no interfaces have a carrier [ 51.041336][ T5280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.074998][ T5280] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.10' (ED25519) to the list of known hosts. 2026/08/15 00:24:43 parsed 1 programs 2026/08/15 00:24:43 serving rpc on tcp://34521 syzkaller login: [ 82.304418][ T5629] cgroup: Unknown subsys name 'net' [ 82.410252][ T5629] cgroup: Unknown subsys name 'cpuset' [ 82.419385][ T5629] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.083934][ T5629] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.977405][ T30] cfg80211: failed to load regulatory.db [ 87.262090][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.262120][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.295733][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.297278][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.343208][ T5643] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.904970][ T5660] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.906244][ T5660] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.915369][ T5660] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.932343][ T5660] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.940582][ T5660] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.432182][ T5713] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.432903][ T5713] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.433035][ T5713] bridge_slave_0: entered allmulticast mode [ 91.434862][ T5713] bridge_slave_0: entered promiscuous mode [ 91.440398][ T5713] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.440541][ T5713] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.440669][ T5713] bridge_slave_1: entered allmulticast mode [ 91.442512][ T5713] bridge_slave_1: entered promiscuous mode [ 91.477625][ T5713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.480772][ T5713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.512641][ T5713] team0: Port device team_slave_0 added [ 91.515622][ T5713] team0: Port device team_slave_1 added [ 91.539274][ T5713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.539301][ T5713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.540796][ T5713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.544067][ T5713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.544081][ T5713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.544102][ T5713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.599470][ T5713] hsr_slave_0: entered promiscuous mode [ 91.600690][ T5713] hsr_slave_1: entered promiscuous mode [ 91.755781][ T5713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.768705][ T5713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.769680][ T5713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.781411][ T5713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.783762][ T5713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.798749][ T5713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.800867][ T5713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.811009][ T5713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.841625][ T5713] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.841793][ T5713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.842328][ T5713] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.842444][ T5713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.911050][ T5713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.927441][ T3349] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.936218][ T3349] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.952757][ T5713] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.962235][ T3273] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.962358][ T3273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.970960][ T3349] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.971631][ T3349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.302297][ T5713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.345153][ T5713] veth0_vlan: entered promiscuous mode [ 92.355262][ T5713] veth1_vlan: entered promiscuous mode [ 92.384927][ T5713] veth0_macvtap: entered promiscuous mode [ 92.390317][ T5713] veth1_macvtap: entered promiscuous mode [ 92.410191][ T5713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.414654][ T5713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.498145][ T3349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.508095][ T3349] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.536605][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.536908][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.620973][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.701374][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.769296][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.844690][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/08/15 00:24:57 executed programs: 0 [ 93.023126][ T5660] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.024742][ T5660] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.026418][ T5660] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.028195][ T5660] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.028908][ T5660] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.482242][ T5753] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.482400][ T5753] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.482524][ T5753] bridge_slave_0: entered allmulticast mode [ 93.484344][ T5753] bridge_slave_0: entered promiscuous mode [ 93.487910][ T5753] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.488010][ T5753] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.488400][ T5753] bridge_slave_1: entered allmulticast mode [ 93.490226][ T5753] bridge_slave_1: entered promiscuous mode [ 93.533102][ T5753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.538166][ T5753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.567543][ T5753] team0: Port device team_slave_0 added [ 93.570426][ T5753] team0: Port device team_slave_1 added [ 93.593344][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.593377][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.593400][ T5753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.597967][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.598000][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.598021][ T5753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.657673][ T5753] hsr_slave_0: entered promiscuous mode [ 93.658710][ T5753] hsr_slave_1: entered promiscuous mode [ 93.659438][ T5753] debugfs: 'hsr0' already exists in 'hsr' [ 93.659515][ T5753] Cannot create hsr debugfs directory [ 95.051051][ T13] bridge_slave_1: left allmulticast mode [ 95.051115][ T13] bridge_slave_1: left promiscuous mode [ 95.052001][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.057754][ T4934] Bluetooth: hci0: command tx timeout [ 95.061578][ T13] bridge_slave_0: left allmulticast mode [ 95.061611][ T13] bridge_slave_0: left promiscuous mode [ 95.062534][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.206256][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.219442][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.229766][ T13] bond0 (unregistering): Released all slaves [ 95.332813][ T13] hsr_slave_0: left promiscuous mode [ 95.341494][ T13] hsr_slave_1: left promiscuous mode [ 95.348085][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.355976][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.364606][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.364893][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.388811][ T13] veth1_macvtap: left promiscuous mode [ 95.388883][ T13] veth0_macvtap: left promiscuous mode [ 95.388990][ T13] veth1_vlan: left promiscuous mode [ 95.389073][ T13] veth0_vlan: left promiscuous mode [ 95.755278][ T13] team0 (unregistering): Port device team_slave_1 removed [ 95.776446][ T13] team0 (unregistering): Port device team_slave_0 removed [ 96.150790][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 96.405111][ T5753] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.431157][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.434404][ T5753] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.445420][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.446392][ T5753] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.478764][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.541917][ T5753] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.562028][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.730585][ T5753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.753421][ T5753] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.764052][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.764204][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.777282][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.777384][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.137007][ T4934] Bluetooth: hci0: command tx timeout [ 97.141771][ T5753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.190131][ T5753] veth0_vlan: entered promiscuous mode [ 97.198983][ T5753] veth1_vlan: entered promiscuous mode [ 97.222997][ T5753] veth0_macvtap: entered promiscuous mode [ 97.228484][ T5753] veth1_macvtap: entered promiscuous mode [ 