Warning: Permanently added '10.128.0.102' (ED25519) to the list of known hosts. 1970/01/01 00:01:02 parsed 1 programs [ 63.683798][ T6894] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 64.496768][ T2362] cfg80211: failed to load regulatory.db [ 64.497469][ T2454] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.497494][ T2454] ieee802154 phy1 wpan1: encryption failed: -22 [ 68.035951][ T6147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.037619][ T6147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.039160][ T6147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.040852][ T6147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.042318][ T6147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.417433][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.417467][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.424299][ T4830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.424322][ T4830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.333659][ T6962] chnl_net:caif_netlink_parms(): no params data found [ 69.508261][ T6962] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.509644][ T6962] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.511093][ T6962] bridge_slave_0: entered allmulticast mode [ 69.511574][ T6962] bridge_slave_0: entered promiscuous mode [ 69.512355][ T6962] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.512372][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.512414][ T6962] bridge_slave_1: entered allmulticast mode [ 69.512799][ T6962] bridge_slave_1: entered promiscuous mode [ 69.522507][ T6962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.527835][ T6962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.539686][ T6962] team0: Port device team_slave_0 added [ 69.541843][ T6962] team0: Port device team_slave_1 added [ 69.549287][ T6962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.549311][ T6962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.549612][ T6962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.550844][ T6962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.550851][ T6962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.550865][ T6962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.566689][ T6962] hsr_slave_0: entered promiscuous mode [ 69.566985][ T6962] hsr_slave_1: entered promiscuous mode [ 70.011614][ T6962] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.015879][ T6962] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.018635][ T6962] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.020943][ T6962] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.034279][ T6962] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.034333][ T6962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.051631][ T6962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.055729][ T4830] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.061243][ T6962] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.066159][ T4830] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.066228][ T4830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.077948][ T4830] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.077992][ T4830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.123994][ T6962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.140630][ T6962] veth0_vlan: entered promiscuous mode [ 70.143336][ T6962] veth1_vlan: entered promiscuous mode [ 70.152650][ T6962] veth0_macvtap: entered promiscuous mode [ 70.155230][ T6962] veth1_macvtap: entered promiscuous mode [ 70.159859][ T6962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.165130][ T6962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.168337][ T4830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.168550][ T4830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.168564][ T4830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.168576][ T4830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.330437][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.373011][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.421220][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.505507][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:10 executed programs: 0 [ 70.604502][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.606493][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.608260][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.609779][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.611571][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.669706][ T7105] chnl_net:caif_netlink_parms(): no params data found [ 70.697508][ T7105] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.698817][ T7105] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.700184][ T7105] bridge_slave_0: entered allmulticast mode [ 70.701798][ T7105] bridge_slave_0: entered promiscuous mode [ 70.703865][ T7105] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.705593][ T7105] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.706889][ T7105] bridge_slave_1: entered allmulticast mode [ 70.708366][ T7105] bridge_slave_1: entered promiscuous mode [ 70.717847][ T7105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.720426][ T7105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.731801][ T7105] team0: Port device team_slave_0 added [ 70.733549][ T7105] team0: Port device team_slave_1 added [ 70.749036][ T7105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.749062][ T7105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.749075][ T7105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.749656][ T7105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.749664][ T7105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.749674][ T7105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.768924][ T7105] hsr_slave_0: entered promiscuous mode [ 70.769251][ T7105] hsr_slave_1: entered promiscuous mode [ 70.769420][ T7105] debugfs: 'hsr0' already exists in 'hsr' [ 70.769430][ T7105] Cannot create hsr debugfs directory [ 72.654100][ T53] Bluetooth: hci0: command tx timeout [ 73.602905][ T12] bridge_slave_1: left allmulticast mode [ 73.602941][ T12] bridge_slave_1: left promiscuous mode [ 73.603041][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.605638][ T12] bridge_slave_0: left allmulticast mode [ 73.605651][ T12] bridge_slave_0: left promiscuous mode [ 73.605713][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.738009][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.785272][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.795051][ T12] bond0 (unregistering): Released all slaves [ 73.914902][ T12] hsr_slave_0: left promiscuous mode [ 73.916140][ T12] hsr_slave_1: left promiscuous mode [ 73.916392][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.916403][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.917480][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.917491][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.923091][ T12] veth1_macvtap: left promiscuous mode [ 73.923992][ T12] veth0_macvtap: left promiscuous mode [ 73.924895][ T12] veth1_vlan: left promiscuous mode [ 73.924945][ T12] veth0_vlan: left promiscuous mode [ 74.051418][ T12] team0 (unregistering): Port device team_slave_1 removed [ 74.058303][ T12] team0 (unregistering): Port device team_slave_0 removed [ 74.281315][ T7105] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.283172][ T7105] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.285647][ T7105] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.287649][ T7105] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.313277][ T7105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.321844][ T7105] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.325399][ T1639] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.325434][ T1639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.329181][ T4830] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.329233][ T4830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.389931][ T7105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.401158][ T7105] veth0_vlan: entered promiscuous mode [ 74.403525][ T7105] veth1_vlan: entered promiscuous mode [ 74.410828][ T7105] veth0_macvtap: entered promiscuous mode [ 74.411885][ T7105] veth1_macvtap: entered promiscuous mode [ 74.416957][ T7105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.418527][ T7105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.422434][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.422807][ T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.422837][ T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.422853][ T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.486906][ T1639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.488367][ T1639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.496945][ T4830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.496984][ T4830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.621898][ T7217] loop0: detected capacity change from 0 to 40427 [ 74.626871][ T7217] F2FS-fs (loop0): build fault injection rate: 771 [ 74.629327][ T7217] F2FS-fs (loop0): invalid crc value [ 74.640721][ T7217] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 74.643290][ T7217] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 74.684742][ T7105] syz-executor: attempt to access beyond end of device [ 74.684742][ T7105] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 74.685048][ T7105] CPU: 1 UID: 0 PID: 7105 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 74.685057][ T7105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 74.685062][ T7105] Call trace: [ 74.685065][ T7105] show_stack+0x2c/0x3c (C) [ 74.685080][ T7105] __dump_stack+0x30/0x40 [ 74.685087][ T7105] dump_stack_lvl+0xd8/0x12c [ 74.685092][ T7105] dump_stack+0x1c/0x28 [ 74.685096][ T7105] f2fs_handle_critical_error+0x34c/0x4b8 [ 74.685108][ T7105] f2fs_stop_checkpoint+0x5c/0x70 [ 74.685114][ T7105] f2fs_write_end_io+0x768/0xa70 [ 74.685122][ T7105] bio_endio+0x858/0x894 [ 74.685128][ T7105] submit_bio_noacct+0xd64/0x186c [ 74.685136][ T7105] submit_bio+0x3b4/0x550 [ 74.685142][ T7105] f2fs_submit_write_bio+0x13c/0x324 [ 74.685149][ T7105] __submit_merged_bio+0x254/0x704 [ 74.685155][ T7105] __submit_merged_write_cond+0x23c/0x4ac [ 74.685161][ T7105] f2fs_write_data_pages+0x1d28/0x2634 [ 74.685167][ T7105] do_writepages+0x270/0x468 [ 74.685175][ T7105] filemap_fdatawrite+0x14c/0x1f4 [ 74.685180][ T7105] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 74.685185][ T7105] f2fs_write_checkpoint+0x70c/0x1c30 [ 74.685190][ T7105] kill_f2fs_super+0x228/0x594 [ 74.685196][ T7105] deactivate_locked_super+0xc4/0x12c [ 74.685204][ T7105] deactivate_super+0xe0/0x100 [ 74.685217][ T7105] cleanup_mnt+0x31c/0x3ac [ 74.685223][ T7105] __cleanup_mnt+0x20/0x30 [ 74.685230][ T7105] task_work_run+0x1dc/0x260 [ 74.685237][ T7105] exit_to_user_mode_loop+0xfc/0x178 [ 74.685244][ T7105] el0_svc+0x170/0x254 [ 74.685252][ T7105] el0t_64_sync_handler+0x84/0x12c [ 74.685258][ T7105] el0t_64_sync+0x198/0x19c [ 74.685266][ T7105] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 74.734615][ T53] Bluetooth: hci0: command tx timeout [ 74.933585][ T7223] loop0: detected capacity change from 0 to 40427 [ 74.937598][ T7223] F2FS-fs (loop0): build fault injection rate: 771 [ 74.939910][ T7223] F2FS-fs (loop0): invalid crc value [ 74.947911][ T7223] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 74.950322][ T7223] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 74.987491][ T7105] syz-executor: attempt to access beyond end of device [ 74.987491][ T7105] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 74.990266][ T7105] CPU: 0 UID: 0 PID: 7105 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 74.990289][ T7105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 74.990294][ T7105] Call trace: [ 74.990298][ T7105] show_stack+0x2c/0x3c (C) [ 74.990313][ T7105] __dump_stack+0x30/0x40 [ 74.990321][ T7105] dump_stack_lvl+0xd8/0x12c [ 74.990329][ T7105] dump_stack+0x1c/0x28 [ 74.990334][ T7105] f2fs_handle_critical_error+0x34c/0x4b8 [ 74.990342][ T7105] f2fs_stop_checkpoint+0x5c/0x70 [ 74.990348][ T7105] f2fs_write_end_io+0x768/0xa70 [ 74.990355][ T7105] bio_endio+0x858/0x894 [ 74.990360][ T7105] submit_bio_noacct+0xd64/0x186c [ 74.990367][ T7105] submit_bio+0x3b4/0x550 [ 74.990373][ T7105] f2fs_submit_write_bio+0x13c/0x324 [ 74.990378][ T7105] __submit_merged_bio+0x254/0x704 [ 74.990384][ T7105] __submit_merged_write_cond+0x23c/0x4ac [ 74.990390][ T7105] f2fs_write_data_pages+0x1d28/0x2634 [ 74.990396][ T7105] do_writepages+0x270/0x468 [ 74.990404][ T7105] filemap_fdatawrite+0x14c/0x1f4 [ 74.990408][ T7105] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 74.990413][ T7105] f2fs_write_checkpoint+0x70c/0x1c30 [ 74.990419][ T7105] kill_f2fs_super+0x228/0x594 [ 74.990425][ T7105] deactivate_locked_super+0xc4/0x12c [ 74.990432][ T7105] deactivate_super+0xe0/0x100 [ 74.990437][ T7105] cleanup_mnt+0x31c/0x3ac [ 74.990444][ T7105] __cleanup_mnt+0x20/0x30 [ 74.990450][ T7105] task_work_run+0x1dc/0x260 [ 74.990456][ T7105] exit_to_user_mode_loop+0xfc/0x178 [ 74.990462][ T7105] el0_svc+0x170/0x254 [ 74.990470][ T7105] el0t_64_sync_handler+0x84/0x12c [ 74.990476][ T7105] el0t_64_sync+0x198/0x19c [ 74.992128][ T7105] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 75.218252][ T7229] loop0: detected capacity change from 0 to 40427 [ 75.221577][ T7229] F2FS-fs (loop0): build fault injection rate: 771 [ 75.222751][ T7229] F2FS-fs (loop0): invalid crc value [ 75.233631][ T7229] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 75.234471][ T7229] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 75.278986][ T7105] syz-executor: attempt to access beyond end of device [ 75.278986][ T7105] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 75.281411][ T7105] CPU: 1 UID: 0 PID: 7105 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 75.281436][ T7105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 75.281443][ T7105] Call trace: [ 75.281449][ T7105] show_stack+0x2c/0x3c (C) [ 75.281467][ T7105] __dump_stack+0x30/0x40 [ 75.281476][ T7105] dump_stack_lvl+0xd8/0x12c [ 75.281482][ T7105] dump_stack+0x1c/0x28 [ 75.281487][ T7105] f2fs_handle_critical_error+0x34c/0x4b8 [ 75.281495][ T7105] f2fs_stop_checkpoint+0x5c/0x70 [ 75.281500][ T7105] f2fs_write_end_io+0x768/0xa70 [ 75.281507][ T7105] bio_endio+0x858/0x894 [ 75.281513][ T7105] submit_bio_noacct+0xd64/0x186c [ 75.281519][ T7105] submit_bio+0x3b4/0x550 [ 75.281525][ T7105] f2fs_submit_write_bio+0x13c/0x324 [ 75.281531][ T7105] __submit_merged_bio+0x254/0x704 [ 75.281537][ T7105] __submit_merged_write_cond+0x23c/0x4ac [ 75.281542][ T7105] f2fs_write_data_pages+0x1d28/0x2634 [ 75.281549][ T7105] do_writepages+0x270/0x468 [ 75.281556][ T7105] filemap_fdatawrite+0x14c/0x1f4 [ 75.281561][ T7105] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 75.281566][ T7105] f2fs_write_checkpoint+0x70c/0x1c30 [ 75.281571][ T7105] kill_f2fs_super+0x228/0x594 [ 75.281577][ T7105] deactivate_locked_super+0xc4/0x12c [ 75.281584][ T7105] deactivate_super+0xe0/0x100 [ 75.281590][ T7105] cleanup_mnt+0x31c/0x3ac [ 75.281596][ T7105] __cleanup_mnt+0x20/0x30 [ 75.281602][ T7105] task_work_run+0x1dc/0x260 [ 75.281609][ T7105] exit_to_user_mode_loop+0xfc/0x178 [ 75.281615][ T7105] el0_svc+0x170/0x254 [ 75.281623][ T7105] el0t_64_sync_handler+0x84/0x12c [ 75.281629][ T7105] el0t_64_sync+0x198/0x19c [ 75.285650][ T7105] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 75.498850][ T7235] loop0: detected capacity change from 0 to 40427 [ 75.503098][ T7235] F2FS-fs (loop0): build fault injection rate: 771 [ 75.504755][ T7235] F2FS-fs (loop0): invalid crc value [ 75.513820][ T7235] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 75.515952][ T7235] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 76.814238][ T53] Bluetooth: hci0: command tx timeout [ 78.894172][ T53] Bluetooth: hci0: command tx timeout [ 80.660689][ T7235] F2FS-fs (loop0): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 80.663454][ T7235] syz.0.20: attempt to access beyond end of device [ 80.663454][ T7235] loop0: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 80.664950][ T7235] syz.0.20: attempt to access beyond end of device [ 80.664950][ T7235] loop0: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 80.664996][ T7235] syz.0.20: attempt to access beyond end of device [ 80.664996][ T7235] loop0: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 80.665040][ T7235] syz.0.20: attempt to access beyond end of device [ 80.665040][ T7235] loop0: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 80.665074][ T7235] syz.0.20: attempt to access beyond end of device [ 80.665074][ T7235] loop0: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 80.665106][ T7235] syz.0.20: attempt to access beyond end of device [ 80.665106][ T7235] loop0: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 80.665136][ T7235] syz.0.20: attempt to access beyond end of device [ 80.665136][ T7235] loop0: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 80.665166][ T7235] syz.0.20: attempt to access beyond end of device [ 80.665166][ T7235] loop0: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 80.665201][ T7235] syz.0.20: attempt to access beyond end of device [ 80.665201][ T7235] loop0: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 80.665235][ T7235] syz.0.20: attempt to access beyond end of device [ 80.665235][ T7235] loop0: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 85.664121][ T7235] bio_check_eod: 216722 callbacks suppressed [ 85.665277][ T7235] syz.0.20: attempt to access beyond end of device [ 85.665277][ T7235] loop0: rw=524288, sector=87232, nr_sectors = 8 limit=40427 [ 85.665369][ T7235] syz.0.20: attempt to access beyond end of device [ 85.665369][ T7235] loop0: rw=524288, sector=87240, nr_sectors = 8 limit=40427 [ 85.665403][ T7235] syz.0.20: attempt to access beyond end of device [ 85.665403][ T7235] loop0: rw=524288, sector=87248, nr_sectors = 8 limit=40427 [ 85.665433][ T7235] syz.0.20: attempt to access beyond end of device [ 85.665433][ T7235] loop0: rw=524288, sector=87256, nr_sectors = 8 limit=40427 [ 85.665462][ T7235] syz.0.20: attempt to access beyond end of device [ 85.665462][ T7235] loop0: rw=524288, sector=87264, nr_sectors = 8 limit=40427 [ 85.665489][ T7235] syz.0.20: attempt to access beyond end of device [ 85.665489][ T7235] loop0: rw=524288, sector=87272, nr_sectors = 8 limit=40427 [ 85.665515][ T7235] syz.0.20: attempt to access beyond end of device [ 85.665515][ T7235] loop0: rw=524288, sector=87280, nr_sectors = 8 limit=40427 [ 85.665552][ T7235] syz.0.20: attempt to access beyond end of device [ 85.665552][ T7235] loop0: rw=524288, sector=87288, nr_sectors = 8 limit=40427 [ 85.665578][ T7235] syz.0.20: attempt to access beyond end of device [ 85.665578][ T7235] loop0: rw=524288, sector=87296, nr_sectors = 8 limit=40427 [ 85.665603][ T7235] syz.0.20: attempt to access beyond end of device [ 85.665603][ T7235] loop0: rw=524288, sector=87304, nr_sectors = 8 limit=40427 [ 90.359639][ T6147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.361978][ T6147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.362281][ T6147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.362576][ T6147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.362758][ T6147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.426532][ T7245] chnl_net:caif_netlink_parms(): no params data found [ 90.451951][ T7245] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.453321][ T7245] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.454644][ T7245] bridge_slave_0: entered allmulticast mode [ 90.456176][ T7245] bridge_slave_0: entered promiscuous mode [ 90.458041][ T7245] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.459328][ T7245] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.460579][ T7245] bridge_slave_1: entered allmulticast mode [ 90.461997][ T7245] bridge_slave_1: entered promiscuous mode [ 90.471459][ T7245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.473985][ T7245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.483979][ T7245] team0: Port device team_slave_0 added [ 90.485862][ T7245] team0: Port device team_slave_1 added [ 90.495161][ T7245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.496442][ T7245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.500331][ T7245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.502671][ T7245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.503841][ T7245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.508120][ T7245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.519570][ T7245] hsr_slave_0: entered promiscuous mode [ 90.521047][ T7245] hsr_slave_1: entered promiscuous mode [ 90.561192][ T7245] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.563846][ T7245] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.571581][ T7245] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.575787][ T7245] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.590327][ T7245] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.590379][ T7245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.590438][ T7245] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.590461][ T7245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.605314][ T7245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.608895][ T4830] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.610511][ T4830] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.618510][ T7245] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.634847][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.634891][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.635215][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.635242][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.674042][ T7235] bio_check_eod: 214623 callbacks suppressed [ 90.674387][ T7235] syz.0.20: attempt to access beyond end of device [ 90.674387][ T7235] loop0: rw=524288, sector=87336, nr_sectors = 8 limit=40427 [ 90.674473][ T7235] syz.0.20: attempt to access beyond end of device [ 90.674473][ T7235] loop0: rw=524288, sector=87344, nr_sectors = 8 limit=40427 [ 90.675079][ T7235] syz.0.20: attempt to access beyond end of device [ 90.675079][ T7235] loop0: rw=524288, sector=87352, nr_sectors = 8 limit=40427 [ 90.675123][ T7235] syz.0.20: attempt to access beyond end of device [ 90.675123][ T7235] loop0: rw=524288, sector=87360, nr_sectors = 8 limit=40427 [ 90.675186][ T7235] syz.0.20: attempt to access beyond end of device [ 90.675186][ T7235] loop0: rw=524288, sector=87368, nr_sectors = 8 limit=40427 [ 90.675225][ T7235] syz.0.20: attempt to access beyond end of device [ 90.675225][ T7235] loop0: rw=524288, sector=87376, nr_sectors = 8 limit=40427 [ 90.675255][ T7235] syz.0.20: attempt to access beyond end of device [ 90.675255][ T7235] loop0: rw=524288, sector=87384, nr_sectors = 8 limit=40427 [ 90.675282][ T7235] syz.0.20: attempt to access beyond end of device [ 90.675282][ T7235] loop0: rw=524288, sector=87392, nr_sectors = 8 limit=40427 [ 90.675308][ T7235] syz.0.20: attempt to access beyond end of device [ 90.675308][ T7235] loop0: rw=524288, sector=87400, nr_sectors = 8 limit=40427 [ 90.675331][ T7235] syz.0.20: attempt to access beyond end of device [ 90.675331][ T7235] loop0: rw=524288, sector=87408, nr_sectors = 8 limit=40427 [ 90.711205][ T7245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.723521][ T7245] veth0_vlan: entered promiscuous mode [ 90.727288][ T7245] veth1_vlan: entered promiscuous mode [ 90.736006][ T7245] veth0_macvtap: entered promiscuous mode [ 90.738326][ T7245] veth1_macvtap: entered promiscuous mode [ 90.743279][ T7245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.755387][ T7245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.758276][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.758367][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.758386][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.758397][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.795443][ T1639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.795480][ T1639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.809387][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.809425][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:01:30 executed programs: 6 [ 90.948793][ T7265] loop1: detected capacity change from 0 to 40427 [ 90.958241][ T7265] F2FS-fs (loop1): build fault injection rate: 771 [ 90.960871][ T7265] F2FS-fs (loop1): invalid crc value [ 90.980842][ T7265] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 90.981860][ T7265] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 92.414219][ T6147] Bluetooth: hci1: command tx timeout [ 94.494311][ T6147] Bluetooth: hci1: command tx timeout [ 95.684045][ T7235] bio_check_eod: 200316 callbacks suppressed [ 95.690571][ T7235] syz.0.20: attempt to access beyond end of device [ 95.690571][ T7235] loop0: rw=0, sector=86664, nr_sectors = 8 limit=40427 [ 95.690691][ T7235] syz.0.20: attempt to access beyond end of device [ 95.690691][ T7235] loop0: rw=0, sector=86672, nr_sectors = 8 limit=40427 [ 95.690719][ T7235] syz.0.20: attempt to access beyond end of device [ 95.690719][ T7235] loop0: rw=0, sector=86680, nr_sectors = 8 limit=40427 [ 95.690745][ T7235] syz.0.20: attempt to access beyond end of device [ 95.690745][ T7235] loop0: rw=0, sector=86688, nr_sectors = 8 limit=40427 [ 95.690769][ T7235] syz.0.20: attempt to access beyond end of device [ 95.690769][ T7235] loop0: rw=0, sector=86696, nr_sectors = 8 limit=40427 [ 95.690793][ T7235] syz.0.20: attempt to access beyond end of device [ 95.690793][ T7235] loop0: rw=0, sector=86704, nr_sectors = 8 limit=40427 [ 95.690816][ T7235] syz.0.20: attempt to access beyond end of device [ 95.690816][ T7235] loop0: rw=0, sector=86712, nr_sectors = 8 limit=40427 [ 95.690838][ T7235] syz.0.20: attempt to access beyond end of device [ 95.690838][ T7235] loop0: rw=0, sector=86720, nr_sectors = 8 limit=40427 [ 95.690862][ T7235] syz.0.20: attempt to access beyond end of device [ 95.690862][ T7235] loop0: rw=0, sector=86728, nr_sectors = 8 limit=40427 [ 95.690885][ T7235] syz.0.20: attempt to access beyond end of device [ 95.690885][ T7235] loop0: rw=0, sector=86736, nr_sectors = 8 limit=40427 [ 96.400838][ T7265] F2FS-fs (loop1): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 96.574372][ T6147] Bluetooth: hci1: command tx timeout [ 98.659538][ T6147] Bluetooth: hci1: command tx timeout [ 100.694142][ T7265] bio_check_eod: 365368 callbacks suppressed [ 100.694142][ T7235] syz.0.20: attempt to access beyond end of device [ 100.694142][ T7235] loop0: rw=0, sector=88952, nr_sectors = 8 limit=40427 [ 100.694182][ T7235] syz.0.20: attempt to access beyond end of device [ 100.694182][ T7235] loop0: rw=0, sector=88960, nr_sectors = 8 limit=40427 [ 100.694850][ T7265] syz.1.21: attempt to access beyond end of device [ 100.694850][ T7265] loop1: rw=0, sector=86352, nr_sectors = 8 limit=40427 [ 100.694914][ T7235] syz.0.20: attempt to access beyond end of device [ 100.694914][ T7235] loop0: rw=0, sector=88968, nr_sectors = 8 limit=40427 [ 100.695580][ T7265] syz.1.21: attempt to access beyond end of device [ 100.695580][ T7265] loop1: rw=0, sector=86360, nr_sectors = 8 limit=40427 [ 100.695635][ T7235] syz.0.20: attempt to access beyond end of device [ 100.695635][ T7235] loop0: rw=0, sector=88976, nr_sectors = 8 limit=40427 [ 100.696309][ T7265] syz.1.21: attempt to access beyond end of device [ 100.696309][ T7265] loop1: rw=0, sector=86368, nr_sectors = 8 limit=40427 [ 100.696347][ T7235] syz.0.20: attempt to access beyond end of device [ 100.696347][ T7235] loop0: rw=0, sector=88984, nr_sectors = 8 limit=40427 [ 100.697025][ T7265] syz.1.21: attempt to access beyond end of device [ 100.697025][ T7265] loop1: rw=0, sector=86376, nr_sectors = 8 limit=40427 [ 100.697056][ T7235] syz.0.20: attempt to access beyond end of device [ 100.697056][ T7235] loop0: rw=0, sector=88992, nr_sectors = 8 limit=40427 [ 105.704050][ T7265] bio_check_eod: 399550 callbacks suppressed [ 105.707720][ T7235] syz.0.20: attempt to access beyond end of device [ 105.707720][ T7235] loop0: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 105.708853][ T7265] syz.1.21: attempt to access beyond end of device [ 105.708853][ T7265] loop1: rw=524288, sector=87048, nr_sectors = 8 limit=40427 [ 105.708953][ T7265] syz.1.21: attempt to access beyond end of device [ 105.708953][ T7265] loop1: rw=524288, sector=87056, nr_sectors = 8 limit=40427 [ 105.708989][ T7265] syz.1.21: attempt to access beyond end of device [ 105.708989][ T7265] loop1: rw=524288, sector=87064, nr_sectors = 8 limit=40427 [ 105.709019][ T7265] syz.1.21: attempt to access beyond end of device [ 105.709019][ T7265] loop1: rw=524288, sector=87072, nr_sectors = 8 limit=40427 [ 105.709045][ T7265] syz.1.21: attempt to access beyond end of device [ 105.709045][ T7265] loop1: rw=524288, sector=87080, nr_sectors = 8 limit=40427 [ 105.709071][ T7265] syz.1.21: attempt to access beyond end of device [ 105.709071][ T7265] loop1: rw=524288, sector=87088, nr_sectors = 8 limit=40427 [ 105.709095][ T7265] syz.1.21: attempt to access beyond end of device [ 105.709095][ T7265] loop1: rw=524288, sector=87096, nr_sectors = 8 limit=40427 [ 105.709120][ T7265] syz.1.21: attempt to access beyond end of device [ 105.709120][ T7265] loop1: rw=524288, sector=87104, nr_sectors = 8 limit=40427 [ 105.709143][ T7265] syz.1.21: attempt to access beyond end of device [ 105.709143][ T7265] loop1: rw=524288, sector=87112, nr_sectors = 8 limit=40427 [ 106.358384][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.359711][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.360917][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.361582][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.361795][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.512280][ T7272] chnl_net:caif_netlink_parms(): no params data found [ 106.587653][ T7272] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.587697][ T7272] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.587776][ T7272] bridge_slave_0: entered allmulticast mode [ 106.588225][ T7272] bridge_slave_0: entered promiscuous mode [ 106.588837][ T7272] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.588861][ T7272] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.588921][ T7272] bridge_slave_1: entered allmulticast mode [ 106.589329][ T7272] bridge_slave_1: entered promiscuous mode [ 106.620314][ T7272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.623261][ T7272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.656759][ T7272] team0: Port device team_slave_0 added [ 106.658756][ T7272] team0: Port device team_slave_1 added [ 106.693508][ T7272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.693541][ T7272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.693556][ T7272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.694128][ T7272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.694135][ T7272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.694143][ T7272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.734574][ T7272] hsr_slave_0: entered promiscuous mode [ 106.734924][ T7272] hsr_slave_1: entered promiscuous mode [ 106.735126][ T7272] debugfs: 'hsr0' already exists in 'hsr' [ 106.735137][ T7272] Cannot create hsr debugfs directory [ 106.851300][ T7272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.853986][ T7272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.867296][ T7272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.869983][ T7272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.897776][ T7272] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.897833][ T7272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.897909][ T7272] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.897932][ T7272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.923127][ T7272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.932039][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.933354][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.941454][ T7272] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.945842][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.945883][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.965284][ T1661] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.965333][ T1661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.086912][ T7272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.109695][ T7272] veth0_vlan: entered promiscuous mode [ 107.115888][ T7272] veth1_vlan: entered promiscuous mode [ 107.120799][ T7272] veth0_macvtap: entered promiscuous mode [ 107.121754][ T7272] veth1_macvtap: entered promiscuous mode [ 107.157021][ T7272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.160082][ T7272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.163428][ T4830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.163477][ T4830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.163537][ T4830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.163553][ T4830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.218354][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.218381][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.236362][ T4830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.236400][ T4830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:01:47 executed programs: 7 [ 107.566417][ T7294] loop2: detected capacity change from 0 to 40427 [ 107.574479][ T7294] F2FS-fs (loop2): build fault injection rate: 771 [ 107.581295][ T7294] F2FS-fs (loop2): invalid crc value [ 107.616054][ T7294] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 107.626726][ T7294] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 107.777416][ T7272] CPU: 1 UID: 0 PID: 7272 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 107.777434][ T7272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 107.777440][ T7272] Call trace: [ 107.777442][ T7272] show_stack+0x2c/0x3c (C) [ 107.777457][ T7272] __dump_stack+0x30/0x40 [ 107.777463][ T7272] dump_stack_lvl+0xd8/0x12c [ 107.777468][ T7272] dump_stack+0x1c/0x28 [ 107.777472][ T7272] f2fs_handle_critical_error+0x34c/0x4b8 [ 107.777480][ T7272] f2fs_stop_checkpoint+0x5c/0x70 [ 107.777486][ T7272] f2fs_write_end_io+0x768/0xa70 [ 107.777492][ T7272] bio_endio+0x858/0x894 [ 107.777498][ T7272] submit_bio_noacct+0xd64/0x186c [ 107.777504][ T7272] submit_bio+0x3b4/0x550 [ 107.777510][ T7272] f2fs_submit_write_bio+0x13c/0x324 [ 107.777516][ T7272] __submit_merged_bio+0x254/0x704 [ 107.777522][ T7272] __submit_merged_write_cond+0x23c/0x4ac [ 107.777528][ T7272] f2fs_write_data_pages+0x1d28/0x2634 [ 107.777534][ T7272] do_writepages+0x270/0x468 [ 107.777543][ T7272] filemap_fdatawrite+0x14c/0x1f4 [ 107.777547][ T7272] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 107.777553][ T7272] f2fs_write_checkpoint+0x70c/0x1c30 [ 107.777558][ T7272] kill_f2fs_super+0x228/0x594 [ 107.777564][ T7272] deactivate_locked_super+0xc4/0x12c [ 107.777571][ T7272] deactivate_super+0xe0/0x100 [ 107.777577][ T7272] cleanup_mnt+0x31c/0x3ac [ 107.777583][ T7272] __cleanup_mnt+0x20/0x30 [ 107.777589][ T7272] task_work_run+0x1dc/0x260 [ 107.777595][ T7272] exit_to_user_mode_loop+0xfc/0x178 [ 107.777602][ T7272] el0_svc+0x170/0x254 [ 107.777610][ T7272] el0t_64_sync_handler+0x84/0x12c [ 107.777617][ T7272] el0t_64_sync+0x198/0x19c [ 107.777644][ T7272] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 108.206807][ T7300] loop2: detected capacity change from 0 to 40427 [ 108.210223][ T7300] F2FS-fs (loop2): build fault injection rate: 771 [ 108.217467][ T7300] F2FS-fs (loop2): invalid crc value [ 108.257185][ T7300] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 108.262807][ T7300] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 108.414174][ T53] Bluetooth: hci2: command tx timeout [ 110.494231][ T53] Bluetooth: hci2: command tx timeout [ 110.714073][ T7235] bio_check_eod: 279160 callbacks suppressed [ 110.714403][ T7235] syz.0.20: attempt to access beyond end of device [ 110.714403][ T7235] loop0: rw=524288, sector=86440, nr_sectors = 8 limit=40427 [ 110.714476][ T7235] syz.0.20: attempt to access beyond end of device [ 110.714476][ T7235] loop0: rw=524288, sector=86448, nr_sectors = 8 limit=40427 [ 110.714520][ T7235] syz.0.20: attempt to access beyond end of device [ 110.714520][ T7235] loop0: rw=524288, sector=86456, nr_sectors = 8 limit=40427 [ 110.714549][ T7235] syz.0.20: attempt to access beyond end of device [ 110.714549][ T7235] loop0: rw=524288, sector=86464, nr_sectors = 8 limit=40427 [ 110.714575][ T7235] syz.0.20: attempt to access beyond end of device [ 110.714575][ T7235] loop0: rw=524288, sector=86472, nr_sectors = 8 limit=40427 [ 110.714599][ T7235] syz.0.20: attempt to access beyond end of device [ 110.714599][ T7235] loop0: rw=524288, sector=86480, nr_sectors = 8 limit=40427 [ 110.714622][ T7235] syz.0.20: attempt to access beyond end of device [ 110.714622][ T7235] loop0: rw=524288, sector=86488, nr_sectors = 8 limit=40427 [ 110.714645][ T7235] syz.0.20: attempt to access beyond end of device [ 110.714645][ T7235] loop0: rw=524288, sector=86496, nr_sectors = 8 limit=40427 [ 110.714667][ T7235] syz.0.20: attempt to access beyond end of device [ 110.714667][ T7235] loop0: rw=524288, sector=86504, nr_sectors = 8 limit=40427 [ 110.714690][ T7235] syz.0.20: attempt to access beyond end of device [ 110.714690][ T7235] loop0: rw=524288, sector=86512, nr_sectors = 8 limit=40427 [ 112.584177][ T53] Bluetooth: hci2: command tx timeout [ 114.654214][ T53] Bluetooth: hci2: command tx timeout [ 115.724392][ T7265] bio_check_eod: 286289 callbacks suppressed [ 115.732449][ T7265] syz.1.21: attempt to access beyond end of device [ 115.732449][ T7265] loop1: rw=524288, sector=86352, nr_sectors = 8 limit=40427 [ 115.744268][ T7235] syz.0.20: attempt to access beyond end of device [ 115.744268][ T7235] loop0: rw=524288, sector=86776, nr_sectors = 8 limit=40427 [ 115.744333][ T7235] syz.0.20: attempt to access beyond end of device [ 115.744333][ T7235] loop0: rw=524288, sector=86784, nr_sectors = 8 limit=40427 [ 115.744365][ T7235] syz.0.20: attempt to access beyond end of device [ 115.744365][ T7235] loop0: rw=524288, sector=86792, nr_sectors = 8 limit=40427 [ 115.744391][ T7235] syz.0.20: attempt to access beyond end of device [ 115.744391][ T7235] loop0: rw=524288, sector=86800, nr_sectors = 8 limit=40427 [ 115.744417][ T7235] syz.0.20: attempt to access beyond end of device [ 115.744417][ T7235] loop0: rw=524288, sector=86808, nr_sectors = 8 limit=40427 [ 115.744440][ T7235] syz.0.20: attempt to access beyond end of device [ 115.744440][ T7235] loop0: rw=524288, sector=86816, nr_sectors = 8 limit=40427 [ 115.744470][ T7235] syz.0.20: attempt to access beyond end of device [ 115.744470][ T7235] loop0: rw=524288, sector=86824, nr_sectors = 8 limit=40427 [ 115.744501][ T7235] syz.0.20: attempt to access beyond end of device [ 115.744501][ T7235] loop0: rw=524288, sector=86832, nr_sectors = 8 limit=40427 [ 115.744523][ T7235] syz.0.20: attempt to access beyond end of device [ 115.744523][ T7235] loop0: rw=524288, sector=86840, nr_sectors = 8 limit=40427 [ 118.028647][ T7300] F2FS-fs (loop2): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 120.734155][ T7300] bio_check_eod: 341801 callbacks suppressed [ 120.735235][ T7300] syz.2.23: attempt to access beyond end of device [ 120.735235][ T7300] loop2: rw=0, sector=87080, nr_sectors = 8 limit=40427 [ 120.737840][ T7300] syz.2.23: attempt to access beyond end of device [ 120.737840][ T7300] loop2: rw=0, sector=87088, nr_sectors = 8 limit=40427 [ 120.740114][ T7300] syz.2.23: attempt to access beyond end of device [ 120.740114][ T7300] loop2: rw=0, sector=87096, nr_sectors = 8 limit=40427 [ 120.741079][ T7235] syz.0.20: attempt to access beyond end of device [ 120.741079][ T7235] loop0: rw=0, sector=86264, nr_sectors = 8 limit=40427 [ 120.741146][ T7235] syz.0.20: attempt to access beyond end of device [ 120.741146][ T7235] loop0: rw=0, sector=86272, nr_sectors = 8 limit=40427 [ 120.741176][ T7235] syz.0.20: attempt to access beyond end of device [ 120.741176][ T7235] loop0: rw=0, sector=86280, nr_sectors = 8 limit=40427 [ 120.741201][ T7235] syz.0.20: attempt to access beyond end of device [ 120.741201][ T7235] loop0: rw=0, sector=86288, nr_sectors = 8 limit=40427 [ 120.741233][ T7235] syz.0.20: attempt to access beyond end of device [ 120.741233][ T7235] loop0: rw=0, sector=86296, nr_sectors = 8 limit=40427 [ 120.741260][ T7235] syz.0.20: attempt to access beyond end of device [ 120.741260][ T7235] loop0: rw=0, sector=86304, nr_sectors = 8 limit=40427 [ 120.741283][ T7235] syz.0.20: attempt to access beyond end of device [ 120.741283][ T7235] loop0: rw=0, sector=86312, nr_sectors = 8 limit=40427 [ 123.624288][ T6147] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.626808][ T6147] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.633682][ T6147] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.660491][ T6147] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.662117][ T6147] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.855844][ T7306] chnl_net:caif_netlink_parms(): no params data found [ 123.945796][ T7306] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.947621][ T7306] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.949035][ T7306] bridge_slave_0: entered allmulticast mode [ 123.950561][ T7306] bridge_slave_0: entered promiscuous mode [ 123.964535][ T7306] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.965868][ T7306] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.966000][ T7306] bridge_slave_1: entered allmulticast mode [ 123.966483][ T7306] bridge_slave_1: entered promiscuous mode [ 124.015531][ T7306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.027020][ T7306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.067114][ T7306] team0: Port device team_slave_0 added [ 124.069052][ T7306] team0: Port device team_slave_1 added [ 124.098453][ T7306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.099545][ T7306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.103369][ T7306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.111582][ T7306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.112770][ T7306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.116913][ T7306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.131449][ T7306] hsr_slave_0: entered promiscuous mode [ 124.132817][ T7306] hsr_slave_1: entered promiscuous mode [ 124.161889][ T7306] debugfs: 'hsr0' already exists in 'hsr' [ 124.161938][ T7306] Cannot create hsr debugfs directory [ 124.329470][ T7306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 124.332656][ T7306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 124.343670][ T7306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 124.347666][ T7306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 124.403126][ T7306] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.403168][ T7306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.403306][ T7306] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.403335][ T7306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.453397][ T7306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.478767][ T7306] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.668970][ T7306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.727038][ T7306] veth0_vlan: entered promiscuous mode [ 124.728611][ T7306] veth1_vlan: entered promiscuous mode [ 124.743972][ T7306] veth0_macvtap: entered promiscuous mode [ 124.767565][ T7306] veth1_macvtap: entered promiscuous mode [ 124.771089][ T7306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.786437][ T7306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.808178][ T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.808246][ T42] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.808268][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.808282][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.878526][ T1639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.878561][ T1639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.916160][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.916199][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:02:04 executed programs: 9 [ 125.262870][ T7326] loop3: detected capacity change from 0 to 40427 [ 125.271640][ T7326] F2FS-fs (loop3): build fault injection rate: 771 [ 125.273721][ T7326] F2FS-fs (loop3): invalid crc value [ 125.329517][ T7326] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 125.347543][ T7326] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 125.694143][ T53] Bluetooth: hci3: command tx timeout [ 125.744156][ T7235] bio_check_eod: 332942 callbacks suppressed [ 125.745354][ T7235] syz.0.20: attempt to access beyond end of device [ 125.745354][ T7235] loop0: rw=0, sector=88880, nr_sectors = 8 limit=40427 [ 125.746500][ T7235] syz.0.20: attempt to access beyond end of device [ 125.746500][ T7235] loop0: rw=0, sector=88888, nr_sectors = 8 limit=40427 [ 125.746536][ T7235] syz.0.20: attempt to access beyond end of device [ 125.746536][ T7235] loop0: rw=0, sector=88896, nr_sectors = 8 limit=40427 [ 125.746565][ T7235] syz.0.20: attempt to access beyond end of device [ 125.746565][ T7235] loop0: rw=0, sector=88904, nr_sectors = 8 limit=40427 [ 125.746590][ T7235] syz.0.20: attempt to access beyond end of device [ 125.746590][ T7235] loop0: rw=0, sector=88912, nr_sectors = 8 limit=40427 [ 125.746613][ T7235] syz.0.20: attempt to access beyond end of device [ 125.746613][ T7235] loop0: rw=0, sector=88920, nr_sectors = 8 limit=40427 [ 125.746636][ T7235] syz.0.20: attempt to access beyond end of device [ 125.746636][ T7235] loop0: rw=0, sector=88928, nr_sectors = 8 limit=40427 [ 125.746662][ T7235] syz.0.20: attempt to access beyond end of device [ 125.746662][ T7235] loop0: rw=0, sector=88936, nr_sectors = 8 limit=40427 [ 125.746685][ T7235] syz.0.20: attempt to access beyond end of device [ 125.746685][ T7235] loop0: rw=0, sector=88944, nr_sectors = 8 limit=40427 [ 125.746706][ T7235] syz.0.20: attempt to access beyond end of device [ 125.746706][ T7235] loop0: rw=0, sector=88952, nr_sectors = 8 limit=40427 [ 125.934920][ T2454] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.934963][ T2454] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.774922][ T53] Bluetooth: hci3: command tx timeout [ 129.854121][ T53] Bluetooth: hci3: command tx timeout [ 130.754071][ T7235] bio_check_eod: 305390 callbacks suppressed [ 130.755145][ T7235] syz.0.20: attempt to access beyond end of device [ 130.755145][ T7235] loop0: rw=524288, sector=86928, nr_sectors = 8 limit=40427 [ 130.757456][ T7235] syz.0.20: attempt to access beyond end of device [ 130.757456][ T7235] loop0: rw=524288, sector=86936, nr_sectors = 8 limit=40427 [ 130.759759][ T7265] syz.1.21: attempt to access beyond end of device [ 130.759759][ T7265] loop1: rw=524288, sector=87504, nr_sectors = 8 limit=40427 [ 130.762028][ T7235] syz.0.20: attempt to access beyond end of device [ 130.762028][ T7235] loop0: rw=524288, sector=86944, nr_sectors = 8 limit=40427 [ 130.770667][ T7235] syz.0.20: attempt to access beyond end of device [ 130.770667][ T7235] loop0: rw=524288, sector=86952, nr_sectors = 8 limit=40427 [ 130.773006][ T7235] syz.0.20: attempt to access beyond end of device [ 130.773006][ T7235] loop0: rw=524288, sector=86960, nr_sectors = 8 limit=40427 [ 130.775326][ T7235] syz.0.20: attempt to access beyond end of device [ 130.775326][ T7235] loop0: rw=524288, sector=86968, nr_sectors = 8 limit=40427 [ 130.777519][ T7235] syz.0.20: attempt to access beyond end of device [ 130.777519][ T7235] loop0: rw=524288, sector=86976, nr_sectors = 8 limit=40427 [ 130.779774][ T7235] syz.0.20: attempt to access beyond end of device [ 130.779774][ T7235] loop0: rw=524288, sector=86984, nr_sectors = 8 limit=40427 [ 130.782006][ T7235] syz.0.20: attempt to access beyond end of device [ 130.782006][ T7235] loop0: rw=524288, sector=86992, nr_sectors = 8 limit=40427 [ 131.934127][ T53] Bluetooth: hci3: command tx timeout [ 135.764276][ T7265] bio_check_eod: 293113 callbacks suppressed [ 135.765062][ T7265] syz.1.21: attempt to access beyond end of device [ 135.765062][ T7265] loop1: rw=524288, sector=87536, nr_sectors = 8 limit=40427 [ 135.765112][ T7265] syz.1.21: attempt to access beyond end of device [ 135.765112][ T7265] loop1: rw=524288, sector=87544, nr_sectors = 8 limit=40427 [ 135.765141][ T7265] syz.1.21: attempt to access beyond end of device [ 135.765141][ T7265] loop1: rw=524288, sector=87552, nr_sectors = 8 limit=40427 [ 135.765168][ T7265] syz.1.21: attempt to access beyond end of device [ 135.765168][ T7265] loop1: rw=524288, sector=87560, nr_sectors = 8 limit=40427 [ 135.765193][ T7265] syz.1.21: attempt to access beyond end of device [ 135.765193][ T7265] loop1: rw=524288, sector=87568, nr_sectors = 8 limit=40427 [ 135.765221][ T7265] syz.1.21: attempt to access beyond end of device [ 135.765221][ T7265] loop1: rw=524288, sector=87576, nr_sectors = 8 limit=40427 [ 135.765249][ T7265] syz.1.21: attempt to access beyond end of device [ 135.765249][ T7265] loop1: rw=524288, sector=87584, nr_sectors = 8 limit=40427 [ 135.765280][ T7265] syz.1.21: attempt to access beyond end of device [ 135.765280][ T7265] loop1: rw=524288, sector=87592, nr_sectors = 8 limit=40427 [ 135.765303][ T7265] syz.1.21: attempt to access beyond end of device [ 135.765303][ T7265] loop1: rw=524288, sector=87600, nr_sectors = 8 limit=40427 [ 135.765325][ T7265] syz.1.21: attempt to access beyond end of device [ 135.765325][ T7265] loop1: rw=524288, sector=87608, nr_sectors = 8 limit=40427 [ 138.993916][ T7326] F2FS-fs (loop3): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 140.656759][ T6147] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 140.657143][ T6147] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 140.657337][ T6147] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 140.657615][ T6147] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 140.657803][ T6147] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 140.774163][ T7326] bio_check_eod: 324284 callbacks suppressed [ 140.774206][ T7326] syz.3.24: attempt to access beyond end of device [ 140.774206][ T7326] loop3: rw=524288, sector=89416, nr_sectors = 8 limit=40427 [ 140.774210][ T7265] syz.1.21: attempt to access beyond end of device [ 140.774210][ T7265] loop1: rw=524288, sector=88104, nr_sectors = 8 limit=40427 [ 140.774252][ T7326] syz.3.24: attempt to access beyond end of device [ 140.774252][ T7326] loop3: rw=524288, sector=89424, nr_sectors = 8 limit=40427 [ 140.774289][ T7326] syz.3.24: attempt to access beyond end of device [ 140.774289][ T7326] loop3: rw=524288, sector=89432, nr_sectors = 8 limit=40427 [ 140.774323][ T7326] syz.3.24: attempt to access beyond end of device [ 140.774323][ T7326] loop3: rw=524288, sector=89440, nr_sectors = 8 limit=40427 [ 140.774354][ T7326] syz.3.24: attempt to access beyond end of device [ 140.774354][ T7326] loop3: rw=524288, sector=89448, nr_sectors = 8 limit=40427 [ 140.774385][ T7326] syz.3.24: attempt to access beyond end of device [ 140.774385][ T7326] loop3: rw=524288, sector=89456, nr_sectors = 8 limit=40427 [ 140.774414][ T7326] syz.3.24: attempt to access beyond end of device [ 140.774414][ T7326] loop3: rw=524288, sector=89464, nr_sectors = 8 limit=40427 [ 140.774441][ T7326] syz.3.24: attempt to access beyond end of device [ 140.774441][ T7326] loop3: rw=524288, sector=89472, nr_sectors = 8 limit=40427 [ 140.774468][ T7326] syz.3.24: attempt to access beyond end of device [ 140.774468][ T7326] loop3: rw=524288, sector=89480, nr_sectors = 8 limit=40427 [ 141.157116][ T7337] chnl_net:caif_netlink_parms(): no params data found [ 141.284817][ T7337] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.284868][ T7337] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.284933][ T7337] bridge_slave_0: entered allmulticast mode [ 141.285377][ T7337] bridge_slave_0: entered promiscuous mode [ 141.286015][ T7337] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.286034][ T7337] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.286079][ T7337] bridge_slave_1: entered allmulticast mode [ 141.286494][ T7337] bridge_slave_1: entered promiscuous mode [ 141.328642][ T7337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.329586][ T7337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.351199][ T7337] team0: Port device team_slave_0 added [ 141.352015][ T7337] team0: Port device team_slave_1 added [ 141.406619][ T7337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.406657][ T7337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.406671][ T7337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.407183][ T7337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.407189][ T7337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.407202][ T7337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.501138][ T7337] hsr_slave_0: entered promiscuous mode [ 141.501523][ T7337] hsr_slave_1: entered promiscuous mode [ 141.501741][ T7337] debugfs: 'hsr0' already exists in 'hsr' [ 141.501751][ T7337] Cannot create hsr debugfs directory [ 141.697708][ T7337] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 141.700538][ T7337] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 141.715596][ T7337] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 141.718122][ T7337] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 141.802672][ T7337] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.802720][ T7337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.802805][ T7337] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.802835][ T7337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.836234][ T7337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.856627][ T1639] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.858347][ T1639] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.865556][ T7337] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.905528][ T4830] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.905582][ T4830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.905879][ T4830] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.905897][ T4830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.080242][ T7337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.312777][ T7337] veth0_vlan: entered promiscuous mode [ 142.338102][ T7337] veth1_vlan: entered promiscuous mode [ 142.364929][ T7337] veth0_macvtap: entered promiscuous mode [ 142.367315][ T7337] veth1_macvtap: entered promiscuous mode [ 142.392486][ T7337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.401172][ T7337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.421025][ T14] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.421136][ T14] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.421155][ T14] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.421167][ T14] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.476425][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.476564][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.512390][ T1639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.512709][ T1639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:02:22 executed programs: 10 [ 142.734185][ T53] Bluetooth: hci4: command tx timeout [ 143.100567][ T7368] loop4: detected capacity change from 0 to 40427 [ 143.145974][ T7368] F2FS-fs (loop4): build fault injection rate: 771 [ 143.150048][ T7368] F2FS-fs (loop4): invalid crc value [ 143.198641][ T7368] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 143.204498][ T7368] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 144.814137][ T53] Bluetooth: hci4: command tx timeout [ 145.786576][ T7235] bio_check_eod: 311888 callbacks suppressed [ 145.787640][ T7265] syz.1.21: attempt to access beyond end of device [ 145.787640][ T7265] loop1: rw=0, sector=86032, nr_sectors = 8 limit=40427 [ 145.788494][ T7235] syz.0.20: attempt to access beyond end of device [ 145.788494][ T7235] loop0: rw=524288, sector=86680, nr_sectors = 8 limit=40427 [ 145.788574][ T7235] syz.0.20: attempt to access beyond end of device [ 145.788574][ T7235] loop0: rw=524288, sector=86688, nr_sectors = 8 limit=40427 [ 145.788613][ T7235] syz.0.20: attempt to access beyond end of device [ 145.788613][ T7235] loop0: rw=524288, sector=86696, nr_sectors = 8 limit=40427 [ 145.788643][ T7235] syz.0.20: attempt to access beyond end of device [ 145.788643][ T7235] loop0: rw=524288, sector=86704, nr_sectors = 8 limit=40427 [ 145.788669][ T7235] syz.0.20: attempt to access beyond end of device [ 145.788669][ T7235] loop0: rw=524288, sector=86712, nr_sectors = 8 limit=40427 [ 145.788694][ T7235] syz.0.20: attempt to access beyond end of device [ 145.788694][ T7235] loop0: rw=524288, sector=86720, nr_sectors = 8 limit=40427 [ 145.788788][ T7235] syz.0.20: attempt to access beyond end of device [ 145.788788][ T7235] loop0: rw=524288, sector=86728, nr_sectors = 8 limit=40427 [ 145.788824][ T7235] syz.0.20: attempt to access beyond end of device [ 145.788824][ T7235] loop0: rw=524288, sector=86736, nr_sectors = 8 limit=40427 [ 145.788851][ T7235] syz.0.20: attempt to access beyond end of device [ 145.788851][ T7235] loop0: rw=524288, sector=86744, nr_sectors = 8 limit=40427 [ 146.901415][ T53] Bluetooth: hci4: command tx timeout [ 148.977669][ T53] Bluetooth: hci4: command tx timeout [ 150.794122][ T7326] bio_check_eod: 322829 callbacks suppressed [ 150.794175][ T7326] syz.3.24: attempt to access beyond end of device [ 150.794175][ T7326] loop3: rw=524288, sector=86904, nr_sectors = 8 limit=40427 [ 150.794250][ T7326] syz.3.24: attempt to access beyond end of device [ 150.794250][ T7326] loop3: rw=524288, sector=86912, nr_sectors = 8 limit=40427 [ 150.794293][ T7326] syz.3.24: attempt to access beyond end of device [ 150.794293][ T7326] loop3: rw=524288, sector=86920, nr_sectors = 8 limit=40427 [ 150.794331][ T7326] syz.3.24: attempt to access beyond end of device [ 150.794331][ T7326] loop3: rw=524288, sector=86928, nr_sectors = 8 limit=40427 [ 150.794368][ T7326] syz.3.24: attempt to access beyond end of device [ 150.794368][ T7326] loop3: rw=524288, sector=86936, nr_sectors = 8 limit=40427 [ 150.794404][ T7326] syz.3.24: attempt to access beyond end of device [ 150.794404][ T7326] loop3: rw=524288, sector=86944, nr_sectors = 8 limit=40427 [ 150.794435][ T7326] syz.3.24: attempt to access beyond end of device [ 150.794435][ T7326] loop3: rw=524288, sector=86952, nr_sectors = 8 limit=40427 [ 150.794465][ T7326] syz.3.24: attempt to access beyond end of device [ 150.794465][ T7326] loop3: rw=524288, sector=86960, nr_sectors = 8 limit=40427 [ 150.794493][ T7326] syz.3.24: attempt to access beyond end of device [ 150.794493][ T7326] loop3: rw=524288, sector=86968, nr_sectors = 8 limit=40427 [ 150.794527][ T7326] syz.3.24: attempt to access beyond end of device [ 150.794527][ T7326] loop3: rw=524288, sector=86976, nr_sectors = 8 limit=40427 [ 155.804150][ T7326] bio_check_eod: 324829 callbacks suppressed [ 155.804613][ T7300] syz.2.23: attempt to access beyond end of device [ 155.804613][ T7300] loop2: rw=0, sector=87296, nr_sectors = 8 limit=40427 [ 155.804657][ T7300] syz.2.23: attempt to access beyond end of device [ 155.804657][ T7300] loop2: rw=0, sector=87304, nr_sectors = 8 limit=40427 [ 155.804684][ T7300] syz.2.23: attempt to access beyond end of device [ 155.804684][ T7300] loop2: rw=0, sector=87312, nr_sectors = 8 limit=40427 [ 155.804710][ T7300] syz.2.23: attempt to access beyond end of device [ 155.804710][ T7300] loop2: rw=0, sector=87320, nr_sectors = 8 limit=40427 [ 155.804737][ T7300] syz.2.23: attempt to access beyond end of device [ 155.804737][ T7300] loop2: rw=0, sector=87328, nr_sectors = 8 limit=40427 [ 155.804761][ T7300] syz.2.23: attempt to access beyond end of device [ 155.804761][ T7300] loop2: rw=0, sector=87336, nr_sectors = 8 limit=40427 [ 155.804784][ T7300] syz.2.23: attempt to access beyond end of device [ 155.804784][ T7300] loop2: rw=0, sector=87344, nr_sectors = 8 limit=40427 [ 155.804815][ T7300] syz.2.23: attempt to access beyond end of device [ 155.804815][ T7300] loop2: rw=0, sector=87352, nr_sectors = 8 limit=40427 [ 155.804846][ T7300] syz.2.23: attempt to access beyond end of device [ 155.804846][ T7300] loop2: rw=0, sector=87360, nr_sectors = 8 limit=40427 [ 155.827992][ T7326] syz.3.24: attempt to access beyond end of device [ 155.827992][ T7326] loop3: rw=524288, sector=87616, nr_sectors = 8 limit=40427 [ 159.096068][ T6147] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 159.097911][ T6147] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 159.102486][ T6147] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 159.110425][ T6147] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 159.111379][ T6147] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 159.488425][ T7374] chnl_net:caif_netlink_parms(): no params data found [ 159.627838][ T7374] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.627915][ T7374] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.627984][ T7374] bridge_slave_0: entered allmulticast mode [ 159.628445][ T7374] bridge_slave_0: entered promiscuous mode [ 159.629229][ T7374] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.629249][ T7374] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.629303][ T7374] bridge_slave_1: entered allmulticast mode [ 159.629710][ T7374] bridge_slave_1: entered promiscuous mode [ 159.656664][ T7374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.657608][ T7374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.835593][ T7374] team0: Port device team_slave_0 added [ 159.836364][ T7374] team0: Port device team_slave_1 added [ 159.910282][ T7374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.910313][ T7374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.910344][ T7374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.910915][ T7374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.910929][ T7374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.910951][ T7374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.967414][ T7374] hsr_slave_0: entered promiscuous mode [ 159.968936][ T7374] hsr_slave_1: entered promiscuous mode [ 159.970229][ T7374] debugfs: 'hsr0' already exists in 'hsr' [ 159.971201][ T7374] Cannot create hsr debugfs directory [ 160.105891][ T7374] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 160.120776][ T7368] F2FS-fs (loop4): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 160.136270][ T7374] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 160.180996][ T7374] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 160.202024][ T7374] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 160.270727][ T7374] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.270786][ T7374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.270877][ T7374] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.270906][ T7374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.359203][ T7374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.408045][ T1639] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.410022][ T1639] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.479787][ T7374] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.528328][ T1639] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.528385][ T1639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.575294][ T1956] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.575342][ T1956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.767279][ T7374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.816740][ T7368] bio_check_eod: 279395 callbacks suppressed [ 160.818084][ T7368] syz.4.25: attempt to access beyond end of device [ 160.818084][ T7368] loop4: rw=0, sector=89160, nr_sectors = 8 limit=40427 [ 160.820223][ T7265] syz.1.21: attempt to access beyond end of device [ 160.820223][ T7265] loop1: rw=0, sector=89592, nr_sectors = 8 limit=40427 [ 160.820303][ T7265] syz.1.21: attempt to access beyond end of device [ 160.820303][ T7265] loop1: rw=0, sector=89600, nr_sectors = 8 limit=40427 [ 160.820335][ T7265] syz.1.21: attempt to access beyond end of device [ 160.820335][ T7265] loop1: rw=0, sector=89608, nr_sectors = 8 limit=40427 [ 160.820360][ T7265] syz.1.21: attempt to access beyond end of device [ 160.820360][ T7265] loop1: rw=0, sector=89616, nr_sectors = 8 limit=40427 [ 160.820384][ T7265] syz.1.21: attempt to access beyond end of device [ 160.820384][ T7265] loop1: rw=0, sector=89624, nr_sectors = 8 limit=40427 [ 160.820407][ T7265] syz.1.21: attempt to access beyond end of device [ 160.820407][ T7265] loop1: rw=0, sector=89632, nr_sectors = 8 limit=40427 [ 160.820430][ T7265] syz.1.21: attempt to access beyond end of device [ 160.820430][ T7265] loop1: rw=0, sector=89640, nr_sectors = 8 limit=40427 [ 160.820452][ T7265] syz.1.21: attempt to access beyond end of device [ 160.820452][ T7265] loop1: rw=0, sector=89648, nr_sectors = 8 limit=40427 [ 160.820474][ T7265] syz.1.21: attempt to access beyond end of device [ 160.820474][ T7265] loop1: rw=0, sector=89656, nr_sectors = 8 limit=40427 [ 161.088198][ T7374] veth0_vlan: entered promiscuous mode [ 161.091165][ T7374] veth1_vlan: entered promiscuous mode [ 161.120117][ T7374] veth0_macvtap: entered promiscuous mode [ 161.121144][ T7374] veth1_macvtap: entered promiscuous mode [ 161.135092][ T6147] Bluetooth: hci5: command tx timeout [ 161.148606][ T7374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.177514][ T7374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.224464][ T7404] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.225944][ T7404] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.227538][ T7404] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.260887][ T7404] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.328361][ T1956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.332380][ T1956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.379775][ T7404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.381883][ T7404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:02:41 executed programs: 11 [ 161.955156][ T7407] loop5: detected capacity change from 0 to 40427 [ 161.962323][ T7407] F2FS-fs (loop5): build fault injection rate: 771 [ 161.966526][ T7407] F2FS-fs (loop5): invalid crc value [ 162.016956][ T7407] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 162.034194][ T7407] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 162.224688][ T7374] CPU: 1 UID: 0 PID: 7374 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 162.224712][ T7374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 162.224718][ T7374] Call trace: [ 162.224721][ T7374] show_stack+0x2c/0x3c (C) [ 162.224738][ T7374] __dump_stack+0x30/0x40 [ 162.224745][ T7374] dump_stack_lvl+0xd8/0x12c [ 162.224750][ T7374] dump_stack+0x1c/0x28 [ 162.224755][ T7374] f2fs_handle_critical_error+0x34c/0x4b8 [ 162.224764][ T7374] f2fs_stop_checkpoint+0x5c/0x70 [ 162.224770][ T7374] f2fs_write_end_io+0x768/0xa70 [ 162.224777][ T7374] bio_endio+0x858/0x894 [ 162.224783][ T7374] submit_bio_noacct+0xd64/0x186c [ 162.224790][ T7374] submit_bio+0x3b4/0x550 [ 162.224796][ T7374] f2fs_submit_write_bio+0x13c/0x324 [ 162.224802][ T7374] __submit_merged_bio+0x254/0x704 [ 162.224807][ T7374] __submit_merged_write_cond+0x23c/0x4ac [ 162.224813][ T7374] f2fs_write_data_pages+0x1d28/0x2634 [ 162.224819][ T7374] do_writepages+0x270/0x468 [ 162.224828][ T7374] filemap_fdatawrite+0x14c/0x1f4 [ 162.224832][ T7374] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 162.224838][ T7374] f2fs_write_checkpoint+0x70c/0x1c30 [ 162.224843][ T7374] kill_f2fs_super+0x228/0x594 [ 162.224849][ T7374] deactivate_locked_super+0xc4/0x12c [ 162.224857][ T7374] deactivate_super+0xe0/0x100 [ 162.224862][ T7374] cleanup_mnt+0x31c/0x3ac [ 162.224869][ T7374] __cleanup_mnt+0x20/0x30 [ 162.224875][ T7374] task_work_run+0x1dc/0x260 [ 162.224881][ T7374] exit_to_user_mode_loop+0xfc/0x178 [ 162.224889][ T7374] el0_svc+0x170/0x254 [ 162.224896][ T7374] el0t_64_sync_handler+0x84/0x12c [ 162.224902][ T7374] el0t_64_sync+0x198/0x19c [ 162.227099][ T7374] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 163.040016][ T7413] loop5: detected capacity change from 0 to 40427 [ 163.094323][ T7413] F2FS-fs (loop5): build fault injection rate: 771 [ 163.099573][ T7413] F2FS-fs (loop5): invalid crc value [ 163.169200][ T7413] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 163.200794][ T7413] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 163.214209][ T6147] Bluetooth: hci5: command tx timeout [ 163.397851][ T7374] CPU: 0 UID: 0 PID: 7374 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 163.397877][ T7374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 163.397882][ T7374] Call trace: [ 163.397885][ T7374] show_stack+0x2c/0x3c (C) [ 163.397902][ T7374] __dump_stack+0x30/0x40 [ 163.397910][ T7374] dump_stack_lvl+0xd8/0x12c [ 163.397918][ T7374] dump_stack+0x1c/0x28 [ 163.397924][ T7374] f2fs_handle_critical_error+0x34c/0x4b8 [ 163.397933][ T7374] f2fs_stop_checkpoint+0x5c/0x70 [ 163.397939][ T7374] f2fs_write_end_io+0x768/0xa70 [ 163.397945][ T7374] bio_endio+0x858/0x894 [ 163.397951][ T7374] submit_bio_noacct+0xd64/0x186c [ 163.397958][ T7374] submit_bio+0x3b4/0x550 [ 163.397964][ T7374] f2fs_submit_write_bio+0x13c/0x324 [ 163.397970][ T7374] __submit_merged_bio+0x254/0x704 [ 163.397975][ T7374] __submit_merged_write_cond+0x23c/0x4ac [ 163.397981][ T7374] f2fs_write_data_pages+0x1d28/0x2634 [ 163.397988][ T7374] do_writepages+0x270/0x468 [ 163.397995][ T7374] filemap_fdatawrite+0x14c/0x1f4 [ 163.398000][ T7374] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 163.398005][ T7374] f2fs_write_checkpoint+0x70c/0x1c30 [ 163.398010][ T7374] kill_f2fs_super+0x228/0x594 [ 163.398016][ T7374] deactivate_locked_super+0xc4/0x12c [ 163.398023][ T7374] deactivate_super+0xe0/0x100 [ 163.398029][ T7374] cleanup_mnt+0x31c/0x3ac [ 163.398035][ T7374] __cleanup_mnt+0x20/0x30 [ 163.398041][ T7374] task_work_run+0x1dc/0x260 [ 163.398048][ T7374] exit_to_user_mode_loop+0xfc/0x178 [ 163.398055][ T7374] el0_svc+0x170/0x254 [ 163.398062][ T7374] el0t_64_sync_handler+0x84/0x12c [ 163.398068][ T7374] el0t_64_sync+0x198/0x19c [ 163.398099][ T7374] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 164.205950][ T7419] loop5: detected capacity change from 0 to 40427 [ 164.206854][ T7419] F2FS-fs (loop5): build fault injection rate: 771 [ 164.207460][ T7419] F2FS-fs (loop5): invalid crc value [ 164.248360][ T7419] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 164.252008][ T7419] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 165.295137][ T6147] Bluetooth: hci5: command tx timeout [ 165.824219][ T7265] bio_check_eod: 320039 callbacks suppressed [ 165.824279][ T7265] syz.1.21: attempt to access beyond end of device [ 165.824279][ T7265] loop1: rw=0, sector=87784, nr_sectors = 8 limit=40427 [ 165.824333][ T7265] syz.1.21: attempt to access beyond end of device [ 165.824333][ T7265] loop1: rw=0, sector=87792, nr_sectors = 8 limit=40427 [ 165.824381][ T7265] syz.1.21: attempt to access beyond end of device [ 165.824381][ T7265] loop1: rw=0, sector=87800, nr_sectors = 8 limit=40427 [ 165.824428][ T7265] syz.1.21: attempt to access beyond end of device [ 165.824428][ T7265] loop1: rw=0, sector=87808, nr_sectors = 8 limit=40427 [ 165.824469][ T7265] syz.1.21: attempt to access beyond end of device [ 165.824469][ T7265] loop1: rw=0, sector=87816, nr_sectors = 8 limit=40427 [ 165.824509][ T7265] syz.1.21: attempt to access beyond end of device [ 165.824509][ T7265] loop1: rw=0, sector=87824, nr_sectors = 8 limit=40427 [ 165.824549][ T7265] syz.1.21: attempt to access beyond end of device [ 165.824549][ T7265] loop1: rw=0, sector=87832, nr_sectors = 8 limit=40427 [ 165.824586][ T7265] syz.1.21: attempt to access beyond end of device [ 165.824586][ T7265] loop1: rw=0, sector=87840, nr_sectors = 8 limit=40427 [ 165.824618][ T7265] syz.1.21: attempt to access beyond end of device [ 165.824618][ T7265] loop1: rw=0, sector=87848, nr_sectors = 8 limit=40427 [ 165.824647][ T7265] syz.1.21: attempt to access beyond end of device [ 165.824647][ T7265] loop1: rw=0, sector=87856, nr_sectors = 8 limit=40427 [ 167.374147][ T6147] Bluetooth: hci5: command tx timeout [ 170.834135][ T7326] bio_check_eod: 330159 callbacks suppressed [ 170.834237][ T7265] syz.1.21: attempt to access beyond end of device [ 170.834237][ T7265] loop1: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 170.834286][ T7265] syz.1.21: attempt to access beyond end of device [ 170.834286][ T7265] loop1: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 170.834320][ T7265] syz.1.21: attempt to access beyond end of device [ 170.834320][ T7265] loop1: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 170.834347][ T7265] syz.1.21: attempt to access beyond end of device [ 170.834347][ T7265] loop1: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 170.834371][ T7265] syz.1.21: attempt to access beyond end of device [ 170.834371][ T7265] loop1: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 170.834394][ T7265] syz.1.21: attempt to access beyond end of device [ 170.834394][ T7265] loop1: rw=524288, sector=86096, nr_sectors = 8 limit=40427 [ 170.834418][ T7265] syz.1.21: attempt to access beyond end of device [ 170.834418][ T7265] loop1: rw=524288, sector=86104, nr_sectors = 8 limit=40427 [ 170.834440][ T7265] syz.1.21: attempt to access beyond end of device [ 170.834440][ T7265] loop1: rw=524288, sector=86112, nr_sectors = 8 limit=40427 [ 170.834462][ T7265] syz.1.21: attempt to access beyond end of device [ 170.834462][ T7265] loop1: rw=524288, sector=86120, nr_sectors = 8 limit=40427 [ 170.854938][ T7326] syz.3.24: attempt to access beyond end of device [ 170.854938][ T7326] loop3: rw=524288, sector=89584, nr_sectors = 8 limit=40427 [ 175.844212][ T7300] bio_check_eod: 326347 callbacks suppressed [ 175.845169][ T7300] syz.2.23: attempt to access beyond end of device [ 175.845169][ T7300] loop2: rw=0, sector=89072, nr_sectors = 8 limit=40427 [ 175.846157][ T7300] syz.2.23: attempt to access beyond end of device [ 175.846157][ T7300] loop2: rw=0, sector=89080, nr_sectors = 8 limit=40427 [ 175.846884][ T7300] syz.2.23: attempt to access beyond end of device [ 175.846884][ T7300] loop2: rw=0, sector=89088, nr_sectors = 8 limit=40427 [ 175.847631][ T7300] syz.2.23: attempt to access beyond end of device [ 175.847631][ T7300] loop2: rw=0, sector=89096, nr_sectors = 8 limit=40427 [ 175.848393][ T7300] syz.2.23: attempt to access beyond end of device [ 175.848393][ T7300] loop2: rw=0, sector=89104, nr_sectors = 8 limit=40427 [ 175.849146][ T7300] syz.2.23: attempt to access beyond end of device [ 175.849146][ T7300] loop2: rw=0, sector=89112, nr_sectors = 8 limit=40427 [ 175.849455][ T7300] syz.2.23: attempt to access beyond end of device [ 175.849455][ T7300] loop2: rw=0, sector=89120, nr_sectors = 8 limit=40427 [ 175.849481][ T7300] syz.2.23: attempt to access beyond end of device [ 175.849481][ T7300] loop2: rw=0, sector=89128, nr_sectors = 8 limit=40427 [ 175.849514][ T7300] syz.2.23: attempt to access beyond end of device [ 175.849514][ T7300] loop2: rw=0, sector=89136, nr_sectors = 8 limit=40427 [ 175.849539][ T7300] syz.2.23: attempt to access beyond end of device [ 175.849539][ T7300] loop2: rw=0, sector=89144, nr_sectors = 8 limit=40427 [ 180.287627][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 180.304336][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 180.314428][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 180.347629][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 180.351518][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 180.626210][ T7425] chnl_net:caif_netlink_parms(): no params data found [ 180.854151][ T7368] bio_check_eod: 299732 callbacks suppressed [ 180.855645][ T7326] syz.3.24: attempt to access beyond end of device [ 180.855645][ T7326] loop3: rw=0, sector=86640, nr_sectors = 8 limit=40427 [ 180.856830][ T7326] syz.3.24: attempt to access beyond end of device [ 180.856830][ T7326] loop3: rw=0, sector=86648, nr_sectors = 8 limit=40427 [ 180.857915][ T7326] syz.3.24: attempt to access beyond end of device [ 180.857915][ T7326] loop3: rw=0, sector=86656, nr_sectors = 8 limit=40427 [ 180.858977][ T7326] syz.3.24: attempt to access beyond end of device [ 180.858977][ T7326] loop3: rw=0, sector=86664, nr_sectors = 8 limit=40427 [ 180.859009][ T7326] syz.3.24: attempt to access beyond end of device [ 180.859009][ T7326] loop3: rw=0, sector=86672, nr_sectors = 8 limit=40427 [ 180.859034][ T7326] syz.3.24: attempt to access beyond end of device [ 180.859034][ T7326] loop3: rw=0, sector=86680, nr_sectors = 8 limit=40427 [ 180.859058][ T7326] syz.3.24: attempt to access beyond end of device [ 180.859058][ T7326] loop3: rw=0, sector=86688, nr_sectors = 8 limit=40427 [ 180.859087][ T7326] syz.3.24: attempt to access beyond end of device [ 180.859087][ T7326] loop3: rw=0, sector=86696, nr_sectors = 8 limit=40427 [ 180.859110][ T7326] syz.3.24: attempt to access beyond end of device [ 180.859110][ T7326] loop3: rw=0, sector=86704, nr_sectors = 8 limit=40427 [ 180.877427][ T7368] syz.4.25: attempt to access beyond end of device [ 180.877427][ T7368] loop4: rw=524288, sector=86928, nr_sectors = 8 limit=40427 [ 180.968497][ T7425] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.968576][ T7425] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.968644][ T7425] bridge_slave_0: entered allmulticast mode [ 180.969086][ T7425] bridge_slave_0: entered promiscuous mode [ 180.969733][ T7425] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.969754][ T7425] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.969807][ T7425] bridge_slave_1: entered allmulticast mode [ 180.970247][ T7425] bridge_slave_1: entered promiscuous mode [ 181.117430][ T7425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.118401][ T7425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.223456][ T7425] team0: Port device team_slave_0 added [ 181.225561][ T7425] team0: Port device team_slave_1 added [ 181.326331][ T7425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.327615][ T7425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.327668][ T7425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.328327][ T7425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.328339][ T7425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.328358][ T7425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.431127][ T7425] hsr_slave_0: entered promiscuous mode [ 181.431535][ T7425] hsr_slave_1: entered promiscuous mode [ 181.431745][ T7425] debugfs: 'hsr0' already exists in 'hsr' [ 181.431755][ T7425] Cannot create hsr debugfs directory [ 182.035595][ T7425] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 182.049282][ T7425] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 182.090435][ T7425] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 182.148304][ T7425] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 182.380669][ T7425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.428688][ T6147] Bluetooth: hci6: command tx timeout [ 182.433409][ T7425] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.437056][ T7404] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.437103][ T7404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.438760][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.438786][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.807226][ T7425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.205109][ T7425] veth0_vlan: entered promiscuous mode [ 183.211394][ T7425] veth1_vlan: entered promiscuous mode [ 183.270942][ T7425] veth0_macvtap: entered promiscuous mode [ 183.271972][ T7425] veth1_macvtap: entered promiscuous mode [ 183.288599][ T7425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.289632][ T7425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.292469][ T1956] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.334553][ T1956] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.334680][ T1956] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.334717][ T1956] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.460115][ T1956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.460151][ T1956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.514209][ T4830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.514246][ T4830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:03:03 executed programs: 14 [ 184.208462][ T7457] loop6: detected capacity change from 0 to 40427 [ 184.218082][ T7457] F2FS-fs (loop6): build fault injection rate: 771 [ 184.220211][ T7457] F2FS-fs (loop6): invalid crc value [ 184.285404][ T7457] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 184.306381][ T7457] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 184.496465][ T6147] Bluetooth: hci6: command tx timeout [ 184.604409][ T7425] CPU: 1 UID: 0 PID: 7425 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 184.604434][ T7425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 184.604443][ T7425] Call trace: [ 184.604447][ T7425] show_stack+0x2c/0x3c (C) [ 184.604466][ T7425] __dump_stack+0x30/0x40 [ 184.604477][ T7425] dump_stack_lvl+0xd8/0x12c [ 184.604483][ T7425] dump_stack+0x1c/0x28 [ 184.604488][ T7425] f2fs_handle_critical_error+0x34c/0x4b8 [ 184.604497][ T7425] f2fs_stop_checkpoint+0x5c/0x70 [ 184.604503][ T7425] f2fs_write_end_io+0x768/0xa70 [ 184.604510][ T7425] bio_endio+0x858/0x894 [ 184.604516][ T7425] submit_bio_noacct+0xd64/0x186c [ 184.604523][ T7425] submit_bio+0x3b4/0x550 [ 184.604529][ T7425] f2fs_submit_write_bio+0x13c/0x324 [ 184.604534][ T7425] __submit_merged_bio+0x254/0x704 [ 184.604540][ T7425] __submit_merged_write_cond+0x23c/0x4ac [ 184.604546][ T7425] f2fs_write_data_pages+0x1d28/0x2634 [ 184.604552][ T7425] do_writepages+0x270/0x468 [ 184.604560][ T7425] filemap_fdatawrite+0x14c/0x1f4 [ 184.604565][ T7425] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 184.604570][ T7425] f2fs_write_checkpoint+0x70c/0x1c30 [ 184.604575][ T7425] kill_f2fs_super+0x228/0x594 [ 184.604581][ T7425] deactivate_locked_super+0xc4/0x12c [ 184.604588][ T7425] deactivate_super+0xe0/0x100 [ 184.604594][ T7425] cleanup_mnt+0x31c/0x3ac [ 184.604600][ T7425] __cleanup_mnt+0x20/0x30 [ 184.604607][ T7425] task_work_run+0x1dc/0x260 [ 184.604613][ T7425] exit_to_user_mode_loop+0xfc/0x178 [ 184.604620][ T7425] el0_svc+0x170/0x254 [ 184.604627][ T7425] el0t_64_sync_handler+0x84/0x12c [ 184.604633][ T7425] el0t_64_sync+0x198/0x19c [ 184.605444][ T7425] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 185.572343][ T7419] F2FS-fs (loop5): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 185.591923][ T7463] loop6: detected capacity change from 0 to 40427 [ 185.618750][ T7463] F2FS-fs (loop6): build fault injection rate: 771 [ 185.621100][ T7463] F2FS-fs (loop6): invalid crc value [ 185.661549][ T7463] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 185.667377][ T7463] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 185.865600][ T7368] bio_check_eod: 289285 callbacks suppressed [ 185.865642][ T7368] syz.4.25: attempt to access beyond end of device [ 185.865642][ T7368] loop4: rw=524288, sector=86280, nr_sectors = 8 limit=40427 [ 185.865684][ T7368] syz.4.25: attempt to access beyond end of device [ 185.865684][ T7368] loop4: rw=524288, sector=86288, nr_sectors = 8 limit=40427 [ 185.865715][ T7368] syz.4.25: attempt to access beyond end of device [ 185.865715][ T7368] loop4: rw=524288, sector=86296, nr_sectors = 8 limit=40427 [ 185.865742][ T7368] syz.4.25: attempt to access beyond end of device [ 185.865742][ T7368] loop4: rw=524288, sector=86304, nr_sectors = 8 limit=40427 [ 185.865769][ T7368] syz.4.25: attempt to access beyond end of device [ 185.865769][ T7368] loop4: rw=524288, sector=86312, nr_sectors = 8 limit=40427 [ 185.865795][ T7368] syz.4.25: attempt to access beyond end of device [ 185.865795][ T7368] loop4: rw=524288, sector=86320, nr_sectors = 8 limit=40427 [ 185.865822][ T7368] syz.4.25: attempt to access