Warning: Permanently added '10.128.0.164' (ED25519) to the list of known hosts. 2026/09/09 03:02:12 parsed 1 programs [ 190.826302][ T6120] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 198.751050][ T6151] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.751659][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.752194][ T6151] bridge_slave_0: entered allmulticast mode [ 198.782749][ T6151] bridge_slave_0: entered promiscuous mode [ 198.799243][ T6151] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.807994][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.810543][ T6151] bridge_slave_1: entered allmulticast mode [ 198.817144][ T6151] bridge_slave_1: entered promiscuous mode [ 199.003753][ T6151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.017692][ T6151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.153213][ T6151] team0: Port device team_slave_0 added [ 199.163778][ T6151] team0: Port device team_slave_1 added [ 199.420941][ T6151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.421031][ T6151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.421102][ T6151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.430799][ T6151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.430862][ T6151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.433630][ T6151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.685668][ T6151] hsr_slave_0: entered promiscuous mode [ 199.690270][ T6151] hsr_slave_1: entered promiscuous mode [ 200.432565][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.434234][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.887068][ T6151] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 201.939017][ T6151] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 201.951749][ T6151] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 201.997511][ T6151] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 202.005435][ T6151] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 202.035514][ T6151] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 202.045043][ T6151] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 202.072971][ T6151] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 202.333753][ T6151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.392675][ T6151] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.422896][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.437982][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.475281][ T178] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.484683][ T178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.343190][ T6151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.559180][ T6151] veth0_vlan: entered promiscuous mode [ 203.609744][ T6151] veth1_vlan: entered promiscuous mode [ 203.724017][ T6151] veth0_macvtap: entered promiscuous mode [ 203.799800][ T6151] veth1_macvtap: entered promiscuous mode [ 203.843435][ T6151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.946645][ T6151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.272344][ T6261] rm (6261) used greatest stack depth: 18960 bytes left [ 204.480846][ T1403] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.480962][ T1403] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.481111][ T1403] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.481238][ T1403] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.397497][ T1403] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.731602][ T1403] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.194466][ T1403] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.617449][ T1403] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.802813][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.802902][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.907913][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.916528][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.819072][ T1403] bridge_slave_1: left allmulticast mode [ 207.819175][ T1403] bridge_slave_1: left promiscuous mode [ 207.821143][ T1403] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.929709][ T1403] bridge_slave_0: left allmulticast mode [ 207.929851][ T1403] bridge_slave_0: left promiscuous mode [ 207.930594][ T1403] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.568987][ T1403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.649068][ T1403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.670927][ T1403] bond0 (unregistering): Released all slaves [ 209.204682][ T1403] hsr_slave_0: left promiscuous mode [ 209.238295][ T1403] hsr_slave_1: left promiscuous mode [ 209.239649][ T1403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.239679][ T1403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.283038][ T1403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.283281][ T1403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.409800][ T1403] veth1_macvtap: left promiscuous mode [ 209.414139][ T1403] veth0_macvtap: left promiscuous mode [ 209.414673][ T1403] veth1_vlan: left promiscuous mode [ 209.415034][ T1403] veth0_vlan: left promiscuous mode [ 210.448934][ T1403] team0 (unregistering): Port device team_slave_1 removed [ 210.509457][ T1403] team0 (unregistering): Port device team_slave_0 removed [ 211.945625][ T5253] 8021q: adding VLAN 0 to HW filter on device eth1 [ 213.252148][ T5253] 8021q: adding VLAN 0 to HW filter on device eth2 [ 214.085625][ T5253] 8021q: adding VLAN 0 to HW filter on device eth3 [ 214.414841][ T5723] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.439800][ T5723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.449764][ T5723] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.465723][ T5723] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.481551][ T5723] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.973117][ T5253] 8021q: adding VLAN 0 to HW filter on device eth4 2026/09/09 03:02:45 executed programs: 0 [ 216.252729][ T5723] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.267100][ T5723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.284403][ T5723] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.293631][ T5723] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.300519][ T5723] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.910650][ T6472] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.911322][ T6472] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.911917][ T6472] bridge_slave_0: entered allmulticast mode [ 217.923490][ T6472] bridge_slave_0: entered promiscuous mode [ 217.943272][ T6472] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.951639][ T6472] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.951844][ T6472] bridge_slave_1: entered allmulticast mode [ 217.984826][ T6472] bridge_slave_1: entered promiscuous mode [ 218.164437][ T6472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.176717][ T6472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.418319][ T5723] Bluetooth: hci0: command tx timeout [ 218.551754][ T6472] team0: Port device team_slave_0 added [ 218.560672][ T6472] team0: Port device team_slave_1 added [ 218.732038][ T6472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.732150][ T6472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.732226][ T6472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.768730][ T6472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.768795][ T6472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.768908][ T6472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.031182][ T6472] hsr_slave_0: entered promiscuous mode [ 219.034822][ T6472] hsr_slave_1: entered promiscuous mode [ 220.498283][ T5723] Bluetooth: hci0: command tx timeout [ 221.677171][ T6472] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 221.713939][ T6472] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 221.722703][ T6472] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 221.753162][ T6472] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 221.763017][ T6472] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 221.806058][ T6472] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 221.811953][ T6472] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 221.843721][ T6472] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 222.078918][ T6472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.201334][ T6472] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.220460][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.220977][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.272388][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.273047][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.580007][ T5723] Bluetooth: hci0: command tx timeout [ 223.212543][ T6472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.421305][ T6472] veth0_vlan: entered promiscuous mode [ 223.465564][ T6472] veth1_vlan: entered promiscuous mode [ 223.597038][ T6472] veth0_macvtap: entered promiscuous mode [ 223.634874][ T6472] veth1_macvtap: entered promiscuous mode [ 223.697183][ T6472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.744956][ T6472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.899992][ T1403] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.900121][ T1403] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.900160][ T1403] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.900201][ T1403] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.425747][ T1196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.433560][ T1196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.539728][ T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.548395][ T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.658999][ T5723] Bluetooth: hci0: command tx timeout 2026/09/09 03:02:54 executed programs: 2 [ 225.367347][ T6607] loop0: detected capacity change from 0 to 40427 [ 225.408454][ T6607] F2FS-fs: heap/no_heap options were deprecated [ 225.409292][ T6607] F2FS-fs: heap/no_heap options were deprecated [ 225.524141][ T6607] F2FS-fs (loop0): Image doesn't support compression [ 225.623175][ T6607] F2FS-fs (loop0): invalid crc value [ 225.908844][ T6607] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 225.945972][ T6607] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 226.105588][ T6472] syz-executor: attempt to access beyond end of device [ 226.105588][ T6472] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 226.143046][ T6472] CPU: 1 UID: 0 PID: 6472 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 226.143080][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 226.143101][ T6472] Call Trace: [ 226.143111][ T6472] [ 226.143121][ T6472] dump_stack_lvl+0xe8/0x150 [ 226.143172][ T6472] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 226.143213][ T6472] f2fs_write_end_bio+0x1211/0x16e0 [ 226.143244][ T6472] ? blkg_put+0x22/0x240 [ 226.143284][ T6472] __submit_merged_bio+0x258/0x6a0 [ 226.143322][ T6472] ? rcu_is_watching+0x16/0xb0 [ 226.143364][ T6472] __submit_merged_write_cond+0x3c9/0x4e0 [ 226.143403][ T6472] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 226.143460][ T6472] f2fs_write_data_pages+0x2a27/0x36f0 [ 226.143527][ T6472] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 226.143608][ T6472] ? do_raw_spin_lock+0x12b/0x2f0 [ 226.143660][ T6472] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 226.143691][ T6472] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 226.143717][ T6472] ? reacquire_held_locks+0x117/0x1a0 [ 226.143774][ T6472] ? rt_spin_lock+0x1e2/0x400 [ 226.143811][ T6472] ? rt_spin_unlock+0x159/0x200 [ 226.143838][ T6472] ? rt_spin_unlock+0x165/0x200 [ 226.143860][ T6472] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 226.143889][ T6472] do_writepages+0x338/0x560 [ 226.143928][ T6472] ? rt_spin_unlock+0x159/0x200 [ 226.143964][ T6472] filemap_fdatawrite+0x1ec/0x2f0 [ 226.144022][ T6472] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 226.144054][ T6472] ? do_raw_spin_lock+0x12b/0x2f0 [ 226.144134][ T6472] ? rt_spin_unlock+0x159/0x200 [ 226.144164][ T6472] ? rt_spin_unlock+0x165/0x200 [ 226.144189][ T6472] f2fs_sync_dirty_inodes+0x30e/0x830 [ 226.144234][ T6472] f2fs_write_checkpoint+0xa3d/0x2710 [ 226.144293][ T6472] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 226.144355][ T6472] ? rt_spin_unlock+0x165/0x200 [ 226.144389][ T6472] kill_f2fs_super+0x2dd/0x700 [ 226.144425][ T6472] ? __pfx_kill_f2fs_super+0x10/0x10 [ 226.144463][ T6472] ? call_rcu+0x64d/0x8b0 [ 226.144499][ T6472] ? lockdep_hardirqs_on+0x7b/0x110 [ 226.144543][ T6472] deactivate_locked_super+0xbc/0x110 [ 226.144572][ T6472] cleanup_mnt+0x3d3/0x460 [ 226.144605][ T6472] task_work_run+0x1d9/0x270 [ 226.144641][ T6472] ? __pfx_task_work_run+0x10/0x10 [ 226.144673][ T6472] exit_to_user_mode_loop+0x204/0x770 [ 226.144700][ T6472] ? rcu_is_watching+0x16/0xb0 [ 226.144736][ T6472] do_syscall_64+0x328/0x520 [ 226.144763][ T6472] ? trace_irq_disable+0x3b/0x140 [ 226.144793][ T6472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.144815][ T6472] ? clear_bhb_loop+0x70/0xc0 [ 226.144843][ T6472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.144867][ T6472] RIP: 0033:0x7febe73eb797 [ 226.144905][ T6472] Code: a2 c7 05 fc 6d 23 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 226.144923][ T6472] RSP: 002b:00007ffecd3e7cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 226.144953][ T6472] RAX: 0000000000000000 RBX: 00007febe747d33b RCX: 00007febe73eb797 [ 226.144968][ T6472] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffecd3e7db0 [ 226.144990][ T6472] RBP: 00007ffecd3e7db0 R08: 00007ffecd3e8db0 R09: 00000000ffffffff [ 226.145005][ T6472] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffecd3e8e40 [ 226.145019][ T6472] R13: 00007febe747d33b R14: 0000000000036f40 R15: 00007ffecd3e8e80 [ 226.145054][ T6472] [ 226.159758][ T6472] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 227.392149][ T6635] loop0: