Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts. 2026/05/08 14:47:30 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 145.028404][ T6116] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 150.073483][ T4913] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.111068][ T4913] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.113360][ T4913] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.117914][ T4913] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.123171][ T4913] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.832885][ T2338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.832905][ T2338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.907689][ T1230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.907709][ T1230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.494462][ T6191] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.494644][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.494808][ T6191] bridge_slave_0: entered allmulticast mode [ 154.497169][ T6191] bridge_slave_0: entered promiscuous mode [ 154.600655][ T6191] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.600732][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.607027][ T6191] bridge_slave_1: entered allmulticast mode [ 154.628198][ T6191] bridge_slave_1: entered promiscuous mode [ 154.689672][ T6191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.693156][ T6191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.746333][ T6191] team0: Port device team_slave_0 added [ 154.749756][ T6191] team0: Port device team_slave_1 added [ 154.780904][ T6191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.780919][ T6191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.780940][ T6191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.782147][ T6191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.782158][ T6191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.782177][ T6191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.860167][ T6191] hsr_slave_0: entered promiscuous mode [ 154.861299][ T6191] hsr_slave_1: entered promiscuous mode [ 157.090865][ T6191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 157.130940][ T6191] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 157.132546][ T6191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 157.192217][ T6191] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 157.193647][ T6191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 157.238006][ T6191] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 157.251532][ T6191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 157.279762][ T6191] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 157.471183][ T6191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.499783][ T6191] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.522892][ T1230] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.523022][ T1230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.539493][ T1230] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.542419][ T1230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.170200][ T6191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.272059][ T6191] veth0_vlan: entered promiscuous mode [ 158.295585][ T6191] veth1_vlan: entered promiscuous mode [ 158.374581][ T6191] veth0_macvtap: entered promiscuous mode [ 158.381480][ T6191] veth1_macvtap: entered promiscuous mode [ 158.460908][ T6191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.501215][ T6191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.530216][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.531142][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.531200][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.531228][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.446807][ T1036] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.178237][ T1036] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/05/08 14:47:50 executed programs: 0 [ 160.377623][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 160.402580][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 160.407549][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 160.409988][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 160.411985][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.816533][ T1036] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.156566][ T1036] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.084477][ T1036] bridge_slave_1: left allmulticast mode [ 162.084508][ T1036] bridge_slave_1: left promiscuous mode [ 162.084707][ T1036] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.165157][ T1036] bridge_slave_0: left allmulticast mode [ 162.165182][ T1036] bridge_slave_0: left promiscuous mode [ 162.165331][ T1036] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.474281][ T4913] Bluetooth: hci0: command tx timeout [ 162.835077][ T1036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.894841][ T1036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.926190][ T1036] bond0 (unregistering): Released all slaves [ 163.072479][ T6360] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.072871][ T6360] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.073058][ T6360] bridge_slave_0: entered allmulticast mode [ 163.080969][ T6360] bridge_slave_0: entered promiscuous mode [ 163.088988][ T6360] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.089103][ T6360] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.089279][ T6360] bridge_slave_1: entered allmulticast mode [ 163.091713][ T6360] bridge_slave_1: entered promiscuous mode [ 163.160953][ T6360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.187832][ T6360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.364295][ T1036] hsr_slave_0: left promiscuous mode [ 163.404310][ T1036] hsr_slave_1: left promiscuous mode [ 163.405358][ T1036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.405383][ T1036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.455236][ T1036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.455262][ T1036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.535912][ T1036] veth1_macvtap: left promiscuous mode [ 163.536010][ T1036] veth0_macvtap: left promiscuous mode [ 163.536252][ T1036] veth1_vlan: left promiscuous mode [ 163.536412][ T1036] veth0_vlan: left promiscuous mode [ 164.245427][ T1036] team0 (unregistering): Port device team_slave_1 removed [ 164.284767][ T1036] team0 (unregistering): Port device team_slave_0 removed [ 164.502967][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1 [ 164.554231][ T4913] Bluetooth: hci0: command tx timeout [ 164.559238][ T6360] team0: Port device team_slave_0 added [ 164.562819][ T6360] team0: Port device team_slave_1 added [ 164.604392][ T6360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.604408][ T6360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.604430][ T6360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.606504][ T6360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.606524][ T6360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.606538][ T6360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.801918][ T6360] hsr_slave_0: entered promiscuous mode [ 164.803110][ T6360] hsr_slave_1: entered promiscuous mode [ 165.447197][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2 [ 166.634891][ T4913] Bluetooth: hci0: command tx timeout [ 166.662509][ T6360] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 166.696525][ T6360] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 166.697682][ T6360] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 166.775307][ T6360] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 166.776643][ T6360] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 166.838555][ T6360] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 166.842032][ T6360] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 166.868517][ T6360] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.087923][ T6360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.108562][ T6360] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.126667][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.126786][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.141087][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.141304][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.510635][ T6360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.553626][ T6360] veth0_vlan: entered promiscuous mode [ 167.572464][ T6360] veth1_vlan: entered promiscuous mode [ 167.612289][ T6360] veth0_macvtap: entered promiscuous mode [ 167.622630][ T6360] veth1_macvtap: entered promiscuous mode [ 167.648869][ T6360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.665419][ T6360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.672642][ T82] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.672887][ T82] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.672921][ T82] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.672951][ T82] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.085999][ T1230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.086020][ T1230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.139975][ T1230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.139996][ T1230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/05/08 14:47:58 executed programs: 2 [ 168.471346][ T6507] loop0: detected capacity change from 0 to 32768 [ 168.640639][ T6507] Bad index:0 in slot in dtroot [ 168.640639][ T6507] [ 168.640661][ T6507] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 168.640661][ T6507] [ 168.640898][ T6507] ERROR: (device loop0): remounting filesystem as read-only [ 168.714259][ T4913] Bluetooth: hci0: command tx timeout [ 169.057778][ T6507] loop0: detected capacity change from 0 to 40427 [ 169.059328][ T6507] F2FS-fs: heap/no_heap options were deprecated [ 169.081623][ T6507] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 169.081649][ T6507] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 169.112392][ T6507] F2FS-fs (loop0): invalid crc value [ 169.323170][ T6507] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 169.397364][ T6507] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 169.398685][ T6507] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 169.780881][ T6360] syz-executor: attempt to access beyond end of device [ 169.780881][ T6360] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 169.802865][ T6360] CPU: 0 UID: 0 PID: 6360 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 169.802895][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 169.802912][ T6360] Call Trace: [ 169.802919][ T6360] [ 169.802928][ T6360] dump_stack_lvl+0xe8/0x150 [ 169.802956][ T6360] f2fs_stop_checkpoint+0x383/0x540 [ 169.802984][ T6360] f2fs_write_end_io+0x1274/0x1740 [ 169.803020][ T6360] __submit_merged_bio+0x256/0x6a0 [ 169.803049][ T6360] __submit_merged_write_cond+0x3c9/0x4e0 [ 169.803079][ T6360] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 169.803130][ T6360] f2fs_write_data_pages+0x287e/0x34f0 [ 169.803187][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 169.803223][ T6360] ? unwind_next_frame+0xa6/0x2550 [ 169.803243][ T6360] ? rcu_is_watching+0x15/0xb0 [ 169.803266][ T6360] ? __kasan_check_byte+0x12/0x40 [ 169.803309][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 169.803334][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 169.803373][ T6360] ? do_raw_spin_lock+0x12b/0x2f0 [ 169.803404][ T6360] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 169.803425][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 169.803445][ T6360] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 169.803465][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 169.803490][ T6360] do_writepages+0x32e/0x550 [ 169.803513][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 169.803531][ T6360] ? rt_spin_unlock+0x14f/0x200 [ 169.803557][ T6360] filemap_fdatawrite+0x1ec/0x2f0 [ 169.803582][ T6360] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 169.803602][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 169.803671][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 169.803694][ T6360] ? rt_spin_unlock+0x160/0x200 [ 169.803713][ T6360] f2fs_sync_dirty_inodes+0x30e/0x830 [ 169.803743][ T6360] f2fs_write_checkpoint+0x9df/0x26a0 [ 169.803760][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 169.803809][ T6360] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 169.803874][ T6360] kill_f2fs_super+0x314/0x730 [ 169.803908][ T6360] ? __pfx_kill_f2fs_super+0x10/0x10 [ 169.803944][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 169.803975][ T6360] deactivate_locked_super+0xbc/0x130 [ 169.803996][ T6360] cleanup_mnt+0x437/0x4d0 [ 169.804013][ T6360] ? _raw_spin_unlock_irq+0x23/0x50 [ 169.804032][ T6360] task_work_run+0x1d9/0x270 [ 169.804056][ T6360] ? __pfx_task_work_run+0x10/0x10 [ 169.804082][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.804107][ T6360] exit_to_user_mode_loop+0xed/0x480 [ 169.804128][ T6360] ? rcu_is_watching+0x15/0xb0 [ 169.804150][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.804169][ T6360] do_syscall_64+0x33e/0xf80 [ 169.804188][ T6360] ? trace_irq_disable+0x3b/0x140 [ 169.804207][ T6360] ? clear_bhb_loop+0x40/0x90 [ 169.804229][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.804247][ T6360] RIP: 0033:0x7f032995da57 [ 169.804277][ T6360] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 169.804290][ T6360] RSP: 002b:00007fff60c0d788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 169.804313][ T6360] RAX: 0000000000000000 RBX: 00007f03299f2048 