Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. 2025/09/26 08:19:06 parsed 1 programs [ 176.924667][ T5862] cgroup: Unknown subsys name 'net' [ 177.167165][ T5862] cgroup: Unknown subsys name 'cpuset' [ 177.223414][ T5862] cgroup: Unknown subsys name 'rlimit' [ 178.882570][ T5862] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 184.218988][ T5907] chnl_net:caif_netlink_parms(): no params data found [ 184.519284][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.520781][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.520940][ T5907] bridge_slave_0: entered allmulticast mode [ 184.522541][ T5907] bridge_slave_0: entered promiscuous mode [ 184.536250][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.536381][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.536535][ T5907] bridge_slave_1: entered allmulticast mode [ 184.539105][ T5907] bridge_slave_1: entered promiscuous mode [ 184.826390][ T5907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.829977][ T5907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.015826][ T5907] team0: Port device team_slave_0 added [ 185.035850][ T5907] team0: Port device team_slave_1 added [ 185.357682][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.357697][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.357717][ T5907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.369889][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.369903][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.369926][ T5907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.572744][ T5907] hsr_slave_0: entered promiscuous mode [ 185.574304][ T5907] hsr_slave_1: entered promiscuous mode [ 185.945798][ T5907] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 185.990894][ T5907] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 186.007684][ T5907] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 186.047123][ T5907] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 186.268920][ T5907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.288906][ T5907] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.297564][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.297754][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.318456][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.318708][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.539254][ T5907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.586348][ T5907] veth0_vlan: entered promiscuous mode [ 186.592027][ T5907] veth1_vlan: entered promiscuous mode [ 186.626988][ T5907] veth0_macvtap: entered promiscuous mode [ 186.630333][ T5907] veth1_macvtap: entered promiscuous mode [ 186.650928][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.667191][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.677143][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.679842][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.680041][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.680093][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.477598][ T1029] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.737122][ T1029] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.956829][ T1029] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.038122][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.038146][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.105445][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.105466][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.547580][ T5154] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.548871][ T5154] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.549560][ T5154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.552496][ T5154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.592787][ T5154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.957714][ T1029] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.204868][ T1029] bridge_slave_1: left allmulticast mode [ 190.204959][ T1029] bridge_slave_1: left promiscuous mode [ 190.206135][ T1029] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.306587][ T1029] bridge_slave_0: left allmulticast mode [ 190.306617][ T1029] bridge_slave_0: left promiscuous mode [ 190.306925][ T1029] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.293355][ T1029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.363533][ T1029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.406861][ T1029] bond0 (unregistering): Released all slaves [ 192.804045][ T1029] hsr_slave_0: left promiscuous mode [ 192.842906][ T1029] hsr_slave_1: left promiscuous mode [ 192.843979][ T1029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.844049][ T1029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.877552][ T1029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.877583][ T1029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.995600][ T1029] veth1_macvtap: left promiscuous mode [ 192.995842][ T1029] veth0_macvtap: left promiscuous mode [ 192.996160][ T1029] veth1_vlan: left promiscuous mode [ 192.996463][ T1029] veth0_vlan: left promiscuous mode [ 194.264676][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.264763][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.043344][ T1029] team0 (unregistering): Port device team_slave_1 removed [ 195.243652][ T1029] team0 (unregistering): Port device team_slave_0 removed 2025/09/26 08:19:29 executed programs: 0 [ 198.065171][ T5154] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 198.066893][ T5154] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 198.068550][ T5154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 198.070970][ T5154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 198.071770][ T5154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.011721][ T6011] chnl_net:caif_netlink_parms(): no params data found [ 199.415162][ T6011] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.415366][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.415517][ T6011] bridge_slave_0: entered allmulticast mode [ 199.418099][ T6011] bridge_slave_0: entered promiscuous mode [ 199.421812][ T6011] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.422022][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.422178][ T6011] bridge_slave_1: entered allmulticast mode [ 199.464967][ T6011] bridge_slave_1: entered promiscuous mode [ 199.666843][ T6011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.669386][ T6011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.069474][ T6011] team0: Port device team_slave_0 added [ 200.096063][ T59] Bluetooth: hci0: command tx timeout [ 200.196303][ T6011] team0: Port device team_slave_1 added [ 200.668351][ T6011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.668365][ T6011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.668383][ T6011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.696749][ T6011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.696771][ T6011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.696794][ T6011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.000373][ T6011] hsr_slave_0: entered promiscuous mode [ 201.001117][ T6011] hsr_slave_1: entered promiscuous mode [ 202.174329][ T59] Bluetooth: hci0: command tx timeout [ 202.939479][ T6011] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 202.979225][ T6011] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 203.018987][ T6011] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 203.057816][ T6011] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 203.225966][ T6011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.256365][ T6011] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.273071][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.273297][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.303779][ T814] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.303938][ T814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.648522][ T6011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.728605][ T6011] veth0_vlan: entered promiscuous mode [ 203.746732][ T6011] veth1_vlan: entered promiscuous mode [ 203.792517][ T6011] veth0_macvtap: entered promiscuous mode [ 203.807084][ T6011] veth1_macvtap: entered promiscuous mode [ 203.834787][ T6011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.852338][ T6011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.870243][ T814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.870477][ T814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.871218][ T814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.871446][ T814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.152307][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.152326][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.209957][ T814] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.209976][ T814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.252813][ T59] Bluetooth: hci0: command tx timeout 2025/09/26 08:19:36 executed programs: 2 [ 205.000181][ T6126] loop0: detected capacity change from 0 to 40427 [ 205.016005][ T6126] F2FS-fs: heap/no_heap options were deprecated [ 205.016185][ T6126] F2FS-fs: heap/no_heap options were deprecated [ 205.047517][ T6126] F2FS-fs (loop0): Image doesn't support compression [ 205.100224][ T6126] F2FS-fs (loop0): invalid crc value [ 205.353701][ T6126] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 205.362366][ T6126] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 206.333210][ T59] Bluetooth: hci0: command tx timeout [ 213.398963][ T6126] F2FS-fs (loop0): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 213.408669][ T6126] syz.0.17: attempt to access beyond end of device [ 213.408669][ T6126] loop0: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 213.410441][ T6126] syz.0.17: attempt to access beyond end of device [ 213.410441][ T6126] loop0: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 213.410624][ T6126] syz.0.17: attempt to access beyond end of device [ 213.410624][ T6126] loop0: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 213.410783][ T6126] syz.0.17: attempt to access beyond end of device [ 213.410783][ T6126] loop0: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 213.410948][ T6126] syz.0.17: attempt to access beyond end of device [ 213.410948][ T6126] loop0: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 213.411112][ T6126] syz.0.17: attempt to access beyond end of device [ 213.411112][ T6126] loop0: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 213.411268][ T6126] syz.0.17: attempt to access beyond end of device [ 213.411268][ T6126] loop0: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 213.411423][ T6126] syz.0.17: attempt to access beyond end of device [ 213.411423][ T6126] loop0: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 213.411579][ T6126] syz.0.17: attempt to access beyond end of device [ 213.411579][ T6126] loop0: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 213.411740][ T6126] syz.0.17: attempt to access beyond end of device [ 213.411740][ T6126] loop0: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 218.412764][ T6126] bio_check_eod: 57314 callbacks suppressed [ 218.412782][ T6126] syz.0.17: attempt to access beyond end of device [ 218.412782][ T6126] loop0: rw=524288, sector=88960, nr_sectors = 8 limit=40427 [ 218.412915][ T6126] syz.0.17: attempt to access beyond end of device [ 218.412915][ T6126] loop0: rw=524288, sector=88968, nr_sectors = 8 limit=40427 [ 218.413041][ T6126] syz.0.17: attempt to access beyond end of device [ 218.413041][ T6126] loop0: rw=524288, sector=88976, nr_sectors = 8 limit=40427 [ 218.413165][ T6126] syz.0.17: attempt to access beyond end of device [ 218.413165][ T6126] loop0: rw=524288, sector=88984, nr_sectors = 8 limit=40427 [ 218.413288][ T6126] syz.0.17: attempt to access beyond end of device [ 218.413288][ T6126] loop0: rw=524288, sector=88992, nr_sectors = 8 limit=40427 [ 218.413421][ T6126] syz.0.17: attempt to access beyond end of device [ 218.413421][ T6126] loop0: rw=524288, sector=89000, nr_sectors = 8 limit=40427 [ 218.413546][ T6126] syz.0.17: attempt to access beyond end of device [ 218.413546][ T6126] loop0: rw=524288, sector=89008, nr_sectors = 8 limit=40427 [ 218.413670][ T6126] syz.0.17: attempt to access beyond end of device [ 218.413670][ T6126] loop0: rw=524288, sector=89016, nr_sectors = 8 limit=40427 [ 218.413794][ T6126] syz.0.17: attempt to access beyond end of device [ 218.413794][ T6126] loop0: rw=524288, sector=89024, nr_sectors = 8 limit=40427 [ 218.413919][ T6126] syz.0.17: attempt to access beyond end of device [ 218.413919][ T6126] loop0: rw=524288, sector=89032, nr_sectors = 8 limit=40427 [ 219.449816][ T5154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.451418][ T5154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.452230][ T5154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.470527][ T5154] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.471216][ T5154] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.869725][ T6178] chnl_net:caif_netlink_parms(): no params data found [ 220.264770][ T6178] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.264975][ T6178] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.265143][ T6178] bridge_slave_0: entered allmulticast mode [ 220.267796][ T6178] bridge_slave_0: entered promiscuous mode [ 220.271005][ T6178] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.271154][ T6178] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.271315][ T6178] bridge_slave_1: entered allmulticast mode [ 220.292819][ T6178] bridge_slave_1: entered promiscuous mode [ 220.528274][ T6178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.532462][ T6178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.746955][ T6178] team0: Port device team_slave_0 added [ 220.750605][ T6178] team0: Port device team_slave_1 added [ 221.115692][ T6178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.115708][ T6178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.115731][ T6178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.118006][ T6178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.118018][ T6178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.118041][ T6178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.410308][ T6178] hsr_slave_0: entered promiscuous mode [ 221.411589][ T6178] hsr_slave_1: entered promiscuous mode [ 221.430101][ T6178] debugfs: 'hsr0' already exists in 'hsr' [ 221.430231][ T6178] Cannot create hsr debugfs directory [ 221.532801][ T5154] Bluetooth: hci1: command tx timeout [ 222.149345][ T6178] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 222.198398][ T6178] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 222.228134][ T6178] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 222.271800][ T6178] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 222.535715][ T6178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.569792][ T6178] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.588412][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.592891][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.620186][ T814] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.620828][ T814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.002413][ T6178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.077709][ T6178] veth0_vlan: entered promiscuous mode [ 223.107007][ T6178] veth1_vlan: entered promiscuous mode [ 223.165833][ T6178] veth0_macvtap: entered promiscuous mode [ 223.172297][ T6178] veth1_macvtap: entered promiscuous mode [ 223.212035][ T6178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.238095][ T6178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.265193][ T814] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.308775][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.309932][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.310459][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.432900][ T6126] bio_check_eod: 40129 callbacks suppressed [ 223.432915][ T6126] syz.0.17: attempt to access beyond end of device [ 223.432915][ T6126] loop0: rw=524288, sector=87976, nr_sectors = 8 limit=40427 [ 223.433041][ T6126] syz.0.17: attempt to access beyond end of device [ 223.433041][ T6126] loop0: rw=524288, sector=87984, nr_sectors = 8 limit=40427 [ 223.433151][ T6126] syz.0.17: attempt to access beyond end of device [ 223.433151][ T6126] loop0: rw=524288, sector=87992, nr_sectors = 8 limit=40427 [ 223.433315][ T6126] syz.0.17: attempt to access beyond end of device [ 223.433315][ T6126] loop0: rw=524288, sector=88000, nr_sectors = 8 limit=40427 [ 223.433432][ T6126] syz.0.17: attempt to access beyond end of device [ 223.433432][ T6126] loop0: rw=524288, sector=88008, nr_sectors = 8 limit=40427 [ 223.433581][ T6126] syz.0.17: attempt to access beyond end of device [ 223.433581][ T6126] loop0: rw=524288, sector=88016, nr_sectors = 8 limit=40427 [ 223.433714][ T6126] syz.0.17: attempt to access beyond end of device [ 223.433714][ T6126] loop0: rw=524288, sector=88024, nr_sectors = 8 limit=40427 [ 223.433841][ T6126] syz.0.17: attempt to access beyond end of device [ 223.433841][ T6126] loop0: rw=524288, sector=88032, nr_sectors = 8 limit=40427 [ 223.433965][ T6126] syz.0.17: attempt to access beyond end of device [ 223.433965][ T6126] loop0: rw=524288, sector=88040, nr_sectors = 8 limit=40427 [ 223.434090][ T6126] syz.0.17: attempt to access beyond end of device [ 223.434090][ T6126] loop0: rw=524288, sector=88048, nr_sectors = 8 limit=40427 [ 223.612723][ T5154] Bluetooth: hci1: command tx timeout [ 223.667644][ T1428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.667665][ T1428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.767007][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.767027][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/26 08:19:55 executed programs: 3 [ 224.527875][ T6198] loop1: detected capacity change from 0 to 40427 [ 224.542603][ T6198] F2FS-fs: heap/no_heap options were deprecated [ 224.550640][ T6198] F2FS-fs: heap/no_heap options were deprecated [ 224.584062][ T6198] F2FS-fs (loop1): Image doesn't support compression [ 224.606969][ T6198] F2FS-fs (loop1): invalid crc value [ 224.824092][ T6198] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 224.832244][ T6198] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 225.692830][ T5154] Bluetooth: hci1: command tx timeout [ 227.774353][ T5154] Bluetooth: hci1: command tx timeout [ 228.442737][ T6126] bio_check_eod: 27961 callbacks suppressed [ 228.442756][ T6126] syz.0.17: attempt to access beyond end of device [ 228.442756][ T6126] loop0: rw=0, sector=87848, nr_sectors = 8 limit=40427 [ 228.442894][ T6126] syz.0.17: attempt to access beyond end of device [ 228.442894][ T6126] loop0: rw=0, sector=87856, nr_sectors = 8 limit=40427 [ 228.443025][ T6126] syz.0.17: attempt to access beyond end of device [ 228.443025][ T6126] loop0: rw=0, sector=87864, nr_sectors = 8 limit=40427 [ 228.443163][ T6126] syz.0.17: attempt to access beyond end of device [ 228.443163][ T6126] loop0: rw=0, sector=87872, nr_sectors = 8 limit=40427 [ 228.443294][ T6126] syz.0.17: attempt to access beyond end of device [ 228.443294][ T6126] loop0: rw=0, sector=87880, nr_sectors = 8 limit=40427 [ 228.443424][ T6126] syz.0.17: attempt to access beyond end of device [ 228.443424][ T6126] loop0: rw=0, sector=87888, nr_sectors = 8 limit=40427 [ 228.443554][ T6126] syz.0.17: attempt to access beyond end of device [ 228.443554][ T6126] loop0: rw=0, sector=87896, nr_sectors = 8 limit=40427 [ 228.443684][ T6126] syz.0.17: attempt to access beyond end of device [ 228.443684][ T6126] loop0: rw=0, sector=87904, nr_sectors = 8 limit=40427 [ 228.443843][ T6126] syz.0.17: attempt to access beyond end of device [ 228.443843][ T6126] loop0: rw=0, sector=87912, nr_sectors = 8 limit=40427 [ 228.443974][ T6126] syz.0.17: attempt to access beyond end of device [ 228.443974][ T6126] loop0: rw=0, sector=87920, nr_sectors = 8 limit=40427 [ 233.452835][ T6126] bio_check_eod: 29867 callbacks suppressed [ 233.452855][ T6126] syz.0.17: attempt to access beyond end of device [ 233.452855][ T6126] loop0: rw=524288, sector=87256, nr_sectors = 8 limit=40427 [ 233.452985][ T6126] syz.0.17: attempt to access beyond end of device [ 233.452985][ T6126] loop0: rw=524288, sector=87264, nr_sectors = 8 limit=40427 [ 233.453112][ T6126] syz.0.17: attempt to access beyond end of device [ 233.453112][ T6126] loop0: rw=524288, sector=87272, nr_sectors = 8 limit=40427 [ 233.453243][ T6126] syz.0.17: attempt to access beyond end of device [ 233.453243][ T6126] loop0: rw=524288, sector=87280, nr_sectors = 8 limit=40427 [ 233.453396][ T6126] syz.0.17: attempt to access beyond end of device [ 233.453396][ T6126] loop0: rw=524288, sector=87288, nr_sectors = 8 limit=40427 [ 233.453523][ T6126] syz.0.17: attempt to access beyond end of device [ 233.453523][ T6126] loop0: rw=524288, sector=87296, nr_sectors = 8 limit=40427 [ 233.453651][ T6126] syz.0.17: attempt to access beyond end of device [ 233.453651][ T6126] loop0: rw=524288, sector=87304, nr_sectors = 8 limit=40427 [ 233.453777][ T6126] syz.0.17: attempt to access beyond end of device [ 233.453777][ T6126] loop0: rw=524288, sector=87312, nr_sectors = 8 limit=40427 [ 233.453901][ T6126] syz.0.17: attempt to access beyond end of device [ 233.453901][ T6126] loop0: rw=524288, sector=87320, nr_sectors = 8 limit=40427 [ 233.454026][ T6126] syz.0.17: attempt to access beyond end of device [ 233.454026][ T6126] loop0: rw=524288, sector=87328, nr_sectors = 8 limit=40427 [ 238.462803][ T6126] bio_check_eod: 30011 callbacks suppressed [ 238.462822][ T6126] syz.0.17: attempt to access beyond end of device [ 238.462822][ T6126] loop0: rw=0, sector=87816, nr_sectors = 8 limit=40427 [ 238.462985][ T6126] syz.0.17: attempt to access beyond end of device [ 238.462985][ T6126] loop0: rw=0, sector=87824, nr_sectors = 8 limit=40427 [ 238.463115][ T6126] syz.0.17: attempt to access beyond end of device [ 238.463115][ T6126] loop0: rw=0, sector=87832, nr_sectors = 8 limit=40427 [ 238.463253][ T6126] syz.0.17: attempt to access beyond end of device [ 238.463253][ T6126] loop0: rw=0, sector=87840, nr_sectors = 8 limit=40427 [ 238.463381][ T6126] syz.0.17: attempt to access beyond end of device [ 238.463381][ T6126] loop0: rw=0, sector=87848, nr_sectors = 8 limit=40427 [ 238.463509][ T6126] syz.0.17: attempt to access beyond end of device [ 238.463509][ T6126] loop0: rw=0, sector=87856, nr_sectors = 8 limit=40427 [ 238.463638][ T6126] syz.0.17: attempt to access beyond end of device [ 238.463638][ T6126] loop0: rw=0, sector=87864, nr_sectors = 8 limit=40427 [ 238.463765][ T6126] syz.0.17: attempt to access beyond end of device [ 238.463765][ T6126] loop0: rw=0, sector=87872, nr_sectors = 8 limit=40427 [ 238.463894][ T6126] syz.0.17: attempt to access beyond end of device [ 238.463894][ T6126] loop0: rw=0, sector=87880, nr_sectors = 8 limit=40427 [ 238.464022][ T6126] syz.0.17: attempt to access beyond end of device [ 238.464022][ T6126] loop0: rw=0, sector=87888, nr_sectors = 8 limit=40427 [ 239.058191][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.059879][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.063314][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.074738][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.075469][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.753038][ T6203] chnl_net:caif_netlink_parms(): no params data found [ 240.296024][ T6203] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.310322][ T6203] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.310537][ T6203] bridge_slave_0: entered allmulticast mode [ 240.331817][ T6203] bridge_slave_0: entered promiscuous mode [ 240.354991][ T6203] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.355138][ T6203] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.355320][ T6203] bridge_slave_1: entered allmulticast mode [ 240.357982][ T6203] bridge_slave_1: entered promiscuous mode [ 240.653738][ T6203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.657525][ T6203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.955372][ T6203] team0: Port device team_slave_0 added [ 240.959200][ T6203] team0: Port device team_slave_1 added [ 241.140487][ T5154] Bluetooth: hci2: command tx timeout [ 241.218540][ T6203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.218556][ T6203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.218579][ T6203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.220872][ T6203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.220883][ T6203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.220906][ T6203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.583464][ T6203] hsr_slave_0: entered promiscuous mode [ 241.584728][ T6203] hsr_slave_1: entered promiscuous mode [ 241.585577][ T6203] debugfs: 'hsr0' already exists in 'hsr' [ 241.585601][ T6203] Cannot create hsr debugfs directory [ 242.470008][ T6198] F2FS-fs (loop1): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 242.630232][ T6203] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 242.677322][ T6203] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 242.709963][ T6203] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 242.767372][ T6203] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 243.202031][ T6203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.212780][ T5154] Bluetooth: hci2: command tx timeout [ 243.240009][ T6203] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.267007][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.272873][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.281886][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.282030][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.481329][ T6126] bio_check_eod: 24268 callbacks suppressed [ 243.481348][ T6126] syz.0.17: attempt to access beyond end of device [ 243.481348][ T6126] loop0: rw=0, sector=87496, nr_sectors = 8 limit=40427 [ 243.481476][ T6126] syz.0.17: attempt to access beyond end of device [ 243.481476][ T6126] loop0: rw=0, sector=87504, nr_sectors = 8 limit=40427 [ 243.481605][ T6126] syz.0.17: attempt to access beyond end of device [ 243.481605][ T6126] loop0: rw=0, sector=87512, nr_sectors = 8 limit=40427 [ 243.481734][ T6126] syz.0.17: attempt to access beyond end of device [ 243.481734][ T6126] loop0: rw=0, sector=87520, nr_sectors = 8 limit=40427 [ 243.481858][ T6126] syz.0.17: attempt to access beyond end of device [ 243.481858][ T6126] loop0: rw=0, sector=87528, nr_sectors = 8 limit=40427 [ 243.481989][ T6126] syz.0.17: attempt to access beyond end of device [ 243.481989][ T6126] loop0: rw=0, sector=87536, nr_sectors = 8 limit=40427 [ 243.482112][ T6126] syz.0.17: attempt to access beyond end of device [ 243.482112][ T6126] loop0: rw=0, sector=87544, nr_sectors = 8 limit=40427 [ 243.482260][ T6126] syz.0.17: attempt to access beyond end of device [ 243.482260][ T6126] loop0: rw=0, sector=87552, nr_sectors = 8 limit=40427 [ 243.482382][ T6126] syz.0.17: attempt to access beyond end of device [ 243.482382][ T6126] loop0: rw=0, sector=87560, nr_sectors = 8 limit=40427 [ 243.482506][ T6126] syz.0.17: attempt to access beyond end of device [ 243.482506][ T6126] loop0: rw=0, sector=87568, nr_sectors = 8 limit=40427 [ 244.193378][ T6203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.299258][ T6203] veth0_vlan: entered promiscuous mode [ 244.329615][ T6203] veth1_vlan: entered promiscuous mode [ 244.494765][ T6203] veth0_macvtap: entered promiscuous mode [ 244.523031][ T6203] veth1_macvtap: entered promiscuous mode [ 244.588842][ T6203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.650474][ T6203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.707978][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.708481][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.708534][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.708577][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.119597][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.119617][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.212962][ T1428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.212981][ T1428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.294634][ T5154] Bluetooth: hci2: command tx timeout 2025/09/26 08:20:17 executed programs: 4 [ 246.545029][ T6228] loop2: detected capacity change from 0 to 40427 [ 246.546319][ T6228] F2FS-fs: heap/no_heap options were deprecated [ 246.546505][ T6228] F2FS-fs: heap/no_heap options were deprecated [ 246.617090][ T6228] F2FS-fs (loop2): Image doesn't support compression [ 246.653412][ T6228] F2FS-fs (loop2): invalid crc value [ 247.045785][ T6228] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 247.082713][ T6228] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 247.372727][ T5154] Bluetooth: hci2: command tx timeout [ 248.484288][ T6198] bio_check_eod: 33611 callbacks suppressed [ 248.484309][ T6198] syz.1.18: attempt to access beyond end of device [ 248.484309][ T6198] loop1: rw=524288, sector=89376, nr_sectors = 8 limit=40427 [ 248.484445][ T6198] syz.1.18: attempt to access beyond end of device [ 248.484445][ T6198] loop1: rw=524288, sector=89384, nr_sectors = 8 limit=40427 [ 248.484572][ T6198] syz.1.18: attempt to access beyond end of device [ 248.484572][ T6198] loop1: rw=524288, sector=89392, nr_sectors = 8 limit=40427 [ 248.484699][ T6198] syz.1.18: attempt to access beyond end of device [ 248.484699][ T6198] loop1: rw=524288, sector=89400, nr_sectors = 8 limit=40427 [ 248.484825][ T6198] syz.1.18: attempt to access beyond end of device [ 248.484825][ T6198] loop1: rw=524288, sector=89408, nr_sectors = 8 limit=40427 [ 248.484951][ T6198] syz.1.18: attempt to access beyond end of device [ 248.484951][ T6198] loop1: rw=524288, sector=89416, nr_sectors = 8 limit=40427 [ 248.485093][ T6198] syz.1.18: attempt to access beyond end of device [ 248.485093][ T6198] loop1: rw=524288, sector=89424, nr_sectors = 8 limit=40427 [ 248.485253][ T6198] syz.1.18: attempt to access beyond end of device [ 248.485253][ T6198] loop1: rw=524288, sector=89432, nr_sectors = 8 limit=40427 [ 248.485367][ T6198] syz.1.18: attempt to access beyond end of device [ 248.485367][ T6198] loop1: rw=524288, sector=89440, nr_sectors = 8 limit=40427 [ 248.485495][ T6198] syz.1.18: attempt to access beyond end of device [ 248.485495][ T6198] loop1: rw=524288, sector=89448, nr_sectors = 8 limit=40427 [ 253.495017][ T6198] bio_check_eod: 36121 callbacks suppressed [ 253.495037][ T6198] syz.1.18: attempt to access beyond end of device [ 253.495037][ T6198] loop1: rw=524288, sector=86432, nr_sectors = 8 limit=40427 [ 253.495169][ T6198] syz.1.18: attempt to access beyond end of device [ 253.495169][ T6198] loop1: rw=524288, sector=86440, nr_sectors = 8 limit=40427 [ 253.495296][ T6198] syz.1.18: attempt to access beyond end of device [ 253.495296][ T6198] loop1: rw=524288, sector=86448, nr_sectors = 8 limit=40427 [ 253.495422][ T6198] syz.1.18: attempt to access beyond end of device [ 253.495422][ T6198] loop1: rw=524288, sector=86456, nr_sectors = 8 limit=40427 [ 253.495547][ T6198] syz.1.18: attempt to access beyond end of device [ 253.495547][ T6198] loop1: rw=524288, sector=86464, nr_sectors = 8 limit=40427 [ 253.495673][ T6198] syz.1.18: attempt to access beyond end of device [ 253.495673][ T6198] loop1: rw=524288, sector=86472, nr_sectors = 8 limit=40427 [ 253.495798][ T6198] syz.1.18: attempt to access beyond end of device [ 253.495798][ T6198] loop1: rw=524288, sector=86480, nr_sectors = 8 limit=40427 [ 253.495924][ T6198] syz.1.18: attempt to access beyond end of device [ 253.495924][ T6198] loop1: rw=524288, sector=86488, nr_sectors = 8 limit=40427 [ 253.496055][ T6198] syz.1.18: attempt to access beyond end of device [ 253.496055][ T6198] loop1: rw=524288, sector=86496, nr_sectors = 8 limit=40427 [ 253.496113][ T6126] syz.0.17: attempt to access beyond end of device [ 253.496113][ T6126] loop0: rw=524288, sector=89392, nr_sectors = 8 limit=40427 [ 255.699644][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.699752][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.502780][ T6126] bio_check_eod: 36785 callbacks suppressed [ 258.502788][ T6198] syz.1.18: attempt to access beyond end of device [ 258.502788][ T6198] loop1: rw=524288, sector=88448, nr_sectors = 8 limit=40427 [ 258.502800][ T6126] syz.0.17: attempt to access beyond end of device [ 258.502800][ T6126] loop0: rw=0, sector=87136, nr_sectors = 8 limit=40427 [ 258.502930][ T6198] syz.1.18: attempt to access beyond end of device [ 258.502930][ T6198] loop1: rw=524288, sector=88456, nr_sectors = 8 limit=40427 [ 258.502931][ T6126] syz.0.17: attempt to access beyond end of device [ 258.502931][ T6126] loop0: rw=0, sector=87144, nr_sectors = 8 limit=40427 [ 258.503060][ T6198] syz.1.18: attempt to access beyond end of device [ 258.503060][ T6198] loop1: rw=524288, sector=88464, nr_sectors = 8 limit=40427 [ 258.503064][ T6126] syz.0.17: attempt to access beyond end of device [ 258.503064][ T6126] loop0: rw=0, sector=87152, nr_sectors = 8 limit=40427 [ 258.503188][ T6198] syz.1.18: attempt to access beyond end of device [ 258.503188][ T6198] loop1: rw=524288, sector=88472, nr_sectors = 8 limit=40427 [ 258.503196][ T6126] syz.0.17: attempt to access beyond end of device [ 258.503196][ T6126] loop0: rw=0, sector=87160, nr_sectors = 8 limit=40427 [ 258.503314][ T6198] syz.1.18: attempt to access beyond end of device [ 258.503314][ T6198] loop1: rw=524288, sector=88480, nr_sectors = 8 limit=40427 [ 258.503335][ T6126] syz.0.17: attempt to access beyond end of device [ 258.503335][ T6126] loop0: rw=0, sector=87168, nr_sectors = 8 limit=40427 [ 260.723863][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 260.725567][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 260.726400][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 260.727735][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 260.728486][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 261.240600][ T6236] chnl_net:caif_netlink_parms(): no params data found [ 262.104533][ T6236] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.119985][ T6236] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.120207][ T6236] bridge_slave_0: entered allmulticast mode [ 262.136023][ T6236] bridge_slave_0: entered promiscuous mode [ 262.139391][ T6236] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.139596][ T6236] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.139775][ T6236] bridge_slave_1: entered allmulticast mode [ 262.142453][ T6236] bridge_slave_1: entered promiscuous mode [ 262.601161][ T6236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.628811][ T6236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.813880][ T5154] Bluetooth: hci3: command tx timeout [ 263.026958][ T6236] team0: Port device team_slave_0 added [ 263.030741][ T6236] team0: Port device team_slave_1 added [ 263.516305][ T6198] bio_check_eod: 32228 callbacks suppressed [ 263.516323][ T6198] syz.1.18: attempt to access beyond end of device [ 263.516323][ T6198] loop1: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 263.516440][ T6198] syz.1.18: attempt to access beyond end of device [ 263.516440][ T6198] loop1: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 263.516564][ T6198] syz.1.18: attempt to access beyond end of device [ 263.516564][ T6198] loop1: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 263.516664][ T6198] syz.1.18: attempt to access beyond end of device [ 263.516664][ T6198] loop1: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 263.516756][ T6198] syz.1.18: attempt to access beyond end of device [ 263.516756][ T6198] loop1: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 263.516853][ T6198] syz.1.18: attempt to access beyond end of device [ 263.516853][ T6198] loop1: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 263.516957][ T6198] syz.1.18: attempt to access beyond end of device [ 263.516957][ T6198] loop1: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 263.517089][ T6198] syz.1.18: attempt to access beyond end of device [ 263.517089][ T6198] loop1: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 263.517210][ T6198] syz.1.18: attempt to access beyond end of device [ 263.517210][ T6198] loop1: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 263.517331][ T6198] syz.1.18: attempt to access beyond end of device [ 263.517331][ T6198] loop1: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 263.817357][ T6236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.817373][ T6236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.817398][ T6236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.864749][ T6236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.864765][ T6236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.864788][ T6236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.541422][ T6236] hsr_slave_0: entered promiscuous mode [ 264.542961][ T6236] hsr_slave_1: entered promiscuous mode [ 264.545105][ T6236] debugfs: 'hsr0' already exists in 'hsr' [ 264.545128][ T6236] Cannot create hsr debugfs directory [ 264.892849][ T5154] Bluetooth: hci3: command tx timeout [ 265.745538][ T6236] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 265.877543][ T6236] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 265.985961][ T6236] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 266.112784][ T6236] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 266.621304][ T6236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.703633][ T6236] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.760431][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.760559][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.841529][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.841680][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.972803][ T5154] Bluetooth: hci3: command tx timeout [ 267.718838][ T6236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.022900][ T6236] veth0_vlan: entered promiscuous mode [ 268.066318][ T6236] veth1_vlan: entered promiscuous mode [ 268.317022][ T6236] veth0_macvtap: entered promiscuous mode [ 268.322385][ T6236] veth1_macvtap: entered promiscuous mode [ 268.449800][ T6236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.476816][ T6236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.533450][ T6126] bio_check_eod: 27533 callbacks suppressed [ 268.533466][ T6126] syz.0.17: attempt to access beyond end of device [ 268.533466][ T6126] loop0: rw=524288, sector=88536, nr_sectors = 8 limit=40427 [ 268.533582][ T6126] syz.0.17: attempt to access beyond end of device [ 268.533582][ T6126] loop0: rw=524288, sector=88544, nr_sectors = 8 limit=40427 [ 268.533689][ T6126] syz.0.17: attempt to access beyond end of device [ 268.533689][ T6126] loop0: rw=524288, sector=88552, nr_sectors = 8 limit=40427 [ 268.533798][ T6126] syz.0.17: attempt to access beyond end of device [ 268.533798][ T6126] loop0: rw=524288, sector=88560, nr_sectors = 8 limit=40427 [ 268.533943][ T6126] syz.0.17: attempt to access beyond end of device [ 268.533943][ T6126] loop0: rw=524288, sector=88568, nr_sectors = 8 limit=40427 [ 268.534157][ T6126] syz.0.17: attempt to access beyond end of device [ 268.534157][ T6126] loop0: rw=524288, sector=88576, nr_sectors = 8 limit=40427 [ 268.534284][ T6126] syz.0.17: attempt to access beyond end of device [ 268.534284][ T6126] loop0: rw=524288, sector=88584, nr_sectors = 8 limit=40427 [ 268.534419][ T6126] syz.0.17: attempt to access beyond end of device [ 268.534419][ T6126] loop0: rw=524288, sector=88592, nr_sectors = 8 limit=40427 [ 268.534545][ T6126] syz.0.17: attempt to access beyond end of device [ 268.534545][ T6126] loop0: rw=524288, sector=88600, nr_sectors = 8 limit=40427 [ 268.534664][ T6126] syz.0.17: attempt to access beyond end of