detected capacity change from 0 to 40427 [ 227.404860][ T6635] F2FS-fs: heap/no_heap options were deprecated [ 227.405356][ T6635] F2FS-fs: heap/no_heap options were deprecated [ 227.453623][ T6635] F2FS-fs (loop0): Image doesn't support compression [ 227.498617][ T6635] F2FS-fs (loop0): invalid crc value [ 227.675603][ T6635] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 227.731480][ T6635] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 238.479781][ T6639] F2FS-fs (loop0): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 238.535114][ T6639] syz.0.18: attempt to access beyond end of device [ 238.535114][ T6639] loop0: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 238.565454][ T6639] syz.0.18: attempt to access beyond end of device [ 238.565454][ T6639] loop0: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 238.566226][ T6639] syz.0.18: attempt to access beyond end of device [ 238.566226][ T6639] loop0: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 238.567045][ T6639] syz.0.18: attempt to access beyond end of device [ 238.567045][ T6639] loop0: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 238.567906][ T6639] syz.0.18: attempt to access beyond end of device [ 238.567906][ T6639] loop0: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 238.583482][ T6639] syz.0.18: attempt to access beyond end of device [ 238.583482][ T6639] loop0: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 238.601753][ T6639] syz.0.18: attempt to access beyond end of device [ 238.601753][ T6639] loop0: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 238.607107][ T6639] syz.0.18: attempt to access beyond end of device [ 238.607107][ T6639] loop0: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 238.607815][ T6639] syz.0.18: attempt to access beyond end of device [ 238.607815][ T6639] loop0: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 238.611163][ T6639] syz.0.18: attempt to access beyond end of device [ 238.611163][ T6639] loop0: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 241.295712][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 241.342913][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 241.357967][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 241.383135][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 241.394885][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 242.890614][ T6641] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.899943][ T6641] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.900184][ T6641] bridge_slave_0: entered allmulticast mode [ 242.903944][ T6641] bridge_slave_0: entered promiscuous mode [ 242.908019][ T6641] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.942067][ T6641] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.942692][ T6641] bridge_slave_1: entered allmulticast mode [ 242.963847][ T6641] bridge_slave_1: entered promiscuous mode [ 243.190856][ T6641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.213897][ T6641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.458305][ T5723] Bluetooth: hci1: command tx timeout [ 243.538429][ T6639] bio_check_eod: 36184 callbacks suppressed [ 243.538524][ T6639] syz.0.18: attempt to access beyond end of device [ 243.538524][ T6639] loop0: rw=0, sector=88824, nr_sectors = 8 limit=40427 [ 243.538944][ T6639] syz.0.18: attempt to access beyond end of device [ 243.538944][ T6639] loop0: rw=0, sector=88832, nr_sectors = 8 limit=40427 [ 243.539291][ T6639] syz.0.18: attempt to access beyond end of device [ 243.539291][ T6639] loop0: rw=0, sector=88840, nr_sectors = 8 limit=40427 [ 243.539585][ T6639] syz.0.18: attempt to access beyond end of device [ 243.539585][ T6639] loop0: rw=0, sector=88848, nr_sectors = 8 limit=40427 [ 243.542528][ T6639] syz.0.18: attempt to access beyond end of device [ 243.542528][ T6639] loop0: rw=0, sector=88856, nr_sectors = 8 limit=40427 [ 243.542911][ T6639] syz.0.18: attempt to access beyond end of device [ 243.542911][ T6639] loop0: rw=0, sector=88864, nr_sectors = 8 limit=40427 [ 243.543250][ T6639] syz.0.18: attempt to access beyond end of device [ 243.543250][ T6639] loop0: rw=0, sector=88872, nr_sectors = 8 limit=40427 [ 243.543586][ T6639] syz.0.18: attempt to access beyond end of device [ 243.543586][ T6639] loop0: rw=0, sector=88880, nr_sectors = 8 limit=40427 [ 243.547636][ T6639] syz.0.18: attempt to access beyond end of device [ 243.547636][ T6639] loop0: rw=0, sector=88888, nr_sectors = 8 limit=40427 [ 243.552344][ T6639] syz.0.18: attempt to access beyond end of device [ 243.552344][ T6639] loop0: rw=0, sector=88896, nr_sectors = 8 limit=40427 [ 243.738471][ T6641] team0: Port device team_slave_0 added [ 243.742888][ T6641] team0: Port device team_slave_1 added [ 243.963869][ T6641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.963974][ T6641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.964008][ T6641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.977488][ T6641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.977540][ T6641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.977624][ T6641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.275674][ T6641] hsr_slave_0: entered promiscuous mode [ 244.282145][ T6641] hsr_slave_1: entered promiscuous mode [ 244.286748][ T6641] debugfs: 'hsr0' already exists in 'hsr' [ 244.304679][ T6641] Cannot create hsr debugfs directory [ 245.205905][ T6641] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 245.256788][ T6641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 245.270035][ T6641] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 245.331423][ T6641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 245.340951][ T6641] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 245.385012][ T6641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 245.401328][ T6641] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 245.466859][ T6641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 245.538184][ T5723] Bluetooth: hci1: command tx timeout [ 245.783371][ T6641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.838915][ T6641] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.854899][ T1419] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.856843][ T1419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.902327][ T1419] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.905809][ T1419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.954462][ T6641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.134694][ T6641] veth0_vlan: entered promiscuous mode [ 247.171324][ T6641] veth1_vlan: entered promiscuous mode [ 247.257223][ T6641] veth0_macvtap: entered promiscuous mode [ 247.285048][ T6641] veth1_macvtap: entered promiscuous mode [ 247.393253][ T6641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.430894][ T6641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.528307][ T159] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.528429][ T159] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.528636][ T159] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.612717][ T1419] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.628296][ T5723] Bluetooth: hci1: command tx timeout [ 248.237333][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.237450][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.548316][ T6639] bio_check_eod: 25062 callbacks suppressed [ 248.548435][ T6639] syz.0.18: attempt to access beyond end of device [ 248.548435][ T6639] loop0: rw=524288, sector=89072, nr_sectors = 8 limit=40427 [ 248.550737][ T6639] syz.0.18: attempt to access beyond end of device [ 248.550737][ T6639] loop0: rw=524288, sector=89080, nr_sectors = 8 limit=40427 [ 248.551380][ T6639] syz.0.18: attempt to access beyond end of device [ 248.551380][ T6639] loop0: rw=524288, sector=89088, nr_sectors = 8 limit=40427 [ 248.604249][ T6639] syz.0.18: attempt to access beyond end of device [ 248.604249][ T6639] loop0: rw=524288, sector=89096, nr_sectors = 8 limit=40427 [ 248.604620][ T6639] syz.0.18: attempt to access beyond end of device [ 248.604620][ T6639] loop0: rw=524288, sector=89104, nr_sectors = 8 limit=40427 [ 248.604951][ T6639] syz.0.18: attempt to access beyond end of device [ 248.604951][ T6639] loop0: rw=524288, sector=89112, nr_sectors = 8 limit=40427 [ 248.605256][ T6639] syz.0.18: attempt to access beyond end of device [ 248.605256][ T6639] loop0: rw=524288, sector=89120, nr_sectors = 8 limit=40427 [ 248.605592][ T6639] syz.0.18: attempt to access beyond end of device [ 248.605592][ T6639] loop0: rw=524288, sector=89128, nr_sectors = 8 limit=40427 [ 248.605870][ T6639] syz.0.18: attempt to access beyond end of device [ 248.605870][ T6639] loop0: rw=524288, sector=89136, nr_sectors = 8 limit=40427 [ 248.607003][ T6639] syz.0.18: attempt to access beyond end of device [ 248.607003][ T6639] loop0: rw=524288, sector=89144, nr_sectors = 8 limit=40427 [ 248.800153][ T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.808906][ T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/09 03:03:18 executed programs: 4 [ 249.577240][ T6679] loop1: detected capacity change from 0 to 40427 [ 249.587913][ T6679] F2FS-fs: heap/no_heap options were deprecated [ 249.604234][ T6679] F2FS-fs: heap/no_heap options were deprecated [ 249.624710][ T6679] F2FS-fs (loop1): Image doesn't support compression [ 249.690554][ T6679] F2FS-fs (loop1): invalid crc value [ 249.698964][ T5723] Bluetooth: hci1: command tx timeout [ 249.944396][ T6679] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 250.026708][ T6679] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 253.558256][ T6639] bio_check_eod: 24958 callbacks suppressed [ 253.559915][ T6639] syz.0.18: attempt to access beyond end of device [ 253.559915][ T6639] loop0: rw=0, sector=88488, nr_sectors = 8 limit=40427 [ 253.560434][ T6639] syz.0.18: attempt to access beyond end of device [ 253.560434][ T6639] loop0: rw=0, sector=88496, nr_sectors = 8 limit=40427 [ 253.562265][ T6639] syz.0.18: attempt to access beyond end of device [ 253.562265][ T6639] loop0: rw=0, sector=88504, nr_sectors = 8 limit=40427 [ 253.562949][ T6639] syz.0.18: attempt to access beyond end of device [ 253.562949][ T6639] loop0: rw=0, sector=88512, nr_sectors = 8 limit=40427 [ 253.563771][ T6639] syz.0.18: attempt to access beyond end of device [ 253.563771][ T6639] loop0: rw=0, sector=88520, nr_sectors = 8 limit=40427 [ 253.564506][ T6639] syz.0.18: attempt to access beyond end of device [ 253.564506][ T6639] loop0: rw=0, sector=88528, nr_sectors = 8 limit=40427 [ 253.565441][ T6639] syz.0.18: attempt to access beyond end of device [ 253.565441][ T6639] loop0: rw=0, sector=88536, nr_sectors = 8 limit=40427 [ 253.565996][ T6639] syz.0.18: attempt to access beyond end of device [ 253.565996][ T6639] loop0: rw=0, sector=88544, nr_sectors = 8 limit=40427 [ 253.566402][ T6639] syz.0.18: attempt to access beyond end of device [ 253.566402][ T6639] loop0: rw=0, sector=88552, nr_sectors = 8 limit=40427 [ 253.566724][ T6639] syz.0.18: attempt to access beyond end of device [ 253.566724][ T6639] loop0: rw=0, sector=88560, nr_sectors = 8 limit=40427 [ 258.579287][ T6639] bio_check_eod: 24318 callbacks suppressed [ 258.579415][ T6639] syz.0.18: attempt to access beyond end of device [ 258.579415][ T6639] loop0: rw=0, sector=86712, nr_sectors = 8 limit=40427 [ 258.579847][ T6639] syz.0.18: attempt to access beyond end of device [ 258.579847][ T6639] loop0: rw=0, sector=86720, nr_sectors = 8 limit=40427 [ 258.584528][ T6639] syz.0.18: attempt to access beyond end of device [ 258.584528][ T6639] loop0: rw=0, sector=86728, nr_sectors = 8 limit=40427 [ 258.594507][ T6639] syz.0.18: attempt to access beyond end of device [ 258.594507][ T6639] loop0: rw=0, sector=86736, nr_sectors = 8 limit=40427 [ 258.602502][ T6639] syz.0.18: attempt to access beyond end of device [ 258.602502][ T6639] loop0: rw=0, sector=86744, nr_sectors = 8 limit=40427 [ 258.602742][ T6639] syz.0.18: attempt to access beyond end of device [ 258.602742][ T6639] loop0: rw=0, sector=86752, nr_sectors = 8 limit=40427 [ 258.603246][ T6639] syz.0.18: attempt to access beyond end of device [ 258.603246][ T6639] loop0: rw=0, sector=86760, nr_sectors = 8 limit=40427 [ 258.613188][ T6639] syz.0.18: attempt to access beyond end of device [ 258.613188][ T6639] loop0: rw=0, sector=86768, nr_sectors = 8 limit=40427 [ 258.613400][ T6639] syz.0.18: attempt to access beyond end of device [ 258.613400][ T6639] loop0: rw=0, sector=86776, nr_sectors = 8 limit=40427 [ 258.620496][ T6639] syz.0.18: attempt to access beyond end of device [ 258.620496][ T6639] loop0: rw=0, sector=86784, nr_sectors = 8 limit=40427 [ 261.871906][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.880210][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.588788][ T6639] bio_check_eod: 25538 callbacks suppressed [ 263.588892][ T6639] syz.0.18: attempt to access beyond end of device [ 263.588892][ T6639] loop0: rw=0, sector=86840, nr_sectors = 8 limit=40427 [ 263.589585][ T6639] syz.0.18: attempt to access beyond end of device [ 263.589585][ T6639] loop0: rw=0, sector=86848, nr_sectors = 8 limit=40427 [ 263.589927][ T6639] syz.0.18: attempt to access beyond end of device [ 263.589927][ T6639] loop0: rw=0, sector=86856, nr_sectors = 8 limit=40427 [ 263.590319][ T6639] syz.0.18: attempt to access beyond end of device [ 263.590319][ T6639] loop0: rw=0, sector=86864, nr_sectors = 8 limit=40427 [ 263.590698][ T6639] syz.0.18: attempt to access beyond end of device [ 263.590698][ T6639] loop0: rw=0, sector=86872, nr_sectors = 8 limit=40427 [ 263.591005][ T6639] syz.0.18: attempt to access beyond end of device [ 263.591005][ T6639] loop0: rw=0, sector=86880, nr_sectors = 8 limit=40427 [ 263.592019][ T6639] syz.0.18: attempt to access beyond end of device [ 263.592019][ T6639] loop0: rw=0, sector=86888, nr_sectors = 8 limit=40427 [ 263.592629][ T6639] syz.0.18: attempt to access beyond end of device [ 263.592629][ T6639] loop0: rw=0, sector=86896, nr_sectors = 8 limit=40427 [ 263.593126][ T6639] syz.0.18: attempt to access beyond end of device [ 263.593126][ T6639] loop0: rw=0, sector=86904, nr_sectors = 8 limit=40427 [ 263.593551][ T6639] syz.0.18: attempt to access beyond end of device [ 263.593551][ T6639] loop0: rw=0, sector=86912, nr_sectors = 8 limit=40427 [ 264.307345][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 264.347682][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 264.358638][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 264.364164][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 264.386347][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 266.498235][ T5723] Bluetooth: hci2: command tx timeout [ 266.514148][ T6685] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.514400][ T6685] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.514618][ T6685] bridge_slave_0: entered allmulticast mode [ 266.544583][ T6685] bridge_slave_0: entered promiscuous mode [ 266.590932][ T6685] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.593113][ T6685] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.593737][ T6685] bridge_slave_1: entered allmulticast mode [ 266.617640][ T6685] bridge_slave_1: entered promiscuous mode [ 266.875658][ T6685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.903141][ T6685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.165603][ T6685] team0: Port device team_slave_0 added [ 267.183197][ T6685] team0: Port device team_slave_1 added [ 267.487788][ T6685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.499031][ T6685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.499071][ T6685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.557676][ T6685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.567895][ T6685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.567943][ T6685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.215822][ T6685] hsr_slave_0: entered promiscuous mode [ 268.228723][ T6685] hsr_slave_1: entered promiscuous mode [ 268.250498][ T6685] debugfs: 'hsr0' already exists in 'hsr' [ 268.250609][ T6685] Cannot create hsr debugfs directory [ 268.578250][ T5723] Bluetooth: hci2: command tx timeout [ 268.599788][ T6639] bio_check_eod: 22996 callbacks suppressed [ 268.607026][ T6639] syz.0.18: attempt to access beyond end of device [ 268.607026][ T6639] loop0: rw=524288, sector=86272, nr_sectors = 8 limit=40427 [ 268.627633][ T6639] syz.0.18: attempt to access beyond end of device [ 268.627633][ T6639] loop0: rw=524288, sector=86280, nr_sectors = 8 limit=40427 [ 268.627789][ T6639] syz.0.18: attempt to access beyond end of device [ 268.627789][ T6639] loop0: rw=524288, sector=86288, nr_sectors = 8 limit=40427 [ 268.627945][ T6639] syz.0.18: attempt to access beyond end of device [ 268.627945][ T6639] loop0: rw=524288, sector=86296, nr_sectors = 8 limit=40427 [ 268.678728][ T6639] syz.0.18: attempt to access beyond end of device [ 268.678728][ T6639] loop0: rw=524288, sector=86304, nr_sectors = 8 limit=40427 [ 268.696551][ T6639] syz.0.18: attempt to access beyond end of device [ 268.696551][ T6639] loop0: rw=524288, sector=86312, nr_sectors = 8 limit=40427 [ 268.696699][ T6639] syz.0.18: attempt to access beyond end of device [ 268.696699][ T6639] loop0: rw=524288, sector=86320, nr_sectors = 8 limit=40427 [ 268.696841][ T6639] syz.0.18: attempt to access beyond end of device [ 268.696841][ T6639] loop0: rw=524288, sector=86328, nr_sectors = 8 limit=40427 [ 268.696968][ T6639] syz.0.18: attempt to access beyond end of device [ 268.696968][ T6639] loop0: rw=524288, sector=86336, nr_sectors = 8 limit=40427 [ 268.697128][ T6639] syz.0.18: attempt to access beyond end of device [ 268.697128][ T6639] loop0: rw=524288, sector=86344, nr_sectors = 8 limit=40427 [ 270.034619][ T6685] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 270.195686][ T6685] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 270.204789][ T6685] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 270.251041][ T6685] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 270.319008][ T6685] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 270.360452][ T6685] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 270.390305][ T6685] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 270.453578][ T6685] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 270.658354][ T5723] Bluetooth: hci2: command tx timeout [ 271.225420][ T6685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.375136][ T6685] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.479278][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.480504][ T163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.624034][ T1419] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.626277][ T1419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.659797][ T6683] F2FS-fs (loop1): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 272.738343][ T5723] Bluetooth: hci2: command tx timeout [ 273.344335][ T6685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.608325][ T6639] bio_check_eod: 23609 callbacks suppressed [ 273.608732][ T6639] syz.0.18: attempt to access beyond end of device [ 273.608732][ T6639] loop0: rw=0, sector=88136, nr_sectors = 8 limit=40427 [ 273.620729][ T6683] syz.1.19: attempt to access beyond end of device [ 273.620729][ T6683] loop1: rw=524288, sector=88488, nr_sectors = 8 limit=40427 [ 273.621102][ T6683] syz.1.19: attempt to access beyond end of device [ 273.621102][ T6683] loop1: rw=524288, sector=88496, nr_sectors = 8 limit=40427 [ 273.621441][ T6683] syz.1.19: attempt to access beyond end of device [ 273.621441][ T6683] loop1: rw=524288, sector=88504, nr_sectors = 8 limit=40427 [ 273.623423][ T6683] syz.1.19: attempt to access beyond end of device [ 273.623423][ T6683] loop1: rw=524288, sector=88512, nr_sectors = 8 limit=40427 [ 273.623801][ T6683] syz.1.19: attempt to access beyond end of device [ 273.623801][ T6683] loop1: rw=524288, sector=88520, nr_sectors = 8 limit=40427 [ 273.624146][ T6683] syz.1.19: attempt to access beyond end of device [ 273.624146][ T6683] loop1: rw=524288, sector=88528, nr_sectors = 8 limit=40427 [ 273.624629][ T6683] syz.1.19: attempt to access beyond end of device [ 273.624629][ T6683] loop1: rw=524288, sector=88536, nr_sectors = 8 limit=40427 [ 273.625263][ T6683] syz.1.19: attempt to access beyond end of device [ 273.625263][ T6683] loop1: rw=524288, sector=88544, nr_sectors = 8 limit=40427 [ 273.625661][ T6683] syz.1.19: attempt to access beyond end of device [ 273.625661][ T6683] loop1: rw=524288, sector=88552, nr_sectors = 8 limit=40427 [ 273.775734][ T6685] veth0_vlan: entered promiscuous mode [ 273.882841][ T6685] veth1_vlan: entered promiscuous mode [ 274.204444][ T6685] veth0_macvtap: entered promiscuous mode [ 274.218752][ T6685] veth1_macvtap: entered promiscuous mode [ 274.291496][ T6685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.330989][ T6685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.398316][ T1184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.439217][ T1196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.448976][ T1196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.449032][ T1196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.244395][ T1196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.254259][ T1196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.670372][ T163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.678978][ T163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/09 03:03:45 executed programs: 5 [ 277.253896][ T6722] loop2: detected capacity change from 0 to 40427 [ 277.271225][ T6722] F2FS-fs: heap/no_heap options were deprecated [ 277.275288][ T6722] F2FS-fs: heap/no_heap options were deprecated [ 277.420355][ T6722] F2FS-fs (loop2): Image doesn't support compression [ 277.502245][ T6722] F2FS-fs (loop2): invalid crc value [ 278.169894][ T6722] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 278.455317][ T6722] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 278.618258][ T6683] bio_check_eod: 30678 callbacks suppressed [ 278.618394][ T6683] syz.1.19: attempt to access beyond end of device [ 278.618394][ T6683] loop1: rw=524288, sector=89248, nr_sectors = 8 limit=40427 [ 278.618744][ T6683] syz.1.19: attempt to access beyond end of device [ 278.618744][ T6683] loop1: rw=524288, sector=89256, nr_sectors = 8 limit=40427 [ 278.618941][ T6683] syz.1.19: attempt to access beyond end of device [ 278.618941][ T6683] loop1: rw=524288, sector=89264, nr_sectors = 8 limit=40427 [ 278.641041][ T6639] syz.0.18: attempt to access beyond end of device [ 278.641041][ T6639] loop0: rw=0, sector=89344, nr_sectors = 8 limit=40427 [ 278.641524][ T6639] syz.0.18: attempt to access beyond end of device [ 278.641524][ T6639] loop0: rw=0, sector=89352, nr_sectors = 8 limit=40427 [ 278.641914][ T6639] syz.0.18: attempt to access beyond end of device [ 278.641914][ T6639] loop0: rw=0, sector=89360, nr_sectors = 8 limit=40427 [ 278.642445][ T6639] syz.0.18: attempt to access beyond end of device [ 278.642445][ T6639] loop0: rw=0, sector=89368, nr_sectors = 8 limit=40427 [ 278.642783][ T6639] syz.0.18: attempt to access beyond end of device [ 278.642783][ T6639] loop0: rw=0, sector=89376, nr_sectors = 8 limit=40427 [ 278.643348][ T6639] syz.0.18: attempt to access beyond end of device [ 278.643348][ T6639] loop0: rw=0, sector=89384, nr_sectors = 8 limit=40427 [ 278.643593][ T6639] syz.0.18: attempt to access beyond end of device [ 278.643593][ T6639] loop0: rw=0, sector=89392, nr_sectors = 8 limit=40427 [ 279.077797][ T6685] CPU: 0 UID: 0 PID: 6685 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 279.077833][ T6685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 279.077864][ T6685] Call Trace: [ 279.077875][ T6685] [ 279.077885][ T6685] dump_stack_lvl+0xe8/0x150 [ 279.077928][ T6685] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 279.077971][ T6685] f2fs_write_end_bio+0x1211/0x16e0 [ 279.078003][ T6685] ? blkg_put+0x22/0x240 [ 279.078046][ T6685] __submit_merged_bio+0x258/0x6a0 [ 279.078083][ T6685] ? rcu_is_watching+0x16/0xb0 [ 279.078141][ T6685] __submit_merged_write_cond+0x3c9/0x4e0 [ 279.078191][ T6685] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 279.078257][ T6685] f2fs_write_data_pages+0x2a27/0x36f0 [ 279.078323][ T6685] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 279.078407][ T6685] ? do_raw_spin_lock+0x12b/0x2f0 [ 279.078804][ T6685] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 279.078996][ T6685] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 279.079031][ T6685] ? reacquire_held_locks+0x117/0x1a0 [ 279.079064][ T6685] ? rt_spin_lock+0x1e2/0x400 [ 279.079094][ T6685] ? rt_spin_unlock+0x159/0x200 [ 279.079121][ T6685] ? rt_spin_unlock+0x165/0x200 [ 279.079140][ T6685] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 279.079168][ T6685] do_writepages+0x338/0x560 [ 279.079205][ T6685] ? rt_spin_unlock+0x159/0x200 [ 279.079238][ T6685] filemap_fdatawrite+0x1ec/0x2f0 [ 279.079272][ T6685] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 279.079299][ T6685] ? do_raw_spin_lock+0x12b/0x2f0 [ 279.079367][ T6685] ? rt_spin_unlock+0x159/0x200 [ 279.079393][ T6685] ? rt_spin_unlock+0x165/0x200 [ 279.079414][ T6685] f2fs_sync_dirty_inodes+0x30e/0x830 [ 279.079451][ T6685] f2fs_write_checkpoint+0xa3d/0x2710 [ 279.079504][ T6685] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 279.079586][ T6685] ? rt_spin_unlock+0x165/0x200 [ 279.079630][ T6685] kill_f2fs_super+0x2dd/0x700 [ 279.079669][ T6685] ? __pfx_kill_f2fs_super+0x10/0x10 [ 279.079708][ T6685] ? call_rcu+0x64d/0x8b0 [ 279.079743][ T6685] ? lockdep_hardirqs_on+0x7b/0x110 [ 279.079786][ T6685] deactivate_locked_super+0xbc/0x110 [ 279.079815][ T6685] cleanup_mnt+0x3d3/0x460 [ 279.079851][ T6685] task_work_run+0x1d9/0x270 [ 279.079881][ T6685] ? __pfx_task_work_run+0x10/0x10 [ 279.079927][ T6685] exit_to_user_mode_loop+0x204/0x770 [ 279.079964][ T6685] ? rcu_is_watching+0x16/0xb0 [ 279.080008][ T6685] do_syscall_64+0x328/0x520 [ 279.080037][ T6685] ? trace_irq_disable+0x3b/0x140 [ 279.080066][ T6685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.080091][ T6685] ? clear_bhb_loop+0x70/0xc0 [ 279.080120][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.080144][ T6685] RIP: 0033:0x7f7d8da4b797 [ 279.080167][ T6685] Code: a2 c7 05 fc 6d 23 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 279.080186][ T6685] RSP: 002b:00007ffe7a924c28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 279.080213][ T6685] RAX: 0000000000000000 RBX: 00007f7d8dadd33b RCX: 00007f7d8da4b797 [ 279.080228][ T6685] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7a924ce0 [ 279.080243][ T6685] RBP: 00007ffe7a924ce0 R08: 00007ffe7a925ce0 R09: 00000000ffffffff [ 279.080259][ T6685] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe7a925d70 [ 279.080273][ T6685] R13: 00007f7d8dadd33b R14: 0000000000043d06 R15: 00007ffe7a925db0 [ 279.080311][ T6685] [ 279.085424][ T6685] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 281.416180][ T6734] loop2: detected capacity change from 0 to 40427 [ 281.466731][ T6734] F2FS-fs: heap/no_heap options were deprecated [ 281.467143][ T6734] F2FS-fs: heap/no_heap options were deprecated [ 281.488157][ T6734] F2FS-fs (loop2): Image doesn't support compression [ 281.534984][ T6734] F2FS-fs (loop2): invalid crc value [ 282.078893][ T6734] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 282.167027][ T6734] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 283.629749][ T6683] bio_check_eod: 30153 callbacks suppressed [ 283.636159][ T6683] syz.1.19: attempt to access beyond end of device [ 283.636159][ T6683] loop1: rw=0, sector=86528, nr_sectors = 8 limit=40427 [ 283.636353][ T6683] syz.1.19: attempt to access beyond end of device [ 283.636353][ T6683] loop1: rw=0, sector=86536, nr_sectors = 8 limit=40427 [ 283.636489][ T6683] syz.1.19: attempt to access beyond end of device [ 283.636489][ T6683] loop1: rw=0, sector=86544, nr_sectors = 8 limit=40427 [ 283.636620][ T6683] syz.1.19: attempt to access beyond end of device [ 283.636620][ T6683] loop1: rw=0, sector=86552, nr_sectors = 8 limit=40427 [ 283.636750][ T6683] syz.1.19: attempt to access beyond end of device [ 283.636750][ T6683] loop1: rw=0, sector=86560, nr_sectors = 8 limit=40427 [ 283.636879][ T6683] syz.1.19: attempt to access beyond end of device [ 283.636879][ T6683] loop1: rw=0, sector=86568, nr_sectors = 8 limit=40427 [ 283.637029][ T6683] syz.1.19: attempt to access beyond end of device [ 283.637029][ T6683] loop1: rw=0, sector=86576, nr_sectors = 8 limit=40427 [ 283.637158][ T6683] syz.1.19: attempt to access beyond end of device [ 283.637158][ T6683] loop1: rw=0, sector=86584, nr_sectors = 8 limit=40427 [ 283.637288][ T6683] syz.1.19: attempt to access beyond end of device [ 283.637288][ T6683] loop1: rw=0, sector=86592, nr_sectors = 8 limit=40427 [ 283.637444][ T6683] syz.1.19: attempt to access beyond end of device [ 283.637444][ T6683] loop1: rw=0, sector=86600, nr_sectors = 8 limit=40427 [ 288.640113][ T6683] bio_check_eod: 33745 callbacks suppressed [ 288.647222][ T6683] syz.1.19: attempt to access beyond end of device [ 288.647222][ T6683] loop1: rw=524288, sector=89344, nr_sectors = 8 limit=40427 [ 288.664656][ T6683] syz.1.19: attempt to access beyond end of device [ 288.664656][ T6683] loop1: rw=524288, sector=89352, nr_sectors = 8 limit=40427 [ 288.674261][ T6639] syz.0.18: attempt to access beyond end of device [ 288.674261][ T6639] loop0: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 288.674692][ T6639] syz.0.18: attempt to access beyond end of device [ 288.674692][ T6639] loop0: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 288.680109][ T6639] syz.0.18: attempt to access beyond end of device [ 288.680109][ T6639] loop0: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 288.680562][ T6639] syz.0.18: attempt to access beyond end of device [ 288.680562][ T6639] loop0: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 288.680862][ T6639] syz.0.18: attempt to access beyond end of device [ 288.680862][ T6639] loop0: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 288.681157][ T6639] syz.0.18: attempt to access beyond end of device [ 288.681157][ T6639] loop0: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 288.685912][ T6639] syz.0.18: attempt to access beyond end of device [ 288.685912][ T6639] loop0: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 288.686512][ T6639] syz.0.18: attempt to access beyond end of device [ 288.686512][ T6639] loop0: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 293.648358][ T6639] bio_check_eod: 33617 callbacks suppressed [ 293.648459][ T6639] syz.0.18: attempt to access beyond end of device [ 293.648459][ T6639] loop0: rw=524288, sector=86792, nr_sectors = 8 limit=40427 [ 293.648645][ T6639] syz.0.18: attempt to access beyond end of device [ 293.648645][ T6639] loop0: rw=524288, sector=86800, nr_sectors = 8 limit=40427 [ 293.648828][ T6639] syz.0.18: attempt to access beyond end of device [ 293.648828][ T6639] loop0: rw=524288, sector=86808, nr_sectors = 8 limit=40427 [ 293.649006][ T6639] syz.0.18: attempt to access beyond end of device [ 293.649006][ T6639] loop0: rw=524288, sector=86816, nr_sectors = 8 limit=40427 [ 293.649194][ T6639] syz.0.18: attempt to access beyond end of device [ 293.649194][ T6639] loop0: rw=524288, sector=86824, nr_sectors = 8 limit=40427 [ 293.649403][ T6639] syz.0.18: attempt to access beyond end of device [ 293.649403][ T6639] loop0: rw=524288, sector=86832, nr_sectors = 8 limit=40427 [ 293.649593][ T6639] syz.0.18: attempt to access beyond end of device [ 293.649593][ T6639] loop0: rw=524288, sector=86840, nr_sectors = 8 limit=40427 [ 293.650018][ T6639] syz.0.18: attempt to access beyond end of device [ 293.650018][ T6639] loop0: rw=524288, sector=86848, nr_sectors = 8 limit=40427 [ 293.650382][ T6639] syz.0.18: attempt to access beyond end of device [ 293.650382][ T6639] loop0: rw=524288, sector=86856, nr_sectors = 8 limit=40427 [ 293.650964][ T6639] syz.0.18: attempt to access beyond end of device [ 293.650964][ T6639] loop0: rw=524288, sector=86864, nr_sectors = 8 limit=40427 [ 294.137678][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 294.165702][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 294.175350][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 294.193863][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 294.203705][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 296.338255][ T59] Bluetooth: hci3: command tx timeout [ 297.802171][ T6740] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.813175][ T6740] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.813477][ T6740] bridge_slave_0: entered allmulticast mode [ 297.839092][ T6740] bridge_slave_0: entered promiscuous mode [ 297.853575][ T6740] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.863520][ T6740] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.863747][ T6740] bridge_slave_1: entered allmulticast mode [ 297.885388][ T6740] bridge_slave_1: entered promiscuous mode [ 298.150607][ T6740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.191607][ T6740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.418223][ T59] Bluetooth: hci3: command tx timeout [ 298.605507][ T6740] team0: Port device team_slave_0 added [ 298.642939][ T6740] team0: Port device team_slave_1 added [ 298.659269][ T6639] bio_check_eod: 26933 callbacks suppressed [ 298.659296][ T6683] syz.1.19: attempt to access beyond end of device [ 298.659296][ T6683] loop1: rw=524288, sector=87792, nr_sectors = 8 limit=40427 [ 298.659461][ T6683] syz.1.19: attempt to access beyond end of device [ 298.659461][ T6683] loop1: rw=524288, sector=87800, nr_sectors = 8 limit=40427 [ 298.659903][ T6683] syz.1.19: attempt to access beyond end of device [ 298.659903][ T6683] loop1: rw=524288, sector=87808, nr_sectors = 8 limit=40427 [ 298.660266][ T6683] syz.1.19: attempt to access beyond end of device [ 298.660266][ T6683] loop1: rw=524288, sector=87816, nr_sectors = 8 limit=40427 [ 298.660591][ T6683] syz.1.19: attempt to access beyond end of device [ 298.660591][ T6683] loop1: rw=524288, sector=87824, nr_sectors = 8 limit=40427 [ 298.671910][ T6683] syz.1.19: attempt to access beyond end of device [ 298.671910][ T6683] loop1: rw=524288, sector=87832, nr_sectors = 8 limit=40427 [ 298.672372][ T6683] syz.1.19: attempt to access beyond end of device [ 298.672372][ T6683] loop1: rw=524288, sector=87840, nr_sectors = 8 limit=40427 [ 298.672744][ T6683] syz.1.19: attempt to access beyond end of device [ 298.672744][ T6683] loop1: rw=524288, sector=87848, nr_sectors = 8 limit=40427 [ 298.681948][ T6683] syz.1.19: attempt to access beyond end of device [ 298.681948][ T6683] loop1: rw=524288, sector=87856, nr_sectors = 8 limit=40427 [ 298.788092][ T6639] syz.0.18: attempt to access beyond end of device [ 298.788092][ T6639] loop0: rw=0, sector=88984, nr_sectors = 8 limit=40427 [ 299.342039][ T6740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.342136][ T6740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.342169][ T6740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.395489][ T6740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.397234][ T6740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.399665][ T6740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.996578][ T6740] hsr_slave_0: entered promiscuous mode [ 300.013793][ T6740] hsr_slave_1: entered promiscuous mode [ 300.014863][ T6740] debugfs: 'hsr0' already exists in 'hsr' [ 300.017893][ T6740] Cannot create hsr debugfs directory [ 300.498220][ T59] Bluetooth: hci3: command tx timeout [ 302.385754][ T6740] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 302.470116][ T6740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 302.483452][ T6740] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 302.558358][ T6740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 302.571534][ T6740] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 302.578255][ T59] Bluetooth: hci3: command tx timeout [ 302.865963][ T6740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 302.892556][ T6740] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 302.997816][ T6740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 303.670347][ T6639] bio_check_eod: 26671 callbacks suppressed [ 303.675373][ T6639] syz.0.18: attempt to access beyond end of device [ 303.675373][ T6639] loop0: rw=524288, sector=88680, nr_sectors = 8 limit=40427 [ 303.675614][ T6639] syz.0.18: attempt to access beyond end of device [ 303.675614][ T6639] loop0: rw=524288, sector=88688, nr_sectors = 8 limit=40427 [ 303.677661][ T6683] syz.1.19: attempt to access beyond end of device [ 303.677661][ T6683] loop1: rw=0, sector=89432, nr_sectors = 8 limit=40427 [ 303.678102][ T6683] syz.1.19: attempt to access beyond end of device [ 303.678102][ T6683] loop1: rw=0, sector=89440, nr_sectors = 8 limit=40427 [ 303.678258][ T6683] syz.1.19: attempt to access beyond end of device [ 303.678258][ T6683] loop1: rw=0, sector=89448, nr_sectors = 8 limit=40427 [ 303.678522][ T6683] syz.1.19: attempt to access beyond end of device [ 303.678522][ T6683] loop1: rw=0, sector=89456, nr_sectors = 8 limit=40427 [ 303.685595][ T6683] syz.1.19: attempt to access beyond end of device [ 303.685595][ T6683] loop1: rw=0, sector=89464, nr_sectors = 8 limit=40427 [ 303.694791][ T6683] syz.1.19: attempt to access beyond end of device [ 303.694791][ T6683] loop1: rw=0, sector=89472, nr_sectors = 8 limit=40427 [ 303.695301][ T6683] syz.1.19: attempt to access beyond end of device [ 303.695301][ T6683] loop1: rw=0, sector=89480, nr_sectors = 8 limit=40427 [ 303.695747][ T6683] syz.1.19: attempt to access beyond end of device [ 303.695747][ T6683] loop1: rw=0, sector=89488, nr_sectors = 8 limit=40427 [ 304.735706][ T6740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.884821][ T6740] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.016337][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.025843][ T1040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.144007][ T1196] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.153881][ T1196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.503166][ T6740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.047985][ T6740] veth0_vlan: entered promiscuous mode [ 308.186548][ T6740] veth1_vlan: entered promiscuous mode [ 308.396466][ T6740] veth0_macvtap: entered promiscuous mode [ 308.427752][ T6740] veth1_macvtap: entered promiscuous mode [ 308.592462][ T6740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.679195][ T6639] bio_check_eod: 24720 callbacks suppressed [ 308.679316][ T6639] syz.0.18: attempt to access beyond end of device [ 308.679316][ T6639] loop0: rw=524288, sector=86752, nr_sectors = 8 limit=40427 [ 308.690208][ T6639] syz.0.18: attempt to access beyond end of device [ 308.690208][ T6639] loop0: rw=524288, sector=86760, nr_sectors = 8 limit=40427 [ 308.690788][ T6639] syz.0.18: attempt to access beyond end of device [ 308.690788][ T6639] loop0: rw=524288, sector=86768, nr_sectors = 8 limit=40427 [ 308.691183][ T6639] syz.0.18: attempt to access beyond end of device [ 308.691183][ T6639] loop0: rw=524288, sector=86776, nr_sectors = 8 limit=40427 [ 308.691524][ T6639] syz.0.18: attempt to access beyond end of device [ 308.691524][ T6639] loop0: rw=524288, sector=86784, nr_sectors = 8 limit=40427 [ 308.698542][ T6639] syz.0.18: attempt to access beyond end of device [ 308.698542][ T6639] loop0: rw=524288, sector=86792, nr_sectors = 8 limit=40427 [ 308.699324][ T6639] syz.0.18: attempt to access beyond end of device [ 308.699324][ T6639] loop0: rw=524288, sector=86800, nr_sectors = 8 limit=40427 [ 308.709105][ T6683] syz.1.19: attempt to access beyond end of device [ 308.709105][ T6683] loop1: rw=524288, sector=88872, nr_sectors = 8 limit=40427 [ 308.709809][ T6683] syz.1.19: attempt to access beyond end of device [ 308.709809][ T6683] loop1: rw=524288, sector=88880, nr_sectors = 8 limit=40427 [ 308.710114][ T6683] syz.1.19: attempt to access beyond end of device [ 308.710114][ T6683] loop1: rw=524288, sector=88888, nr_sectors = 8 limit=40427 [ 308.862600][ T6740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.322400][ T1184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.323667][ T1184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.898270][ T1419] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.927984][ T1419] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.085420][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.085520][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.834546][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.834635][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/09 03:04:20 executed programs: 7 [ 313.274355][ T6779] loop3: detected capacity change from 0 to 40427 [ 313.347275][ T6779] F2FS-fs: heap/no_heap options were deprecated [ 313.347842][ T6779] F2FS-fs: heap/no_heap options were deprecated [ 313.554309][ T6779] F2FS-fs (loop3): Image doesn't support compression [ 313.692712][ T6639] bio_check_eod: 23099 callbacks suppressed [ 313.692825][ T6639] syz.0.18: attempt to access beyond end of device [ 313.692825][ T6639] loop0: rw=524288, sector=86224, nr_sectors = 8 limit=40427 [ 313.693337][ T6639] syz.0.18: attempt to access beyond end of device [ 313.693337][ T6639] loop0: rw=524288, sector=86232, nr_sectors = 8 limit=40427 [ 313.693841][ T6639] syz.0.18: attempt to access beyond end of device [ 313.693841][ T6639] loop0: rw=524288, sector=86240, nr_sectors = 8 limit=40427 [ 313.694206][ T6639] syz.0.18: attempt to access beyond end of device [ 