Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts. [ 92.115465][ T10] cfg80211: failed to load regulatory.db 2026/04/26 14:51:02 parsed 1 programs [ 97.194282][ T5600] cgroup: Unknown subsys name 'net' [ 97.419412][ T5600] cgroup: Unknown subsys name 'cpuset' [ 97.470243][ T5600] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 99.459393][ T5600] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 104.980783][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.982512][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.982632][ T5637] bridge_slave_0: entered allmulticast mode [ 104.984941][ T5637] bridge_slave_0: entered promiscuous mode [ 105.025343][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.025442][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.025614][ T5637] bridge_slave_1: entered allmulticast mode [ 105.027682][ T5637] bridge_slave_1: entered promiscuous mode [ 105.115378][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.118278][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.168427][ T5637] team0: Port device team_slave_0 added [ 105.177742][ T5637] team0: Port device team_slave_1 added [ 105.218754][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.218770][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.218789][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.260034][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.260080][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.260171][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.353688][ T5637] hsr_slave_0: entered promiscuous mode [ 105.354679][ T5637] hsr_slave_1: entered promiscuous mode [ 105.764245][ T5637] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.795447][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.797226][ T5637] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.827361][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.839347][ T5637] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.863509][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.866187][ T5637] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.888450][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.042947][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.080998][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.101667][ T1030] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.101832][ T1030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.156146][ T1030] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.156249][ T1030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.632490][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.699167][ T5637] veth0_vlan: entered promiscuous mode [ 106.716552][ T5637] veth1_vlan: entered promiscuous mode [ 106.774796][ T5637] veth0_macvtap: entered promiscuous mode [ 106.779217][ T5637] veth1_macvtap: entered promiscuous mode [ 106.829883][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.839424][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.873039][ T1563] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.876025][ T1563] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.876074][ T1563] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.876113][ T1563] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.534900][ T1030] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.818883][ T1030] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.343193][ T1030] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.144302][ T1030] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.139911][ T1030] bridge_slave_1: left allmulticast mode [ 110.140144][ T1030] bridge_slave_1: left promiscuous mode [ 110.146969][ T1030] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.251821][ T1030] bridge_slave_0: left allmulticast mode [ 110.251858][ T1030] bridge_slave_0: left promiscuous mode [ 110.252106][ T1030] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.980400][ T1030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.060478][ T1030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.103069][ T1030] bond0 (unregistering): Released all slaves [ 111.126139][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1 [ 111.479661][ T1030] hsr_slave_0: left promiscuous mode [ 111.519654][ T1030] hsr_slave_1: left promiscuous mode [ 111.524761][ T1030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.524844][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.581666][ T1030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.581694][ T1030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.701963][ T1030] veth1_macvtap: left promiscuous mode [ 111.703178][ T1030] veth0_macvtap: left promiscuous mode [ 111.703483][ T1030] veth1_vlan: left promiscuous mode [ 111.703827][ T1030] veth0_vlan: left promiscuous mode [ 112.640556][ T1030] team0 (unregistering): Port device team_slave_1 removed [ 112.703535][ T1030] team0 (unregistering): Port device team_slave_0 removed [ 112.918903][ T5259] 8021q: adding VLAN 0 to HW filter on device eth2 [ 113.772961][ T5259] 8021q: adding VLAN 0 to HW filter on device eth3 [ 114.293427][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 114.298237][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 114.313689][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 114.319395][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 114.322568][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.321744][ T5259] 8021q: adding VLAN 0 to HW filter on device eth4 [ 115.747031][ T1550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.747058][ T1550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.849242][ T1550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.849265][ T1550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/26 14:51:25 executed programs: 0 [ 116.808679][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.826813][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.828441][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.846970][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.847813][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.814424][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.814547][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.814652][ T5788] bridge_slave_0: entered allmulticast mode [ 117.816561][ T5788] bridge_slave_0: entered promiscuous mode [ 117.830419][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.830674][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.830826][ T5788] bridge_slave_1: entered allmulticast mode [ 117.833212][ T5788] bridge_slave_1: entered promiscuous mode [ 117.917825][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.926381][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.975241][ T5788] team0: Port device team_slave_0 added [ 117.977788][ T5788] team0: Port device team_slave_1 added [ 118.027737][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.027751][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.027775][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.029373][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.029389][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.029408][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.165423][ T5788] hsr_slave_0: entered promiscuous mode [ 118.166444][ T5788] hsr_slave_1: entered promiscuous mode [ 118.891604][ T4914] Bluetooth: hci0: command tx timeout [ 120.736023][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.768351][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 120.778327][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.806206][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.807781][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 120.869229][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 120.874370][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 120.917880][ T5788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.970775][ T4914] Bluetooth: hci0: command tx timeout [ 121.125413][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.167902][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.212091][ T1030] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.212896][ T1030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.236888][ T1030] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.237108][ T1030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.062659][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.195144][ T5788] veth0_vlan: entered promiscuous mode [ 122.222217][ T5788] veth1_vlan: entered promiscuous mode [ 122.275911][ T5788] veth0_macvtap: entered promiscuous mode [ 122.299380][ T5788] veth1_macvtap: entered promiscuous mode [ 122.358607][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.396962][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.433793][ T1423] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.433849][ T1423] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.433888][ T1423] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.433927][ T1423] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.027242][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.027264][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.049708][ T4914] Bluetooth: hci0: command tx timeout [ 123.181025][ T1030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.181049][ T1030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/26 14:51:32 executed programs: 2 [ 123.922090][ T5913] loop0: detected capacity change from 0 to 40427 [ 124.101998][ T5913] F2FS-fs (loop0): invalid crc value [ 124.444885][ T5913] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 124.471946][ T5913] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 125.129624][ T4914] Bluetooth: hci0: command tx timeout [ 133.064129][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.064626][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.720169][ T5913] F2FS-fs (loop0): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 133.726215][ T5913] syz.0.17: attempt to access beyond end of device [ 133.726215][ T5913] loop0: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 133.727104][ T5913] syz.0.17: attempt to access beyond end of device [ 133.727104][ T5913] loop0: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 133.727225][ T5913] syz.0.17: attempt to access beyond end of device [ 133.727225][ T5913] loop0: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 133.727336][ T5913] syz.0.17: attempt to access beyond end of device [ 133.727336][ T5913] loop0: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 133.727483][ T5913] syz.0.17: attempt to access beyond end of device [ 133.727483][ T5913] loop0: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 133.727593][ T5913] syz.0.17: attempt to access beyond end of device [ 133.727593][ T5913] loop0: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 133.727714][ T5913] syz.0.17: attempt to access beyond end of device [ 133.727714][ T5913] loop0: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 133.727823][ T5913] syz.0.17: attempt to access beyond end of device [ 133.727823][ T5913] loop0: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 133.727933][ T5913] syz.0.17: attempt to access beyond end of device [ 133.727933][ T5913] loop0: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 133.728214][ T5913] syz.0.17: attempt to access beyond end of device [ 133.728214][ T5913] loop0: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 138.468150][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 138.504232][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 138.508421][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 138.537907][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 138.547976][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 138.729604][ T5913] bio_check_eod: 53544 callbacks suppressed [ 138.729627][ T5913] syz.0.17: attempt to access beyond end of device [ 138.729627][ T5913] loop0: rw=0, sector=86296, nr_sectors = 8 limit=40427 [ 138.729757][ T5913] syz.0.17: attempt to access beyond end of device [ 138.729757][ T5913] loop0: rw=0, sector=86304, nr_sectors = 8 limit=40427 [ 138.729878][ T5913] syz.0.17: attempt to access beyond end of device [ 138.729878][ T5913] loop0: rw=0, sector=86312, nr_sectors = 8 limit=40427 [ 138.730005][ T5913] syz.0.17: attempt to access beyond end of device [ 138.730005][ T5913] loop0: rw=0, sector=86320, nr_sectors = 8 limit=40427 [ 138.730128][ T5913] syz.0.17: attempt to access beyond end of device [ 138.730128][ T5913] loop0: rw=0, sector=86328, nr_sectors = 8 limit=40427 [ 138.730250][ T5913] syz.0.17: attempt to access beyond end of device [ 138.730250][ T5913] loop0: rw=0, sector=86336, nr_sectors = 8 limit=40427 [ 138.730375][ T5913] syz.0.17: attempt to access beyond end of device [ 138.730375][ T5913] loop0: rw=0, sector=86344, nr_sectors = 8 limit=40427 [ 138.730500][ T5913] syz.0.17: attempt to access beyond end of device [ 138.730500][ T5913] loop0: rw=0, sector=86352, nr_sectors = 8 limit=40427 [ 138.730625][ T5913] syz.0.17: attempt