_gc_rwsem[1]){+.+.}-{4:4}, at: do_garbage_collect+0x34f2/0x6d90 [ 350.075676][ T38] 5 locks held by syz.1.18/6612: [ 350.075687][ T38] #0: ffff88803dd08480 (sb_writers#12){.+.+}-{0:0}, at: vfs_fallocate+0x5f9/0x7f0 [ 350.075740][ T38] #1: ffff88805dba31c0 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: f2fs_fallocate+0x251/0x980 [ 350.075798][ T38] #2: ffff88802a501d48 (&sbi->pin_sem){+.+.}-{4:4}, at: f2fs_expand_inode_data+0x584/0xb20 [ 350.075845][ T38] #3: ffff88802a501bc0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x3e/0x1d0 [ 350.075895][ T38] #4: ffff88805dba3838 (&fi->i_gc_rwsem[1]){+.+.}-{4:4}, at: do_garbage_collect+0x34f2/0x6d90 [ 350.075943][ T38] 6 locks held by syz.2.19/6657: [ 350.075954][ T38] #0: ffff888029a9e480 (sb_writers#12){.+.+}-{0:0}, at: vfs_fallocate+0x5f9/0x7f0 [ 350.078650][ T38] #1: ffff88805dba14c8 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: f2fs_fallocate+0x251/0x980 [ 350.078716][ T38] #2: ffff88803aea5d48 (&sbi->pin_sem){+.+.}-{4:4}, at: f2fs_expand_inode_data+0x584/0xb20 [ 350.078768][ T38] #3: ffff88803aea5bc0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x3e/0x1d0 [ 350.078817][ T38] #4: ffff88805dba1b40 (&fi->i_gc_rwsem[1]){+.+.}-{4:4}, at: do_garbage_collect+0x34f2/0x6d90 [ 350.078862][ T38] #5: ffff88801feecf58 (&n->list_lock){+.+.}-{3:3}, at: __refill_objects_node+0x89/0x620 [ 350.078911][ T38] 5 locks held by syz.3.20/6702: [ 350.078922][ T38] #0: ffff88802c0f4480 (sb_writers#12){.+.+}-{0:0}, at: vfs_fallocate+0x5f9/0x7f0 [ 350.078969][ T38] #1: ffff8880404fa818 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: f2fs_fallocate+0x251/0x980 [ 350.079023][ T38] #2: ffff8880333b5d48 (&sbi->pin_sem){+.+.}-{4:4}, at: f2fs_expand_inode_data+0x584/0xb20 [ 350.079068][ T38] #3: ffff8880333b5bc0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x3e/0x1d0 [ 350.079115][ T38] #4: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: find_inode_fast+0xd2/0x550 [ 350.079166][ T38] 6 locks held by syz.4.21/6760: [ 350.079176][ T38] #0: ffff88803cec6480 (sb_writers#12){.+.+}-{0:0}, at: vfs_fallocate+0x5f9/0x7f0 [ 350.079221][ T38] #1: ffff888044d59e70 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: f2fs_fallocate+0x251/0x980 [ 350.079276][ T38] #2: ffff888028c79d48 (&sbi->pin_sem){+.+.}-{4:4}, at: f2fs_expand_inode_data+0x584/0xb20 [ 350.079319][ T38] #3: ffff888028c79bc0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x3e/0x1d0 [ 350.079368][ T38] #4: ffff888044d5a4e8 (&fi->i_gc_rwsem[1]){+.+.}-{4:4}, at: do_garbage_collect+0x34f2/0x6d90 [ 350.079412][ T38] #5: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550 [ 350.079461][ T38] 4 locks held by syz.5.23/6824: [ 350.079471][ T38] #0: ffff8880253f0480 (sb_writers#12){.+.+}-{0:0}, at: vfs_fallocate+0x5f9/0x7f0 [ 350.079518][ T38] #1: ffff888044d58178 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: f2fs_fallocate+0x251/0x980 [ 350.079572][ T38] #2: ffff88802b059d48 (&sbi->pin_sem){+.+.}-{4:4}, at: f2fs_expand_inode_data+0x584/0xb20 [ 350.079616][ T38] #3: ffff88802b059bc0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x3e/0x1d0 [ 350.079666][ T38] 3 locks held by syz.6.24/6872: [ 350.079676][ T38] #0: ffff88801b6b2480 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 350.079735][ T38] #1: ffff888028a255b0 (&sb->s_type->i_mutex_key#15){+.+.}-{4:4}, at: shmem_file_write_iter+0x82/0x120 [ 350.079786][ T38] #2: ffff888028a25280 (&info->lock){+.+.}-{3:3}, at: shmem_get_folio_gfp+0xa63/0x1a80 [ 350.079837][ T38] [ 350.079841][ T38] ============================================= [ 350.079841][ T38] [ 350.079865][ T38] NMI backtrace for cpu 0 [ 350.079886][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 350.079908][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 350.079919][ T38] Call Trace: [ 350.079926][ T38] [ 350.079934][ T38] dump_stack_lvl+0xe8/0x150 [ 350.079959][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 350.079988][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 350.080013][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 350.080043][ T38] sys_info+0x135/0x170 [ 350.080067][ T38] watchdog+0xfd3/0x1030 [ 350.080102][ T38] ? watchdog+0x1c9/0x1030 [ 350.080136][ T38] kthread+0x388/0x470 [ 350.080156][ T38] ? __pfx_watchdog+0x10/0x10 [ 350.080180][ T38] ? __pfx_kthread+0x10/0x10 [ 350.080201][ T38] ret_from_fork+0x514/0xb70 [ 350.080226][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 350.080248][ T38] ? __switch_to+0xc79/0x1410 [ 350.080269][ T38] ? __pfx_kthread+0x10/0x10 [ 350.080290][ T38] ret_from_fork_asm+0x1a/0x30 [ 350.080329][ T38] [ 350.080350][ T38] Sending NMI from CPU 0 to CPUs 1: [ 350.080380][ C1] NMI backtrace for cpu 1 [ 350.080393][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 350.080410][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 350.080419][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 350.080445][ C1] Code: e8 be 22 87 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f bc f0 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 0a a4 ee 05 cc 44 89 f9 80 e1 07 [ 350.080458][ C1] RSP: 0018:ffffc900001679d0 EFLAGS: 00000202 [ 350.080478][ C1] RAX: 1ffffffff336dd00 RBX: 00000000000003fd RCX: 0000000000000000 [ 350.080489][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 350.080499][ C1] RBP: ffffffff99b6ed90 R08: 0000000000000000 R09: 0000000000000000 [ 350.080509][ C1] R10: dffffc0000000000 R11: ffffffff853da910 R12: dffffc0000000000 [ 350.080520][ C1] R13: 0000000000000000 R14: ffffffff99b6eb00 R15: 0000000000000000 [ 350.080530][ C1] FS: 0000000000000000(0000) GS:ffff88812601f000(0000) knlGS:0000000000000000 [ 350.080543][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.080554][ C1] CR2: 00007f837ecb3000 CR3: 00000000387e4000 CR4: 00000000003526f0 [ 350.080567][ C1] Call Trace: [ 350.080573][ C1] [ 350.080580][ C1] wait_for_lsr+0x1aa/0x2f0 [ 350.080604][ C1] serial8250_console_write+0x120d/0x1b90 [ 350.080633][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 350.080654][ C1] ? console_flush_one_record+0xfa/0xb90 [ 350.080672][ C1] ? console_flush_one_record+0x48f/0xb90 [ 350.080690][ C1] console_flush_one_record+0x68b/0xb90 [ 350.080708][ C1] ? console_flush_one_record+0xfa/0xb90 [ 350.080725][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 350.080742][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 350.080763][ C1] legacy_kthread_func+0x1b6/0x250 [ 350.080780][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 350.080795][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 350.080819][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 350.080844][ C1] kthread+0x388/0x470 [ 350.080860][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 350.080873][ C1] ? __pfx_kthread+0x10/0x10 [ 350.080890][ C1] ret_from_fork+0x514/0xb70 [ 350.080908][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 350.080925][ C1] ? __switch_to+0xc79/0x1410 [ 350.080942][ C1] ? __pfx_kthread+0x10/0x10 [ 350.080958][ C1] ret_from_fork_asm+0x1a/0x30 [ 350.080984][ C1] [ 350.096153][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 350.096180][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 350.096203][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 350.096215][ T38] Call Trace: [ 350.096222][ T38] [ 350.096230][ T38] vpanic+0x56c/0xa60 [ 350.096261][ T38] ? __pfx___schedule+0x10/0x10 [ 350.096283][ T38] ? __pfx_vpanic+0x10/0x10 [ 350.096316][ T38] panic+0xc5/0xd0 [ 350.096339][ T38] ? __pfx_panic+0x10/0x10 [ 350.096365][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 350.096389][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 350.096421][ T38] watchdog+0x102c/0x1030 [ 350.096454][ T38] ? watchdog+0x1c9/0x1030 [ 350.096485][ T38] kthread+0x388/0x470 [ 350.096505][ T38] ? __pfx_watchdog+0x10/0x10 [ 350.096532][ T38] ? __pfx_kthread+0x10/0x10 [ 350.096553][ T38] ret_from_fork+0x514/0xb70 [ 350.096579][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 350.096601][ T38] ? __switch_to+0xc79/0x1410 [ 350.096622][ T38] ? __pfx_kthread+0x10/0x10 [ 350.096644][ T38] ret_from_fork_asm+0x1a/0x30 [ 350.096682][ T38] [ 350.097247][ T38] Kernel Offset: disabled