313.694206][ T6639] loop0: rw=524288, sector=86248, nr_sectors = 8 limit=40427 [ 313.694481][ T6639] syz.0.18: attempt to access beyond end of device [ 313.694481][ T6639] loop0: rw=524288, sector=86256, nr_sectors = 8 limit=40427 [ 313.717690][ T6639] syz.0.18: attempt to access beyond end of device [ 313.717690][ T6639] loop0: rw=524288, sector=86264, nr_sectors = 8 limit=40427 [ 313.718618][ T6639] syz.0.18: attempt to access beyond end of device [ 313.718618][ T6639] loop0: rw=524288, sector=86272, nr_sectors = 8 limit=40427 [ 313.724584][ T6639] syz.0.18: attempt to access beyond end of device [ 313.724584][ T6639] loop0: rw=524288, sector=86280, nr_sectors = 8 limit=40427 [ 313.724818][ T6639] syz.0.18: attempt to access beyond end of device [ 313.724818][ T6639] loop0: rw=524288, sector=86288, nr_sectors = 8 limit=40427 [ 313.725316][ T6639] syz.0.18: attempt to access beyond end of device [ 313.725316][ T6639] loop0: rw=524288, sector=86296, nr_sectors = 8 limit=40427 [ 313.930029][ T6779] F2FS-fs (loop3): invalid crc value [ 314.835280][ T6779] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 317.905858][ T6784] loop3: detected capacity change from 0 to 40427 [ 317.937003][ T6784] F2FS-fs: heap/no_heap options were deprecated [ 317.950500][ T6784] F2FS-fs: heap/no_heap options were deprecated [ 317.975240][ T6784] F2FS-fs (loop3): Image doesn't support compression [ 317.995891][ T6784] F2FS-fs (loop3): invalid crc value [ 318.598964][ T6784] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 318.699721][ T6639] bio_check_eod: 24058 callbacks suppressed [ 318.710656][ T6639] syz.0.18: attempt to access beyond end of device [ 318.710656][ T6639] loop0: rw=0, sector=88072, nr_sectors = 8 limit=40427 [ 318.729780][ T6683] syz.1.19: attempt to access beyond end of device [ 318.729780][ T6683] loop1: rw=0, sector=87880, nr_sectors = 8 limit=40427 [ 318.747830][ T6639] syz.0.18: attempt to access beyond end of device [ 318.747830][ T6639] loop0: rw=0, sector=88080, nr_sectors = 8 limit=40427 [ 318.766319][ T6683] syz.1.19: attempt to access beyond end of device [ 318.766319][ T6683] loop1: rw=0, sector=87888, nr_sectors = 8 limit=40427 [ 318.780507][ T6639] syz.0.18: attempt to access beyond end of device [ 318.780507][ T6639] loop0: rw=0, sector=88088, nr_sectors = 8 limit=40427 [ 318.781039][ T6639] syz.0.18: attempt to access beyond end of device [ 318.781039][ T6639] loop0: rw=0, sector=88096, nr_sectors = 8 limit=40427 [ 318.781413][ T6639] syz.0.18: attempt to access beyond end of device [ 318.781413][ T6639] loop0: rw=0, sector=88104, nr_sectors = 8 limit=40427 [ 318.781792][ T6639] syz.0.18: attempt to access beyond end of device [ 318.781792][ T6639] loop0: rw=0, sector=88112, nr_sectors = 8 limit=40427 [ 318.789730][ T6639] syz.0.18: attempt to access beyond end of device [ 318.789730][ T6639] loop0: rw=0, sector=88120, nr_sectors = 8 limit=40427 [ 318.790219][ T6639] syz.0.18: attempt to access beyond end of device [ 318.790219][ T6639] loop0: rw=0, sector=88128, nr_sectors = 8 limit=40427 [ 319.041317][ T6784] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 320.995152][ T6738] F2FS-fs (loop2): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 323.303308][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.303575][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.708518][ T6738] bio_check_eod: 33741 callbacks suppressed [ 323.717067][ T6738] syz.2.21: attempt to access beyond end of device [ 323.717067][ T6738] loop2: rw=0, sector=86520, nr_sectors = 8 limit=40427 [ 323.729162][ T6639] syz.0.18: attempt to access beyond end of device [ 323.729162][ T6639] loop0: rw=0, sector=88904, nr_sectors = 8 limit=40427 [ 323.729865][ T6639] syz.0.18: attempt to access beyond end of device [ 323.729865][ T6639] loop0: rw=0, sector=88912, nr_sectors = 8 limit=40427 [ 323.730031][ T6639] syz.0.18: attempt to access beyond end of device [ 323.730031][ T6639] loop0: rw=0, sector=88920, nr_sectors = 8 limit=40427 [ 323.734332][ T6639] syz.0.18: attempt to access beyond end of device [ 323.734332][ T6639] loop0: rw=0, sector=88928, nr_sectors = 8 limit=40427 [ 323.735226][ T6639] syz.0.18: attempt to access beyond end of device [ 323.735226][ T6639] loop0: rw=0, sector=88936, nr_sectors = 8 limit=40427 [ 323.750922][ T6639] syz.0.18: attempt to access beyond end of device [ 323.750922][ T6639] loop0: rw=0, sector=88944, nr_sectors = 8 limit=40427 [ 323.751696][ T6639] syz.0.18: attempt to access beyond end of device [ 323.751696][ T6639] loop0: rw=0, sector=88952, nr_sectors = 8 limit=40427 [ 323.758773][ T6738] syz.2.21: attempt to access beyond end of device [ 323.758773][ T6738] loop2: rw=0, sector=86528, nr_sectors = 8 limit=40427 [ 323.759237][ T6738] syz.2.21: attempt to access beyond end of device [ 323.759237][ T6738] loop2: rw=0, sector=86536, nr_sectors = 8 limit=40427 [ 328.720273][ T6683] bio_check_eod: 39654 callbacks suppressed [ 328.731696][ T6683] syz.1.19: attempt to access beyond end of device [ 328.731696][ T6683] loop1: rw=0, sector=86744, nr_sectors = 8 limit=40427 [ 328.731884][ T6683] syz.1.19: attempt to access beyond end of device [ 328.731884][ T6683] loop1: rw=0, sector=86752, nr_sectors = 8 limit=40427 [ 328.732019][ T6683] syz.1.19: attempt to access beyond end of device [ 328.732019][ T6683] loop1: rw=0, sector=86760, nr_sectors = 8 limit=40427 [ 328.732168][ T6683] syz.1.19: attempt to access beyond end of device [ 328.732168][ T6683] loop1: rw=0, sector=86768, nr_sectors = 8 limit=40427 [ 328.732295][ T6683] syz.1.19: attempt to access beyond end of device [ 328.732295][ T6683] loop1: rw=0, sector=86776, nr_sectors = 8 limit=40427 [ 328.732684][ T6683] syz.1.19: attempt to access beyond end of device [ 328.732684][ T6683] loop1: rw=0, sector=86784, nr_sectors = 8 limit=40427 [ 328.737009][ T6738] syz.2.21: attempt to access beyond end of device [ 328.737009][ T6738] loop2: rw=0, sector=89360, nr_sectors = 8 limit=40427 [ 328.737157][ T6738] syz.2.21: attempt to access beyond end of device [ 328.737157][ T6738] loop2: rw=0, sector=89368, nr_sectors = 8 limit=40427 [ 328.737478][ T6738] syz.2.21: attempt to access beyond end of device [ 328.737478][ T6738] loop2: rw=0, sector=89376, nr_sectors = 8 limit=40427 [ 328.737884][ T6738] syz.2.21: attempt to access beyond end of device [ 328.737884][ T6738] loop2: rw=0, sector=89384, nr_sectors = 8 limit=40427 [ 331.354927][ T5723] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 331.413684][ T5723] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 331.436608][ T5723] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 331.453144][ T5723] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 331.455474][ T5723] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.543563][ T59] Bluetooth: hci4: command tx timeout [ 333.728271][ T6738] bio_check_eod: 35155 callbacks suppressed [ 333.728367][ T6738] syz.2.21: attempt to access beyond end of device [ 333.728367][ T6738] loop2: rw=524288, sector=86712, nr_sectors = 8 limit=40427 [ 333.728539][ T6738] syz.2.21: attempt to access beyond end of device [ 333.728539][ T6738] loop2: rw=524288, sector=86720, nr_sectors = 8 limit=40427 [ 333.728714][ T6738] syz.2.21: attempt to access beyond end of device [ 333.728714][ T6738] loop2: rw=524288, sector=86728, nr_sectors = 8 limit=40427 [ 333.728877][ T6738] syz.2.21: attempt to access beyond end of device [ 333.728877][ T6738] loop2: rw=524288, sector=86736, nr_sectors = 8 limit=40427 [ 333.729038][ T6738] syz.2.21: attempt to access beyond end of device [ 333.729038][ T6738] loop2: rw=524288, sector=86744, nr_sectors = 8 limit=40427 [ 333.729207][ T6738] syz.2.21: attempt to access beyond end of device [ 333.729207][ T6738] loop2: rw=524288, sector=86752, nr_sectors = 8 limit=40427 [ 333.729368][ T6738] syz.2.21: attempt to access beyond end of device [ 333.729368][ T6738] loop2: rw=524288, sector=86760, nr_sectors = 8 limit=40427 [ 333.729552][ T6738] syz.2.21: attempt to access beyond end of device [ 333.729552][ T6738] loop2: rw=524288, sector=86768, nr_sectors = 8 limit=40427 [ 333.729672][ T6683] syz.1.19: attempt to access beyond end of device [ 333.729672][ T6683] loop1: rw=0, sector=89880, nr_sectors = 8 limit=40427 [ 333.729719][ T6738] syz.2.21: attempt to access beyond end of device [ 333.729719][ T6738] loop2: rw=524288, sector=86776, nr_sectors = 8 limit=40427 [ 335.618312][ T59] Bluetooth: hci4: command tx timeout [ 335.655042][ T6790] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.655635][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.678302][ T6790] bridge_slave_0: entered allmulticast mode [ 335.692638][ T6790] bridge_slave_0: entered promiscuous mode [ 335.722523][ T6790] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.722996][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.723563][ T6790] bridge_slave_1: entered allmulticast mode [ 335.787350][ T6790] bridge_slave_1: entered promiscuous mode [ 336.302767][ T6790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.354481][ T6790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.923450][ T6790] team0: Port device team_slave_0 added [ 336.959517][ T6790] team0: Port device team_slave_1 added [ 337.303945][ T6790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.314947][ T6790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.314984][ T6790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.364161][ T6790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.364251][ T6790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.364291][ T6790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.702210][ T59] Bluetooth: hci4: command tx timeout [ 337.980159][ T6790] hsr_slave_0: entered promiscuous mode [ 337.988923][ T6790] hsr_slave_1: entered promiscuous mode [ 337.996623][ T6790] debugfs: 'hsr0' already exists in 'hsr' [ 337.996655][ T6790] Cannot create hsr debugfs directory [ 338.741952][ T6738] bio_check_eod: 33843 callbacks suppressed [ 338.742542][ T6639] syz.0.18: attempt to access beyond end of device [ 338.742542][ T6639] loop0: rw=0, sector=88872, nr_sectors = 8 limit=40427 [ 338.743110][ T6639] syz.0.18: attempt to access beyond end of device [ 338.743110][ T6639] loop0: rw=0, sector=88880, nr_sectors = 8 limit=40427 [ 338.743619][ T6639] syz.0.18: attempt to access beyond end of device [ 338.743619][ T6639] loop0: rw=0, sector=88888, nr_sectors = 8 limit=40427 [ 338.744402][ T6683] syz.1.19: attempt to access beyond end of device [ 338.744402][ T6683] loop1: rw=524288, sector=86400, nr_sectors = 8 limit=40427 [ 338.744789][ T6683] syz.1.19: attempt to access beyond end of device [ 338.744789][ T6683] loop1: rw=524288, sector=86408, nr_sectors = 8 limit=40427 [ 338.745218][ T6683] syz.1.19: attempt to access beyond end of device [ 338.745218][ T6683] loop1: rw=524288, sector=86416, nr_sectors = 8 limit=40427 [ 338.745635][ T6683] syz.1.19: attempt to access beyond end of device [ 338.745635][ T6683] loop1: rw=524288, sector=86424, nr_sectors = 8 limit=40427 [ 338.752917][ T6639] syz.0.18: attempt to access beyond end of device [ 338.752917][ T6639] loop0: rw=0, sector=88896, nr_sectors = 8 limit=40427 [ 338.753258][ T6639] syz.0.18: attempt to access beyond end of device [ 338.753258][ T6639] loop0: rw=0, sector=88904, nr_sectors = 8 limit=40427 [ 338.830916][ T6738] syz.2.21: attempt to access beyond end of device [ 338.830916][ T6738] loop2: rw=0, sector=87040, nr_sectors = 8 limit=40427 [ 339.778266][ T59] Bluetooth: hci4: command tx timeout [ 340.738328][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 340.825964][ T6790] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 340.885401][ T6790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 340.904576][ T6790] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 341.105076][ T6790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 341.120375][ T6790] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 341.163852][ T6790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 341.180344][ T6790] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 341.264571][ T6790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 342.078130][ T6790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.263522][ T6790] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.420674][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.472307][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.773562][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.782940][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.748270][ T6639] bio_check_eod: 32282 callbacks suppressed [ 343.748366][ T6639] syz.0.18: attempt to access beyond end of device [ 343.748366][ T6639] loop0: rw=0, sector=86672, nr_sectors = 8 limit=40427 [ 343.748391][ T6683] syz.1.19: attempt to access beyond end of device [ 343.748391][ T6683] loop1: rw=0, sector=88632, nr_sectors = 8 limit=40427 [ 343.748546][ T6683] syz.1.19: attempt to access beyond end of device [ 343.748546][ T6683] loop1: rw=0, sector=88640, nr_sectors = 8 limit=40427 [ 343.748592][ T6639] syz.0.18: attempt to access beyond end of device [ 343.748592][ T6639] loop0: rw=0, sector=86680, nr_sectors = 8 limit=40427 [ 343.748735][ T6683] syz.1.19: attempt to access beyond end of device [ 343.748735][ T6683] loop1: rw=0, sector=88648, nr_sectors = 8 limit=40427 [ 343.748815][ T6639] syz.0.18: attempt to access beyond end of device [ 343.748815][ T6639] loop0: rw=0, sector=86688, nr_sectors = 8 limit=40427 [ 343.748928][ T6683] syz.1.19: attempt to access beyond end of device [ 343.748928][ T6683] loop1: rw=0, sector=88656, nr_sectors = 8 limit=40427 [ 343.748997][ T6639] syz.0.18: attempt to access beyond end of device [ 343.748997][ T6639] loop0: rw=0, sector=86696, nr_sectors = 8 limit=40427 [ 343.749115][ T6683] syz.1.19: attempt to access beyond end of device [ 343.749115][ T6683] loop1: rw=0, sector=88664, nr_sectors = 8 limit=40427 [ 343.749238][ T6639] syz.0.18: attempt to access beyond end of device [ 343.749238][ T6639] loop0: rw=0, sector=86704, nr_sectors = 8 limit=40427 [ 345.983647][ T6790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.901155][ T6790] veth0_vlan: entered promiscuous mode [ 346.956040][ T6790] veth1_vlan: entered promiscuous mode [ 347.235782][ T6790] veth0_macvtap: entered promiscuous mode [ 347.371772][ T6790] veth1_macvtap: entered promiscuous mode [ 347.756378][ T6790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.826226][ T6790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.143666][ T1196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.144076][ T1196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.267487][ T1196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.289520][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.760252][ T6639] bio_check_eod: 27489 callbacks suppressed [ 348.760363][ T6639] syz.0.18: attempt to access beyond end of device [ 348.760363][ T6639] loop0: rw=524288, sector=87840, nr_sectors = 8 limit=40427 [ 348.760481][ T6738] syz.2.21: attempt to access beyond end of device [ 348.760481][ T6738] loop2: rw=524288, sector=89744, nr_sectors = 8 limit=40427 [ 348.760542][ T6639] syz.0.18: attempt to access beyond end of device [ 348.760542][ T6639] loop0: rw=524288, sector=87848, nr_sectors = 8 limit=40427 [ 348.760665][ T6738] syz.2.21: attempt to access beyond end of device [ 348.760665][ T6738] loop2: rw=524288, sector=89752, nr_sectors = 8 limit=40427 [ 348.760701][ T6639] syz.0.18: attempt to access beyond end of device [ 348.760701][ T6639] loop0: rw=524288, sector=87856, nr_sectors = 8 limit=40427 [ 348.760837][ T6738] syz.2.21: attempt to access beyond end of device [ 348.760837][ T6738] loop2: rw=524288, sector=89760, nr_sectors = 8 limit=40427 [ 348.760892][ T6639] syz.0.18: attempt to access beyond end of device [ 348.760892][ T6639] loop0: rw=524288, sector=87864, nr_sectors = 8 limit=40427 [ 348.761001][ T6738] syz.2.21: attempt to access beyond end of device [ 348.761001][ T6738] loop2: rw=524288, sector=89768, nr_sectors = 8 limit=40427 [ 348.761054][ T6639] syz.0.18: attempt to access beyond end of device [ 348.761054][ T6639] loop0: rw=524288, sector=87872, nr_sectors = 8 limit=40427 [ 348.761165][ T6738] syz.2.21: attempt to access beyond end of device [ 348.761165][ T6738] loop2: rw=524288, sector=89776, nr_sectors = 8 limit=40427 [ 349.903675][ T1419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.912970][ T1419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.771415][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.771511][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/09 03:05:02 executed programs: 9 [ 353.768185][ T6683] bio_check_eod: 28315 callbacks suppressed [ 353.768285][ T6683] syz.1.19: attempt to access beyond end of device [ 353.768285][ T6683] loop1: rw=524288, sector=89200, nr_sectors = 8 limit=40427 [ 353.768381][ T6738] syz.2.21: attempt to access beyond end of device [ 353.768381][ T6738] loop2: rw=524288, sector=89624, nr_sectors = 8 limit=40427 [ 353.768575][ T6738] syz.2.21: attempt to access beyond end of device [ 353.768575][ T6738] loop2: rw=524288, sector=89632, nr_sectors = 8 limit=40427 [ 353.768761][ T6683] syz.1.19: attempt to access beyond end of device [ 353.768761][ T6683] loop1: rw=524288, sector=89208, nr_sectors = 8 limit=40427 [ 353.768945][ T6738] syz.2.21: attempt to access beyond end of device [ 353.768945][ T6738] loop2: rw=524288, sector=89640, nr_sectors = 8 limit=40427 [ 353.769148][ T6738] syz.2.21: attempt to access beyond end of device [ 353.769148][ T6738] loop2: rw=524288, sector=89648, nr_sectors = 8 limit=40427 [ 353.769589][ T6683] syz.1.19: attempt to access beyond end of device [ 353.769589][ T6683] loop1: rw=524288, sector=89216, nr_sectors = 8 limit=40427 [ 353.769780][ T6738] syz.2.21: attempt to access beyond end of device [ 353.769780][ T6738] loop2: rw=524288, sector=89656, nr_sectors = 8 limit=40427 [ 353.773717][ T6639] syz.0.18: attempt to access beyond end of device [ 353.773717][ T6639] loop0: rw=524288, sector=89232, nr_sectors = 8 limit=40427 [ 353.774117][ T6639] syz.0.18: attempt to access beyond end of device [ 353.774117][ T6639] loop0: rw=524288, sector=89240, nr_sectors = 8 limit=40427 [ 355.260945][ T6839] loop4: detected capacity change from 0 to 40427 [ 355.297093][ T6839] F2FS-fs: heap/no_heap options were deprecated [ 355.297471][ T6839] F2FS-fs: heap/no_heap options were deprecated [ 355.473106][ T6839] F2FS-fs (loop4): Image doesn't support compression [ 355.603966][ T6839] F2FS-fs (loop4): invalid crc value [ 356.621271][ T6839] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 2026/09/09 03:05:07 executed programs: 10 [ 358.778355][ T6683] bio_check_eod: 23220 callbacks suppressed [ 358.782572][ T6639] syz.0.18: attempt to access beyond end of device [ 358.782572][ T6639] loop0: rw=524288, sector=89936, nr_sectors = 8 limit=40427 [ 358.788553][ T6639] syz.0.18: attempt to access beyond end of device [ 358.788553][ T6639] loop0: rw=0, sector=86016, nr_sectors = 8 limit=40427 [ 358.789344][ T6639] syz.0.18: attempt to access beyond end of device [ 358.789344][ T6639] loop0: rw=0, sector=86024, nr_sectors = 8 limit=40427 [ 358.789543][ T6639] syz.0.18: attempt to access beyond end of device [ 358.789543][ T6639] loop0: rw=0, sector=86032, nr_sectors = 8 limit=40427 [ 358.789741][ T6639] syz.0.18: attempt to access beyond end of device [ 358.789741][ T6639] loop0: rw=0, sector=86040, nr_sectors = 8 limit=40427 [ 358.797161][ T6639] syz.0.18: attempt to access beyond end of device [ 358.797161][ T6639] loop0: rw=0, sector=86048, nr_sectors = 8 limit=40427 [ 358.797802][ T6639] syz.0.18: attempt to access beyond end of device [ 358.797802][ T6639] loop0: rw=0, sector=86056, nr_sectors = 8 limit=40427 [ 358.805091][ T6639] syz.0.18: attempt to access beyond end of device [ 358.805091][ T6639] loop0: rw=0, sector=86064, nr_sectors = 8 limit=40427 [ 358.805543][ T6639] syz.0.18: attempt to access beyond end of device [ 358.805543][ T6639] loop0: rw=0, sector=86072, nr_sectors = 8 limit=40427 [ 358.842433][ T6683] syz.1.19: attempt to access beyond end of device [ 358.842433][ T6683] loop1: rw=524288, sector=89064, nr_sectors = 8 limit=40427 [ 362.073285][ T6847] loop4: detected capacity change from 0 to 40427 [ 362.088823][ T6847] F2FS-fs: heap/no_heap options were deprecated [ 362.101999][ T6847] F2FS-fs: heap/no_heap options were deprecated [ 362.141125][ T6847] F2FS-fs (loop4): Image doesn't support compression [ 362.174168][ T6847] F2FS-fs (loop4): invalid crc value [ 362.962664][ T6847] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 2026/09/09 03:05:12 executed programs: 11 [ 363.788061][ T6639] bio_check_eod: 26630 callbacks suppressed [ 363.789524][ T6639] syz.0.18: attempt to access beyond end of device [ 363.789524][ T6639] loop0: rw=524288, sector=87136, nr_sectors = 8 limit=40427 [ 363.789970][ T6639] syz.0.18: attempt to access beyond end of device [ 363.789970][ T6639] loop0: rw=524288, sector=87144, nr_sectors = 8 limit=40427 [ 363.790853][ T6738] syz.2.21: attempt to access beyond end of device [ 363.790853][ T6738] loop2: rw=0, sector=89280, nr_sectors = 8 limit=40427 [ 363.791401][ T6738] syz.2.21: attempt to access beyond end of device [ 363.791401][ T6738] loop2: rw=0, sector=89288, nr_sectors = 8 limit=40427 [ 363.791690][ T6738] syz.2.21: attempt to access beyond end of device [ 363.791690][ T6738] loop2: rw=0, sector=89296, nr_sectors = 8 limit=40427 [ 363.794442][ T6639] syz.0.18: attempt to access beyond end of device [ 363.794442][ T6639] loop0: rw=524288, sector=87152, nr_sectors = 8 limit=40427 [ 363.794971][ T6639] syz.0.18: attempt to access beyond end of device [ 363.794971][ T6639] loop0: rw=524288, sector=87160, nr_sectors = 8 limit=40427 [ 363.795384][ T6639] syz.0.18: attempt to access beyond end of device [ 363.795384][ T6639] loop0: rw=524288, sector=87168, nr_sectors = 8 limit=40427 [ 363.795990][ T6738] syz.2.21: attempt to access beyond end of device [ 363.795990][ T6738] loop2: rw=0, sector=89304, nr_sectors = 8 limit=40427 [ 363.796418][ T6738] syz.2.21: attempt to access beyond end of device [ 363.796418][ T6738] loop2: rw=0, sector=89312, nr_sectors = 8 limit=40427 [ 365.964089][ T6852] loop4: detected capacity change from 0 to 40427 [ 366.003859][ T6852] F2FS-fs: heap/no_heap options were deprecated [ 366.021854][ T6852] F2FS-fs: heap/no_heap options were deprecated [ 366.036962][ T6852] F2FS-fs (loop4): Image doesn't support compression [ 366.060127][ T6852] F2FS-fs (loop4): invalid crc value [ 366.338206][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 366.950880][ T6852] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 367.121432][ T6852] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 368.801678][ T6738] bio_check_eod: 29408 callbacks suppressed [ 368.801812][ T6738] syz.2.21: attempt to access beyond end of device [ 368.801812][ T6738] loop2: rw=0, sector=86944, nr_sectors = 8 limit=40427 [ 368.802283][ T6738] syz.2.21: attempt to access beyond end of device [ 368.802283][ T6738] loop2: rw=0, sector=86952, nr_sectors = 8 limit=40427 [ 368.802640][ T6738] syz.2.21: attempt to access beyond end of device [ 368.802640][ T6738] loop2: rw=0, sector=86960, nr_sectors = 8 limit=40427 [ 368.804912][ T6639] syz.0.18: attempt to access beyond end of device [ 368.804912][ T6639] loop0: rw=524288, sector=89144, nr_sectors = 8 limit=40427 [ 368.805311][ T6639] syz.0.18: attempt to access beyond end of device [ 368.805311][ T6639] loop0: rw=524288, sector=89152, nr_sectors = 8 limit=40427 [ 368.805635][ T6639] syz.0.18: attempt to access beyond end of device [ 368.805635][ T6639] loop0: rw=524288, sector=89160, nr_sectors = 8 limit=40427 [ 368.805957][ T6639] syz.0.18: attempt to access beyond end of device [ 368.805957][ T6639] loop0: rw=524288, sector=89168, nr_sectors = 8 limit=40427 [ 368.814950][ T6738] syz.2.21: attempt to access beyond end of device [ 368.814950][ T6738] loop2: rw=0, sector=86968, nr_sectors = 8 limit=40427 [ 368.815408][ T6738] syz.2.21: attempt to access beyond end of device [ 368.815408][ T6738] loop2: rw=0, sector=86976, nr_sectors = 8 limit=40427 [ 368.815842][ T6738] syz.2.21: attempt to access beyond end of device [ 368.815842][ T6738] loop2: rw=0, sector=86984, nr_sectors = 8 limit=40427 [ 370.772655][ T6788] F2FS-fs (loop3): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 373.809902][ T6738] bio_check_eod: 28154 callbacks suppressed [ 373.810034][ T6738] syz.2.21: attempt to access beyond end of device [ 373.810034][ T6738] loop2: rw=0, sector=86448, nr_sectors = 8 limit=40427 [ 373.810115][ T6683] syz.1.19: attempt to access beyond end of device [ 373.810115][ T6683] loop1: rw=524288, sector=88112, nr_sectors = 8 limit=40427 [ 373.810328][ T6738] syz.2.21: attempt to access beyond end of device [ 373.810328][ T6738] loop2: rw=0, sector=86456, nr_sectors = 8 limit=40427 [ 373.820686][ T6738] syz.2.21: attempt to access beyond end of device [ 373.820686][ T6738] loop2: rw=0, sector=86464, nr_sectors = 8 limit=40427 [ 373.821297][ T6738] syz.2.21: attempt to access beyond end of device [ 373.821297][ T6738] loop2: rw=0, sector=86472, nr_sectors = 8 limit=40427 [ 373.821613][ T6738] syz.2.21: attempt to access beyond end of device [ 373.821613][ T6738] loop2: rw=0, sector=86480, nr_sectors = 8 limit=40427 [ 373.821735][ T6738] syz.2.21: attempt to access beyond end of device [ 373.821735][ T6738] loop2: rw=0, sector=86488, nr_sectors = 8 limit=40427 [ 373.828399][ T6788] syz.3.23: attempt to access beyond end of device [ 373.828399][ T6788] loop3: rw=524288, sector=87232, nr_sectors = 8 limit=40427 [ 373.828556][ T6788] syz.3.23: attempt to access beyond end of device [ 373.828556][ T6788] loop3: rw=524288, sector=87240, nr_sectors = 8 limit=40427 [ 373.829006][ T6788] syz.3.23: attempt to access beyond end of device [ 373.829006][ T6788] loop3: rw=524288, sector=87248, nr_sectors = 8 limit=40427 [ 378.819079][ T6639] bio_check_eod: 38571 callbacks suppressed [ 378.820295][ T6683] syz.1.19: attempt to access beyond end of device [ 378.820295][ T6683] loop1: rw=524288, sector=87848, nr_sectors = 8 limit=40427 [ 378.822780][ T6738] syz.2.21: attempt to access beyond end of device [ 378.822780][ T6738] loop2: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 378.823226][ T6738] syz.2.21: attempt to access beyond end of device [ 378.823226][ T6738] loop2: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 378.823560][ T6738] syz.2.21: attempt to access beyond end of device [ 378.823560][ T6738] loop2: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 378.824326][ T6683] syz.1.19: attempt to access beyond end of device [ 378.824326][ T6683] loop1: rw=524288, sector=87856, nr_sectors = 8 limit=40427 [ 378.824971][ T6683] syz.1.19: attempt to access beyond end of device [ 378.824971][ T6683] loop1: rw=524288, sector=87864, nr_sectors = 8 limit=40427 [ 378.829230][ T6738] syz.2.21: attempt to access beyond end of device [ 378.829230][ T6738] loop2: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 378.829578][ T6738] syz.2.21: attempt to access beyond end of device [ 378.829578][ T6738] loop2: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 378.830157][ T6738] syz.2.21: attempt to access beyond end of device [ 378.830157][ T6738] loop2: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 378.842569][ T6639] syz.0.18: attempt to access beyond end of device [ 378.842569][ T6639] loop0: rw=0, sector=86880, nr_sectors = 8 limit=40427 [ 379.205449][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.218752][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.259191][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.281225][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.294406][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 