97.244471][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.255321][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.325451][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.327538][ T252] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.327579][ T252] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.327609][ T252] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.327637][ T252] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.343342][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.389510][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.389570][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.646656][ T5814] loop0: detected capacity change from 0 to 40427 [ 97.663745][ T5814] F2FS-fs (loop0): invalid crc value [ 97.747567][ T5814] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 97.750887][ T5814] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 97.773201][ T5753] syz-executor: attempt to access beyond end of device [ 97.773201][ T5753] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.777417][ T5753] CPU: 1 UID: 0 PID: 5753 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 97.777443][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.777454][ T5753] Call Trace: [ 97.777462][ T5753] [ 97.777469][ T5753] dump_stack_lvl+0xe8/0x150 [ 97.777501][ T5753] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 97.777528][ T5753] f2fs_write_end_bio+0x1211/0x16e0 [ 97.777555][ T5753] ? blkg_put+0x22/0x240 [ 97.777589][ T5753] __submit_merged_bio+0x258/0x6a0 [ 97.777610][ T5753] ? rcu_is_watching+0x16/0xb0 [ 97.777645][ T5753] __submit_merged_write_cond+0x3c9/0x4e0 [ 97.777676][ T5753] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 97.777719][ T5753] f2fs_write_data_pages+0x2a27/0x36f0 [ 97.777777][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 97.777803][ T5753] ? is_bpf_text_address+0x26/0x2b0 [ 97.777835][ T5753] ? arch_stack_walk+0xfb/0x150 [ 97.777883][ T5753] ? add_lock_to_list+0xc7/0x100 [ 97.777906][ T5753] ? lockdep_unlock+0x5c/0xd0 [ 97.777929][ T5753] ? __lock_acquire+0x14b9/0x2e50 [ 97.777973][ T5753] ? do_raw_spin_lock+0x12b/0x2f0 [ 97.778006][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 97.778030][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 97.778054][ T5753] do_writepages+0x338/0x560 [ 97.778086][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 97.778114][ T5753] filemap_fdatawrite+0x1e9/0x2f0 [ 97.778140][ T5753] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 97.778205][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 97.778232][ T5753] f2fs_sync_dirty_inodes+0x30e/0x830 [ 97.778271][ T5753] f2fs_write_checkpoint+0xa3d/0x2710 [ 97.778294][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 97.778342][ T5753] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 97.778400][ T5753] ? try_to_wake_up+0x8f2/0x14d0 [ 97.778433][ T5753] kill_f2fs_super+0x2dd/0x700 [ 97.778466][ T5753] ? __pfx_kill_f2fs_super+0x10/0x10 [ 97.778501][ T5753] ? call_rcu+0x64d/0x8b0 [ 97.778521][ T5753] ? lockdep_hardirqs_on+0x7b/0x110 [ 97.778554][ T5753] deactivate_locked_super+0xbc/0x110 [ 97.778576][ T5753] cleanup_mnt+0x3d3/0x460 [ 97.778601][ T5753] task_work_run+0x1d9/0x270 [ 97.778624][ T5753] ? __pfx_task_work_run+0x10/0x10 [ 97.778659][ T5753] exit_to_user_mode_loop+0x204/0x770 [ 97.778677][ T5753] ? rcu_is_watching+0x16/0xb0 [ 97.778701][ T5753] do_syscall_64+0x328/0x520 [ 97.778720][ T5753] ? trace_irq_disable+0x3b/0x140 [ 97.778736][ T5753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.778754][ T5753] ? clear_bhb_loop+0x70/0xc0 [ 97.778777][ T5753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.778794][ T5753] RIP: 0033:0x7f5d1279f317 [ 97.778812][ T5753] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 97.778826][ T5753] RSP: 002b:00007ffdd08d5238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 97.778846][ T5753] RAX: 0000000000000000 RBX: 00007f5d12834474 RCX: 00007f5d1279f317 [ 97.778858][ T5753] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd08d52f0 [ 97.778868][ T5753] RBP: 00007ffdd08d52f0 R08: 00007ffdd08d62f0 R09: 00000000ffffffff [ 97.778880][ T5753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd08d6380 [ 97.778890][ T5753] R13: 00007f5d12834474 R14: 0000000000017da6 R15: 00007ffdd08d63c0 [ 97.778919][ T5753] [ 97.779628][ T5753] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 98.356013][ T5819] loop0: detected capacity change from 0 to 40427 [ 98.371853][ T5819] F2FS-fs (loop0): invalid crc value [ 98.458703][ T5819] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 98.462039][ T5819] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 98.484378][ T5753] syz-executor: attempt to access beyond end of device [ 98.484378][ T5753] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 2026/08/15 00:25:02 executed programs: 4 [ 98.485095][ T5753] CPU: 1 UID: 0 PID: 5753 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 98.485118][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.485129][ T5753] Call Trace: [ 98.485136][ T5753] [ 98.485144][ T5753] dump_stack_lvl+0xe8/0x150 [ 98.485176][ T5753] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 98.485204][ T5753] f2fs_write_end_bio+0x1211/0x16e0 [ 98.485236][ T5753] ? blkg_put+0x22/0x240 [ 98.485274][ T5753] __submit_merged_bio+0x258/0x6a0 [ 98.485294][ T5753] ? rcu_is_watching+0x16/0xb0 [ 98.485321][ T5753] __submit_merged_write_cond+0x3c9/0x4e0 [ 98.485352][ T5753] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 98.485399][ T5753] f2fs_write_data_pages+0x2a27/0x36f0 [ 98.485460][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 98.485532][ T5753] ? __bfs+0x153/0x290 [ 98.485549][ T5753] ? __pfx_hlock_conflict+0x10/0x10 [ 98.485589][ T5753] ? lockdep_unlock+0x5c/0xd0 [ 98.485611][ T5753] ? __lock_acquire+0x14b9/0x2e50 [ 98.485665][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 98.485690][ T5753] do_writepages+0x338/0x560 [ 98.485724][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 98.485752][ T5753] filemap_fdatawrite+0x1e9/0x2f0 [ 98.485778][ T5753] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 98.485849][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 98.485877][ T5753] f2fs_sync_dirty_inodes+0x30e/0x830 [ 98.485918][ T5753] f2fs_write_checkpoint+0xa3d/0x2710 [ 98.485940][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 98.485992][ T5753] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 98.486056][ T5753] ? try_to_wake_up+0x8f2/0x14d0 [ 98.486091][ T5753] kill_f2fs_super+0x2dd/0x700 [ 98.486126][ T5753] ? __pfx_kill_f2fs_super+0x10/0x10 [ 98.486163][ T5753] ? call_rcu+0x64d/0x8b0 [ 98.486183][ T5753] ? lockdep_hardirqs_on+0x7b/0x110 [ 98.486219][ T5753] deactivate_locked_super+0xbc/0x110 [ 98.486241][ T5753] cleanup_mnt+0x3d3/0x460 [ 98.486267][ T5753] task_work_run+0x1d9/0x270 [ 98.486291][ T5753] ? __pfx_task_work_run+0x10/0x10 [ 98.486321][ T5753] exit_to_user_mode_loop+0x204/0x770 [ 98.486339][ T5753] ? rcu_is_watching+0x16/0xb0 [ 98.486364][ T5753] do_syscall_64+0x328/0x520 [ 98.486383][ T5753] ? trace_irq_disable+0x3b/0x140 [ 98.486400][ T5753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.486418][ T5753] ? clear_bhb_loop+0x70/0xc0 [ 98.486441][ T5753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.486458][ T5753] RIP: 0033:0x7f5d1279f317 [ 98.486476][ T5753] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 98.486490][ T5753] RSP: 002b:00007ffdd08d5238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 98.486510][ T5753] RAX: 0000000000000000 RBX: 00007f5d12834474 RCX: 00007f5d1279f317 [ 98.486522][ T5753] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd08d52f0 [ 98.486533][ T5753] RBP: 00007ffdd08d52f0 R08: 00007ffdd08d62f0 R09: 00000000ffffffff [ 98.486545][ T5753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd08d6380 [ 98.486556][ T5753] R13: 00007f5d12834474 R14: 0000000000018074 R15: 00007ffdd08d63c0 [ 98.486588][ T5753] [ 98.494370][ T5753] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 99.053998][ T5824] loop0: detected capacity change from 0 to 40427 [ 99.061365][ T5824] F2FS-fs (loop0): invalid crc value [ 99.152399][ T5824] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 99.165542][ T5824] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 99.181734][ T5753] syz-executor: attempt to access beyond end of device [ 99.181734][ T5753] loop0: rw=2049, sector=45096, nr_sectors = 8 ** replaying previous printk message ** [ 99.181734][ T5753] syz-executor: attempt to access beyond end of device [ 99.181734][ T5753] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.184196][ T5753] CPU: 0 UID: 0 PID: 5753 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 99.184222][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.184232][ T5753] Call Trace: [ 99.184240][ T5753] [ 99.184247][ T5753] dump_stack_lvl+0xe8/0x150 [ 99.184279][ T5753] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 99.184306][ T5753] f2fs_write_end_bio+0x1211/0x16e0 [ 99.184333][ T5753] ? blkg_put+0x22/0x240 [ 99.184367][ T5753] __submit_merged_bio+0x258/0x6a0 [ 99.184388][ T5753] ? rcu_is_watching+0x16/0xb0 [ 99.184414][ T5753] __submit_merged_write_cond+0x3c9/0x4e0 [ 99.184443][ T5753] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 99.184491][ T5753] f2fs_write_data_pages+0x2a27/0x36f0 [ 