RCX: 00007f032995da57 [ 169.804325][ T6360] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff60c0d840 [ 169.804336][ T6360] RBP: 00007fff60c0d840 R08: 00007fff60c0e840 R09: 00000000ffffffff [ 169.804347][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff60c0e8d0 [ 169.804358][ T6360] R13: 00007f03299f2048 R14: 0000000000029611 R15: 00007fff60c0e910 [ 169.804386][ T6360] [ 169.818145][ T6360] F2FS-fs (loop0): Remounting filesystem read-only [ 170.637809][ T6513] loop0: detected capacity change from 0 to 32768 [ 170.671912][ T6513] Bad index:0 in slot in dtroot [ 170.671912][ T6513] [ 170.671930][ T6513] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 170.671930][ T6513] [ 170.673614][ T6513] ERROR: (device loop0): remounting filesystem as read-only [ 171.023289][ T6513] loop0: detected capacity change from 0 to 40427 [ 171.030461][ T6513] F2FS-fs: heap/no_heap options were deprecated [ 171.040072][ T6513] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 171.040095][ T6513] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 171.067030][ T6513] F2FS-fs (loop0): invalid crc value [ 171.237576][ T6513] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 171.247013][ T6513] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 171.247041][ T6513] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 171.607077][ T6360] syz-executor: attempt to access beyond end of device [ 171.607077][ T6360] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 171.614611][ T6360] CPU: 1 UID: 0 PID: 6360 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.614639][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 171.614649][ T6360] Call Trace: [ 171.614655][ T6360] [ 171.614664][ T6360] dump_stack_lvl+0xe8/0x150 [ 171.614689][ T6360] f2fs_stop_checkpoint+0x383/0x540 [ 171.614715][ T6360] f2fs_write_end_io+0x1274/0x1740 [ 171.614747][ T6360] __submit_merged_bio+0x256/0x6a0 [ 171.614774][ T6360] __submit_merged_write_cond+0x3c9/0x4e0 [ 171.614800][ T6360] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 171.614842][ T6360] f2fs_write_data_pages+0x287e/0x34f0 [ 171.614907][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 171.614968][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 171.614992][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 171.615032][ T6360] ? do_raw_spin_lock+0x12b/0x2f0 [ 171.615063][ T6360] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 171.615084][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 171.615105][ T6360] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 171.615126][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 171.615149][ T6360] do_writepages+0x32e/0x550 [ 171.615172][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 171.615187][ T6360] ? rt_spin_unlock+0x14f/0x200 [ 171.615208][ T6360] filemap_fdatawrite+0x1ec/0x2f0 [ 171.615233][ T6360] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 171.615253][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 171.615307][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 171.615330][ T6360] ? rt_spin_unlock+0x160/0x200 [ 171.615348][ T6360] f2fs_sync_dirty_inodes+0x30e/0x830 [ 171.615378][ T6360] f2fs_write_checkpoint+0x9df/0x26a0 [ 171.615395][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 171.615448][ T6360] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 171.615511][ T6360] kill_f2fs_super+0x314/0x730 [ 171.615542][ T6360] ? __pfx_kill_f2fs_super+0x10/0x10 [ 171.615577][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 171.615609][ T6360] deactivate_locked_super+0xbc/0x130 [ 171.615629][ T6360] cleanup_mnt+0x437/0x4d0 [ 171.615648][ T6360] ? _raw_spin_unlock_irq+0x23/0x50 [ 171.615670][ T6360] task_work_run+0x1d9/0x270 [ 171.615698][ T6360] ? __pfx_task_work_run+0x10/0x10 [ 171.615727][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.615746][ T6360] exit_to_user_mode_loop+0xed/0x480 [ 171.615766][ T6360] ? rcu_is_watching+0x15/0xb0 [ 171.615790][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.615808][ T6360] do_syscall_64+0x33e/0xf80 [ 171.615829][ T6360] ? trace_irq_disable+0x3b/0x140 [ 171.615848][ T6360] ? clear_bhb_loop+0x40/0x90 [ 171.615876][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.615894][ T6360] RIP: 0033:0x7f032995da57 [ 171.615919][ T6360] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 171.615937][ T6360] RSP: 002b:00007fff60c0d788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 171.615956][ T6360] RAX: 0000000000000000 RBX: 00007f03299f2048 RCX: 00007f032995da57 [ 171.615967][ T6360] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff60c0d840 [ 171.615977][ T6360] RBP: 00007fff60c0d840 R08: 00007fff60c0e840 R09: 00000000ffffffff [ 171.615989][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff60c0e8d0 [ 171.615999][ T6360] R13: 00007f03299f2048 R14: 0000000000029d2c R15: 00007fff60c0e910 [ 171.616029][ T6360] [ 171.617424][ T6360] F2FS-fs (loop0): Remounting filesystem read-only [ 172.439379][ T6519] loop0: detected capacity change from 0 to 32768 [ 172.485043][ T6519] Bad index:0 in slot in dtroot [ 172.485043][ T6519] [ 172.485060][ T6519] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 172.485060][ T6519] [ 172.485313][ T6519] ERROR: (device loop0): remounting filesystem as read-only [ 172.847902][ T6519] loop0: detected capacity change from 0 to 40427 [ 172.850491][ T6519] F2FS-fs: heap/no_heap options were deprecated [ 172.851306][ T6519] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 172.851325][ T6519] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 172.853755][ T6519] F2FS-fs (loop0): invalid crc value [ 173.019942][ T6519] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 173.043930][ T6519] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 173.043950][ T6519] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 2026/05/08 14:48:03 executed programs: 5 [ 173.408364][ T6360] syz-executor: attempt to access beyond end of device [ 173.408364][ T6360] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 173.412681][ T6360] CPU: 1 UID: 0 PID: 6360 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 173.412714][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.412724][ T6360] Call Trace: [ 173.412731][ T6360] [ 173.412738][ T6360] dump_stack_lvl+0xe8/0x150 [ 173.412765][ T6360] f2fs_stop_checkpoint+0x383/0x540 [ 173.412790][ T6360] f2fs_write_end_io+0x1274/0x1740 [ 173.412825][ T6360] __submit_merged_bio+0x256/0x6a0 [ 173.412854][ T6360] __submit_merged_write_cond+0x3c9/0x4e0 [ 173.412884][ T6360] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 173.412924][ T6360] f2fs_write_data_pages+0x287e/0x34f0 [ 173.412945][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 173.412999][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 173.413035][ T6360] ? __bfs+0x153/0x290 [ 173.413054][ T6360] ? __pfx_hlock_conflict+0x10/0x10 [ 173.413103][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 173.413126][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 173.413160][ T6360] ? do_raw_spin_lock+0x12b/0x2f0 [ 173.413177][ T6360] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 173.413190][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 173.413202][ T6360] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 173.413213][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 173.413228][ T6360] do_writepages+0x32e/0x550 [ 173.413243][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 173.413253][ T6360] ? rt_spin_unlock+0x14f/0x200 [ 173.413272][ T6360] filemap_fdatawrite+0x1ec/0x2f0 [ 173.413288][ T6360] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 173.413300][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 173.413330][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 173.413343][ T6360] ? rt_spin_unlock+0x160/0x200 [ 173.413353][ T6360] f2fs_sync_dirty_inodes+0x30e/0x830 [ 173.413370][ T6360] f2fs_write_checkpoint+0x9df/0x26a0 [ 173.413380][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 173.413407][ T6360] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 173.413442][ T6360] kill_f2fs_super+0x314/0x730 [ 173.413461][ T6360] ? __pfx_kill_f2fs_super+0x10/0x10 [ 173.413482][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 173.413499][ T6360] deactivate_locked_super+0xbc/0x130 [ 173.413511][ T6360] cleanup_mnt+0x437/0x4d0 [ 173.413522][ T6360] ? _raw_spin_unlock_irq+0x23/0x50 [ 173.413536][ T6360] task_work_run+0x1d9/0x270 [ 173.413552][ T6360] ? __pfx_task_work_run+0x10/0x10 [ 173.413569][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.413580][ T6360] exit_to_user_mode_loop+0xed/0x480 [ 173.413593][ T6360] ? rcu_is_watching+0x15/0xb0 [ 173.413608][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.413618][ T6360] do_syscall_64+0x33e/0xf80 [ 173.413629][ T6360] ? trace_irq_disable+0x3b/0x140 [ 173.413649][ T6360] ? clear_bhb_loop+0x40/0x90 [ 173.413663][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.413673][ T6360] RIP: 0033:0x7f032995da57 [ 173.413684][ T6360] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 173.413692][ T6360] RSP: 002b:00007fff60c0d788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 173.413710][ T6360] RAX: 0000000000000000 RBX: 00007f03299f2048 RCX: 00007f032995da57 [ 173.413717][ T6360] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff60c0d840 [ 173.413723][ T6360] RBP: 00007fff60c0d840 R08: 00007fff60c0e840 R09: 00000000ffffffff [ 173.413729][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff60c0e8d0 [ 173.413735][ T6360] R13: 00007f03299f2048 R14: 000000000002a313 R15: 00007fff60c0e910 [ 173.413751][ T6360] [ 173.447960][ T6360] F2FS-fs (loop0): Remounting filesystem read-only [ 174.142035][ T6525] loop0: detected capacity change from 0 to 32768 [ 174.190572][ T6525] Bad index:0 in slot in dtroot [ 174.190572][ T6525] [ 174.190589][ T6525] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 174.190589][ T6525] [ 174.190876][ T6525] ERROR: (device loop0): remounting filesystem as read-only [ 174.552554][ T6525] loop0: detected capacity change from 0 to 40427 [ 174.553821][ T6525] F2FS-fs: heap/no_heap options were deprecated [ 174.573230][ T6525] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 174.573253][ T6525] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 174.610881][ T6525] F2FS-fs (loop0): invalid crc value [ 174.731561][ T6525] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 174.755000][ T6525] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 174.755025][ T6525] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 175.097908][ T6360] syz-executor: attempt to access beyond end of device [ 175.097908][ T6360] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 175.102198][ T6360] CPU: 1 UID: 0 PID: 6360 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 175.102222][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 175.102231][ T6360] Call Trace: [ 175.102237][ T6360] [ 175.102245][ T6360] dump_stack_lvl+0xe8/0x150 [ 175.102271][ T6360] f2fs_stop_checkpoint+0x383/0x540 [ 175.102297][ T6360] f2fs_write_end_io+0x1274/0x1740 [ 175.102331][ T6360] __submit_merged_bio+0x256/0x6a0 [ 175.102359][ T6360] __submit_merged_write_cond+0x3c9/0x4e0 [ 175.102397][ T6360] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 175.102435][ T6360] f2fs_write_data_pages+0x287e/0x34f0 [ 175.102459][ T6360] ? rcu_is_watching+0x15/0xb0 [ 175.102515][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 175.102550][ T6360] ? unwind_next_frame+0xa6/0x2550 [ 175.102597][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 175.102620][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 175.102655][ T6360] ? do_raw_spin_lock+0x12b/0x2f0 [ 175.102684][ T6360] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 175.102697][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 175.102709][ T6360] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 175.102721][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 175.102735][ T6360] do_writepages+0x32e/0x550 [ 175.102750][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 175.102760][ T6360] ? rt_spin_unlock+0x14f/0x200 [ 175.102774][ T6360] filemap_fdatawrite+0x1ec/0x2f0 [ 175.102790][ T6360] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 175.102802][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 175.102831][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 175.102844][ T6360] ? rt_spin_unlock+0x160/0x200 [ 175.102855][ T6360] f2fs_sync_dirty_inodes+0x30e/0x830 [ 175.102872][ T6360] f2fs_write_checkpoint+0x9df/0x26a0 [ 175.102881][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 175.102908][ T6360] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 175.102943][ T6360] kill_f2fs_super+0x314/0x730 [ 175.102961][ T6360] ? __pfx_kill_f2fs_super+0x10/0x10 [ 175.102982][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 175.102999][ T6360] deactivate_locked_super+0xbc/0x130 [ 175.103012][ T6360] cleanup_mnt+0x437/0x4d0 [ 175.103023][ T6360] ? _raw_spin_unlock_irq+0x23/0x50 [ 175.103036][ T6360] task_work_run+0x1d9/0x270 [ 175.103052][ T6360] ? __pfx_task_work_run+0x10/0x10 [ 175.103069][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.103080][ T6360] exit_to_user_mode_loop+0xed/0x480 [ 175.103092][ T6360] ? rcu_is_watching+0x15/0xb0 [ 175.103106][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.103117][ T6360] do_syscall_64+0x33e/0xf80 [ 175.103128][ T6360] ? trace_irq_disable+0x3b/0x140 [ 175.103152][ T6360] ? clear_bhb_loop+0x40/0x90 [ 175.103165][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.103175][ T6360] RIP: 0033:0x7f032995da57 [ 175.103186][ T6360] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 