device [ 268.534664][ T6126] loop0: rw=524288, sector=88608, nr_sectors = 8 limit=40427 [ 268.584520][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.586199][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.590525][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.596422][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.052833][ T5154] Bluetooth: hci3: command tx timeout [ 269.342851][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.342867][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.508580][ T1029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.508599][ T1029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/26 08:20:41 executed programs: 5 [ 271.227134][ T6258] loop3: detected capacity change from 0 to 40427 [ 271.235968][ T6258] F2FS-fs: heap/no_heap options were deprecated [ 271.236130][ T6258] F2FS-fs: heap/no_heap options were deprecated [ 271.256925][ T6258] F2FS-fs (loop3): Image doesn't support compression [ 271.299647][ T6258] F2FS-fs (loop3): invalid crc value [ 271.542135][ T6258] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 271.612884][ T6258] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 273.542757][ T6198] bio_check_eod: 27287 callbacks suppressed [ 273.542776][ T6198] syz.1.18: attempt to access beyond end of device [ 273.542776][ T6198] loop1: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 273.542936][ T6198] syz.1.18: attempt to access beyond end of device [ 273.542936][ T6198] loop1: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 273.543059][ T6198] syz.1.18: attempt to access beyond end of device [ 273.543059][ T6198] loop1: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 273.543153][ T6198] syz.1.18: attempt to access beyond end of device [ 273.543153][ T6198] loop1: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 273.543244][ T6198] syz.1.18: attempt to access beyond end of device [ 273.543244][ T6198] loop1: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 273.543335][ T6198] syz.1.18: attempt to access beyond end of device [ 273.543335][ T6198] loop1: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 273.543425][ T6198] syz.1.18: attempt to access beyond end of device [ 273.543425][ T6198] loop1: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 273.543516][ T6198] syz.1.18: attempt to access beyond end of device [ 273.543516][ T6198] loop1: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 273.543607][ T6198] syz.1.18: attempt to access beyond end of device [ 273.543607][ T6198] loop1: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 273.543698][ T6198] syz.1.18: attempt to access beyond end of device [ 273.543698][ T6198] loop1: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 278.562769][ T6198] bio_check_eod: 27512 callbacks suppressed [ 278.562789][ T6198] syz.1.18: attempt to access beyond end of device [ 278.562789][ T6198] loop1: rw=524288, sector=88776, nr_sectors = 8 limit=40427 [ 278.562798][ T6126] syz.0.17: attempt to access beyond end of device [ 278.562798][ T6126] loop0: rw=524288, sector=88384, nr_sectors = 8 limit=40427 [ 278.562936][ T6198] syz.1.18: attempt to access beyond end of device [ 278.562936][ T6198] loop1: rw=524288, sector=88784, nr_sectors = 8 limit=40427 [ 278.563067][ T6198] syz.1.18: attempt to access beyond end of device [ 278.563067][ T6198] loop1: rw=524288, sector=88792, nr_sectors = 8 limit=40427 [ 278.563111][ T6126] syz.0.17: attempt to access beyond end of device [ 278.563111][ T6126] loop0: rw=524288, sector=88392, nr_sectors = 8 limit=40427 [ 278.563200][ T6198] syz.1.18: attempt to access beyond end of device [ 278.563200][ T6198] loop1: rw=524288, sector=88800, nr_sectors = 8 limit=40427 [ 278.563245][ T6126] syz.0.17: attempt to access beyond end of device [ 278.563245][ T6126] loop0: rw=524288, sector=88400, nr_sectors = 8 limit=40427 [ 278.563365][ T6198] syz.1.18: attempt to access beyond end of device [ 278.563365][ T6198] loop1: rw=524288, sector=88808, nr_sectors = 8 limit=40427 [ 278.563370][ T6126] syz.0.17: attempt to access beyond end of device [ 278.563370][ T6126] loop0: rw=524288, sector=88408, nr_sectors = 8 limit=40427 [ 278.563496][ T6198] syz.1.18: attempt to access beyond end of device [ 278.563496][ T6198] loop1: rw=524288, sector=88816, nr_sectors = 8 limit=40427 [ 281.146089][ T6228] F2FS-fs (loop2): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 283.572896][ T6126] bio_check_eod: 33228 callbacks suppressed [ 283.572915][ T6126] syz.0.17: attempt to access beyond end of device [ 283.572915][ T6126] loop0: rw=524288, sector=87656, nr_sectors = 8 limit=40427 [ 283.573054][ T6126] syz.0.17: attempt to access beyond end of device [ 283.573054][ T6126] loop0: rw=524288, sector=87664, nr_sectors = 8 limit=40427 [ 283.573183][ T6126] syz.0.17: attempt to access beyond end of device [ 283.573183][ T6126] loop0: rw=524288, sector=87672, nr_sectors = 8 limit=40427 [ 283.573311][ T6126] syz.0.17: attempt to access beyond end of device [ 283.573311][ T6126] loop0: rw=524288, sector=87680, nr_sectors = 8 limit=40427 [ 283.573439][ T6126] syz.0.17: attempt to access beyond end of device [ 283.573439][ T6126] loop0: rw=524288, sector=87688, nr_sectors = 8 limit=40427 [ 283.573567][ T6126] syz.0.17: attempt to access beyond end of device [ 283.573567][ T6126] loop0: rw=524288, sector=87696, nr_sectors = 8 limit=40427 [ 283.573695][ T6126] syz.0.17: attempt to access beyond end of device [ 283.573695][ T6126] loop0: rw=524288, sector=87704, nr_sectors = 8 limit=40427 [ 283.573830][ T6126] syz.0.17: attempt to access beyond end of device [ 283.573830][ T6126] loop0: rw=524288, sector=87712, nr_sectors = 8 limit=40427 [ 283.573993][ T6126] syz.0.17: attempt to access beyond end of device [ 283.573993][ T6126] loop0: rw=524288, sector=87720, nr_sectors = 8 limit=40427 [ 283.574121][ T6126] syz.0.17: attempt to access beyond end of device [ 283.574121][ T6126] loop0: rw=524288, sector=87728, nr_sectors = 8 limit=40427 [ 285.113553][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 285.115766][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 285.116615][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 285.117940][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 285.118652][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 286.203460][ T6263] chnl_net:caif_netlink_parms(): no params data found [ 287.212820][ T5154] Bluetooth: hci4: command tx timeout [ 287.230260][ T6263] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.230453][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.230649][ T6263] bridge_slave_0: entered allmulticast mode [ 287.263592][ T6263] bridge_slave_0: entered promiscuous mode [ 287.267029][ T6263] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.286424][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.286665][ T6263] bridge_slave_1: entered allmulticast mode [ 287.289372][ T6263] bridge_slave_1: entered promiscuous mode [ 287.889469][ T6263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.934046][ T6263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.583105][ T6126] bio_check_eod: 35337 callbacks suppressed [ 288.583125][ T6126] syz.0.17: attempt to access beyond end of device [ 288.583125][ T6126] loop0: rw=524288, sector=86792, nr_sectors = 8 limit=40427 [ 288.585611][ T6126] syz.0.17: attempt to access beyond end of device [ 288.585611][ T6126] loop0: rw=524288, sector=86800, nr_sectors = 8 limit=40427 [ 288.585784][ T6126] syz.0.17: attempt to access beyond end of device [ 288.585784][ T6126] loop0: rw=524288, sector=86808, nr_sectors = 8 limit=40427 [ 288.585913][ T6126] syz.0.17: attempt to access beyond end of device [ 288.585913][ T6126] loop0: rw=524288, sector=86816, nr_sectors = 8 limit=40427 [ 288.586040][ T6126] syz.0.17: attempt to access beyond end of device [ 288.586040][ T6126] loop0: rw=524288, sector=86824, nr_sectors = 8 limit=40427 [ 288.586167][ T6126] syz.0.17: attempt to access beyond end of device [ 288.586167][ T6126] loop0: rw=524288, sector=86832, nr_sectors = 8 limit=40427 [ 288.586298][ T6126] syz.0.17: attempt to access beyond end of device [ 288.586298][ T6126] loop0: rw=524288, sector=86840, nr_sectors = 8 limit=40427 [ 288.586429][ T6126] syz.0.17: attempt to access beyond end of device [ 288.586429][ T6126] loop0: rw=524288, sector=86848, nr_sectors = 8 limit=40427 [ 288.586555][ T6126] syz.0.17: attempt to access beyond end of device [ 288.586555][ T6126] loop0: rw=524288, sector=86856, nr_sectors = 8 limit=40427 [ 288.586680][ T6126] syz.0.17: attempt to access beyond end of device [ 288.586680][ T6126] loop0: rw=524288, sector=86864, nr_sectors = 8 limit=40427 [ 288.989709][ T6263] team0: Port device team_slave_0 added [ 289.003653][ T6263] team0: Port device team_slave_1 added [ 289.292833][ T5154] Bluetooth: hci4: command tx timeout [ 289.803437][ T6263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.803454][ T6263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.803478][ T6263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.805965][ T6263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.805977][ T6263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.805999][ T6263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.484995][ T6263] hsr_slave_0: entered promiscuous mode [ 290.486302][ T6263] hsr_slave_1: entered promiscuous mode [ 290.487326][ T6263] debugfs: 'hsr0' already exists in 'hsr' [ 290.487348][ T6263] Cannot create hsr debugfs directory [ 291.372743][ T5154] Bluetooth: hci4: command tx timeout [ 292.195665][ T6263] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 292.254692][ T6263] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 292.415050][ T6263] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 292.504665][ T6263] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 293.036833][ T6263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.087747][ T6263] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.103963][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.104182][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.206586][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.209109][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.453721][ T5154] Bluetooth: hci4: command tx timeout [ 293.592745][ T6198] bio_check_eod: 35031 callbacks suppressed [ 293.592763][ T6198] syz.1.18: attempt to access beyond end of device [ 293.592763][ T6198] loop1: rw=524288, sector=87064, nr_sectors = 8 limit=40427 [ 293.592907][ T6198] syz.1.18: attempt to access beyond end of device [ 293.592907][ T6198] loop1: rw=524288, sector=87072, nr_sectors = 8 limit=40427 [ 293.593040][ T6198] syz.1.18: attempt to access beyond end of device [ 293.593040][ T6198] loop1: rw=524288, sector=87080, nr_sectors = 8 limit=40427 [ 293.593162][ T6198] syz.1.18: attempt to access beyond end of device [ 293.593162][ T6198] loop1: rw=524288, sector=87088, nr_sectors = 8 limit=40427 [ 293.593292][ T6198] syz.1.18: attempt to access beyond end of device [ 293.593292][ T6198] loop1: rw=524288, sector=87096, nr_sectors = 8 limit=40427 [ 293.593439][ T6198] syz.1.18: attempt to access beyond end of device [ 293.593439][ T6198] loop1: rw=524288, sector=87104, nr_sectors = 8 limit=40427 [ 293.593564][ T6198] syz.1.18: attempt to access beyond end of device [ 293.593564][ T6198] loop1: rw=524288, sector=87112, nr_sectors = 8 limit=40427 [ 293.593722][ T6198] syz.1.18: attempt to access beyond end of device [ 293.593722][ T6198] loop1: rw=524288, sector=87120, nr_sectors = 8 limit=40427 [ 293.593848][ T6198] syz.1.18: attempt to access beyond end of device [ 293.593848][ T6198] loop1: rw=524288, sector=87128, nr_sectors = 8 limit=40427 [ 293.593986][ T6198] syz.1.18: attempt to access beyond end of device [ 293.593986][ T6198] loop1: rw=524288, sector=87136, nr_sectors = 8 limit=40427 [ 294.465630][ T6263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.732294][ T6263] veth0_vlan: entered promiscuous mode [ 295.820067][ T6263] veth1_vlan: entered promiscuous mode [ 296.008508][ T6263] veth0_macvtap: entered promiscuous mode [ 296.032961][ T6263] veth1_macvtap: entered promiscuous mode [ 296.164608][ T6263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.216715][ T6263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.292920][ T995] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.325780][ T995] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.334395][ T995] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.338612][ T995] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.911377][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.911397][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.118108][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.118128][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/26 08:21:09 executed programs: 6 [ 298.602946][ T6198] bio_check_eod: 32005 callbacks suppressed [ 298.602966][ T6198] syz.1.18: attempt to access beyond end of device [ 298.602966][ T6198] loop1: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 298.603111][ T6198] syz.1.18: attempt to access beyond end of device [ 298.603111][ T6198] loop1: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 298.603240][ T6198] syz.1.18: attempt to access beyond end of device [ 298.603240][ T6198] loop1: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 298.603375][ T6198] syz.1.18: attempt to access beyond end of device [ 298.603375][ T6198] loop1: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 298.603629][ T6198] syz.1.18: attempt to access beyond end of device [ 298.603629][ T6198] loop1: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 298.603766][ T6198] syz.1.18: attempt to access beyond end of device [ 298.603766][ T6198] loop1: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 298.603892][ T6198] syz.1.18: attempt to access beyond end of device [ 298.603892][ T6198] loop1: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 298.604022][ T6198] syz.1.18: attempt to access beyond end of device [ 298.604022][ T6198] loop1: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 298.604181][ T6198] syz.1.18: attempt to access beyond end of device [ 298.604181][ T6198] loop1: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 298.604294][ T6198] syz.1.18: attempt to access beyond end of device [ 298.604294][ T6198] loop1: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 299.345820][ T6292] loop4: detected capacity change from 0 to 40427 [ 299.347081][ T6292] F2FS-fs: heap/no_heap options were deprecated [ 299.347255][ T6292] F2FS-fs: heap/no_heap options were deprecated [ 299.390237][ T6292] F2FS-fs (loop4): Image doesn't support compression [ 299.464748][ T6292] F2FS-fs (loop4): invalid crc value [ 299.929976][ T6292] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 299.992854][ T6292] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 303.620204][ T6126] bio_check_eod: 32623 callbacks suppressed [ 303.620224][ T6126] syz.0.17: attempt to access beyond end of device [ 303.620224][ T6126] loop0: rw=0, sector=89328, nr_sectors = 8 limit=40427 [ 303.620364][ T6126] syz.0.17: attempt to access beyond end of device [ 303.620364][ T6126] loop0: rw=0, sector=89336, nr_sectors = 8 limit=40427 [ 303.620524][ T6126] syz.0.17: attempt to access beyond end of device [ 303.620524][ T6126] loop0: rw=0, sector=89344, nr_sectors = 8 limit=40427 [ 303.620655][ T6126] syz.0.17: attempt to access beyond end of device [ 303.620655][ T6126] loop0: rw=0, sector=89352, nr_sectors = 8 limit=40427 [ 303.620785][ T6126] syz.0.17: attempt to access beyond end of device [ 303.620785][ T6126] loop0: rw=0, sector=89360, nr_sectors = 8 limit=40427 [ 303.620915][ T6126] syz.0.17: attempt to access beyond end of device [ 303.620915][ T6126] loop0: rw=0, sector=89368, nr_sectors = 8 limit=40427 [ 303.621053][ T6126] syz.0.17: attempt to access beyond end of device [ 303.621053][ T6126] loop0: rw=0, sector=89376, nr_sectors = 8 limit=40427 [ 303.621183][ T6126] syz.0.17: attempt to access beyond end of device [ 303.621183][ T6126] loop0: rw=0, sector=89384, nr_sectors = 8 limit=40427 [ 303.621313][ T6126] syz.0.17: attempt to access beyond end of device [ 303.621313][ T6126] loop0: rw=0, sector=89392, nr_sectors = 8 limit=40427 [ 303.621442][ T6126] syz.0.17: attempt to access beyond end of device [ 303.621442][ T6126] loop0: rw=0, sector=89400, nr_sectors = 8 limit=40427 [ 308.622745][ T6126] bio_check_eod: 32988 callbacks suppressed [ 308.622766][ T6126] syz.0.17: attempt to access beyond end of device [ 308.622766][ T6126] loop0: rw=524288, sector=88720, nr_sectors = 8 limit=40427 [ 308.622933][ T6126] syz.0.17: attempt to access beyond end of device [ 308.622933][ T6126] loop0: rw=524288, sector=88728, nr_sectors = 8 limit=40427 [ 308.623059][ T6126] syz.0.17: attempt to access beyond end of device [ 308.623059][ T6126] loop0: rw=524288, sector=88736, nr_sectors = 8 limit=40427 [ 308.623184][ T6126] syz.0.17: attempt to access beyond end of device [ 308.623184][ T6126] loop0: rw=524288, sector=88744, nr_sectors = 8 limit=40427 [ 308.623309][ T6126] syz.0.17: attempt to access beyond end of device [ 308.623309][ T6126] loop0: rw=524288, sector=88752, nr_sectors = 8 limit=40427 [ 308.623441][ T6126] syz.0.17: attempt to access beyond end of device [ 308.623441][ T6126] loop0: rw=524288, sector=88760, nr_sectors = 8 limit=40427 [ 308.623565][ T6126] syz.0.17: attempt to access beyond end of device [ 308.623565][ T6126] loop0: rw=524288, sector=88768, nr_sectors = 8 limit=40427 [ 308.623689][ T6126] syz.0.17: attempt to access beyond end of device [ 308.623689][ T6126] loop0: rw=524288, sector=88776, nr_sectors = 8 limit=40427 [ 308.623813][ T6126] syz.0.17: attempt to access beyond end of device [ 308.623813][ T6126] loop0: rw=524288, sector=88784, nr_sectors = 8 limit=40427 [ 308.623944][ T6126] syz.0.17: attempt to access beyond end of device [ 308.623944][ T6126] loop0: rw=524288, sector=88792, nr_sectors = 8 limit=40427 [ 312.533712][ T6258] F2FS-fs (loop3): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 312.782511][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 312.815994][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 312.830296][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 312.863221][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 312.875697][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 313.632711][ T6228] bio_check_eod: 32688 callbacks suppressed [ 313.632729][ T6228] syz.2.19: attempt to access beyond end of device [ 313.632729][ T6228] loop2: rw=524288, sector=88552, nr_sectors = 8 limit=40427 [ 313.632852][ T6228] syz.2.19: attempt to access beyond end of device [ 313.632852][ T6228] loop2: rw=524288, sector=88560, nr_sectors = 8 limit=40427 [ 313.632987][ T6228] syz.2.19: attempt to access beyond end of device [ 313.632987][ T6228] loop2: rw=524288, sector=88568, nr_sectors = 8 limit=40427 [ 313.633134][ T6228] syz.2.19: attempt to access beyond end of device [ 313.633134][ T6228] loop2: rw=524288, sector=88576, nr_sectors = 8 limit=40427 [ 313.633258][ T6228] syz.2.19: attempt to access beyond end of device [ 313.633258][ T6228] loop2: rw=524288, sector=88584, nr_sectors = 8 limit=40427 [ 313.633387][ T6228] syz.2.19: attempt to access beyond end of device [ 313.633387][ T6228] loop2: rw=524288, sector=88592, nr_sectors = 8 limit=40427 [ 313.633517][ T6228] syz.2.19: attempt to access beyond end of device [ 313.633517][ T6228] loop2: rw=524288, sector=88600, nr_sectors = 8 limit=40427 [ 313.633634][ T6228] syz.2.19: attempt to access beyond end of device [ 313.633634][ T6228] loop2: rw=524288, sector=88608, nr_sectors = 8 limit=40427 [ 313.633647][ T6258] syz.3.20: attempt to access beyond end of device [ 313.633647][ T6258] loop3: rw=0, sector=87568, nr_sectors = 8 limit=40427 [ 313.633759][ T6228] syz.2.19: attempt to access beyond end of device [ 313.633759][ T6228] loop2: rw=524288, sector=88616, nr_sectors = 8 limit=40427 [ 314.181701][ T6303] chnl_net:caif_netlink_parms(): no params data found [ 314.972862][ T5154] Bluetooth: hci5: command tx timeout [ 315.474401][ T6303] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.522920][ T6303] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.523177][ T6303] bridge_slave_0: entered allmulticast mode [ 315.532861][ T6303] bridge_slave_0: entered promiscuous mode [ 315.536024][ T6303] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.536174][ T6303] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.536356][ T6303] bridge_slave_1: entered allmulticast mode [ 315.582849][ T6303] bridge_slave_1: entered promiscuous mode [ 316.316199][ T6303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.320550][ T6303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.052746][ T5154] Bluetooth: hci5: command tx timeout [ 317.087721][ T6303] team0: Port device team_slave_0 added [ 317.091421][ T6303] team0: Port device team_slave_1 added [ 317.144841][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.144922][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.154700][ T6303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.154716][ T6303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.154739][ T6303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.157195][ T6303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.157207][ T6303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.157229][ T6303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.642811][ T6258] bio_check_eod: 39953 callbacks suppressed [ 318.642830][ T6258] syz.3.20: attempt to access beyond end of device [ 318.642830][ T6258] loop3: rw=524288, sector=86920, nr_sectors = 8 limit=40427 [ 318.642925][ T6126] syz.0.17: attempt to access beyond end of device [ 318.642925][ T6126] loop0: rw=0, sector=87544, nr_sectors = 8 limit=40427 [ 318.642953][ T6258] syz.3.20: attempt to access beyond end of device [ 318.642953][ T6258] loop3: rw=524288, sector=86928, nr_sectors = 8 limit=40427 [ 318.643063][ T6126] syz.0.17: attempt to access beyond end of device [ 318.643063][ T6126] loop0: rw=0, sector=87552, nr_sectors = 8 limit=40427 [ 318.643079][ T6258] syz.3.20: attempt to access beyond end of device [ 318.643079][ T6258] loop3: rw=524288, sector=86936, nr_sectors = 8 limit=40427 [ 318.643195][ T6126] syz.0.17: attempt to access beyond end of device [ 318.643195][ T6126] loop0: rw=0, sector=87560, nr_sectors = 8 limit=40427 [ 318.643206][ T6258] syz.3.20: attempt to access beyond end of device [ 318.643206][ T6258] loop3: rw=524288, sector=86944, nr_sectors = 8 limit=40427 [ 318.643326][ T6126] syz.0.17: attempt to access beyond end of device [ 318.643326][ T6126] loop0: rw=0, sector=87568, nr_sectors = 8 limit=40427 [ 318.643332][ T6258] syz.3.20: attempt to access beyond end of device [ 318.643332][ T6258] loop3: rw=524288, sector=86952, nr_sectors = 8 limit=40427 [ 318.643458][ T6126] syz.0.17: attempt to access beyond end of device [ 318.643458][ T6126] loop0: rw=0, sector=87576, nr_sectors = 8 limit=40427 [ 319.132681][ T5154] Bluetooth: hci5: command tx timeout [ 319.294865][ T6303] hsr_slave_0: entered promiscuous mode [ 319.296127][ T6303] hsr_slave_1: entered promiscuous mode [ 319.297019][ T6303] debugfs: 'hsr0' already exists in 'hsr' [ 319.297041][ T6303] Cannot create hsr debugfs directory [ 321.222750][ T5154] Bluetooth: hci5: command tx timeout [ 321.357543][ T6303] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 321.466189][ T6303] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 321.609070][ T6303] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 321.709720][ T6303] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 322.318443][ T6303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.344432][ T6303] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.395117][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.402852][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.458875][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.462828][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.659130][ T6228] bio_check_eod: 37667 callbacks suppressed [ 323.659149][ T6228] syz.2.19: attempt to access beyond end of device [ 323.659149][ T6228] loop2: rw=524288, sector=88272, nr_sectors = 8 limit=40427 [ 323.682986][ T6126] syz.0.17: attempt to access beyond end of device [ 323.682986][ T6126] loop0: rw=0, sector=87392, nr_sectors = 8 limit=40427 [ 323.683130][ T6126] syz.0.17: attempt to access beyond end of device [ 323.683130][ T6126] loop0: rw=0, sector=87400, nr_sectors = 8 limit=40427 [ 323.683258][ T6126] syz.0.17: attempt to access beyond end of device [ 323.683258][ T6126] loop0: rw=0, sector=87408, nr_sectors = 8 limit=40427 [ 323.683426][ T6126] syz.0.17: attempt to access beyond end of device [ 323.683426][ T6126] loop0: rw=0, sector=87416, nr_sectors = 8 limit=40427 [ 323.683553][ T6126] syz.0.17: attempt to access beyond end of device [ 323.683553][ T6126] loop0: rw=0, sector=87424, nr_sectors = 8 limit=40427 [ 323.683677][ T6126] syz.0.17: attempt to access beyond end of device [ 323.683677][ T6126] loop0: rw=0, sector=87432, nr_sectors = 8 limit=40427 [ 323.683801][ T6126] syz.0.17: attempt to access beyond end of device [ 323.683801][ T6126] loop0: rw=0, sector=87440, nr_sectors = 8 limit=40427 [ 323.683925][ T6126] syz.0.17: attempt to access beyond end of device [ 323.683925][ T6126] loop0: rw=0, sector=87448, nr_sectors = 8 limit=40427 [ 323.684049][ T6126] syz.0.17: attempt to access beyond end of device [ 323.684049][ T6126] loop0: rw=0, sector=87456, nr_sectors = 8 limit=40427 [ 324.056424][ T6303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.332837][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 325.622974][ T6303] veth0_vlan: entered promiscuous mode [ 325.632141][ T6303] veth1_vlan: entered promiscuous mode [ 325.834170][ T6303] veth0_macvtap: entered promiscuous mode [ 325.892087][ T6303] veth1_macvtap: entered promiscuous mode [ 326.025904][ T6303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.165114][ T6303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.235240][ T1428] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.237159][ T1428] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.245937][ T1428] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.257174][ T1428] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.039367][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.039387][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.388908][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.388928][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/26 