99.184549][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 99.184585][ T5753] ? lock_acquire+0x115/0x350 [ 99.184631][ T5753] ? __bfs+0x153/0x290 [ 99.184646][ T5753] ? __pfx_hlock_conflict+0x10/0x10 [ 99.184691][ T5753] ? lockdep_unlock+0x5c/0xd0 [ 99.184714][ T5753] ? __lock_acquire+0x14b9/0x2e50 [ 99.184757][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 99.184781][ T5753] do_writepages+0x338/0x560 [ 99.184813][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 99.184841][ T5753] filemap_fdatawrite+0x1e9/0x2f0 [ 99.184867][ T5753] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 99.184932][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 99.184959][ T5753] f2fs_sync_dirty_inodes+0x30e/0x830 [ 99.184998][ T5753] f2fs_write_checkpoint+0xa3d/0x2710 [ 99.185020][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 99.185068][ T5753] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 99.185127][ T5753] ? try_to_wake_up+0x8b6/0x14d0 [ 99.185160][ T5753] kill_f2fs_super+0x2dd/0x700 [ 99.185192][ T5753] ? __pfx_kill_f2fs_super+0x10/0x10 [ 99.185228][ T5753] ? call_rcu+0x64d/0x8b0 [ 99.185247][ T5753] ? lockdep_hardirqs_on+0x7b/0x110 [ 99.185280][ T5753] deactivate_locked_super+0xbc/0x110 [ 99.185301][ T5753] cleanup_mnt+0x3d3/0x460 [ 99.185326][ T5753] task_work_run+0x1d9/0x270 [ 99.185348][ T5753] ? __pfx_task_work_run+0x10/0x10 [ 99.185377][ T5753] exit_to_user_mode_loop+0x204/0x770 [ 99.185395][ T5753] ? rcu_is_watching+0x16/0xb0 [ 99.185419][ T5753] do_syscall_64+0x328/0x520 [ 99.185438][ T5753] ? trace_irq_disable+0x3b/0x140 [ 99.185454][ T5753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.185472][ T5753] ? clear_bhb_loop+0x70/0xc0 [ 99.185494][ T5753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.185511][ T5753] RIP: 0033:0x7f5d1279f317 [ 99.185529][ T5753] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 99.185543][ T5753] RSP: 002b:00007ffdd08d5238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 99.185564][ T5753] RAX: 0000000000000000 RBX: 00007f5d12834474 RCX: 00007f5d1279f317 [ 99.185575][ T5753] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd08d52f0 [ 99.185586][ T5753] RBP: 00007ffdd08d52f0 R08: 00007ffdd08d62f0 R09: 00000000ffffffff [ 99.185598][ T5753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd08d6380 [ 99.185608][ T5753] R13: 00007f5d12834474 R14: 000000000001832e R15: 00007ffdd08d63c0 [ 99.185638][ T5753] [ 99.186257][ T5753] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 99.194254][ T5753] [ 99.263520][ T4934] Bluetooth: hci0: command tx timeout [ 99.539581][ T5753] ============================= [ 99.544446][ T5753] WARNING: suspicious RCU usage [ 99.549350][ T5753] syzkaller #0 Not tainted [ 99.553787][ T5753] ----------------------------- [ 99.558668][ T5753] ./include/linux/radix-tree.h:179 suspicious rcu_dereference_check() usage! [ 99.567477][ T5753] [ 99.567477][ T5753] other info that might help us debug this: [ 99.567477][ T5753] [ 99.577745][ T5753] [ 99.577745][ T5753] rcu_scheduler_active = 2, debug_locks = 1 [ 99.585820][ T5753] locks held by syz-executor/5753: 2, last CPU#0: [ 99.592282][ T5753] #0: ffff888078f700e8 (&type->s_umount_key#56){+.+.}-{4:4}, at: deactivate_super+0xac/0xe0 [ 99.602539][ T5753] #1: ffff88802a4d88c8 (&im->ino_lock){+.+.}-{3:3}, at: f2fs_remove_ino_entry+0x18d/0x3f0 [ 99.612642][ T5753] [ 99.612642][ T5753] stack backtrace: [ 99.618606][ T5753] CPU: 0 UID: 0 PID: 5753 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 99.628065][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 99.638134][ T5753] Call Trace: [ 99.641411][ T5753] [ 99.644349][ T5753] dump_stack_lvl+0xe8/0x150 [ 99.648943][ T5753] lockdep_rcu_suspicious+0x140/0x1d0 [ 99.654312][ T5753] f2fs_remove_ino_entry+0x3ae/0x3f0 [ 99.659637][ T5753] f2fs_evict_inode+0x83d/0x21f0 [ 99.664721][ T5753] ? __pfx_f2fs_evict_inode+0x10/0x10 [ 99.670300][ T5753] ? do_raw_spin_lock+0x12b/0x2f0 [ 99.675335][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 99.680461][ T5753] ? __pfx_f2fs_evict_inode+0x10/0x10 [ 99.685847][ T5753] evict+0x624/0xb50 [ 99.689765][ T5753] ? __pfx_evict+0x10/0x10 [ 99.694190][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 99.699319][ T5753] ? _raw_spin_unlock+0x28/0x50 [ 99.704206][ T5753] ? iput+0xb84/0xf00 [ 99.708205][ T5753] f2fs_evict_inode+0x20f/0x21f0 [ 99.713160][ T5753] ? inode_wait_for_writeback+0x16d/0x3b0 [ 99.718888][ T5753] ? __pfx_f2fs_evict_inode+0x10/0x10 [ 99.724259][ T5753] ? do_raw_spin_lock+0x12b/0x2f0 [ 99.729391][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 99.734609][ T5753] ? __pfx_f2fs_evict_inode+0x10/0x10 [ 99.739983][ T5753] evict+0x624/0xb50 [ 99.743895][ T5753] ? __pfx_evict+0x10/0x10 [ 99.748315][ T5753] ? do_raw_spin_lock+0x12b/0x2f0 [ 99.753445][ T5753] evict_inodes+0x7e3/0x870 [ 99.757957][ T5753] ? __pfx_cgroup_writeback_umount+0x10/0x10 [ 99.763964][ T5753] ? __pfx_evict_inodes+0x10/0x10 [ 99.768995][ T5753] ? sync_filesystem+0x1f9/0x240 [ 99.773939][ T5753] generic_shutdown_super+0xaa/0x2d0 [ 99.779235][ T5753] kill_block_super+0x44/0xa0 [ 99.783936][ T5753] kill_f2fs_super+0x3b3/0x700 [ 99.788736][ T5753] ? __pfx_kill_f2fs_super+0x10/0x10 [ 99.794050][ T5753] ? call_rcu+0x64d/0x8b0 [ 99.798482][ T5753] ? lockdep_hardirqs_on+0x7b/0x110 [ 99.803698][ T5753] deactivate_locked_super+0xbc/0x110 [ 99.809071][ T5753] cleanup_mnt+0x3d3/0x460 [ 99.813495][ T5753] task_work_run+0x1d9/0x270 [ 99.818091][ T5753] ? __pfx_task_work_run+0x10/0x10 [ 99.823213][ T5753] exit_to_user_mode_loop+0x204/0x770 [ 99.828589][ T5753] ? rcu_is_watching+0x16/0xb0 [ 99.833366][ T5753] do_syscall_64+0x328/0x520 [ 99.837964][ T5753] ? trace_irq_disable+0x3b/0x140 [ 99.843083][ T5753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.849151][ T5753] ? clear_bhb_loop+0x70/0xc0 [ 99.853834][ T5753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.859725][ T5753] RIP: 0033:0x7f5d1279f317 [ 99.864143][ T5753] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 99.883758][ T5753] RSP: 002b:00007ffdd08d5238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 99.892302][ T5753] RAX: 0000000000000000 RBX: 00007f5d12834474 RCX: 00007f5d1279f317 [ 99.900278][ T5753] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd08d52f0 [ 99.908270][ T5753] RBP: 00007ffdd08d52f0 R08: 00007ffdd08d62f0 R09: 00000000ffffffff [ 99.916264][ T5753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd08d6380 [ 99.924244][ T5753] R13: 00007f5d12834474 R14: 000000000001832e R15: 00007ffdd08d63c0 [ 99.932241][ T5753] [ 100.299559][ T5830] loop0: detected capacity change from 0 to 40427 [ 100.302291][ T5830] F2FS-fs (loop0): invalid crc value [ 100.406352][ T5830] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 100.410607][ T5830] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 100.433905][ T5753] syz-executor: attempt to access beyond end of device [ 100.433905][ T5753] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.439514][ T5753] CPU: 0 UID: 0 PID: 5753 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 100.439541][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.439552][ T5753] Call Trace: [ 100.439567][ T5753] [ 100.439574][ T5753] dump_stack_lvl+0xe8/0x150 [ 100.439627][ T5753] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 100.439660][ T5753] f2fs_write_end_bio+0x1211/0x16e0 [ 100.439688][ T5753] ? blkg_put+0x22/0x240 [ 100.439723][ T5753] __submit_merged_bio+0x258/0x6a0 [ 100.439743][ T5753] ? rcu_is_watching+0x16/0xb0 [ 100.439769][ T5753] __submit_merged_write_cond+0x3c9/0x4e0 [ 100.439799][ T5753] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 100.439841][ T5753] f2fs_write_data_pages+0x2a27/0x36f0 [ 100.439864][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 100.439914][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 100.439980][ T5753] ? __bfs+0x153/0x290 [ 100.439996][ T5753] ? __pfx_hlock_conflict+0x10/0x10 [ 100.440033][ T5753] ? lockdep_unlock+0x5c/0xd0 [ 100.440061][ T5753] ? __lock_acquire+0x14b9/0x2e50 [ 100.440103][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 100.440128][ T5753] do_writepages+0x338/0x560 [ 100.440169][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 100.440196][ T5753] filemap_fdatawrite+0x1e9/0x2f0 [ 100.440222][ T5753] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 100.440287][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 100.440314][ T5753] f2fs_sync_dirty_inodes+0x30e/0x830 [ 100.440353][ T5753] f2fs_write_checkpoint+0xa3d/0x2710 [ 100.440376][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 100.440424][ T5753] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 100.440482][ T5753] ? try_to_wake_up+0x8b6/0x14d0 [ 100.440516][ T5753] kill_f2fs_super+0x2dd/0x700 [ 100.440549][ T5753] ? __pfx_kill_f2fs_super+0x10/0x10 [ 100.440584][ T5753] ? call_rcu+0x64d/0x8b0 [ 100.440604][ T5753] ? lockdep_hardirqs_on+0x7b/0x110 [ 100.440637][ T5753] deactivate_locked_super+0xbc/0x110 [ 100.440658][ T5753] cleanup_mnt+0x3d3/0x460 [ 100.440684][ T5753] task_work_run+0x1d9/0x270 [ 100.440706][ T5753] ? __pfx_task_work_run+0x10/0x10 [ 100.440735][ T5753] exit_to_user_mode_loop+0x204/0x770 [ 100.440754][ T5753] ? rcu_is_watching+0x16/0xb0 [ 100.440778][ T5753] do_syscall_64+0x328/0x520 [ 100.440797][ T5753] ? trace_irq_disable+0x3b/0x140 [ 100.440813][ T5753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.440831][ T5753] ? clear_bhb_loop+0x70/0xc0 [ 100.440853][ T5753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.440870][ T5753] RIP: 0033:0x7f5d1279f317 [ 100.440901][ T5753] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 100.440915][ T5753] RSP: 002b:00007ffdd08d5238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 100.440935][ T5753] RAX: 0000000000000000 RBX: 00007f5d12834474 RCX: 00007f5d1279f317 [ 100.440948][ T5753] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd08d52f0 [ 100.440958][ T5753] RBP: 00007ffdd08d52f0 R08: 00007ffdd08d62f0 R09: 00000000ffffffff [ 100.440970][ T5753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd08d6380 [ 100.440980][ T5753] R13: 00007f5d12834474 R14: 000000000001880b R15: 00007ffdd08d63c0 [ 100.441010][ T5753] [ 100.441504][ T5753] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 100.974810][ T5835] loop0: detected capacity change from 0 to 40427 [ 100.990310][ T5835] F2FS-fs (loop0): invalid crc value [ 101.075315][ T5835] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 101.079103][ T5835] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 101.099964][ T5753] syz-executor: attempt to access beyond end of device [ 101.099964][ T5753] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 101.100553][ T5753] CPU: 0 UID: 0 PID: 5753 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 101.100577][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.100589][ T5753] Call Trace: [ 101.100597][ T5753] [ 101.100605][ T5753] dump_stack_lvl+0xe8/0x150 [ 101.100637][ T5753] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 101.100665][ T5753] f2fs_write_end_bio+0x1211/0x16e0 [ 101.100693][ T5753] ? blkg_put+0x22/0x240 [ 101.100730][ T5753] __submit_merged_bio+0x258/0x6a0 [ 101.100750][ T5753] ? rcu_is_watching+0x16/0xb0 [ 101.100777][ T5753] __submit_merged_write_cond+0x3c9/0x4e0 [ 101.100808][ T5753] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 101.100855][ T5753] f2fs_write_data_pages+0x2a27/0x36f0 [ 101.100878][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 101.100936][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 101.101008][ T5753] ? __bfs+0x153/0x290 [ 101.101024][ T5753] ? __pfx_hlock_conflict+0x10/0x10 [ 101.101064][ T5753] ? lockdep_unlock+0x5c/0xd0 [ 101.101087][ T5753] ? __lock_acquire+0x14b9/0x2e50 [ 101.101134][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 101.101158][ T5753] do_writepages+0x338/0x560 [ 101.101192][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 101.101221][ T5753] filemap_fdatawrite+0x1e9/0x2f0 [ 101.101247][ T5753] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 101.101318][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 101.101346][ T5753] f2fs_sync_dirty_inodes+0x30e/0x830 [ 101.101387][ T5753] f2fs_write_checkpoint+0xa3d/0x2710 [ 101.101410][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 101.101482][ T5753] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 101.101552][ T5753] ? try_to_wake_up+0x8f2/0x14d0 [ 101.101588][ T5753] kill_f2fs_super+0x2dd/0x700 [ 101.101622][ T5753] ? __pfx_kill_f2fs_super+0x10/0x10 [ 101.101659][ T5753] ? call_rcu+0x64d/0x8b0 [ 101.101680][ T5753] ? lockdep_hardirqs_on+0x7b/0x110 [ 101.101715][ T5753] deactivate_locked_super+0xbc/0x110 [ 101.101737][ T5753] cleanup_mnt+0x3d3/0x460 [ 101.101763][ T5753] task_work_run+0x1d9/0x270 [ 101.101787][ T5753] ? __pfx_task_work_run+0x10/0x10 [ 101.101817][ T5753] exit_to_user_mode_loop+0x204/0x770 [ 101.101835][ T5753] ? rcu_is_watching+0x16/0xb0 [ 101.101861][ T5753] do_syscall_64+0x328/0x520 [ 101.101880][ T5753] ? trace_irq_disable+0x3b/0x140 [ 101.101897][ T5753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.101916][ T5753] ? clear_bhb_loop+0x70/0xc0 [ 101.101939][ T5753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.101956][ T5753] RIP: 0033:0x7f5d1279f317 [ 101.101975][ T5753] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 101.101989][ T5753] RSP: 002b:00007ffdd08d5238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 101.102009][ T5753] RAX: 0000000000000000 RBX: 00007f5d12834474 RCX: 00007f5d1279f317 [ 101.102021][ T5753] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd08d52f0 [ 101.102032][ T5753] RBP: 00007ffdd08d52f0 R08: 00007ffdd08d62f0 R09: 00000000ffffffff [ 101.102043][ T5753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd08d6380 [ 101.102054][ T5753] R13: 00007f5d12834474 R14: 000000000001897b R15: 00007ffdd08d63c0 [ 101.102087][ T5753] [ 101.103370][ T5753] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.291068][ T4934] Bluetooth: hci0: command tx timeout [ 101.653253][ T5840] loop0: detected capacity change from 0 to 40427 [ 101.662479][ T5840] F2FS-fs (loop0): invalid crc value [ 101.752550][ T5840] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 101.755680][ T5840] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 101.773633][ T5753] syz-executor: attempt to access beyond end of device [ 101.773633][ T5753] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 101.775639][ T5753] CPU: 1 UID: 0 PID: 5753 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 101.775664][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.775674][ T5753] Call Trace: [ 101.775681][ T5753] [ 101.775689][ T5753] dump_stack_lvl+0xe8/0x150 [ 101.775721][ T5753] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 101.775748][ T5753] f2fs_write_end_bio+0x1211/0x16e0 [ 101.775775][ T5753] ? blkg_put+0x22/0x240 [ 101.775810][ T5753] __submit_merged_bio+0x258/0x6a0 [ 101.775830][ T5753] ? rcu_is_watching+0x16/0xb0 [ 101.775856][ T5753] __submit_merged_write_cond+0x3c9/0x4e0 [ 101.775886][ T5753] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 101.775929][ T5753] f2fs_write_data_pages+0x2a27/0x36f0 [ 101.776011][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 101.776062][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 101.776132][ T5753] ? __bfs+0x153/0x290 [ 101.776147][ T5753] ? __pfx_hlock_conflict+0x10/0x10 [ 101.776185][ T5753] ? lockdep_unlock+0x5c/0xd0 [ 101.776208][ T5753] ? __lock_acquire+0x14b9/0x2e50 [ 101.776251][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 101.776275][ T5753] do_writepages+0x338/0x560 [ 101.776307][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 101.776334][ T5753] filemap_fdatawrite+0x1e9/0x2f0 [ 101.776360][ T5753] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 101.776425][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 101.776452][ T5753] f2fs_sync_dirty_inodes+0x30e/0x830 [ 101.776491][ T5753] f2fs_write_checkpoint+0xa3d/0x2710 [ 101.776514][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 101.776561][ T5753] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 101.776619][ T5753] ? try_to_wake_up+0x8f2/0x14d0 [ 101.776653][ T5753] kill_f2fs_super+0x2dd/0x700 [ 101.776686][ T5753] ? __pfx_kill_f2fs_super+0x10/0x10 [ 101.776721][ T5753] ? call_rcu+0x64d/0x8b0 [ 101.776741][ T5753] ? lockdep_hardirqs_on+0x7b/0x110 [ 101.776774][ T5753] deactivate_locked_super+0xbc/0x110 [ 101.776796][ T5753] cleanup_mnt+0x3d3/0x460 [ 101.776821][ T5753] task_work_run+0x1d9/0x270 [ 101.776844][ T5753] ? __pfx_task_work_run+0x10/0x10 [ 101.776872][ T5753] exit_to_user_mode_loop+0x204/0x770 [ 101.776891][ T5753] ? rcu_is_watching+0x16/0xb0 [ 101.776916][ T5753] do_syscall_64+0x328/0x520 [ 101.776942][ T5753] ? trace_irq_disable+0x3b/0x140 [ 101.776958][ T5753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.776976][ T5753] ? clear_bhb_loop+0x70/0xc0 [ 101.776998][ T5753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.777016][ T5753] RIP: 0033:0x7f5d1279f317 [ 101.777033][ T5753] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 101.777047][ T5753] RSP: 002b:00007ffdd08d5238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 101.777068][ T5753] RAX: 0000000000000000 RBX: 00007f5d12834474 RCX: 00007f5d1279f317 [ 101.777080][ T5753] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd08d52f0 [ 101.777090][ T5753] RBP: 00007ffdd08d52f0 R08: 00007ffdd08d62f0 R09: 00000000ffffffff [ 101.777102][ T5753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd08d6380 [ 101.777113][ T5753] R13: 00007f5d12834474 R14: 0000000000018b78 R15: 00007ffdd08d63c0 [ 101.777143][ T5753] [ 101.785385][ T5753] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 102.313735][ T5845] loop0: detected capacity change from 0 to 40427 [ 102.325590][ T5845] F2FS-fs (loop0): invalid crc value [ 102.401080][ T5845] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 102.404230][ T5845] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 102.419586][ T5753] syz-executor: attempt to access beyond end of device [ 102.419586][ T5753] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 102.421120][ T5753] CPU: 1 UID: 0 PID: 5753 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 102.421145][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.421156][ T5753] Call Trace: [ 102.421164][ T5753] [ 102.421172][ T5753] dump_stack_lvl+0xe8/0x150 [ 102.421203][ T5753] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 102.421232][ T5753] f2fs_write_end_bio+0x1211/0x16e0 [ 102.421259][ T5753] ? blkg_put+0x22/0x240 [ 102.421296][ T5753] __submit_merged_bio+0x258/0x6a0 [ 102.421317][ T5753] ? rcu_is_watching+0x16/0xb0 [ 102.421344][ T5753] __submit_merged_write_cond+0x3c9/0x4e0 [ 102.421375][ T5753] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 102.421441][ T5753] f2fs_write_data_pages+0x2a27/0x36f0 [ 102.421503][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 102.421542][ T5753] ? kvm_sched_clock_read+0x11/0x20 [ 102.421601][ T5753] ? __bfs+0x153/0x290 [ 102.421617][ T5753] ? __pfx_hlock_conflict+0x10/0x10 [ 102.421657][ T5753] ? lockdep_unlock+0x5c/0xd0 [ 102.421681][ T5753] ? __lock_acquire+0x14b9/0x2e50 [ 102.421727][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 102.421752][ T5753] do_writepages+0x338/0x560 [ 102.421787][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 102.421815][ T5753] filemap_fdatawrite+0x1e9/0x2f0 [ 102.421842][ T5753] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 102.421912][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 102.421944][ T5753] f2fs_sync_dirty_inodes+0x30e/0x830 [ 102.421985][ T5753] f2fs_write_checkpoint+0xa3d/0x2710 [ 102.422009][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 102.422060][ T5753] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 102.422123][ T5753] ? try_to_wake_up+0x8f2/0x14d0 [ 102.422159][ T5753] kill_f2fs_super+0x2dd/0x700 [ 102.422192][ T5753] ? __pfx_kill_f2fs_super+0x10/0x10 [ 102.422229][ T5753] ? call_rcu+0x64d/0x8b0 [ 102.422249][ T5753] ? lockdep_hardirqs_on+0x7b/0x110 [ 102.422284][ T5753] deactivate_locked_super+0xbc/0x110 [ 102.422306][ T5753] cleanup_mnt+0x3d3/0x460 [ 102.422332][ T5753] task_work_run+0x1d9/0x270 [ 102.422356][ T5753] ? __pfx_task_work_run+0x10/0x10 [ 102.422386][ T5753] exit_to_user_mode_loop+0x204/0x770 [ 102.422404][ T5753] ? rcu_is_watching+0x16/0xb0 [ 102.422429][ T5753] do_syscall_64+0x328/0x520 [ 102.422449][ T5753] ? trace_irq_disable+0x3b/0x140 [ 102.422465][ T5753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.422484][ T5753] ? clear_bhb_loop+0x70/0xc0 [ 102.422507][ T5753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.422525][ T5753] RIP: 0033:0x7f5d1279f317 [ 102.422543][ T5753] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 102.422557][ T5753] RSP: 002b:00007ffdd08d5238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 102.422585][ T5753] RAX: 0000000000000000 RBX: 00007f5d12834474 RCX: 00007f5d1279f317 [ 102.422597][ T5753] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd08d52f0 [ 102.422607][ T5753] RBP: 00007ffdd08d52f0 R08: 00007ffdd08d62f0 R09: 00000000ffffffff [ 102.422620][ T5753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd08d6380 [ 102.422631][ T5753] R13: 00007f5d12834474 R14: 0000000000018eb8 R15: 00007ffdd08d63c0 [ 102.422663][ T5753] [ 102.424011][ T5753] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 102.954442][ T5850] loop0: detected capacity change from 0 to 40427 [ 102.960586][ T5850] F2FS-fs (loop0): invalid crc value [ 103.060064][ T5850] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 103.063994][ T5850] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 103.081448][ T5753] syz-executor: attempt to access beyond end of device [ 103.081448][ T5753] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 103.083436][ T5753] CPU: 0 UID: 0 PID: 5753 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 103.083464][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.083477][ T5753] Call Trace: [ 103.083487][ T5753] [ 103.083495][ T5753] dump_stack_lvl+0xe8/0x150 [ 103.083528][ T5753] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 103.083557][ T5753] f2fs_write_end_bio+0x1211/0x16e0 [ 103.083584][ T5753] ? blkg_put+0x22/0x240 [ 103.083622][ T5753] __submit_merged_bio+0x258/0x6a0 [ 103.083643][ T5753] ? rcu_is_watching+0x16/0xb0 [ 103.083670][ T5753] __submit_merged_write_cond+0x3c9/0x4e0 [ 103.083701][ T5753] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 103.083747][ T5753] f2fs_write_data_pages+0x2a27/0x36f0 [ 103.083770][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 103.083825][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 103.083901][ T5753] ? __bfs+0x153/0x290 [ 103.083917][ T5753] ? __pfx_hlock_conflict+0x10/0x10 [ 103.083955][ T5753] ? lockdep_unlock+0x5c/0xd0 [ 103.083978][ T5753] ? __lock_acquire+0x14b9/0x2e50 [ 103.084024][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 103.084048][ T5753] do_writepages+0x338/0x560 [ 103.084082][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 103.084111][ T5753] filemap_fdatawrite+0x1e9/0x2f0 [ 103.084138][ T5753] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 103.084209][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 103.084237][ T5753] f2fs_sync_dirty_inodes+0x30e/0x830 [ 103.084278][ T5753] f2fs_write_checkpoint+0xa3d/0x2710 [ 103.084301][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 103.084353][ T5753] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 103.084490][ T5753] ? try_to_wake_up+0x8f2/0x14d0 [ 103.084526][ T5753] kill_f2fs_super+0x2dd/0x700 [ 103.084561][ T5753] ? __pfx_kill_f2fs_super+0x10/0x10 [ 103.084597][ T5753] ? call_rcu+0x64d/0x8b0 [ 103.084618][ T5753] ? lockdep_hardirqs_on+0x7b/0x110 [ 103.084654][ T5753] deactivate_locked_super+0xbc/0x110 [ 103.084676][ T5753] cleanup_mnt+0x3d3/0x460 [ 103.084702][ T5753] task_work_run+0x1d9/0x270 [ 103.084726][ T5753] ? __pfx_task_work_run+0x10/0x10 [ 103.084756][ T5753] exit_to_user_mode_loop+0x204/0x770 [ 103.084775][ T5753] ? rcu_is_watching+0x16/0xb0 [ 103.084802][ T5753] do_syscall_64+0x328/0x520 [ 103.084821][ T5753] ? trace_irq_disable+0x3b/0x140 [ 103.084838][ T5753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.084856][ T5753] ? clear_bhb_loop+0x70/0xc0 [ 103.084879][ T5753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.084897][ T5753] RIP: 0033:0x7f5d1279f317 [ 103.084916][ T5753] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 103.084930][ T5753] RSP: 002b:00007ffdd08d5238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 103.084951][ T5753] RAX: 0000000000000000 RBX: 00007f5d12834474 RCX: 00007f5d1279f317 [ 103.084963][ T5753] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd08d52f0 [ 103.084973][ T5753] RBP: 00007ffdd08d52f0 R08: 00007ffdd08d62f0 R09: 00000000ffffffff [ 103.084985][ T5753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd08d6380 [ 103.084996][ T5753] R13: 00007f5d12834474 R14: 000000000001913e R15: 00007ffdd08d63c0 [ 103.085028][ T5753] [ 103.091133][ T5753] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 103.635625][ T5855] loop0: detected capacity change from 0 to 40427 [ 103.648367][ T5855] F2FS-fs (loop0): invalid crc value 2026/08/15 00:25:07 executed programs: 11 [ 103.735344][ T5855] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 103.738322][ T5855] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 103.759663][ T5753] syz-executor: attempt to access beyond end of device [ 103.759663][ T5753] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 103.778247][ T5753] CPU: 0 UID: 0 PID: 5753 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 103.778280][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.778293][ T5753] Call Trace: [ 103.778302][ T5753] [ 103.778311][ T5753] dump_stack_lvl+0xe8/0x150 [ 103.778345][ T5753] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 103.778379][ T5753] f2fs_write_end_bio+0x1211/0x16e0 [ 103.778421][ T5753] ? blkg_put+0x22/0x240 [ 103.778464][ T5753] __submit_merged_bio+0x258/0x6a0 [ 103.778488][ T5753] ? rcu_is_watching+0x16/0xb0 [ 103.778519][ T5753] __submit_merged_write_cond+0x3c9/0x4e0 [ 103.778555][ T5753] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 103.778608][ T5753] f2fs_write_data_pages+0x2a27/0x36f0 [ 103.778640][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 103.778703][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 103.778787][ T5753] ? __bfs+0x153/0x290 [ 103.778805][ T5753] ? __pfx_hlock_conflict+0x10/0x10 [ 103.778851][ T5753] ? lockdep_unlock+0x5c/0xd0 [ 103.778877][ T5753] ? __lock_acquire+0x14b9/0x2e50 [ 103.778928][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 103.778953][ T5753] do_writepages+0x338/0x560 [ 103.778989][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 103.779020][ T5753] filemap_fdatawrite+0x1e9/0x2f0 [ 103.779049][ T5753] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 103.779128][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 103.779160][ T5753] f2fs_sync_dirty_inodes+0x30e/0x830 [ 103.779206][ T5753] f2fs_write_checkpoint+0xa3d/0x2710 [ 103.779232][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 103.779290][ T5753] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 103.779361][ T5753] ? try_to_wake_up+0x8b6/0x14d0 [ 103.779414][ T5753] kill_f2fs_super+0x2dd/0x700 [ 103.779454][ T5753] ? __pfx_kill_f2fs_super+0x10/0x10 [ 103.779495][ T5753] ? call_rcu+0x64d/0x8b0 [ 103.779517][ T5753] ? lockdep_hardirqs_on+0x7b/0x110 [ 103.779558][ T5753] deactivate_locked_super+0xbc/0x110 [ 103.779583][ T5753] cleanup_mnt+0x3d3/0x460 [ 103.779612][ T5753] task_work_run+0x1d9/0x270 [ 103.779639][ T5753] ? __pfx_task_work_run+0x10/0x10 [ 103.779672][ T5753] exit_to_user_mode_loop+0x204/0x770 [ 103.779693][ T5753] ? rcu_is_watching+0x16/0xb0 [ 103.779721][ T5753] do_syscall_64+0x328/0x520 [ 103.779743][ T5753] ? trace_irq_disable+0x3b/0x140 [ 103.779762][ T5753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.779782][ T5753] ? clear_bhb_loop+0x70/0xc0 [ 103.779808][ T5753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.779829][ T5753] RIP: 0033:0x7f5d1279f317 [ 103.779850][ T5753] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 103.779865][ T5753] RSP: 002b:00007ffdd08d5238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 103.779887][ T5753] RAX: 0000000000000000 RBX: 00007f5d12834474 RCX: 00007f5d1279f317 [ 103.779900][ T5753] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd08d52f0 [ 103.779912][ T5753] RBP: 00007ffdd08d52f0 R08: 00007ffdd08d62f0 R09: 00000000ffffffff [ 103.779925][ T5753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd08d6380 [ 103.779937][ T5753] R13: 00007f5d12834474 R14: 0000000000019509 R15: 00007ffdd08d63c0 [ 103.779972][ T5753] [ 103.803273][ T5753] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 104.294650][ T5860] loop0: detected capacity change from 0 to 40427 [ 104.299629][ T5860] F2FS-fs (loop0): invalid crc value [ 104.383542][ T5860] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 104.390491][ T5860] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 104.410606][ T5753] syz-executor: attempt to access beyond end of device [ 104.410606][ T5753] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 104.426369][ T5753] CPU: 1 UID: 0 PID: 5753 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 104.426406][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.426418][ T5753] Call Trace: [ 104.426428][ T5753] [ 104.426436][ T5753] dump_stack_lvl+0xe8/0x150 [ 104.426472][ T5753] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 104.426513][ T5753] f2fs_write_end_bio+0x1211/0x16e0 [ 104.426544][ T5753] ? blkg_put+0x22/0x240 [ 104.426586][ T5753] __submit_merged_bio+0x258/0x6a0 [ 104.426610][ T5753] ? rcu_is_watching+0x16/0xb0 [ 104.426641][ T5753] __submit_merged_write_cond+0x3c9/0x4e0 [ 104.426677][ T5753] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 104.426730][ T5753] f2fs_write_data_pages+0x2a27/0x36f0 [ 104.426757][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 104.426819][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 104.426902][ T5753] ? __bfs+0x153/0x290 [ 104.426920][ T5753] ? __pfx_hlock_conflict+0x10/0x10 [ 104.426966][ T5753] ? lockdep_unlock+0x5c/0xd0 [ 104.426992][ T5753] ? __lock_acquire+0x14b9/0x2e50 [ 104.427044][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 104.427074][ T5753] do_writepages+0x338/0x560 [ 104.427113][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 104.427146][ T5753] filemap_fdatawrite+0x1e9/0x2f0 [ 104.427178][ T5753] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 104.427261][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 104.427293][ T5753] f2fs_sync_dirty_inodes+0x30e/0x830 [ 104.427340][ T5753] f2fs_write_checkpoint+0xa3d/0x2710 [ 104.427367][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 104.427427][ T5753] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 104.427509][ T5753] ? try_to_wake_up+0x8b6/0x14d0 [ 104.427552][ T5753] kill_f2fs_super+0x2dd/0x700 [ 104.427592][ T5753] ? __pfx_kill_f2fs_super+0x10/0x10 [ 104.427636][ T5753] ? call_rcu+0x64d/0x8b0 [ 104.427659][ T5753] ? lockdep_hardirqs_on+0x7b/0x110 [ 104.427700][ T5753] deactivate_locked_super+0xbc/0x110 [ 104.427725][ T5753] cleanup_mnt+0x3d3/0x460 [ 104.427756][ T5753] task_work_run+0x1d9/0x270 [ 104.427781][ T5753] ? __pfx_task_work_run+0x10/0x10 [ 104.427813][ T5753] exit_to_user_mode_loop+0x204/0x770 [ 104.427835][ T5753] ? rcu_is_watching+0x16/0xb0 [ 104.427864][ T5753] do_syscall_64+0x328/0x520 [ 104.427886][ T5753] ? trace_irq_disable+0x3b/0x140 [ 104.427905][ T5753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.427926][ T5753] ? clear_bhb_loop+0x70/0xc0 [ 104.427953][ T5753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.427973][ T5753] RIP: 0033:0x7f5d1279f317 [ 104.427993][ T5753] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 104.428009][ T5753] RSP: 002b:00007ffdd08d5238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 104.428031][ T5753] RAX: 0000000000000000 RBX: 00007f5d12834474 RCX: 00007f5d1279f317 [ 104.428045][ T5753] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd08d52f0 [ 104.428057][ T5753] RBP: 00007ffdd08d52f0 R08: 00007ffdd08d62f0 R09: 00000000ffffffff [ 104.428070][ T5753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd08d6380 [ 104.428082][ T5753] R13: 00007f5d12834474 R14: 0000000000019798 R15: 00007ffdd08d63c0 [ 104.428118][ T5753] [ 104.453099][ T5753] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 104.959863][ T5865] loop0: detected capacity change from 0 to 40427 [ 104.974460][ T5865] F2FS-fs (loop0): invalid crc value [ 105.062188][ T5865] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 105.065408][ T5865] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 105.081921][ T5753] syz-executor: attempt to access beyond end of device [ 105.081921][ T5753] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 105.084013][ T5753] CPU: 0 UID: 0 PID: 5753 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 105.084039][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.084049][ T5753] Call Trace: [ 105.084057][ T5753] [ 105.084064][ T5753] dump_stack_lvl+0xe8/0x150 [ 105.084096][ T5753] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 105.084124][ T5753] f2fs_write_end_bio+0x1211/0x16e0 [ 105.084151][ T5753] ? blkg_put+0x22/0x240 [ 105.084187][ T5753] __submit_merged_bio+0x258/0x6a0 [ 105.084207][ T5753] ? rcu_is_watching+0x16/0xb0 [ 105.084232][ T5753] __submit_merged_write_cond+0x3c9/0x4e0 [ 105.084262][ T5753] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 105.084305][ T5753] f2fs_write_data_pages+0x2a27/0x36f0 [ 105.084328][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 105.084378][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 105.084449][ T5753] ? __bfs+0x153/0x290 [ 105.084465][ T5753] ? __pfx_hlock_conflict+0x10/0x10 [ 105.084502][ T5753] ? lockdep_unlock+0x5c/0xd0 [ 105.084525][ T5753] ? __lock_acquire+0x14b9/0x2e50 [ 105.084569][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 105.084593][ T5753] do_writepages+0x338/0x560 [ 105.084625][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 105.084652][ T5753] filemap_fdatawrite+0x1e9/0x2f0 [ 105.084678][ T5753] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 105.084743][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 105.084770][ T5753] f2fs_sync_dirty_inodes+0x30e/0x830 [ 105.084809][ T5753] f2fs_write_checkpoint+0xa3d/0x2710 [ 105.084832][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 105.084888][ T5753] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 105.084947][ T5753] ? try_to_wake_up+0x8f2/0x14d0 [ 105.084981][ T5753] kill_f2fs_super+0x2dd/0x700 [ 105.085013][ T5753] ? __pfx_kill_f2fs_super+0x10/0x10 [ 105.085048][ T5753] ? call_rcu+0x64d/0x8b0 [ 105.085068][ T5753] ? lockdep_hardirqs_on+0x7b/0x110 [ 105.085101][ T5753] deactivate_locked_super+0xbc/0x110 [ 105.085122][ T5753] cleanup_mnt+0x3d3/0x460 [ 105.085148][ T5753] task_work_run+0x1d9/0x270 [ 105.085171][ T5753] ? __pfx_task_work_run+0x10/0x10 [ 105.085199][ T5753] exit_to_user_mode_loop+0x204/0x770 [ 105.085217][ T5753] ? rcu_is_watching+0x16/0xb0 [ 105.085242][ T5753] do_syscall_64+0x328/0x520 [ 105.085261][ T5753] ? trace_irq_disable+0x3b/0x140 [ 105.085278][ T5753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.085296][ T5753] ? clear_bhb_loop+0x70/0xc0 [ 105.085318][ T5753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.085336][ T5753] RIP: 0033:0x7f5d1279f317 [ 105.085353][ T5753] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 105.085367][ T5753] RSP: 002b:00007ffdd08d5238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 105.085387][ T5753] RAX: 0000000000000000 RBX: 00007f5d12834474 RCX: 00007f5d1279f317 [ 105.085399][ T5753] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd08d52f0 [ 105.085410][ T5753] RBP: 00007ffdd08d52f0 R08: 00007ffdd08d62f0 R09: 00000000ffffffff [ 105.085421][ T5753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd08d6380 [ 105.085432][ T5753] R13: 00007f5d12834474 R14: 0000000000019a37 R15: 00007ffdd08d63c0 [ 105.085462][ T5753] [ 105.086101][ T5753] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 105.629223][ T5870] loop0: detected capacity change from 0 to 40427 [ 105.640188][ T5870] F2FS-fs (loop0): invalid crc value [ 105.728519][ T5870] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 105.741002][ T5870] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 105.754692][ T5753] syz-executor: attempt to access beyond end of device [ 105.754692][ T5753] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 105.755513][ T5753] CPU: 1 UID: 0 PID: 5753 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 105.755537][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.755547][ T5753] Call Trace: [ 105.755555][ T5753] [ 105.755562][ T5753] dump_stack_lvl+0xe8/0x150 [ 105.755594][ T5753] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 105.755627][ T5753] f2fs_write_end_bio+0x1211/0x16e0 [ 105.755655][ T5753] ? blkg_put+0x22/0x240 [ 105.755692][ T5753] __submit_merged_bio+0x258/0x6a0 [ 105.755713][ T5753] ? rcu_is_watching+0x16/0xb0 [ 105.755739][ T5753] __submit_merged_write_cond+0x3c9/0x4e0 [ 105.755770][ T5753] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 105.755817][ T5753] f2fs_write_data_pages+0x2a27/0x36f0 [ 105.755879][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 105.755916][ T5753] ? irqentry_exit+0x218/0x910 [ 105.755970][ T5753] ? __bfs+0x153/0x290 [ 105.755987][ T5753] ? __pfx_hlock_conflict+0x10/0x10 [ 105.756027][ T5753] ? lockdep_unlock+0x5c/0xd0 [ 105.756050][ T5753] ? __lock_acquire+0x14b9/0x2e50 [ 105.756096][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 105.756121][ T5753] do_writepages+0x338/0x560 [ 105.756155][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 105.756183][ T5753] filemap_fdatawrite+0x1e9/0x2f0 [ 105.756210][ T5753] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 105.756280][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 105.756309][ T5753] f2fs_sync_dirty_inodes+0x30e/0x830 [ 105.756350][ T5753] f2fs_write_checkpoint+0xa3d/0x2710 [ 105.756380][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 105.756443][ T5753] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 105.756506][ T5753] ? try_to_wake_up+0x8b6/0x14d0 [ 105.756542][ T5753] kill_f2fs_super+0x2dd/0x700 [ 105.756576][ T5753] ? __pfx_kill_f2fs_super+0x10/0x10 [ 105.756613][ T5753] ? call_rcu+0x64d/0x8b0 [ 105.756633][ T5753] ? lockdep_hardirqs_on+0x7b/0x110 [ 105.756667][ T5753] deactivate_locked_super+0xbc/0x110 [ 105.756689][ T5753] cleanup_mnt+0x3d3/0x460 [ 105.756715][ T5753] task_work_run+0x1d9/0x270 [ 105.756738][ T5753] ? __pfx_task_work_run+0x10/0x10 [ 105.756768][ T5753] exit_to_user_mode_loop+0x204/0x770 [ 105.756787][ T5753] ? rcu_is_watching+0x16/0xb0 [ 105.756812][ T5753] do_syscall_64+0x328/0x520 [ 105.756831][ T5753] ? trace_irq_disable+0x3b/0x140 [ 105.756847][ T5753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.756866][ T5753] ? clear_bhb_loop+0x70/0xc0 [ 105.756888][ T5753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.756905][ T5753] RIP: 0033:0x7f5d1279f317 [ 105.756923][ T5753] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 105.756937][ T5753] RSP: 002b:00007ffdd08d5238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 105.756957][ T5753] RAX: 0000000000000000 RBX: 00007f5d12834474 RCX: 00007f5d1279f317 [ 105.756969][ T5753] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd08d52f0 [ 105.756980][ T5753] RBP: 00007ffdd08d52f0 R08: 00007ffdd08d62f0 R09: 00000000ffffffff [ 105.756992][ T5753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd08d6380 [ 105.757002][ T5753] R13: 00007f5d12834474 R14: 0000000000019cdd R15: 00007ffdd08d63c0 [ 105.757034][ T5753] [ 105.777751][ T5753] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 106.293779][ T5875] loop0: detected capacity change from 0 to 40427 [ 106.304896][ T5875] F2FS-fs (loop0): invalid crc value [ 106.399257][ T5875] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 106.401854][ T5875] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 106.419855][ T5753] syz-executor: attempt to access beyond end of device [ 106.419855][ T5753] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 106.421101][ T5753] CPU: 0 UID: 0 PID: 5753 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 106.421125][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.421135][ T5753] Call Trace: [ 106.421143][ T5753] [ 106.421151][ T5753] dump_stack_lvl+0xe8/0x150 [ 106.421181][ T5753] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 106.421208][ T5753] f2fs_write_end_bio+0x1211/0x16e0 [ 106.421235][ T5753] ? blkg_put+0x22/0x240 [ 106.421270][ T5753] __submit_merged_bio+0x258/0x6a0 [ 106.421290][ T5753] ? rcu_is_watching+0x16/0xb0 [ 106.421316][ T5753] __submit_merged_write_cond+0x3c9/0x4e0 [ 106.421345][ T5753] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 106.421411][ T5753] f2fs_write_data_pages+0x2a27/0x36f0 [ 106.421434][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 106.421484][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 106.421550][ T5753] ? __bfs+0x153/0x290 [ 106.421566][ T5753] ? __pfx_hlock_conflict+0x10/0x10 [ 106.421604][ T5753] ? lockdep_unlock+0x5c/0xd0 [ 106.421626][ T5753] ? __lock_acquire+0x14b9/0x2e50 [ 106.421669][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 106.421693][ T5753] do_writepages+0x338/0x560 [ 106.421725][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 106.421753][ T5753] filemap_fdatawrite+0x1e9/0x2f0 [ 106.421779][ T5753] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 106.421844][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 106.421871][ T5753] f2fs_sync_dirty_inodes+0x30e/0x830 [ 106.421909][ T5753] f2fs_write_checkpoint+0xa3d/0x2710 [ 106.421932][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 106.421983][ T5753] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 106.422049][ T5753] ? try_to_wake_up+0x8b6/0x14d0 [ 106.422082][ T5753] kill_f2fs_super+0x2dd/0x700 [ 106.422115][ T5753] ? __pfx_kill_f2fs_super+0x10/0x10 [ 106.422150][ T5753] ? call_rcu+0x64d/0x8b0 [ 106.422170][ T5753] ? lockdep_hardirqs_on+0x7b/0x110 [ 106.422203][ T5753] deactivate_locked_super+0xbc/0x110 [ 106.422225][ T5753] cleanup_mnt+0x3d3/0x460 [ 106.422250][ T5753] task_work_run+0x1d9/0x270 [ 106.422272][ T5753] ? __pfx_task_work_run+0x10/0x10 [ 106.422301][ T5753] exit_to_user_mode_loop+0x204/0x770 [ 106.422319][ T5753] ? rcu_is_watching+0x16/0xb0 [ 106.422343][ T5753] do_syscall_64+0x328/0x520 [ 106.422362][ T5753] ? trace_irq_disable+0x3b/0x140 [ 106.422378][ T5753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.422396][ T5753] ? clear_bhb_loop+0x70/0xc0 [ 106.422418][ T5753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.422435][ T5753] RIP: 0033:0x7f5d1279f317 [ 106.422454][ T5753] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 106.422467][ T5753] RSP: 002b:00007ffdd08d5238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 106.422487][ T5753] RAX: 0000000000000000 RBX: 00007f5d12834474 RCX: 00007f5d1279f317 [ 106.422499][ T5753] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd08d52f0 [ 106.422509][ T5753] RBP: 00007ffdd08d52f0 R08: 00007ffdd08d62f0 R09: 00000000ffffffff [ 106.422521][ T5753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd08d6380 [ 106.422532][ T5753] R13: 00007f5d12834474 R14: 0000000000019f70 R15: 00007ffdd08d63c0 [ 106.422561][ T5753] [ 106.423642][ T5753] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 106.939653][ T5880] loop0: detected capacity change from 0 to 40427 [ 106.949832][ T5880] F2FS-fs (loop0): invalid crc value [ 107.028127][ T5880] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 107.030866][ T5880] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 107.045571][ T5753] syz-executor: attempt to access beyond end of device [ 107.045571][ T5753] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 107.057564][ T5753] CPU: 0 UID: 0 PID: 5753 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 107.057591][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.057601][ T5753] Call Trace: [ 107.057609][ T5753] [ 107.057617][ T5753] dump_stack_lvl+0xe8/0x150 [ 107.057648][ T5753] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 107.057675][ T5753] f2fs_write_end_bio+0x1211/0x16e0 [ 107.057702][ T5753] ? blkg_put+0x22/0x240 [ 107.057737][ T5753] __submit_merged_bio+0x258/0x6a0 [ 107.057757][ T5753] ? rcu_is_watching+0x16/0xb0 [ 107.057783][ T5753] __submit_merged_write_cond+0x3c9/0x4e0 [ 107.057812][ T5753] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 107.057856][ T5753] f2fs_write_data_pages+0x2a27/0x36f0 [ 107.057913][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 107.057979][ T5753] ? __bfs+0x153/0x290 [ 107.058006][ T5753] ? __pfx_hlock_conflict+0x10/0x10 [ 107.058044][ T5753] ? lockdep_unlock+0x5c/0xd0 [ 107.058066][ T5753] ? __lock_acquire+0x14b9/0x2e50 [ 107.058108][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 107.058132][ T5753] do_writepages+0x338/0x560 [ 107.058166][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 107.058193][ T5753] filemap_fdatawrite+0x1e9/0x2f0 [ 107.058219][ T5753] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 107.058284][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 107.058311][ T5753] f2fs_sync_dirty_inodes+0x30e/0x830 [ 107.058351][ T5753] f2fs_write_checkpoint+0xa3d/0x2710 [ 107.058374][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 107.058421][ T5753] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 107.058479][ T5753] ? try_to_wake_up+0x8f2/0x14d0 [ 107.058513][ T5753] kill_f2fs_super+0x2dd/0x700 [ 107.058546][ T5753] ? __pfx_kill_f2fs_super+0x10/0x10 [ 107.058581][ T5753] ? call_rcu+0x64d/0x8b0 [ 107.058601][ T5753] ? lockdep_hardirqs_on+0x7b/0x110 [ 107.058634][ T5753] deactivate_locked_super+0xbc/0x110 [ 107.058656][ T5753] cleanup_mnt+0x3d3/0x460 [ 107.058681][ T5753] task_work_run+0x1d9/0x270 [ 107.058703][ T5753] ? __pfx_task_work_run+0x10/0x10 [ 107.058732][ T5753] exit_to_user_mode_loop+0x204/0x770 [ 107.058750][ T5753] ? rcu_is_watching+0x16/0xb0 [ 107.058774][ T5753] do_syscall_64+0x328/0x520 [ 107.058793][ T5753] ? trace_irq_disable+0x3b/0x140 [ 107.058810][ T5753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.058828][ T5753] ? clear_bhb_loop+0x70/0xc0 [ 107.058850][ T5753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.058867][ T5753] RIP: 0033:0x7f5d1279f317 [ 107.058885][ T5753] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 107.058899][ T5753] RSP: 002b:00007ffdd08d5238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 