to access beyond end of device [ 138.730625][ T5913] loop0: rw=0, sector=86360, nr_sectors = 8 limit=40427 [ 138.730752][ T5913] syz.0.17: attempt to access beyond end of device [ 138.730752][ T5913] loop0: rw=0, sector=86368, nr_sectors = 8 limit=40427 [ 139.744314][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.744563][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.744740][ T5955] bridge_slave_0: entered allmulticast mode [ 139.747497][ T5955] bridge_slave_0: entered promiscuous mode [ 139.753944][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.754573][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.755073][ T5955] bridge_slave_1: entered allmulticast mode [ 139.764213][ T5955] bridge_slave_1: entered promiscuous mode [ 139.846307][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.864554][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.919336][ T5955] team0: Port device team_slave_0 added [ 139.929836][ T5955] team0: Port device team_slave_1 added [ 139.986291][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.986310][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.986336][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.988603][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.988618][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.988645][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.182091][ T5955] hsr_slave_0: entered promiscuous mode [ 140.183364][ T5955] hsr_slave_1: entered promiscuous mode [ 140.184436][ T5955] debugfs: 'hsr0' already exists in 'hsr' [ 140.184559][ T5955] Cannot create hsr debugfs directory [ 140.569611][ T59] Bluetooth: hci1: command tx timeout [ 140.956044][ T5955] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 141.011148][ T5955] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 141.012776][ T5955] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 141.079110][ T5955] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 141.087610][ T5955] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 141.162368][ T5955] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 141.165425][ T5955] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 141.204879][ T5955] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 141.392715][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.423989][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.447463][ T1423] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.449039][ T1423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.483104][ T1030] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.483357][ T1030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.222630][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.337024][ T5955] veth0_vlan: entered promiscuous mode [ 142.373222][ T5955] veth1_vlan: entered promiscuous mode [ 142.446588][ T5955] veth0_macvtap: entered promiscuous mode [ 142.471839][ T5955] veth1_macvtap: entered promiscuous mode [ 142.507883][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.540035][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.571614][ T1423] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.573425][ T1423] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.580400][ T1423] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.600621][ T1423] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.659810][ T59] Bluetooth: hci1: command tx timeout [ 143.154251][ T1574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.154274][ T1574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.276545][ T1550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.276568][ T1550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/26 14:51:52 executed programs: 3 [ 143.741630][ T5913] bio_check_eod: 32239 callbacks suppressed [ 143.741652][ T5913] syz.0.17: attempt to access beyond end of device [ 143.741652][ T5913] loop0: rw=524288, sector=88968, nr_sectors = 8 limit=40427 [ 143.741754][ T5913] syz.0.17: attempt to access beyond end of device [ 143.741754][ T5913] loop0: rw=524288, sector=88976, nr_sectors = 8 limit=40427 [ 143.741845][ T5913] syz.0.17: attempt to access beyond end of device [ 143.741845][ T5913] loop0: rw=524288, sector=88984, nr_sectors = 8 limit=40427 [ 143.741938][ T5913] syz.0.17: attempt to access beyond end of device [ 143.741938][ T5913] loop0: rw=524288, sector=88992, nr_sectors = 8 limit=40427 [ 143.742048][ T5913] syz.0.17: attempt to access beyond end of device [ 143.742048][ T5913] loop0: rw=524288, sector=89000, nr_sectors = 8 limit=40427 [ 143.742144][ T5913] syz.0.17: attempt to access beyond end of device [ 143.742144][ T5913] loop0: rw=524288, sector=89008, nr_sectors = 8 limit=40427 [ 143.742239][ T5913] syz.0.17: attempt to access beyond end of device [ 143.742239][ T5913] loop0: rw=524288, sector=89016, nr_sectors = 8 limit=40427 [ 143.742328][ T5913] syz.0.17: attempt to access beyond end of device [ 143.742328][ T5913] loop0: rw=524288, sector=89024, nr_sectors = 8 limit=40427 [ 143.742459][ T5913] syz.0.17: attempt to access beyond end of device [ 143.742459][ T5913] loop0: rw=524288, sector=89032, nr_sectors = 8 limit=40427 [ 143.742562][ T5913] syz.0.17: attempt to access beyond end of device [ 143.742562][ T5913] loop0: rw=524288, sector=89040, nr_sectors = 8 limit=40427 [ 144.217892][ T5989] loop1: detected capacity change from 0 to 40427 [ 144.243477][ T5989] F2FS-fs (loop1): invalid crc value [ 144.635910][ T5989] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 144.688790][ T5989] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 144.729587][ T59] Bluetooth: hci1: command tx timeout [ 146.809525][ T59] Bluetooth: hci1: command tx timeout [ 148.753838][ T5913] bio_check_eod: 32286 callbacks suppressed [ 148.753862][ T5913] syz.0.17: attempt to access beyond end of device [ 148.753862][ T5913] loop0: rw=524288, sector=88088, nr_sectors = 8 limit=40427 [ 148.753992][ T5913] syz.0.17: attempt to access beyond end of device [ 148.753992][ T5913] loop0: rw=524288, sector=88096, nr_sectors = 8 limit=40427 [ 148.754110][ T5913] syz.0.17: attempt to access beyond end of device [ 148.754110][ T5913] loop0: rw=524288, sector=88104, nr_sectors = 8 limit=40427 [ 148.754243][ T5913] syz.0.17: attempt to access beyond end of device [ 148.754243][ T5913] loop0: rw=524288, sector=88112, nr_sectors = 8 limit=40427 [ 148.754367][ T5913] syz.0.17: attempt to access beyond end of device [ 148.754367][ T5913] loop0: rw=524288, sector=88120, nr_sectors = 8 limit=40427 [ 148.754484][ T5913] syz.0.17: attempt to access beyond end of device [ 148.754484][ T5913] loop0: rw=524288, sector=88128, nr_sectors = 8 limit=40427 [ 148.754602][ T5913] syz.0.17: attempt to access beyond end of device [ 148.754602][ T5913] loop0: rw=524288, sector=88136, nr_sectors = 8 limit=40427 [ 148.754803][ T5913] syz.0.17: attempt to access beyond end of device [ 148.754803][ T5913] loop0: rw=524288, sector=88144, nr_sectors = 8 limit=40427 [ 148.754922][ T5913] syz.0.17: attempt to access beyond end of device [ 148.754922][ T5913] loop0: rw=524288, sector=88152, nr_sectors = 8 limit=40427 [ 148.755039][ T5913] syz.0.17: attempt to access beyond end of device [ 148.755039][ T5913] loop0: rw=524288, sector=88160, nr_sectors = 8 limit=40427 [ 153.759667][ T5913] bio_check_eod: 33447 callbacks suppressed [ 153.759691][ T5913] syz.0.17: attempt to access beyond end of device [ 153.759691][ T5913] loop0: rw=524288, sector=88640, nr_sectors = 8 limit=40427 [ 153.759821][ T5913] syz.0.17: attempt to access beyond end of device [ 153.759821][ T5913] loop0: rw=524288, sector=88648, nr_sectors = 8 limit=40427 [ 153.759942][ T5913] syz.0.17: attempt to access beyond end of device [ 153.759942][ T5913] loop0: rw=524288, sector=88656, nr_sectors = 8 limit=40427 [ 153.760065][ T5913] syz.0.17: attempt to access beyond end of device [ 153.760065][ T5913] loop0: rw=524288, sector=88664, nr_sectors = 8 limit=40427 [ 153.760186][ T5913] syz.0.17: attempt to access beyond end of device [ 153.760186][ T5913] loop0: rw=524288, sector=88672, nr_sectors = 8 limit=40427 [ 153.760321][ T5913] syz.0.17: attempt to access beyond end of device [ 153.760321][ T5913] loop0: rw=524288, sector=88680, nr_sectors = 8 limit=40427 [ 153.760443][ T5913] syz.0.17: attempt to access beyond end of device [ 153.760443][ T5913] loop0: rw=524288, sector=88688, nr_sectors = 8 limit=40427 [ 153.760565][ T5913] syz.0.17: attempt to access beyond end of device [ 153.760565][ T5913] loop0: rw=524288, sector=88696, nr_sectors = 8 limit=40427 [ 153.760687][ T5913] syz.0.17: attempt to access beyond end of device [ 153.760687][ T5913] loop0: rw=524288, sector=88704, nr_sectors = 8 limit=40427 [ 153.760850][ T5913] syz.0.17: attempt to access beyond end of device [ 153.760850][ T5913] loop0: rw=524288, sector=88712, nr_sectors = 8 limit=40427 [ 158.716640][ T4914] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.743010][ T4914] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.746526][ T4914] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.768647][ T4914] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.779152][ T5913] bio_check_eod: 33817 callbacks suppressed [ 158.779172][ T5913] syz.0.17: attempt to access beyond end of device [ 158.779172][ T5913] loop0: rw=0, sector=88224, nr_sectors = 8 limit=40427 [ 158.798907][ T5913] syz.0.17: attempt to access beyond end of device [ 158.798907][ T5913] loop0: rw=0, sector=88232, nr_sectors = 8 limit=40427 [ 158.799071][ T5913] syz.0.17: attempt to access beyond end of device [ 158.799071][ T5913] loop0: rw=0, sector=88240, nr_sectors = 8 limit=40427 [ 158.799189][ T5913] syz.0.17: attempt to access beyond end of device [ 158.799189][ T5913] loop0: rw=0, sector=88248, nr_sectors = 8 limit=40427 [ 158.799297][ T5913] syz.0.17: attempt to access beyond end of device [ 158.799297][ T5913] loop0: rw=0, sector=88256, nr_sectors = 8 limit=40427 [ 158.799396][ T5913] syz.0.17: attempt to access beyond end of device [ 158.799396][ T5913] loop0: rw=0, sector=88264, nr_sectors = 8 limit=40427 [ 158.807373][ T4914] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.853807][ T5913] syz.0.17: attempt to access beyond end of device [ 158.853807][ T5913] loop0: rw=0, sector=88272, nr_sectors = 8 limit=40427 [ 158.854176][ T5913] syz.0.17: attempt to access beyond end of device [ 158.854176][ T5913] loop0: rw=0, sector=88280, nr_sectors = 8 limit=40427 [ 158.854549][ T5913] syz.0.17: attempt to access beyond end of device [ 158.854549][ T5913] loop0: rw=0, sector=88288, nr_sectors = 8 limit=40427 [ 158.854875][ T5913] syz.0.17: attempt to access beyond end of device [ 158.854875][ T5913] loop0: rw=0, sector=88296, nr_sectors = 8 limit=40427 [ 159.994299][ T5989] F2FS-fs (loop1): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 160.547463][ T5995] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.547679][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.547904][ T5995] bridge_slave_0: entered allmulticast mode [ 160.557876][ T5995] bridge_slave_0: entered promiscuous mode [ 160.568012][ T5995] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.568614][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.569152][ T5995] bridge_slave_1: entered allmulticast mode [ 160.589252][ T5995] bridge_slave_1: entered promiscuous mode [ 160.682092][ T5995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.686415][ T5995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.754114][ T5995] team0: Port device team_slave_0 added [ 160.758067][ T5995] team0: Port device team_slave_1 added [ 160.823876][ T5995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.823895][ T5995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.823924][ T5995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.828373][ T5995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.828391][ T5995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.828421][ T5995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.969998][ T4914] Bluetooth: hci2: command tx timeout [ 161.265512][ T5995] hsr_slave_0: entered promiscuous mode [ 161.268493][ T5995] hsr_slave_1: entered promiscuous mode [ 161.281145][ T5995] debugfs: 'hsr0' already exists in 'hsr' [ 161.281174][ T5995] Cannot create hsr debugfs directory [ 161.914730][ T5995] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 161.982798][ T5995] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 161.985848][ T5995] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 162.035332][ T5995] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 162.113507][ T5995] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 162.217979][ T5995] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 162.227072][ T5995] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 162.332344][ T5995] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 162.643236][ T5995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.690238][ T5995] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.714823][ T1550] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.717032][ T1550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.816888][ T1550] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.817015][ T1550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.049688][ T4914] Bluetooth: hci2: command tx timeout [ 163.782658][ T5913] bio_check_eod: 38182 callbacks suppressed [ 163.782680][ T5913] syz.0.17: attempt to access beyond end of device [ 163.782680][ T5913] loop0: rw=0, sector=88440, nr_sectors = 8 limit=40427 [ 163.782806][ T5913] syz.0.17: attempt to access beyond end of device [ 163.782806][ T5913] loop0: rw=0, sector=88448, nr_sectors = 8 limit=40427 [ 163.782935][ T5913] syz.0.17: attempt to access beyond end of device [ 163.782935][ T5913] loop0: rw=0, sector=88456, nr_sectors = 8 limit=40427 [ 163.783056][ T5913] syz.0.17: attempt to access beyond end of device [ 163.783056][ T5913] loop0: rw=0, sector=88464, nr_sectors = 8 limit=40427 [ 163.783177][ T5913] syz.0.17: attempt to access beyond end of device [ 163.783177][ T5913] loop0: rw=0, sector=88472, nr_sectors = 8 limit=40427 [ 163.783297][ T5913] syz.0.17: attempt to access beyond end of device [ 163.783297][ T5913] loop0: rw=0, sector=88480, nr_sectors = 8 limit=40427 [ 163.783400][ T5913] syz.0.17: attempt to access beyond end of device [ 163.783400][ T5913] loop0: rw=0, sector=88488, nr_sectors = 8 limit=40427 [ 163.783529][ T5913] syz.0.17: attempt to access beyond end of device [ 163.783529][ T5913] loop0: rw=0, sector=88496, nr_sectors = 8 limit=40427 [ 163.783620][ T5913] syz.0.17: attempt to access beyond end of device [ 163.783620][ T5913] loop0: rw=0, sector=88504, nr_sectors = 8 limit=40427 [ 163.783716][ T5913] syz.0.17: attempt to access beyond end of device [ 163.783716][ T5913] loop0: rw=0, sector=88512, nr_sectors = 8 limit=40427 [ 164.316412][ T5995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.615162][ T5995] veth0_vlan: entered promiscuous mode [ 164.636320][ T5995] veth1_vlan: entered promiscuous mode [ 164.898829][ T5995] veth0_macvtap: entered promiscuous mode [ 164.946537][ T5995] veth1_macvtap: entered promiscuous mode [ 165.056903][ T5995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.129725][ T4914] Bluetooth: hci2: command tx timeout [ 165.194269][ T5995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.264490][ T209] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.264763][ T209] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.264813][ T209] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.264853][ T209] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.052707][ T1423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.052732][ T1423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.205925][ T1423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.205949][ T1423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/26 14:52:15 executed programs: 4 [ 167.209602][ T4914] Bluetooth: hci2: command tx timeout [ 167.657314][ T6032] loop2: detected capacity change from 0 to 40427 [ 167.748610][ T6032] F2FS-fs (loop2): invalid crc value [ 168.175365][ T6032] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 168.256800][ T6032] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 168.791534][ T5989] bio_check_eod: 40197 callbacks suppressed [ 168.791566][ T5989] syz.1.18: attempt to access beyond end of device [ 168.791566][ T5989] loop1: rw=524288, sector=87064, nr_sectors = 8 limit=40427 [ 168.791703][ T5989] syz.1.18: attempt to access beyond end of device [ 168.791703][ T5989] loop1: rw=524288, sector=87072, nr_sectors = 8 limit=40427 [ 168.791828][ T5989] syz.1.18: attempt to access beyond end of device [ 168.791828][ T5989] loop1: rw=524288, sector=87080, nr_sectors = 8 limit=40427 [ 168.791952][ T5989] syz.1.18: attempt to access beyond end of device [ 168.791952][ T5989] loop1: rw=524288, sector=87088, nr_sectors = 8 limit=40427 [ 168.792074][ T5989] syz.1.18: attempt to access beyond end of device [ 168.792074][ T5989] loop1: rw=524288, sector=87096, nr_sectors = 8 limit=40427 [ 168.792208][ T5989] syz.1.18: attempt to access beyond end of device [ 168.792208][ T5989] loop1: rw=524288, sector=87104, nr_sectors = 8 limit=40427 [ 168.792327][ T5989] syz.1.18: attempt to access beyond end of device [ 168.792327][ T5989] loop1: rw=524288, sector=87112, nr_sectors = 8 limit=40427 [ 168.792475][ T5989] syz.1.18: attempt to access beyond end of device [ 168.792475][ T5989] loop1: rw=524288, sector=87120, nr_sectors = 8 limit=40427 [ 168.792603][ T5989] syz.1.18: attempt to access beyond end of device [ 168.792603][ T5989] loop1: rw=524288, sector=87128, nr_sectors = 8 limit=40427 [ 168.792722][ T5989] syz.1.18: attempt to access beyond end of device [ 168.792722][ T5989] loop1: rw=524288, sector=87136, nr_sectors = 8 limit=40427 [ 173.799514][ T5913] bio_check_eod: 45077 callbacks suppressed [ 173.799537][ T5913] syz.0.17: attempt to access beyond end of device [ 173.799537][ T5913] loop0: rw=0, sector=87008, nr_sectors = 8 limit=40427 [ 173.799665][ T5913] syz.0.17: attempt to access beyond end of device [ 173.799665][ T5913] loop0: rw=0, sector=87016, nr_sectors = 8 limit=40427 [ 173.799793][ T5913] syz.0.17: attempt to access beyond end of device [ 173.799793][ T5913] loop0: rw=0, sector=87024, nr_sectors = 8 limit=40427 [ 173.800181][ T5989] syz.1.18: attempt to access beyond end of device [ 173.800181][ T5989] loop1: rw=0, sector=89192, nr_sectors = 8 limit=40427 [ 173.800306][ T5989] syz.1.18: attempt to access beyond end of device [ 173.800306][ T5989] loop1: rw=0, sector=89200, nr_sectors = 8 limit=40427 [ 173.800428][ T5989] syz.1.18: attempt to access beyond end of device [ 173.800428][ T5989] loop1: rw=0, sector=89208, nr_sectors = 8 limit=40427 [ 173.800549][ T5989] syz.1.18: attempt to access beyond end of device [ 173.800549][ T5989] loop1: rw=0, sector=89216, nr_sectors = 8 limit=40427 [ 173.800671][ T5989] syz.1.18: attempt to access beyond end of device [ 173.800671][ T5989] loop1: rw=0, sector=89224, nr_sectors = 8 limit=40427 [ 173.800792][ T5989] syz.1.18: attempt to access beyond end of device [ 173.800792][ T5989] loop1: rw=0, sector=89232, nr_sectors = 8 limit=40427 [ 173.800913][ T5989] syz.1.18: attempt to access beyond end of device [ 173.800913][ T5989] loop1: rw=0, sector=89240, nr_sectors = 8 limit=40427 [ 178.809640][ T5913] bio_check_eod: 47524 callbacks suppressed [ 178.809664][ T5913] syz.0.17: attempt to access beyond end of device [ 178.809664][ T5913] loop0: rw=0, sector=86848, nr_sectors = 8 limit=40427 [ 178.809673][ T5989] syz.1.18: attempt to access beyond end of device [ 178.809673][ T5989] loop1: rw=524288, sector=88608, nr_sectors = 8 limit=40427 [ 178.809798][ T5913] syz.0.17: attempt to access beyond end of device [ 178.809798][ T5913] loop0: rw=0, sector=86856, nr_sectors = 8 limit=40427 [ 178.809804][ T5989] syz.1.18: attempt to access beyond end of device [ 178.809804][ T5989] loop1: rw=524288, sector=88616, nr_sectors = 8 limit=40427 [ 178.809930][ T5989] syz.1.18: attempt to access beyond end of device [ 178.809930][ T5989] loop1: rw=524288, sector=88624, nr_sectors = 8 limit=40427 [ 178.809937][ T5913] syz.0.17: attempt to access beyond end of device [ 178.809937][ T5913] loop0: rw=0, sector=86864, nr_sectors = 8 limit=40427 [ 178.810056][ T5989] syz.1.18: attempt to access beyond end of device [ 178.810056][ T5989] loop1: rw=524288, sector=88632, nr_sectors = 8 limit=40427 [ 178.810067][ T5913] syz.0.17: attempt to access beyond end of device [ 178.810067][ T5913] loop0: rw=0, sector=86872, nr_sectors = 8 limit=40427 [ 178.810191][ T5989] syz.1.18: attempt to access beyond end of device [ 178.810191][ T5989] loop1: rw=524288, sector=88640, nr_sectors = 8 limit=40427 [ 178.810204][ T5913] syz.0.17: attempt to access beyond end of device [ 178.810204][ T5913] loop0: rw=0, sector=86880, nr_sectors = 8 limit=40427 [ 181.927673][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 181.966409][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 181.983808][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 182.009052][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 182.012630][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 183.819675][ T5913] bio_check_eod: 37416 callbacks suppressed [ 183.819699][ T5913] syz.0.17: attempt to access beyond end of device [ 183.819699][ T5913] loop0: rw=524288, sector=87552, nr_sectors = 8 limit=40427 [ 183.819828][ T5913] syz.0.17: attempt to access beyond end of device [ 183.819828][ T5913] loop0: rw=524288, sector=87560, nr_sectors = 8 limit=40427 [ 183.819981][ T5989] syz.1.18: attempt to access beyond end of device [ 183.819981][ T5989] loop1: rw=0, sector=88784, nr_sectors = 8 limit=40427 [ 183.820117][ T5989] syz.1.18: attempt to access beyond end of device [ 183.820117][ T5989] loop1: rw=0, sector=88792, nr_sectors = 8 limit=40427 [ 183.820243][ T5989] syz.1.18: attempt to access beyond end of device [ 183.820243][ T5989] loop1: rw=0, sector=88800, nr_sectors = 8 limit=40427 [ 183.820321][ T5913] syz.0.17: attempt to access beyond end of device [ 183.820321][ T5913] loop0: rw=524288, sector=87568, nr_sectors = 8 limit=40427 [ 183.820408][ T5989] syz.1.18: attempt to access beyond end of device [ 183.820408][ T5989] loop1: rw=0, sector=88808, nr_sectors = 8 limit=40427 [ 183.820456][ T5913] syz.0.17: attempt to access beyond end of device [ 183.820456][ T5913] loop0: rw=524288, sector=87576, nr_sectors = 8 limit=40427 [ 183.820536][ T5989] syz.1.18: attempt to access beyond end of device [ 183.820536][ T5989] loop1: rw=0, sector=88816, nr_sectors = 8 limit=40427 [ 183.820581][ T5913] syz.0.17: attempt to access beyond end of device [ 183.820581][ T5913] loop0: rw=524288, sector=87584, nr_sectors = 8 limit=40427 [ 184.099711][ T4914] Bluetooth: hci3: command tx timeout [ 185.087233][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.087449][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.087668][ T6038] bridge_slave_0: entered allmulticast mode [ 185.094007][ T6038] bridge_slave_0: entered promiscuous mode [ 185.123295][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.123518][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.123736][ T6038] bridge_slave_1: entered allmulticast mode [ 185.205074][ T6038] bridge_slave_1: entered promiscuous mode [ 185.316510][ T6038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.332380][ T6038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.386515][ T6038] team0: Port device team_slave_0 added [ 185.402077][ T6038] team0: Port device team_slave_1 added [ 185.450174][ T6038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.450192][ T6038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.450229][ T6038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.452628][ T6038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.452642][ T6038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 185.452670][ T6038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.724411][ T6038] hsr_slave_0: entered promiscuous mode [ 185.727360][ T6038] hsr_slave_1: entered promiscuous mode [ 185.728315][ T6038] debugfs: 'hsr0' already exists in 'hsr' [ 185.728341][ T6038] Cannot create hsr debugfs directory [ 186.184047][ T4914] Bluetooth: hci3: command tx timeout [ 186.614545][ T6038] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 186.684452][ T6038] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 186.686353][ T6038] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 186.764871][ T6038] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 186.766201][ T6038] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 186.839095][ T6038] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 186.862844][ T6038] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 186.926934][ T6038] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 187.409163][ T6038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.528586][ T6038] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.584656][ T1563] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.584797][ T1563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.637259][ T1423] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.656348][ T1423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.249586][ T4914] Bluetooth: hci3: command tx timeout [ 188.829660][ T5989] bio_check_eod: 32673 callbacks suppressed [ 188.829683][ T5989] syz.1.18: attempt to access beyond end of device [ 188.829683][ T5989] loop1: rw=0, sector=89440, nr_sectors = 8 limit=40427 [ 188.829830][ T5989] syz.1.18: attempt to access beyond end of device [ 188.829830][ T5989] loop1: rw=0, sector=89448, nr_sectors = 8 limit=40427 [ 188.831402][ T5989] syz.1.18: attempt to access beyond end of device [ 188.831402][ T5989] loop1: rw=0, sector=89456, nr_sectors = 8 limit=40427 [ 188.831534][ T5989] syz.1.18: attempt to access beyond end of device [ 188.831534][ T5989] loop1: rw=0, sector=89464, nr_sectors = 8 limit=40427 [ 188.831675][ T5989] syz.1.18: attempt to access beyond end of device [ 188.831675][ T5989] loop1: rw=0, sector=89472, nr_sectors = 8 limit=40427 [ 188.831797][ T5989] syz.1.18: attempt to access beyond end of device [ 188.831797][ T5989] loop1: rw=0, sector=89480, nr_sectors = 8 limit=40427 [ 188.831917][ T5989] syz.1.18: attempt to access beyond end of device [ 188.831917][ T5989] loop1: rw=0, sector=89488, nr_sectors = 8 limit=40427 [ 188.832046][ T5989] syz.1.18: attempt to access beyond end of device [ 188.832046][ T5989] loop1: rw=0, sector=89496, nr_sectors = 8 limit=40427 [ 188.832167][ T5989] syz.1.18: attempt to access beyond end of device [ 188.832167][ T5989] loop1: rw=0, sector=89504, nr_sectors = 8 limit=40427 [ 188.832288][ T5989] syz.1.18: attempt to access beyond end of device [ 188.832288][ T5989] loop1: rw=0, sector=89512, nr_sectors = 8 limit=40427 [ 189.584093][ T6038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.823579][ T6038] veth0_vlan: entered promiscuous mode [ 189.846061][ T6038] veth1_vlan: entered promiscuous mode [ 189.990671][ T6038] veth0_macvtap: entered promiscuous mode [ 190.025381][ T6038] veth1_macvtap: entered promiscuous mode [ 190.135386][ T6038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.247924][ T6038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.298628][ T1574] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.299154][ T1574] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.335652][ T1574] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.339618][ T4914] Bluetooth: hci3: command tx timeout [ 190.372332][ T1574] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.182593][ T1563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.182614][ T1563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.485455][ T209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.485477][ T209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/26 14:52:40 executed programs: 5 [ 193.004973][ T6080] loop3: detected capacity change from 0 to 40427 [ 193.149844][ T6080] F2FS-fs (loop3): invalid crc value [ 193.617991][ T6080] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 193.746246][ T6080] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 193.839541][ T5913] bio_check_eod: 30858 callbacks suppressed [ 193.839563][ T5913] syz.0.17: attempt to access beyond end of device [ 193.839563][ T5913] loop0: rw=0, sector=88568, nr_sectors = 8 limit=40427 [ 193.839706][ T5913] syz.0.17: attempt to access beyond end of device [ 193.839706][ T5913] loop0: rw=0, sector=88576, nr_sectors = 8 limit=40427 [ 193.839834][ T5913] syz.0.17: attempt to access beyond end of device [ 193.839834][ T5913] loop0: rw=0, sector=88584, nr_sectors = 8 limit=40427 [ 193.839959][ T5913] syz.0.17: attempt to access beyond end of device [ 193.839959][ T5913] loop0: rw=0, sector=88592, nr_sectors = 8 limit=40427 [ 193.840095][ T5913] syz.0.17: attempt to access beyond end of device [ 193.840095][ T5913] loop0: rw=0, sector=88600, nr_sectors = 8 limit=40427 [ 193.840221][ T5913] syz.0.17: attempt to access beyond end of device [ 193.840221][ T5913] loop0: rw=0, sector=88608, nr_sectors = 8 limit=40427 [ 193.840333][ T5913] syz.0.17: attempt to access beyond end of device [ 193.840333][ T5913] loop0: rw=0, sector=88616, nr_sectors = 8 limit=40427 [ 193.840444][ T5913] syz.0.17: attempt to access beyond end of device [ 193.840444][ T5913] loop0: rw=0, sector=88624, nr_sectors = 8 limit=40427 [ 193.840580][ T5913] syz.0.17: attempt to access beyond end of device [ 193.840580][ T5913] loop0: rw=0, sector=88632, nr_sectors = 8 limit=40427 [ 193.840743][ T5913] syz.0.17: attempt to access beyond end of device [ 193.840743][ T5913] loop0: rw=0, sector=88640, nr_sectors = 8 limit=40427 [ 194.492542][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.492610][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.542093][ T6032] F2FS-fs (loop2): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 198.849510][ T5913] bio_check_eod: 42630 callbacks suppressed [ 198.849534][ T5913] syz.0.17: attempt to access beyond end of device [ 198.849534][ T5913] loop0: rw=524288, sector=89096, nr_sectors = 8 limit=40427 [ 198.849663][ T5913] syz.0.17: attempt to access beyond end of device [ 198.849663][ T5913] loop0: rw=524288, sector=89104, nr_sectors = 8 limit=40427 [ 198.849786][ T5913] syz.0.17: attempt to access beyond end of device [ 198.849786][ T5913] loop0: rw=524288, sector=89112, nr_sectors = 8 limit=40427 [ 198.849909][ T5913] syz.0.17: attempt to access beyond end of device [ 198.849909][ T5913] loop0: rw=524288, sector=89120, nr_sectors = 8 limit=40427 [ 198.850043][ T5913] syz.0.17: attempt to access beyond end of device [ 198.850043][ T5913] loop0: rw=524288, sector=89128, nr_sectors = 8 limit=40427 [ 198.850162][ T5913] syz.0.17: attempt to access beyond end of device [ 198.850162][ T5913] loop0: rw=524288, sector=89136, nr_sectors = 8 limit=40427 [ 198.850280][ T5913] syz.0.17: attempt to access beyond end of device [ 198.850280][ T5913] loop0: rw=524288, sector=89144, nr_sectors = 8 limit=40427 [ 198.850423][ T5913] syz.0.17: attempt to access beyond end of device [ 198.850423][ T5913] loop0: rw=524288, sector=89152, nr_sectors = 8 limit=40427 [ 198.850541][ T5913] syz.0.17: attempt to access beyond end of device [ 198.850541][ T5913] loop0: rw=524288, sector=89160, nr_sectors = 8 limit=40427 [ 198.850661][ T5913] syz.0.17: attempt to access beyond end of device [ 198.850661][ T5913] loop0: rw=524288, sector=89168, nr_sectors = 8 limit=40427 [ 203.859480][ T5989] bio_check_eod: 51937 callbacks suppressed [ 203.859503][ T5989] syz.1.18: attempt to access beyond end of device [ 203.859503][ T5989] loop1: rw=524288, sector=87024, nr_sectors = 8 limit=40427 [ 203.859632][ T5989] syz.1.18: attempt to access beyond end of device [ 203.859632][ T5989] loop1: rw=524288, sector=87032, nr_sectors = 8 limit=40427 [ 203.859759][ T5989] syz.1.18: attempt to access beyond end of device [ 203.859759][ T5989] loop1: rw=524288, sector=87040, nr_sectors = 8 limit=40427 [ 203.859883][ T5989] syz.1.18: attempt to access beyond end of device [ 203.859883][ T5989] loop1: rw=524288, sector=87048, nr_sectors = 8 limit=40427 [ 203.860019][ T5989] syz.1.18: attempt to access beyond end of device [ 203.860019][ T5989] loop1: rw=524288, sector=87056, nr_sectors = 8 limit=40427 [ 203.860230][ T5989] syz.1.18: attempt to access beyond end of device [ 203.860230][ T5989] loop1: rw=524288, sector=87064, nr_sectors = 8 limit=40427 [ 203.860345][ T5989] syz.1.18: attempt to access beyond end of device [ 203.860345][ T5989] loop1: rw=524288, sector=87072, nr_sectors = 8 limit=40427 [ 203.860457][ T5989] syz.1.18: attempt to access beyond end of device [ 203.860457][ T5989] loop1: rw=524288, sector=87080, nr_sectors = 8 limit=40427 [ 203.860570][ T5989] syz.1.18: attempt to access beyond end of device [ 203.860570][ T5989] loop1: rw=524288, sector=87088, nr_sectors = 8 limit=40427 [ 203.860684][ T5989] syz.1.18: attempt to access beyond end of device [ 203.860684][ T5989] loop1: rw=524288, sector=87096, nr_sectors = 8 limit=40427 [ 207.187611][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.229225][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.232868][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.238440][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.242196][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.869604][ T6032] bio_check_eod: 46811 callbacks suppressed [ 208.869625][ T6032] syz.2.19: attempt to access beyond end of device [ 208.869625][ T6032] loop2: rw=524288, sector=87496, nr_sectors = 8 limit=40427 [ 208.869750][ T6032] syz.2.19: attempt to access beyond end of device [ 208.869750][ T6032] loop2: rw=524288, sector=87504, nr_sectors = 8 limit=40427 [ 208.869873][ T6032] syz.2.19: attempt to access beyond end of device [ 208.869873][ T6032] loop2: rw=524288, sector=87512, nr_sectors = 8 limit=40427 [ 208.870080][ T6032] syz.2.19: attempt to access beyond end of device [ 208.870080][ T6032] loop2: rw=524288, sector=87520, nr_sectors = 8 limit=40427 [ 208.870212][ T6032] syz.2.19: attempt to access beyond end of device [ 208.870212][ T6032] loop2: rw=524288, sector=87528, nr_sectors = 8 limit=40427 [ 208.870329][ T6032] syz.2.19: attempt to access beyond end of device [ 208.870329][ T6032] loop2: rw=524288, sector=87536, nr_sectors = 8 limit=40427 [ 208.870446][ T6032] syz.2.19: attempt to access beyond end of device [ 208.870446][ T6032] loop2: rw=524288, sector=87544, nr_sectors = 8 limit=40427 [ 208.870571][ T6032] syz.2.19: attempt to access beyond end of device [ 208.870571][ T6032] loop2: rw=524288, sector=87552, nr_sectors = 8 limit=40427 [ 208.870683][ T6032] syz.2.19: attempt to access beyond end of device [ 208.870683][ T6032] loop2: rw=524288, sector=87560, nr_sectors = 8 limit=40427 [ 208.870800][ T6032] syz.2.19: attempt to access beyond end of device [ 208.870800][ T6032] loop2: rw=524288, sector=87568, nr_sectors = 8 limit=40427 [ 209.289560][ T59] Bluetooth: hci4: command tx timeout [ 210.192343][ T6086] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.192460][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.192641][ T6086] bridge_slave_0: entered allmulticast mode [ 210.228154][ T6086] bridge_slave_0: entered promiscuous mode [ 210.281298][ T6086] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.281444][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.281770][ T6086] bridge_slave_1: entered allmulticast mode [ 210.298242][ T6086] bridge_slave_1: entered promiscuous mode [ 210.668352][ T6086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.690911][ T6086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.772417][ T6086] team0: Port device team_slave_0 added [ 210.775796][ T6086] team0: Port device team_slave_1 added [ 210.828446][ T6086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.828464][ T6086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.828491][ T6086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.874901][ T6086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.874917][ T6086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.874943][ T6086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.985321][ T6086] hsr_slave_0: entered promiscuous mode [ 210.986640][ T6086] hsr_slave_1: entered promiscuous mode [ 210.987554][ T6086] debugfs: 'hsr0' already exists in 'hsr' [ 210.987595][ T6086] Cannot create hsr debugfs directory [ 211.376238][ T59] Bluetooth: hci4: command tx timeout [ 212.202485][ T6086] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.254071][ T6086] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 212.255704][ T6086] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.326867][ T6086] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 212.342289][ T6086] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 212.373500][ T6086] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.374918][ T6086] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 212.440885][ T6086] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 213.022899][ T6086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.117586][ T6086] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.180732][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.180868][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.241202][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.241329][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.450230][ T59] Bluetooth: hci4: command tx timeout [ 213.880825][ T5913] bio_check_eod: 38162 callbacks suppressed [ 213.880844][ T5913] syz.0.17: attempt to access beyond end of device [ 213.880844][ T5913] loop0: rw=524288, sector=86248, nr_sectors = 8 limit=40427 [ 213.880964][ T5913] syz.0.17: attempt to access beyond end of device [ 213.880964][ T5913] loop0: rw=524288, sector=86256, nr_sectors = 8 limit=40427 [ 213.881068][ T5913] syz.0.17: attempt to access beyond end of device [ 213.881068][ T5913] loop0: rw=524288, sector=86264, nr_sectors = 8 limit=40427 [ 213.881171][ T5913] syz.0.17: attempt to access beyond end of device [ 213.881171][ T5913] loop0: rw=524288, sector=86272, nr_sectors = 8 limit=40427 [ 213.881274][ T5913] syz.0.17: attempt to access beyond end of device [ 213.881274][ T5913] loop0: rw=524288, sector=86280, nr_sectors = 8 limit=40427 [ 213.881378][ T5913] syz.0.17: attempt to access beyond end of device [ 213.881378][ T5913] loop0: rw=524288, sector=86288, nr_sectors = 8 limit=40427 [ 213.881482][ T5913] syz.0.17: attempt to access beyond end of device [ 213.881482][ T5913] loop0: rw=524288, sector=86296, nr_sectors = 8 limit=40427 [ 213.881607][ T5913] syz.0.17: attempt to access beyond end of device [ 213.881607][ T5913] loop0: rw=524288, sector=86304, nr_sectors = 8 limit=40427 [ 213.881710][ T5913] syz.0.17: attempt to access beyond end of device [ 213.881710][ T5913] loop0: rw=524288, sector=86312, nr_sectors = 8 limit=40427 [ 213.881816][ T5913] syz.0.17: attempt to access beyond end of device [ 213.881816][ T5913] loop0: rw=524288, sector=86320, nr_sectors = 8 limit=40427 [ 215.272571][ T6086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.529551][ T59] Bluetooth: hci4: command tx timeout [ 216.387610][ T6086] veth0_vlan: entered promiscuous mode [ 216.486160][ T6086] veth1_vlan: entered promiscuous mode [ 216.644113][ T6086] veth0_macvtap: entered promiscuous mode [ 216.691859][ T6086] veth1_macvtap: entered promiscuous mode [ 216.721823][ T6086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.751007][ T6086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.853658][ T1574] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.854248][ T1574] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.854835][ T1574] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.854873][ T1574] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.682928][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.682951][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.975779][ T1563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.975799][ T1563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/26 14:53:07 executed programs: 6 [ 218.889601][ T5989] bio_check_eod: 38293 callbacks suppressed [ 218.889623][ T5989] syz.1.18: attempt to access beyond end of device [ 218.889623][ T5989] loop1: rw=524288, sector=87144, nr_sectors = 8 limit=40427 [ 218.889750][ T5989] syz.1.18: attempt to access beyond end of device [ 218.889750][ T5989] loop1: rw=524288, sector=87152, nr_sectors = 8 limit=40427 [ 218.889871][ T5989] syz.1.18: attempt to access beyond end of device [ 218.889871][ T5989] loop1: rw=524288, sector=87160, nr_sectors = 8 limit=40427 [ 218.889991][ T5989] syz.1.18: attempt to access beyond end of device [ 218.889991][ T5989] loop1: rw=524288, sector=87168, nr_sectors = 8 limit=40427 [ 218.890142][ T5989] syz.1.18: attempt to access beyond end of device [ 218.890142][ T5989] loop1: rw=524288, sector=87176, nr_sectors = 8 limit=40427 [ 218.890258][ T5989] syz.1.18: attempt to access beyond end of device [ 218.890258][ T5989] loop1: rw=524288, sector=87184, nr_sectors = 8 limit=40427 [ 218.890372][ T5989] syz.1.18: attempt to access beyond end of device [ 218.890372][ T5989] loop1: rw=524288, sector=87192, nr_sectors = 8 limit=40427 [ 218.890494][ T5989] syz.1.18: attempt to access beyond end of device [ 218.890494][ T5989] loop1: rw=524288, sector=87200, nr_sectors = 8 limit=40427 [ 218.890603][ T5989] syz.1.18: attempt to access beyond end of device [ 218.890603][ T5989] loop1: rw=524288, sector=87208, nr_sectors = 8 limit=40427 [ 218.892218][ T6032] syz.2.19: attempt to access beyond end of device [ 218.892218][ T6032] loop2: rw=0, sector=86504, nr_sectors = 8 limit=40427 [ 220.458429][ T6128] loop4: detected capacity change from 0 to 40427 [ 220.542676][ T6128] F2FS-fs (loop4): invalid crc value [ 221.106298][ T6128] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 221.167924][ T6128] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 223.899870][ T5913] bio_check_eod: 40887 callbacks suppressed [ 223.899893][ T5913] syz.0.17: attempt to access beyond end of device [ 223.899893][ T5913] loop0: rw=524288, sector=88280, nr_sectors = 8 limit=40427 [ 223.900044][ T5913] syz.0.17: attempt to access beyond end of device [ 223.900044][ T5913] loop0: rw=524288, sector=88288, nr_sectors = 8 limit=40427 [ 223.900183][ T5913] syz.0.17: attempt to access beyond end of device [ 223.900183][ T5913] loop0: rw=524288, sector=88296, nr_sectors = 8 limit=40427 [ 223.900302][ T5913] syz.0.17: attempt to access beyond end of device [ 223.900302][ T5913] loop0: rw=524288, sector=88304, nr_sectors = 8 limit=40427 [ 223.900451][ T5913] syz.0.17: attempt to access beyond end of device [ 223.900451][ T5913] loop0: rw=524288, sector=88312, nr_sectors = 8 limit=40427 [ 223.900467][ T5989] syz.1.18: attempt to access beyond end of device [ 223.900467][ T5989] loop1: rw=0, sector=89936, nr_sectors = 8 limit=40427 [ 223.900580][ T5913] syz.0.17: attempt to access beyond end of device [ 223.900580][ T5913] loop0: rw=524288, sector=88320, nr_sectors = 8 limit=40427 [ 223.900690][ T5913] syz.0.17: attempt to access beyond end of device [ 223.900690][ T5913] loop0: rw=524288, sector=88328, nr_sectors = 8 limit=40427 [ 223.900811][ T5913] syz.0.17: attempt to access beyond end of device [ 223.900811][ T5913] loop0: rw=524288, sector=88336, nr_sectors = 8 limit=40427 [ 223.900943][ T5913] syz.0.17: attempt to access beyond end of device [ 223.900943][ T5913] loop0: rw=524288, sector=88344, nr_sectors = 8 limit=40427 [ 228.909820][ T5989] bio_check_eod: 43634 callbacks suppressed [ 228.909844][ T5989] syz.1.18: attempt to access beyond end of device [ 228.909844][ T5989] loop1: rw=0, sector=87832, nr_sectors = 8 limit=40427 [ 228.909980][ T5989] syz.1.18: attempt to access beyond end of device [ 228.909980][ T5989] loop1: rw=0, sector=87840, nr_sectors = 8 limit=40427 [ 228.910106][ T5989] syz.1.18: attempt to access beyond end of device [ 228.910106][ T5989] loop1: rw=0, sector=87848, nr_sectors = 8 limit=40427 [ 228.910232][ T5989] syz.1.18: attempt to access beyond end of device [ 228.910232][ T5989] loop1: rw=0, sector=87856, nr_sectors = 8 limit=40427 [ 228.910364][ T5989] syz.1.18: attempt to access beyond end of device [ 228.910364][ T5989] loop1: rw=0, sector=87864, nr_sectors = 8 limit=40427 [ 228.910488][ T5989] syz.1.18: attempt to access beyond end of device [ 228.910488][ T5989] loop1: rw=0, sector=87872, nr_sectors = 8 limit=40427 [ 228.910612][ T5989] syz.1.18: attempt to access beyond end of device [ 228.910612][ T5989] loop1: rw=0, sector=87880, nr_sectors = 8 limit=40427 [ 228.910735][ T5989] syz.1.18: attempt to access beyond end of device [ 228.910735][ T5989] loop1: rw=0, sector=87888, nr_sectors = 8 limit=40427 [ 228.910860][ T5989] syz.1.18: attempt to access beyond end of device [ 228.910860][ T5989] loop1: rw=0, sector=87896, nr_sectors = 8 limit=40427 [ 228.910986][ T5989] syz.1.18: attempt to access beyond end of device [ 228.910986][ T5989] loop1: rw=0, sector=87904, nr_sectors = 8 limit=40427 [ 231.961743][ T6080] F2FS-fs (loop3): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 233.919494][ T6080] bio_check_eod: 46327 callbacks suppressed [ 233.919516][ T6080] syz.3.20: attempt to access beyond end of device [ 233.919516][ T6080] loop3: rw=524288, sector=89784, nr_sectors = 8 limit=40427 [ 233.919640][ T6080] syz.3.20: attempt to access beyond end of device [ 233.919640][ T6080] loop3: rw=524288, sector=89792, nr_sectors = 8 limit=40427 [ 233.919766][ T6080] syz.3.20: attempt to access beyond end of device [ 233.919766][ T6080] loop3: rw=524288, sector=89800, nr_sectors = 8 limit=40427 [ 233.919888][ T6080] syz.3.20: attempt to access beyond end of device [ 233.919888][ T6080] loop3: rw=524288, sector=89808, nr_sectors = 8 limit=40427 [ 233.920019][ T6080] syz.3.20: attempt to access beyond end of device [ 233.920019][ T6080] loop3: rw=524288, sector=89816, nr_sectors = 8 limit=40427 [ 233.920160][ T6080] syz.3.20: attempt to access beyond end of device [ 233.920160][ T6080] loop3: rw=524288, sector=89824, nr_sectors = 8 limit=40427 [ 233.921842][ T6032] syz.2.19: attempt to access beyond end of device [ 233.921842][ T6032] loop2: rw=0, sector=87096, nr_sectors = 8 limit=40427 [ 233.921979][ T6032] syz.2.19: attempt to access beyond end of device [ 233.921979][ T6032] loop2: rw=0, sector=87104, nr_sectors = 8 limit=40427 [ 233.922098][ T6032] syz.2.19: attempt to access beyond end of device [ 233.922098][ T6032] loop2: rw=0, sector=87112, nr_sectors = 8 limit=40427 [ 233.926182][ T6080] syz.3.20: attempt to access beyond end of device [ 233.926182][ T6080] loop3: rw=524288, sector=89832, nr_sectors = 8 limit=40427 [ 234.400061][ T4914] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 234.427665][ T4914] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 234.462332][ T4914] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 234.467516][ T4914] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 234.485436][ T4914] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 236.569488][ T4914] Bluetooth: hci5: command tx timeout [ 237.550730][ T6134] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.552421][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.554794][ T6134] bridge_slave_0: entered allmulticast mode [ 237.588829][ T6134] bridge_slave_0: entered promiscuous mode [ 237.609283][ T6134] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.617870][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.618096][ T6134] bridge_slave_1: entered allmulticast mode [ 237.634617][ T6134] bridge_slave_1: entered promiscuous mode [ 237.917410][ T6134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.023743][ T6134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.326489][ T6134] team0: Port device team_slave_0 added [ 238.355847][ T6134] team0: Port device team_slave_1 added [ 238.649638][ T4914] Bluetooth: hci5: command tx timeout [ 238.698869][ T6134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.698886][ T6134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.698921][ T6134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.752251][ T6134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.752269][ T6134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.752298][ T6134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.929626][ T6032] bio_check_eod: 42377 callbacks suppressed [ 238.929648][ T6032] syz.2.19: attempt to access beyond end of device [ 238.929648][ T6032] loop2: rw=0, sector=89528, nr_sectors = 8 limit=40427 [ 238.929778][ T6032] syz.2.19: attempt to access beyond end of device [ 238.929778][ T6032] loop2: rw=0, sector=89536, nr_sectors = 8 limit=40427 [ 238.929923][ T6032] syz.2.19: attempt to access beyond end of device [ 238.929923][ T6032] loop2: rw=0, sector=89544, nr_sectors = 8 limit=40427 [ 238.930072][ T6032] syz.2.19: attempt to access beyond end of device [ 238.930072][ T6032] loop2: rw=0, sector=89552, nr_sectors = 8 limit=40427 [ 238.930197][ T6032] syz.2.19: attempt to access beyond end of device [ 238.930197][ T6032] loop2: rw=0, sector=89560, nr_sectors = 8 limit=40427 [ 238.930326][ T6032] syz.2.19: attempt to access beyond end of device [ 238.930326][ T6032] loop2: rw=0, sector=89568, nr_sectors = 8 limit=40427 [ 238.930459][ T6032] syz.2.19: attempt to access beyond end of device [ 238.930459][ T6032] loop2: rw=0, sector=89576, nr_sectors = 8 limit=40427 [ 238.930625][ T6032] syz.2.19: attempt to access beyond end of device [ 238.930625][ T6032] loop2: rw=0, sector=89584, nr_sectors = 8 limit=40427 [ 238.930749][ T6032] syz.2.19: attempt to access beyond end of device [ 238.930749][ T6032] loop2: rw=0, sector=89592, nr_sectors = 8 limit=40427 [ 238.930873][ T6032] syz.2.19: attempt to access beyond end of device [ 238.930873][ T6032] loop2: rw=0, sector=89600, nr_sectors = 8 limit=40427 [ 239.366599][ T6134] hsr_slave_0: entered promiscuous mode [ 239.378350][ T6134] hsr_slave_1: entered promiscuous mode [ 239.389608][ T6134] debugfs: 'hsr0' already exists in 'hsr' [ 239.389636][ T6134] Cannot create hsr debugfs directory [ 240.731141][ T59] Bluetooth: hci5: command tx timeout [ 241.267656][ T6134] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 241.358446][ T6134] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 241.367862][ T6134] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 241.475465][ T6134] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 241.491139][ T6134] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 241.668023][ T6134] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 241.679757][ T6134] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 241.783515][ T6134] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 242.311377][ T6134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.521493][ T6134] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.571123][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.571250][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.631204][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.631436][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.663650][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 242.810180][ T59] Bluetooth: hci5: command tx timeout [ 243.939573][ T5989] bio_check_eod: 42710 callbacks suppressed [ 243.939602][ T5989] syz.1.18: attempt to access beyond end of device [ 243.939602][ T5989] loop1: rw=524288, sector=89920, nr_sectors = 8 limit=40427 [ 243.939728][ T5989] syz.1.18: attempt to access beyond end of device [ 243.939728][ T5989] loop1: rw=524288, sector=89928, nr_sectors = 8 limit=40427 [ 243.939849][ T5989] syz.1.18: attempt to access beyond end of device [ 243.939849][ T5989] loop1: rw=524288, sector=89936, nr_sectors = 8 limit=40427 [ 243.940021][ T5989] syz.1.18: attempt to access beyond end of device [ 243.940021][ T5989] loop1: rw=0, sector=86016, nr_sectors = 8 limit=40427 [ 243.940156][ T5989] syz.1.18: attempt to access beyond end of device [ 243.940156][ T5989] loop1: rw=0, sector=86024, nr_sectors = 8 limit=40427 [ 243.940328][ T5989] syz.1.18: attempt to access beyond end of device [ 243.940328][ T5989] loop1: rw=0, sector=86032, nr_sectors = 8 limit=40427 [ 243.940448][ T5989] syz.1.18: attempt to access beyond end of device [ 243.940448][ T5989] loop1: rw=0, sector=86040, nr_sectors = 8 limit=40427 [ 243.940568][ T5989] syz.1.18: attempt to access beyond end of device [ 243.940568][ T5989] loop1: rw=0, sector=86048, nr_sectors = 8 limit=40427 [ 243.940695][ T5989] syz.1.18: attempt to access beyond end of device [ 243.940695][ T5989] loop1: rw=0, sector=86056, nr_sectors = 8 limit=40427 [ 243.940813][ T5989] syz.1.18: attempt to access beyond end of device [ 243.940813][ T5989] loop1: rw=0, sector=86064, nr_sectors = 8 limit=40427 [ 245.361164][ T6134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.557065][ T6134] veth0_vlan: entered promiscuous mode [ 246.598953][ T6134] veth1_vlan: entered promiscuous mode [ 246.826148][ T6134] veth0_macvtap: entered promiscuous mode [ 246.857922][ T6134] veth1_macvtap: entered promiscuous mode [ 246.931719][ T6134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.047873][ T6134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.129782][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.136506][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.154204][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.162873][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.430865][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.430887][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.936402][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.936426][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.955063][ T6080] bio_check_eod: 43555 callbacks suppressed [ 248.955081][ T6080] syz.3.20: attempt to access beyond end of device [ 248.955081][ T6080] loop3: rw=524288, sector=86880, nr_sectors = 8 limit=40427 [ 248.955204][ T6080] syz.3.20: attempt to access beyond end of device [ 248.955204][ T6080] loop3: rw=524288, sector=86888, nr_sectors = 8 limit=40427 [ 248.955329][ T6080] syz.3.20: attempt to access beyond end of device [ 248.955329][ T6080] loop3: rw=524288, sector=86896, nr_sectors = 8 limit=40427 [ 248.955446][ T6080] syz.3.20: attempt to access beyond end of device [ 248.955446][ T6080] loop3: rw=524288, sector=86904, nr_sectors = 8 limit=40427 [ 248.955563][ T6080] syz.3.20: attempt to access beyond end of device [ 248.955563][ T6080] loop3: rw=524288, sector=86912, nr_sectors = 8 limit=40427 [ 248.955689][ T6080] syz.3.20: attempt to access beyond end of device [ 248.955689][ T6080] loop3: rw=524288, sector=86920, nr_sectors = 8 limit=40427 [ 248.955798][ T6080] syz.3.20: attempt to access beyond end of device [ 248.955798][ T6080] loop3: rw=524288, sector=86928, nr_sectors = 8 limit=40427 [ 248.955907][ T6080] syz.3.20: attempt to access beyond end of device [ 248.955907][ T6080] loop3: rw=524288, sector=86936, nr_sectors = 8 limit=40427 [ 248.956022][ T6080] syz.3.20: attempt to access beyond end of device [ 248.956022][ T6080] loop3: rw=524288, sector=86944, nr_sectors = 8 limit=40427 [ 248.956125][ T6080] syz.3.20: attempt to access beyond end of device [ 248.956125][ T6080] loop3: rw=524288, sector=86952, nr_sectors = 8 limit=40427 2026/04/26 14:53:39 executed programs: 7 [ 251.996456][ T6178] loop5: detected capacity change from 0 to 40427 [ 252.180276][ T6178] F2FS-fs (loop5): invalid crc value [ 252.696294][ T6178] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 252.843677][ T6178] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 253.959567][ T5913] bio_check_eod: 43745 callbacks suppressed [ 253.959589][ T5913] syz.0.17: attempt to access beyond end of device [ 253.959589][ T5913] loop0: rw=524288, sector=87240, nr_sectors = 8 limit=40427 [ 253.959743][ T5913] syz.0.17: attempt to access beyond end of device [ 253.959743][ T5913] loop0: rw=524288, sector=87248, nr_sectors = 8 limit=40427 [ 253.959866][ T5913] syz.0.17: attempt to access beyond end of device [ 253.959866][ T5913] loop0: rw=524288, sector=87256, nr_sectors = 8 limit=40427 [ 253.959986][ T5913] syz.0.17: attempt to access beyond end of device [ 253.959986][ T5913] loop0: rw=524288, sector=87264, nr_sectors = 8 limit=40427 [ 253.960110][ T5913] syz.0.17: attempt to access beyond end of device [ 253.960110][ T5913] loop0: rw=524288, sector=87272, nr_sectors = 8 limit=40427 [ 253.960235][ T5913] syz.0.17: attempt to access beyond end of device [ 253.960235][ T5913] loop0: rw=524288, sector=87280, nr_sectors = 8 limit=40427 [ 253.960345][ T5913] syz.0.17: attempt to access beyond end of device [ 253.960345][ T5913] loop0: rw=524288, sector=87288, nr_sectors = 8 limit=40427 [ 253.960425][ T6032] syz.2.19: attempt to access beyond end of device [ 253.960425][ T6032] loop2: rw=524288, sector=88120, nr_sectors = 8 limit=40427 [ 253.960456][ T5913] syz.0.17: attempt to access beyond end of device [ 253.960456][ T5913] loop0: rw=524288, sector=87296, nr_sectors = 8 limit=40427 [ 253.960539][ T6032] syz.2.19: attempt to access beyond end of device [ 253.960539][ T6032] loop2: rw=524288, sector=88128, nr_sectors = 8 limit=40427 [ 255.938759][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.938831][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.970364][ T5913] bio_check_eod: 44608 callbacks suppressed [ 258.970387][ T5913] syz.0.17: attempt to access beyond end of device [ 258.970387][ T5913] loop0: rw=524288, sector=89544, nr_sectors = 8 limit=40427 [ 258.970514][ T5913] syz.0.17: attempt to access beyond end of device [ 258.970514][ T5913] loop0: rw=524288, sector=89552, nr_sectors = 8 limit=40427 [ 258.970599][ T5989] syz.1.18: attempt to access beyond end of device [ 258.970599][ T5989] loop1: rw=0, sector=86024, nr_sectors = 8 limit=40427 [ 258.970687][ T5913] syz.0.17: attempt to access beyond end of device [ 258.970687][ T5913] loop0: rw=524288, sector=89560, nr_sectors = 8 limit=40427 [ 258.970733][ T5989] syz.1.18: attempt to access beyond end of device [ 258.970733][ T5989] loop1: rw=0, sector=86032, nr_sectors = 8 limit=40427 [ 258.970820][ T5913] syz.0.17: attempt to access beyond end of device [ 258.970820][ T5913] loop0: rw=524288, sector=89568, nr_sectors = 8 limit=40427 [ 258.970860][ T5989] syz.1.18: attempt to access beyond end of device [ 258.970860][ T5989] loop1: rw=0, sector=86040, nr_sectors = 8 limit=40427 [ 258.970968][ T5913] syz.0.17: attempt to access beyond end of device [ 258.970968][ T5913] loop0: rw=524288, sector=89576, nr_sectors = 8 limit=40427 [ 258.970987][ T5989] syz.1.18: attempt to access beyond end of device [ 258.970987][ T5989] loop1: rw=0, sector=86048, nr_sectors = 8 limit=40427 [ 258.971093][ T5913] syz.0.17: attempt to access beyond end of device [ 258.971093][ T5913] loop0: rw=524288, sector=89584, nr_sectors = 8 limit=40427 [ 263.139747][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 263.979450][ T5913] bio_check_eod: 43258 callbacks suppressed [ 263.979471][ T5913] syz.0.17: attempt to access beyond end of device [ 263.979471][ T5913] loop0: rw=0, sector=86800, nr_sectors = 8 limit=40427 [ 263.979612][ T5913] syz.0.17: attempt to access beyond end of device [ 263.979612][ T5913] loop0: rw=0, sector=86808, nr_sectors = 8 limit=40427 [ 263.979739][ T5913] syz.0.17: attempt to access beyond end of device [ 263.979739][ T5913] loop0: rw=0, sector=86816, nr_sectors = 8 limit=40427 [ 263.979865][ T5913] syz.0.17: attempt to access beyond end of device [ 263.979865][ T5913] loop0: rw=0, sector=86824, nr_sectors = 8 limit=40427 [ 263.979990][ T5913] syz.0.17: attempt to access beyond end of device [ 263.979990][ T5913] loop0: rw=0, sector=86832, nr_sectors = 8 limit=40427 [ 263.980122][ T5913] syz.0.17: attempt to access beyond end of device [ 263.980122][ T5913] loop0: rw=0, sector=86840, nr_sectors = 8 limit=40427 [ 263.981892][ T6032] syz.2.19: attempt to access beyond end of device [ 263.981892][ T6032] loop2: rw=524288, sector=87952, nr_sectors = 8 limit=40427 [ 263.982019][ T6032] syz.2.19: attempt to access beyond end of device [ 263.982019][ T6032] loop2: rw=524288, sector=87960, nr_sectors = 8 limit=40427 [ 263.982157][ T6032] syz.2.19: attempt to access beyond end of device [ 263.982157][ T6032] loop2: rw=524288, sector=87968, nr_sectors = 8 limit=40427 [ 263.982282][ T6032] syz.2.19: attempt to access beyond end of device [ 263.982282][ T6032] loop2: rw=524288, sector=87976, nr_sectors = 8 limit=40427 [ 265.552794][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 265.590353][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 265.593542][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 265.594674][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 265.595602][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 267.689575][ T4914] Bluetooth: hci6: command tx timeout [ 268.990730][ T5913] bio_check_eod: 40092 callbacks suppressed [ 268.990752][ T5913] syz.0.17: attempt to access beyond end of device [ 268.990752][ T5913] loop0: rw=524288, sector=86128, nr_sectors = 8 limit=40427 [ 268.990883][ T5913] syz.0.17: attempt to access beyond end of device [ 268.990883][ T5913] loop0: rw=524288, sector=86136, nr_sectors = 8 limit=40427 [ 268.991027][ T5913] syz.0.17: attempt to access beyond end of device [ 268.991027][ T5913] loop0: rw=524288, sector=86144, nr_sectors = 8 limit=40427 [ 268.991146][ T5913] syz.0.17: attempt to access beyond end of device [ 268.991146][ T5913] loop0: rw=524288, sector=86152, nr_sectors = 8 limit=40427 [ 268.991263][ T5913] syz.0.17: attempt to access beyond end of device [ 268.991263][ T5913] loop0: rw=524288, sector=86160, nr_sectors = 8 limit=40427 [ 268.991380][ T5913] syz.0.17: attempt to access beyond end of device [ 268.991380][ T5913] loop0: rw=524288, sector=86168, nr_sectors = 8 limit=40427 [ 268.991496][ T5913] syz.0.17: attempt to access beyond end of device [ 268.991496][ T5913] loop0: rw=524288, sector=86176, nr_sectors = 8 limit=40427 [ 268.991612][ T5913] syz.0.17: attempt to access beyond end of device [ 268.991612][ T5913] loop0: rw=524288, sector=86184, nr_sectors = 8 limit=40427 [ 268.991727][ T5913] syz.0.17: attempt to access beyond end of device [ 268.991727][ T5913] loop0: rw=524288, sector=86192, nr_sectors = 8 limit=40427 [ 268.991844][ T5913] syz.0.17: attempt to access beyond end of device [ 268.991844][ T5913] loop0: rw=524288, sector=86200, nr_sectors = 8 limit=40427 [ 269.695903][ T6128] F2FS-fs (loop4): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 269.775171][ T4914] Bluetooth: hci6: command tx timeout [ 269.962444][ T6191] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.962627][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.962827][ T6191] bridge_slave_0: entered allmulticast mode [ 269.965570][ T6191] bridge_slave_0: entered promiscuous mode [ 269.971310][ T6191] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.971888][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.972394][ T6191] bridge_slave_1: entered allmulticast mode [ 269.979130][ T6191] bridge_slave_1: entered promiscuous mode [ 270.356787][ T6191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.408068][ T6191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.621481][ T6191] team0: Port device team_slave_0 added [ 270.674236][ T6191] team0: Port device team_slave_1 added [ 270.743348][ T6191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.743366][ T6191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.743395][ T6191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.745644][ T6191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.745659][ T6191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.745686][ T6191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.774386][ T6191] hsr_slave_0: entered promiscuous mode [ 271.786008][ T6191] hsr_slave_1: entered promiscuous mode [ 271.786971][ T6191] debugfs: 'hsr0' already exists in 'hsr' [ 271.786996][ T6191] Cannot create hsr debugfs directory [ 271.849560][ T4914] Bluetooth: hci6: command tx timeout [ 273.929555][ T4914] Bluetooth: hci6: command tx timeout [ 274.001036][ T6128] bio_check_eod: 41885 callbacks suppressed [ 274.001059][ T6128] syz.4.21: attempt to access beyond end of device [ 274.001059][ T6128] loop4: rw=0, sector=89848, nr_sectors = 8 limit=40427 [ 274.001191][ T6128] syz.4.21: attempt to access beyond end of device [ 274.001191][ T6128] loop4: rw=0, sector=89856, nr_sectors = 8 limit=40427 [ 274.001193][ T5913] syz.0.17: attempt to access beyond end of device [ 274.001193][ T5913] loop0: rw=524288, sector=87168, nr_sectors = 8 limit=40427 [ 274.001321][ T6128] syz.4.21: attempt to access beyond end of device [ 274.001321][ T6128] loop4: rw=0, sector=89864, nr_sectors = 8 limit=40427 [ 274.001321][ T5913] syz.0.17: attempt to access beyond end of device [ 274.001321][ T5913] loop0: rw=524288, sector=87176, nr_sectors = 8 limit=40427 [ 274.001457][ T6128] syz.4.21: attempt to access beyond end of device [ 274.001457][ T6128] loop4: rw=0, sector=89872, nr_sectors = 8 limit=40427 [ 274.001462][ T5913] syz.0.17: attempt to access beyond end of device [ 274.001462][ T5913] loop0: rw=524288, sector=87184, nr_sectors = 8 limit=40427 [ 274.001587][ T5913] syz.0.17: attempt to access beyond end of device [ 274.001587][ T5913] loop0: rw=524288, sector=87192, nr_sectors = 8 limit=40427 [ 274.001608][ T6128] syz.4.21: attempt to access beyond end of device [ 274.001608][ T6128] loop4: rw=0, sector=89880, nr_sectors = 8 limit=40427 [ 274.001727][ T5913] syz.0.17: attempt to access beyond end of device [ 274.001727][ T5913] loop0: rw=524288, sector=87200, nr_sectors = 8 limit=40427 [ 275.179479][ T6191] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 275.294531][ T6191] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 275.313145][ T6191] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 275.369549][ T6191] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 275.371097][ T6191] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 275.434654][ T6191] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 275.436841][ T6191] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 275.496916][ T6191] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 276.297879][ T6191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.505976][ T6191] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.567577][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.567706][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.726707][ T1423] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.726874][ T1423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.009487][ T6032] bio_check_eod: 44761 callbacks suppressed [ 279.009508][ T6032] syz.2.19: attempt to access beyond end of device [ 279.009508][ T6032] loop2: rw=524288, sector=86768, nr_sectors = 8 limit=40427 [ 279.009552][ T6080] syz.3.20: attempt to access beyond end of device [ 279.009552][ T6080] loop3: rw=0, sector=89560, nr_sectors = 8 limit=40427 [ 279.009637][ T6032] syz.2.19: attempt to access beyond end of device [ 279.009637][ T6032] loop2: rw=524288, sector=86776, nr_sectors = 8 limit=40427 [ 279.009698][ T6080] syz.3.20: attempt to access beyond end of device [ 279.009698][ T6080] loop3: rw=0, sector=89568, nr_sectors = 8 limit=40427 [ 279.009762][ T6032] syz.2.19: attempt to access beyond end of device [ 279.009762][ T6032] loop2: rw=524288, sector=86784, nr_sectors = 8 limit=40427 [ 279.009828][ T6080] syz.3.20: attempt to access beyond end of device [ 279.009828][ T6080] loop3: rw=0, sector=89576, nr_sectors = 8 limit=40427 [ 279.009886][ T6032] syz.2.19: attempt to access beyond end of device [ 279.009886][ T6032] loop2: rw=524288, sector=86792, nr_sectors = 8 limit=40427 [ 279.009956][ T6080] syz.3.20: attempt to access beyond end of device [ 279.009956][ T6080] loop3: rw=0, sector=89584, nr_sectors = 8 limit=40427 [ 279.010010][ T6032] syz.2.19: attempt to access beyond end of device [ 279.010010][ T6032] loop2: rw=524288, sector=86800, nr_sectors = 8 limit=40427 [ 279.010091][ T6080] syz.3.20: attempt to access beyond end of device [ 279.010091][ T6080] loop3: rw=0, sector=89592, nr_sectors = 8 limit=40427 [ 280.158406][ T6191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.712663][ T6191] veth0_vlan: entered promiscuous mode [ 281.892521][ T6191] veth1_vlan: entered promiscuous mode [ 282.172474][ T6191] veth0_macvtap: entered promiscuous mode [ 282.213899][ T6191] veth1_macvtap: entered promiscuous mode [ 282.333550][ T6191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.417413][ T6191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.537430][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.537652][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.537902][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.592563][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.572905][ T1574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.572926][ T1574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.613957][ T4914] Bluetooth: hci2: command 0x0406 tx timeout [ 284.019486][ T5913] bio_check_eod: 43890 callbacks suppressed [ 284.019508][ T5913] syz.0.17: attempt to access beyond end of device [ 284.019508][ T5913] loop0: rw=0, sector=86752, nr_sectors = 8 limit=40427 [ 284.019655][ T5913] syz.0.17: attempt to access beyond end of device [ 284.019655][ T5913] loop0: rw=0, sector=86760, nr_sectors = 8 limit=40427 [ 284.019777][ T5913] syz.0.17: attempt to access beyond end of device [ 284.019777][ T5913] loop0: rw=0, sector=86768, nr_sectors = 8 limit=40427 [ 284.019905][ T5913] syz.0.17: attempt to access beyond end of device [ 284.019905][ T5913] loop0: rw=0, sector=86776, nr_sectors = 8 limit=40427 [ 284.020041][ T5913] syz.0.17: attempt to access beyond end of device [ 284.020041][ T5913] loop0: rw=0, sector=86784, nr_sectors = 8 limit=40427 [ 284.020165][ T5913] syz.0.17: attempt to access beyond end of device [ 284.020165][ T5913] loop0: rw=0, sector=86792, nr_sectors = 8 limit=40427 [ 284.020271][ T5913] syz.0.17: attempt to access beyond end of device [ 284.020271][ T5913] loop0: rw=0, sector=86800, nr_sectors = 8 limit=40427 [ 284.020375][ T5913] syz.0.17: attempt to access beyond end of device [ 284.020375][ T5913] loop0: rw=0, sector=86808, nr_sectors = 8 limit=40427 [ 284.020469][ T5913] syz.0.17: attempt to access beyond end of device [ 284.020469][ T5913] loop0: rw=0, sector=86816, nr_sectors = 8 limit=40427 [ 284.020562][ T5913] syz.0.17: attempt to access beyond end of device [ 284.020562][ T5913] loop0: rw=0, sector=86824, nr_sectors = 8 limit=40427 [ 284.407033][ T1423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.407054][ T1423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/26 14:54:14 executed programs: 8 [ 287.298593][ T6233] loop6: detected capacity change from 0 to 40427 [ 287.507565][ T6233] F2FS-fs (loop6): invalid crc value [ 288.116311][ T6233] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 289.029482][ T5989] bio_check_eod: 45321 callbacks suppressed [ 289.029503][ T5989] syz.1.18: attempt to access beyond end of device [ 289.029503][ T5989] loop1: rw=524288, sector=89248, nr_sectors = 8 limit=40427 [ 289.029605][ T6128] syz.4.21: attempt to access beyond end of device [ 289.029605][ T6128] loop4: rw=524288, sector=89104, nr_sectors = 8 limit=40427 [ 289.029633][ T5989] syz.1.18: attempt to access beyond end of device [ 289.029633][ T5989] loop1: rw=524288, sector=89256, nr_sectors = 8 limit=40427 [ 289.029733][ T6128] syz.4.21: attempt to access beyond end of device [ 289.029733][ T6128] loop4: rw=524288, sector=89112, nr_sectors = 8 limit=40427 [ 289.029758][ T5989] syz.1.18: attempt to access beyond end of device [ 289.029758][ T5989] loop1: rw=524288, sector=89264, nr_sectors = 8 limit=40427 [ 289.029857][ T6128] syz.4.21: attempt to access beyond end of device [ 289.029857][ T6128] loop4: rw=524288, sector=89120, nr_sectors = 8 limit=40427 [ 289.029881][ T5989] syz.1.18: attempt to access beyond end of device [ 289.029881][ T5989] loop1: rw=524288, sector=89272, nr_sectors = 8 limit=40427 [ 289.029980][ T6128] syz.4.21: attempt to access beyond end of device [ 289.029980][ T6128] loop4: rw=524288, sector=89128, nr_sectors = 8 limit=40427 [ 289.030004][ T5989] syz.1.18: attempt to access beyond end of device [ 289.030004][ T5989] loop1: rw=524288, sector=89280, nr_sectors = 8 limit=40427 [ 289.030115][ T6128] syz.4.21: attempt to access beyond end of device [ 289.030115][ T6128] loop4: rw=524288, sector=89136, nr_sectors = 8 limit=40427 [ 293.051663][ T6238] loop6: detected capacity change from 0 to 40427 [ 293.137016][ T6238] F2FS-fs (loop6): invalid crc value [ 293.808472][ T6238] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 294.041860][ T5913] bio_check_eod: 45512 callbacks suppressed [ 294.041876][ T5913] syz.0.17: attempt to access beyond end of device [ 294.041876][ T5913] loop0: rw=0, sector=87928, nr_sectors = 8 limit=40427 [ 294.041965][ T5913] syz.0.17: attempt to access beyond end of device [ 294.041965][ T5913] loop0: rw=0, sector=87936, nr_sectors = 8 limit=40427 [ 294.042059][ T5913] syz.0.17: attempt to access beyond end of device [ 294.042059][ T5913] loop0: rw=0, sector=87944, nr_sectors = 8 limit=40427 [ 294.042147][ T5913] syz.0.17: attempt to access beyond end of device [ 294.042147][ T5913] loop0: rw=0, sector=87952, nr_sectors = 8 limit=40427 [ 294.042260][ T5913] syz.0.17: attempt to access beyond end of device [ 294.042260][ T5913] loop0: rw=0, sector=87960, nr_sectors = 8 limit=40427 [ 294.042357][ T5913] syz.0.17: attempt to access beyond end of device [ 294.042357][ T5913] loop0: rw=0, sector=87968, nr_sectors = 8 limit=40427 [ 294.042441][ T5913] syz.0.17: attempt to access beyond end of device [ 294.042441][ T5913] loop0: rw=0, sector=87976, nr_sectors = 8 limit=40427 [ 294.042529][ T5913] syz.0.17: attempt to access beyond end of device [ 294.042529][ T5913] loop0: rw=0, sector=87984, nr_sectors = 8 limit=40427 [ 294.042617][ T5913] syz.0.17: attempt to access beyond end of device [ 294.042617][ T5913] loop0: rw=0, sector=87992, nr_sectors = 8 limit=40427 [ 294.042709][ T5913] syz.0.17: attempt to access beyond end of device [ 294.042709][ T5913] loop0: rw=0, sector=88000, nr_sectors = 8 limit=40427 2026/04/26 14:54:23 executed programs: 10 [ 298.164444][ T6243] loop6: detected capacity change from 0 to 40427 [ 298.296120][ T6243] F2FS-fs (loop6): invalid crc value [ 298.897443][ T6243] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 299.049783][ T6032] bio_check_eod: 47680 callbacks suppressed [ 299.049805][ T6032] syz.2.19: attempt to access beyond end of device [ 299.049805][ T6032] loop2: rw=524288, sector=88488, nr_sectors = 8 limit=40427 [ 299.049831][ T5913] syz.0.17: attempt to access beyond end of device [ 299.049831][ T5913] loop0: rw=0, sector=87560, nr_sectors = 8 limit=40427 [ 299.049932][ T6032] syz.2.19: attempt to access beyond end of device [ 299.049932][ T6032] loop2: rw=524288, sector=88496, nr_sectors = 8 limit=40427 [ 299.049970][ T5913] syz.0.17: attempt to access beyond end of device [ 299.049970][ T5913] loop0: rw=0, sector=87568, nr_sectors = 8 limit=40427 [ 299.050058][ T6032] syz.2.19: attempt to access beyond end of device [ 299.050058][ T6032] loop2: rw=524288, sector=88504, nr_sectors = 8 limit=40427 [ 299.050215][ T6032] syz.2.19: attempt to access beyond end of device [ 299.050215][ T6032] loop2: rw=524288, sector=88512, nr_sectors = 8 limit=40427 [ 299.050256][ T5989] syz.1.18: attempt to access beyond end of device [ 299.050256][ T5989] loop1: rw=524288, sector=87608, nr_sectors = 8 limit=40427 [ 299.050337][ T6032] syz.2.19: attempt to access beyond end of device [ 299.050337][ T6032] loop2: rw=524288, sector=88520, nr_sectors = 8 limit=40427 [ 299.050368][ T5989] syz.1.18: attempt to access beyond end of device [ 299.050368][ T5989] loop1: rw=524288, sector=87616, nr_sectors = 8 limit=40427 [ 299.050475][ T5989] syz.1.18: attempt to access beyond end of device [ 299.050475][ T5989] loop1: rw=524288, sector=87624, nr_sectors = 8 limit=40427 [ 302.012975][ T38] INFO: task kworker/u8:8:1030 blocked for more than 143 seconds. [ 302.013012][ T38] Not tainted syzkaller #0 [ 302.013022][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 302.013031][ T38] task:kworker/u8:8 state:D stack:21856 pid:1030 tgid:1030 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 302.013095][ T38] Workqueue: writeback wb_workfn (flush-7:0) [ 302.013147][ T38] Call Trace: [ 302.013154][ T38] [ 302.013166][ T38] __schedule+0x1681/0x54c0 [ 302.013219][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 302.013258][ T38] ? __pfx___schedule+0x10/0x10 [ 302.013285][ T38] ? rcu_preempt_deferred_qs_irqrestore+0x906/0xbc0 [ 302.013329][ T38] rt_mutex_schedule+0x76/0xf0 [ 302.013349][ T38] ? __rt_mutex_slowlock_locked+0x1e0/0x2550 [ 302.013373][ T38] __rt_mutex_slowlock_locked+0x1f28/0x2550 [ 302.013407][ T38] ? __rt_mutex_slowlock_locked+0x1e0/0x2550 [ 302.013439][ T38] ? __pfx___rt_mutex_slowlock_locked+0x10/0x10 [ 302.013477][ T38] ? rcu_is_watching+0x15/0xb0 [ 302.013531][ T38] rt_mutex_slowlock+0xbd/0x170 [ 302.013552][ T38] ? trace_irq_disable+0x3b/0x140 [ 302.013577][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 302.013602][ T38] ? f2fs_down_write_trace+0x3e/0x1d0 [ 302.013632][ T38] rwbase_write_lock+0x14d/0x730 [ 302.013654][ T38] ? lock_acquire+0x221/0x350 [ 302.013686][ T38] f2fs_down_write_trace+0x3e/0x1d0 [ 302.013714][ T38] f2fs_balance_fs+0x612/0x840 [ 302.013742][ T38] ? set_raw_inline+0x28b/0x390 [ 302.013763][ T38] ? f2fs_write_inode+0x3fb/0x5f0 [ 302.013784][ T38] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 302.013808][ T38] ? f2fs_inode_chksum_set+0x13e/0x640 [ 302.013828][ T38] ? f2fs_update_inode+0x13df/0x2620 [ 302.013852][ T38] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 302.013899][ T38] ? folio_unlock+0x101/0x160 [ 302.013932][ T38] ? f2fs_update_inode_page+0x247/0x2e0 [ 302.013955][ T38] ? f2fs_write_inode+0x3b2/0x5f0 [ 302.013982][ T38] f2fs_write_inode+0x3fb/0x5f0 [ 302.014009][ T38] __writeback_single_inode+0x75d/0x10e0 [ 302.014047][ T38] writeback_sb_inodes+0x97f/0x1980 [ 302.014105][ T38] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 