Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts. 2026/09/09 05:55:40 parsed 1 programs [ 170.821749][ T6126] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 177.602262][ T6156] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.602842][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.603503][ T6156] bridge_slave_0: entered allmulticast mode [ 177.613659][ T6156] bridge_slave_0: entered promiscuous mode [ 177.633713][ T6156] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.634121][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.634712][ T6156] bridge_slave_1: entered allmulticast mode [ 177.644664][ T6156] bridge_slave_1: entered promiscuous mode [ 177.906005][ T6156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.920551][ T6156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.103901][ T6156] team0: Port device team_slave_0 added [ 178.114759][ T6156] team0: Port device team_slave_1 added [ 178.423122][ T6156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.429292][ T6156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.429329][ T6156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.478133][ T6156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.478215][ T6156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.478272][ T6156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.765445][ T6156] hsr_slave_0: entered promiscuous mode [ 178.770716][ T6156] hsr_slave_1: entered promiscuous mode [ 180.995517][ T6156] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 181.035114][ T6156] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 181.045460][ T6156] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 181.100345][ T6156] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 181.118612][ T6156] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 181.156373][ T6156] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 181.169128][ T6156] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 181.196102][ T6156] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 181.415257][ T6156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.451373][ T6156] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.474074][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.475124][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.517306][ T3396] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.524746][ T3396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.377137][ T6156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.514388][ T6156] veth0_vlan: entered promiscuous mode [ 182.563895][ T6156] veth1_vlan: entered promiscuous mode [ 182.651044][ T6156] veth0_macvtap: entered promiscuous mode [ 182.668945][ T6156] veth1_macvtap: entered promiscuous mode [ 182.752290][ T6156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.782036][ T6156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.233883][ T3370] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.291344][ T3370] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.291452][ T3370] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.291491][ T3370] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.015340][ T3396] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.855098][ T3396] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.338892][ T3396] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.744686][ T3396] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.940459][ T3396] bridge_slave_1: left allmulticast mode [ 186.940612][ T3396] bridge_slave_1: left promiscuous mode [ 186.941396][ T3396] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.130673][ T3396] bridge_slave_0: left allmulticast mode [ 187.132611][ T3396] bridge_slave_0: left promiscuous mode [ 187.133420][ T3396] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.040192][ T3396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.120392][ T3396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.162481][ T3396] bond0 (unregistering): Released all slaves [ 188.609524][ T3396] hsr_slave_0: left promiscuous mode [ 188.649434][ T3396] hsr_slave_1: left promiscuous mode [ 188.655868][ T3396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.666707][ T3396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.690545][ T3396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.690635][ T3396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.773644][ T3396] veth1_macvtap: left promiscuous mode [ 188.773867][ T3396] veth0_macvtap: left promiscuous mode [ 188.787087][ T3396] veth1_vlan: left promiscuous mode [ 188.787505][ T3396] veth0_vlan: left promiscuous mode [ 189.560102][ T3396] team0 (unregistering): Port device team_slave_1 removed [ 189.620203][ T3396] team0 (unregistering): Port device team_slave_0 removed [ 189.834572][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 190.486579][ T2293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.486684][ T2293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.609844][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.609913][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.683784][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 191.468220][ T5743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.499971][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3 [ 191.502608][ T5743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.520738][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.532965][ T5743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.534559][ T5743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 193.136019][ T5260] 8021q: adding VLAN 0 to HW filter on device eth4 2026/09/09 05:56:11 executed programs: 0 [ 195.497216][ T5743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.536996][ T5743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.559158][ T5743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.588673][ T5743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.610108][ T5743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 197.411378][ T6472] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.412206][ T6472] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.412920][ T6472] bridge_slave_0: entered allmulticast mode [ 197.427031][ T6472] bridge_slave_0: entered promiscuous mode [ 197.452534][ T6472] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.453130][ T6472] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.453701][ T6472] bridge_slave_1: entered allmulticast mode [ 197.462881][ T6472] bridge_slave_1: entered promiscuous mode [ 197.667395][ T6472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.682353][ T6472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.739482][ T59] Bluetooth: hci0: command tx timeout [ 197.913268][ T6472] team0: Port device team_slave_0 added [ 198.012613][ T6472] team0: Port device team_slave_1 added [ 198.171982][ T6472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.172081][ T6472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.172152][ T6472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.181590][ T6472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.181650][ T6472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.181761][ T6472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.417786][ T6472] hsr_slave_0: entered promiscuous mode [ 198.425710][ T6472] hsr_slave_1: entered promiscuous mode [ 199.820181][ T59] Bluetooth: hci0: command tx timeout [ 200.238562][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.248069][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.946237][ T6472] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 201.009614][ T6472] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 201.023245][ T6472] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 201.083420][ T6472] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 201.098796][ T6472] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 201.146145][ T6472] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 201.164352][ T6472] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 201.204687][ T6472] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 201.394134][ T6472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.461929][ T6472] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.484504][ T3397] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.485008][ T3397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.522272][ T3396] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.523199][ T3396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.909363][ T59] Bluetooth: hci0: command tx timeout [ 202.648380][ T6472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.822820][ T6472] veth0_vlan: entered promiscuous mode [ 202.888248][ T6472] veth1_vlan: entered promiscuous mode [ 202.992120][ T6472] veth0_macvtap: entered promiscuous mode [ 203.016768][ T6472] veth1_macvtap: entered promiscuous mode [ 203.065449][ T6472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.099535][ T6472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.181263][ T3396] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.181604][ T3396] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.181757][ T3396] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.181888][ T3396] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.746672][ T3397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.756814][ T3397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.832547][ T2293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.832636][ T2293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/09 05:56:20 executed programs: 2 [ 203.979380][ T59] Bluetooth: hci0: command tx timeout [ 204.648687][ T6594] loop0: detected capacity change from 0 to 40427 [ 204.671714][ T6594] F2FS-fs: heap/no_heap options were deprecated [ 204.676871][ T6594] F2FS-fs: heap/no_heap options were deprecated [ 204.844476][ T6594] F2FS-fs (loop0): Image doesn't support compression [ 204.911444][ T6594] F2FS-fs (loop0): invalid crc value [ 205.291743][ T6594] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 205.352315][ T6594] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 215.918005][ T6620] F2FS-fs (loop0): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 215.938837][ T6620] syz.0.17: attempt to access beyond end of device [ 215.938837][ T6620] loop0: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 215.942225][ T6620] syz.0.17: attempt to access beyond end of device [ 215.942225][ T6620] loop0: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 215.942756][ T6620] syz.0.17: attempt to access beyond end of device [ 215.942756][ T6620] loop0: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 215.943182][ T6620] syz.0.17: attempt to access beyond end of device [ 215.943182][ T6620] loop0: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 215.943638][ T6620] syz.0.17: attempt to access beyond end of device [ 215.943638][ T6620] loop0: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 215.944081][ T6620] syz.0.17: attempt to access beyond end of device [ 215.944081][ T6620] loop0: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 215.944499][ T6620] syz.0.17: attempt to access beyond end of device [ 215.944499][ T6620] loop0: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 215.944929][ T6620] syz.0.17: attempt to access beyond end of device [ 215.944929][ T6620] loop0: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 215.945416][ T6620] syz.0.17: attempt to access beyond end of device [ 215.945416][ T6620] loop0: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 215.945889][ T6620] syz.0.17: attempt to access beyond end of device [ 215.945889][ T6620] loop0: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 219.210730][ T5743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.234216][ T5743] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.245615][ T5743] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.257879][ T5743] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.272584][ T5743] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.751779][ T6638] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.752292][ T6638] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.752890][ T6638] bridge_slave_0: entered allmulticast mode [ 220.778413][ T6638] bridge_slave_0: entered promiscuous mode [ 220.795449][ T6638] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.796012][ T6638] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.796559][ T6638] bridge_slave_1: entered allmulticast mode [ 220.822775][ T6638] bridge_slave_1: entered promiscuous mode [ 220.939413][ T6620] bio_check_eod: 39200 callbacks suppressed [ 220.945852][ T6620] syz.0.17: attempt to access beyond end of device [ 220.945852][ T6620] loop0: rw=0, sector=89384, nr_sectors = 8 limit=40427 [ 220.969507][ T6620] syz.0.17: attempt to access beyond end of device [ 220.969507][ T6620] loop0: rw=0, sector=89392, nr_sectors = 8 limit=40427 [ 220.969643][ T6620] syz.0.17: attempt to access beyond end of device [ 220.969643][ T6620] loop0: rw=0, sector=89400, nr_sectors = 8 limit=40427 [ 220.969782][ T6620] syz.0.17: attempt to access beyond end of device [ 220.969782][ T6620] loop0: rw=0, sector=89408, nr_sectors = 8 limit=40427 [ 220.969930][ T6620] syz.0.17: attempt to access beyond end of device [ 220.969930][ T6620] loop0: rw=0, sector=89416, nr_sectors = 8 limit=40427 [ 220.970064][ T6620] syz.0.17: attempt to access beyond end of device [ 220.970064][ T6620] loop0: rw=0, sector=89424, nr_sectors = 8 limit=40427 [ 220.970609][ T6620] syz.0.17: attempt to access beyond end of device [ 220.970609][ T6620] loop0: rw=0, sector=89432, nr_sectors = 8 limit=40427 [ 220.970756][ T6620] syz.0.17: attempt to access beyond end of device [ 220.970756][ T6620] loop0: rw=0, sector=89440, nr_sectors = 8 limit=40427 [ 220.970892][ T6620] syz.0.17: attempt to access beyond end of device [ 220.970892][ T6620] loop0: rw=0, sector=89448, nr_sectors = 8 limit=40427 [ 220.971102][ T6620] syz.0.17: attempt to access beyond end of device [ 220.971102][ T6620] loop0: rw=0, sector=89456, nr_sectors = 8 limit=40427 [ 221.191745][ T6638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.206574][ T6638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.339439][ T5743] Bluetooth: hci1: command tx timeout [ 221.467988][ T6638] team0: Port device team_slave_0 added [ 221.483482][ T6638] team0: Port device team_slave_1 added [ 221.743367][ T6638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.750959][ T6638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.750999][ T6638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.754192][ T6638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.754212][ T6638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.754255][ T6638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.106977][ T6638] hsr_slave_0: entered promiscuous mode [ 222.112709][ T6638] hsr_slave_1: entered promiscuous mode [ 222.116097][ T6638] debugfs: 'hsr0' already exists in 'hsr' [ 222.128012][ T6638] Cannot create hsr debugfs directory [ 222.944066][ T6638] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 223.000731][ T6638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 223.011284][ T6638] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 223.058041][ T6638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 223.067487][ T6638] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 223.113024][ T6638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 223.127994][ T6638] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 223.164086][ T6638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 223.361082][ T6638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.399117][ T6638] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.419356][ T5743] Bluetooth: hci1: command tx timeout [ 223.434720][ T2293] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.443498][ T2293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.498655][ T2293] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.507066][ T2293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.309524][ T6638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.408345][ T6638] veth0_vlan: entered promiscuous mode [ 224.436619][ T6638] veth1_vlan: entered promiscuous mode [ 224.567850][ T6638] veth0_macvtap: entered promiscuous mode [ 224.611647][ T6638] veth1_macvtap: entered promiscuous mode [ 224.669026][ T6638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.692476][ T6638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.021551][ T1377] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.089755][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.089883][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.089930][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.312634][ T3396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.312730][ T3396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.402185][ T3396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.414023][ T3396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.499382][ T5743] Bluetooth: hci1: command tx timeout 2026/09/09 05:56:41 executed programs: 3 [ 225.958905][ T6620] bio_check_eod: 29952 callbacks suppressed [ 225.965293][ T6620] syz.0.17: attempt to access beyond end of device [ 225.965293][ T6620] loop0: rw=524288, sector=89472, nr_sectors = 8 limit=40427 [ 225.965791][ T6620] syz.0.17: attempt to access beyond end of device [ 225.965791][ T6620] loop0: rw=524288, sector=89480, nr_sectors = 8 limit=40427 [ 225.966360][ T6620] syz.0.17: attempt to access beyond end of device [ 225.966360][ T6620] loop0: rw=524288, sector=89488, nr_sectors = 8 limit=40427 [ 225.968376][ T6620] syz.0.17: attempt to access beyond end of device [ 225.968376][ T6620] loop0: rw=524288, sector=89496, nr_sectors = 8 limit=40427 [ 225.968560][ T6620] syz.0.17: attempt to access beyond end of device [ 225.968560][ T6620] loop0: rw=524288, sector=89504, nr_sectors = 8 limit=40427 [ 225.968948][ T6620] syz.0.17: attempt to access beyond end of device [ 225.968948][ T6620] loop0: rw=524288, sector=89512, nr_sectors = 8 limit=40427 [ 225.971108][ T6620] syz.0.17: attempt to access beyond end of device [ 225.971108][ T6620] loop0: rw=524288, sector=89520, nr_sectors = 8 limit=40427 [ 225.974231][ T6620] syz.0.17: attempt to access beyond end of device [ 225.974231][ T6620] loop0: rw=524288, sector=89528, nr_sectors = 8 limit=40427 [ 225.981011][ T6620] syz.0.17: attempt to access beyond end of device [ 225.981011][ T6620] loop0: rw=524288, sector=89536, nr_sectors = 8 limit=40427 [ 225.981486][ T6620] syz.0.17: attempt to access beyond end of device [ 225.981486][ T6620] loop0: rw=524288, sector=89544, nr_sectors = 8 limit=40427 [ 226.338017][ T6673] loop1: detected capacity change from 0 to 40427 [ 226.379998][ T6673] F2FS-fs: heap/no_heap options were deprecated [ 226.386959][ T6673] F2FS-fs: heap/no_heap options were deprecated [ 226.415805][ T6673] F2FS-fs (loop1): Image doesn't support compression [ 226.452911][ T6673] F2FS-fs (loop1): invalid crc value [ 226.809960][ T6673] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 226.851962][ T6673] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 227.579303][ T5743] Bluetooth: hci1: command tx timeout [ 230.959311][ T6620] bio_check_eod: 28384 callbacks suppressed [ 230.967944][ T6620] syz.0.17: attempt to access beyond end of device [ 230.967944][ T6620] loop0: rw=524288, sector=88800, nr_sectors = 8 limit=40427 [ 230.986456][ T6620] syz.0.17: attempt to access beyond end of device [ 230.986456][ T6620] loop0: rw=524288, sector=88808, nr_sectors = 8 limit=40427 [ 230.986590][ T6620] syz.0.17: attempt to access beyond end of device [ 230.986590][ T6620] loop0: rw=524288, sector=88816, nr_sectors = 8 limit=40427 [ 230.986741][ T6620] syz.0.17: attempt to access beyond end of device [ 230.986741][ T6620] loop0: rw=524288, sector=88824, nr_sectors = 8 limit=40427 [ 230.986845][ T6620] syz.0.17: attempt to access beyond end of device [ 230.986845][ T6620] loop0: rw=524288, sector=88832, nr_sectors = 8 limit=40427 [ 230.986969][ T6620] syz.0.17: attempt to access beyond end of device [ 230.986969][ T6620] loop0: rw=524288, sector=88840, nr_sectors = 8 limit=40427 [ 230.987078][ T6620] syz.0.17: attempt to access beyond end of device [ 230.987078][ T6620] loop0: rw=524288, sector=88848, nr_sectors = 8 limit=40427 [ 230.987198][ T6620] syz.0.17: attempt to access beyond end of device [ 230.987198][ T6620] loop0: rw=524288, sector=88856, nr_sectors = 8 limit=40427 [ 230.987313][ T6620] syz.0.17: attempt to access beyond end of device [ 230.987313][ T6620] loop0: rw=524288, sector=88864, nr_sectors = 8 limit=40427 [ 230.987454][ T6620] syz.0.17: attempt to access beyond end of device [ 230.987454][ T6620] loop0: rw=524288, sector=88872, nr_sectors = 8 limit=40427 [ 235.969330][ T6620] bio_check_eod: 28600 callbacks suppressed [ 235.976168][ T6620] syz.0.17: attempt to access beyond end of device [ 235.976168][ T6620] loop0: rw=524288, sector=89856, nr_sectors = 8 limit=40427 [ 235.999821][ T6620] syz.0.17: attempt to access beyond end of device [ 235.999821][ T6620] loop0: rw=524288, sector=89864, nr_sectors = 8 limit=40427 [ 236.024485][ T6620] syz.0.17: attempt to access beyond end of device [ 236.024485][ T6620] loop0: rw=524288, sector=89872, nr_sectors = 8 limit=40427 [ 236.041219][ T6620] syz.0.17: attempt to access beyond end of device [ 236.041219][ T6620] loop0: rw=524288, sector=89880, nr_sectors = 8 limit=40427 [ 236.061878][ T6620] syz.0.17: attempt to access beyond end of device [ 236.061878][ T6620] loop0: rw=524288, sector=89888, nr_sectors = 8 limit=40427 [ 236.084204][ T6620] syz.0.17: attempt to access beyond end of device [ 236.084204][ T6620] loop0: rw=524288, sector=89896, nr_sectors = 8 limit=40427 [ 236.103730][ T6620] syz.0.17: attempt to access beyond end of device [ 236.103730][ T6620] loop0: rw=524288, sector=89904, nr_sectors = 8 limit=40427 [ 236.109648][ T6620] syz.0.17: attempt to access beyond end of device [ 236.109648][ T6620] loop0: rw=524288, sector=89912, nr_sectors = 8 limit=40427 [ 236.109792][ T6620] syz.0.17: attempt to access beyond end of device [ 236.109792][ T6620] loop0: rw=524288, sector=89920, nr_sectors = 8 limit=40427 [ 236.109921][ T6620] syz.0.17: attempt to access beyond end of device [ 236.109921][ T6620] loop0: rw=524288, sector=89928, nr_sectors = 8 limit=40427 [ 240.906507][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.948544][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.956583][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.961206][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.981489][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.998508][ T6620] bio_check_eod: 28224 callbacks suppressed [ 241.005543][ T6620] syz.0.17: attempt to access beyond end of device [ 241.005543][ T6620] loop0: rw=524288, sector=87904, nr_sectors = 8 limit=40427 [ 241.019441][ T6620] syz.0.17: attempt to access beyond end of device [ 241.019441][ T6620] loop0: rw=524288, sector=87912, nr_sectors = 8 limit=40427 [ 241.019585][ T6620] syz.0.17: attempt to access beyond end of device [ 241.019585][ T6620] loop0: rw=524288, sector=87920, nr_sectors = 8 limit=40427 [ 241.019714][ T6620] syz.0.17: attempt to access beyond end of device [ 241.019714][ T6620] loop0: rw=524288, sector=87928, nr_sectors = 8 limit=40427 [ 241.019841][ T6620] syz.0.17: attempt to access beyond end of device [ 241.019841][ T6620] loop0: rw=524288, sector=87936, nr_sectors = 8 limit=40427 [ 241.019985][ T6620] syz.0.17: attempt to access beyond end of device [ 241.019985][ T6620] loop0: rw=524288, sector=87944, nr_sectors = 8 limit=40427 [ 241.020113][ T6620] syz.0.17: attempt to access beyond end of device [ 241.020113][ T6620] loop0: rw=524288, sector=87952, nr_sectors = 8 limit=40427 [ 241.020240][ T6620] syz.0.17: attempt to access beyond end of device [ 241.020240][ T6620] loop0: rw=524288, sector=87960, nr_sectors = 8 limit=40427 [ 241.020366][ T6620] syz.0.17: attempt to access beyond end of device [ 241.020366][ T6620] loop0: rw=524288, sector=87968, nr_sectors = 8 limit=40427 [ 241.020494][ T6620] syz.0.17: attempt to access beyond end of device [ 241.020494][ T6620] loop0: rw=524288, sector=87976, nr_sectors = 8 limit=40427 [ 243.039445][ T6679] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.041636][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.042942][ T6679] bridge_slave_0: entered allmulticast mode [ 243.074164][ T6679] bridge_slave_0: entered promiscuous mode [ 243.139839][ T6679] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.141270][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.170856][ T6679] bridge_slave_1: entered allmulticast mode [ 243.178585][ T6679] bridge_slave_1: entered promiscuous mode [ 243.259970][ T5743] Bluetooth: hci2: command tx timeout [ 243.534411][ T6679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.560947][ T6679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.917855][ T6679] team0: Port device team_slave_0 added [ 243.937913][ T6679] team0: Port device team_slave_1 added [ 244.514303][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.515936][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.515968][ T6679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.589958][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.590048][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.590078][ T6679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.156710][ T6679] hsr_slave_0: entered promiscuous mode [ 245.197541][ T6679] hsr_slave_1: entered promiscuous mode [ 245.204412][ T6679] debugfs: 'hsr0' already exists in 'hsr' [ 245.204499][ T6679] Cannot create hsr debugfs directory [ 245.339514][ T5743] Bluetooth: hci2: command tx timeout [ 246.001359][ T6620] bio_check_eod: 21632 callbacks suppressed [ 246.001512][ T6620] syz.0.17: attempt to access beyond end of device [ 246.001512][ T6620] loop0: rw=524288, sector=88208, nr_sectors = 8 limit=40427 [ 246.002087][ T6620] syz.0.17: attempt to access beyond end of device [ 246.002087][ T6620] loop0: rw=524288, sector=88216, nr_sectors = 8 limit=40427 [ 246.002640][ T6620] syz.0.17: attempt to access beyond end of device [ 246.002640][ T6620] loop0: rw=524288, sector=88224, nr_sectors = 8 limit=40427 [ 246.011098][ T6620] syz.0.17: attempt to access beyond end of device [ 246.011098][ T6620] loop0: rw=524288, sector=88232, nr_sectors = 8 limit=40427 [ 246.011483][ T6620] syz.0.17: attempt to access beyond end of device [ 246.011483][ T6620] loop0: rw=524288, sector=88240, nr_sectors = 8 limit=40427 [ 246.011845][ T6620] syz.0.17: attempt to access beyond end of device [ 246.011845][ T6620] loop0: rw=524288, sector=88248, nr_sectors = 8 limit=40427 [ 246.017727][ T6620] syz.0.17: attempt to access beyond end of device [ 246.017727][ T6620] loop0: rw=524288, sector=88256, nr_sectors = 8 limit=40427 [ 246.018337][ T6620] syz.0.17: attempt to access beyond end of device [ 246.018337][ T6620] loop0: rw=524288, sector=88264, nr_sectors = 8 limit=40427 [ 246.018808][ T6620] syz.0.17: attempt to access beyond end of device [ 246.018808][ T6620] loop0: rw=524288, sector=88272, nr_sectors = 8 limit=40427 [ 246.024443][ T6620] syz.0.17: attempt to access beyond end of device [ 246.024443][ T6620] loop0: rw=524288, sector=88280, nr_sectors = 8 limit=40427 [ 246.695572][ T6679] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 246.726882][ T6679] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 246.738373][ T6679] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 246.783454][ T6679] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 246.800681][ T6677] F2FS-fs (loop1): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 246.802117][ T6679] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 246.968018][ T6679] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 246.993524][ T6679] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 247.083407][ T6679] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 247.429505][ T5743] Bluetooth: hci2: command tx timeout [ 247.470314][ T6679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.589566][ T6679] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.734399][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.762707][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.879615][ T1377] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.880049][ T1377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.500132][ T5743] Bluetooth: hci2: command tx timeout [ 249.890479][ T6679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.136821][ T6679] veth0_vlan: entered promiscuous mode [ 250.236159][ T6679] veth1_vlan: entered promiscuous mode [ 250.501889][ T6679] veth0_macvtap: entered promiscuous mode [ 250.526757][ T6679] veth1_macvtap: entered promiscuous mode [ 250.580802][ T6679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.618686][ T6679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.690603][ T148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.691703][ T148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.691880][ T148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.692020][ T148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.013186][ T6620] bio_check_eod: 34479 callbacks suppressed [ 251.013186][ T6677] syz.1.18: attempt to access beyond end of device [ 251.013186][ T6677] loop1: rw=524288, sector=87728, nr_sectors = 8 limit=40427 [ 251.015068][ T6620] syz.0.17: attempt to access beyond end of device [ 251.015068][ T6620] loop0: rw=524288, sector=87448, nr_sectors = 8 limit=40427 [ 251.015471][ T6620] syz.0.17: attempt to access beyond end of device [ 251.015471][ T6620] loop0: rw=524288, sector=87456, nr_sectors = 8 limit=40427 [ 251.015851][ T6620] syz.0.17: attempt to access beyond end of device [ 251.015851][ T6620] loop0: rw=524288, sector=87464, nr_sectors = 8 limit=40427 [ 251.016162][ T6620] syz.0.17: attempt to access beyond end of device [ 251.016162][ T6620] loop0: rw=524288, sector=87472, nr_sectors = 8 limit=40427 [ 251.016443][ T6620] syz.0.17: attempt to access beyond end of device [ 251.016443][ T6620] loop0: rw=524288, sector=87480, nr_sectors = 8 limit=40427 [ 251.017506][ T6620] syz.0.17: attempt to access beyond end of device [ 251.017506][ T6620] loop0: rw=524288, sector=87488, nr_sectors = 8 limit=40427 [ 251.017942][ T6620] syz.0.17: attempt to access beyond end of device [ 251.017942][ T6620] loop0: rw=524288, sector=87496, nr_sectors = 8 limit=40427 [ 251.018311][ T6620] syz.0.17: attempt to access beyond end of device [ 251.018311][ T6620] loop0: rw=524288, sector=87504, nr_sectors = 8 limit=40427 [ 251.018659][ T6620] syz.0.17: attempt to access beyond end of device [ 251.018659][ T6620] loop0: rw=524288, sector=87512, nr_sectors = 8 limit=40427 [ 251.677644][ T3397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.677730][ T3397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.797724][ T3396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.797830][ T3396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/09 05:57:08 executed programs: 4 [ 253.297858][ T6717] loop2: detected capacity change from 0 to 40427 [ 253.333262][ T6717] F2FS-fs: heap/no_heap options were deprecated [ 253.350741][ T6717] F2FS-fs: heap/no_heap options were deprecated [ 253.393859][ T6717] F2FS-fs (loop2): Image doesn't support compression [ 253.449480][ T6717] F2FS-fs (loop2): invalid crc value [ 253.928574][ T6717] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 254.038141][ T6717] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 256.019448][ T6677] bio_check_eod: 36297 callbacks suppressed [ 256.019553][ T6677] syz.1.18: attempt to access beyond end of device [ 256.019553][ T6677] loop1: rw=524288, sector=88168, nr_sectors = 8 limit=40427 [ 256.021627][ T6677] syz.1.18: attempt to access beyond end of device [ 256.021627][ T6677] loop1: rw=524288, sector=88176, nr_sectors = 8 limit=40427 [ 256.021989][ T6677] syz.1.18: attempt to access beyond end of device [ 256.021989][ T6677] loop1: rw=524288, sector=88184, nr_sectors = 8 limit=40427 [ 256.022259][ T6677] syz.1.18: attempt to access beyond end of device [ 256.022259][ T6677] loop1: rw=524288, sector=88192, nr_sectors = 8 limit=40427 [ 256.022597][ T6677] syz.1.18: attempt to access beyond end of device [ 256.022597][ T6677] loop1: rw=524288, sector=88200, nr_sectors = 8 limit=40427 [ 256.024695][ T6677] syz.1.18: attempt to access beyond end of device [ 256.024695][ T6677] loop1: rw=524288, sector=88208, nr_sectors = 8 limit=40427 [ 256.025031][ T6677] syz.1.18: attempt to access beyond end of device [ 256.025031][ T6677] loop1: rw=524288, sector=88216, nr_sectors = 8 limit=40427 [ 256.025380][ T6677] syz.1.18: attempt to access beyond end of device [ 256.025380][ T6677] loop1: rw=524288, sector=88224, nr_sectors = 8 limit=40427 [ 256.025696][ T6677] syz.1.18: attempt to access beyond end of device [ 256.025696][ T6677] loop1: rw=524288, sector=88232, nr_sectors = 8 limit=40427 [ 256.027725][ T6677] syz.1.18: attempt to access beyond end of device [ 256.027725][ T6677] loop1: rw=524288, sector=88240, nr_sectors = 8 limit=40427 [ 261.033252][ T6620] bio_check_eod: 38344 callbacks suppressed [ 261.039729][ T6620] syz.0.17: attempt to access beyond end of device [ 261.039729][ T6620] loop0: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 261.039931][ T6620] syz.0.17: attempt to access beyond end of device [ 261.039931][ T6620] loop0: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 261.040073][ T6620] syz.0.17: attempt to access beyond end of device [ 261.040073][ T6620] loop0: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 261.040201][ T6620] syz.0.17: attempt to access beyond end of device [ 261.040201][ T6620] loop0: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 261.040344][ T6620] syz.0.17: attempt to access beyond end of device [ 261.040344][ T6620] loop0: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 261.040477][ T6620] syz.0.17: attempt to access beyond end of device [ 261.040477][ T6620] loop0: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 261.040868][ T6620] syz.0.17: attempt to access beyond end of device [ 261.040868][ T6620] loop0: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 261.041045][ T6620] syz.0.17: attempt to access beyond end of device [ 261.041045][ T6620] loop0: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 261.041172][ T6620] syz.0.17: attempt to access beyond end of device [ 261.041172][ T6620] loop0: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 261.043635][ T6620] syz.0.17: attempt to access beyond end of device [ 261.043635][ T6620] loop0: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 261.663919][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.664102][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.040923][ T6620] bio_check_eod: 35962 callbacks suppressed [ 266.041285][ T6677] syz.1.18: attempt to access beyond end of device [ 266.041285][ T6677] loop1: rw=524288, sector=87720, nr_sectors = 8 limit=40427 [ 266.041614][ T6677] syz.1.18: attempt to access beyond end of device [ 266.041614][ T6677] loop1: rw=524288, sector=87728, nr_sectors = 8 limit=40427 [ 266.041933][ T6677] syz.1.18: attempt to access beyond end of device [ 266.041933][ T6677] loop1: rw=524288, sector=87736, nr_sectors = 8 limit=40427 [ 266.042251][ T6677] syz.1.18: attempt to access beyond end of device [ 266.042251][ T6677] loop1: rw=524288, sector=87744, nr_sectors = 8 limit=40427 [ 266.045901][ T6677] syz.1.18: attempt to access beyond end of device [ 266.045901][ T6677] loop1: rw=524288, sector=87752, nr_sectors = 8 limit=40427 [ 266.046328][ T6677] syz.1.18: attempt to access beyond end of device [ 266.046328][ T6677] loop1: rw=524288, sector=87760, nr_sectors = 8 limit=40427 [ 266.046669][ T6677] syz.1.18: attempt to access beyond end of device [ 266.046669][ T6677] loop1: rw=524288, sector=87768, nr_sectors = 8 limit=40427 [ 266.047012][ T6677] syz.1.18: attempt to access beyond end of device [ 266.047012][ T6677] loop1: rw=524288, sector=87776, nr_sectors = 8 limit=40427 [ 266.050604][ T6620] syz.0.17: attempt to access beyond end of device [ 266.050604][ T6620] loop0: rw=0, sector=88720, nr_sectors = 8 limit=40427 [ 266.050696][ T6677] syz.1.18: attempt to access beyond end of device [ 266.050696][ T6677] loop1: rw=524288, sector=87784, nr_sectors = 8 limit=40427 [ 267.645722][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 267.699594][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 267.714519][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 267.735668][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 267.743124][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 269.820617][ T59] Bluetooth: hci3: command tx timeout [ 271.049413][ T6677] bio_check_eod: 31039 callbacks suppressed [ 271.055919][ T6677] syz.1.18: attempt to access beyond end of device [ 271.055919][ T6677] loop1: rw=0, sector=88960, nr_sectors = 8 limit=40427 [ 271.071894][ T6677] syz.1.18: attempt to access beyond end of device [ 271.071894][ T6677] loop1: rw=0, sector=88968, nr_sectors = 8 limit=40427 [ 271.072042][ T6677] syz.1.18: attempt to access beyond end of device [ 271.072042][ T6677] loop1: rw=0, sector=88976, nr_sectors = 8 limit=40427 [ 271.072176][ T6677] syz.1.18: attempt to access beyond end of device [ 271.072176][ T6677] loop1: rw=0, sector=88984, nr_sectors = 8 limit=40427 [ 271.072312][ T6677] syz.1.18: attempt to access beyond end of device [ 271.072312][ T6677] loop1: rw=0, sector=88992, nr_sectors = 8 limit=40427 [ 271.072442][ T6677] syz.1.18: attempt to access beyond end of device [ 271.072442][ T6677] loop1: rw=0, sector=89000, nr_sectors = 8 limit=40427 [ 271.072574][ T6677] syz.1.18: attempt to access beyond end of device [ 271.072574][ T6677] loop1: rw=0, sector=89008, nr_sectors = 8 limit=40427 [ 271.072719][ T6677] syz.1.18: attempt to access beyond end of device [ 271.072719][ T6677] loop1: rw=0, sector=89016, nr_sectors = 8 limit=40427 [ 271.072853][ T6677] syz.1.18: attempt to access beyond end of device [ 271.072853][ T6677] loop1: rw=0, sector=89024, nr_sectors = 8 limit=40427 [ 271.072987][ T6677] syz.1.18: attempt to access beyond end of device [ 271.072987][ T6677] loop1: rw=0, sector=89032, nr_sectors = 8 limit=40427 [ 271.104992][ T6724] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.105592][ T6724] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.110453][ T6724] bridge_slave_0: entered allmulticast mode [ 271.181132][ T6724] bridge_slave_0: entered promiscuous mode [ 271.253553][ T6724] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.253853][ T6724] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.254084][ T6724] bridge_slave_1: entered allmulticast mode [ 271.291058][ T6724] bridge_slave_1: entered promiscuous mode [ 271.646967][ T6724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.689886][ T6724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.900008][ T59] Bluetooth: hci3: command tx timeout [ 272.036898][ T6724] team0: Port device team_slave_0 added [ 272.056898][ T6724] team0: Port device team_slave_1 added [ 272.301429][ T6724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.310840][ T6724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.310879][ T6724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.316832][ T6724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.316853][ T6724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.316883][ T6724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.788221][ T6724] hsr_slave_0: entered promiscuous mode [ 272.799498][ T6724] hsr_slave_1: entered promiscuous mode [ 272.818584][ T6724] debugfs: 'hsr0' already exists in 'hsr' [ 272.824948][ T6724] Cannot create hsr debugfs directory [ 273.981243][ T59] Bluetooth: hci3: command tx timeout [ 274.914952][ T6724] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 274.957327][ T6724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 274.966076][ T6724] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 275.108438][ T6724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 275.146366][ T6724] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 275.247195][ T6724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 275.261218][ T6724] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 275.473662][ T6724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 275.879275][ T6724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.059919][ T59] Bluetooth: hci3: command tx timeout [ 276.062427][ T6677] bio_check_eod: 30990 callbacks suppressed [ 276.062492][ T6677] syz.1.18: attempt to access beyond end of device [ 276.062492][ T6677] loop1: rw=0, sector=89816, nr_sectors = 8 limit=40427 [ 276.062868][ T6677] syz.1.18: attempt to access beyond end of device [ 276.062868][ T6677] loop1: rw=0, sector=89824, nr_sectors = 8 limit=40427 [ 276.063173][ T6677] syz.1.18: attempt to access beyond end of device [ 276.063173][ T6677] loop1: rw=0, sector=89832, nr_sectors = 8 limit=40427 [ 276.063565][ T6677] syz.1.18: attempt to access beyond end of device [ 276.063565][ T6677] loop1: rw=0, sector=89840, nr_sectors = 8 limit=40427 [ 276.067434][ T6724] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.086480][ T6677] syz.1.18: attempt to access beyond end of device [ 276.086480][ T6677] loop1: rw=0, sector=89848, nr_sectors = 8 limit=40427 [ 276.086842][ T6677] syz.1.18: attempt to access beyond end of device [ 276.086842][ T6677] loop1: rw=0, sector=89856, nr_sectors = 8 limit=40427 [ 276.087181][ T6677] syz.1.18: attempt to access beyond end of device [ 276.087181][ T6677] loop1: rw=0, sector=89864, nr_sectors = 8 limit=40427 [ 276.087552][ T6677] syz.1.18: attempt to access beyond end of device [ 276.087552][ T6677] loop1: rw=0, sector=89872, nr_sectors = 8 limit=40427 [ 276.087879][ T6677] syz.1.18: attempt to access beyond end of device [ 276.087879][ T6677] loop1: rw=0, sector=89880, nr_sectors = 8 limit=40427 [ 276.088220][ T6677] syz.1.18: attempt to access beyond end of device [ 276.088220][ T6677] loop1: rw=0, sector=89888, nr_sectors = 8 limit=40427 [ 276.330455][ T1377] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.332822][ T1377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.480235][ T1377] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.483154][ T1377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.287355][ T6724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.661559][ T6724] veth0_vlan: entered promiscuous mode [ 278.694880][ T6724] veth1_vlan: entered promiscuous mode [ 278.898891][ T6724] veth0_macvtap: entered promiscuous mode [ 278.991605][ T6724] veth1_macvtap: entered promiscuous mode [ 279.071171][ T6724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.161651][ T6724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.342224][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.343172][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.694299][ T1377] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.694412][ T1377] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.256470][ T3396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.256551][ T3396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.520963][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.521064][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/09 05:57:37 executed programs: 5 [ 281.069382][ T6677] bio_check_eod: 25985 callbacks suppressed [ 281.079391][ T6677] syz.1.18: attempt to access beyond end of device [ 281.079391][ T6677] loop1: rw=524288, sector=86976, nr_sectors = 8 limit=40427 [ 281.079629][ T6620] syz.0.17: attempt to access beyond end of device [ 281.079629][ T6620] loop0: rw=0, sector=86776, nr_sectors = 8 limit=40427 [ 281.080166][ T6620] syz.0.17: attempt to access beyond end of device [ 281.080166][ T6620] loop0: rw=0, sector=86784, nr_sectors = 8 limit=40427 [ 281.080500][ T6620] syz.0.17: attempt to access beyond end of device [ 281.080500][ T6620] loop0: rw=0, sector=86792, nr_sectors = 8 limit=40427 [ 281.080837][ T6620] syz.0.17: attempt to access beyond end of device [ 281.080837][ T6620] loop0: rw=0, sector=86800, nr_sectors = 8 limit=40427 [ 281.084731][ T6620] syz.0.17: attempt to access beyond end of device [ 281.084731][ T6620] loop0: rw=0, sector=86808, nr_sectors = 8 limit=40427 [ 281.085145][ T6620] syz.0.17: attempt to access beyond end of device [ 281.085145][ T6620] loop0: rw=0, sector=86816, nr_sectors = 8 limit=40427 [ 281.085499][ T6620] syz.0.17: attempt to access beyond end of device [ 281.085499][ T6620] loop0: rw=0, sector=86824, nr_sectors = 8 limit=40427 [ 281.087700][ T6620] syz.0.17: attempt to access beyond end of device [ 281.087700][ T6620] loop0: rw=0, sector=86832, nr_sectors = 8 limit=40427 [ 281.088122][ T6620] syz.0.17: attempt to access beyond end of device [ 281.088122][ T6620] loop0: rw=0, sector=86840, nr_sectors = 8 limit=40427 [ 282.528531][ T6768] loop3: detected capacity change from 0 to 40427 [ 282.561172][ T6768] F2FS-fs: heap/no_heap options were deprecated [ 282.561419][ T6768] F2FS-fs: heap/no_heap options were deprecated [ 282.656575][ T6768] F2FS-fs (loop3): Image doesn't support compression [ 282.734952][ T6768] F2FS-fs (loop3): invalid crc value [ 283.414127][ T6768] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 283.515542][ T6768] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 286.085624][ T6620] bio_check_eod: 27969 callbacks suppressed [ 286.085805][ T6677] syz.1.18: attempt to access beyond end of device [ 286.085805][ T6677] loop1: rw=0, sector=86736, nr_sectors = 8 limit=40427 [ 286.086279][ T6677] syz.1.18: attempt to access beyond end of device [ 286.086279][ T6677] loop1: rw=0, sector=86744, nr_sectors = 8 limit=40427 [ 286.086639][ T6677] syz.1.18: attempt to access beyond end of device [ 286.086639][ T6677] loop1: rw=0, sector=86752, nr_sectors = 8 limit=40427 [ 286.086943][ T6677] syz.1.18: attempt to access beyond end of device [ 286.086943][ T6677] loop1: rw=0, sector=86760, nr_sectors = 8 limit=40427 [ 286.087314][ T6677] syz.1.18: attempt to access beyond end of device [ 286.087314][ T6677] loop1: rw=0, sector=86768, nr_sectors = 8 limit=40427 [ 286.087682][ T6677] syz.1.18: attempt to access beyond end of device [ 286.087682][ T6677] loop1: rw=0, sector=86776, nr_sectors = 8 limit=40427 [ 286.088032][ T6677] syz.1.18: attempt to access beyond end of device [ 286.088032][ T6677] loop1: rw=0, sector=86784, nr_sectors = 8 limit=40427 [ 286.088362][ T6677] syz.1.18: attempt to access beyond end of device [ 286.088362][ T6677] loop1: rw=0, sector=86792, nr_sectors = 8 limit=40427 [ 286.088676][ T6677] syz.1.18: attempt to access beyond end of device [ 286.088676][ T6677] loop1: rw=0, sector=86800, nr_sectors = 8 limit=40427 [ 286.110440][ T6620] syz.0.17: attempt to access beyond end of device [ 286.110440][ T6620] loop0: rw=0, sector=86952, nr_sectors = 8 limit=40427 [ 286.405983][ T6721] F2FS-fs (loop2): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 291.089381][ T6620] bio_check_eod: 43139 callbacks suppressed [ 291.094117][ T6721] syz.2.19: attempt to access beyond end of device [ 291.094117][ T6721] loop2: rw=0, sector=87904, nr_sectors = 8 limit=40427 [ 291.094524][ T6721] syz.2.19: attempt to access beyond end of device [ 291.094524][ T6721] loop2: rw=0, sector=87912, nr_sectors = 8 limit=40427 [ 291.094900][ T6721] syz.2.19: attempt to access beyond end of device [ 291.094900][ T6721] loop2: rw=0, sector=87920, nr_sectors = 8 limit=40427 [ 291.101003][ T6721] syz.2.19: attempt to access beyond end of device [ 291.101003][ T6721] loop2: rw=0, sector=87928, nr_sectors = 8 limit=40427 [ 291.101145][ T6721] syz.2.19: attempt to access beyond end of device [ 291.101145][ T6721] loop2: rw=0, sector=87936, nr_sectors = 8 limit=40427 [ 291.101252][ T6721] syz.2.19: attempt to access beyond end of device [ 291.101252][ T6721] loop2: rw=0, sector=87944, nr_sectors = 8 limit=40427 [ 291.101375][ T6721] syz.2.19: attempt to access beyond end of device [ 291.101375][ T6721] loop2: rw=0, sector=87952, nr_sectors = 8 limit=40427 [ 291.101472][ T6721] syz.2.19: attempt to access beyond end of device [ 291.101472][ T6721] loop2: rw=0, sector=87960, nr_sectors = 8 limit=40427 [ 291.101569][ T6721] syz.2.19: attempt to access beyond end of device [ 291.101569][ T6721] loop2: rw=0, sector=87968, nr_sectors = 8 limit=40427 [ 291.116908][ T6620] syz.0.17: attempt to access beyond end of device [ 291.116908][ T6620] loop0: rw=0, sector=89640, nr_sectors = 8 limit=40427 [ 296.099403][ T6620] bio_check_eod: 42145 callbacks suppressed [ 296.104425][ T6721] syz.2.19: attempt to access beyond end of device [ 296.104425][ T6721] loop2: rw=0, sector=87376, nr_sectors = 8 limit=40427 [ 296.104952][ T6721] syz.2.19: attempt to access beyond end of device [ 296.104952][ T6721] loop2: rw=0, sector=87384, nr_sectors = 8 limit=40427 [ 296.105378][ T6721] syz.2.19: attempt to access beyond end of device [ 296.105378][ T6721] loop2: rw=0, sector=87392, nr_sectors = 8 limit=40427 [ 296.112794][ T6721] syz.2.19: attempt to access beyond end of device [ 296.112794][ T6721] loop2: rw=0, sector=87400, nr_sectors = 8 limit=40427 [ 296.113213][ T6721] syz.2.19: attempt to access beyond end of device [ 296.113213][ T6721] loop2: rw=0, sector=87408, nr_sectors = 8 limit=40427 [ 296.113557][ T6721] syz.2.19: attempt to access beyond end of device [ 296.113557][ T6721] loop2: rw=0, sector=87416, nr_sectors = 8 limit=40427 [ 296.113799][ T6721] syz.2.19: attempt to access beyond end of device [ 296.113799][ T6721] loop2: rw=0, sector=87424, nr_sectors = 8 limit=40427 [ 296.121058][ T6721] syz.2.19: attempt to access beyond end of device [ 296.121058][ T6721] loop2: rw=0, sector=87432, nr_sectors = 8 limit=40427 [ 296.121431][ T6721] syz.2.19: attempt to access beyond end of device [ 296.121431][ T6721] loop2: rw=0, sector=87440, nr_sectors = 8 limit=40427 [ 296.151523][ T6620] syz.0.17: attempt to access beyond end of device [ 296.151523][ T6620] loop0: rw=0, sector=89168, nr_sectors = 8 limit=40427 [ 296.644560][ T5743] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 296.676497][ T5743] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 296.688022][ T5743] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 296.705340][ T5743] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 296.717112][ T5743] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 298.779409][ T5743] Bluetooth: hci4: command tx timeout [ 300.371689][ T6774] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.371974][ T6774] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.372175][ T6774] bridge_slave_0: entered allmulticast mode [ 300.401144][ T6774] bridge_slave_0: entered promiscuous mode [ 300.419835][ T6774] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.422458][ T6774] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.426378][ T6774] bridge_slave_1: entered allmulticast mode [ 300.479484][ T6774] bridge_slave_1: entered promiscuous mode [ 300.865800][ T5743] Bluetooth: hci4: command tx timeout [ 301.011663][ T6774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.026844][ T6774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.109423][ T6721] bio_check_eod: 34561 callbacks suppressed [ 301.109523][ T6620] syz.0.17: attempt to access beyond end of device [ 301.109523][ T6620] loop0: rw=0, sector=88152, nr_sectors = 8 limit=40427 [ 301.109956][ T6620] syz.0.17: attempt to access beyond end of device [ 301.109956][ T6620] loop0: rw=0, sector=88160, nr_sectors = 8 limit=40427 [ 301.112932][ T6620] syz.0.17: attempt to access beyond end of device [ 301.112932][ T6620] loop0: rw=0, sector=88168, nr_sectors = 8 limit=40427 [ 301.113415][ T6620] syz.0.17: attempt to access beyond end of device [ 301.113415][ T6620] loop0: rw=0, sector=88176, nr_sectors = 8 limit=40427 [ 301.113766][ T6620] syz.0.17: attempt to access beyond end of device [ 301.113766][ T6620] loop0: rw=0, sector=88184, nr_sectors = 8 limit=40427 [ 301.114107][ T6620] syz.0.17: attempt to access beyond end of device [ 301.114107][ T6620] loop0: rw=0, sector=88192, nr_sectors = 8 limit=40427 [ 301.114544][ T6677] syz.1.18: attempt to access beyond end of device [ 301.114544][ T6677] loop1: rw=0, sector=89400, nr_sectors = 8 limit=40427 [ 301.114943][ T6677] syz.1.18: attempt to access beyond end of device [ 301.114943][ T6677] loop1: rw=0, sector=89408, nr_sectors = 8 limit=40427 [ 301.115282][ T6677] syz.1.18: attempt to access beyond end of device [ 301.115282][ T6677] loop1: rw=0, sector=89416, nr_sectors = 8 limit=40427 [ 301.242549][ T6721] syz.2.19: attempt to access beyond end of device [ 301.242549][ T6721] loop2: rw=0, sector=86648, nr_sectors = 8 limit=40427 [ 301.686152][ T6774] team0: Port device team_slave_0 added [ 301.699011][ T6774] team0: Port device team_slave_1 added [ 302.011654][ T6774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.018856][ T6774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.018892][ T6774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.074339][ T6774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.083390][ T6774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.083429][ T6774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.546143][ T6774] hsr_slave_0: entered promiscuous mode [ 302.556610][ T6774] hsr_slave_1: entered promiscuous mode [ 302.574228][ T6774] debugfs: 'hsr0' already exists in 'hsr' [ 302.580398][ T6774] Cannot create hsr debugfs directory [ 302.939389][ T5743] Bluetooth: hci4: command tx timeout [ 304.813569][ T6774] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 304.853179][ T6774] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 304.864450][ T6774] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 304.965169][ T6774] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 305.019357][ T5743] Bluetooth: hci4: command tx timeout [ 305.084749][ T6774] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 305.244547][ T6774] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 305.256481][ T6774] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 305.304686][ T6774] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 305.995617][ T6774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.112324][ T6774] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.120455][ T6620] bio_check_eod: 35864 callbacks suppressed [ 306.120544][ T6620] syz.0.17: attempt to access beyond end of device [ 306.120544][ T6620] loop0: rw=524288, sector=87912, nr_sectors = 8 limit=40427 [ 306.121086][ T6620] syz.0.17: attempt to access beyond end of device [ 306.121086][ T6620] loop0: rw=524288, sector=87920, nr_sectors = 8 limit=40427 [ 306.121480][ T6620] syz.0.17: attempt to access beyond end of device [ 306.121480][ T6620] loop0: rw=524288, sector=87928, nr_sectors = 8 limit=40427 [ 306.126475][ T6677] syz.1.18: attempt to access beyond end of device [ 306.126475][ T6677] loop1: rw=0, sector=88800, nr_sectors = 8 limit=40427 [ 306.126916][ T6677] syz.1.18: attempt to access beyond end of device [ 306.126916][ T6677] loop1: rw=0, sector=88808, nr_sectors = 8 limit=40427 [ 306.127306][ T6677] syz.1.18: attempt to access beyond end of device [ 306.127306][ T6677] loop1: rw=0, sector=88816, nr_sectors = 8 limit=40427 [ 306.127733][ T6677] syz.1.18: attempt to access beyond end of device [ 306.127733][ T6677] loop1: rw=0, sector=88824, nr_sectors = 8 limit=40427 [ 306.128411][ T6721] syz.2.19: attempt to access beyond end of device [ 306.128411][ T6721] loop2: rw=0, sector=87736, nr_sectors = 8 limit=40427 [ 306.128831][ T6721] syz.2.19: attempt to access beyond end of device [ 306.128831][ T6721] loop2: rw=0, sector=87744, nr_sectors = 8 limit=40427 [ 306.130220][ T6620] syz.0.17: attempt to access beyond end of device [ 306.130220][ T6620] loop0: rw=524288, sector=87936, nr_sectors = 8 limit=40427 [ 306.287981][ T1514] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.288514][ T1514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.408858][ T3396] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.414871][ T3396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.882751][ T6774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.696536][ T6774] veth0_vlan: entered promiscuous mode [ 310.845628][ T6774] veth1_vlan: entered promiscuous mode [ 311.129336][ T6620] bio_check_eod: 34139 callbacks suppressed [ 311.138290][ T6620] syz.0.17: attempt to access beyond end of device [ 311.138290][ T6620] loop0: rw=524288, sector=88648, nr_sectors = 8 limit=40427 [ 311.146148][ T6677] syz.1.18: attempt to access beyond end of device [ 311.146148][ T6677] loop1: rw=524288, sector=89032, nr_sectors = 8 limit=40427 [ 311.146543][ T6677] syz.1.18: attempt to access beyond end of device [ 311.146543][ T6677] loop1: rw=524288, sector=89040, nr_sectors = 8 limit=40427 [ 311.146872][ T6677] syz.1.18: attempt to access beyond end of device [ 311.146872][ T6677] loop1: rw=524288, sector=89048, nr_sectors = 8 limit=40427 [ 311.151299][ T6677] syz.1.18: attempt to access beyond end of device [ 311.151299][ T6677] loop1: rw=524288, sector=89056, nr_sectors = 8 limit=40427 [ 311.151752][ T6677] syz.1.18: attempt to access beyond end of device [ 311.151752][ T6677] loop1: rw=524288, sector=89064, nr_sectors = 8 limit=40427 [ 311.152086][ T6677] syz.1.18: attempt to access beyond end of device [ 311.152086][ T6677] loop1: rw=524288, sector=89072, nr_sectors = 8 limit=40427 [ 311.152423][ T6677] syz.1.18: attempt to access beyond end of device [ 311.152423][ T6677] loop1: rw=524288, sector=89080, nr_sectors = 8 limit=40427 [ 311.158302][ T6677] syz.1.18: attempt to access beyond end of device [ 311.158302][ T6677] loop1: rw=524288, sector=89088, nr_sectors = 8 limit=40427 [ 311.158720][ T6677] syz.1.18: attempt to access beyond end of device [ 311.158720][ T6677] loop1: rw=524288, sector=89096, nr_sectors = 8 limit=40427 [ 311.349393][ T6774] veth0_macvtap: entered promiscuous mode [ 311.405591][ T6774] veth1_macvtap: entered promiscuous mode [ 311.575523][ T6774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.678301][ T6774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.381620][ T1514] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.391986][ T1514] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.392741][ T1514] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.473062][ T1514] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.899407][ T2293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.899493][ T2293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.502912][ T1377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.502996][ T1377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/09 05:58:10 executed programs: 6 [ 316.141177][ T6677] bio_check_eod: 32347 callbacks suppressed [ 316.143036][ T6677] syz.1.18: attempt to access beyond end of device [ 316.143036][ T6677] loop1: rw=524288, sector=88976, nr_sectors = 8 limit=40427 [ 316.143604][ T6677] syz.1.18: attempt to access beyond end of device [ 316.143604][ T6677] loop1: rw=524288, sector=88984, nr_sectors = 8 limit=40427 [ 316.144272][ T6620] syz.0.17: attempt to access beyond end of device [ 