175.103194][ T6360] RSP: 002b:00007fff60c0d788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 175.103206][ T6360] RAX: 0000000000000000 RBX: 00007f03299f2048 RCX: 00007f032995da57 [ 175.103212][ T6360] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff60c0d840 [ 175.103218][ T6360] RBP: 00007fff60c0d840 R08: 00007fff60c0e840 R09: 00000000ffffffff [ 175.103225][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff60c0e8d0 [ 175.103230][ T6360] R13: 00007f03299f2048 R14: 000000000002aacf R15: 00007fff60c0e910 [ 175.103246][ T6360] [ 175.103498][ T6360] F2FS-fs (loop0): Remounting filesystem read-only [ 175.831945][ T6531] loop0: detected capacity change from 0 to 32768 [ 175.852117][ T6531] Bad index:0 in slot in dtroot [ 175.852117][ T6531] [ 175.852134][ T6531] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 175.852134][ T6531] [ 175.852415][ T6531] ERROR: (device loop0): remounting filesystem as read-only [ 176.225872][ T6531] loop0: detected capacity change from 0 to 40427 [ 176.227067][ T6531] F2FS-fs: heap/no_heap options were deprecated [ 176.229414][ T6531] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 176.229435][ T6531] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 176.268761][ T6531] F2FS-fs (loop0): invalid crc value [ 176.423678][ T6531] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 176.438159][ T6531] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 176.438178][ T6531] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 176.787578][ T6360] syz-executor: attempt to access beyond end of device [ 176.787578][ T6360] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 176.792080][ T6360] CPU: 0 UID: 0 PID: 6360 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 176.792105][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 176.792114][ T6360] Call Trace: [ 176.792121][ T6360] [ 176.792129][ T6360] dump_stack_lvl+0xe8/0x150 [ 176.792155][ T6360] f2fs_stop_checkpoint+0x383/0x540 [ 176.792191][ T6360] f2fs_write_end_io+0x1274/0x1740 [ 176.792225][ T6360] __submit_merged_bio+0x256/0x6a0 [ 176.792253][ T6360] __submit_merged_write_cond+0x3c9/0x4e0 [ 176.792283][ T6360] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 176.792322][ T6360] f2fs_write_data_pages+0x287e/0x34f0 [ 176.792345][ T6360] ? rcu_is_watching+0x15/0xb0 [ 176.792400][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 176.792434][ T6360] ? unwind_next_frame+0xa6/0x2550 [ 176.792482][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 176.792516][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 176.792551][ T6360] ? do_raw_spin_lock+0x12b/0x2f0 [ 176.792571][ T6360] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 176.792584][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 176.792597][ T6360] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 176.792608][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 176.792623][ T6360] do_writepages+0x32e/0x550 [ 176.792638][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 176.792648][ T6360] ? rt_spin_unlock+0x14f/0x200 [ 176.792662][ T6360] filemap_fdatawrite+0x1ec/0x2f0 [ 176.792678][ T6360] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 176.792690][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 176.792720][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 176.792734][ T6360] ? rt_spin_unlock+0x160/0x200 [ 176.792744][ T6360] f2fs_sync_dirty_inodes+0x30e/0x830 [ 176.792761][ T6360] f2fs_write_checkpoint+0x9df/0x26a0 [ 176.792770][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 176.792797][ T6360] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 176.792832][ T6360] kill_f2fs_super+0x314/0x730 [ 176.792850][ T6360] ? __pfx_kill_f2fs_super+0x10/0x10 [ 176.792871][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 176.792888][ T6360] deactivate_locked_super+0xbc/0x130 [ 176.792900][ T6360] cleanup_mnt+0x437/0x4d0 [ 176.792911][ T6360] ? _raw_spin_unlock_irq+0x23/0x50 [ 176.792924][ T6360] task_work_run+0x1d9/0x270 [ 176.792940][ T6360] ? __pfx_task_work_run+0x10/0x10 [ 176.792957][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.792968][ T6360] exit_to_user_mode_loop+0xed/0x480 [ 176.792980][ T6360] ? rcu_is_watching+0x15/0xb0 [ 176.792995][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.793005][ T6360] do_syscall_64+0x33e/0xf80 [ 176.793017][ T6360] ? trace_irq_disable+0x3b/0x140 [ 176.793028][ T6360] ? clear_bhb_loop+0x40/0x90 [ 176.793041][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.793051][ T6360] RIP: 0033:0x7f032995da57 [ 176.793062][ T6360] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 176.793070][ T6360] RSP: 002b:00007fff60c0d788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 176.793081][ T6360] RAX: 0000000000000000 RBX: 00007f03299f2048 RCX: 00007f032995da57 [ 176.793088][ T6360] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff60c0d840 [ 176.793094][ T6360] RBP: 00007fff60c0d840 R08: 00007fff60c0e840 R09: 00000000ffffffff [ 176.793100][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff60c0e8d0 [ 176.793106][ T6360] R13: 00007f03299f2048 R14: 000000000002b04d R15: 00007fff60c0e910 [ 176.793121][ T6360] [ 176.793381][ T6360] F2FS-fs (loop0): Remounting filesystem read-only [ 177.349557][ T6537] loop0: detected capacity change from 0 to 32768 [ 177.372411][ T6537] Bad index:0 in slot in dtroot [ 177.372411][ T6537] [ 177.372427][ T6537] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 177.372427][ T6537] [ 177.372615][ T6537] ERROR: (device loop0): remounting filesystem as read-only [ 177.725620][ T6537] loop0: detected capacity change from 0 to 40427 [ 177.742681][ T6537] F2FS-fs: heap/no_heap options were deprecated [ 177.757980][ T6537] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 177.758004][ T6537] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 177.760833][ T6537] F2FS-fs (loop0): invalid crc value [ 177.892663][ T6537] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 177.912654][ T6537] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 177.912681][ T6537] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 178.241222][ T6360] syz-executor: attempt to access beyond end of device [ 178.241222][ T6360] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 178.247733][ T6360] CPU: 0 UID: 0 PID: 6360 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 178.247761][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 178.247771][ T6360] Call Trace: [ 178.247778][ T6360] [ 178.247786][ T6360] dump_stack_lvl+0xe8/0x150 [ 178.247811][ T6360] f2fs_stop_checkpoint+0x383/0x540 [ 178.247841][ T6360] f2fs_write_end_io+0x1274/0x1740 [ 178.247877][ T6360] __submit_merged_bio+0x256/0x6a0 [ 178.247905][ T6360] __submit_merged_write_cond+0x3c9/0x4e0 [ 178.247936][ T6360] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 178.247979][ T6360] f2fs_write_data_pages+0x287e/0x34f0 [ 178.248035][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 178.248057][ T6360] ? __enqueue_entity+0x673/0xb70 [ 178.248118][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 178.248142][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 178.248182][ T6360] ? do_raw_spin_lock+0x12b/0x2f0 [ 178.248212][ T6360] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 178.248233][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 178.248253][ T6360] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 178.248274][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 178.248299][ T6360] do_writepages+0x32e/0x550 [ 178.248329][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 178.248348][ T6360] ? rt_spin_unlock+0x14f/0x200 [ 178.248374][ T6360] filemap_fdatawrite+0x1ec/0x2f0 [ 178.248400][ T6360] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 178.248420][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 178.248473][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 178.248497][ T6360] ? rt_spin_unlock+0x160/0x200 [ 178.248515][ T6360] f2fs_sync_dirty_inodes+0x30e/0x830 [ 178.248546][ T6360] f2fs_write_checkpoint+0x9df/0x26a0 [ 178.248562][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 178.248610][ T6360] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 178.248675][ T6360] kill_f2fs_super+0x314/0x730 [ 178.248705][ T6360] ? __pfx_kill_f2fs_super+0x10/0x10 [ 178.248740][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 178.248770][ T6360] deactivate_locked_super+0xbc/0x130 [ 178.248791][ T6360] cleanup_mnt+0x437/0x4d0 [ 178.248810][ T6360] ? _raw_spin_unlock_irq+0x23/0x50 [ 178.248833][ T6360] task_work_run+0x1d9/0x270 [ 178.248859][ T6360] ? __pfx_task_work_run+0x10/0x10 [ 178.248888][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.248907][ T6360] exit_to_user_mode_loop+0xed/0x480 [ 178.248927][ T6360] ? rcu_is_watching+0x15/0xb0 [ 178.248951][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.248969][ T6360] do_syscall_64+0x33e/0xf80 [ 178.248989][ T6360] ? trace_irq_disable+0x3b/0x140 [ 178.249008][ T6360] ? clear_bhb_loop+0x40/0x90 [ 178.249029][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.249045][ T6360] RIP: 0033:0x7f032995da57 [ 178.249066][ T6360] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 178.249080][ T6360] RSP: 002b:00007fff60c0d788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 178.249098][ T6360] RAX: 0000000000000000 RBX: 00007f03299f2048 RCX: 00007f032995da57 [ 178.249110][ T6360] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff60c0d840 [ 178.249120][ T6360] RBP: 00007fff60c0d840 R08: 00007fff60c0e840 R09: 00000000ffffffff [ 178.249131][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff60c0e8d0 [ 178.249142][ T6360] R13: 00007f03299f2048 R14: 000000000002b603 R15: 00007fff60c0e910 [ 178.249170][ T6360] [ 178.250624][ T6360] F2FS-fs (loop0): Remounting filesystem read-only [ 178.819150][ T6543] loop0: detected capacity change from 0 to 32768 [ 178.850116][ T6543] Bad index:0 in slot in dtroot [ 178.850116][ T6543] [ 178.850133][ T6543] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 178.850133][ T6543] [ 178.850414][ T6543] ERROR: (device loop0): remounting filesystem as read-only [ 179.200309][ T6543] loop0: detected capacity change from 0 to 40427 [ 179.201357][ T6543] F2FS-fs: heap/no_heap options were deprecated [ 179.202196][ T6543] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 179.202223][ T6543] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 179.203777][ T6543] F2FS-fs (loop0): invalid crc value [ 179.325402][ T6543] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 179.350532][ T6543] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 179.350561][ T6543] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 2026/05/08 14:48:09 executed programs: 9 [ 179.698204][ T6360] syz-executor: attempt to access beyond end of device [ 179.698204][ T6360] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 179.702500][ T6360] CPU: 0 UID: 0 PID: 6360 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 179.702525][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 179.702534][ T6360] Call Trace: [ 179.702541][ T6360] [ 179.702549][ T6360] dump_stack_lvl+0xe8/0x150 [ 179.702574][ T6360] f2fs_stop_checkpoint+0x383/0x540 [ 179.702600][ T6360] f2fs_write_end_io+0x1274/0x1740 [ 179.702644][ T6360] __submit_merged_bio+0x256/0x6a0 [ 179.702673][ T6360] __submit_merged_write_cond+0x3c9/0x4e0 [ 179.702703][ T6360] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 179.702756][ T6360] f2fs_write_data_pages+0x287e/0x34f0 [ 179.702813][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 179.702885][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 179.702911][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 179.702949][ T6360] ? do_raw_spin_lock+0x12b/0x2f0 [ 179.702977][ T6360] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 179.702996][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 179.703008][ T6360] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 179.703020][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 179.703035][ T6360] do_writepages+0x32e/0x550 [ 179.703050][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 179.703060][ T6360] ? rt_spin_unlock+0x14f/0x200 [ 179.703074][ T6360] filemap_fdatawrite+0x1ec/0x2f0 [ 179.703091][ T6360] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 179.703103][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 179.703135][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 179.703149][ T6360] ? rt_spin_unlock+0x160/0x200 [ 179.703159][ T6360] f2fs_sync_dirty_inodes+0x30e/0x830 [ 179.703176][ T6360] f2fs_write_checkpoint+0x9df/0x26a0 [ 179.703186][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 179.703213][ T6360] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 179.703247][ T6360] kill_f2fs_super+0x314/0x730 [ 179.703265][ T6360] ? __pfx_kill_f2fs_super+0x10/0x10 [ 179.703286][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 179.703303][ T6360] deactivate_locked_super+0xbc/0x130 [ 179.703315][ T6360] cleanup_mnt+0x437/0x4d0 [ 179.703326][ T6360] ? _raw_spin_unlock_irq+0x23/0x50 [ 179.703340][ T6360] task_work_run+0x1d9/0x270 [ 179.703356][ T6360] ? __pfx_task_work_run+0x10/0x10 [ 179.703373][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.703384][ T6360] exit_to_user_mode_loop+0xed/0x480 [ 179.703396][ T6360] ? rcu_is_watching+0x15/0xb0 [ 179.703411][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.703421][ T6360] do_syscall_64+0x33e/0xf80 [ 179.703433][ T6360] ? trace_irq_disable+0x3b/0x140 [ 179.703445][ T6360] ? clear_bhb_loop+0x40/0x90 [ 179.703457][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.703467][ T6360] RIP: 0033:0x7f032995da57 [ 179.703478][ T6360] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 179.703486][ T6360] RSP: 002b:00007fff60c0d788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 179.703498][ T6360] RAX: 0000000000000000 RBX: 00007f03299f2048 RCX: 00007f032995da57 [ 179.703505][ T6360] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff60c0d840 [ 179.703510][ T6360] RBP: 00007fff60c0d840 R08: 00007fff60c0e840 R09: 00000000ffffffff [ 179.703516][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff60c0e8d0 [ 179.703522][ T6360] R13: 00007f03299f2048 R14: 000000000002bba9 R15: 00007fff60c0e910 [ 179.703538][ T6360] [ 179.703791][ T6360] F2FS-fs (loop0): Remounting filesystem read-only [ 180.327563][ T6549] loop0: detected capacity change from 0 to 32768 [ 180.341407][ T6549] Bad index:0 in slot in dtroot [ 180.341407][ T6549] [ 180.341420][ T6549] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 180.341420][ T6549] [ 180.341679][ T6549] ERROR: (device loop0): remounting filesystem as read-only [ 180.693104][ T6549] loop0: detected capacity change from 0 to 40427 [ 180.701524][ T6549] F2FS-fs: heap/no_heap options were deprecated [ 180.702424][ T6549] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 180.702444][ T6549] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 180.706094][ T6549] F2FS-fs (loop0): invalid crc value [ 180.811840][ T6549] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 180.829840][ T6549] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 180.829868][ T6549] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 181.187062][ T6360] syz-executor: attempt to access beyond end of device [ 181.187062][ T6360] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 181.191377][ T6360] CPU: 0 UID: 0 PID: 6360 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 181.191401][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 181.191415][ T6360] Call Trace: [ 181.191422][ T6360] [ 181.191430][ T6360] dump_stack_lvl+0xe8/0x150 [ 181.191457][ T6360] f2fs_stop_checkpoint+0x383/0x540 [ 181.191484][ T6360] f2fs_write_end_io+0x1274/0x1740 [ 181.191520][ T6360] __submit_merged_bio+0x256/0x6a0 [ 181.191547][ T6360] __submit_merged_write_cond+0x3c9/0x4e0 [ 181.191575][ T6360] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 181.191618][ T6360] f2fs_write_data_pages+0x287e/0x34f0 [ 181.191641][ T6360] ? rcu_is_watching+0x15/0xb0 [ 181.191698][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 181.191739][ T6360] ? unwind_next_frame+0xa6/0x2550 [ 181.191782][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 181.191799][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 181.191821][ T6360] ? do_raw_spin_lock+0x12b/0x2f0 [ 181.191839][ T6360] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 181.191851][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 181.191863][ T6360] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 181.191875][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 181.191890][ T6360] do_writepages+0x32e/0x550 [ 181.191905][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 181.191915][ T6360] ? rt_spin_unlock+0x14f/0x200 [ 181.191929][ T6360] filemap_fdatawrite+0x1ec/0x2f0 [ 181.191945][ T6360] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 181.191957][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 181.191989][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 181.192003][ T6360] ? rt_spin_unlock+0x160/0x200 [ 181.192013][ T6360] f2fs_sync_dirty_inodes+0x30e/0x830 [ 181.192030][ T6360] f2fs_write_checkpoint+0x9df/0x26a0 [ 181.192040][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 181.192067][ T6360] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 181.192105][ T6360] kill_f2fs_super+0x314/0x730 [ 181.192123][ T6360] ? __pfx_kill_f2fs_super+0x10/0x10 [ 181.192143][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 181.192161][ T6360] deactivate_locked_super+0xbc/0x130 [ 181.192172][ T6360] cleanup_mnt+0x437/0x4d0 [ 181.192184][ T6360] ? _raw_spin_unlock_irq+0x23/0x50 [ 181.192197][ T6360] task_work_run+0x1d9/0x270 [ 181.192214][ T6360] ? __pfx_task_work_run+0x10/0x10 [ 181.192230][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.192241][ T6360] exit_to_user_mode_loop+0xed/0x480 [ 181.192253][ T6360] ? rcu_is_watching+0x15/0xb0 [ 181.192267][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.192277][ T6360] do_syscall_64+0x33e/0xf80 [ 181.192290][ T6360] ? trace_irq_disable+0x3b/0x140 [ 181.192301][ T6360] ? clear_bhb_loop+0x40/0x90 [ 181.192314][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.192324][ T6360] RIP: 0033:0x7f032995da57 [ 181.192335][ T6360] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 181.192343][ T6360] RSP: 002b:00007fff60c0d788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 181.192354][ T6360] RAX: 0000000000000000 RBX: 00007f03299f2048 RCX: 00007f032995da57 [ 181.192361][ T6360] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff60c0d840 [ 181.192367][ T6360] RBP: 00007fff60c0d840 R08: 00007fff60c0e840 R09: 00000000ffffffff [ 181.192373][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff60c0e8d0 [ 181.192379][ T6360] R13: 00007f03299f2048 R14: 000000000002c175 R15: 00007fff60c0e910 [ 181.192394][ T6360] [ 181.192631][ T6360] F2FS-fs (loop0): Remounting filesystem read-only [ 181.907207][ T6556] loop0: detected capacity change from 0 to 32768 [ 181.933940][ T6556] Bad index:0 in slot in dtroot [ 181.933940][ T6556] [ 181.933956][ T6556] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 181.933956][ T6556] [ 181.935100][ T6556] ERROR: (device loop0): remounting filesystem as read-only [ 182.261465][ T6556] loop0: detected capacity change from 0 to 40427 [ 182.262452][ T6556] F2FS-fs: heap/no_heap options were deprecated [ 182.263336][ T6556] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 182.263355][ T6556] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 182.269710][ T6556] F2FS-fs (loop0): invalid crc value [ 182.367645][ T6556] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 182.397376][ T6556] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 182.397396][ T6556] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 182.747336][ T6360] syz-executor: attempt to access beyond end of device [ 182.747336][ T6360] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 182.752100][ T6360] CPU: 0 UID: 0 PID: 6360 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 182.752124][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 182.752132][ T6360] Call Trace: [ 182.752139][ T6360] [ 182.752146][ T6360] dump_stack_lvl+0xe8/0x150 [ 182.752173][ T6360] f2fs_stop_checkpoint+0x383/0x540 [ 182.752199][ T6360] f2fs_write_end_io+0x1274/0x1740 [ 182.752232][ T6360] __submit_merged_bio+0x256/0x6a0 [ 182.752260][ T6360] __submit_merged_write_cond+0x3c9/0x4e0 [ 182.752290][ T6360] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 182.752330][ T6360] f2fs_write_data_pages+0x287e/0x34f0 [ 182.752385][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 182.752450][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 182.752476][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 182.752515][ T6360] ? do_raw_spin_lock+0x12b/0x2f0 [ 182.752543][ T6360] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 182.752562][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 182.752576][ T6360] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 182.752588][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 182.752603][ T6360] do_writepages+0x32e/0x550 [ 182.752618][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 182.752628][ T6360] ? rt_spin_unlock+0x14f/0x200 [ 182.752642][ T6360] filemap_fdatawrite+0x1ec/0x2f0 [ 182.752659][ T6360] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 182.752671][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 182.752702][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 182.752716][ T6360] ? rt_spin_unlock+0x160/0x200 [ 182.752731][ T6360] f2fs_sync_dirty_inodes+0x30e/0x830 [ 182.752748][ T6360] f2fs_write_checkpoint+0x9df/0x26a0 [ 182.752757][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 182.752785][ T6360] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 182.752820][ T6360] kill_f2fs_super+0x314/0x730 [ 182.752838][ T6360] ? __pfx_kill_f2fs_super+0x10/0x10 [ 182.752858][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 182.752876][ T6360] deactivate_locked_super+0xbc/0x130 [ 182.752888][ T6360] cleanup_mnt+0x437/0x4d0 [ 182.752899][ T6360] ? _raw_spin_unlock_irq+0x23/0x50 [ 182.752912][ T6360] task_work_run+0x1d9/0x270 [ 182.752928][ T6360] ? __pfx_task_work_run+0x10/0x10 [ 182.752945][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.752962][ T6360] exit_to_user_mode_loop+0xed/0x480 [ 182.752976][ T6360] ? rcu_is_watching+0x15/0xb0 [ 182.752991][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.753001][ T6360] do_syscall_64+0x33e/0xf80 [ 182.753012][ T6360] ? trace_irq_disable+0x3b/0x140 [ 182.753024][ T6360] ? clear_bhb_loop+0x40/0x90 [ 182.753036][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.753046][ T6360] RIP: 0033:0x7f032995da57 [ 182.753057][ T6360] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 182.753065][ T6360] RSP: 002b:00007fff60c0d788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 182.753077][ T6360] RAX: 0000000000000000 RBX: 00007f03299f2048 RCX: 00007f032995da57 [ 182.753084][ T6360] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff60c0d840 [ 182.753090][ T6360] RBP: 00007fff60c0d840 R08: 00007fff60c0e840 R09: 00000000ffffffff [ 182.753096][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff60c0e8d0 [ 182.753102][ T6360] R13: 00007f03299f2048 R14: 000000000002c7a0 R15: 00007fff60c0e910 [ 182.753117][ T6360] [ 182.757683][ T6360] F2FS-fs (loop0): Remounting filesystem read-only [ 183.354185][ T6562] loop0: detected capacity change from 0 to 32768 [ 183.383355][ T6562] Bad index:0 in slot in dtroot [ 183.383355][ T6562] [ 183.383373][ T6562] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 183.383373][ T6562] [ 183.383677][ T6562] ERROR: (device loop0): remounting filesystem as read-only [ 183.746020][ T6562] loop0: detected capacity change from 0 to 40427 [ 183.748820][ T6562] F2FS-fs: heap/no_heap options were deprecated [ 183.749643][ T6562] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 183.749662][ T6562] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 183.770370][ T6562] F2FS-fs (loop0): invalid crc value [ 183.919992][ T6562] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 183.937607][ T6562] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 183.937634][ T6562] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 184.267131][ T6360] syz-executor: attempt to access beyond end of device [ 184.267131][ T6360] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 184.271425][ T6360] CPU: 1 UID: 0 PID: 6360 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 184.271448][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 184.271458][ T6360] Call Trace: [ 184.271464][ T6360] [ 184.271471][ T6360] dump_stack_lvl+0xe8/0x150 [ 184.271497][ T6360] f2fs_stop_checkpoint+0x383/0x540 [ 184.271524][ T6360] f2fs_write_end_io+0x1274/0x1740 [ 184.271557][ T6360] __submit_merged_bio+0x256/0x6a0 [ 184.271592][ T6360] __submit_merged_write_cond+0x3c9/0x4e0 [ 184.271622][ T6360] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 184.271661][ T6360] f2fs_write_data_pages+0x287e/0x34f0 [ 184.271717][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 184.271782][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 184.271808][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 184.271843][ T6360] ? do_raw_spin_lock+0x12b/0x2f0 [ 184.271868][ T6360] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 184.271887][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 184.271906][ T6360] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 184.271925][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 184.271947][ T6360] do_writepages+0x32e/0x550 [ 184.271967][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 184.271977][ T6360] ? rt_spin_unlock+0x14f/0x200 [ 184.271991][ T6360] filemap_fdatawrite+0x1ec/0x2f0 [ 184.272007][ T6360] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 184.272019][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 184.272048][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 184.272061][ T6360] ? rt_spin_unlock+0x160/0x200 [ 184.272071][ T6360] f2fs_sync_dirty_inodes+0x30e/0x830 [ 184.272088][ T6360] f2fs_write_checkpoint+0x9df/0x26a0 [ 184.272097][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 184.272125][ T6360] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 184.272159][ T6360] kill_f2fs_super+0x314/0x730 [ 184.272177][ T6360] ? __pfx_kill_f2fs_super+0x10/0x10 [ 184.272197][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 184.272215][ T6360] deactivate_locked_super+0xbc/0x130 [ 184.272227][ T6360] cleanup_mnt+0x437/0x4d0 [ 184.272238][ T6360] ? _raw_spin_unlock_irq+0x23/0x50 [ 184.272251][ T6360] task_work_run+0x1d9/0x270 [ 184.272267][ T6360] ? __pfx_task_work_run+0x10/0x10 [ 184.272284][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.272295][ T6360] exit_to_user_mode_loop+0xed/0x480 [ 184.272308][ T6360] ? rcu_is_watching+0x15/0xb0 [ 184.272323][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.272333][ T6360] do_syscall_64+0x33e/0xf80 [ 184.272346][ T6360] ? clear_bhb_loop+0x40/0x90 [ 184.272359][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.272369][ T6360] RIP: 0033:0x7f032995da57 [ 184.272380][ T6360] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 184.272388][ T6360] RSP: 