302.014168][ T38] ? __pfx_down_read_trylock+0x10/0x10 [ 302.014194][ T38] ? __pfx_move_expired_inodes+0x10/0x10 [ 302.014222][ T38] ? preempt_count_add+0x91/0x190 [ 302.014252][ T38] __writeback_inodes_wb+0x111/0x240 [ 302.014291][ T38] wb_writeback+0x459/0xb00 [ 302.014325][ T38] ? queue_io+0x231/0x440 [ 302.014360][ T38] ? __pfx_wb_writeback+0x10/0x10 [ 302.014426][ T38] wb_workfn+0xb17/0xf20 [ 302.014426][ T38] wb_workfn+0xb17/0xf20 [ 302.014449][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 302.014474][ T38] ? look_up_lock_class+0x57/0x110 [ 302.014529][ T38] ? __pfx_wb_workfn+0x10/0x10 [ 302.014557][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 302.014580][ T38] ? lock_acquire+0x106/0x350 [ 302.014613][ T38] ? process_scheduled_works+0xa70/0x1860 [ 302.014637][ T38] ? process_scheduled_works+0xa70/0x1860 [ 302.014667][ T38] ? process_scheduled_works+0xa70/0x1860 [ 302.014689][ T38] ? process_scheduled_works+0xa70/0x1860 [ 302.014713][ T38] process_scheduled_works+0xb5d/0x1860 [ 302.014766][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 302.014795][ T38] ? assign_work+0x3d5/0x5e0 [ 302.014823][ T38] worker_thread+0xa53/0xfc0 [ 302.014871][ T38] kthread+0x388/0x470 [ 302.014900][ T38] ? __pfx_worker_thread+0x10/0x10 [ 302.014921][ T38] ? __pfx_kthread+0x10/0x10 [ 302.014950][ T38] ret_from_fork+0x514/0xb70 [ 302.014976][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 302.014999][ T38] ? __switch_to+0xc79/0x1410 [ 302.015033][ T38] ? __pfx_kthread+0x10/0x10 [ 302.015062][ T38] ret_from_fork_asm+0x1a/0x30 [ 302.015104][ T38] [ 302.015268][ T38] [ 302.015268][ T38] Showing all locks held in the system: [ 302.015278][ T38] 4 locks held by rcuc/1/28: [ 302.015295][ T38] 1 lock held by khungtaskd/38: [ 302.015305][ T38] #0: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 302.015364][ T38] 4 locks held by kworker/u8:5/68: [ 302.015375][ T38] #0: ffff88801fe87138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 302.015425][ T38] #1: ffffc9000153fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 302.015475][ T38] #2: ffff88801fad20d0 (&type->s_umount_key#56){.+.+}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 302.015534][ T38] #3: ffff8880446f5a98 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x3e/0x1d0 [ 302.015589][ T38] 4 locks held by kworker/u8:7/209: [ 302.015600][ T38] #0: ffff88801fe87138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 302.015649][ T38] #1: ffffc90003a97c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 302.015699][ T38] #2: ffff88803dc2e0d0 (&type->s_umount_key#56){.+.+}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 302.015749][ T38] #3: ffff888032891a98 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x3e/0x1d0 [ 302.015805][ T38] 4 locks held by kworker/u8:8/1030: [ 302.015816][ T38] #0: ffff88801fe87138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 302.015864][ T38] #1: ffffc90004e5fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 302.015913][ T38] #2: ffff8880388020d0 (&type->s_umount_key#56){.+.+}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 302.015965][ T38] #3: ffff88803df29a98 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x3e/0x1d0 [ 302.016021][ T38] 4 locks held by kworker/u8:9/1406: [ 302.016032][ T38] #0: ffff88801fe87138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 302.016080][ T38] #1: ffffc90005b2fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 302.016129][ T38] #2: ffff88804493e0d0 (&type->s_umount_key#56){.+.+}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 302.016181][ T38] #3: ffff88801afd9a98 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x3e/0x1d0 [ 302.016235][ T38] 4 locks held by kworker/u8:11/1550: [ 302.016246][ T38] #0: ffff88801fe87138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 302.016295][ T38] #1: ffffc90005c4fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 302.016344][ T38] #2: ffff88802b5de0d0 (&type->s_umount_key#56){.+.+}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 302.016415][ T38] #3: ffff888057a91a98 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x3e/0x1d0 [ 302.016472][ T38] 4 locks held by kworker/u8:13/1563: [ 302.016484][ T38] #0: ffff88801fe87138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 302.016543][ T38] #1: ffffc90005e8fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 302.016595][ T38] #2: ffff8880251ae0d0 (&type->s_umount_key#56){.+.+}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 302.016649][ T38] #3: ffff88805b74da98 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_down_write_trace+0x3e/0x1d0 [ 302.016718][ T38] 2 locks held by getty/5355: [ 302.016730][ T38] #0: ffff8880368860a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 302.016781][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 302.016842][ T38] 4 locks held by kworker/0:4/5669: [ 302.016856][ T38] 7 locks held by syz.0.17/5913: [ 302.016869][ T38] 5 locks held by syz.1.18/5989: [ 302.016881][ T38] 8 locks held by syz.2.19/6032: [ 302.016894][ T38] 7 locks held by syz.3.20/6080: [ 302.016907][ T38] 5 locks held by syz.4.21/6128: [ 302.016919][ T38] 5 locks held by syz.5.22/6178: [ 302.016931][ T38] 2 locks held by syz.6.26/6248: [ 302.016942][ T38] [ 302.016947][ T38] ============================================= [ 302.016947][ T38] [ 302.016967][ T38] NMI backtrace for cpu 1 [ 302.016992][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 302.017015][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 302.017027][ T38] Call Trace: [ 302.017035][ T38] [ 302.017043][ T38] dump_stack_lvl+0xe8/0x150 [ 302.017070][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 302.017097][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 302.017125][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 302.017156][ T38] sys_info+0x135/0x170 [ 302.017179][ T38] watchdog+0xfd3/0x1030 [ 302.017211][ T38] ? watchdog+0x1c9/0x1030 [ 302.017241][ T38] kthread+0x388/0x470 [ 302.017271][ T38] ? __pfx_watchdog+0x10/0x10 [ 302.017293][ T38] ? __pfx_kthread+0x10/0x10 [ 302.017324][ T38] ret_from_fork+0x514/0xb70 [ 302.017351][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 302.017375][ T38] ? __switch_to+0xc79/0x1410 [ 302.017410][ T38] ? __pfx_kthread+0x10/0x10 [ 302.017439][ T38] ret_from_fork_asm+0x1a/0x30 [ 302.017483][ T38] [ 302.017490][ T38] Sending NMI from CPU 1 to CPUs 0: [ 302.017526][ C0] NMI backtrace for cpu 0 [ 302.017540][ C0] CPU: 0 UID: 0 PID: 6080 Comm: syz.3.20 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 302.017560][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 302.017570][ C0] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 302.017599][ C0] Code: e8 eb 85 72 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 90 a7 8a 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 9c f7 81 00 48 c7 c3 98 6e 6b 92 49 03 1e 48 89 [ 302.017614][ C0] RSP: 0018:ffffc90003fe6618 EFLAGS: 00000246 [ 302.017629][ C0] RAX: 1ffffffff1b154f2 RBX: 0000000000000000 RCX: 0000000080000001 [ 302.017641][ C0] RDX: 00000000f3adae16 RSI: ffffffff8ba74b40 RDI: ffffffff8ba74b00 [ 302.017654][ C0] RBP: dffffc0000000000 R08: ffffffff8176d226 R09: ffffffff8dfc8140 [ 302.017667][ C0] R10: ffffc90003fe6768 R11: fffff520007fccf9 R12: ffffc90003fe67a0 [ 302.017680][ C0] R13: 1ffff920007fcced R14: ffffffff8d8aa790 R15: dffffc0000000000 [ 302.017694][ C0] FS: 000055557fccd500(0000) GS:ffff88812617d000(0000) knlGS:0000000000000000 [ 302.017710][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 302.017721][ C0] CR2: 00007f953ee5c000 CR3: 0000000040b68000 CR4: 00000000003526f0 [ 302.017737][ C0] Call Trace: [ 302.017743][ C0] [ 302.017754][ C0] ? __unwind_start+0xf7/0x760 [ 302.017777][ C0] ? unwind_next_frame+0xa6/0x2550 [ 302.017798][ C0] unwind_next_frame+0xd5/0x2550 [ 302.017825][ C0] ? get_stack_info_noinstr+0x1b/0x130 [ 302.017850][ C0] __unwind_start+0x5b8/0x760 [ 302.017874][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 302.017895][ C0] arch_stack_walk+0xe3/0x150 [ 302.017920][ C0] ? __unwind_start+0xf7/0x760 [ 302.017944][ C0] stack_trace_save+0xa9/0x100 [ 302.017963][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 302.017987][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 302.018010][ C0] kasan_save_track+0x3e/0x80 [ 302.018057][ C0] __kasan_slab_alloc+0x6c/0x80 [ 302.018076][ C0] kmem_cache_alloc_noprof+0x33b/0x680 [ 302.018095][ C0] ? bio_alloc_bioset+0x1c7/0xc90 [ 302.018114][ C0] bio_alloc_bioset+0x1c7/0xc90 [ 302.018135][ C0] f2fs_grab_read_bio+0x248/0x640 [ 302.018163][ C0] f2fs_submit_page_read+0xa9/0x120 [ 302.018188][ C0] f2fs_get_read_data_folio+0x9b9/0xb40 [ 302.018214][ C0] ? __pfx_f2fs_get_read_data_folio+0x10/0x10 [ 302.018237][ C0] ? inode_dio_wait+0x1b6/0x270 [ 302.018258][ C0] ? __pfx_inode_dio_wait+0x10/0x10 [ 302.018280][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 302.018310][ C0] f2fs_get_lock_data_folio+0x54/0x1f0 [ 302.018335][ C0] do_garbage_collect+0x3430/0x6d90 [ 302.018370][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 302.018440][ C0] ? __pfx_do_garbage_collect+0x10/0x10 [ 302.018467][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 302.018492][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 302.018520][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 302.018548][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 302.018575][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 302.018603][ C0] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 302.018629][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 302.018657][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 302.018684][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 302.018714][ C0] f2fs_gc+0xcca/0x24d0 [ 302.018745][ C0] ? __pfx_f2fs_gc+0x10/0x10 [ 302.018798][ C0] f2fs_balance_fs+0x65b/0x840 [ 302.018824][ C0] ? f2fs_map_blocks+0x3842/0x4690 [ 302.018848][ C0] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 302.018872][ C0] ? __pfx_f2fs_get_dnode_of_data+0x10/0x10 [ 302.018897][ C0] ? trace_lock_elapsed_time_end+0xf3/0xbc0 [ 302.018925][ C0] ? restore_priority+0x1af/0x450 [ 302.018952][ C0] f2fs_map_blocks+0x3842/0x4690 [ 302.018976][ C0] ? reacquire_held_locks+0x104/0x190 [ 302.019023][ C0] ? __pfx_f2fs_map_blocks+0x10/0x10 [ 302.019049][ C0] ? trace_lock_elapsed_time_end+0xf3/0xbc0 [ 302.019073][ C0] ? restore_priority+0x1af/0x450 [ 302.019099][ C0] ? f2fs_allocate_pinning_section+0x24f/0x4a0 [ 302.019130][ C0] f2fs_expand_inode_data+0x6c7/0xb20 [ 302.019158][ C0] ? __pfx_f2fs_expand_inode_data+0x10/0x10 [ 302.019181][ C0] ? __pfx_inode_dio_wait+0x10/0x10 [ 302.019204][ C0] ? mnt_put_write_access_file+0xc6/0x100 [ 302.019227][ C0] ? file_update_time_flags+0x406/0x4b0 [ 302.019249][ C0] f2fs_fallocate+0x4e8/0x980 [ 302.019279][ C0] vfs_fallocate+0x672/0x7f0 [ 302.019305][ C0] ? __pfx_vfs_fallocate+0x10/0x10 [ 302.019326][ C0] ? rcu_is_watching+0x15/0xb0 [ 302.019359][ C0] __x64_sys_fallocate+0xc0/0x110 [ 302.019383][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.019403][ C0] do_syscall_64+0x15f/0xf80 [ 302.019419][ C0] ? trace_irq_disable+0x3b/0x140 [ 302.019440][ C0] ? clear_bhb_loop+0x40/0x90 [ 302.019460][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.019478][ C0] RIP: 0033:0x7f9f9066cdd9 [ 302.019501][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.019516][ C0] RSP: 002b:00007fff302edb28 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 302.019534][ C0] RAX: ffffffffffffffda RBX: 00007f9f908e5fa0 RCX: 00007f9f9066cdd9 [ 302.019552][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000004 [ 302.019563][ C0] RBP: 00007f9f90702d69 R08: 0000000000000000 R09: 0000000000000000 [ 302.019574][ C0] R10: 0000000002000402 R11: 0000000000000246 R12: 0000000000000000 [ 302.019586][ C0] R13: 00007f9f908e5fac R14: 00007f9f908e5fa0 R15: 00007f9f908e5fa0 [ 302.019608][ C0] [ 302.252119][ T6248] loop6: detected capacity change from 0 to 40427 [ 302.282069][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 302.282121][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 302.282180][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 302.282211][ T38] Call Trace: [ 302.282231][ T38] [ 302.282258][ T38] vpanic+0x56c/0xa60 [ 302.282331][ T38] ? __pfx___schedule+0x10/0x10 [ 302.282416][ T38] ? __pfx_vpanic+0x10/0x10 [ 302.282469][ T38] panic+0xc5/0xd0 [ 302.282530][ T38] ? __pfx_panic+0x10/0x10 [ 302.282592][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 302.282683][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 302.282754][ T38] watchdog+0x102c/0x1030 [ 302.282851][ T38] ? watchdog+0x1c9/0x1030 [ 302.282922][ T38] kthread+0x388/0x470 [ 302.282993][ T38] ? __pfx_watchdog+0x10/0x10 [ 302.283048][ T38] ? __pfx_kthread+0x10/0x10 [ 302.283118][ T38] ret_from_fork+0x514/0xb70 [ 302.283187][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 302.283255][ T38] ? __switch_to+0xc79/0x1410 [ 302.283374][ T38] ? __pfx_kthread+0x10/0x10 [ 302.283440][ T38] ret_from_fork_asm+0x1a/0x30 [ 302.283535][ T38] [ 302.284158][ T38] Kernel Offset: disabled