316.144272][ T6620] loop0: rw=0, sector=86912, nr_sectors = 8 limit=40427 [ 316.144636][ T6620] syz.0.17: attempt to access beyond end of device [ 316.144636][ T6620] loop0: rw=0, sector=86920, nr_sectors = 8 limit=40427 [ 316.146304][ T6721] syz.2.19: attempt to access beyond end of device [ 316.146304][ T6721] loop2: rw=0, sector=86400, nr_sectors = 8 limit=40427 [ 316.146930][ T6721] syz.2.19: attempt to access beyond end of device [ 316.146930][ T6721] loop2: rw=0, sector=86408, nr_sectors = 8 limit=40427 [ 316.147327][ T6721] syz.2.19: attempt to access beyond end of device [ 316.147327][ T6721] loop2: rw=0, sector=86416, nr_sectors = 8 limit=40427 [ 316.153468][ T6677] syz.1.18: attempt to access beyond end of device [ 316.153468][ T6677] loop1: rw=524288, sector=88992, nr_sectors = 8 limit=40427 [ 316.153873][ T6677] syz.1.18: attempt to access beyond end of device [ 316.153873][ T6677] loop1: rw=524288, sector=89000, nr_sectors = 8 limit=40427 [ 316.154193][ T6677] syz.1.18: attempt to access beyond end of device [ 316.154193][ T6677] loop1: rw=524288, sector=89008, nr_sectors = 8 limit=40427 [ 316.330442][ T6819] loop4: detected capacity change from 0 to 40427 [ 316.344862][ T6819] F2FS-fs: heap/no_heap options were deprecated [ 316.354954][ T6819] F2FS-fs: heap/no_heap options were deprecated [ 316.535677][ T6819] F2FS-fs (loop4): Image doesn't support compression [ 316.557388][ T6819] F2FS-fs (loop4): invalid crc value [ 317.441569][ T6819] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 317.848695][ T6819] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 320.063024][ T5743] Bluetooth: hci0: command 0x0406 tx timeout [ 321.157064][ T6620] bio_check_eod: 33814 callbacks suppressed [ 321.157210][ T6721] syz.2.19: attempt to access beyond end of device [ 321.157210][ T6721] loop2: rw=524288, sector=87472, nr_sectors = 8 limit=40427 [ 321.157709][ T6721] syz.2.19: attempt to access beyond end of device [ 321.157709][ T6721] loop2: rw=524288, sector=87480, nr_sectors = 8 limit=40427 [ 321.158089][ T6721] syz.2.19: attempt to access beyond end of device [ 321.158089][ T6721] loop2: rw=524288, sector=87488, nr_sectors = 8 limit=40427 [ 321.158411][ T6721] syz.2.19: attempt to access beyond end of device [ 321.158411][ T6721] loop2: rw=524288, sector=87496, nr_sectors = 8 limit=40427 [ 321.158682][ T6620] syz.0.17: attempt to access beyond end of device [ 321.158682][ T6620] loop0: rw=524288, sector=88024, nr_sectors = 8 limit=40427 [ 321.158835][ T6620] syz.0.17: attempt to access beyond end of device [ 321.158835][ T6620] loop0: rw=524288, sector=88032, nr_sectors = 8 limit=40427 [ 321.158981][ T6620] syz.0.17: attempt to access beyond end of device [ 321.158981][ T6620] loop0: rw=524288, sector=88040, nr_sectors = 8 limit=40427 [ 321.159122][ T6620] syz.0.17: attempt to access beyond end of device [ 321.159122][ T6620] loop0: rw=524288, sector=88048, nr_sectors = 8 limit=40427 [ 321.160230][ T6721] syz.2.19: attempt to access beyond end of device [ 321.160230][ T6721] loop2: rw=524288, sector=87504, nr_sectors = 8 limit=40427 [ 321.160384][ T6721] syz.2.19: attempt to access beyond end of device [ 321.160384][ T6721] loop2: rw=524288, sector=87512, nr_sectors = 8 limit=40427 [ 322.814178][ T6824] loop4: detected capacity change from 0 to 40427 [ 322.832345][ T6824] F2FS-fs: heap/no_heap options were deprecated [ 322.839986][ T6824] F2FS-fs: heap/no_heap options were deprecated [ 322.876873][ T6824] F2FS-fs (loop4): Image doesn't support compression [ 322.999439][ T6824] F2FS-fs (loop4): invalid crc value [ 323.104687][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.104847][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.313453][ T6824] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 323.463365][ T6824] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 2026/09/09 05:58:20 executed programs: 8 [ 324.073127][ T6774] CPU: 0 UID: 0 PID: 6774 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 324.073166][ T6774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 324.073192][ T6774] Call Trace: [ 324.073202][ T6774] [ 324.073213][ T6774] dump_stack_lvl+0xe8/0x150 [ 324.073277][ T6774] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 324.073325][ T6774] f2fs_write_end_bio+0x1211/0x16e0 [ 324.073360][ T6774] ? blkg_put+0x22/0x240 [ 324.073408][ T6774] __submit_merged_bio+0x258/0x6a0 [ 324.073447][ T6774] ? rcu_is_watching+0x16/0xb0 [ 324.073493][ T6774] __submit_merged_write_cond+0x3c9/0x4e0 [ 324.073544][ T6774] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 324.073614][ T6774] f2fs_write_data_pages+0x2a27/0x36f0 [ 324.073689][ T6774] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 324.073786][ T6774] ? do_raw_spin_lock+0x12b/0x2f0 [ 324.073837][ T6774] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 324.073871][ T6774] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 324.073902][ T6774] ? reacquire_held_locks+0x117/0x1a0 [ 324.073939][ T6774] ? rt_spin_lock+0x1e2/0x400 [ 324.073974][ T6774] ? rt_spin_unlock+0x159/0x200 [ 324.074004][ T6774] ? rt_spin_unlock+0x165/0x200 [ 324.074049][ T6774] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 324.074079][ T6774] do_writepages+0x338/0x560 [ 324.074134][ T6774] ? rt_spin_unlock+0x159/0x200 [ 324.074171][ T6774] filemap_fdatawrite+0x1ec/0x2f0 [ 324.074212][ T6774] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 324.074245][ T6774] ? do_raw_spin_lock+0x12b/0x2f0 [ 324.074322][ T6774] ? rt_spin_unlock+0x159/0x200 [ 324.074353][ T6774] ? rt_spin_unlock+0x165/0x200 [ 324.074382][ T6774] f2fs_sync_dirty_inodes+0x30e/0x830 [ 324.074432][ T6774] f2fs_write_checkpoint+0xa3d/0x2710 [ 324.074505][ T6774] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 324.074612][ T6774] ? rt_spin_unlock+0x165/0x200 [ 324.074653][ T6774] kill_f2fs_super+0x2dd/0x700 [ 324.074695][ T6774] ? __pfx_kill_f2fs_super+0x10/0x10 [ 324.074843][ T6774] ? call_rcu+0x64d/0x8b0 [ 324.074883][ T6774] ? lockdep_hardirqs_on+0x7b/0x110 [ 324.074933][ T6774] deactivate_locked_super+0xbc/0x110 [ 324.074965][ T6774] cleanup_mnt+0x3d3/0x460 [ 324.075004][ T6774] task_work_run+0x1d9/0x270 [ 324.075059][ T6774] ? __pfx_task_work_run+0x10/0x10 [ 324.075101][ T6774] exit_to_user_mode_loop+0x204/0x770 [ 324.075136][ T6774] ? rcu_is_watching+0x16/0xb0 [ 324.075180][ T6774] do_syscall_64+0x328/0x520 [ 324.075211][ T6774] ? trace_irq_disable+0x3b/0x140 [ 324.075244][ T6774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.075271][ T6774] ? clear_bhb_loop+0x70/0xc0 [ 324.075303][ T6774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.075329][ T6774] RIP: 0033:0x7f99537db797 [ 324.075366][ T6774] Code: a2 c7 05 fc 6d 23 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 324.075387][ T6774] RSP: 002b:00007ffd89188b78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 324.075421][ T6774] RAX: 0000000000000000 RBX: 00007f995386d33b RCX: 00007f99537db797 [ 324.075439][ T6774] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd89188c30 [ 324.075455][ T6774] RBP: 00007ffd89188c30 R08: 00007ffd89189c30 R09: 00000000ffffffff [ 324.075473][ T6774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd89189cc0 [ 324.075489][ T6774] R13: 00007f995386d33b R14: 000000000004ed66 R15: 00007ffd89189d00 [ 324.075531][ T6774] [ 324.105517][ T6774] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 324.559065][ T1238] loop4: lost filesystem error report for type 5 error -108 [ 326.159301][ T6721] bio_check_eod: 29844 callbacks suppressed [ 326.162669][ T6677] syz.1.18: attempt to access beyond end of device [ 326.162669][ T6677] loop1: rw=0, sector=89016, nr_sectors = 8 limit=40427 [ 326.162948][ T6677] syz.1.18: attempt to access beyond end of device [ 326.162948][ T6677] loop1: rw=0, sector=89024, nr_sectors = 8 limit=40427 [ 326.163306][ T6677] syz.1.18: attempt to access beyond end of device [ 326.163306][ T6677] loop1: rw=0, sector=89032, nr_sectors = 8 limit=40427 [ 326.163631][ T6677] syz.1.18: attempt to access beyond end of device [ 326.163631][ T6677] loop1: rw=0, sector=89040, nr_sectors = 8 limit=40427 [ 326.164003][ T6721] syz.2.19: attempt to access beyond end of device [ 326.164003][ T6721] loop2: rw=0, sector=88232, nr_sectors = 8 limit=40427 [ 326.164423][ T6721] syz.2.19: attempt to access beyond end of device [ 326.164423][ T6721] loop2: rw=0, sector=88240, nr_sectors = 8 limit=40427 [ 326.164769][ T6721] syz.2.19: attempt to access beyond end of device [ 326.164769][ T6721] loop2: rw=0, sector=88248, nr_sectors = 8 limit=40427 [ 326.165116][ T6721] syz.2.19: attempt to access beyond end of device [ 326.165116][ T6721] loop2: rw=0, sector=88256, nr_sectors = 8 limit=40427 [ 326.165466][ T6721] syz.2.19: attempt to access beyond end of device [ 326.165466][ T6721] loop2: rw=0, sector=88264, nr_sectors = 8 limit=40427 [ 326.165844][ T6721] syz.2.19: attempt to access beyond end of device [ 326.165844][ T6721] loop2: rw=0, sector=88272, nr_sectors = 8 limit=40427 [ 327.485722][ T6830] loop4: detected capacity change from 0 to 40427 [ 327.562347][ T6830] F2FS-fs: heap/no_heap options were deprecated [ 327.562845][ T6830] F2FS-fs: heap/no_heap options were deprecated [ 327.762925][ T6830] F2FS-fs (loop4): Image doesn't support compression [ 327.773368][ T6830] F2FS-fs (loop4): invalid crc value [ 328.506705][ T6830] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 328.834894][ T6830] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 2026/09/09 05:58:25 executed programs: 9 [ 329.337446][ T6774] CPU: 0 UID: 0 PID: 6774 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 329.337483][ T6774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 329.337497][ T6774] Call Trace: [ 329.337507][ T6774] [ 329.337517][ T6774] dump_stack_lvl+0xe8/0x150 [ 329.337560][ T6774] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 329.337602][ T6774] f2fs_write_end_bio+0x1211/0x16e0 [ 329.337634][ T6774] ? blkg_put+0x22/0x240 [ 329.337677][ T6774] __submit_merged_bio+0x258/0x6a0 [ 329.337712][ T6774] ? rcu_is_watching+0x16/0xb0 [ 329.337760][ T6774] __submit_merged_write_cond+0x3c9/0x4e0 [ 329.337814][ T6774] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 329.337877][ T6774] f2fs_write_data_pages+0x2a27/0x36f0 [ 329.337944][ T6774] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 329.338022][ T6774] ? do_raw_spin_lock+0x12b/0x2f0 [ 329.338068][ T6774] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 329.338099][ T6774] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 329.338125][ T6774] ? reacquire_held_locks+0x117/0x1a0 [ 329.338166][ T6774] ? rt_spin_lock+0x1e2/0x400 [ 329.338196][ T6774] ? rt_spin_unlock+0x159/0x200 [ 329.338229][ T6774] ? rt_spin_unlock+0x165/0x200 [ 329.338250][ T6774] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 329.338285][ T6774] do_writepages+0x338/0x560 [ 329.338326][ T6774] ? rt_spin_unlock+0x159/0x200 [ 329.338361][ T6774] filemap_fdatawrite+0x1ec/0x2f0 [ 329.338396][ T6774] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 329.338426][ T6774] ? do_raw_spin_lock+0x12b/0x2f0 [ 329.338495][ T6774] ? rt_spin_unlock+0x159/0x200 [ 329.338522][ T6774] ? rt_spin_unlock+0x165/0x200 [ 329.338547][ T6774] f2fs_sync_dirty_inodes+0x30e/0x830 [ 329.338592][ T6774] f2fs_write_checkpoint+0xa3d/0x2710 [ 329.338664][ T6774] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 329.338737][ T6774] ? rt_spin_unlock+0x165/0x200 [ 329.338780][ T6774] kill_f2fs_super+0x2dd/0x700 [ 329.338818][ T6774] ? __pfx_kill_f2fs_super+0x10/0x10 [ 329.338861][ T6774] ? call_rcu+0x64d/0x8b0 [ 329.338894][ T6774] ? lockdep_hardirqs_on+0x7b/0x110 [ 329.338936][ T6774] deactivate_locked_super+0xbc/0x110 [ 329.338976][ T6774] cleanup_mnt+0x3d3/0x460 [ 329.339016][ T6774] task_work_run+0x1d9/0x270 [ 329.339045][ T6774] ? __pfx_task_work_run+0x10/0x10 [ 329.339079][ T6774] exit_to_user_mode_loop+0x204/0x770 [ 329.339109][ T6774] ? rcu_is_watching+0x16/0xb0 [ 329.339145][ T6774] do_syscall_64+0x328/0x520 [ 329.339172][ T6774] ? trace_irq_disable+0x3b/0x140 [ 329.339201][ T6774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.339222][ T6774] ? clear_bhb_loop+0x70/0xc0 [ 329.339251][ T6774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.339274][ T6774] RIP: 0033:0x7f99537db797 [ 329.339297][ T6774] Code: a2 c7 05 fc 6d 23 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 329.339314][ T6774] RSP: 002b:00007ffd89188b78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 329.339339][ T6774] RAX: 0000000000000000 RBX: 00007f995386d33b RCX: 00007f99537db797 [ 329.339355][ T6774] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd89188c30 [ 329.339369][ T6774] RBP: 00007ffd89188c30 R08: 00007ffd89189c30 R09: 00000000ffffffff [ 329.339385][ T6774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd89189cc0 [ 329.339400][ T6774] R13: 00007f995386d33b R14: 00000000000502d3 R15: 00007ffd89189d00 [ 329.339435][ T6774] [ 329.359014][ T6774] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 330.957033][ T6772] F2FS-fs (loop3): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 331.169376][ T6677] bio_check_eod: 31414 callbacks suppressed [ 331.171746][ T6620] syz.0.17: attempt to access beyond end of device [ 331.171746][ T6620] loop0: rw=0, sector=86896, nr_sectors = 8 limit=40427 [ 331.172176][ T6620] syz.0.17: attempt to access beyond end of device [ 331.172176][ T6620] loop0: rw=0, sector=86904, nr_sectors = 8 limit=40427 [ 331.172499][ T6620] syz.0.17: attempt to access beyond end of device [ 331.172499][ T6620] loop0: rw=0, sector=86912, nr_sectors = 8 limit=40427 [ 331.172808][ T6620] syz.0.17: attempt to access beyond end of device [ 331.172808][ T6620] loop0: rw=0, sector=86920, nr_sectors = 8 limit=40427 [ 331.173248][ T6772] syz.3.20: attempt to access beyond end of device [ 331.173248][ T6772] loop3: rw=524288, sector=87240, nr_sectors = 8 limit=40427 [ 331.174036][ T6772] syz.3.20: attempt to access beyond end of device [ 331.174036][ T6772] loop3: rw=524288, sector=87248, nr_sectors = 8 limit=40427 [ 331.174527][ T6772] syz.3.20: attempt to access beyond end of device [ 331.174527][ T6772] loop3: rw=524288, sector=87256, nr_sectors = 8 limit=40427 [ 331.176348][ T6620] syz.0.17: attempt to access beyond end of device [ 331.176348][ T6620] loop0: rw=0, sector=86928, nr_sectors = 8 limit=40427 [ 331.176649][ T6620] syz.0.17: attempt to access beyond end of device [ 331.176649][ T6620] loop0: rw=0, sector=86936, nr_sectors = 8 limit=40427 [ 331.311938][ T6677] syz.1.18: attempt to access beyond end of device [ 331.311938][ T6677] loop1: rw=524288, sector=88128, nr_sectors = 8 limit=40427 [ 333.363128][ T6837] loop4: detected capacity change from 0 to 40427 [ 333.371391][ T6837] F2FS-fs: heap/no_heap options were deprecated [ 333.380962][ T6837] F2FS-fs: heap/no_heap options were deprecated [ 333.399516][ T6837] F2FS-fs (loop4): Image doesn't support