08:21:39 executed programs: 7 [ 328.678811][ T6258] bio_check_eod: 34945 callbacks suppressed [ 328.678830][ T6258] syz.3.20: attempt to access beyond end of device [ 328.678830][ T6258] loop3: rw=524288, sector=87816, nr_sectors = 8 limit=40427 [ 328.678994][ T6258] syz.3.20: attempt to access beyond end of device [ 328.678994][ T6258] loop3: rw=524288, sector=87824, nr_sectors = 8 limit=40427 [ 328.679121][ T6258] syz.3.20: attempt to access beyond end of device [ 328.679121][ T6258] loop3: rw=524288, sector=87832, nr_sectors = 8 limit=40427 [ 328.679247][ T6258] syz.3.20: attempt to access beyond end of device [ 328.679247][ T6258] loop3: rw=524288, sector=87840, nr_sectors = 8 limit=40427 [ 328.679376][ T6258] syz.3.20: attempt to access beyond end of device [ 328.679376][ T6258] loop3: rw=524288, sector=87848, nr_sectors = 8 limit=40427 [ 328.679501][ T6258] syz.3.20: attempt to access beyond end of device [ 328.679501][ T6258] loop3: rw=524288, sector=87856, nr_sectors = 8 limit=40427 [ 328.679632][ T6258] syz.3.20: attempt to access beyond end of device [ 328.679632][ T6258] loop3: rw=524288, sector=87864, nr_sectors = 8 limit=40427 [ 328.679757][ T6258] syz.3.20: attempt to access beyond end of device [ 328.679757][ T6258] loop3: rw=524288, sector=87872, nr_sectors = 8 limit=40427 [ 328.679881][ T6258] syz.3.20: attempt to access beyond end of device [ 328.679881][ T6258] loop3: rw=524288, sector=87880, nr_sectors = 8 limit=40427 [ 328.680004][ T6258] syz.3.20: attempt to access beyond end of device [ 328.680004][ T6258] loop3: rw=524288, sector=87888, nr_sectors = 8 limit=40427 [ 329.744311][ T6331] loop5: detected capacity change from 0 to 40427 [ 329.857898][ T6331] F2FS-fs: heap/no_heap options were deprecated [ 329.858077][ T6331] F2FS-fs: heap/no_heap options were deprecated [ 329.939613][ T6331] F2FS-fs (loop5): Image doesn't support compression [ 329.991783][ T6331] F2FS-fs (loop5): invalid crc value [ 330.624022][ T6331] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 330.625719][ T6331] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 331.839604][ T6303] CPU: 1 UID: 0 PID: 6303 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 331.839632][ T6303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 331.839649][ T6303] Call Trace: [ 331.839657][ T6303] [ 331.839665][ T6303] dump_stack_lvl+0x189/0x250 [ 331.839706][ T6303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.839727][ T6303] ? rt_spin_lock+0x1bb/0x2c0 [ 331.839748][ T6303] ? __pfx_queue_work_on+0x10/0x10 [ 331.839779][ T6303] ? rt_spin_unlock+0x65/0x80 [ 331.839808][ T6303] f2fs_handle_critical_error+0x354/0x510 [ 331.839838][ T6303] f2fs_write_end_io+0x886/0xb60 [ 331.839878][ T6303] __submit_merged_bio+0x27a/0x6a0 [ 331.839909][ T6303] __submit_merged_write_cond+0x255/0x530 [ 331.839942][ T6303] f2fs_write_data_pages+0x261d/0x3000 [ 331.840008][ T6303] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 331.840098][ T6303] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 331.840122][ T6303] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.840161][ T6303] ? __lock_acquire+0xab9/0xd20 [ 331.840186][ T6303] ? rt_mutex_slowunlock+0x493/0x8a0 [ 331.840210][ T6303] ? reacquire_held_locks+0x127/0x1d0 [ 331.840233][ T6303] ? rt_spin_lock+0x1bb/0x2c0 [ 331.840272][ T6303] ? rt_spin_unlock+0x65/0x80 [ 331.840296][ T6303] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 331.840321][ T6303] do_writepages+0x32b/0x550 [ 331.840345][ T6303] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 331.840385][ T6303] filemap_fdatawrite+0x19c/0x240 [ 331.840407][ T6303] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 331.840477][ T6303] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 331.840503][ T6303] ? rt_spin_unlock+0x65/0x80 [ 331.840531][ T6303] f2fs_sync_dirty_inodes+0x31f/0x830 [ 331.840568][ T6303] f2fs_write_checkpoint+0x95a/0x1df0 [ 331.840617][ T6303] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 331.840683][ T6303] ? f2fs_stop_gc_thread+0x82/0xb0 [ 331.840703][ T6303] ? kfree+0x195/0x550 [ 331.840726][ T6303] ? kill_f2fs_super+0x298/0x6c0 [ 331.840750][ T6303] kill_f2fs_super+0x2c3/0x6c0 [ 331.840776][ T6303] ? __pfx_kill_f2fs_super+0x10/0x10 [ 331.840804][ T6303] ? shrinker_free+0x2ce/0x3e0 [ 331.840829][ T6303] deactivate_locked_super+0xbc/0x130 [ 331.840852][ T6303] cleanup_mnt+0x425/0x4c0 [ 331.840870][ T6303] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.840897][ T6303] task_work_run+0x1d4/0x260 [ 331.840920][ T6303] ? __pfx_task_work_run+0x10/0x10 [ 331.840935][ T6303] ? __x64_sys_umount+0x122/0x160 [ 331.840963][ T6303] ? exit_to_user_mode_loop+0x40/0x110 [ 331.840990][ T6303] exit_to_user_mode_loop+0xec/0x110 [ 331.841013][ T6303] do_syscall_64+0x2bd/0x3b0 [ 331.841029][ T6303] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.841052][ T6303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.841069][ T6303] ? clear_bhb_loop+0x60/0xb0 [ 331.841092][ T6303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.841109][ T6303] RIP: 0033:0x7fe2772c01f7 [ 331.841131][ T6303] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 331.841144][ T6303] RSP: 002b:00007fff77a4ceb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 331.841167][ T6303] RAX: 0000000000000000 RBX: 00007fe277341d7d RCX: 00007fe2772c01f7 [ 331.841179][ T6303] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff77a4cf70 [ 331.841190][ T6303] RBP: 00007fff77a4cf70 R08: 0000000000000000 R09: 0000000000000000 [ 331.841201][ T6303] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff77a4e000 [ 331.841213][ T6303] R13: 00007fe277341d7d R14: 0000000000050ae5 R15: 00007fff77a4e040 [ 331.841247][ T6303] [ 331.841260][ T6303] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 333.692794][ T6258] bio_check_eod: 32976 callbacks suppressed [ 333.692812][ T6258] syz.3.20: attempt to access beyond end of device [ 333.692812][ T6258] loop3: rw=0, sector=87552, nr_sectors = 8 limit=40427 [ 333.692833][ T6228] syz.2.19: attempt to access beyond end of device [ 333.692833][ T6228] loop2: rw=524288, sector=87576, nr_sectors = 8 limit=40427 [ 333.692969][ T6228] syz.2.19: attempt to access beyond end of device [ 333.692969][ T6228] loop2: rw=524288, sector=87584, nr_sectors = 8 limit=40427 [ 333.692970][ T6258] syz.3.20: attempt to access beyond end of device [ 333.692970][ T6258] loop3: rw=0, sector=87560, nr_sectors = 8 limit=40427 [ 333.693096][ T6228] syz.2.19: attempt to access beyond end of device [ 333.693096][ T6228] loop2: rw=524288, sector=87592, nr_sectors = 8 limit=40427 [ 333.693119][ T6258] syz.3.20: attempt to access beyond end of device [ 333.693119][ T6258] loop3: rw=0, sector=87568, nr_sectors = 8 limit=40427 [ 333.693222][ T6228] syz.2.19: attempt to access beyond end of device [ 333.693222][ T6228] loop2: rw=524288, sector=87600, nr_sectors = 8 limit=40427 [ 333.693251][ T6258] syz.3.20: attempt to access beyond end of device [ 333.693251][ T6258] loop3: rw=0, sector=87576, nr_sectors = 8 limit=40427 [ 333.693356][ T6228] syz.2.19: attempt to access beyond end of device [ 333.693356][ T6228] loop2: rw=524288, sector=87608, nr_sectors = 8 limit=40427 [ 333.693382][ T6258] syz.3.20: attempt to access beyond end of device [ 333.693382][ T6258] loop3: rw=0, sector=87584, nr_sectors = 8 limit=40427 [ 336.318655][ T6335] loop5: detected capacity change from 0 to 40427 [ 336.375648][ T6335] F2FS-fs: heap/no_heap options were deprecated [ 336.375827][ T6335] F2FS-fs: heap/no_heap options were deprecated [ 336.413181][ T6335] F2FS-fs (loop5): Image doesn't support compression [ 336.439644][ T6335] F2FS-fs (loop5): invalid crc value [ 337.194748][ T6335] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 337.215705][ T6335] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 338.702817][ T6228] bio_check_eod: 35342 callbacks suppressed [ 338.702839][ T6228] syz.2.19: attempt to access beyond end of device [ 338.702839][ T6228] loop2: rw=524288, sector=89600, nr_sectors = 8 limit=40427 [ 338.702971][ T6228] syz.2.19: attempt to access beyond end of device [ 338.702971][ T6228] loop2: rw=524288, sector=89608, nr_sectors = 8 limit=40427 [ 338.703127][ T6228] syz.2.19: attempt to access beyond end of device [ 338.703127][ T6228] loop2: rw=524288, sector=89616, nr_sectors = 8 limit=40427 [ 338.703251][ T6228] syz.2.19: attempt to access beyond end of device [ 338.703251][ T6228] loop2: rw=524288, sector=89624, nr_sectors = 8 limit=40427 [ 338.703376][ T6228] syz.2.19: attempt to access beyond end of device [ 338.703376][ T6228] loop2: rw=524288, sector=89632, nr_sectors = 8 limit=40427 [ 338.703500][ T6228] syz.2.19: attempt to access beyond end of device [ 338.703500][ T6228] loop2: rw=524288, sector=89640, nr_sectors = 8 limit=40427 [ 338.703632][ T6228] syz.2.19: attempt to access beyond end of device [ 338.703632][ T6228] loop2: rw=524288, sector=89648, nr_sectors = 8 limit=40427 [ 338.703757][ T6228] syz.2.19: attempt to access beyond end of device [ 338.703757][ T6228] loop2: rw=524288, sector=89656, nr_sectors = 8 limit=40427 [ 338.703879][ T6228] syz.2.19: attempt to access beyond end of device [ 338.703879][ T6228] loop2: rw=524288, sector=89664, nr_sectors = 8 limit=40427 [ 338.704002][ T6228] syz.2.19: attempt to access beyond end of device [ 338.704002][ T6228] loop2: rw=524288, sector=89672, nr_sectors = 8 limit=40427 [ 343.712783][ T6126] bio_check_eod: 36813 callbacks suppressed [ 343.712802][ T6126] syz.0.17: attempt to access beyond end of device [ 343.712802][ T6126] loop0: rw=524288, sector=87800, nr_sectors = 8 limit=40427 [ 343.712933][ T6126] syz.0.17: attempt to access beyond end of device [ 343.712933][ T6126] loop0: rw=524288, sector=87808, nr_sectors = 8 limit=40427 [ 343.713060][ T6126] syz.0.17: attempt to access beyond end of device [ 343.713060][ T6126] loop0: rw=524288, sector=87816, nr_sectors = 8 limit=40427 [ 343.713216][ T6126] syz.0.17: attempt to access beyond end of device [ 343.713216][ T6126] loop0: rw=524288, sector=87824, nr_sectors = 8 limit=40427 [ 343.713351][ T6126] syz.0.17: attempt to access beyond end of device [ 343.713351][ T6126] loop0: rw=524288, sector=87832, nr_sectors = 8 limit=40427 [ 343.713478][ T6126] syz.0.17: attempt to access beyond end of device [ 343.713478][ T6126] loop0: rw=524288, sector=87840, nr_sectors = 8 limit=40427 [ 343.713604][ T6126] syz.0.17: attempt to access beyond end of device [ 343.713604][ T6126] loop0: rw=524288, sector=87848, nr_sectors = 8 limit=40427 [ 343.713730][ T6126] syz.0.17: attempt to access beyond end of device [ 343.713730][ T6126] loop0: rw=524288, sector=87856, nr_sectors = 8 limit=40427 [ 343.713856][ T6126] syz.0.17: attempt to access beyond end of device [ 343.713856][ T6126] loop0: rw=524288, sector=87864, nr_sectors = 8 limit=40427 [ 343.713982][ T6126] syz.0.17: attempt to access beyond end of device [ 343.713982][ T6126] loop0: rw=524288, sector=87872, nr_sectors = 8 limit=40427 [ 344.819726][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 347.123846][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 347.142867][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 347.160215][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 347.179070][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 347.215980][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 348.653778][ T6341] chnl_net:caif_netlink_parms(): no params data found [ 348.722871][ T6228] bio_check_eod: 34186 callbacks suppressed [ 348.722889][ T6228] syz.2.19: attempt to access beyond end of device [ 348.722889][ T6228] loop2: rw=0, sector=88456, nr_sectors = 8 limit=40427 [ 348.726849][ T6228] syz.2.19: attempt to access beyond end of device [ 348.726849][ T6228] loop2: rw=0, sector=88464, nr_sectors = 8 limit=40427 [ 348.726996][ T6228] syz.2.19: attempt to access beyond end of device [ 348.726996][ T6228] loop2: rw=0, sector=88472, nr_sectors = 8 limit=40427 [ 348.727126][ T6228] syz.2.19: attempt to access beyond end of device [ 348.727126][ T6228] loop2: rw=0, sector=88480, nr_sectors = 8 limit=40427 [ 348.727287][ T6228] syz.2.19: attempt to access beyond end of device [ 348.727287][ T6228] loop2: rw=0, sector=88488, nr_sectors = 8 limit=40427 [ 348.727419][ T6228] syz.2.19: attempt to access beyond end of device [ 348.727419][ T6228] loop2: rw=0, sector=88496, nr_sectors = 8 limit=40427 [ 348.727554][ T6228] syz.2.19: attempt to access beyond end of device [ 348.727554][ T6228] loop2: rw=0, sector=88504, nr_sectors = 8 limit=40427 [ 348.727688][ T6228] syz.2.19: attempt to access beyond end of device [ 348.727688][ T6228] loop2: rw=0, sector=88512, nr_sectors = 8 limit=40427 [ 348.727816][ T6228] syz.2.19: attempt to access beyond end of device [ 348.727816][ T6228] loop2: rw=0, sector=88520, nr_sectors = 8 limit=40427 [ 348.727944][ T6228] syz.2.19: attempt to access beyond end of device [ 348.727944][ T6228] loop2: rw=0, sector=88528, nr_sectors = 8 limit=40427 [ 349.382741][ T59] Bluetooth: hci6: command tx timeout [ 350.446484][ T6341] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.469233][ T6341] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.469496][ T6341] bridge_slave_0: entered allmulticast mode [ 350.512898][ T6341] bridge_slave_0: entered promiscuous mode [ 