002b:00007fff60c0d788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 184.272400][ T6360] RAX: 0000000000000000 RBX: 00007f03299f2048 RCX: 00007f032995da57 [ 184.272407][ T6360] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff60c0d840 [ 184.272412][ T6360] RBP: 00007fff60c0d840 R08: 00007fff60c0e840 R09: 00000000ffffffff [ 184.272419][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff60c0e8d0 [ 184.272424][ T6360] R13: 00007f03299f2048 R14: 000000000002cd92 R15: 00007fff60c0e910 [ 184.272440][ T6360] [ 184.272673][ T6360] F2FS-fs (loop0): Remounting filesystem read-only [ 184.973035][ T6572] loop0: detected capacity change from 0 to 32768 [ 184.992207][ T6572] Bad index:0 in slot in dtroot [ 184.992207][ T6572] [ 184.992223][ T6572] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 184.992223][ T6572] [ 184.992505][ T6572] ERROR: (device loop0): remounting filesystem as read-only [ 185.331146][ T6572] loop0: detected capacity change from 0 to 40427 [ 185.332163][ T6572] F2FS-fs: heap/no_heap options were deprecated [ 185.332973][ T6572] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 185.332992][ T6572] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 185.337582][ T6572] F2FS-fs (loop0): invalid crc value [ 185.444881][ T6572] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 185.480235][ T6572] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 185.480262][ T6572] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 2026/05/08 14:48:15 executed programs: 13 [ 185.839557][ T6360] syz-executor: attempt to access beyond end of device [ 185.839557][ T6360] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 185.843927][ T6360] CPU: 0 UID: 0 PID: 6360 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 185.843951][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 185.843960][ T6360] Call Trace: [ 185.843967][ T6360] [ 185.843975][ T6360] dump_stack_lvl+0xe8/0x150 [ 185.844004][ T6360] f2fs_stop_checkpoint+0x383/0x540 [ 185.844028][ T6360] f2fs_write_end_io+0x1274/0x1740 [ 185.844063][ T6360] __submit_merged_bio+0x256/0x6a0 [ 185.844090][ T6360] __submit_merged_write_cond+0x3c9/0x4e0 [ 185.844118][ T6360] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 185.844162][ T6360] f2fs_write_data_pages+0x287e/0x34f0 [ 185.844219][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 185.844284][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 185.844310][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 185.844350][ T6360] ? do_raw_spin_lock+0x12b/0x2f0 [ 185.844382][ T6360] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 185.844404][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 185.844432][ T6360] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 185.844452][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 185.844477][ T6360] do_writepages+0x32e/0x550 [ 185.844501][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 185.844520][ T6360] ? rt_spin_unlock+0x14f/0x200 [ 185.844546][ T6360] filemap_fdatawrite+0x1ec/0x2f0 [ 185.844573][ T6360] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 185.844594][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 185.844648][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 185.844673][ T6360] ? rt_spin_unlock+0x160/0x200 [ 185.844690][ T6360] f2fs_sync_dirty_inodes+0x30e/0x830 [ 185.844723][ T6360] f2fs_write_checkpoint+0x9df/0x26a0 [ 185.844772][ T6360] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 185.844840][ T6360] kill_f2fs_super+0x314/0x730 [ 185.844871][ T6360] ? __pfx_kill_f2fs_super+0x10/0x10 [ 185.844907][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 185.844946][ T6360] deactivate_locked_super+0xbc/0x130 [ 185.844967][ T6360] cleanup_mnt+0x437/0x4d0 [ 185.844987][ T6360] ? _raw_spin_unlock_irq+0x23/0x50 [ 185.845011][ T6360] task_work_run+0x1d9/0x270 [ 185.845038][ T6360] ? __pfx_task_work_run+0x10/0x10 [ 185.845068][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.845087][ T6360] exit_to_user_mode_loop+0xed/0x480 [ 185.845108][ T6360] ? rcu_is_watching+0x15/0xb0 [ 185.845132][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.845151][ T6360] do_syscall_64+0x33e/0xf80 [ 185.845171][ T6360] ? trace_irq_disable+0x3b/0x140 [ 185.845190][ T6360] ? clear_bhb_loop+0x40/0x90 [ 185.845211][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.845229][ T6360] RIP: 0033:0x7f032995da57 [ 185.845246][ T6360] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 185.845260][ T6360] RSP: 002b:00007fff60c0d788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 185.845279][ T6360] RAX: 0000000000000000 RBX: 00007f03299f2048 RCX: 00007f032995da57 [ 185.845291][ T6360] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff60c0d840 [ 185.845301][ T6360] RBP: 00007fff60c0d840 R08: 00007fff60c0e840 R09: 00000000ffffffff [ 185.845313][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff60c0e8d0 [ 185.845324][ T6360] R13: 00007f03299f2048 R14: 000000000002d4d3 R15: 00007fff60c0e910 [ 185.845353][ T6360] [ 185.861287][ T6360] F2FS-fs (loop0): Remounting filesystem read-only [ 186.389312][ T6579] loop0: detected capacity change from 0 to 32768 [ 186.419521][ T6579] Bad index:0 in slot in dtroot [ 186.419521][ T6579] [ 186.419538][ T6579] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 186.419538][ T6579] [ 186.419842][ T6579] ERROR: (device loop0): remounting filesystem as read-only [ 186.773208][ T6579] loop0: detected capacity change from 0 to 40427 [ 186.781101][ T6579] F2FS-fs: heap/no_heap options were deprecated [ 186.783290][ T6579] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 186.783312][ T6579] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 186.809598][ T6579] F2FS-fs (loop0): invalid crc value [ 186.943212][ T6579] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 186.961733][ T6579] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 186.961758][ T6579] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 187.290395][ T6360] syz-executor: attempt to access beyond end of device [ 187.290395][ T6360] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 187.310170][ T6360] CPU: 0 UID: 0 PID: 6360 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 187.310196][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 187.310207][ T6360] Call Trace: [ 187.310214][ T6360] [ 187.310221][ T6360] dump_stack_lvl+0xe8/0x150 [ 187.310255][ T6360] f2fs_stop_checkpoint+0x383/0x540 [ 187.310277][ T6360] f2fs_write_end_io+0x1274/0x1740 [ 187.310298][ T6360] __submit_merged_bio+0x256/0x6a0 [ 187.310315][ T6360] __submit_merged_write_cond+0x3c9/0x4e0 [ 187.310333][ T6360] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 187.310357][ T6360] f2fs_write_data_pages+0x287e/0x34f0 [ 187.310388][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 187.310401][ T6360] ? __enqueue_entity+0x673/0xb70 [ 187.310435][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 187.310450][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 187.310472][ T6360] ? do_raw_spin_lock+0x12b/0x2f0 [ 187.310490][ T6360] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 187.310504][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 187.310516][ T6360] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 187.310528][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 187.310543][ T6360] do_writepages+0x32e/0x550 [ 187.310557][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 187.310567][ T6360] ? rt_spin_unlock+0x14f/0x200 [ 187.310581][ T6360] filemap_fdatawrite+0x1ec/0x2f0 [ 187.310597][ T6360] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 187.310610][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 187.310644][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 187.310657][ T6360] ? rt_spin_unlock+0x160/0x200 [ 187.310668][ T6360] f2fs_sync_dirty_inodes+0x30e/0x830 [ 187.310685][ T6360] f2fs_write_checkpoint+0x9df/0x26a0 [ 187.310698][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 187.310726][ T6360] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 187.310760][ T6360] kill_f2fs_super+0x314/0x730 [ 187.310778][ T6360] ? __pfx_kill_f2fs_super+0x10/0x10 [ 187.310799][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 187.310816][ T6360] deactivate_locked_super+0xbc/0x130 [ 187.310828][ T6360] cleanup_mnt+0x437/0x4d0 [ 187.310839][ T6360] ? _raw_spin_unlock_irq+0x23/0x50 [ 187.310852][ T6360] task_work_run+0x1d9/0x270 [ 187.310868][ T6360] ? __pfx_task_work_run+0x10/0x10 [ 187.310885][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.310896][ T6360] exit_to_user_mode_loop+0xed/0x480 [ 187.310908][ T6360] ? rcu_is_watching+0x15/0xb0 [ 187.310923][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.310933][ T6360] do_syscall_64+0x33e/0xf80 [ 187.310945][ T6360] ? trace_irq_disable+0x3b/0x140 [ 187.310956][ T6360] ? clear_bhb_loop+0x40/0x90 [ 187.310969][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.310978][ T6360] RIP: 0033:0x7f032995da57 [ 187.310989][ T6360] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 187.310997][ T6360] RSP: 002b:00007fff60c0d788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 187.311009][ T6360] RAX: 0000000000000000 RBX: 00007f03299f2048 RCX: 00007f032995da57 [ 187.311015][ T6360] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff60c0d840 [ 187.311021][ T6360] RBP: 00007fff60c0d840 R08: 00007fff60c0e840 R09: 00000000ffffffff [ 187.311027][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff60c0e8d0 [ 187.311035][ T6360] R13: 00007f03299f2048 R14: 000000000002da79 R15: 00007fff60c0e910 [ 187.311059][ T6360] [ 187.311941][ T6360] F2FS-fs (loop0): Remounting filesystem read-only [ 187.870330][ T6585] loop0: detected capacity change from 0 to 32768 [ 187.897197][ T6585] Bad index:0 in slot in dtroot [ 187.897197][ T6585] [ 187.897212][ T6585] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 187.897212][ T6585] [ 187.897471][ T6585] ERROR: (device loop0): remounting filesystem as read-only [ 188.233645][ T6585] loop0: detected capacity change from 0 to 40427 [ 188.235234][ T6585] F2FS-fs: heap/no_heap options were deprecated [ 188.236043][ T6585] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 188.236061][ T6585] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 188.237534][ T6585] F2FS-fs (loop0): invalid crc value [ 188.347170][ T6585] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 188.365960][ T6585] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 188.365983][ T6585] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 188.728278][ T6360] syz-executor: attempt to access beyond end of device [ 188.728278][ T6360] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 188.731983][ T6360] CPU: 1 UID: 0 PID: 6360 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 188.732009][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 188.732019][ T6360] Call Trace: [ 188.732025][ T6360] [ 188.732033][ T6360] dump_stack_lvl+0xe8/0x150 [ 188.732059][ T6360] f2fs_stop_checkpoint+0x383/0x540 [ 188.732086][ T6360] f2fs_write_end_io+0x1274/0x1740 [ 188.732121][ T6360] __submit_merged_bio+0x256/0x6a0 [ 188.732148][ T6360] __submit_merged_write_cond+0x3c9/0x4e0 [ 188.732176][ T6360] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 188.732217][ T6360] f2fs_write_data_pages+0x287e/0x34f0 [ 188.732273][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 188.732292][ T6360] ? css_rstat_updated+0x23a/0x530 [ 188.732322][ T6360] ? unwind_next_frame+0xa6/0x2550 [ 188.732340][ T6360] ? rcu_is_watching+0x15/0xb0 [ 188.732360][ T6360] ? __kasan_check_byte+0x12/0x40 [ 188.732410][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 188.732433][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 188.732467][ T6360] ? do_raw_spin_lock+0x12b/0x2f0 [ 188.732496][ T6360] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 188.732516][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 188.732535][ T6360] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 188.732553][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 188.732577][ T6360] do_writepages+0x32e/0x550 [ 188.732599][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 188.732616][ T6360] ? rt_spin_unlock+0x14f/0x200 [ 188.732641][ T6360] filemap_fdatawrite+0x1ec/0x2f0 [ 188.732668][ T6360] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 188.732717][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 188.732736][ T6360] ? __rcu_read_unlock+0x83/0xe0 [ 188.732758][ T6360] ? rt_spin_unlock+0x160/0x200 [ 188.732777][ T6360] f2fs_sync_dirty_inodes+0x30e/0x830 [ 188.732808][ T6360] f2fs_write_checkpoint+0x9df/0x26a0 [ 188.732824][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 188.732872][ T6360] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 188.732940][ T6360] kill_f2fs_super+0x314/0x730 [ 188.732972][ T6360] ? __pfx_kill_f2fs_super+0x10/0x10 [ 188.733008][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 188.733038][ T6360] deactivate_locked_super+0xbc/0x130 [ 188.733058][ T6360] cleanup_mnt+0x437/0x4d0 [ 188.733076][ T6360] ? _raw_spin_unlock_irq+0x23/0x50 [ 188.733098][ T6360] task_work_run+0x1d9/0x270 [ 188.733123][ T6360] ? __pfx_task_work_run+0x10/0x10 [ 188.733152][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.733170][ T6360] exit_to_user_mode_loop+0xed/0x480 [ 188.733196][ T6360] ? rcu_is_watching+0x15/0xb0 [ 188.733226][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.733246][ T6360] do_syscall_64+0x33e/0xf80 [ 188.733265][ T6360] ? trace_irq_disable+0x3b/0x140 [ 188.733284][ T6360] ? clear_bhb_loop+0x40/0x90 [ 188.733305][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.733323][ T6360] RIP: 0033:0x7f032995da57 [ 188.733342][ T6360] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 188.733355][ T6360] RSP: 002b:00007fff60c0d788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 188.733382][ T6360] RAX: 0000000000000000 RBX: 00007f03299f2048 RCX: 00007f032995da57 [ 188.733393][ T6360] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff60c0d840 [ 188.733403][ T6360] RBP: 00007fff60c0d840 R08: 00007fff60c0e840 R09: 00000000ffffffff [ 188.733414][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff60c0e8d0 [ 188.733424][ T6360] R13: 00007f03299f2048 R14: 000000000002e01d R15: 00007fff60c0e910 [ 188.733479][ T6360] [ 188.733487][ T6360] F2FS-fs (loop0): Remounting filesystem read-only [ 189.498086][ T6591] loop0: detected capacity change from 0 to 32768 [ 189.521181][ T6591] Bad index:0 in slot in dtroot [ 189.521181][ T6591] [ 189.521196][ T6591] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 189.521196][ T6591] [ 189.521603][ T6591] ERROR: (device loop0): remounting filesystem as read-only [ 189.868203][ T6591] loop0: detected capacity change from 0 to 40427 [ 189.881000][ T6591] F2FS-fs: heap/no_heap options were deprecated [ 189.884345][ T6591] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 189.884365][ T6591] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 189.888050][ T6591] F2FS-fs (loop0): invalid crc value [ 190.024378][ T6591] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 190.046211][ T6591] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 190.046238][ T6591] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 190.378171][ T6360] syz-executor: attempt to access beyond end of device [ 190.378171][ T6360] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 190.382544][ T6360] CPU: 0 UID: 0 PID: 6360 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 190.382568][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.382577][ T6360] Call Trace: [ 190.382583][ T6360] [ 190.382591][ T6360] dump_stack_lvl+0xe8/0x150 [ 190.382617][ T6360] f2fs_stop_checkpoint+0x383/0x540 [ 190.382644][ T6360] f2fs_write_end_io+0x1274/0x1740 [ 190.382678][ T6360] __submit_merged_bio+0x256/0x6a0 [ 190.382706][ T6360] __submit_merged_write_cond+0x3c9/0x4e0 [ 190.382736][ T6360] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 190.382775][ T6360] f2fs_write_data_pages+0x287e/0x34f0 [ 190.382797][ T6360] ? rcu_is_watching+0x15/0xb0 [ 190.382853][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 190.382888][ T6360] ? unwind_next_frame+0xa6/0x2550 [ 190.382946][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 190.382971][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 190.383006][ T6360] ? do_raw_spin_lock+0x12b/0x2f0 [ 190.383025][ T6360] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 190.383038][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 190.383050][ T6360] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 190.383062][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 190.383077][ T6360] do_writepages+0x32e/0x550 [ 190.383091][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 190.383102][ T6360] ? rt_spin_unlock+0x14f/0x200 [ 190.383116][ T6360] filemap_fdatawrite+0x1ec/0x2f0 [ 190.383132][ T6360] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 190.383144][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 190.383173][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 190.383190][ T6360] ? rt_spin_unlock+0x160/0x200 [ 190.383200][ T6360] f2fs_sync_dirty_inodes+0x30e/0x830 [ 190.383217][ T6360] f2fs_write_checkpoint+0x9df/0x26a0 [ 190.383227][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 190.383259][ T6360] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 190.383294][ T6360] kill_f2fs_super+0x314/0x730 [ 190.383312][ T6360] ? __pfx_kill_f2fs_super+0x10/0x10 [ 190.383333][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 190.383350][ T6360] deactivate_locked_super+0xbc/0x130 [ 190.383367][ T6360] cleanup_mnt+0x437/0x4d0 [ 190.383383][ T6360] ? _raw_spin_unlock_irq+0x23/0x50 [ 190.383398][ T6360] task_work_run+0x1d9/0x270 [ 190.383415][ T6360] ? __pfx_task_work_run+0x10/0x10 [ 190.383432][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.383445][ T6360] exit_to_user_mode_loop+0xed/0x480 [ 190.383460][ T6360] ? rcu_is_watching+0x15/0xb0 [ 190.383474][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.383485][ T6360] do_syscall_64+0x33e/0xf80 [ 190.383497][ T6360] ? trace_irq_disable+0x3b/0x140 [ 190.383508][ T6360] ? clear_bhb_loop+0x40/0x90 [ 190.383521][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.383531][ T6360] RIP: 0033:0x7f032995da57 [ 190.383542][ T6360] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 190.383550][ T6360] RSP: 002b:00007fff60c0d788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 190.383561][ T6360] RAX: 0000000000000000 RBX: 00007f03299f2048 RCX: 00007f032995da57 [ 190.383568][ T6360] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff60c0d840 [ 190.383573][ T6360] RBP: 00007fff60c0d840 R08: 00007fff60c0e840 R09: 00000000ffffffff [ 190.383580][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff60c0e8d0 [ 190.383586][ T6360] R13: 00007f03299f2048 R14: 000000000002e569 R15: 00007fff60c0e910 [ 190.383603][ T6360] [ 190.383855][ T6360] F2FS-fs (loop0): Remounting filesystem read-only [ 191.159493][ T6597] loop0: detected capacity change from 0 to 32768 [ 191.182120][ T6597] Bad index:0 in slot in dtroot [ 191.182120][ T6597] [ 191.182135][ T6597] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 191.182135][ T6597] [ 191.182337][ T6597] ERROR: (device loop0): remounting filesystem as read-only [ 191.516032][ T6597] loop0: detected capacity change from 0 to 40427 [ 191.530194][ T6597] F2FS-fs: heap/no_heap options were deprecated [ 191.544225][ T6597] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 191.544251][ T6597] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 191.546641][ T6597] F2FS-fs (loop0): invalid crc value [ 191.682938][ T6597] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 191.702282][ T6597] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 191.702311][ T6597] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 2026/05/08 14:48:21 executed programs: 17 [ 192.057094][ T6360] syz-executor: attempt to access beyond end of device [ 192.057094][ T6360] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 192.062306][ T6360] CPU: 1 UID: 0 PID: 6360 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 192.062329][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.062338][ T6360] Call Trace: [ 192.062345][ T6360] [ 192.062353][ T6360] dump_stack_lvl+0xe8/0x150 [ 192.062379][ T6360] f2fs_stop_checkpoint+0x383/0x540 [ 192.062406][ T6360] f2fs_write_end_io+0x1274/0x1740 [ 192.062440][ T6360] __submit_merged_bio+0x256/0x6a0 [ 192.062468][ T6360] __submit_merged_write_cond+0x3c9/0x4e0 [ 192.062497][ T6360] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 192.062538][ T6360] f2fs_write_data_pages+0x287e/0x34f0 [ 192.062590][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 192.062654][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 192.062680][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 192.062720][ T6360] ? do_raw_spin_lock+0x12b/0x2f0 [ 192.062750][ T6360] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 192.062772][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 192.062789][ T6360] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 192.062807][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 192.062826][ T6360] do_writepages+0x32e/0x550 [ 192.062857][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 192.062868][ T6360] ? rt_spin_unlock+0x14f/0x200 [ 192.062884][ T6360] filemap_fdatawrite+0x1ec/0x2f0 [ 192.062901][ T6360] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 192.062913][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 192.062942][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 192.062955][ T6360] ? rt_spin_unlock+0x160/0x200 [ 192.062966][ T6360] f2fs_sync_dirty_inodes+0x30e/0x830 [ 192.062983][ T6360] f2fs_write_checkpoint+0x9df/0x26a0 [ 192.062992][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 192.063019][ T6360] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 192.063054][ T6360] kill_f2fs_super+0x314/0x730 [ 192.063078][ T6360] ? __pfx_kill_f2fs_super+0x10/0x10 [ 192.063098][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 192.063116][ T6360] deactivate_locked_super+0xbc/0x130 [ 192.063133][ T6360] cleanup_mnt+0x437/0x4d0 [ 192.063150][ T6360] ? _raw_spin_unlock_irq+0x23/0x50 [ 192.063163][ T6360] task_work_run+0x1d9/0x270 [ 192.063180][ T6360] ? __pfx_task_work_run+0x10/0x10 [ 192.063197][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.063218][ T6360] exit_to_user_mode_loop+0xed/0x480 [ 192.063231][ T6360] ? rcu_is_watching+0x15/0xb0 [ 192.063250][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.063260][ T6360] do_syscall_64+0x33e/0xf80 [ 192.063273][ T6360] ? trace_irq_disable+0x3b/0x140 [ 192.063284][ T6360] ? clear_bhb_loop+0x40/0x90 [ 192.063297][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.063307][ T6360] RIP: 0033:0x7f032995da57 [ 192.063319][ T6360] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 192.063326][ T6360] RSP: 002b:00007fff60c0d788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 192.063338][ T6360] RAX: 0000000000000000 RBX: 00007f03299f2048 RCX: 00007f032995da57 [ 192.063345][ T6360] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff60c0d840 [ 192.063350][ T6360] RBP: 00007fff60c0d840 R08: 00007fff60c0e840 R09: 00000000ffffffff [ 192.063357][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff60c0e8d0 [ 192.063362][ T6360] R13: 00007f03299f2048 R14: 000000000002ebef R15: 00007fff60c0e910 [ 192.063378][ T6360] [ 192.099673][ T6360] F2FS-fs (loop0): Remounting filesystem read-only [ 192.768942][ T6603] loop0: detected capacity change from 0 to 32768 [ 192.786255][ T6603] Bad index:0 in slot in dtroot [ 192.786255][ T6603] [ 192.786271][ T6603] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 192.786271][ T6603] [ 192.786570][ T6603] ERROR: (device loop0): remounting filesystem as read-only [ 193.128943][ T6603] loop0: detected capacity change from 0 to 40427 [ 193.131494][ T6603] F2FS-fs: heap/no_heap options were deprecated [ 193.132259][ T6603] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 193.132277][ T6603] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 193.175284][ T6603] F2FS-fs (loop0): invalid crc value [ 193.278377][ T6603] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 193.301937][ T6603] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 193.301966][ T6603] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 193.638432][ T6360] syz-executor: attempt to access beyond end of device [ 193.638432][ T6360] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 193.642607][ T6360] CPU: 1 UID: 0 PID: 6360 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 193.642632][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 193.642641][ T6360] Call Trace: [ 193.642647][ T6360] [ 193.642654][ T6360] dump_stack_lvl+0xe8/0x150 [ 193.642681][ T6360] f2fs_stop_checkpoint+0x383/0x540 [ 193.642706][ T6360] f2fs_write_end_io+0x1274/0x1740 [ 193.642741][ T6360] __submit_merged_bio+0x256/0x6a0 [ 193.642769][ T6360] __submit_merged_write_cond+0x3c9/0x4e0 [ 193.642798][ T6360] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 193.642839][ T6360] f2fs_write_data_pages+0x287e/0x34f0 [ 193.642914][ T6360] ? rcu_is_watching+0x15/0xb0 [ 193.642970][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 193.643005][ T6360] ? unwind_next_frame+0xa6/0x2550 [ 193.643053][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 193.643079][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 193.643115][ T6360] ? do_raw_spin_lock+0x12b/0x2f0 [ 193.643143][ T6360] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 193.643159][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 193.643171][ T6360] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 193.643183][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 193.643197][ T6360] do_writepages+0x32e/0x550 [ 193.643212][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 193.643223][ T6360] ? rt_spin_unlock+0x14f/0x200 [ 193.643237][ T6360] filemap_fdatawrite+0x1ec/0x2f0 [ 193.643253][ T6360] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 193.643265][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 193.643294][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 193.643308][ T6360] ? rt_spin_unlock+0x160/0x200 [ 193.643318][ T6360] f2fs_sync_dirty_inodes+0x30e/0x830 [ 193.643335][ T6360] f2fs_write_checkpoint+0x9df/0x26a0 [ 193.643344][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 193.643371][ T6360] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 193.643406][ T6360] kill_f2fs_super+0x314/0x730 [ 193.643424][ T6360] ? __pfx_kill_f2fs_super+0x10/0x10 [ 193.643444][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 193.643462][ T6360] deactivate_locked_super+0xbc/0x130 [ 193.643473][ T6360] cleanup_mnt+0x437/0x4d0 [ 193.643485][ T6360] ? _raw_spin_unlock_irq+0x23/0x50 [ 193.643498][ T6360] task_work_run+0x1d9/0x270 [ 193.643514][ T6360] ? __pfx_task_work_run+0x10/0x10 [ 193.643531][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.643541][ T6360] exit_to_user_mode_loop+0xed/0x480 [ 193.643554][ T6360] ? rcu_is_watching+0x15/0xb0 [ 193.643568][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.643578][ T6360] do_syscall_64+0x33e/0xf80 [ 193.643590][ T6360] ? trace_irq_disable+0x3b/0x140 [ 193.643601][ T6360] ? clear_bhb_loop+0x40/0x90 [ 