beyond end of device [ 185.865822][ T7368] loop4: rw=524288, sector=86328, nr_sectors = 8 limit=40427 [ 185.865848][ T7368] syz.4.25: attempt to access beyond end of device [ 185.865848][ T7368] loop4: rw=524288, sector=86336, nr_sectors = 8 limit=40427 [ 185.865873][ T7368] syz.4.25: attempt to access beyond end of device [ 185.865873][ T7368] loop4: rw=524288, sector=86344, nr_sectors = 8 limit=40427 [ 185.865898][ T7368] syz.4.25: attempt to access beyond end of device [ 185.865898][ T7368] loop4: rw=524288, sector=86352, nr_sectors = 8 limit=40427 [ 186.585501][ T6147] Bluetooth: hci6: command tx timeout [ 187.377616][ T2454] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.378817][ T2454] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.657189][ T6147] Bluetooth: hci6: command tx timeout [ 190.874211][ T7419] bio_check_eod: 333695 callbacks suppressed [ 190.880003][ T7419] syz.5.28: attempt to access beyond end of device [ 190.880003][ T7419] loop5: rw=524288, sector=87984, nr_sectors = 8 limit=40427 [ 190.880135][ T7419] syz.5.28: attempt to access beyond end of device [ 190.880135][ T7419] loop5: rw=524288, sector=87992, nr_sectors = 8 limit=40427 [ 190.880191][ T7419] syz.5.28: attempt to access beyond end of device [ 190.880191][ T7419] loop5: rw=524288, sector=88000, nr_sectors = 8 limit=40427 [ 190.880242][ T7419] syz.5.28: attempt to access beyond end of device [ 190.880242][ T7419] loop5: rw=524288, sector=88008, nr_sectors = 8 limit=40427 [ 190.880279][ T7419] syz.5.28: attempt to access beyond end of device [ 190.880279][ T7419] loop5: rw=524288, sector=88016, nr_sectors = 8 limit=40427 [ 190.880310][ T7419] syz.5.28: attempt to access beyond end of device [ 190.880310][ T7419] loop5: rw=524288, sector=88024, nr_sectors = 8 limit=40427 [ 190.880339][ T7419] syz.5.28: attempt to access beyond end of device [ 190.880339][ T7419] loop5: rw=524288, sector=88032, nr_sectors = 8 limit=40427 [ 190.880366][ T7419] syz.5.28: attempt to access beyond end of device [ 190.880366][ T7419] loop5: rw=524288, sector=88040, nr_sectors = 8 limit=40427 [ 190.880393][ T7419] syz.5.28: attempt to access beyond end of device [ 190.880393][ T7419] loop5: rw=524288, sector=88048, nr_sectors = 8 limit=40427 [ 190.880420][ T7419] syz.5.28: attempt to access beyond end of device [ 190.880420][ T7419] loop5: rw=524288, sector=88056, nr_sectors = 8 limit=40427 [ 194.587799][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 195.884302][ T7265] bio_check_eod: 314453 callbacks suppressed [ 195.886571][ T7265] syz.1.21: attempt to access beyond end of device [ 195.886571][ T7265] loop1: rw=0, sector=89176, nr_sectors = 8 limit=40427 [ 195.888012][ T7265] syz.1.21: attempt to access beyond end of device [ 195.888012][ T7265] loop1: rw=0, sector=89184, nr_sectors = 8 limit=40427 [ 195.889290][ T7265] syz.1.21: attempt to access beyond end of device [ 195.889290][ T7265] loop1: rw=0, sector=89192, nr_sectors = 8 limit=40427 [ 195.890456][ T7265] syz.1.21: attempt to access beyond end of device [ 195.890456][ T7265] loop1: rw=0, sector=89200, nr_sectors = 8 limit=40427 [ 195.891577][ T7265] syz.1.21: attempt to access beyond end of device [ 195.891577][ T7265] loop1: rw=0, sector=89208, nr_sectors = 8 limit=40427 [ 195.892584][ T7265] syz.1.21: attempt to access beyond end of device [ 195.892584][ T7265] loop1: rw=0, sector=89216, nr_sectors = 8 limit=40427 [ 195.893490][ T7265] syz.1.21: attempt to access beyond end of device [ 195.893490][ T7265] loop1: rw=0, sector=89224, nr_sectors = 8 limit=40427 [ 195.894153][ T7265] syz.1.21: attempt to access beyond end of device [ 195.894153][ T7265] loop1: rw=0, sector=89232, nr_sectors = 8 limit=40427 [ 195.895020][ T7265] syz.1.21: attempt to access beyond end of device [ 195.895020][ T7265] loop1: rw=0, sector=89240, nr_sectors = 8 limit=40427 [ 195.895860][ T7265] syz.1.21: attempt to access beyond end of device [ 195.895860][ T7265] loop1: rw=0, sector=89248, nr_sectors = 8 limit=40427 [ 199.703424][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 199.744338][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 199.754179][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 199.779403][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 199.786355][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 200.415826][ T7476] chnl_net:caif_netlink_parms(): no params data found [ 200.732379][ T7476] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.733924][ T7476] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.734171][ T7476] bridge_slave_0: entered allmulticast mode [ 200.734884][ T7476] bridge_slave_0: entered promiscuous mode [ 200.778591][ T7476] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.778702][ T7476] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.778798][ T7476] bridge_slave_1: entered allmulticast mode [ 200.779330][ T7476] bridge_slave_1: entered promiscuous mode [ 200.894214][ T7300] bio_check_eod: 316673 callbacks suppressed [ 200.895360][ T7300] syz.2.23: attempt to access beyond end of device [ 200.895360][ T7300] loop2: rw=0, sector=88384, nr_sectors = 8 limit=40427 [ 200.897649][ T7300] syz.2.23: attempt to access beyond end of device [ 200.897649][ T7300] loop2: rw=0, sector=88392, nr_sectors = 8 limit=40427 [ 200.898601][ T7326] syz.3.24: attempt to access beyond end of device [ 200.898601][ T7326] loop3: rw=0, sector=88352, nr_sectors = 8 limit=40427 [ 200.898639][ T7326] syz.3.24: attempt to access beyond end of device [ 200.898639][ T7326] loop3: rw=0, sector=88360, nr_sectors = 8 limit=40427 [ 200.898665][ T7326] syz.3.24: attempt to access beyond end of device [ 200.898665][ T7326] loop3: rw=0, sector=88368, nr_sectors = 8 limit=40427 [ 200.898690][ T7326] syz.3.24: attempt to access beyond end of device [ 200.898690][ T7326] loop3: rw=0, sector=88376, nr_sectors = 8 limit=40427 [ 200.898713][ T7326] syz.3.24: attempt to access beyond end of device [ 200.898713][ T7326] loop3: rw=0, sector=88384, nr_sectors = 8 limit=40427 [ 200.898735][ T7326] syz.3.24: attempt to access beyond end of device [ 200.898735][ T7326] loop3: rw=0, sector=88392, nr_sectors = 8 limit=40427 [ 200.898757][ T7326] syz.3.24: attempt to access beyond end of device [ 200.898757][ T7326] loop3: rw=0, sector=88400, nr_sectors = 8 limit=40427 [ 200.898779][ T7326] syz.3.24: attempt to access beyond end of device [ 200.898779][ T7326] loop3: rw=0, sector=88408, nr_sectors = 8 limit=40427 [ 201.041092][ T7476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.042179][ T7476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.407012][ T7476] team0: Port device team_slave_0 added [ 201.407927][ T7476] team0: Port device team_slave_1 added [ 201.587454][ T7476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.597015][ T7476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.602466][ T7476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.605090][ T7476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.605111][ T7476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.605129][ T7476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.786039][ T7476] hsr_slave_0: entered promiscuous mode [ 201.801507][ T7476] hsr_slave_1: entered promiscuous mode [ 201.804247][ T7476] debugfs: 'hsr0' already exists in 'hsr' [ 201.804276][ T7476] Cannot create hsr debugfs directory [ 201.855836][ T6147] Bluetooth: hci7: command tx timeout [ 202.231450][ T7476] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 202.266126][ T7476] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 202.267662][ T7476] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 202.268866][ T7476] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 202.453876][ T7476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.538005][ T7476] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.555843][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.555892][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.556439][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.556466][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.639040][ T7476] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 202.644176][ T7476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.968440][ T7476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.331965][ T7476] veth0_vlan: entered promiscuous mode [ 203.356372][ T7476] veth1_vlan: entered promiscuous mode [ 203.429868][ T7476] veth0_macvtap: entered promiscuous mode [ 203.469719][ T7476] veth1_macvtap: entered promiscuous mode [ 203.473139][ T7476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.506398][ T7476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.513057][ T7404] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.517453][ T7496] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.517538][ T7496] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.517621][ T7496] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.626156][ T7404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.631166][ T7404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.686434][ T7496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.687911][ T7496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:03:23 executed programs: 16 [ 203.935449][ T6147] Bluetooth: hci7: command tx timeout [ 204.610124][ T7508] loop7: detected capacity change from 0 to 40427 [ 204.659374][ T7508] F2FS-fs (loop7): build fault injection rate: 771 [ 204.667496][ T7508] F2FS-fs (loop7): invalid crc value [ 204.723187][ T7508] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 204.774140][ T7508] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 205.904123][ T7419] bio_check_eod: 289039 callbacks suppressed [ 205.904165][ T7419] syz.5.28: attempt to access beyond end of device [ 205.904165][ T7419] loop5: rw=524288, sector=87712, nr_sectors = 8 limit=40427 [ 205.904212][ T7419] syz.5.28: attempt to access beyond end of device [ 205.904212][ T7419] loop5: rw=524288, sector=87720, nr_sectors = 8 limit=40427 [ 205.904243][ T7419] syz.5.28: attempt to access beyond end of device [ 205.904243][ T7419] loop5: rw=524288, sector=87728, nr_sectors = 8 limit=40427 [ 205.904268][ T7419] syz.5.28: attempt to access beyond end of device [ 205.904268][ T7419] loop5: rw=524288, sector=87736, nr_sectors = 8 limit=40427 [ 205.904290][ T7419] syz.5.28: attempt to access beyond end of device [ 205.904290][ T7419] loop5: rw=524288, sector=87744, nr_sectors = 8 limit=40427 [ 205.904312][ T7419] syz.5.28: attempt to access beyond end of device [ 205.904312][ T7419] loop5: rw=524288, sector=87752, nr_sectors = 8 limit=40427 [ 205.904335][ T7419] syz.5.28: attempt to access beyond end of device [ 205.904335][ T7419] loop5: rw=524288, sector=87760, nr_sectors = 8 limit=40427 [ 205.904358][ T7419] syz.5.28: attempt to access beyond end of device [ 205.904358][ T7419] loop5: rw=524288, sector=87768, nr_sectors = 8 limit=40427 [ 205.904380][ T7419] syz.5.28: attempt to access beyond end of device [ 205.904380][ T7419] loop5: rw=524288, sector=87776, nr_sectors = 8 limit=40427 [ 205.904401][ T7419] syz.5.28: attempt to access beyond end of device [ 205.904401][ T7419] loop5: rw=524288, sector=87784, nr_sectors = 8 limit=40427 [ 206.015298][ T6147] Bluetooth: hci7: command tx timeout [ 208.099971][ T6147] Bluetooth: hci7: command tx timeout [ 210.920255][ T7265] bio_check_eod: 300033 callbacks suppressed [ 210.921115][ T7265] syz.1.21: attempt to access beyond end of device [ 210.921115][ T7265] loop1: rw=0, sector=86528, nr_sectors = 8 limit=40427 [ 210.921881][ T7265] syz.1.21: attempt to access beyond end of device [ 210.921881][ T7265] loop1: rw=0, sector=86536, nr_sectors = 8 limit=40427 [ 210.922611][ T7265] syz.1.21: attempt to access beyond end of device [ 210.922611][ T7265] loop1: rw=0, sector=86544, nr_sectors = 8 limit=40427 [ 210.923365][ T7265] syz.1.21: attempt to access beyond end of device [ 210.923365][ T7265] loop1: rw=0, sector=86552, nr_sectors = 8 limit=40427 [ 210.924107][ T7265] syz.1.21: attempt to access beyond end of device [ 210.924107][ T7265] loop1: rw=0, sector=86560, nr_sectors = 8 limit=40427 [ 210.924136][ T7265] syz.1.21: attempt to access beyond end of device [ 210.924136][ T7265] loop1: rw=0, sector=86568, nr_sectors = 8 limit=40427 [ 210.924159][ T7265] syz.1.21: attempt to access beyond end of device [ 210.924159][ T7265] loop1: rw=0, sector=86576, nr_sectors = 8 limit=40427 [ 210.924182][ T7265] syz.1.21: attempt to access beyond end of device [ 210.924182][ T7265] loop1: rw=0, sector=86584, nr_sectors = 8 limit=40427 [ 210.924204][ T7265] syz.1.21: attempt to access beyond end of device [ 210.924204][ T7265] loop1: rw=0, sector=86592, nr_sectors = 8 limit=40427 [ 210.924237][ T7265] syz.1.21: attempt to access beyond end of device [ 210.924237][ T7265] loop1: rw=0, sector=86600, nr_sectors = 8 limit=40427 [ 213.247718][ T7463] F2FS-fs (loop6): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 215.064412][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 215.924252][ T7326] bio_check_eod: 311746 callbacks suppressed [ 215.924316][ T7326] syz.3.24: attempt to access beyond end of device [ 215.924316][ T7326] loop3: rw=524288, sector=89648, nr_sectors = 8 limit=40427 [ 215.924375][ T7326] syz.3.24: attempt to access beyond end of device [ 215.924375][ T7326] loop3: rw=524288, sector=89656, nr_sectors = 8 limit=40427 [ 215.924418][ T7326] syz.3.24: attempt to access beyond end of device [ 215.924418][ T7326] loop3: rw=524288, sector=89664, nr_sectors = 8 limit=40427 [ 215.924459][ T7326] syz.3.24: attempt to access beyond end of device [ 215.924459][ T7326] loop3: rw=524288, sector=89672, nr_sectors = 8 limit=40427 [ 215.924495][ T7326] syz.3.24: attempt to access beyond end of device [ 215.924495][ T7326] loop3: rw=524288, sector=89680, nr_sectors = 8 limit=40427 [ 215.924533][ T7326] syz.3.24: attempt to access beyond end of device [ 215.924533][ T7326] loop3: rw=524288, sector=89688, nr_sectors = 8 limit=40427 [ 215.924568][ T7326] syz.3.24: attempt to access beyond end of device [ 215.924568][ T7326] loop3: rw=524288, sector=89696, nr_sectors = 8 limit=40427 [ 215.924602][ T7326] syz.3.24: attempt to access beyond end of device [ 215.924602][ T7326] loop3: rw=524288, sector=89704, nr_sectors = 8 limit=40427 [ 215.924631][ T7326] syz.3.24: attempt to access beyond end of device [ 215.924631][ T7326] loop3: rw=524288, sector=89712, nr_sectors = 8 limit=40427 [ 215.924665][ T7326] syz.3.24: attempt to access beyond end of device [ 215.924665][ T7326] loop3: rw=524288, sector=89720, nr_sectors = 8 limit=40427 [ 219.871484][ T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 219.966186][ T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 219.967603][ T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 219.977831][ T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 219.978298][ T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 220.627741][ T7515] chnl_net:caif_netlink_parms(): no params data found [ 220.934342][ T7235] bio_check_eod: 314180 callbacks suppressed [ 220.935678][ T7235] syz.0.20: attempt to access beyond end of device [ 220.935678][ T7235] loop0: rw=0, sector=86592, nr_sectors = 8 limit=40427 [ 220.936944][ T7235] syz.0.20: attempt to access beyond end of device [ 220.936944][ T7235] loop0: rw=0, sector=86600, nr_sectors = 8 limit=40427 [ 220.936979][ T7235] syz.0.20: attempt to access beyond end of device [ 220.936979][ T7235] loop0: rw=0, sector=86608, nr_sectors = 8 limit=40427 [ 220.937010][ T7235] syz.0.20: attempt to access beyond end of device [ 220.937010][ T7235] loop0: rw=0, sector=86616, nr_sectors = 8 limit=40427 [ 220.937040][ T7235] syz.0.20: attempt to access beyond end of device [ 220.937040][ T7235] loop0: rw=0, sector=86624, nr_sectors = 8 limit=40427 [ 220.937068][ T7235] syz.0.20: attempt to access beyond end of device [ 220.937068][ T7235] loop0: rw=0, sector=86632, nr_sectors = 8 limit=40427 [ 220.937101][ T7235] syz.0.20: attempt to access beyond end of device [ 220.937101][ T7235] loop0: rw=0, sector=86640, nr_sectors = 8 limit=40427 [ 220.937126][ T7235] syz.0.20: attempt to access beyond end of device [ 220.937126][ T7235] loop0: rw=0, sector=86648, nr_sectors = 8 limit=40427 [ 220.937149][ T7235] syz.0.20: attempt to access beyond end of device [ 220.937149][ T7235] loop0: rw=0, sector=86656, nr_sectors = 8 limit=40427 [ 220.937171][ T7235] syz.0.20: attempt to access beyond end of device [ 220.937171][ T7235] loop0: rw=0, sector=86664, nr_sectors = 8 limit=40427 [ 221.343641][ T7515] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.354215][ T7515] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.354431][ T7515] bridge_slave_0: entered allmulticast mode [ 221.355303][ T7515] bridge_slave_0: entered promiscuous mode [ 221.366119][ T7515] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.366139][ T7515] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.366245][ T7515] bridge_slave_1: entered allmulticast mode [ 221.374755][ T7515] bridge_slave_1: entered promiscuous mode [ 221.693614][ T7515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.726648][ T7515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.877362][ T7515] team0: Port device team_slave_0 added [ 221.879289][ T7515] team0: Port device team_slave_1 added [ 222.014330][ T53] Bluetooth: hci8: command tx timeout [ 222.132085][ T7515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.132118][ T7515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.137886][ T7515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.140841][ T7515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.140876][ T7515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.140901][ T7515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.266562][ T7515] hsr_slave_0: entered promiscuous mode [ 222.266927][ T7515] hsr_slave_1: entered promiscuous mode [ 222.267127][ T7515] debugfs: 'hsr0' already exists in 'hsr' [ 222.267137][ T7515] Cannot create hsr debugfs directory [ 223.117370][ T7515] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 223.185149][ T7515] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 223.247438][ T7515] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 223.297294][ T7515] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 223.503585][ T7515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.551821][ T7515] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.612896][ T1956] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.612950][ T1956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.613468][ T1956] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.613499][ T1956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.622016][ T7515] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 223.622048][ T7515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.939700][ T7515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.104076][ T53] Bluetooth: hci8: command tx timeout [ 224.271752][ T7515] veth0_vlan: entered promiscuous mode [ 224.333141][ T7515] veth1_vlan: entered promiscuous mode [ 224.381020][ T7515] veth0_macvtap: entered promiscuous mode [ 224.428715][ T7515] veth1_macvtap: entered promiscuous mode [ 224.436276][ T7515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.491596][ T7515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.590024][ T4830] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.590074][ T4830] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.590091][ T4830] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.590107][ T4830] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.775171][ T7546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.775208][ T7546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.819600][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.820900][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:03:45 executed programs: 17 [ 225.767367][ T7548] loop8: detected capacity change from 0 to 40427 [ 225.770185][ T7548] F2FS-fs (loop8): build fault injection rate: 771 [ 225.772197][ T7548] F2FS-fs (loop8): invalid crc value [ 225.847811][ T7548] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 225.864464][ T7548] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 225.944108][ T7300] bio_check_eod: 298018 callbacks suppressed [ 225.944155][ T7300] syz.2.23: attempt to access beyond end of device [ 225.944155][ T7300] loop2: rw=524288, sector=87616, nr_sectors = 8 limit=40427 [ 225.944186][ T7300] syz.2.23: attempt to access beyond end of device [ 225.944186][ T7300] loop2: rw=524288, sector=87624, nr_sectors = 8 limit=40427 [ 225.944213][ T7300] syz.2.23: attempt to access beyond end of device [ 225.944213][ T7300] loop2: rw=524288, sector=87632, nr_sectors = 8 limit=40427 [ 225.944244][ T7300] syz.2.23: attempt to access beyond end of device [ 225.944244][ T7300] loop2: rw=524288, sector=87640, nr_sectors = 8 limit=40427 [ 225.944270][ T7300] syz.2.23: attempt to access beyond end of device [ 225.944270][ T7300] loop2: rw=524288, sector=87648, nr_sectors = 8 limit=40427 [ 225.944293][ T7300] syz.2.23: attempt to access beyond end of device [ 225.944293][ T7300] loop2: rw=524288, sector=87656, nr_sectors = 8 limit=40427 [ 225.944315][ T7300] syz.2.23: attempt to access beyond end of device [ 225.944315][ T7300] loop2: rw=524288, sector=87664, nr_sectors = 8 limit=40427 [ 225.944338][ T7300] syz.2.23: attempt to access beyond end of device [ 225.944338][ T7300] loop2: rw=524288, sector=87672, nr_sectors = 8 limit=40427 [ 225.944372][ T7300] syz.2.23: attempt to access beyond end of device [ 225.944372][ T7300] loop2: rw=524288, sector=87680, nr_sectors = 8 limit=40427 [ 225.944395][ T7300] syz.2.23: attempt to access beyond end of device [ 225.944395][ T7300] loop2: rw=524288, sector=87688, nr_sectors = 8 limit=40427 [ 226.177728][ T53] Bluetooth: hci8: command tx timeout [ 226.225269][ T7515] CPU: 1 UID: 0 PID: 7515 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 226.225292][ T7515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 226.225299][ T7515] Call trace: [ 226.225303][ T7515] show_stack+0x2c/0x3c (C) [ 226.225321][ T7515] __dump_stack+0x30/0x40 [ 226.225327][ T7515] dump_stack_lvl+0xd8/0x12c [ 226.225333][ T7515] dump_stack+0x1c/0x28 [ 226.225337][ T7515] f2fs_handle_critical_error+0x34c/0x4b8 [ 226.225346][ T7515] f2fs_stop_checkpoint+0x5c/0x70 [ 226.225351][ T7515] f2fs_write_end_io+0x768/0xa70 [ 226.225358][ T7515] bio_endio+0x858/0x894 [ 226.225363][ T7515] submit_bio_noacct+0xd64/0x186c [ 226.225370][ T7515] submit_bio+0x3b4/0x550 [ 226.225376][ T7515] f2fs_submit_write_bio+0x13c/0x324 [ 226.225382][ T7515] __submit_merged_bio+0x254/0x704 [ 226.225388][ T7515] __submit_merged_write_cond+0x23c/0x4ac [ 226.225393][ T7515] f2fs_write_data_pages+0x1d28/0x2634 [ 226.225400][ T7515] do_writepages+0x270/0x468 [ 226.225408][ T7515] filemap_fdatawrite+0x14c/0x1f4 [ 226.225412][ T7515] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 226.225418][ T7515] f2fs_write_checkpoint+0x70c/0x1c30 [ 226.225423][ T7515] kill_f2fs_super+0x228/0x594 [ 226.225429][ T7515] deactivate_locked_super+0xc4/0x12c [ 226.225436][ T7515] deactivate_super+0xe0/0x100 [ 226.225442][ T7515] cleanup_mnt+0x31c/0x3ac [ 226.225448][ T7515] __cleanup_mnt+0x20/0x30 [ 226.225454][ T7515] task_work_run+0x1dc/0x260 [ 226.225461][ T7515] exit_to_user_mode_loop+0xfc/0x178 [ 226.225468][ T7515] el0_svc+0x170/0x254 [ 226.225476][ T7515] el0t_64_sync_handler+0x84/0x12c [ 226.225482][ T7515] el0t_64_sync+0x198/0x19c [ 226.226655][ T7515] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 227.431836][ T7554] loop8: detected capacity change from 0 to 40427 [ 227.524174][ T7554] F2FS-fs (loop8): build fault injection rate: 771 [ 227.544169][ T7554] F2FS-fs (loop8): invalid crc value [ 227.666954][ T7554] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 227.687678][ T7554] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 228.274425][ T53] Bluetooth: hci8: command tx timeout [ 230.425313][ T6147] Bluetooth: hci2: command 0x0406 tx timeout [ 230.954561][ T7419] bio_check_eod: 299468 callbacks suppressed [ 230.958229][ T7300] syz.2.23: attempt to access beyond end of device [ 230.958229][ T7300] loop2: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 230.958795][ T7419] syz.5.28: attempt to access beyond end of device [ 230.958795][ T7419] loop5: rw=0, sector=88760, nr_sectors = 8 limit=40427 [ 230.958873][ T7419] syz.5.28: attempt to access beyond end of device [ 230.958873][ T7419] loop5: rw=0, sector=88768, nr_sectors = 8 limit=40427 [ 230.958906][ T7419] syz.5.28: attempt to access beyond end of device [ 230.958906][ T7419] loop5: rw=0, sector=88776, nr_sectors = 8 limit=40427 [ 230.958932][ T7419] syz.5.28: attempt to access beyond end of device [ 230.958932][ T7419] loop5: rw=0, sector=88784, nr_sectors = 8 limit=40427 [ 230.958956][ T7419] syz.5.28: attempt to access beyond end of device [ 230.958956][ T7419] loop5: rw=0, sector=88792, nr_sectors = 8 limit=40427 [ 230.958985][ T7419] syz.5.28: attempt to access beyond end of device [ 230.958985][ T7419] loop5: rw=0, sector=88800, nr_sectors = 8 limit=40427 [ 230.959013][ T7419] syz.5.28: attempt to access beyond end of device [ 230.959013][ T7419] loop5: rw=0, sector=88808, nr_sectors = 8 limit=40427 [ 230.959036][ T7419] syz.5.28: attempt to access beyond end of device [ 230.959036][ T7419] loop5: rw=0, sector=88816, nr_sectors = 8 limit=40427 [ 230.959058][ T7419] syz.5.28: attempt to access beyond end of device [ 230.959058][ T7419] loop5: rw=0, sector=88824, nr_sectors = 8 limit=40427 [ 234.777992][ T7508] F2FS-fs (loop7): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 235.964175][ T7265] bio_check_eod: 314875 callbacks suppressed [ 235.964231][ T7265] syz.1.21: attempt to access beyond end of device [ 235.964231][ T7265] loop1: rw=524288, sector=89592, nr_sectors = 8 limit=40427 [ 235.964291][ T7265] syz.1.21: attempt to access beyond end of device [ 235.964291][ T7265] loop1: rw=524288, sector=89600, nr_sectors = 8 limit=40427 [ 235.964339][ T7265] syz.1.21: attempt to access beyond end of device [ 235.964339][ T7265] loop1: rw=524288, sector=89608, nr_sectors = 8 limit=40427 [ 235.964369][ T7300] syz.2.23: attempt to access beyond end of device [ 235.964369][ T7300] loop2: rw=524288, sector=87120, nr_sectors = 8 limit=40427 [ 235.964377][ T7265] syz.1.21: attempt to access beyond end of device [ 235.964377][ T7265] loop1: rw=524288, sector=89616, nr_sectors = 8 limit=40427 [ 235.964409][ T7265] syz.1.21: attempt to access beyond end of device [ 235.964409][ T7265] loop1: rw=524288, sector=89624, nr_sectors = 8 limit=40427 [ 235.964447][ T7265] syz.1.21: attempt to access beyond end of device [ 235.964447][ T7265] loop1: rw=524288, sector=89632, nr_sectors = 8 limit=40427 [ 235.964484][ T7265] syz.1.21: attempt to access beyond end of device [ 235.964484][ T7265] loop1: rw=524288, sector=89640, nr_sectors = 8 limit=40427 [ 235.964520][ T7265] syz.1.21: attempt to access beyond end of device [ 235.964520][ T7265] loop1: rw=524288, sector=89648, nr_sectors = 8 limit=40427 [ 235.964551][ T7265] syz.1.21: attempt to access beyond end of device [ 235.964551][ T7265] loop1: rw=524288, sector=89656, nr_sectors = 8 limit=40427 [ 240.975044][ T7265] bio_check_eod: 342114 callbacks suppressed [ 240.975118][ T7265] syz.1.21: attempt to access beyond end of device [ 240.975118][ T7265] loop1: rw=0, sector=89104, nr_sectors = 8 limit=40427 [ 240.975196][ T7265] syz.1.21: attempt to access beyond end of device [ 240.975196][ T7265] loop1: rw=0, sector=89112, nr_sectors = 8 limit=40427 [ 240.975244][ T7265] syz.1.21: attempt to access beyond end of device [ 240.975244][ T7265] loop1: rw=0, sector=89120, nr_sectors = 8 limit=40427 [ 240.975279][ T7265] syz.1.21: attempt to access beyond end of device [ 240.975279][ T7265] loop1: rw=0, sector=89128, nr_sectors = 8 limit=40427 [ 240.975313][ T7265] syz.1.21: attempt to access beyond end of device [ 240.975313][ T7265] loop1: rw=0, sector=89136, nr_sectors = 8 limit=40427 [ 240.975346][ T7265] syz.1.21: attempt to access beyond end of device [ 240.975346][ T7265] loop1: rw=0, sector=89144, nr_sectors = 8 limit=40427 [ 240.975375][ T7265] syz.1.21: attempt to access beyond end of device [ 240.975375][ T7265] loop1: rw=0, sector=89152, nr_sectors = 8 limit=40427 [ 240.975403][ T7265] syz.1.21: attempt to access beyond end of device [ 240.975403][ T7265] loop1: rw=0, sector=89160, nr_sectors = 8 limit=40427 [ 240.975429][ T7265] syz.1.21: attempt to access beyond end of device [ 240.975429][ T7265] loop1: rw=0, sector=89168, nr_sectors = 8 limit=40427 [ 240.975455][ T7265] syz.1.21: attempt to access beyond end of device [ 240.975455][ T7265] loop1: rw=0, sector=89176, nr_sectors = 8 limit=40427 [ 244.468091][ T6585] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 244.470061][ T7563] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 244.471865][ T7563] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 244.473500][ T7563] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 244.475348][ T7563] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 245.516932][ T7560] chnl_net:caif_netlink_parms(): no params data found [ 245.776126][ T7563] Bluetooth: hci3: command 0x0406 tx timeout [ 245.889665][ T7560] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.889707][ T7560] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.889791][ T7560] bridge_slave_0: entered allmulticast mode [ 245.890235][ T7560] bridge_slave_0: entered promiscuous mode [ 245.890870][ T7560] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.890895][ T7560] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.890956][ T7560] bridge_slave_1: entered allmulticast mode [ 245.891378][ T7560] bridge_slave_1: entered promiscuous mode [ 245.984189][ T7235] bio_check_eod: 304642 callbacks suppressed [ 245.985383][ T7235] syz.0.20: attempt to access beyond end of device [ 245.985383][ T7235] loop0: rw=524288, sector=89232, nr_sectors = 8 limit=40427 [ 245.987727][ T7235] syz.0.20: attempt to access beyond end of device [ 245.987727][ T7235] loop0: rw=524288, sector=89240, nr_sectors = 8 limit=40427 [ 245.990884][ T7235] syz.0.20: attempt to access beyond end of device [ 245.990884][ T7235] loop0: rw=524288, sector=89248, nr_sectors = 8 limit=40427 [ 245.990965][ T7368] syz.4.25: attempt to access beyond end of device [ 245.990965][ T7368] loop4: rw=0, sector=88576, nr_sectors = 8 limit=40427 [ 245.991024][ T7368] syz.4.25: attempt to access beyond end of device [ 245.991024][ T7368] loop4: rw=0, sector=88584, nr_sectors = 8 limit=40427 [ 245.991060][ T7368] syz.4.25: attempt to access beyond end of device [ 245.991060][ T7368] loop4: rw=0, sector=88592, nr_sectors = 8 limit=40427 [ 245.991086][ T7368] syz.4.25: attempt to access beyond end of device [ 245.991086][ T7368] loop4: rw=0, sector=88600, nr_sectors = 8 limit=40427 [ 245.991110][ T7368] syz.4.25: attempt to access beyond end of device [ 245.991110][ T7368] loop4: rw=0, sector=88608, nr_sectors = 8 limit=40427 [ 245.991133][ T7368] syz.4.25: attempt to access beyond end of device [ 245.991133][ T7368] loop4: rw=0, sector=88616, nr_sectors = 8 limit=40427 [ 245.991155][ T7368] syz.4.25: attempt to access beyond end of device [ 245.991155][ T7368] loop4: rw=0, sector=88624, nr_sectors = 8 limit=40427 [ 246.096578][ T7560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.098517][ T7560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.440487][ T7560] team0: Port device team_slave_0 added [ 246.441450][ T7560] team0: Port device team_slave_1 added [ 246.575231][ T53] Bluetooth: hci9: command tx timeout [ 246.718307][ T7560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.724098][ T7560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.724154][ T7560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.725047][ T7560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.725063][ T7560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.725084][ T7560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.130429][ T7560] hsr_slave_0: entered promiscuous mode [ 247.138872][ T7560] hsr_slave_1: entered promiscuous mode [ 247.140035][ T7560] debugfs: 'hsr0' already exists in 'hsr' [ 247.140056][ T7560] Cannot create hsr debugfs directory [ 247.996216][ T7560] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 248.065283][ T7560] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 248.069920][ T7560] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 248.072277][ T7560] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 248.322365][ T7560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.387931][ T7560] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.502088][ T7560] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.502128][ T7560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.515242][ T7522] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.515290][ T7522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.515827][ T7522] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.515849][ T7522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.673542][ T53] Bluetooth: hci9: command tx timeout [ 248.825886][ T2454] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.825942][ T2454] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.931751][ T7560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.522767][ T7560] veth0_vlan: entered promiscuous mode [ 249.635296][ T7560] veth1_vlan: entered promiscuous mode [ 249.641064][ T7560] veth0_macvtap: entered promiscuous mode [ 249.715490][ T7560] veth1_macvtap: entered promiscuous mode [ 249.720525][ T7560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.811914][ T7560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.886556][ T7546] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.888728][ T7546] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.890553][ T7546] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.892123][ T7546] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.159665][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.159697][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.270790][ T7522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.271703][ T7522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 1970/01/01 00:04:10 executed programs: 19 [ 250.754265][ T53] Bluetooth: hci9: command tx timeout [ 250.994160][ T7265] bio_check_eod: 312031 callbacks suppressed [ 250.994230][ T7265] syz.1.21: attempt to access beyond end of device [ 250.994230][ T7265] loop1: rw=524288, sector=89776, nr_sectors = 8 limit=40427 [ 250.994308][ T7368] syz.4.25: attempt to access beyond end of device [ 250.994308][ T7368] loop4: rw=0, sector=89768, nr_sectors = 8 limit=40427 [ 250.994312][ T7265] syz.1.21: attempt to access beyond end of device [ 250.994312][ T7265] loop1: rw=524288, sector=89784, nr_sectors = 8 limit=40427 [ 250.994363][ T7368] syz.4.25: attempt to access beyond end of device [ 250.994363][ T7368] loop4: rw=0, sector=89776, nr_sectors = 8 limit=40427 [ 250.994372][ T7265] syz.1.21: attempt to access beyond end of device [ 250.994372][ T7265] loop1: rw=524288, sector=89792, nr_sectors = 8 limit=40427 [ 250.994408][ T7368] syz.4.25: attempt to access beyond end of device [ 250.994408][ T7368] loop4: rw=0, sector=89784, nr_sectors = 8 limit=40427 [ 250.994411][ T7265] syz.1.21: attempt to access beyond end of device [ 250.994411][ T7265] loop1: rw=524288, sector=89800, nr_sectors = 8 limit=40427 [ 250.994437][ T7265] syz.1.21: attempt to access beyond end of device [ 250.994437][ T7265] loop1: rw=524288, sector=89808, nr_sectors = 8 limit=40427 [ 250.994444][ T7368] syz.4.25: attempt to access beyond end of device [ 250.994444][ T7368] loop4: rw=0, sector=89792, nr_sectors = 8 limit=40427 [ 250.994473][ T7265] syz.1.21: attempt to access beyond end of device [ 250.994473][ T7265] loop1: rw=524288, sector=89816, nr_sectors = 8 limit=40427 [ 251.423294][ T7594] loop9: detected capacity change from 0 to 40427 [ 251.478268][ T7594] F2FS-fs (loop9): build fault injection rate: 771 [ 251.494154][ T7594] F2FS-fs (loop9): invalid crc value [ 251.545611][ T7594] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 251.601815][ T7594] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 251.924297][ T7560] CPU: 0 UID: 0 PID: 7560 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 251.924325][ T7560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 251.924331][ T7560] Call trace: [ 251.924334][ T7560] show_stack+0x2c/0x3c (C) [ 251.924350][ T7560] __dump_stack+0x30/0x40 [ 251.924359][ T7560] dump_stack_lvl+0xd8/0x12c [ 251.924367][ T7560] dump_stack+0x1c/0x28 [ 251.924372][ T7560] f2fs_handle_critical_error+0x34c/0x4b8 [ 251.924382][ T7560] f2fs_stop_checkpoint+0x5c/0x70 [ 251.924387][ T7560] f2fs_write_end_io+0x768/0xa70 [ 251.924394][ T7560] bio_endio+0x858/0x894 [ 251.924400][ T7560] submit_bio_noacct+0xd64/0x186c [ 251.924407][ T7560] submit_bio+0x3b4/0x550 [ 251.924413][ T7560] f2fs_submit_write_bio+0x13c/0x324 [ 251.924419][ T7560] __submit_merged_bio+0x254/0x704 [ 251.924425][ T7560] __submit_merged_write_cond+0x23c/0x4ac [ 251.924431][ T7560] f2fs_write_data_pages+0x1d28/0x2634 [ 251.924437][ T7560] do_writepages+0x270/0x468 [ 251.924445][ T7560] filemap_fdatawrite+0x14c/0x1f4 [ 251.924450][ T7560] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 251.924456][ T7560] f2fs_write_checkpoint+0x70c/0x1c30 [ 251.924461][ T7560] kill_f2fs_super+0x228/0x594 [ 251.924467][ T7560] deactivate_locked_super+0xc4/0x12c [ 251.924474][ T7560] deactivate_super+0xe0/0x100 [ 251.924480][ T7560] cleanup_mnt+0x31c/0x3ac [ 251.924487][ T7560] __cleanup_mnt+0x20/0x30 [ 251.924493][ T7560] task_work_run+0x1dc/0x260 [ 251.924500][ T7560] exit_to_user_mode_loop+0xfc/0x178 [ 251.924507][ T7560] el0_svc+0x170/0x254 [ 251.924515][ T7560] el0t_64_sync_handler+0x84/0x12c [ 251.924522][ T7560] el0t_64_sync+0x198/0x19c [ 251.925280][ T7560] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 252.854374][ T53] Bluetooth: hci9: command tx timeout [ 253.389491][ T7600] loop9: detected capacity change from 0 to 40427 [ 253.494202][ T7600] F2FS-fs (loop9): build fault injection rate: 771 [ 253.510180][ T7600] F2FS-fs (loop9): invalid crc value [ 253.585272][ T7600] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 253.614189][ T7600] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 253.894571][ T7560] CPU: 1 UID: 0 PID: 7560 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 253.894599][ T7560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 253.894607][ T7560] Call trace: [ 253.894611][ T7560] show_stack+0x2c/0x3c (C) [ 253.894628][ T7560] __dump_stack+0x30/0x40 [ 253.894636][ T7560] dump_stack_lvl+0xd8/0x12c [ 253.894642][ T7560] dump_stack+0x1c/0x28 [ 253.894646][ T7560] f2fs_handle_critical_error+0x34c/0x4b8 [ 253.894656][ T7560] f2fs_stop_checkpoint+0x5c/0x70 [ 253.894662][ T7560] f2fs_write_end_io+0x768/0xa70 [ 253.894669][ T7560] bio_endio+0x858/0x894 [ 253.894675][ T7560] submit_bio_noacct+0xd64/0x186c [ 253.894683][ T7560] submit_bio+0x3b4/0x550 [ 253.894688][ T7560] f2fs_submit_write_bio+0x13c/0x324 [ 253.894695][ T7560] __submit_merged_bio+0x254/0x704 [ 253.894700][ T7560] __submit_merged_write_cond+0x23c/0x4ac [ 253.894706][ T7560] f2fs_write_data_pages+0x1d28/0x2634 [ 253.894713][ T7560] do_writepages+0x270/0x468 [ 253.894722][ T7560] filemap_fdatawrite+0x14c/0x1f4 [ 253.894726][ T7560] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 253.894732][ T7560] f2fs_write_checkpoint+0x70c/0x1c30 [ 253.894737][ T7560] kill_f2fs_super+0x228/0x594 [ 253.894743][ T7560] deactivate_locked_super+0xc4/0x12c [ 253.894750][ T7560] deactivate_super+0xe0/0x100 [ 253.894756][ T7560] cleanup_mnt+0x31c/0x3ac [ 253.894763][ T7560] __cleanup_mnt+0x20/0x30 [ 253.894769][ T7560] task_work_run+0x1dc/0x260 [ 253.894776][ T7560] exit_to_user_mode_loop+0xfc/0x178 [ 253.894783][ T7560] el0_svc+0x170/0x254 [ 253.894791][ T7560] el0t_64_sync_handler+0x84/0x12c [ 253.894797][ T7560] el0t_64_sync+0x198/0x19c [ 253.894822][ T7560] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 255.486785][ T7606] loop9: detected capacity change from 0 to 40427 [ 255.595144][ T7606] F2FS-fs (loop9): build fault injection rate: 771 [ 255.614948][ T7606] F2FS-fs (loop9): invalid crc value [ 255.677016][ T7606] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 255.684280][ T7606] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 256.004228][ T7508] bio_check_eod: 291534 callbacks suppressed [ 256.005016][ T7508] syz.7.31: attempt to access beyond end of device [ 256.005016][ T7508] loop7: rw=0, sector=89208, nr_sectors = 8 limit=40427 [ 256.005060][ T7508] syz.7.31: attempt to access beyond end of device [ 256.005060][ T7508] loop7: rw=0, sector=89216, nr_sectors = 8 limit=40427 [ 256.005088][ T7508] syz.7.31: attempt to access beyond end of device [ 256.005088][ T7508] loop7: rw=0, sector=89224, nr_sectors = 8 limit=40427 [ 256.005113][ T7508] syz.7.31: attempt to access beyond end of device [ 256.005113][ T7508] loop7: rw=0, sector=89232, nr_sectors = 8 limit=40427 [ 256.005137][ T7508] syz.7.31: attempt to access beyond end of device [ 256.005137][ T7508] loop7: rw=0, sector=89240, nr_sectors = 8 limit=40427 [ 256.005160][ T7508] syz.7.31: attempt to access beyond end of device [ 256.005160][ T7508] loop7: rw=0, sector=89248, nr_sectors = 8 limit=40427 [ 256.005182][ T7508] syz.7.31: attempt to access beyond end of device [ 256.005182][ T7508] loop7: rw=0, sector=89256, nr_sectors = 8 limit=40427 [ 256.005215][ T7508] syz.7.31: attempt to access beyond end of device [ 256.005215][ T7508] loop7: rw=0, sector=89264, nr_sectors = 8 limit=40427 [ 256.005241][ T7508] syz.7.31: attempt to access beyond end of device [ 256.005241][ T7508] loop7: rw=0, sector=89272, nr_sectors = 8 limit=40427 [ 256.005264][ T7508] syz.7.31: attempt to access beyond end of device [ 256.005264][ T7508] loop7: rw=0, sector=89280, nr_sectors = 8 limit=40427 1970/01/01 00:04:16 executed programs: 22 [ 256.124437][ T7560] CPU: 1 UID: 0 PID: 7560 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 256.124460][ T7560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 256.124466][ T7560] Call trace: [ 256.124469][ T7560] show_stack+0x2c/0x3c (C) [ 256.124485][ T7560] __dump_stack+0x30/0x40 [ 256.124494][ T7560] dump_stack_lvl+0xd8/0x12c [ 256.124502][ T7560] dump_stack+0x1c/0x28 [ 256.124507][ T7560] f2fs_handle_critical_error+0x34c/0x4b8 [ 256.124516][ T7560] f2fs_stop_checkpoint+0x5c/0x70 [ 256.124522][ T7560] f2fs_write_end_io+0x768/0xa70 [ 256.124529][ T7560] bio_endio+0x858/0x894 [ 256.124535][ T7560] submit_bio_noacct+0xd64/0x186c [ 256.124542][ T7560] submit_bio+0x3b4/0x550 [ 256.124547][ T7560] f2fs_submit_write_bio+0x13c/0x324 [ 256.124553][ T7560] __submit_merged_bio+0x254/0x704 [ 256.124559][ T7560] __submit_merged_write_cond+0x23c/0x4ac [ 256.124565][ T7560] f2fs_write_data_pages+0x1d28/0x2634 [ 256.124571][ T7560] do_writepages+0x270/0x468 [ 256.124579][ T7560] filemap_fdatawrite+0x14c/0x1f4 [ 256.124583][ T7560] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 256.124588][ T7560] f2fs_write_checkpoint+0x70c/0x1c30 [ 256.124593][ T7560] kill_f2fs_super+0x228/0x594 [ 256.124600][ T7560] deactivate_locked_super+0xc4/0x12c [ 256.124606][ T7560] deactivate_super+0xe0/0x100 [ 256.124612][ T7560] cleanup_mnt+0x31c/0x3ac [ 256.124619][ T7560] __cleanup_mnt+0x20/0x30 [ 256.124625][ T7560] task_work_run+0x1dc/0x260 [ 256.124631][ T7560] exit_to_user_mode_loop+0xfc/0x178 [ 256.124638][ T7560] el0_svc+0x170/0x254 [ 256.124646][ T7560] el0t_64_sync_handler+0x84/0x12c [ 256.124652][ T7560] el0t_64_sync+0x198/0x19c [ 256.124679][ T7560] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 257.777573][ T32] INFO: task kworker/u8:0:12 blocked for more than 143 seconds. [ 257.778229][ T32] Not tainted syzkaller #0 [ 257.778881][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 257.779500][ T32] task:kworker/u8:0 state:D stack:0 pid:12 tgid:12 ppid:2 task_flags:0x4208160 flags:0x00000010 [ 257.780789][ T32] Workqueue: writeback wb_workfn (flush-7:0) [ 257.782784][ T32] Call trace: [ 257.783447][ T32] __switch_to+0x418/0x87c (T) [ 257.784051][ T32] __schedule+0x13b0/0x2864 [ 257.784783][ T32] schedule+0xb4/0x230 [ 257.785445][ T32] schedule_preempt_disabled+0x18/0x2c [ 257.786120][ T32] rwsem_down_write_slowpath+0x6b4/0x10f4 [ 257.786374][ T32] down_write+0xb4/0xc0 [ 257.786384][ T32] f2fs_balance_fs+0x4b8/0x6ec [ 257.786395][ T32] f2fs_write_inode+0x3a8/0x684 [ 257.786405][ T32] __writeback_single_inode+0x5ac/0x13e8 [ 257.786415][ T32] writeback_sb_inodes+0x55c/0xe40 [ 257.786424][ T32] __writeback_inodes_wb+0xec/0x228 [ 257.786434][ T32] wb_writeback+0x3e0/0xd70 [ 257.786443][ T32] wb_workfn+0xa08/0xdc0 [ 257.786451][ T32] process_one_work+0x7e8/0x155c [ 257.786461][ T32] worker_thread+0x958/0xed8 [ 257.786470][ T32] kthread+0x5fc/0x75c [ 257.786480][ T32] ret_from_fork+0x10/0x20 [ 257.786574][ T32] [ 257.786574][ T32] Showing all locks held in the system: [ 257.786583][ T32] 4 locks held by kworker/u8:0/12: [ 257.786590][ T32] #0: ffff0000c1f7b148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c [ 257.786626][ T32] #1: ffff800097a87be0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c [ 257.786660][ T32] #2: ffff0000c912e0e0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x24/0xdc [ 257.786700][ T32] #3: ffff0000d805d478 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x4b8/0x6ec [ 257.786734][ T32] 4 locks held by kworker/u8:1/14: [ 257.786740][ T32] #0: ffff0000c1f7b148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c [ 257.786772][ T32] #1: ffff800097aa7be0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c [ 257.786805][ T32] #2: ffff0000d6ff20e0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x24/0xdc [ 257.786842][ T32] #3: ffff0000cce89478 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x4b8/0x6ec [ 257.786875][ T32] 1 lock held by khungtaskd/32: [ 257.786882][ T32] #0: ffff80008f79b8a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 [ 257.786916][ T32] 4 locks held by kworker/u8:2/41: [ 257.786922][ T32] #0: ffff0000c1f7b148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c [ 257.786954][ T32] #1: ffff8000990e7be0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c [ 257.786987][ T32] #2: ffff0000d25480e0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x24/0xdc [ 257.787025][ T32] #3: ffff0000cc6c5478 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x4b8/0x6ec [ 257.787059][ T32] 4 locks held by kworker/u8:4/1639: [ 257.787065][ T32] #0: ffff0000c1f7b148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c [ 257.787098][ T32] #1: ffff80009f777be0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c [ 257.787130][ T32] #2: ffff0000f3ad60e0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x24/0xdc [ 257.787168][ T32] #3: ffff0000f95e1478 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x4b8/0x6ec [ 257.787200][ T32] 4 locks held by kworker/u8:5/1661: [ 257.787207][ T32] #0: ffff0000c1f7b148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c [ 257.787245][ T32] #1: ffff80009f2e7be0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c [ 257.787278][ T32] #2: ffff0000d48b60e0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x24/0xdc [ 257.787315][ T32] #3: ffff0000dce05478 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x4b8/0x6ec [ 257.787352][ T32] 4 locks held by kworker/u8:7/4830: [ 257.787359][ T32] #0: ffff0000c1f7b148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c [ 257.787391][ T32] #1: ffff8000a0cd7be0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c [ 257.787423][ T32] #2: ffff0000db2e00e0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x24/0xdc [ 257.787461][ T32] #3: ffff0000c7331478 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x4b8/0x6ec [ 257.787493][ T32] 1 lock held by klogd/6180: [ 257.787500][ T32] 2 locks held by getty/6334: [ 257.787506][ T32] #0: ffff0000d3a660a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 257.787540][ T32] #1: ffff80009bb5b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x34c/0xfa4 [ 257.787577][ T32] 7 locks held by syz.0.20/7235: [ 257.787585][ T32] 8 locks held by syz.1.21/7265: [ 257.787592][ T32] 6 locks held by syz.2.23/7300: [ 257.787599][ T32] 5 locks held by syz.3.24/7326: [ 257.787606][ T32] 5 locks held by syz.4.25/7368: [ 257.787614][ T32] 4 locks held by kworker/u8:8/7404: [ 257.787620][ T32] #0: ffff0000c1f7b148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c [ 257.787653][ T32] #1: ffff80009c897be0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c [ 257.787685][ T32] #2: ffff0000d165a0e0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x24/0xdc [ 257.787723][ T32] #3: ffff0000d6f69478 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x4b8/0x6ec [ 257.787755][ T32] 5 locks held by syz.5.28/7419: [ 257.787762][ T32] 5 locks held by syz.6.30/7463: [ 257.787769][ T32] 4 locks held by kworker/u8:9/7468: [ 257.787775][ T32] #0: ffff0000c1f7b148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x63c/0x155c [ 257.787807][ T32] #1: ffff80009d437be0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6d4/0x155c [ 257.787839][ T32] #2: ffff0000cf6480e0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x24/0xdc [ 257.787877][ T32] #3: ffff0000f3cd9478 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x4b8/0x6ec [ 257.787910][ T32] 5 locks held by syz.7.31/7508: [ 257.787917][ T32] 3 locks held by kworker/u8:11/7522: [ 257.787924][ T32] 6 locks held by syz.8.33/7554: [ 257.787932][ T32] 3 locks held by syz.9.37/7612: [ 257.787938][ T32] [ 257.787943][ T32] ============================================= [ 257.787943][ T32] [ 257.787950][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 257.881559][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 257.882803][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 257.884223][ T32] Call trace: [ 257.884710][ T32] show_stack+0x2c/0x3c (C) [ 257.885394][ T32] __dump_stack+0x30/0x40 [ 257.886027][ T32] dump_stack_lvl+0x30/0x12c [ 257.886781][ T32] dump_stack+0x1c/0x28 [ 257.887429][ T32] vpanic+0x22c/0x6c0 [ 257.888077][ T32] vpanic+0x0/0x6c0 [ 257.888668][ T32] hung_task_panic+0x0/0x2c [ 257.889401][ T32] kthread+0x5fc/0x75c [ 257.890004][ T32] ret_from_fork+0x10/0x20 [ 257.890679][ T32] SMP: stopping secondary CPUs [ 257.891387][ T32] Kernel Offset: disabled [ 257.892033][ T32] CPU features: 0x100000,0001e000,42702281,5427fea7 [ 257.893030][ T32] Memory Limit: none [ 258.234209][ T32] Rebooting in 86400 seconds..