350.518088][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.518229][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.518424][ T6341] bridge_slave_1: entered allmulticast mode [ 350.521098][ T6341] bridge_slave_1: entered promiscuous mode [ 351.458549][ T59] Bluetooth: hci6: command tx timeout [ 351.498304][ T6341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.582849][ T6341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.591089][ T6341] team0: Port device team_slave_0 added [ 352.646806][ T6341] team0: Port device team_slave_1 added [ 353.532672][ T59] Bluetooth: hci6: command tx timeout [ 353.732701][ T6126] bio_check_eod: 35833 callbacks suppressed [ 353.732720][ T6126] syz.0.17: attempt to access beyond end of device [ 353.732720][ T6126] loop0: rw=524288, sector=87360, nr_sectors = 8 limit=40427 [ 353.732793][ T6228] syz.2.19: attempt to access beyond end of device [ 353.732793][ T6228] loop2: rw=524288, sector=88424, nr_sectors = 8 limit=40427 [ 353.732878][ T6126] syz.0.17: attempt to access beyond end of device [ 353.732878][ T6126] loop0: rw=524288, sector=87368, nr_sectors = 8 limit=40427 [ 353.732926][ T6228] syz.2.19: attempt to access beyond end of device [ 353.732926][ T6228] loop2: rw=524288, sector=88432, nr_sectors = 8 limit=40427 [ 353.733005][ T6126] syz.0.17: attempt to access beyond end of device [ 353.733005][ T6126] loop0: rw=524288, sector=87376, nr_sectors = 8 limit=40427 [ 353.733052][ T6228] syz.2.19: attempt to access beyond end of device [ 353.733052][ T6228] loop2: rw=524288, sector=88440, nr_sectors = 8 limit=40427 [ 353.733132][ T6126] syz.0.17: attempt to access beyond end of device [ 353.733132][ T6126] loop0: rw=524288, sector=87384, nr_sectors = 8 limit=40427 [ 353.733186][ T6228] syz.2.19: attempt to access beyond end of device [ 353.733186][ T6228] loop2: rw=524288, sector=88448, nr_sectors = 8 limit=40427 [ 353.733257][ T6126] syz.0.17: attempt to access beyond end of device [ 353.733257][ T6126] loop0: rw=524288, sector=87392, nr_sectors = 8 limit=40427 [ 353.733312][ T6228] syz.2.19: attempt to access beyond end of device [ 353.733312][ T6228] loop2: rw=524288, sector=88456, nr_sectors = 8 limit=40427 [ 353.762883][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.762899][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.762922][ T6341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.812871][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.812886][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.812909][ T6341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.864674][ T6292] F2FS-fs (loop4): f2fs_pin_file_control: Enable GC = ino a after 800 GC trials [ 355.194663][ T6341] hsr_slave_0: entered promiscuous mode [ 355.195989][ T6341] hsr_slave_1: entered promiscuous mode [ 355.196864][ T6341] debugfs: 'hsr0' already exists in 'hsr' [ 355.196886][ T6341] Cannot create hsr debugfs directory [ 355.612775][ T59] Bluetooth: hci6: command tx timeout [ 357.684772][ T6341] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 357.854740][ T6341] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 358.247565][ T6341] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 358.582922][ T6341] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 358.742717][ T6292] bio_check_eod: 40151 callbacks suppressed [ 358.742735][ T6292] syz.4.21: attempt to access beyond end of device [ 358.742735][ T6292] loop4: rw=524288, sector=88024, nr_sectors = 8 limit=40427 [ 358.742868][ T6292] syz.4.21: attempt to access beyond end of device [ 358.742868][ T6292] loop4: rw=524288, sector=88032, nr_sectors = 8 limit=40427 [ 358.742995][ T6292] syz.4.21: attempt to access beyond end of device [ 358.742995][ T6292] loop4: rw=524288, sector=88040, nr_sectors = 8 limit=40427 [ 358.743118][ T6292] syz.4.21: attempt to access beyond end of device [ 358.743118][ T6292] loop4: rw=524288, sector=88048, nr_sectors = 8 limit=40427 [ 358.743244][ T6292] syz.4.21: attempt to access beyond end of device [ 358.743244][ T6292] loop4: rw=524288, sector=88056, nr_sectors = 8 limit=40427 [ 358.743369][ T6292] syz.4.21: attempt to access beyond end of device [ 358.743369][ T6292] loop4: rw=524288, sector=88064, nr_sectors = 8 limit=40427 [ 358.743523][ T6292] syz.4.21: attempt to access beyond end of device [ 358.743523][ T6292] loop4: rw=524288, sector=88072, nr_sectors = 8 limit=40427 [ 358.743647][ T6292] syz.4.21: attempt to access beyond end of device [ 358.743647][ T6292] loop4: rw=524288, sector=88080, nr_sectors = 8 limit=40427 [ 358.743771][ T6292] syz.4.21: attempt to access beyond end of device [ 358.743771][ T6292] loop4: rw=524288, sector=88088, nr_sectors = 8 limit=40427 [ 358.743902][ T6292] syz.4.21: attempt to access beyond end of device [ 358.743902][ T6292] loop4: rw=524288, sector=88096, nr_sectors = 8 limit=40427 [ 359.529506][ T6341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.686974][ T6341] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.759147][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.759351][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.851006][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.851179][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.418262][ T6341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.206913][ T6341] veth0_vlan: entered promiscuous mode [ 363.363036][ T6341] veth1_vlan: entered promiscuous mode [ 363.599645][ T6341] veth0_macvtap: entered promiscuous mode [ 363.704831][ T6341] veth1_macvtap: entered promiscuous mode [ 363.752794][ T6228] bio_check_eod: 38411 callbacks suppressed [ 363.752813][ T6228] syz.2.19: attempt to access beyond end of device [ 363.752813][ T6228] loop2: rw=0, sector=88720, nr_sectors = 8 limit=40427 [ 363.752950][ T6228] syz.2.19: attempt to access beyond end of device [ 363.752950][ T6228] loop2: rw=0, sector=88728, nr_sectors = 8 limit=40427 [ 363.753083][ T6228] syz.2.19: attempt to access beyond end of device [ 363.753083][ T6228] loop2: rw=0, sector=88736, nr_sectors = 8 limit=40427 [ 363.753215][ T6228] syz.2.19: attempt to access beyond end of device [ 363.753215][ T6228] loop2: rw=0, sector=88744, nr_sectors = 8 limit=40427 [ 363.753348][ T6228] syz.2.19: attempt to access beyond end of device [ 363.753348][ T6228] loop2: rw=0, sector=88752, nr_sectors = 8 limit=40427 [ 363.753488][ T6228] syz.2.19: attempt to access beyond end of device [ 363.753488][ T6228] loop2: rw=0, sector=88760, nr_sectors = 8 limit=40427 [ 363.753621][ T6228] syz.2.19: attempt to access beyond end of device [ 363.753621][ T6228] loop2: rw=0, sector=88768, nr_sectors = 8 limit=40427 [ 363.753753][ T6228] syz.2.19: attempt to access beyond end of device [ 363.753753][ T6228] loop2: rw=0, sector=88776, nr_sectors = 8 limit=40427 [ 363.753887][ T6228] syz.2.19: attempt to access beyond end of device [ 363.753887][ T6228] loop2: rw=0, sector=88784, nr_sectors = 8 limit=40427 [ 363.754072][ T6228] syz.2.19: attempt to access beyond end of device [ 363.754072][ T6228] loop2: rw=0, sector=88792, nr_sectors = 8 limit=40427 [ 363.910732][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.947696][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.047344][ T1029] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.048602][ T1029] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.049012][ T1029] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.049305][ T1029] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.296526][ T5154] Bluetooth: hci2: command 0x0406 tx timeout [ 365.475183][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.475202][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.908497][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.908517][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/26 08:22:18 executed programs: 9 [ 368.762699][ T6198] bio_check_eod: 38327 callbacks suppressed [ 368.762725][ T6198] syz.1.18: attempt to access beyond end of device [ 368.762725][ T6198] loop1: rw=0, sector=89272, nr_sectors = 8 limit=40427 [ 368.762857][ T6198] syz.1.18: attempt to access beyond end of device [ 368.762857][ T6198] loop1: rw=0, sector=89280, nr_sectors = 8 limit=40427 [ 368.762986][ T6198] syz.1.18: attempt to access beyond end of device [ 368.762986][ T6198] loop1: rw=0, sector=89288, nr_sectors = 8 limit=40427 [ 368.763115][ T6198] syz.1.18: attempt to access beyond end of device [ 368.763115][ T6198] loop1: rw=0, sector=89296, nr_sectors = 8 limit=40427 [ 368.763244][ T6198] syz.1.18: attempt to access beyond end of device [ 368.763244][ T6198] loop1: rw=0, sector=89304, nr_sectors = 8 limit=40427 [ 368.763374][ T6198] syz.1.18: attempt to access beyond end of device [ 368.763374][ T6198] loop1: rw=0, sector=89312, nr_sectors = 8 limit=40427 [ 368.763618][ T6198] syz.1.18: attempt to access beyond end of device [ 368.763618][ T6198] loop1: rw=0, sector=89320, nr_sectors = 8 limit=40427 [ 368.763760][ T6198] syz.1.18: attempt to access beyond end of device [ 368.763760][ T6198] loop1: rw=0, sector=89328, nr_sectors = 8 limit=40427 [ 368.763888][ T6198] syz.1.18: attempt to access beyond end of device [ 368.763888][ T6198] loop1: rw=0, sector=89336, nr_sectors = 8 limit=40427 [ 368.764018][ T6198] syz.1.18: attempt to access beyond end of device [ 368.764018][ T6198] loop1: rw=0, sector=89344, nr_sectors = 8 limit=40427 [ 368.994917][ T6369] loop6: detected capacity change from 0 to 40427 [ 369.104689][ T6369] F2FS-fs: heap/no_heap options were deprecated [ 369.104871][ T6369] F2FS-fs: heap/no_heap options were deprecated [ 369.196474][ T6369] F2FS-fs (loop6): Image doesn't support compression [ 369.211103][ T6369] F2FS-fs (loop6): invalid crc value [ 369.880018][ T6369] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 373.778130][ T6126] bio_check_eod: 37695 callbacks suppressed [ 373.778149][ T6126] syz.0.17: attempt to access beyond end of device [ 373.778149][ T6126] loop0: rw=0, sector=87816, nr_sectors = 8 limit=40427 [ 373.778280][ T6126] syz.0.17: attempt to access beyond end of device [ 373.778280][ T6126] loop0: rw=0, sector=87824, nr_sectors = 8 limit=40427 [ 373.778391][ T6228] syz.2.19: attempt to access beyond end of device [ 373.778391][ T6228] loop2: rw=524288, sector=88936, nr_sectors = 8 limit=40427 [ 373.778401][ T6126] syz.0.17: attempt to access beyond end of device [ 373.778401][ T6126] loop0: rw=0, sector=87832, nr_sectors = 8 limit=40427 [ 373.778536][ T6126] syz.0.17: attempt to access beyond end of device [ 373.778536][ T6126] loop0: rw=0, sector=87840, nr_sectors = 8 limit=40427 [ 373.778536][ T6228] syz.2.19: attempt to access beyond end of device [ 373.778536][ T6228] loop2: rw=524288, sector=88944, nr_sectors = 8 limit=40427 [ 373.778665][ T6228] syz.2.19: attempt to access beyond end of device [ 373.778665][ T6228] loop2: rw=524288, sector=88952, nr_sectors = 8 limit=40427 [ 373.778669][ T6126] syz.0.17: attempt to access beyond end of device [ 373.778669][ T6126] loop0: rw=0, sector=87848, nr_sectors = 8 limit=40427 [ 373.778793][ T6228] syz.2.19: attempt to access beyond end of device [ 373.778793][ T6228] loop2: rw=524288, sector=88960, nr_sectors = 8 limit=40427 [ 373.778801][ T6126] syz.0.17: attempt to access beyond end of device [ 373.778801][ T6126] loop0: rw=0, sector=87856, nr_sectors = 8 limit=40427 [ 374.074870][ T6374] loop6: detected capacity change from 0 to 40427 [ 374.115114][ T6374] F2FS-fs: heap/no_heap options were deprecated [ 374.115292][ T6374] F2FS-fs: heap/no_heap options were deprecated [ 374.132255][ T6374] F2FS-fs (loop6): Image doesn't support compression [ 374.173860][ T6374] F2FS-fs (loop6): invalid crc value [ 374.859883][ T6374] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 2025/09/26 08:22:27 executed programs: 11 [ 378.593537][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.593611][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.790250][ T6258] bio_check_eod: 37449 callbacks suppressed [ 378.790269][ T6258] syz.3.20: attempt to access beyond end of device [ 378.790269][ T6258] loop3: rw=524288, sector=88488, nr_sectors = 8 limit=40427 [ 378.790409][ T6258] syz.3.20: attempt to access beyond end of device [ 378.790409][ T6258] loop3: rw=524288, sector=88496, nr_sectors = 8 limit=40427 [ 378.790539][ T6258] syz.3.20: attempt to access beyond end of device [ 378.790539][ T6258] loop3: rw=524288, sector=88504, nr_sectors = 8 limit=40427 [ 378.790668][ T6258] syz.3.20: attempt to access beyond end of device [ 378.790668][ T6258] loop3: rw=524288, sector=88512, nr_sectors = 8 limit=40427 [ 378.790829][ T6258] syz.3.20: attempt to access beyond end of device [ 378.790829][ T6258] loop3: rw=524288, sector=88520, nr_sectors = 8 limit=40427 [ 378.790965][ T6258] syz.3.20: attempt to access beyond end of device [ 378.790965][ T6258] loop3: rw=524288, sector=88528, nr_sectors = 8 limit=40427 [ 378.791097][ T6258] syz.3.20: attempt to access beyond end of device [ 378.791097][ T6258] loop3: rw=524288, sector=88536, nr_sectors = 8 limit=40427 [ 378.791227][ T6258] syz.3.20: attempt to access beyond end of device [ 378.791227][ T6258] loop3: rw=524288, sector=88544, nr_sectors = 8 limit=40427 [ 378.791356][ T6258] syz.3.20: attempt to access beyond end of device [ 378.791356][ T6258] loop3: rw=524288, sector=88552, nr_sectors = 8 limit=40427 [ 378.791486][ T6258] syz.3.20: attempt to access beyond end