193.643614][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.643624][ T6360] RIP: 0033:0x7f032995da57 [ 193.643635][ T6360] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 193.643645][ T6360] RSP: 002b:00007fff60c0d788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 193.643656][ T6360] RAX: 0000000000000000 RBX: 00007f03299f2048 RCX: 00007f032995da57 [ 193.643663][ T6360] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff60c0d840 [ 193.643668][ T6360] RBP: 00007fff60c0d840 R08: 00007fff60c0e840 R09: 00000000ffffffff [ 193.643675][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff60c0e8d0 [ 193.643680][ T6360] R13: 00007f03299f2048 R14: 000000000002f22c R15: 00007fff60c0e910 [ 193.643696][ T6360] [ 193.656934][ T6360] F2FS-fs (loop0): Remounting filesystem read-only [ 194.210500][ T6609] loop0: detected capacity change from 0 to 32768 [ 194.228633][ T6609] Bad index:0 in slot in dtroot [ 194.228633][ T6609] [ 194.228649][ T6609] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 194.228649][ T6609] [ 194.228901][ T6609] ERROR: (device loop0): remounting filesystem as read-only [ 194.483671][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.483729][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.581224][ T6609] loop0: detected capacity change from 0 to 40427 [ 194.582258][ T6609] F2FS-fs: heap/no_heap options were deprecated [ 194.584756][ T6609] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 194.584777][ T6609] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 194.586232][ T6609] F2FS-fs (loop0): invalid crc value [ 194.728572][ T6609] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 194.758399][ T6609] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 194.758418][ T6609] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 195.091668][ T6360] syz-executor: attempt to access beyond end of device [ 195.091668][ T6360] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 195.093479][ T6360] CPU: 1 UID: 0 PID: 6360 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 195.093502][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 195.093511][ T6360] Call Trace: [ 195.093518][ T6360] [ 195.093526][ T6360] dump_stack_lvl+0xe8/0x150 [ 195.093553][ T6360] f2fs_stop_checkpoint+0x383/0x540 [ 195.093580][ T6360] f2fs_write_end_io+0x1274/0x1740 [ 195.093622][ T6360] __submit_merged_bio+0x256/0x6a0 [ 195.093650][ T6360] __submit_merged_write_cond+0x3c9/0x4e0 [ 195.093677][ T6360] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 195.093723][ T6360] f2fs_write_data_pages+0x287e/0x34f0 [ 195.093782][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 195.093816][ T6360] ? raw_spin_rq_lock_nested+0x31/0x150 [ 195.093861][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 195.093884][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 195.093919][ T6360] ? do_raw_spin_lock+0x12b/0x2f0 [ 195.093938][ T6360] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 195.093951][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 195.093963][ T6360] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 195.093975][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 195.093989][ T6360] do_writepages+0x32e/0x550 [ 195.094014][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 195.094030][ T6360] ? rt_spin_unlock+0x14f/0x200 [ 195.094053][ T6360] filemap_fdatawrite+0x1ec/0x2f0 [ 195.094077][ T6360] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 195.094097][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 195.094144][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 195.094168][ T6360] ? rt_spin_unlock+0x160/0x200 [ 195.094187][ T6360] f2fs_sync_dirty_inodes+0x30e/0x830 [ 195.094218][ T6360] f2fs_write_checkpoint+0x9df/0x26a0 [ 195.094235][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 195.094286][ T6360] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 195.094352][ T6360] kill_f2fs_super+0x314/0x730 [ 195.094382][ T6360] ? __pfx_kill_f2fs_super+0x10/0x10 [ 195.094419][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 195.094451][ T6360] deactivate_locked_super+0xbc/0x130 [ 195.094471][ T6360] cleanup_mnt+0x437/0x4d0 [ 195.094490][ T6360] ? _raw_spin_unlock_irq+0x23/0x50 [ 195.094512][ T6360] task_work_run+0x1d9/0x270 [ 195.094539][ T6360] ? __pfx_task_work_run+0x10/0x10 [ 195.094561][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.094572][ T6360] exit_to_user_mode_loop+0xed/0x480 [ 195.094584][ T6360] ? rcu_is_watching+0x15/0xb0 [ 195.094605][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.094616][ T6360] do_syscall_64+0x33e/0xf80 [ 195.094627][ T6360] ? trace_irq_disable+0x3b/0x140 [ 195.094639][ T6360] ? clear_bhb_loop+0x40/0x90 [ 195.094651][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.094661][ T6360] RIP: 0033:0x7f032995da57 [ 195.094673][ T6360] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 195.094680][ T6360] RSP: 002b:00007fff60c0d788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 195.094692][ T6360] RAX: 0000000000000000 RBX: 00007f03299f2048 RCX: 00007f032995da57 [ 195.094699][ T6360] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff60c0d840 [ 195.094704][ T6360] RBP: 00007fff60c0d840 R08: 00007fff60c0e840 R09: 00000000ffffffff [ 195.094710][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff60c0e8d0 [ 195.094716][ T6360] R13: 00007f03299f2048 R14: 000000000002f7d1 R15: 00007fff60c0e910 [ 195.094732][ T6360] [ 195.096833][ T6360] F2FS-fs (loop0): Remounting filesystem read-only [ 195.787935][ T6615] loop0: detected capacity change from 0 to 32768 [ 195.799643][ T6615] Bad index:0 in slot in dtroot [ 195.799643][ T6615] [ 195.799660][ T6615] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 195.799660][ T6615] [ 195.799941][ T6615] ERROR: (device loop0): remounting filesystem as read-only [ 196.131616][ T6615] loop0: detected capacity change from 0 to 40427 [ 196.132703][ T6615] F2FS-fs: heap/no_heap options were deprecated [ 196.133523][ T6615] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 196.133541][ T6615] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 196.172615][ T6615] F2FS-fs (loop0): invalid crc value [ 196.280283][ T6615] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 196.288255][ T6615] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 196.288283][ T6615] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 196.627032][ T6360] syz-executor: attempt to access beyond end of device [ 196.627032][ T6360] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 196.631786][ T6360] CPU: 0 UID: 0 PID: 6360 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 196.631810][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 196.631819][ T6360] Call Trace: [ 196.631826][ T6360] [ 196.631833][ T6360] dump_stack_lvl+0xe8/0x150 [ 196.631858][ T6360] f2fs_stop_checkpoint+0x383/0x540 [ 196.631885][ T6360] f2fs_write_end_io+0x1274/0x1740 [ 196.631919][ T6360] __submit_merged_bio+0x256/0x6a0 [ 196.631947][ T6360] __submit_merged_write_cond+0x3c9/0x4e0 [ 196.631977][ T6360] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 196.632016][ T6360] f2fs_write_data_pages+0x287e/0x34f0 [ 196.632073][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 196.632138][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 196.632164][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 196.632201][ T6360] ? do_raw_spin_lock+0x12b/0x2f0 [ 196.632229][ T6360] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 196.632248][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 196.632260][ T6360] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 196.632272][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 196.632287][ T6360] do_writepages+0x32e/0x550 [ 196.632301][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 196.632311][ T6360] ? rt_spin_unlock+0x14f/0x200 [ 196.632325][ T6360] filemap_fdatawrite+0x1ec/0x2f0 [ 196.632341][ T6360] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 196.632353][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 196.632391][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 196.632405][ T6360] ? rt_spin_unlock+0x160/0x200 [ 196.632415][ T6360] f2fs_sync_dirty_inodes+0x30e/0x830 [ 196.632432][ T6360] f2fs_write_checkpoint+0x9df/0x26a0 [ 196.632441][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 196.632468][ T6360] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 196.632503][ T6360] kill_f2fs_super+0x314/0x730 [ 196.632521][ T6360] ? __pfx_kill_f2fs_super+0x10/0x10 [ 196.632542][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 196.632559][ T6360] deactivate_locked_super+0xbc/0x130 [ 196.632571][ T6360] cleanup_mnt+0x437/0x4d0 [ 196.632583][ T6360] ? _raw_spin_unlock_irq+0x23/0x50 [ 196.632596][ T6360] task_work_run+0x1d9/0x270 [ 196.632613][ T6360] ? __pfx_task_work_run+0x10/0x10 [ 196.632632][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.632643][ T6360] exit_to_user_mode_loop+0xed/0x480 [ 196.632655][ T6360] ? rcu_is_watching+0x15/0xb0 [ 196.632670][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.632680][ T6360] do_syscall_64+0x33e/0xf80 [ 196.632692][ T6360] ? trace_irq_disable+0x3b/0x140 [ 196.632703][ T6360] ? clear_bhb_loop+0x40/0x90 [ 196.632715][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.632725][ T6360] RIP: 0033:0x7f032995da57 [ 196.632736][ T6360] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 196.632744][ T6360] RSP: 002b:00007fff60c0d788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 196.632755][ T6360] RAX: 0000000000000000 RBX: 00007f03299f2048 RCX: 00007f032995da57 [ 196.632762][ T6360] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff60c0d840 [ 196.632767][ T6360] RBP: 00007fff60c0d840 R08: 00007fff60c0e840 R09: 00000000ffffffff [ 196.632774][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff60c0e8d0 [ 196.632779][ T6360] R13: 00007f03299f2048 R14: 000000000002fdcc R15: 00007fff60c0e910 [ 196.632795][ T6360] [ 196.633093][ T6360] F2FS-fs (loop0): Remounting filesystem read-only [ 197.323525][ T6621] loop0: detected capacity change from 0 to 32768 [ 197.366401][ T6621] Bad index:0 in slot in dtroot [ 197.366401][ T6621] [ 197.366418][ T6621] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 197.366418][ T6621] [ 197.367083][ T6621] ERROR: (device loop0): remounting filesystem as read-only [ 197.695057][ T6621] loop0: detected capacity change from 0 to 40427 [ 197.696116][ T6621] F2FS-fs: heap/no_heap options were deprecated [ 197.699735][ T6621] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 197.699756][ T6621] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 197.700990][ T6621] F2FS-fs (loop0): invalid crc value [ 197.816462][ T6621] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 197.852397][ T6621] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 197.852426][ T6621] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 2026/05/08 14:48:27 executed programs: 21 [ 198.185821][ T6360] syz-executor: attempt to access beyond end of device [ 198.185821][ T6360] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 198.191627][ T6360] CPU: 0 UID: 0 PID: 6360 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 198.191652][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 198.191661][ T6360] Call Trace: [ 198.191668][ T6360] [ 198.191676][ T6360] dump_stack_lvl+0xe8/0x150 [ 198.191702][ T6360] f2fs_stop_checkpoint+0x383/0x540 [ 198.191728][ T6360] f2fs_write_end_io+0x1274/0x1740 [ 198.191762][ T6360] __submit_merged_bio+0x256/0x6a0 [ 198.191790][ T6360] __submit_merged_write_cond+0x3c9/0x4e0 [ 198.191819][ T6360] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 198.191859][ T6360] f2fs_write_data_pages+0x287e/0x34f0 [ 198.191913][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 198.191979][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 198.192004][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 198.192044][ T6360] ? do_raw_spin_lock+0x12b/0x2f0 [ 198.192074][ T6360] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 198.192093][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 198.192111][ T6360] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 198.192127][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 198.192141][ T6360] do_writepages+0x32e/0x550 [ 198.192156][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 198.192166][ T6360] ? rt_spin_unlock+0x14f/0x200 [ 198.192181][ T6360] filemap_fdatawrite+0x1ec/0x2f0 [ 198.192197][ T6360] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 198.192209][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 198.192239][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 198.192252][ T6360] ? rt_spin_unlock+0x160/0x200 [ 198.192262][ T6360] f2fs_sync_dirty_inodes+0x30e/0x830 [ 198.192287][ T6360] f2fs_write_checkpoint+0x9df/0x26a0 [ 198.192296][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 198.192323][ T6360] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 198.192358][ T6360] kill_f2fs_super+0x314/0x730 [ 198.192375][ T6360] ? __pfx_kill_f2fs_super+0x10/0x10 [ 198.192396][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 198.192414][ T6360] deactivate_locked_super+0xbc/0x130 [ 198.192426][ T6360] cleanup_mnt+0x437/0x4d0 [ 198.192437][ T6360] ? _raw_spin_unlock_irq+0x23/0x50 [ 198.192450][ T6360] task_work_run+0x1d9/0x270 [ 198.192467][ T6360] ? __pfx_task_work_run+0x10/0x10 [ 198.192484][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.192495][ T6360] exit_to_user_mode_loop+0xed/0x480 [ 198.192507][ T6360] ? rcu_is_watching+0x15/0xb0 [ 198.192525][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.192542][ T6360] do_syscall_64+0x33e/0xf80 [ 198.192555][ T6360] ? trace_irq_disable+0x3b/0x140 [ 