381.468643][ T59] Bluetooth: hci5: command tx timeout [ 383.538144][ T59] Bluetooth: hci5: command tx timeout [ 383.828395][ T6788] bio_check_eod: 31533 callbacks suppressed [ 383.830212][ T6683] syz.1.19: attempt to access beyond end of device [ 383.830212][ T6683] loop1: rw=0, sector=86888, nr_sectors = 8 limit=40427 [ 383.830424][ T6683] syz.1.19: attempt to access beyond end of device [ 383.830424][ T6683] loop1: rw=0, sector=86896, nr_sectors = 8 limit=40427 [ 383.830934][ T6639] syz.0.18: attempt to access beyond end of device [ 383.830934][ T6639] loop0: rw=524288, sector=86096, nr_sectors = 8 limit=40427 [ 383.831281][ T6639] syz.0.18: attempt to access beyond end of device [ 383.831281][ T6639] loop0: rw=524288, sector=86104, nr_sectors = 8 limit=40427 [ 383.836793][ T6639] syz.0.18: attempt to access beyond end of device [ 383.836793][ T6639] loop0: rw=524288, sector=86112, nr_sectors = 8 limit=40427 [ 383.837268][ T6639] syz.0.18: attempt to access beyond end of device [ 383.837268][ T6639] loop0: rw=524288, sector=86120, nr_sectors = 8 limit=40427 [ 383.837405][ T6738] syz.2.21: attempt to access beyond end of device [ 383.837405][ T6738] loop2: rw=524288, sector=86496, nr_sectors = 8 limit=40427 [ 383.837581][ T6738] syz.2.21: attempt to access beyond end of device [ 383.837581][ T6738] loop2: rw=524288, sector=86504, nr_sectors = 8 limit=40427 [ 383.837730][ T6738] syz.2.21: attempt to access beyond end of device [ 383.837730][ T6738] loop2: rw=524288, sector=86512, nr_sectors = 8 limit=40427 [ 383.907009][ T6788] syz.3.23: attempt to access beyond end of device [ 383.907009][ T6788] loop3: rw=524288, sector=89336, nr_sectors = 8 limit=40427 [ 384.744428][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.744591][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.530441][ T6859] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.531006][ T6859] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.537157][ T6859] bridge_slave_0: entered allmulticast mode [ 385.556532][ T6859] bridge_slave_0: entered promiscuous mode [ 385.618126][ T5723] Bluetooth: hci5: command tx timeout [ 385.685316][ T6859] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.693278][ T6859] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.693898][ T6859] bridge_slave_1: entered allmulticast mode [ 385.759279][ T6859] bridge_slave_1: entered promiscuous mode [ 386.585032][ T6859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.740280][ T6859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.827774][ T5723] Bluetooth: hci2: command 0x0406 tx timeout [ 387.301677][ T6859] team0: Port device team_slave_0 added [ 387.333849][ T6859] team0: Port device team_slave_1 added [ 387.698226][ T59] Bluetooth: hci5: command tx timeout [ 387.849942][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.863783][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.863821][ T6859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.936747][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.942302][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.942340][ T6859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.577408][ T6859] hsr_slave_0: entered promiscuous mode [ 388.598638][ T6859] hsr_slave_1: entered promiscuous mode [ 388.631249][ T6859] debugfs: 'hsr0' already exists in 'hsr' [ 388.631404][ T6859] Cannot create hsr debugfs directory [ 388.838109][ T6683] bio_check_eod: 36111 callbacks suppressed [ 388.838222][ T6738] syz.2.21: attempt to access beyond end of device [ 388.838222][ T6738] loop2: rw=524288, sector=88616, nr_sectors = 8 limit=40427 [ 388.838235][ T6639] syz.0.18: attempt to access beyond end of device [ 388.838235][ T6639] loop0: rw=524288, sector=86336, nr_sectors = 8 limit=40427 [ 388.838758][ T6639] syz.0.18: attempt to access beyond end of device [ 388.838758][ T6639] loop0: rw=524288, sector=86344, nr_sectors = 8 limit=40427 [ 388.838868][ T6639] syz.0.18: attempt to access beyond end of device [ 388.838868][ T6639] loop0: rw=524288, sector=86352, nr_sectors = 8 limit=40427 [ 388.839177][ T6639] syz.0.18: attempt to access beyond end of device [ 388.839177][ T6639] loop0: rw=524288, sector=86360, nr_sectors = 8 limit=40427 [ 388.839514][ T6639] syz.0.18: attempt to access beyond end of device [ 388.839514][ T6639] loop0: rw=524288, sector=86368, nr_sectors = 8 limit=40427 [ 388.841159][ T6683] syz.1.19: attempt to access beyond end of device [ 388.841159][ T6683] loop1: rw=524288, sector=88624, nr_sectors = 8 limit=40427 [ 388.843753][ T6639] syz.0.18: attempt to access beyond end of device [ 388.843753][ T6639] loop0: rw=524288, sector=86376, nr_sectors = 8 limit=40427 [ 388.844231][ T6639] syz.0.18: attempt to access beyond end of device [ 388.844231][ T6639] loop0: rw=524288, sector=86384, nr_sectors = 8 limit=40427 [ 388.844371][ T6639] syz.0.18: attempt to access beyond end of device [ 388.844371][ T6639] loop0: rw=524288, sector=86392, nr_sectors = 8 limit=40427 [ 393.242985][ T6859] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 393.372475][ T6859] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 393.382945][ T6859] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 393.481391][ T6859] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 393.493199][ T6859] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 393.632833][ T6859] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 393.643385][ T6859] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 393.846396][ T6859] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 393.848955][ T6788] bio_check_eod: 36278 callbacks suppressed [ 393.849000][ T6788] syz.3.23: attempt to access beyond end of device [ 393.849000][ T6788] loop3: rw=524288, sector=88624, nr_sectors = 8 limit=40427 [ 393.849550][ T6788] syz.3.23: attempt to access beyond end of device [ 393.849550][ T6788] loop3: rw=524288, sector=88632, nr_sectors = 8 limit=40427 [ 393.850011][ T6788] syz.3.23: attempt to access beyond end of device [ 393.850011][ T6788] loop3: rw=524288, sector=88640, nr_sectors = 8 limit=40427 [ 393.911905][ T6683] syz.1.19: attempt to access beyond end of device [ 393.911905][ T6683] loop1: rw=0, sector=86680, nr_sectors = 8 limit=40427 [ 393.915327][ T6639] syz.0.18: attempt to access beyond end of device [ 393.915327][ T6639] loop0: rw=0, sector=86344, nr_sectors = 8 limit=40427 [ 393.915878][ T6639] syz.0.18: attempt to access beyond end of device [ 393.915878][ T6639] loop0: rw=0, sector=86352, nr_sectors = 8 limit=40427 [ 393.916204][ T6639] syz.0.18: attempt to access beyond end of device [ 393.916204][ T6639] loop0: rw=0, sector=86360, nr_sectors = 8 limit=40427 [ 393.929473][ T6788] syz.3.23: attempt to access beyond end of device [ 393.929473][ T6788] loop3: rw=524288, sector=88648, nr_sectors = 8 limit=40427 [ 393.929935][ T6788] syz.3.23: attempt to access beyond end of device [ 393.929935][ T6788] loop3: rw=524288, sector=88656, nr_sectors = 8 limit=40427 [ 393.930361][ T6788] syz.3.23: attempt to access beyond end of device [ 393.930361][ T6788] loop3: rw=524288, sector=88664, nr_sectors = 8 limit=40427 [ 394.976261][ T6859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.427528][ T6859] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.476273][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.480089][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.543143][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.543551][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.764576][ T6859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.858197][ T6639] bio_check_eod: 34236 callbacks suppressed [ 398.859959][ T6639] syz.0.18: attempt to access beyond end of device [ 398.859959][ T6639] loop0: rw=0, sector=87736, nr_sectors = 8 limit=40427 [ 398.860432][ T6639] syz.0.18: attempt to access beyond end of device [ 398.860432][ T6639] loop0: rw=0, sector=87744, nr_sectors = 8 limit=40427 [ 398.860796][ T6639] syz.0.18: attempt to access beyond end of device [ 398.860796][ T6639] loop0: rw=0, sector=87752, nr_sectors = 8 limit=40427 [ 398.861296][ T6738] syz.2.21: attempt to access beyond end of device [ 398.861296][ T6738] loop2: rw=524288, sector=87240, nr_sectors = 8 limit=40427 [ 398.861648][ T6738] syz.2.21: attempt to access beyond end of device [ 398.861648][ T6738] loop2: rw=524288, sector=87248, nr_sectors = 8 limit=40427 [ 398.862004][ T6738] syz.2.21: attempt to access beyond end of device [ 398.862004][ T6738] loop2: rw=524288, sector=87256, nr_sectors = 8 limit=40427 [ 398.862336][ T6738] syz.2.21: attempt to access beyond end of device [ 398.862336][ T6738] loop2: rw=524288, sector=87264, nr_sectors = 8 limit=40427 [ 398.865169][ T6788] syz.3.23: attempt to access beyond end of device [ 398.865169][ T6788] loop3: rw=524288, sector=88936, nr_sectors = 8 limit=40427 [ 398.865606][ T6788] syz.3.23: attempt to access beyond end of device [ 398.865606][ T6788] loop3: rw=524288, sector=88944, nr_sectors = 8 limit=40427 [ 398.865971][ T6788] syz.3.23: attempt to access beyond end of device [ 398.865971][ T6788] loop3: rw=524288, sector=88952, nr_sectors = 8 limit=40427 [ 400.823613][ T6859] veth0_vlan: entered promiscuous mode [ 400.928884][ T6859] veth1_vlan: entered promiscuous mode [ 401.235644][ T6859] veth0_macvtap: entered promiscuous mode [ 401.296166][ T6859] veth1_macvtap: entered promiscuous mode [ 401.431179][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.676747][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.808581][ T1419] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.645418][ T1419] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.692038][ T45] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.719914][ T1419] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.516439][ T6841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.525857][ T6841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.868112][ T6639] bio_check_eod: 30914 callbacks suppressed [ 403.868230][ T6639] syz.0.18: attempt to access beyond end of device [ 403.868230][ T6639] loop0: rw=0, sector=86192, nr_sectors = 8 limit=40427 [ 403.868680][ T6639] syz.0.18: attempt to access beyond end of device [ 403.868680][ T6639] loop0: rw=0, sector=86200, nr_sectors = 8 limit=40427 [ 403.869374][ T6639] syz.0.18: attempt to access beyond end of device [ 403.869374][ T6639] loop0: rw=0, sector=86208, nr_sectors = 8 limit=40427 [ 403.869819][ T6639] syz.0.18: attempt to access beyond end of device [ 403.869819][ T6639] loop0: rw=0, sector=86216, nr_sectors = 8 limit=40427 [ 403.870239][ T6639] syz.0.18: attempt to access beyond end of device [ 403.870239][ T6639] loop0: rw=0, sector=86224, nr_sectors = 8 limit=40427 [ 403.870595][ T6639] syz.0.18: attempt to access beyond end of device [ 403.870595][ T6639] loop0: rw=0, sector=86232, nr_sectors = 8 limit=40427 [ 403.870951][ T6639] syz.0.18: attempt to access beyond end of device [ 403.870951][ T6639] loop0: rw=0, sector=86240, nr_sectors = 8 limit=40427 [ 403.871295][ T6639] syz.0.18: attempt to access beyond end of device [ 403.871295][ T6639] loop0: rw=0, sector=86248, nr_sectors = 8 limit=40427 [ 403.871694][ T6639] syz.0.18: attempt to access beyond end of device [ 403.871694][ T6639] loop0: rw=0, sector=86256, nr_sectors = 8 limit=40427 [ 403.872131][ T6639] syz.0.18: attempt to access beyond end of device [ 403.872131][ T6639] loop0: rw=0, sector=86264, nr_sectors = 8 limit=40427 [ 404.410478][ T178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.410575][ T178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/09/09 03:05:55 executed programs: 12 [ 408.419155][ T38] INFO: task kworker/u8:18:1403 blocked for more than 143 seconds. [ 408.456628][ T38] Not tainted syzkaller #0 [ 408.456652][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 408.456664][ T38] task:kworker/u8:18 state:D stack:21544 pid:1403 tgid:1403 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 408.456744][ T38] Workqueue: writeback wb_workfn (flush-7:0) [ 408.456911][ T38] Call Trace: [ 408.457004][ T38] [ 408.457052][ T38] __schedule+0x16d9/0x5700 [ 408.457262][ T38] ? __lock_acquire+0x747/0x2de0 [ 408.457349][ T38] ? __pfx___schedule+0x10/0x10 [ 408.457376][ T38] ? irqentry_exit+0x218/0x910 [ 408.457412][ T38] ? irqentry_exit+0x218/0x910 [ 408.457443][ T38] ? trace_irq_disable+0x3b/0x140 [ 408.457504][ T38] ? __pfx___schedule+0x10/0x10 [ 408.457555][ T38] rt_mutex_schedule+0x76/0xf0 [ 408.457597][ T38] ? __rt_mutex_slowlock_locked+0x1d6/0x25b0 [ 408.457754][ T38] __rt_mutex_slowlock_locked+0x1f88/0x25b0 [ 408.457799][ T38] ? __rt_mutex_slowlock_locked+0x1d6/0x25b0 [ 408.457830][ T38] ? __pfx___rt_mutex_slowlock_locked+0x10/0x10 [ 408.457874][ T38] ? rcu_is_watching+0x16/0xb0 [ 408.474076][ T38] rt_mutex_slowlock+0xbd/0x180 [ 408.474193][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 408.474289][ T38] ? lock_acquire+0x115/0x350 [ 408.474385][ T38] rwbase_write_lock+0x14c/0x720 [ 408.474500][ T38] f2fs_down_write_trace+0x34/0x1f0 [ 408.474734][ T38] f2fs_balance_fs+0x5d1/0x810 [ 408.474796][ T38] ? __pfx_from_kgid+0x10/0x10 [ 408.474884][ T38] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 408.474946][ T38] ? f2fs_inode_chksum_set+0x13e/0x630 [ 408.475042][ T38] ? set_raw_inline+0x28b/0x390 [ 408.475072][ T38] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 408.475103][ T38] ? f2fs_update_inode+0x139a/0x25c0 [ 408.475174][ T38] ? folio_unlock+0x101/0x160 [ 408.475289][ T38] ? f2fs_update_inode_page+0x27f/0x360 [ 408.475380][ T38] ? rt_spin_unlock+0x159/0x200 [ 408.490488][ T38] f2fs_write_inode+0x408/0x5f0 [ 408.490762][ T38] __writeback_single_inode+0x6a0/0x1230 [ 408.490870][ T38] writeback_sb_inodes+0x9db/0x1ab0 [ 408.490956][ T38] ? mark_lock+0x182/0x190 [ 408.491085][ T38] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 408.491248][ T38] ? __pfx_down_read_trylock+0x10/0x10 [ 408.491379][ T38] __writeback_inodes_wb+0x114/0x240 [ 408.491465][ T38] wb_writeback+0x42f/0xad0 [ 408.491539][ T38] ? queue_io+0x2a1/0x450 [ 408.491614][ T38] ? __pfx_wb_writeback+0x10/0x10 [ 408.491734][ T38] wb_workfn+0xc98/0x10f0 [ 408.491866][ T38] ? __pfx_wb_workfn+0x10/0x10 [ 408.506650][ T38] ? lock_acquire+0x115/0x350 [ 408.506810][ T38] ? rcu_is_watching+0x16/0xb0 [ 408.506932][ T38] ? process_scheduled_works+0x97a/0x1630 [ 408.507070][ T38] process_scheduled_works+0xc3d/0x1630 [ 408.507215][ T38] ? __pfx_ ** replaying previous printk message ** [ 408.507215][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 408.507253][ T38] ? assign_work+0x3cf/0x5d0 [ 408.507332][ T38] worker_thread+0xa47/0xfb0 [ 408.507565][ T38] kthread+0x38b/0x470 [ 408.507654][ T38] ? __pfx_worker_thread+0x10/0x10 [ 408.507697][ T38] ? __pfx_kthread+0x10/0x10 [ 408.507718][ T38] ret_from_fork+0x514/0xb70 [ 408.507844][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 408.507911][ T38] ? __switch_to+0xc89/0x1420 [ 408.533932][ T38] ? __pfx_kthread+0x10/0x10 [ 408.533979][ T38] ret_from_fork_asm+0x1a/0x30 [ 408.534069][ T38] [ 408.534407][ T38] [ 408.534407][ T38] Showing all locks held in the system: [ 408.534427][ T38] locks held by kworker/u8:0/12: 4, on CPU#0: [ 408.534485][ T38] #0: ffff88801eacd138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 408.534686][ T38] #1: ffffc90000117c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 408.534939][ T38] #2: ffff88803232e0e0 (&type->s_umount_key#57){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 408.535173][ T38] #3: ffff888033609ab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 408.535385][ T38] locks held by pr/ttyS0/17: 3, last CPU#1: [ 408.535434][ T38] #0: ffffffff8e09d5f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 408.553032][ T38] #1: ffffffff99e9c1f8 (&port_lock_key){+.