of device [ 378.791486][ T6258] loop3: rw=524288, sector=88560, nr_sectors = 8 limit=40427 [ 378.986493][ T6384] loop6: detected capacity change from 0 to 40427 [ 378.987732][ T6384] F2FS-fs: heap/no_heap options were deprecated [ 378.987907][ T6384] F2FS-fs: heap/no_heap options were deprecated [ 379.052637][ T6384] F2FS-fs (loop6): Image doesn't support compression [ 379.072187][ T6384] F2FS-fs (loop6): invalid crc value [ 379.810222][ T6384] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 379.912669][ T6384] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 381.773442][ T38] INFO: task kworker/u8:3:57 blocked for more than 143 seconds. [ 381.773473][ T38] Not tainted syzkaller #0 [ 381.773482][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.773491][ T38] task:kworker/u8:3 state:D stack:24968 pid:57 tgid:57 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 381.773537][ T38] Workqueue: writeback wb_workfn (flush-7:0) [ 381.773567][ T38] Call Trace: [ 381.773573][ T38] [ 381.773586][ T38] __schedule+0x16f3/0x4c20 [ 381.773616][ T38] ? kvm_sched_clock_read+0x11/0x20 [ 381.773643][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 381.773677][ T38] ? __pfx___schedule+0x10/0x10 [ 381.773722][ T38] rt_mutex_schedule+0x77/0xf0 [ 381.773739][ T38] ? __rt_mutex_slowlock_locked+0x1a7/0x25e0 [ 381.773758][ T38] __rt_mutex_slowlock_locked+0x1e04/0x25e0 [ 381.773790][ T38] ? __rt_mutex_slowlock_locked+0x1a7/0x25e0 [ 381.773818][ T38] ? __pfx___rt_mutex_slowlock_locked+0x10/0x10 [ 381.773848][ T38] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 381.773877][ T38] ? rt_mutex_pre_schedule+0x7d/0x1d0 [ 381.773899][ T38] rt_mutex_slowlock+0xb5/0x160 [ 381.773921][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 381.773953][ T38] rwbase_write_lock+0x14f/0x750 [ 381.773985][ T38] f2fs_balance_fs+0x5af/0x7f0 [ 381.774010][ T38] ? f2fs_update_inode+0x13df/0x2620 [ 381.774032][ T38] ? f2fs_write_inode+0x3fb/0x5f0 [ 381.774053][ T38] ? __pfx_f2fs_balance_fs+0x10/0x10 [ 381.774097][ T38] f2fs_write_inode+0x3fb/0x5f0 [ 381.774122][ T38] __writeback_single_inode+0x6f1/0x1000 [ 381.774152][ T38] writeback_sb_inodes+0x6b7/0xf60 [ 381.774176][ T38] ? stack_trace_save+0x9c/0xe0 [ 381.774200][ T38] ? mark_lock_irq+0x31a/0x390 [ 381.774235][ T38] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 381.774293][ T38] ? __pfx_down_read_trylock+0x10/0x10 [ 381.774315][ T38] ? __pfx_move_expired_inodes+0x10/0x10 [ 381.774345][ T38] __writeback_inodes_wb+0x111/0x240 [ 381.774375][ T38] wb_writeback+0x44f/0xaf0 [ 381.774403][ T38] ? queue_io+0x3c1/0x560 [ 381.774427][ T38] ? __pfx_wb_writeback+0x10/0x10 [ 381.774475][ T38] wb_workfn+0xaf4/0xf00 [ 381.774509][ T38] ? __pfx_wb_workfn+0x10/0x10 [ 381.774532][ T38] ? __lock_acquire+0xab9/0xd20 [ 381.774565][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 381.774592][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 381.774614][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 381.774634][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 381.774656][ T38] process_scheduled_works+0xade/0x17b0 [ 381.774707][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 381.774746][ T38] worker_thread+0x8a0/0xda0 [ 381.774794][ T38] kthread+0x70e/0x8a0 [ 381.774821][ T38] ? __pfx_worker_thread+0x10/0x10 [ 381.774841][ T38] ? __pfx_kthread+0x10/0x10 [ 381.774870][ T38] ? __pfx_kthread+0x10/0x10 [ 381.774894][ T38] ret_from_fork+0x436/0x7d0 [ 381.774919][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 381.774947][ T38] ? __switch_to_asm+0x39/0x70 [ 381.774963][ T38] ? __switch_to_asm+0x33/0x70 [ 381.774979][ T38] ? __pfx_kthread+0x10/0x10 [ 381.775003][ T38] ret_from_fork_asm+0x1a/0x30 [ 381.775037][ T38] [ 381.775181][ T38] [ 381.775181][ T38] Showing all locks held in the system: [ 381.775190][ T38] 2 locks held by kworker/u8:0/12: [ 381.775200][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 381.775246][ T38] #1: ffffc90000117bc0 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 381.775291][ T38] 1 lock held by khungtaskd/38: [ 381.775301][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 381.775342][ T38] 4 locks held by kworker/u8:2/43: [ 381.775352][ T38] #0: ffff8881404bc138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 381.775396][ T38] #1: ffffc90000b47bc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 381.775440][ T38] #2: ffff88805ea960d0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 381.775497][ T38] #3: ffff888032c69990 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5af/0x7f0 [ 381.775543][ T38] 4 locks held by kworker/u8:3/57: [ 381.775553][ T38] #0: ffff8881404bc138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 381.775595][ T38] #1: ffffc9000123fbc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 381.775639][ T38] #2: ffff88803773e0d0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 381.775685][ T38] #3: ffff8880318f5990 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5af/0x7f0 [ 381.775729][ T38] 4 locks held by kworker/u8:4/67: [ 381.775739][ T38] #0: ffff8881404bc138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 381.775783][ T38] #1: ffffc9000152fbc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 381.775826][ T38] #2: ffff888054a720d0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 381.775872][ T38] #3: ffff88803008d990 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5af/0x7f0 [ 381.775917][ T38] 4 locks held by kworker/u8:5/814: [ 381.775927][ T38] #0: ffff8881404bc138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 381.775971][ T38] #1: ffffc900045bfbc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 381.776015][ T38] #2: ffff8880314c60d0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 381.776061][ T38] #3: ffff8880569dd990 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5af/0x7f0 [ 381.776106][ T38] 2 locks held by kworker/u8:6/995: [ 381.776119][ T38] 4 locks held by kworker/u8:10/1455: [ 381.776129][ T38] #0: ffff8881404bc138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 381.776173][ T38] #1: ffffc9000550fbc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 381.776217][ T38] #2: ffff88805f0280d0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 381.776263][ T38] #3: ffff88805c769990 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5af/0x7f0 [ 381.776307][ T38] 4 locks held by kworker/u8:11/1526: [ 381.776317][ T38] #0: ffff8881404bc138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 381.776357][ T38] #1: ffffc9000590fbc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 381.776400][ T38] #2: ffff8880578220d0 (&type->s_umount_key#54){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 381.776452][ T38] #3: ffff888023479990 (&sbi->gc_lock){+.+.}-{4:4}, at: f2fs_balance_fs+0x5af/0x7f0 [ 381.776508][ T38] 2 locks held by getty/5596: [ 381.776518][ T38] #0: ffff88823bf328a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 381.776565][ T38] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 381.776612][ T38] 7 locks held by syz.0.17/6126: [ 381.776623][ T38] 5 locks held by syz.1.18/6198: [ 381.776634][ T38] 7 locks held by syz.2.19/6228: [ 381.776645][ T38] 5 locks held by syz.3.20/6258: [ 381.776656][ T38] 4 locks held by syz.4.21/6292: [ 381.776666][ T38] 5 locks held by syz.5.23/6335: [ 381.776677][ T38] 1 lock held by syz-executor/6341: [ 381.776687][ T38] 2 locks held by kworker/u8:12/6370: [ 381.776697][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 381.776741][ T38] #1: ffffc900049dfbc0 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 381.776785][ T38] 3 locks held by udevd/6385: [ 381.776795][ T38] [ 381.776799][ T38] ============================================= [ 381.776799][ T38] [ 381.776816][ T38] NMI backtrace for cpu 1 [ 381.776835][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 381.776854][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 381.776864][ T38] Call Trace: [ 381.776871][ T38] [ 381.776878][ T38] dump_stack_lvl+0x189/0x250 [ 381.776904][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.776926][ T38] ? __pfx__printk+0x10/0x10 [ 381.776957][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 381.776981][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 381.777005][ T38] ? __pfx__printk+0x10/0x10 [ 381.777028][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 381.777051][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 381.777075][ T38] watchdog+0xf93/0xfe0 [ 381.777101][ T38] ? watchdog+0x1de/0xfe0 [ 381.777126][ T38] kthread+0x70e/0x8a0 [ 381.777152][ T38] ? __pfx_watchdog+0x10/0x10 [ 381.777171][ T38] ? __pfx_kthread+0x10/0x10 [ 381.777204][ T38] ? __pfx_kthread+0x10/0x10 [ 381.777227][ T38] ret_from_fork+0x436/0x7d0 [ 381.777250][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 381.777277][ T38] ? __switch_to_asm+0x39/0x70 [ 381.777292][ T38] ? __switch_to_asm+0x33/0x70 [ 381.777307][ T38] ? __pfx_kthread+0x10/0x10 [ 381.777330][ T38] ret_from_fork_asm+0x1a/0x30 [ 381.777362][ T38] [ 381.777368][ T38] Sending NMI from CPU 1 to CPUs 0: [ 381.777391][ C0] NMI backtrace for cpu 0 [ 381.777404][ C0] CPU: 0 UID: 0 PID: 995 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 381.777422][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 381.777431][ C0] Workqueue: bat_events batadv_nc_worker [ 381.777457][ C0] RIP: 0010:lock_acquire+0x120/0x360 [ 381.777479][ C0] Code: 41 f7 c7 00 02 00 00 41 0f 94 c1 4c 89 ef 89 de 8b 54 24 04 44 89 e1 45 89 f0 6a 00 6a 00 6a 00 55 ff 74 24 30 e8 e0 02 00 00 <48> 83 c4 28 48 c7 c7 1b b1 21 8d e8 40 47 5b 09 b8 ff ff ff ff 65 [ 381.777491][ C0] RSP: 0018:ffffc90004707778 EFLAGS: 00000082 [ 381.777503][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: c11fc33913534e00 [ 381.777513][ C0] RDX: 0000000000000000 RSI: ffff888025ab29a8 RDI: ffff888025ab1dc0 [ 381.777524][ C0] RBP: ffffffff8184da91 R08: 0000000000000000 R09: ffffffff8184da91 [ 381.777534][ C0] R10: dffffc0000000000 R11: fffffbfff1e3ac67 R12: 0000000000000002 [ 381.777544][ C0] R13: ffffffff8d9a8d80 R14: 0000000000000000 R15: 0000000000000246 [ 381.777555][ C0] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 381.777567][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.777578][ C0] CR2: 00007efd415a1000 CR3: 000000003ac7c000 CR4: 00000000003526f0 [ 381.777591][ C0] Call Trace: [ 381.777597][ C0] [ 381.777603][ C0] ? __local_bh_disable_ip+0xa1/0x400 [ 381.777623][ C0] ? __local_bh_disable_ip+0xa1/0x400 [ 381.777639][ C0] ? __local_bh_disable_ip+0xa1/0x400 [ 381.777655][ C0] __local_bh_disable_ip+0x286/0x400 [ 381.777670][ C0] ? __local_bh_disable_ip+0xa1/0x400 [ 381.777686][ C0] ? batadv_nc_purge_paths+0x6a/0x3f0 [ 381.777711][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 381.777727][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 381.777746][ C0] ? rt_spin_unlock+0x65/0x80 [ 381.777762][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 381.777782][ C0] batadv_nc_purge_paths+0xf7/0x3f0 [ 381.777801][ C0] ? batadv_nc_purge_paths+0x6a/0x3f0 [ 381.777822][ C0] batadv_nc_worker+0x8c8/0xbc0 [ 381.777840][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 381.777859][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 381.777876][ C0] process_scheduled_works+0xade/0x17b0 [ 381.777902][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 381.777925][ C0] worker_thread+0x8a0/0xda0 [ 381.777950][ C0] kthread+0x70e/0x8a0 [ 381.777970][ C0] ? __pfx_worker_thread+0x10/0x10 [ 381.777986][ C0] ? __pfx_kthread+0x10/0x10 [ 381.778005][ C0] ? __pfx_kthread+0x10/0x10 [ 381.778023][ C0] ret_from_fork+0x436/0x7d0 [ 381.778040][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 381.778059][ C0] ? __switch_to_asm+0x39/0x70 [ 381.778071][ C0] ? __switch_to_asm+0x33/0x70 [ 381.778084][ C0] ? __pfx_kthread+0x10/0x10 [ 381.778102][ C0] ret_from_fork_asm+0x1a/0x30 [ 381.778121][ C0] [ 381.778392][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 381.778405][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 381.778425][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 381.778434][ T38] Call Trace: [ 381.778441][ T38] [ 381.778454][ T38] dump_stack_lvl+0x99/0x250 [ 381.778477][ T38] ? __asan_memcpy+0x40/0x70 [ 381.778496][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.778519][ T38] ? __pfx__printk+0x10/0x10 [ 381.778549][ T38] vpanic+0x281/0x750 [ 381.778574][ T38] ? __pfx_vpanic+0x10/0x10 [ 381.778594][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 381.778612][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 381.778645][ T38] panic+0xb9/0xc0 [ 381.778667][ T38] ? __pfx_panic+0x10/0x10 [ 381.778692][ T38] ? irq_work_queue+0xc3/0x140 [ 381.778716][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 381.778740][ T38] watchdog+0xfd2/0xfe0 [ 381.778765][ T38] ? watchdog+0x1de/0xfe0 [ 381.778791][ T38] kthread+0x70e/0x8a0 [ 381.778817][ T38] ? __pfx_watchdog+0x10/0x10 [ 381.778836][ T38] ? __pfx_kthread+0x10/0x10 [ 381.778864][ T38] ? __pfx_kthread+0x10/0x10 [ 381.778887][ T38] ret_from_fork+0x436/0x7d0 [ 381.778911][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 381.778937][ T38] ? __switch_to_asm+0x39/0x70 [ 381.778952][ T38] ? __switch_to_asm+0x33/0x70 [ 381.778968][ T38] ? __pfx_kthread+0x10/0x10 [ 381.778992][ T38] ret_from_fork_asm+0x1a/0x30 [ 381.779023][ T38] [ 381.779289][ T38] Kernel Offset: disabled