compression [ 333.409047][ T6837] F2FS-fs (loop4): invalid crc value [ 334.118854][ T6837] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 334.320836][ T6837] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 336.179310][ T6772] bio_check_eod: 42823 callbacks suppressed [ 336.181001][ T6772] syz.3.20: attempt to access beyond end of device [ 336.181001][ T6772] loop3: rw=0, sector=86352, nr_sectors = 8 limit=40427 [ 336.181471][ T6772] syz.3.20: attempt to access beyond end of device [ 336.181471][ T6772] loop3: rw=0, sector=86360, nr_sectors = 8 limit=40427 [ 336.181745][ T6772] syz.3.20: attempt to access beyond end of device [ 336.181745][ T6772] loop3: rw=0, sector=86368, nr_sectors = 8 limit=40427 [ 336.182115][ T6721] syz.2.19: attempt to access beyond end of device [ 336.182115][ T6721] loop2: rw=524288, sector=87656, nr_sectors = 8 limit=40427 [ 336.182481][ T6721] syz.2.19: attempt to access beyond end of device [ 336.182481][ T6721] loop2: rw=524288, sector=87664, nr_sectors = 8 limit=40427 [ 336.182798][ T6721] syz.2.19: attempt to access beyond end of device [ 336.182798][ T6721] loop2: rw=524288, sector=87672, nr_sectors = 8 limit=40427 [ 336.183140][ T6721] syz.2.19: attempt to access beyond end of device [ 336.183140][ T6721] loop2: rw=524288, sector=87680, nr_sectors = 8 limit=40427 [ 336.185458][ T6772] syz.3.20: attempt to access beyond end of device [ 336.185458][ T6772] loop3: rw=0, sector=86376, nr_sectors = 8 limit=40427 [ 336.185812][ T6772] syz.3.20: attempt to access beyond end of device [ 336.185812][ T6772] loop3: rw=0, sector=86384, nr_sectors = 8 limit=40427 [ 336.186152][ T6772] syz.3.20: attempt to access beyond end of device [ 336.186152][ T6772] loop3: rw=0, sector=86392, nr_sectors = 8 limit=40427 [ 341.189523][ T6677] bio_check_eod: 43670 callbacks suppressed [ 341.192001][ T6721] syz.2.19: attempt to access beyond end of device [ 341.192001][ T6721] loop2: rw=0, sector=88800, nr_sectors = 8 limit=40427 [ 341.192416][ T6721] syz.2.19: attempt to access beyond end of device [ 341.192416][ T6721] loop2: rw=0, sector=88808, nr_sectors = 8 limit=40427 [ 341.192726][ T6721] syz.2.19: attempt to access beyond end of device [ 341.192726][ T6721] loop2: rw=0, sector=88816, nr_sectors = 8 limit=40427 [ 341.193072][ T6721] syz.2.19: attempt to access beyond end of device [ 341.193072][ T6721] loop2: rw=0, sector=88824, nr_sectors = 8 limit=40427 [ 341.195459][ T6772] syz.3.20: attempt to access beyond end of device [ 341.195459][ T6772] loop3: rw=524288, sector=86232, nr_sectors = 8 limit=40427 [ 341.195837][ T6772] syz.3.20: attempt to access beyond end of device [ 341.195837][ T6772] loop3: rw=524288, sector=86240, nr_sectors = 8 limit=40427 [ 341.196158][ T6772] syz.3.20: attempt to access beyond end of device [ 341.196158][ T6772] loop3: rw=524288, sector=86248, nr_sectors = 8 limit=40427 [ 341.196478][ T6772] syz.3.20: attempt to access beyond end of device [ 341.196478][ T6772] loop3: rw=524288, sector=86256, nr_sectors = 8 limit=40427 [ 341.205900][ T6721] syz.2.19: attempt to access beyond end of device [ 341.205900][ T6721] loop2: rw=0, sector=88832, nr_sectors = 8 limit=40427 [ 341.323594][ T6677] syz.1.18: attempt to access beyond end of device [ 341.323594][ T6677] loop1: rw=0, sector=88104, nr_sectors = 8 limit=40427 [ 344.994622][ T6850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 345.047598][ T6850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 345.062471][ T6850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 345.073601][ T6850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 345.087949][ T6850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 345.659800][ T6850] Bluetooth: hci1: command 0x0406 tx timeout [ 346.199355][ T6772] bio_check_eod: 40651 callbacks suppressed [ 346.199451][ T6772] syz.3.20: attempt to access beyond end of device [ 346.199451][ T6772] loop3: rw=0, sector=89192, nr_sectors = 8 limit=40427 [ 346.199823][ T6772] syz.3.20: attempt to access beyond end of device [ 346.199823][ T6772] loop3: rw=0, sector=89200, nr_sectors = 8 limit=40427 [ 346.200238][ T6772] syz.3.20: attempt to access beyond end of device [ 346.200238][ T6772] loop3: rw=0, sector=89208, nr_sectors = 8 limit=40427 [ 346.200607][ T6772] syz.3.20: attempt to access beyond end of device [ 346.200607][ T6772] loop3: rw=0, sector=89216, nr_sectors = 8 limit=40427 [ 346.226768][ T6721] syz.2.19: attempt to access beyond end of device [ 346.226768][ T6721] loop2: rw=0, sector=86728, nr_sectors = 8 limit=40427 [ 346.227205][ T6721] syz.2.19: attempt to access beyond end of device [ 346.227205][ T6721] loop2: rw=0, sector=86736, nr_sectors = 8 limit=40427 [ 346.227541][ T6721] syz.2.19: attempt to access beyond end of device [ 346.227541][ T6721] loop2: rw=0, sector=86744, nr_sectors = 8 limit=40427 [ 346.228313][ T6772] syz.3.20: attempt to access beyond end of device [ 346.228313][ T6772] loop3: rw=0, sector=89224, nr_sectors = 8 limit=40427 [ 346.228806][ T6772] syz.3.20: attempt to access beyond end of device [ 346.228806][ T6772] loop3: rw=0, sector=89232, nr_sectors = 8 limit=40427 [ 346.229104][ T6772] syz.3.20: attempt to access beyond end of device [ 346.229104][ T6772] loop3: rw=0, sector=89240, nr_sectors = 8 limit=40427 [ 347.180190][ T5743] Bluetooth: hci5: command tx timeout [ 349.259296][ T5743] Bluetooth: hci5: command tx timeout [ 349.868523][ T6848] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.879348][ T6848] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.889574][ T6848] bridge_slave_0: entered allmulticast mode [ 349.919278][ T6848] bridge_slave_0: entered promiscuous mode [ 349.936601][ T6848] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.939869][ T6848] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.940658][ T6848] bridge_slave_1: entered allmulticast mode [ 349.987720][ T6848] bridge_slave_1: entered promiscuous mode [ 350.671869][ T6848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.700380][ T6848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.086832][ T6848] team0: Port device team_slave_0 added [ 351.115912][ T6848] team0: Port device team_slave_1 added [ 351.210836][ T6620] bio_check_eod: 38464 callbacks suppressed [ 351.210960][ T6721] syz.2.19: attempt to access beyond end of device [ 351.210960][ T6721] loop2: rw=0, sector=88592, nr_sectors = 8 limit=40427 [ 351.211750][ T6772] syz.3.20: attempt to access beyond end of device [ 351.211750][ T6772] loop3: rw=524288, sector=87400, nr_sectors = 8 limit=40427 [ 351.212180][ T6772] syz.3.20: attempt to access beyond end of device [ 351.212180][ T6772] loop3: rw=524288, sector=87408, nr_sectors = 8 limit=40427 [ 351.212487][ T6772] syz.3.20: attempt to access beyond end of device [ 351.212487][ T6772] loop3: rw=524288, sector=87416, nr_sectors = 8 limit=40427 [ 351.212895][ T6772] syz.3.20: attempt to access beyond end of device [ 351.212895][ T6772] loop3: rw=524288, sector=87424, nr_sectors = 8 limit=40427 [ 351.214273][ T6721] syz.2.19: attempt to access beyond end of device [ 351.214273][ T6721] loop2: rw=0, sector=88600, nr_sectors = 8 limit=40427 [ 351.214773][ T6721] syz.2.19: attempt to access beyond end of device [ 351.214773][ T6721] loop2: rw=0, sector=88608, nr_sectors = 8 limit=40427 [ 351.215212][ T6721] syz.2.19: attempt to access beyond end of device [ 351.215212][ T6721] loop2: rw=0, sector=88616, nr_sectors = 8 limit=40427 [ 351.215604][ T6721] syz.2.19: attempt to access beyond end of device [ 351.215604][ T6721] loop2: rw=0, sector=88624, nr_sectors = 8 limit=40427 [ 351.234279][ T6620] syz.0.17: attempt to access beyond end of device [ 351.234279][ T6620] loop0: rw=524288, sector=88336, nr_sectors = 8 limit=40427 [ 351.355048][ T5743] Bluetooth: hci5: command tx timeout [ 351.918365][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.918463][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.918496][ T6848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.959918][ T6848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.959982][ T6848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.960027][ T6848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.746932][ T6848] hsr_slave_0: entered promiscuous mode [ 352.760332][ T6848] hsr_slave_1: entered promiscuous mode [ 352.784701][ T6848] debugfs: 'hsr0' already exists in 'hsr' [ 352.790923][ T6848] Cannot create hsr debugfs directory [ 353.419269][ T5743] Bluetooth: hci5: command tx timeout [ 356.219799][ T6721] bio_check_eod: 37979 callbacks suppressed [ 356.219908][ T6721] syz.2.19: attempt to access beyond end of device [ 356.219908][ T6721] loop2: rw=524288, sector=86368, nr_sectors = 8 limit=40427 [ 356.220353][ T6721] syz.2.19: attempt to access beyond end of device [ 356.220353][ T6721] loop2: rw=524288, sector=86376, nr_sectors = 8 limit=40427 [ 356.220816][ T6721] syz.2.19: attempt to access beyond end of device [ 356.220816][ T6721] loop2: rw=524288, sector=86384, nr_sectors = 8 limit=40427 [ 356.221193][ T6721] syz.2.19: attempt to access beyond end of device [ 356.221193][ T6721] loop2: rw=524288, sector=86392, nr_sectors = 8 limit=40427 [ 356.221501][ T6721] syz.2.19: attempt to access beyond end of device [ 356.221501][ T6721] loop2: rw=524288, sector=86400, nr_sectors = 8 limit=40427 [ 356.221872][ T6721] syz.2.19: attempt to access beyond end of device [ 356.221872][ T6721] loop2: rw=524288, sector=86408, nr_sectors = 8 limit=40427 [ 356.222268][ T6721] syz.2.19: attempt to access beyond end of device [ 356.222268][ T6721] loop2: rw=524288, sector=86416, nr_sectors = 8 limit=40427 [ 356.222672][ T6721] syz.2.19: attempt to access beyond end of device [ 356.222672][ T6721] loop2: rw=524288, sector=86424, nr_sectors = 8 limit=40427 [ 356.222998][ T6721] syz.2.19: attempt to access beyond end of device [ 356.222998][ T6721] loop2: rw=524288, sector=86432, nr_sectors = 8 limit=40427 [ 356.223423][ T6721] syz.2.19: attempt to access beyond end of device [ 356.223423][ T6721] loop2: rw=524288, sector=86440, nr_sectors = 8 limit=40427 [ 356.813881][ T6848] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 356.914388][ T6848] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 356.933712][ T6848] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 357.045409][ T6848] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 357.062557][ T6848] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 357.295783][ T6848] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 357.306596][ T6848] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 357.455869][ T6848] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 358.263131][ T6848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.414068][ T6848] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.476109][ T1514] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.476552][ T1514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.548541][ T2293] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.561016][ T2293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.229236][ T6677] bio_check_eod: 35231 callbacks suppressed [ 361.229336][ T6677] syz.1.18: attempt to access beyond end of device [ 361.229336][ T6677] loop1: rw=524288, sector=87800, nr_sectors = 8 limit=40427 [ 361.229517][ T6677] syz.1.18: attempt to access beyond end of device [ 361.229517][ T6677] loop1: rw=524288, sector=87808, nr_sectors = 8 limit=40427 [ 361.229702][ T6677] syz.1.18: attempt to access beyond end of device [ 361.229702][ T6677] loop1: rw=524288, sector=87816, nr_sectors = 8 limit=40427 [ 361.229886][ T6677] syz.1.18: attempt to access beyond end of device [ 361.229886][ T6677] loop1: rw=524288, sector=87824, nr_sectors = 8 limit=40427 [ 361.232947][ T6677] syz.1.18: attempt to access beyond end of device [ 361.232947][ T6677] loop1: rw=524288, sector=87832, nr_sectors = 8 limit=40427 [ 361.233336][ T6677] syz.1.18: attempt to access beyond end of device [ 361.233336][ T6677] loop1: rw=524288, sector=87840, nr_sectors = 8 limit=40427 [ 361.233661][ T6677] syz.1.18: attempt to access beyond end of device [ 361.233661][ T6677] loop1: rw=524288, sector=87848, nr_sectors = 8 limit=40427 [ 361.233975][ T6677] syz.1.18: attempt to access beyond end of device [ 361.233975][ T6677] loop1: rw=524288, sector=87856, nr_sectors = 8 limit=40427 [ 361.236200][ T6677] syz.1.18: attempt to access beyond end of device [ 361.236200][ T6677] loop1: rw=524288, sector=87864, nr_sectors = 8 limit=40427 [ 361.236475][ T6677] syz.1.18: attempt to access beyond end of device [ 361.236475][ T6677] loop1: rw=524288, sector=87872, nr_sectors = 8 limit=40427 [ 362.056471][ T6848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.719300][ T6848] veth0_vlan: entered promiscuous mode [ 363.856638][ T6848] veth1_vlan: entered promiscuous mode [ 364.242386][ T6848] veth0_macvtap: entered promiscuous mode [ 364.311703][ T6848] veth1_macvtap: entered promiscuous mode [ 364.633364][ T6848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.680877][ T6848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.991659][ T1514] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.012269][ T1514] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.023561][ T1514] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.023605][ T1514] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.146006][ T5743] Bluetooth: hci2: command 0x0406 tx timeout [ 366.242831][ T6620] bio_check_eod: 31006 callbacks suppressed [ 366.242963][ T6620] syz.0.17: attempt to access beyond end of device [ 366.242963][ T6620] loop0: rw=0, sector=86128, nr_sectors = 8 limit=40427 [ 366.243183][ T6620] syz.0.17: attempt to access beyond end of device [ 366.243183][ T6620] loop0: rw=0, sector=86136, nr_sectors = 8 limit=40427 [ 366.243399][ T6620] syz.0.17: attempt to access beyond end of device [ 366.243399][ T6620] loop0: rw=0, sector=86144, nr_sectors = 8 limit=40427 [ 366.243604][ T6620] syz.0.17: attempt to access beyond end of device [ 366.243604][ T6620] loop0: rw=0, sector=86152, nr_sectors = 8 limit=40427 [ 366.243792][ T6620] syz.0.17: attempt to access beyond end of device [ 366.243792][ T6620] loop0: rw=0, sector=86160, nr_sectors = 8 limit=40427 [ 366.244003][ T6620] syz.0.17: attempt to access beyond end of device [ 366.244003][ T6620] loop0: rw=0, sector=86168, nr_sectors = 8 limit=40427 [ 366.244209][ T6620] syz.0.17: attempt to access beyond end of device [ 366.244209][ T6620] loop0: rw=0, sector=86176, nr_sectors = 8 limit=40427 [ 366.248185][ T6772] syz.3.20: attempt to access beyond end of device [ 366.248185][ T6772] loop3: rw=524288, sector=86592, nr_sectors = 8 limit=40427 [ 366.248481][ T6772] syz.3.20: attempt to access beyond end of device [ 366.248481][ T6772] loop3: rw=524288, sector=86600, nr_sectors = 8 limit=40427 [ 366.248910][ T6772] syz.3.20: attempt to access beyond end of device [ 366.248910][ T6772] loop3: rw=524288, sector=86608, nr_sectors = 8 limit=40427 [ 366.939490][ T1514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.940531][ T1514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.310585][ T1514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.319470][ T1514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/09 05:59:04 executed programs: 10 [ 370.823699][ T6893] loop5: detected capacity change from 0 to 40427 [ 370.843429][ T6893] F2FS-fs: heap/no_heap options were deprecated [ 370.850424][ T6893] F2FS-fs: heap/no_heap options were deprecated [ 371.076304][ T6893] F2FS-fs (loop5): Image doesn't support compression [ 371.097328][ T6893] F2FS-fs (loop5): invalid crc value [ 371.249912][ T6772] bio_check_eod: 34314 callbacks suppressed [ 371.250009][ T6772] syz.3.20: attempt to access beyond end of device [ 371.250009][ T6772] loop3: rw=0, sector=89344, nr_sectors = 8 limit=40427 [ 371.250052][ T6677] syz.1.18: attempt to access beyond end of device [ 371.250052][ T6677] loop1: rw=524288, sector=88024, nr_sectors = 8 limit=40427 [ 371.250330][ T6772] syz.3.20: attempt to access beyond end of device [ 371.250330][ T6772] loop3: rw=0, sector=89352, nr_sectors = 8 limit=40427 [ 371.250780][ T6772] syz.3.20: attempt to access beyond end of device [ 371.250780][ T6772] loop3: rw=0, sector=89360, nr_sectors = 8 limit=40427 [ 371.251084][ T6772] syz.3.20: attempt to access beyond end of device [ 371.251084][ T6772] loop3: rw=0, sector=89368, nr_sectors = 8 limit=40427 [ 371.251426][ T6772] syz.3.20: attempt to access beyond end of device [ 371.251426][ T6772] loop3: rw=0, sector=89376, nr_sectors = 8 limit=40427 [ 371.252245][ T6721] syz.2.19: attempt to access beyond end of device [ 371.252245][ T6721] loop2: rw=0, sector=89192, nr_sectors = 8 limit=40427 [ 371.252600][ T6721] syz.2.19: attempt to access beyond end of device [ 371.252600][ T6721] loop2: rw=0, sector=89200, nr_sectors = 8 limit=40427 [ 371.252922][ T6721] syz.2.19: attempt to access beyond end of device [ 371.252922][ T6721] loop2: rw=0, sector=89208, nr_sectors = 8 limit=40427 [ 371.253326][ T6721] syz.2.19: attempt to access beyond end of device [ 371.253326][ T6721] loop2: rw=0, sector=89216, nr_sectors = 8 limit=40427 [ 372.343315][ T6893] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 2026/09/09 05:59:09 executed programs: 11 [ 376.259855][ T6721] bio_check_eod: 35198 callbacks suppressed [ 376.269731][ T6677] syz.1.18: attempt to access beyond end of device [ 376.269731][ T6677] loop1: rw=524288, sector=89032, nr_sectors = 8 limit=40427 [ 376.279573][ T6677] syz.1.18: attempt to access beyond end of device [ 376.279573][ T6677] loop1: rw=524288, sector=89040, nr_sectors = 8 limit=40427 [ 376.279702][ T6677] syz.1.18: attempt to access beyond end of device [ 376.279702][ T6677] loop1: rw=524288, sector=89048, nr_sectors = 8 limit=40427 [ 376.279826][ T6677] syz.1.18: attempt to access beyond end of device [ 376.279826][ T6677] loop1: rw=524288, sector=89056, nr_sectors = 8 limit=40427 [ 376.279926][ T6677] syz.1.18: attempt to access beyond end of device [ 376.279926][ T6677] loop1: rw=524288, sector=89064, nr_sectors = 8 limit=40427 [ 376.280043][ T6677] syz.1.18: attempt to access beyond end of device [ 376.280043][ T6677] loop1: rw=524288, sector=89072, nr_sectors = 8 limit=40427 [ 376.280148][ T6677] syz.1.18: attempt to access beyond end of device [ 376.280148][ T6677] loop1: rw=524288, sector=89080, nr_sectors = 8 limit=40427 [ 376.280264][ T6677] syz.1.18: attempt to access beyond end of device [ 376.280264][ T6677] loop1: rw=524288, sector=89088, nr_sectors = 8 limit=40427 [ 376.280364][ T6677] syz.1.18: attempt to access beyond end of device [ 376.280364][ T6677] loop1: rw=524288, sector=89096, nr_sectors = 8 limit=40427 [ 376.282587][ T6721] syz.2.19: attempt to access beyond end of device [ 376.282587][ T6721] loop2: rw=524288, sector=87288, nr_sectors = 8 limit=40427 [ 376.796713][ T6898] loop5: detected capacity change from 0 to 40427 [ 376.970320][ T6898] F2FS-fs: heap/no_heap options were deprecated [ 376.970869][ T6898] F2FS-fs: heap/no_heap options were deprecated [ 376.997033][ T6898] F2FS-fs (loop5): Image doesn't support compression [ 377.055440][ T6898] F2FS-fs (loop5): invalid crc value [ 378.054560][ T6898] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 378.188395][ T6898] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 381.270689][ T6620] bio_check_eod: 34562 callbacks suppressed [ 381.270800][ T6620] syz.0.17: attempt to access beyond end of device [ 381.270800][ T6620] loop0: rw=524288, sector=86616, nr_sectors = 8 limit=40427 [ 381.271388][ T6620] syz.0.17: attempt to access beyond end of device [ 381.271388][ T6620] loop0: rw=524288, sector=86624, nr_sectors = 8 limit=40427 [ 381.272728][ T6677] syz.1.18: attempt to access beyond end of device [ 381.272728][ T6677] loop1: rw=524288, sector=89768, nr_sectors = 8 limit=40427 [ 381.273226][ T6677] syz.1.18: attempt to access beyond end of device [ 381.273226][ T6677] loop1: rw=524288, sector=89776, nr_sectors = 8 limit=40427 [ 381.273630][ T6677] syz.1.18: attempt to access beyond end of device [ 381.273630][ T6677] loop1: rw=524288, sector=89784, nr_sectors = 8 limit=40427 [ 381.274748][ T6620] syz.0.17: attempt to access beyond end of device [ 381.274748][ T6620] loop0: rw=524288, sector=86632, nr_sectors = 8 limit=40427 [ 381.283243][ T6620] syz.0.17: attempt to access beyond end of device [ 381.283243][ T6620] loop0: rw=524288, sector=86640, nr_sectors = 8 limit=40427 [ 381.283749][ T6620] syz.0.17: attempt to access beyond end of device [ 381.283749][ T6620] loop0: rw=524288, sector=86648, nr_sectors = 8 limit=40427 [ 381.284141][ T6620] syz.0.17: attempt to access beyond end of device [ 381.284141][ T6620] loop0: rw=524288, sector=86656, nr_sectors = 8 limit=40427 [ 381.286735][ T6677] syz.1.18: attempt to access beyond end of device [ 381.286735][ T6677] loop1: rw=524288, sector=89792, nr_sectors = 8 limit=40427 [ 383.034663][ T6903] loop5: detected capacity change from 0 to 40427 [ 383.070319][ T6903] F2FS-fs: heap/no_heap options were deprecated [ 383.081068][ T6903] F2FS-fs: heap/no_heap options were deprecated [ 383.138433][ T6903] F2FS-fs (loop5): Image doesn't support compression [ 383.245663][ T6903] F2FS-fs (loop5): invalid crc value [ 383.775885][ T6903] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 2026/09/09 05:59:20 executed programs: 13 [ 384.565518][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.566348][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.280320][ T6620] bio_check_eod: 37074 callbacks suppressed [ 386.280424][ T6620] syz.0.17: attempt to access beyond end of device [ 386.280424][ T6620] loop0: rw=0, sector=87168, nr_sectors = 8 limit=40427 [ 386.280884][ T6620] syz.0.17: attempt to access beyond end of device [ 386.280884][ T6620] loop0: rw=0, sector=87176, nr_sectors = 8 limit=40427 [ 386.281190][ T6620] syz.0.17: attempt to access beyond end of device [ 386.281190][ T6620] loop0: rw=0, sector=87184, nr_sectors = 8 limit=40427 [ 386.281517][ T6620] syz.0.17: attempt to access beyond end of device [ 386.281517][ T6620] loop0: rw=0, sector=87192, nr_sectors = 8 limit=40427 [ 386.284061][ T6772] syz.3.20: attempt to access beyond end of device [ 386.284061][ T6772] loop3: rw=0, sector=89120, nr_sectors = 8 limit=40427 [ 386.284501][ T6772] syz.3.20: attempt to access beyond end of device [ 386.284501][ T6772] loop3: rw=0, sector=89128, nr_sectors = 8 limit=40427 [ 386.284811][ T6772] syz.3.20: attempt to access beyond end of device [ 386.284811][ T6772] loop3: rw=0, sector=89136, nr_sectors = 8 limit=40427 [ 386.286935][ T6677] syz.1.18: attempt to access beyond end of device [ 386.286935][ T6677] loop1: rw=0, sector=86720, nr_sectors = 8 limit=40427 [ 386.287357][ T6677] syz.1.18: attempt to access beyond end of device [ 386.287357][ T6677] loop1: rw=0, sector=86728, nr_sectors = 8 limit=40427 [ 386.287659][ T6677] syz.1.18: attempt to access beyond end of device [ 386.287659][ T6677] loop1: rw=0, sector=86736, nr_sectors = 8 limit=40427 [ 386.757113][ T6908] loop5: detected capacity change from 0 to 40427 [ 386.772112][ T6908] F2FS-fs: heap/no_heap options were deprecated [ 386.781174][ T6908] F2FS-fs: heap/no_heap options were deprecated [ 386.810860][ T6908] F2FS-fs (loop5): Image doesn't support compression [ 386.848546][ T6908] F2FS-fs (loop5): invalid crc value [ 387.561946][ T6908] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 387.688860][ T6908] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 388.029690][ T6848] CPU: 0 UID: 0 PID: 6848 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 388.029726][ T6848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 388.029745][ T6848] Call Trace: [ 388.029821][ T6848] [ 388.029858][ T6848] dump_stack_lvl+0xe8/0x150 [ 388.030027][ T6848] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 388.030105][ T6848] f2fs_write_end_bio+0x1211/0x16e0 [ 388.030135][ T6848] ? blkg_put+0x22/0x240 [ 388.030203][ T6848] __submit_merged_bio+0x258/0x6a0 [ 388.030239][ T6848] ? rcu_is_watching+0x16/0xb0 [ 388.030304][ T6848] __submit_merged_write_cond+0x3c9/0x4e0 [ 388.030351][ T6848] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 388.030413][ T6848] f2fs_write_data_pages+0x2a27/0x36f0 [ 388.030479][ T6848] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 388.030557][ T6848] ? do_raw_spin_lock+0x12b/0x2f0 [ 388.030610][ T6848] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 388.030734][ T6848] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 388.030760][ T6848] ? reacquire_held_locks+0x117/0x1a0 [ 388.030793][ T6848] ? rt_spin_lock+0x1e2/0x400 [ 388.030824][ T6848] ? rt_spin_unlock+0x159/0x200 [ 388.030851][ T6848] ? rt_spin_unlock+0x165/0x200 [ 388.030872][ T6848] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 388.030898][ T6848] do_writepages+0x338/0x560 [ 388.030950][ T6848] ? rt_spin_unlock+0x159/0x200 [ 388.030984][ T6848] filemap_fdatawrite+0x1ec/0x2f0 [ 388.031020][ T6848] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 388.031057][ T6848] ? do_raw_spin_lock+0x12b/0x2f0 [ 388.031129][ T6848] ? rt_spin_unlock+0x159/0x200 [ 388.031157][ T6848] ? rt_spin_unlock+0x165/0x200 [ 388.031182][ T6848] f2fs_sync_dirty_inodes+0x30e/0x830 [ 388.031227][ T6848] f2fs_write_checkpoint+0xa3d/0x2710 [ 388.031291][ T6848] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 388.031362][ T6848] ? rt_spin_unlock+0x165/0x200 [ 388.031398][ T6848] kill_f2fs_super+0x2dd/0x700 [ 388.031435][ T6848] ? __pfx_kill_f2fs_super+0x10/0x10 [ 388.031476][ T6848] ? call_rcu+0x64d/0x8b0 [ 388.031509][ T6848] ? lockdep_hardirqs_on+0x7b/0x110 [ 388.031580][ T6848] deactivate_locked_super+0xbc/0x110 [ 388.031638][ T6848] cleanup_mnt+0x3d3/0x460 [ 388.031678][ T6848] task_work_run+0x1d9/0x270 [ 388.031719][ T6848] ? __pfx_task_work_run+0x10/0x10 [ 388.031756][ T6848] exit_to_user_mode_loop+0x204/0x770 [ 388.031786][ T6848] ? rcu_is_watching+0x16/0xb0 [ 388.031825][ T6848] do_syscall_64+0x328/0x520 [ 388.031881][ T6848] ? trace_irq_disable+0x3b/0x140 [ 388.031925][ T6848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.031964][ T6848] ? clear_bhb_loop+0x70/0xc0 [ 388.031993][ T6848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.032021][ T6848] RIP: 0033:0x7f8f2a3db797 [ 388.032082][ T6848] Code: a2 c7 05 fc 6d 23 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 388.032101][ T6848] RSP: 002b:00007fff8bd6b958 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 388.032157][ T6848] RAX: 0000000000000000 RBX: 00007f8f2a46d33b RCX: 00007f8f2a3db797 [ 388.032182][ T6848] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff8bd6ba10 [ 388.032196][ T6848] RBP: 00007fff8bd6ba10 R08: 00007fff8bd6ca10 R09: 00000000ffffffff [ 388.032217][ T6848] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff8bd6caa0 [ 388.032232][ T6848] R13: 00007f8f2a46d33b R14: 000000000005e810 R15: 00007fff8bd6cae0 [ 388.032269][ T6848] [ 388.056747][ T6848] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 391.289343][ T6772] bio_check_eod: 32207 callbacks suppressed [ 391.292612][ T6677] syz.1.18: attempt to access beyond end of device [ 391.292612][ T6677] loop1: rw=524288, sector=86528, nr_sectors = 8 limit=40427 [ 391.293520][ T6721] syz.2.19: attempt to access beyond end of device [ 391.293520][ T6721] loop2: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 391.293916][ T6721] syz.2.19: attempt to access beyond end of device [ 391.293916][ T6721] loop2: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 391.294246][ T6721] syz.2.19: attempt to access beyond end of device [ 391.294246][ T6721] loop2: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 391.296553][ T6677] syz.1.18: attempt to access beyond end of device [ 391.296553][ T6677] loop1: rw=524288, sector=86536, nr_sectors = 8 limit=40427 [ 391.296879][ T6677] syz.1.18: attempt to access beyond end of device [ 391.296879][ T6677] loop1: rw=524288, sector=86544, nr_sectors = 8 limit=40427 [ 391.297159][ T6677] syz.1.18: attempt to access beyond end of device [ 391.297159][ T6677] loop1: rw=524288, sector=86552, nr_sectors = 8 limit=40427 [ 391.297540][ T6677] syz.1.18: attempt to access beyond end of device [ 391.297540][ T6677] loop1: rw=524288, sector=86560, nr_sectors = 8 limit=40427 [ 391.298648][ T6772] syz.3.20: attempt to access beyond end of device [ 391.298648][ T6772] loop3: rw=0, sector=87280, nr_sectors = 8 limit=40427 [ 391.298808][ T6772] syz.3.20: attempt to access beyond end of device [ 391.298808][ T6772] loop3: rw=0, sector=87288, nr_sectors = 8 limit=40427 [ 391.756030][ T6850] Bluetooth: hci3: command 0x0406 tx timeout [ 392.401908][ T6915] loop5: detected capacity change from 0 to 40427 [ 392.474746][ T6915] F2FS-fs: heap/no_heap options were deprecated [ 392.482960][ T6915] F2FS-fs: heap/no_heap options were deprecated [ 392.516159][ T6915] F2FS-fs (loop5): Image doesn't support compression [ 392.562420][ T6915] F2FS-fs (loop5): invalid crc value [ 393.302289][ T6915] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 393.776861][ T6843] F2FS-fs (loop4): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials 2026/09/09 05:59:30 executed programs: 15 [ 394.782409][ T38] INFO: task kworker/u8:22:3370 blocked for more than 143 seconds. [ 394.844889][ T38] Not tainted syzkaller #0 [ 394.844911][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 394.844922][ T38] task:kworker/u8:22 state:D stack:21824 pid:3370 tgid:3370 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 394.844989][ T38] Workqueue: writeback wb_workfn (flush-7:0) [ 394.845061][ T38] Call Trace: [ 394.845069][ T38] [ 394.845084][ T38] __schedule+0x16d9/0x5700 [ 394.845118][ T38] ? __lock_acquire+0x747/0x2de0 [ 394.845160][ T38] ? __pfx_sched_clock_cpu+0x10/0x10 [ 394.845211][ T38] ? __pfx___schedule+0x10/0x10 [ 394.845257][ T38] rt_mutex_schedule+0x76/0xf0 [ 394.845286][ T38] ? __rt_mutex_slowlock_locked+0x1d6/0x25b0 [ 394.845311][ T38] __rt_mutex_slowlock_locked+0x1f88/0x25b0 [ 394.845351][ T38] ? __rt_mutex_slowlock_locked+0x1d6/0x25b0 [ 394.845383][ T38] ? __pfx___rt_mutex_slowlock_locked+0x10/0x10 [ 394.845426][ T38] ? rcu_is_watching+0x16/0xb0 [ 394.845480][ T38] rt_mutex_slowlock+0xbd/0x180 [ 394.845517][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 394.845562][ T38] ? lock_acquire+0x115/0x350 [ 394.845598][ T38] rwbase_write_lock+0x14c/0x720 [ 394.845642][ T38] f2fs_down_write_trace+0x34/0x1f0 [ 394.845683][ T38] f2fs_balance_fs+0x5d1/0x810 [ 394.845706][ T38] ? __pfx_from_kgid+0x10/0x10 [ 394.845748][ T38] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 394.845768][ T38] ? f2fs_inode_chksum_set+0x13e/0x630 [ 394.845807][ T38] ? set_raw_inline+0x28b/0x390 [ 394.845838][ T38] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 394.845869][ T38] ? f2fs_update_inode+0x139a/0x25c0 [ 394.845908][ T38] ? folio_unlock+0x101/0x160 [ 394.845945][ T38] ? f2fs_update_inode_page+0x27f/0x360 [ 394.845974][ T38] ? rt_spi ** replaying previous printk message ** [ 394.845974][ T38] ? rt_spin_unlock+0x159/0x200 [ 394.846001][ T38] f2fs_write_inode+0x408/0x5f0 [ 394.846036][ T38] __writeback_single_inode+0x6a0/0x1230 [ 394.846073][ T38] writeback_sb_inodes+0x9db/0x1ab0 [ 394.846105][ T38] ? mark_lock+0x182/0x190 [ 394.846152][ T38] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 394.846211][ T38] ? __pfx_down_read_trylock+0x10/0x10 [ 394.846252][ T38] __writeback_inodes_wb+0x114/0x240 [ 394.846286][ T38] wb_writeback+0x42f/0xad0 [ 394.846311][ T38] ? queue_io+0x2a1/0x450 [ 394.851361][ T38] ? __pfx_wb_writeback+0x10/0x10 [ 394.851558][ T38] wb_workfn+0xc98/0x10f0 [ 394.851700][ T38] ? __pfx_wb_workfn+0x10/0x10 [ 394.851799][ T38] ? trace_hrtimer_start+0x82/0x200 [ 394.851901][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 394.852001][ T38] ? lock_acquire+0x115/0x350 [ 394.852103][ T38] ? rcu_is_watching+0x16/0xb0 [ 394.852202][ T38] ? process_scheduled_works+0x97a/0x1630 [ 394.852255][ T38] process_scheduled_works+0xc3d/0x1630 [ 394.852407][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 394.852527][ T38] ? assign_work+0x3cf/0x5d0 [ 394.852626][ T38] worker_thread+0xa47/0xfb0 [ 394.859713][ T38] kthread+0x38b/0x470 [ 394.859832][ T38] ? __pfx_worker_thread+0x10/0x10 [ 394.859920][ T38] ? __pfx_kthread+0x10/0x10 [ 394.860042][ T38] ret_from_fork+0x514/0xb70 [ 394.860159][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 394.860219][ T38] ? __switch_to+0xc89/0x1420 [ 394.860318][ T38] ? __pfx_kthread+0x10/0x10 [ 394.860403][ T38] ret_from_fork_asm+0x1a/0x30 [ 394.860539][ T38] [ 394.860746][ T38] [ 394.860746][ T38] Showing all locks held in the system: [ 394.860771][ T38] locks held by pr/ttyS0/17: 3, last CPU#1: [ 394.860881][ T38] #0: ffffffff8e09d5f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 394.876259][ T38] #1: ffffffff99e9c1f8 (&port_lock_key){+.+.}-{3:3}, at: nbcon_kthread_func+0x64c/0x880 [ 394.876492][ T38] #2: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 394.876646][ T38] locks held by rcuc/0/20: 3, last CPU#0: [ 394.876689][ T38] #0: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 394.876933][ T38] #1: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 394.877097][ T38] #2: ffffffff8e1c3c60 (rcu_callback){....}-{0:0}, at: rcu_cpu_kthread+0x217/0x1740 [ 394.877193][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 394.877242][ T38] #0: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 394.877422][ T38] locks held by kworker/u8:6/148: 4, on CPU#0: [ 394.877458][ T38] #0: ffff88801eafd938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 394.877661][ T38] #1: ffffc900041afc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 394.882659][ T38] #2: ffff8880298360e0 (&type->s_umount_key#57){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 394.882861][ T38] #3: ffff88805c7a5ab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 394.883063][ T38] locks held by kworker/u8:8/157: 4, on CPU#1: [ 394.883114][ T38] #0: ffff88801eafd938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 394.883279][ T38] #1: ffffc900041dfc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 394.883472][ T38] #2: ffff88802d5720e0 (&type->s_umount_key#57){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 394.883531][ T38] #3: ffff8880588c9ab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 394.883750][ T38] locks held by kworker/0:2/1238: 2, last CPU#0: [ 394.883794][ T38] #0: ffff88803c00e538 ((wq_completion)wg-crypt-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 394.888846][ T38] #1: ffffc90006db7c40 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 394.889086][ T38] locks held by kworker/u8:14/2293: 4, on CPU#0: [ 394.889152][ T38] #0: ffff88801eafd938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 394.889215][ T38] #1: ffffc9000891fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 394.889276][ T38] #2: ffff8880356240e0 (&type->s_umount_key#57){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 394.889421][ T38] #3: ffff888021f69ab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 394.889556][ T38] locks held by kworker/u8:19/3339: 4, on CPU#1: [ 394.889600][ T38] #0: ffff88801eafd938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 394.889764][ T38] #1: ffffc9000ff77c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 394.889947][ T38] #2: ffff88802c1c60e0 (&type->s_umount_key#57){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 394.890110][ T38] #3: ffff88805b3f5ab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 394.908996][ T38] locks held by kworker/u8:22/3370: 4, on CPU#0: [ 394.909078][ T38] #0: ffff88801eafd938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 394.909344][ T38] #1: ffffc90010087c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 394.909416][ T38] #2: ffff8880392800e0 (&type->s_umount_key#57){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 394.909577][ T38] #3: ffff888045ba5ab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 394.909830][ T38] locks held by getty/5352: 2, on CPU#1: [ 394.909886][ T38] #0: ffff8880364fb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 394.910269][ T38] #1: ffffc900044d62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 394.910476][ T38] locks held by syz.0.17/6620: 5, last CPU#0: [ 394.922537][ T38] #0: ffff888039280510 (sb_writers#12){.+.+}-{0:0}, at: vfs_fallocate+0x5e9/0x7f0 [ 394.922829][ T38] #1: ffff88805c2fd860 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: f2fs_fallocate+0x23f/0x980 [ 394.923038][ T38] #2: ffff888045ba5d88 (&sbi->pin_sem){+.+.}-{4:4}, at: f2fs_expand_inode_data+0x57a/0xb10 [ 394.923231][ T38] #3: ffff888045ba5ab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 394.923447][ T38] #4: ffff8880b863c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 394.923651][ T38] locks held by syz.1.18/6677: 5, last CPU#1: [ 394.923700][ T38] #0: ffff88802d572510 (sb_writers#12){.+.+}-{0:0}, at: vfs_fallocate+0x5e9/0x7f0 [ 394.923857][ T38] #1: ffff88805c2fb1c0 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: f2fs_fallocate+0x23f/0x980 [ 394.945554][ T38] #2: ffff8880588c9d88 (&sbi->pin_sem){+.+.}-{4:4}, at: f2fs_expand_inode_data+0x57a/0xb10 [ 394.945803][ T38] #3: ffff8880588c9ab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 394.946006][ T38] #4: ffff88805c2fb838 (&fi->i_gc_rwsem[1]){+.+.}-{4:4}, at: do_garbage_collect+0x2b4a/0x68d0 [ 394.946182][ T38] locks held by syz.2.19/6721: 6, last CPU#0: [ 394.946227][ T38] #0: ffff888029836510 (sb_writers#12){.+.+}-{0:0}, at: vfs_fallocate+0x5e9/0x7f0 [ 394.946397][ T38] #1: ffff8880453f4510 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: f2fs_fallocate+0x23f/0x980 [ 394.946562][ T38] #2: ffff88805c7a5d88 (&sbi->pin_sem){+.+.}-{4:4}, at: f2fs_expand_inode_data+0x57a/0xb10 [ 394.946731][ T38] #3: ffff88805c7a5ab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 394.946956][ T38] #4: ffff8880453f4b88 (&fi->i_gc_rwsem[1]){+.+.}-{4:4}, at: do_garbage_collect+0x31f7/0x68d0 [ 394.947015][ T38] #5: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 394.969402][ T38] locks held by syz.3.20/6772: 7, last CPU#0: [ 394.969455][ T38] #0: ffff88802c1c6510 (sb_writers#12){.+.+}-{0:0}, at: vfs_fallocate+0x5e9/0x7f0 [ 394.969674][ T38] #1: ffff88805c2f94c8 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: f2fs_fallocate+0x23f/0x980 [ 394.969858][ T38] #2: ffff88805b3f5d88 (&sbi->pin_sem){+.+.}-{4:4}, at: f2fs_expand_inode_data+0x57a/0xb10 [ 394.970058][ T38] #3: ffff88805b3f5ab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 394.970235][ T38] #4: ffff88805c2f9b40 (&fi->i_gc_rwsem[1]){+.+.}-{4:4}, at: do_garbage_collect+0x2b4a/0x68d0 [ 394.970481][ T38] #5: ffff88805c2f9aa8 (&fi->i_gc_rwsem[0]){+.+.}-{4:4}, at: do_garbage_collect+0x2b6b/0x68d0 [ 394.984983][ T38] #6: ffff88802977bcf8 (&et->lock){++++}-{3:3}, at: __lookup_extent_tree+0x139/0xc80 [ 394.985198][ T38] locks held by syz.4.24/6843: 5, last CPU#0: [ 394.985242][ T38] #0: ffff888035624510 (sb_writers#12){.+.+}-{0:0}, at: vfs_fallocate+0x5e9/0x7f0 [ 394.985427][ T38] #1: ffff88805c398b20 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: f2fs_fallocate+0x23f/0x980 [ 394.985606][ T38] #2: ffff888021f69d88 (&sbi->pin_sem){+.+.}-{4:4}, at: f2fs_expand_inode_data+0x57a/0xb10 [ 394.985770][ T38] #3: ffff888021f69ab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 394.985980][ T38] #4: ffff88805c399198 (&fi->i_gc_rwsem[1]){+.+.}-{4:4}, at: do_garbage_collect+0x31f7/0x68d0 [ 395.006150][ T38] locks held by syz-executor/6848: 3, last CPU#1: [ 395.006216][ T38] #0: ffff88803e43f370 (&sb->s_type->i_lock_key){+.+.}-{3:3}, at: filemap_remove_folio+0xdb/0x3a0 [ 395.006351][ T38] #1: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 395.006622][ T38] #2: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 395.006793][ T38] locks held by kworker/u8:3/6909: 1, last CPU#0: [ 395.006853][ T38] #0: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: process_scheduled_works+0x97a/0x1630 [ 395.007093][ T38] [ 395.007109][ T38] ============================================= [ 395.007109][ T38] [ 395.007164][ T38] NMI backtrace for cpu 0 [ 395.007212][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 395.007309][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 395.007356][ T38] Call Trace: [ 395.007439][ T38] [ 395.007502][ T38] dump_stack_lvl+0xe8/0x150 [ 395.007632][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 395.007806][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 395.007884][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 395.007968][ T38] sys_info+0x135/0x170 [ 395.008117][ T38] watchdog+0xfd7/0x1030 [ 395.008250][ T38] ? watchdog+0x1c7/0x1030 [ 395.008397][ T38] kthread+0x38b/0x470 [ 395.008471][ T38] ? __pfx_watchdog+0x10/0x10 [ 395.008555][ T38] ? __pfx_kthread+0x10/0x10 [ 395.008623][ T38] ret_from_fork+0x514/0xb70 [ 395.008697][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 395.008768][ T38] ? __switch_to+0xc89/0x1420 [ 395.008879][ T38] ? __pfx_kthread+0x10/0x10 [ 395.008961][ T38] ret_from_fork_asm+0x1a/0x30 [ 395.009074][ T38] [ 395.009198][ T38] Sending NMI from CPU 0 to CPUs 1: [ 395.009277][ C1] NMI backtrace for cpu 1 [ 395.009295][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 395.009318][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 395.009334][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 395.009449][ C1] Code: e8 8e 7f 65 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ef 65 d1 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 395.009467][ C1] RSP: 0018:ffffc900001678b8 EFLAGS: 00000202 [ 395.009486][ C1] RAX: 1ffffffff33d3800 RBX: 00000000000003fd RCX: 0000000000000000 [ 395.009501][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 395.009514][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 395.009527][ C1] R10: dffffc0000000000 R11: ffffffff85610e30 R12: dffffc0000000000 [ 395.009543][ C1] R13: 0000000000000000 R14: ffffffff99e9c220 R15: 0000000000000000 [ 395.009557][ C1] FS: 0000000000000000(0000) GS:ffff888125cd1000(0000) knlGS:0000000000000000 [ 395.009575][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.009596][ C1] CR2: 0000555584038a78 CR3: 000000003cad4000 CR4: 00000000003526f0 [ 395.009616][ C1] Call Trace: [ 395.009624][ C1] [ 395.009634][ C1] wait_for_lsr+0x190/0x300 [ 395.009660][ C1] __serial8250_console_fifo_write+0xd0/0x3f0 [ 395.009727][ C1] serial8250_console_write+0xac5/0x1230 [ 395.009757][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 395.009791][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 395.009830][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 395.009863][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 395.009904][ C1] nbcon_kthread_func+0x679/0x880 [ 395.009936][ C1] ? nbcon_kthread_func+0x163/0x880 [ 395.009962][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 395.009993][ C1] ? __kthread_parkme+0x71/0x1f0 [ 395.010026][ C1] ? __kthread_parkme+0x199/0x1f0 [ 395.010058][ C1] kthread+0x38b/0x470 [ 395.010079][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 395.010105][ C1] ? __pfx_kthread+0x10/0x10 [ 395.010126][ C1] ret_from_fork+0x514/0xb70 [ 395.010147][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 395.010167][ C1] ? __switch_to+0xc89/0x1420 [ 395.010198][ C1] ? __pfx_kthread+0x10/0x10 [ 395.010218][ C1] ret_from_fork_asm+0x1a/0x30 [ 395.010247][ C1] [ 395.049443][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 396.525850][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 396.537635][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 396.549197][ T38] Call Trace: [ 396.553252][ T38] [ 396.556960][ T38] vpanic+0x56d/0xa60 [ 396.562049][ T38] ? __pfx___schedule+0x10/0x10 [ 396.567433][ T38] ? __pfx_vpanic+0x10/0x10 [ 396.572097][ T38] panic+0xc5/0xd0 [ 396.576540][ T38] ? __pfx_panic+0x10/0x10 [ 396.581460][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 396.587598][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 396.593484][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 396.600671][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 396.607779][ T38] watchdog+0x1030/0x1030 [ 396.613317][ T38] ? watchdog+0x1c7/0x1030 [ 396.618171][ T38] kthread+0x38b/0x470 [ 396.622420][ T38] ? __pfx_watchdog+0x10/0x10 [ 396.627330][ T38] ? __pfx_kthread+0x10/0x10 [ 396.632278][ T38] ret_from_fork+0x514/0xb70 [ 396.637182][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 396.642520][ T38] ? __switch_to+0xc89/0x1420 [ 396.647549][ T38] ? __pfx_kthread+0x10/0x10 [ 396.652466][ T38] ret_from_fork_asm+0x1a/0x30 [ 396.657622][ T38] [ 396.662717][ T38] Kernel Offset: disabled [ 396.668573][ T38] Rebooting in 86400 seconds..