198.192566][ T6360] ? clear_bhb_loop+0x40/0x90 [ 198.192579][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.192589][ T6360] RIP: 0033:0x7f032995da57 [ 198.192600][ T6360] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 198.192608][ T6360] RSP: 002b:00007fff60c0d788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 198.192619][ T6360] RAX: 0000000000000000 RBX: 00007f03299f2048 RCX: 00007f032995da57 [ 198.192626][ T6360] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff60c0d840 [ 198.192632][ T6360] RBP: 00007fff60c0d840 R08: 00007fff60c0e840 R09: 00000000ffffffff [ 198.192638][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff60c0e8d0 [ 198.192644][ T6360] R13: 00007f03299f2048 R14: 00000000000303ef R15: 00007fff60c0e910 [ 198.192659][ T6360] [ 198.193681][ T6360] F2FS-fs (loop0): Remounting filesystem read-only [ 198.780949][ T6627] loop0: detected capacity change from 0 to 32768 [ 198.803259][ T6627] Bad index:0 in slot in dtroot [ 198.803259][ T6627] [ 198.803391][ T6627] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 198.803391][ T6627] [ 198.803688][ T6627] ERROR: (device loop0): remounting filesystem as read-only [ 199.133250][ T6627] loop0: detected capacity change from 0 to 40427 [ 199.135230][ T6627] F2FS-fs: heap/no_heap options were deprecated [ 199.137986][ T6627] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 199.138009][ T6627] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 199.139403][ T6627] F2FS-fs (loop0): invalid crc value [ 199.269351][ T6627] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 199.290869][ T6627] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 199.290897][ T6627] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 199.657847][ T6360] syz-executor: attempt to access beyond end of device [ 199.657847][ T6360] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 199.662207][ T6360] CPU: 0 UID: 0 PID: 6360 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 199.662232][ T6360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.662242][ T6360] Call Trace: [ 199.662248][ T6360] [ 199.662256][ T6360] dump_stack_lvl+0xe8/0x150 [ 199.662281][ T6360] f2fs_stop_checkpoint+0x383/0x540 [ 199.662308][ T6360] f2fs_write_end_io+0x1274/0x1740 [ 199.662341][ T6360] __submit_merged_bio+0x256/0x6a0 [ 199.662369][ T6360] __submit_merged_write_cond+0x3c9/0x4e0 [ 199.662399][ T6360] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 199.662437][ T6360] f2fs_write_data_pages+0x287e/0x34f0 [ 199.662459][ T6360] ? trace_sched_set_need_resched_tp+0x3e/0x150 [ 199.662513][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 199.662535][ T6360] ? sched_balance_rq+0x4dfe/0x5830 [ 199.662598][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 199.662622][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 199.662657][ T6360] ? do_raw_spin_lock+0x12b/0x2f0 [ 199.662682][ T6360] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 199.662695][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 199.662707][ T6360] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 199.662719][ T6360] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 199.662734][ T6360] do_writepages+0x32e/0x550 [ 199.662749][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 199.662759][ T6360] ? rt_spin_unlock+0x14f/0x200 [ 199.662773][ T6360] filemap_fdatawrite+0x1ec/0x2f0 [ 199.662789][ T6360] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 199.662801][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 199.662831][ T6360] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 199.662844][ T6360] ? rt_spin_unlock+0x160/0x200 [ 199.662854][ T6360] f2fs_sync_dirty_inodes+0x30e/0x830 [ 199.662871][ T6360] f2fs_write_checkpoint+0x9df/0x26a0 [ 199.662881][ T6360] ? __lock_acquire+0x6b5/0x2cf0 [ 199.662908][ T6360] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 199.662942][ T6360] kill_f2fs_super+0x314/0x730 [ 199.662960][ T6360] ? __pfx_kill_f2fs_super+0x10/0x10 [ 199.662981][ T6360] ? lockdep_hardirqs_on+0x7a/0x110 [ 199.662998][ T6360] deactivate_locked_super+0xbc/0x130 [ 199.663010][ T6360] cleanup_mnt+0x437/0x4d0 [ 199.663021][ T6360] ? _raw_spin_unlock_irq+0x23/0x50 [ 199.663034][ T6360] task_work_run+0x1d9/0x270 [ 199.663051][ T6360] ? __pfx_task_work_run+0x10/0x10 [ 199.663067][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.663078][ T6360] exit_to_user_mode_loop+0xed/0x480 [ 199.663090][ T6360] ? rcu_is_watching+0x15/0xb0 [ 199.663105][ T6360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.663115][ T6360] do_syscall_64+0x33e/0xf80 [ 199.663127][ T6360] ? trace_irq_disable+0x3b/0x140 [ 199.663138][ T6360] ? clear_bhb_loop+0x40/0x90 [ 199.663151][ T6360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.663161][ T6360] RIP: 0033:0x7f032995da57 [ 199.663171][ T6360] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 199.663179][ T6360] RSP: 002b:00007fff60c0d788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 199.663191][ T6360] RAX: 0000000000000000 RBX: 00007f03299f2048 RCX: 00007f032995da57 [ 199.663204][ T6360] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff60c0d840 [ 199.663209][ T6360] RBP: 00007fff60c0d840 R08: 00007fff60c0e840 R09: 00000000ffffffff [ 199.663216][ T6360] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff60c0e8d0 [ 199.663221][ T6360] R13: 00007f03299f2048 R14: 0000000000030ab9 R15: 00007fff60c0e910 [ 199.663237][ T6360] [ 199.684833][ T6360] F2FS-fs (loop0): Remounting filesystem read-only [ 200.238655][ T6633] loop0: detected capacity change from 0 to 32768 [ 200.264472][ T6633] Bad index:0 in slot in dtroot [ 200.264472][ T6633] [ 200.264487][ T6633] ERROR: (device loop0): copy_from_dinode: Corrupt dtroot [ 200.264487][ T6633] [ 200.264797][ T6633] ERROR: (device loop0): remounting filesystem as read-only [ 200.271437][ C0] ================================================================== [ 200.271453][ C0] BUG: KASAN: slab-use-after-free in lbmIODone+0x1312/0x16c0 [ 200.271485][ C0] Read of size 4 at addr ffff88802ac55608 by task ksoftirqd/0/15 [ 200.271502][ C0] [ 200.271524][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 200.271547][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 200.271558][ C0] Call Trace: [ 200.271566][ C0] [ 200.271574][ C0] dump_stack_lvl+0xe8/0x150 [ 200.271598][ C0] print_address_description+0x55/0x1e0 [ 200.271620][ C0] ? lbmIODone+0x1312/0x16c0 [ 200.271641][ C0] print_report+0x58/0x70 [ 200.271660][ C0] kasan_report+0x117/0x150 [ 200.271682][ C0] ? lbmIODone+0x1312/0x16c0 [ 200.271708][ C0] lbmIODone+0x1312/0x16c0 [ 200.271732][ C0] ? blkg_put+0x22/0x240 [ 200.271750][ C0] ? blkg_put+0x22/0x240 [ 200.271767][ C0] ? blkg_put+0x18d/0x240 [ 200.271784][ C0] ? bio_endio+0x989/0x9d0 [ 200.271808][ C0] blk_update_request+0x57e/0xe60 [ 200.271835][ C0] blk_mq_end_request+0x3e/0x70 [ 200.271856][ C0] blk_done_softirq+0x10a/0x160 [ 200.271876][ C0] handle_s[ 200.271876][ C0] handle_softirqs+0x1de/0x6d0 [ 200.271895][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 200.271910][ C0] run_ksoftirqd+0x52/0x180 [ 200.271926][ C0] smpboot_thread_fn+0x541/0xa50 [ 200.271942][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 200.271961][ C0] kthread+0x388/0x470 [ 200.271977][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 200.271992][ C0] ? __pfx_kthread+0x10/0x10 [ 200.272008][ C0] ret_from_fork+0x514/0xb70 [ 200.272023][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 200.272037][ C0] ? __switch_to+0xc79/0x1410 [ 200.272056][ C0] ? __pfx_kthread+0x10/0x10 [ 200.272079][ C0] ret_from_fork_asm+0x1a/0x30 [ 200.272100][ C0] [ 200.272109][ C0] [ 200.272118][ C0] Allocated by task 6633: [ 200.272125][ C0] kasan_save_track+0x3e/0x80 [ 200.272137][ C0] __kasan_kmalloc+0x93/0xb0 [ 200.272148][ C0] __kmalloc_cache_noprof+0x3a6/0x690 [ 200.272161][ C0] lmLogInit+0x3e5/0x1a00 [ 200.272175][ C0] lmLogOpen+0x4e1/0xfa0 [ 200.272187][ C0] jfs_mount_rw+0xee/0x670 [ 200.272201][ C0] jfs_fill_super+0x754/0xd80 [ 200.272211][ C0] get_tree_bdev_flags+0x431/0x4f0 [ 200.272227][ C0] vfs_get_tree+0x92/0x2a0 [ 200.272239][ C0] do_new_mount+0x341/0xd30 [ 200.272255][ C0] __se_sys_mount+0x31d/0x420 [ 200.272270][ C0] do_syscall_64+0x15f/0xf80 [ 200.272285][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.272297][ C0] [ 200.272300][ C0] Freed by task 6633: [ 200.272306][ C0] kasan_save_track+0x3e/0x80 [ 200.272318][ C0] kasan_save_free_info+0x46/0x50 [ 200.272334][ C0] __kasan_slab_free+0x5c/0x80 [ 200.272346][ C0] kfree+0x1c5/0x6c0 [ 200.272356][ C0] lmLogShutdown+0x456/0x850 [ 200.272371][ C0] lmLogClose+0x28a/0x520 [ 200.272385][ C0] jfs_umount+0x2fb/0x3d0 [ 200.272398][ C0] jfs_fill_super+0x9c5/0xd80 [ 200.272409][ C0] get_tree_bdev_flags+0x431/0x4f0 [ 200.272422][ C0] vfs_get_tree+0x92/0x2a0 [ 200.272435][ C0] do_new_mount+0x341/0xd30 [ 200.272451][ C0] __se_sys_mount+0x31d/0x420 [ 200.272466][ C0] do_syscall_64+0x15f/0xf80 [ 200.272479][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.272490][ C0] [ 200.272493][ C0] The buggy address belongs to the object at ffff88802ac55600 [ 200.272493][ C0] which belongs to the cache kmalloc-256 of size 256 [ 200.272506][ C0] The buggy address is located 8 bytes inside of [ 200.272506][ C0] freed 256-byte region [ffff88802ac55600, ffff88802ac55700) [ 200.272521][ C0] [ 200.272524][ C0] The buggy address belongs to the physical page: [ 200.272540][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ac54 [ 200.272554][ C0] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 200.272567][ C0] flags: 0x80000000000040(head|node=0|zone=1) [ 200.272582][ C0] page_type: f5(slab) [ 200.272595][ C0] raw: 0080000000000040 ffff88801a010b40 dead000000000100 dead000000000122 [ 200.272605][ C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 200.272616][ C0] head: 0080000000000040 ffff88801a010b40 dead000000000100 dead000000000122 [ 200.272626][ C0] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 200.272637][ C0] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 200.272647][ C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002 [ 200.272653][ C0] page dumped because: kasan: bad access detected [ 200.272666][ C0] page_owner tracks the page as allocated [ 200.272671][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 12122175586, free_ts 0 [ 200.272695][ C0] post_alloc_hook+0x231/0x280 [ 200.272710][ C0] get_page_from_freelist+0x27c8/0x2840 [ 200.272727][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 200.272743][ C0] allocate_slab+0x77/0x660 [ 200.272758][ C0] refill_objects+0x33c/0x3d0 [ 200.272772][ C0] __pcs_replace_empty_main+0x373/0x720 [ 200.272787][ C0] __kmalloc_cache_noprof+0x44e/0x690 [ 200.272799][ C0] usb_string+0x111/0x7d0 [ 200.272811][ C0] usb_cache_string+0x7d/0xf0 [ 200.272821][ C0] usb_new_device+0x350/0x16e0 [ 200.272837][ C0] register_root_hub+0x270/0x5f0 [ 200.272852][ C0] usb_add_hcd+0xba1/0x10b0 [ 200.272866][ C0] dummy_hcd_probe+0x134/0x270 [ 200.272883][ C0] platform_probe+0xf9/0x190 [ 200.272895][ C0] really_probe+0x267/0xaf0 [ 200.272909][ C0] __driver_probe_device+0x1ef/0x380 [ 200.272922][ C0] page_owner free stack trace missing [ 200.272927][ C0] [ 200.272930][ C0] Memory state around the buggy address: [ 200.272938][ C0] ffff88802ac55500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 200.272946][ C0] ffff88802ac55580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 200.272954][ C0] >ffff88802ac55600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.272961][ C0] ^ [ 200.272968][ C0] ffff88802ac55680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 200.272977][ C0] ffff88802ac55700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 200.272983][ C0] ================================================================== [ 200.422628][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 200.422650][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 200.422673][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 200.422684][ C0] Call Trace: [ 200.422692][ C0] [ 200.422700][ C0] vpanic+0x56c/0xa60 [ 200.422731][ C0] ? __pfx_vpanic+0x10/0x10 [ 200.422752][ C0] ? __pfx___schedule+0x10/0x10 [ 200.422778][ C0] panic+0xc5/0xd0 [ 200.422798][ C0] ? __pfx_panic+0x10/0x10 [ 200.422820][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 200.422850][ C0] ? lbmIODone+0x1312/0x16c0 [ 200.422875][ C0] check_panic_on_warn+0x89/0xb0 [ 200.422901][ C0] ? lbmIODone+0x1312/0x16c0 [ 200.422923][ C0] end_report+0x73/0x170 [ 200.422944][ C0] ? lbmIODone+0x1312/0x16c0 [ 200.422966][ C0] kasan_report+0x128/0x150 [ 200.422988][ C0] ? lbmIODone+0x1312/0x16c0 [ 200.423015][ C0] lbmIODone+0x1312/0x16c0 [ 200.423039][ C0] ? blkg_put+0x22/0x240 [ 200.423057][ C0] ? blkg_put+0x22/0x240 [ 200.423075][ C0] ? blkg_put+0x18d/0x240 [ 200.423092][ C0] ? bio_endio+0x989/0x9d0 [ 200.423115][ C0] blk_update_request+0x57e/0xe60 [ 200.423150][ C0] blk_mq_end_request+0x3e/0x70 [ 200.423172][ C0] blk_done_softirq+0x10a/0x160 [ 200.423193][ C0] handle_softirqs+0x1de/0x6d0 [ 200.423217][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 200.423239][ C0] run_ksoftirqd+0x52/0x180 [ 200.423261][ C0] smpboot_thread_fn+0x541/0xa50 [ 200.423283][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 200.423308][ C0] kthread+0x388/0x470 [ 200.423331][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 200.423353][ C0] ? __pfx_kthread+0x10/0x10 [ 200.423375][ C0] ret_from_fork+0x514/0xb70 [ 200.423396][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 200.423417][ C0] ? __switch_to+0xc79/0x1410 [ 200.423443][ C0] ? __pfx_kthread+0x10/0x10 [ 200.423466][ C0] ret_from_fork_asm+0x1a/0x30 [ 200.423495][ C0] [ 200.424443][ C0] Kernel Offset: disabled