+.}-{3:3}, at: nbcon_kthread_func+0x64c/0x880 [ 408.553242][ T38] #2: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 408.553413][ T38] locks held by rcuc/0/20: 3, last CPU#0: [ 408.553471][ T38] #0: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 408.553710][ T38] #1: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 408.553936][ T38] #2: ffffffff8e1c3c60 (rcu_callback){....}-{0:0}, at: rcu_cpu_kthread+0x217/0x1740 [ 408.554181][ T38] locks held by rcuc/1/28: 3, last CPU#1: [ 408.554228][ T38] #0: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 408.578210][ T38] #1: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 408.578421][ T38] #2: ffffffff8e1c3c60 (rcu_callback){....}-{0:0}, at: rcu_cpu_kthread+0x217/0x1740 [ 408.578647][ T38] locks held by kworker/1:0/31: 3, last CPU#1: [ 408.578701][ T38] #0: ffff88813ff26538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 408.578872][ T38] #1: ffffc90000a5fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 408.578989][ T38] #2: ffffffff8ed0d2f8 ("ratelimiter_table_lock"){+.+.}-{3:3}, at: wg_ratelimiter_gc_entries+0x5d/0x470 [ 408.579673][ T38] locks held by khungtaskd/38: 1, last CPU#0: [ 408.579694][ T38] #0: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 408.597006][ T38] locks held by kworker/u8:3/56: 4, on CPU#0: [ 408.597059][ T38] #0: ffff88801eacd138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 408.597300][ T38] #1: ffffc9000122fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 408.597474][ T38] #2: ffff888039d9a0e0 (&type->s_umount_key#57){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 408.597640][ T38] #3: ffff888036cadab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 408.597719][ T38] locks held by kworker/u8:8/159: 4, on CPU#1: [ 408.597732][ T38] #0: ffff88801eacd138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 408.597811][ T38] #1: ffffc9000418fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 408.597934][ T38] #2: ffff88805b0400e0 (&type->s_umount_key#57){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 408.609569][ T38] #3: ffff888035239ab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 408.609806][ T38] locks held by kworker/u8:11/169: 4, on CPU#0: [ 408.609863][ T38] #0: ffff88801eacd138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 408.610075][ T38] #1: ffffc9000426fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 408.610264][ T38] #2: ffff88803f4320e0 (&type->s_umount_key#57){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 408.618015][ T38] #3: ffff88805d555ab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 408.618099][ T38] locks held by kworker/u8:18/1403: 4, on CPU#1: [ 408.618132][ T38] #0: ffff88801eacd138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 408.618303][ T38] #1: ffffc900070e7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 408.618467][ T38] #2: ffff88802a0b40e0 (&type->s_umount_key#57){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 408.629313][ T38] #3: ffff8880451b9ab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 408.629551][ T38] locks held by getty/5346: 2, on CPU#0: [ 408.629594][ T38] #0: ffff8880360d10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 408.629934][ T38] #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 408.630151][ T38] locks held by syz.0.18/6639: 4, last CPU#0: [ 408.630202][ T38] #0: ffff88802a0b4510 (sb_writers#12){.+.+}-{0:0}, at: vfs_fallocate+0x5e9/0x7f0 [ 408.630396][ T38] #1: ffff888047264eb8 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: f2fs_fallocate+0x23f/0x980 [ 408.630574][ T38] #2: ffff8880451b9d88 (&sbi->pin_sem){+.+.}-{4:4}, at: f2fs_expand_inode_data+0x57a/0xb10 [ 408.652298][ T38] #3: ffff8880451b9ab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 408.652567][ T38] locks held by syz.1.19/6683: 6, last CPU#0: [ 408.652620][ T38] #0: ffff88803232e510 (sb_writers#12){.+.+}-{0:0}, at: vfs_fallocate+0x5e9/0x7f0 [ 408.652794][ T38] #1: ffff888032e6bb68 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: f2fs_fallocate+0x23f/0x980 [ 408.652924][ T38] #2: ffff888033609d88 (&sbi->pin_sem){+.+.}-{4:4}, at: f2fs_expand_inode_data+0x57a/0xb10 [ 408.653119][ T38] #3: ffff888033609ab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 408.653292][ T38] #4: ffff888032e6c1e0 (&fi->i_gc_rwsem[1]){+.+.}-{4:4}, at: do_garbage_collect+0x31f7/0x68d0 [ 408.653455][ T38] #5: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 408.653651][ T38] locks held by syz.2.21/6738: 6, last CPU#1: [ 408.653693][ T38] #0: ffff88803f432510 (sb_writers#12){.+.+}-{0:0}, at: vfs_fallocate+0x5e9/0x7f0 [ 408.667899][ T38] #1: ffff88804721b1c0 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: f2fs_fallocate+0x23f/0x980 [ 408.668355][ T38] #2: ffff88805d555d88 (&sbi->pin_sem){+.+.}-{4:4}, at: f2fs_expand_inode_data+0x57a/0xb10 [ 408.668544][ T38] #3: ffff88805d555ab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 408.668752][ T38] #4: ffff88804721b838 (&fi->i_gc_rwsem[1]){+.+.}-{4:4}, at: do_garbage_collect+0x2b4a/0x68d0 [ 408.668933][ T38] #5: ffff88804721b7a0 (&fi->i_gc_rwsem[0]){+.+.}-{4:4}, at: do_garbage_collect+0x2b6b/0x68d0 [ 408.669069][ T38] locks held by syz.3.23/6788: 5, last CPU#0: [ 408.669122][ T38] #0: ffff88805b040510 (sb_writers#12){.+.+}-{0:0}, at: vfs_fallocate+0x5e9/0x7f0 [ 408.669245][ T38] #1: ffff888047219e70 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: f2fs_fallocate+0x23f/0x980 [ 408.669456][ T38] #2: ffff888035239d88 (&sbi->pin_sem){+.+.}-{4:4}, at: f2fs_expand_inode_data+0x57a/0xb10 [ 408.682576][ T38] #3: ffff888035239ab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 408.682766][ T38] #4: ffff88804721a4e8 (&fi->i_gc_rwsem[1]){+.+.}-{4:4}, at: do_garbage_collect+0x31f7/0x68d0 [ 408.685035][ T38] locks held by syz.4.26/6857: 5, last CPU#0: [ 408.685088][ T38] #0: ffff888039d9a510 (sb_writers#12){.+.+}-{0:0}, at: vfs_fallocate+0x5e9/0x7f0 [ 408.685276][ T38] #1: ffff888032e6f558 (&sb->s_type->i_mutex_key#24){+.+.}-{4:4}, at: f2fs_fallocate+0x23f/0x980 [ 408.685736][ T38] #2: ffff888036cadd88 (&sbi->pin_sem){+.+.}-{4:4}, at: f2fs_expand_inode_data+0x57a/0xb10 [ 408.706297][ T38] #3: ffff888036cadab0 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x34/0x1f0 [ 408.706495][ T38] #4: ffff88801ff1c1b0 (&nm_i->nat_tree_lock){++++}-{4:4}, at: f2fs_down_read_trace+0x31/0x1f0 [ 408.706700][ T38] locks held by kworker/u8:10/6904: 6, last CPU#0: [ 408.706748][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 408.706941][ T38] #1: ffffc90004e9fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 408.707115][ T38] #2: ffff888037ac4310 (&devlink->lock_key#9){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 408.707441][ T38] #3: ffff8880451b7520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 408.734145][ T38] #4: ffffffff8e1c3b40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 408.734314][ T38] #5: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 408.734510][ T38] locks held by syz.5.27/6906: 2, last CPU#0: [ 408.734568][ T38] #0: ffff88801aeb8510 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 408.734813][ T38] #1: ffff88802ad08b10 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: shmem_file_write_iter+0x82/0x120 [ 408.735051][ T38] locks held by dhcpcd/6912: 1, on CPU#0: [ 408.735099][ T38] #0: ffff888047222478 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 408.735484][ T38] [ 408.735499][ T38] ============================================= [ 408.735499][ T38] [ 408.754741][ T38] NMI backtrace for cpu 0 [ 408.754804][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 408.754846][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.754873][ T38] Call Trace: [ 408.754895][ T38] [ 408.754925][ T38] dump_stack_lvl+0xe8/0x150 [ 408.755028][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 408.755172][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 408.755301][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 408.755388][ T38] sys_info+0x135/0x170 [ 408.755513][ T38] watchdog+0xfd7/0x1030 [ 408.755618][ T38] ? watchdog+0x1c7/0x1030 [ 408.755707][ T38] kthread+0x38b/0x470 [ 408.755770][ T38] ? __pfx_watchdog+0x10/0x10 [ 408.755842][ T38] ? __pfx_kthread+0x10/0x10 [ 408.755899][ T38] ret_from_fork+0x514/0xb70 [ 408.755989][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 408.756046][ T38] ? __switch_to+0xc89/0x1420 [ 408.756141][ T38] ? __pfx_kthread+0x10/0x10 [ 408.756206][ T38] ret_from_fork_asm+0x1a/0x30 [ 408.756303][ T38] [ 408.756377][ T38] Sending NMI from CPU 0 to CPUs 1: [ 408.756436][ C1] NMI backtrace for cpu 1 [ 408.756451][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 408.756472][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.756490][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 408.756583][ C1] Code: e8 8e 7f 65 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ef 65 d1 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 408.756598][ C1] RSP: 0018:ffffc900001678b8 EFLAGS: 00000202 [ 408.756642][ C1] RAX: 1ffffffff33d3800 RBX: 00000000000003fd RCX: 0000000000000000 [ 408.756655][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 408.756666][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 408.756677][ C1] R10: dffffc0000000000 R11: ffffffff85610e30 R12: dffffc0000000000 [ 408.756691][ C1] R13: 0000000000000000 R14: ffffffff99e9c220 R15: 0000000000000000 [ 408.756703][ C1] FS: 0000000000000000(0000) GS:ffff888125cd1000(0000) knlGS:0000000000000000 [ 408.756718][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 408.756730][ C1] CR2: 00007fffa9c65f52 CR3: 0000000036a5a000 CR4: 00000000003526f0 [ 408.756747][ C1] Call Trace: [ 408.756753][ C1] [ 408.756762][ C1] wait_for_lsr+0x190/0x300 [ 408.756785][ C1] __serial8250_console_fifo_write+0x34f/0x3f0 [ 408.756839][ C1] serial8250_console_write+0xac5/0x1230 [ 408.756866][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 408.756895][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 408.756930][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 408.756965][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 408.757001][ C1] nbcon_kthread_func+0x679/0x880 [ 408.757029][ C1] ? nbcon_kthread_func+0x163/0x880 [ 408.757052][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 408.757079][ C1] ? __kthread_parkme+0x71/0x1f0 [ 408.757107][ C1] ? __kthread_parkme+0x199/0x1f0 [ 408.757136][ C1] kthread+0x38b/0x470 [ 408.757153][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 408.757176][ C1] ? __pfx_kthread+0x10/0x10 [ 408.757194][ C1] ret_from_fork+0x514/0xb70 [ 408.757213][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 408.757230][ C1] ? __switch_to+0xc89/0x1420 [ 408.757257][ C1] ? __pfx_kthread+0x10/0x10 [ 408.757275][ C1] ret_from_fork_asm+0x1a/0x30 [ 408.757301][ C1] [ 408.790372][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 410.322641][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 410.333400][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 410.344124][ T38] Call Trace: [ 410.347535][ T38] [ 410.350649][ T38] vpanic+0x56d/0xa60 [ 410.354683][ T38] ? __pfx___schedule+0x10/0x10 [ 410.359719][ T38] ? __pfx_vpanic+0x10/0x10 [ 410.364395][ T38] panic+0xc5/0xd0 [ 410.368357][ T38] ? __pfx_panic+0x10/0x10 [ 410.375472][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 410.381434][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 410.387266][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 410.393848][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 410.401096][ T38] watchdog+0x1030/0x1030 [ 410.406078][ T38] ? watchdog+0x1c7/0x1030 [ 410.410956][ T38] kthread+0x38b/0x470 [ 410.415651][ T38] ? __pfx_watchdog+0x10/0x10 [ 410.420555][ T38] ? __pfx_kthread+0x10/0x10 [ 410.425646][ T38] ret_from_fork+0x514/0xb70 [ 410.430309][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 410.436014][ T38] ? __switch_to+0xc89/0x1420 [ 410.440965][ T38] ? __pfx_kthread+0x10/0x10 [ 410.446873][ T38] ret_from_fork_asm+0x1a/0x30 [ 410.452075][ T38] [ 410.456067][ T38] Kernel Offset: disabled [ 410.460908][ T38] Rebooting in 86400 seconds..