107.058919][ T5753] RAX: 0000000000000000 RBX: 00007f5d12834474 RCX: 00007f5d1279f317 [ 107.058931][ T5753] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd08d52f0 [ 107.058942][ T5753] RBP: 00007ffdd08d52f0 R08: 00007ffdd08d62f0 R09: 00000000ffffffff [ 107.058954][ T5753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd08d6380 [ 107.058965][ T5753] R13: 00007f5d12834474 R14: 000000000001a1e4 R15: 00007ffdd08d63c0 [ 107.059001][ T5753] [ 107.059037][ T5753] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 107.568567][ T5885] loop0: detected capacity change from 0 to 40427 [ 107.578382][ T5885] F2FS-fs (loop0): invalid crc value [ 107.654642][ T5885] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 107.657819][ T5885] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 107.676231][ T5753] syz-executor: attempt to access beyond end of device [ 107.676231][ T5753] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 107.681300][ T5753] CPU: 1 UID: 0 PID: 5753 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 107.681327][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.681356][ T5753] Call Trace: [ 107.681364][ T5753] [ 107.681372][ T5753] dump_stack_lvl+0xe8/0x150 [ 107.681403][ T5753] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 107.681430][ T5753] f2fs_write_end_bio+0x1211/0x16e0 [ 107.681457][ T5753] ? blkg_put+0x22/0x240 [ 107.681493][ T5753] __submit_merged_bio+0x258/0x6a0 [ 107.681513][ T5753] ? rcu_is_watching+0x16/0xb0 [ 107.681539][ T5753] __submit_merged_write_cond+0x3c9/0x4e0 [ 107.681569][ T5753] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 107.681612][ T5753] f2fs_write_data_pages+0x2a27/0x36f0 [ 107.681635][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 107.681685][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 107.681750][ T5753] ? __bfs+0x153/0x290 [ 107.681766][ T5753] ? __pfx_hlock_conflict+0x10/0x10 [ 107.681804][ T5753] ? lockdep_unlock+0x5c/0xd0 [ 107.681826][ T5753] ? __lock_acquire+0x14b9/0x2e50 [ 107.681869][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 107.681893][ T5753] do_writepages+0x338/0x560 [ 107.681926][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 107.681953][ T5753] filemap_fdatawrite+0x1e9/0x2f0 [ 107.681979][ T5753] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 107.682054][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 107.682081][ T5753] f2fs_sync_dirty_inodes+0x30e/0x830 [ 107.682119][ T5753] f2fs_write_checkpoint+0xa3d/0x2710 [ 107.682142][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 107.682189][ T5753] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 107.682248][ T5753] ? try_to_wake_up+0x8b6/0x14d0 [ 107.682281][ T5753] kill_f2fs_super+0x2dd/0x700 [ 107.682314][ T5753] ? __pfx_kill_f2fs_super+0x10/0x10 [ 107.682349][ T5753] ? call_rcu+0x64d/0x8b0 [ 107.682369][ T5753] ? lockdep_hardirqs_on+0x7b/0x110 [ 107.682407][ T5753] deactivate_locked_super+0xbc/0x110 [ 107.682429][ T5753] cleanup_mnt+0x3d3/0x460 [ 107.682454][ T5753] task_work_run+0x1d9/0x270 [ 107.682476][ T5753] ? __pfx_task_work_run+0x10/0x10 [ 107.682505][ T5753] exit_to_user_mode_loop+0x204/0x770 [ 107.682524][ T5753] ? rcu_is_watching+0x16/0xb0 [ 107.682548][ T5753] do_syscall_64+0x328/0x520 [ 107.682567][ T5753] ? trace_irq_disable+0x3b/0x140 [ 107.682583][ T5753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.682601][ T5753] ? clear_bhb_loop+0x70/0xc0 [ 107.682623][ T5753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.682641][ T5753] RIP: 0033:0x7f5d1279f317 [ 107.682659][ T5753] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 107.682672][ T5753] RSP: 002b:00007ffdd08d5238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 107.682692][ T5753] RAX: 0000000000000000 RBX: 00007f5d12834474 RCX: 00007f5d1279f317 [ 107.682704][ T5753] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd08d52f0 [ 107.682714][ T5753] RBP: 00007ffdd08d52f0 R08: 00007ffdd08d62f0 R09: 00000000ffffffff [ 107.682726][ T5753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd08d6380 [ 107.682737][ T5753] R13: 00007f5d12834474 R14: 000000000001a341 R15: 00007ffdd08d63c0 [ 107.682766][ T5753] [ 107.683479][ T5753] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 108.226223][ T5890] loop0: detected capacity change from 0 to 40427 [ 108.234923][ T5890] F2FS-fs (loop0): invalid crc value [ 108.307494][ T5890] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 108.310506][ T5890] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 108.326803][ T5753] syz-executor: attempt to access beyond end of device [ 108.326803][ T5753] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 108.328754][ T5753] CPU: 1 UID: 0 PID: 5753 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 108.328778][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.328789][ T5753] Call Trace: [ 108.328796][ T5753] [ 108.328804][ T5753] dump_stack_lvl+0xe8/0x150 [ 108.328836][ T5753] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 108.328863][ T5753] f2fs_write_end_bio+0x1211/0x16e0 [ 108.328890][ T5753] ? blkg_put+0x22/0x240 [ 108.328925][ T5753] __submit_merged_bio+0x258/0x6a0 [ 108.328944][ T5753] ? rcu_is_watching+0x16/0xb0 [ 108.328970][ T5753] __submit_merged_write_cond+0x3c9/0x4e0 [ 108.329000][ T5753] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 108.329053][ T5753] f2fs_write_data_pages+0x2a27/0x36f0 [ 108.329076][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 108.329126][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 108.329199][ T5753] ? __bfs+0x153/0x290 [ 108.329216][ T5753] ? __pfx_hlock_conflict+0x10/0x10 [ 108.329253][ T5753] ? lockdep_unlock+0x5c/0xd0 [ 108.329276][ T5753] ? __lock_acquire+0x14b9/0x2e50 [ 108.329318][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 108.329342][ T5753] do_writepages+0x338/0x560 [ 108.329374][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 108.329402][ T5753] filemap_fdatawrite+0x1e9/0x2f0 [ 108.329428][ T5753] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 108.329494][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 108.329520][ T5753] f2fs_sync_dirty_inodes+0x30e/0x830 [ 108.329559][ T5753] f2fs_write_checkpoint+0xa3d/0x2710 [ 108.329582][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 108.329629][ T5753] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 108.329688][ T5753] ? try_to_wake_up+0x8b6/0x14d0 [ 108.329721][ T5753] kill_f2fs_super+0x2dd/0x700 [ 108.329754][ T5753] ? __pfx_kill_f2fs_super+0x10/0x10 [ 108.329789][ T5753] ? call_rcu+0x64d/0x8b0 [ 108.329809][ T5753] ? lockdep_hardirqs_on+0x7b/0x110 [ 108.329842][ T5753] deactivate_locked_super+0xbc/0x110 [ 108.329863][ T5753] cleanup_mnt+0x3d3/0x460 [ 108.329888][ T5753] task_work_run+0x1d9/0x270 [ 108.329911][ T5753] ? __pfx_task_work_run+0x10/0x10 [ 108.329939][ T5753] exit_to_user_mode_loop+0x204/0x770 [ 108.329958][ T5753] ? rcu_is_watching+0x16/0xb0 [ 108.329982][ T5753] do_syscall_64+0x328/0x520 [ 108.330000][ T5753] ? trace_irq_disable+0x3b/0x140 [ 108.330025][ T5753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.330043][ T5753] ? clear_bhb_loop+0x70/0xc0 [ 108.330065][ T5753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.330082][ T5753] RIP: 0033:0x7f5d1279f317 [ 108.330100][ T5753] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 108.330113][ T5753] RSP: 002b:00007ffdd08d5238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 108.330134][ T5753] RAX: 0000000000000000 RBX: 00007f5d12834474 RCX: 00007f5d1279f317 [ 108.330146][ T5753] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd08d52f0 [ 108.330157][ T5753] RBP: 00007ffdd08d52f0 R08: 00007ffdd08d62f0 R09: 00000000ffffffff [ 108.330169][ T5753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd08d6380 [ 108.330179][ T5753] R13: 00007f5d12834474 R14: 000000000001a5d4 R15: 00007ffdd08d63c0 [ 108.330209][ T5753] [ 108.330859][ T5753] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 108.846355][ T5895] loop0: detected capacity change from 0 to 40427 [ 108.856202][ T5895] F2FS-fs (loop0): invalid crc value [ 108.942560][ T5895] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 108.955188][ T5895] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 108.975697][ T5753] syz-executor: attempt to access beyond end of device [ 108.975697][ T5753] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 2026/08/15 00:25:13 executed programs: 19 [ 108.979023][ T5753] CPU: 0 UID: 0 PID: 5753 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 108.979050][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.979060][ T5753] Call Trace: [ 108.979068][ T5753] [ 108.979075][ T5753] dump_stack_lvl+0xe8/0x150 [ 108.979107][ T5753] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 108.979134][ T5753] f2fs_write_end_bio+0x1211/0x16e0 [ 108.979161][ T5753] ? blkg_put+0x22/0x240 [ 108.979196][ T5753] __submit_merged_bio+0x258/0x6a0 [ 108.979216][ T5753] ? rcu_is_watching+0x16/0xb0 [ 108.979241][ T5753] __submit_merged_write_cond+0x3c9/0x4e0 [ 108.979271][ T5753] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 108.979315][ T5753] f2fs_write_data_pages+0x2a27/0x36f0 [ 108.979337][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 108.979388][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 108.979459][ T5753] ? __bfs+0x153/0x290 [ 108.979475][ T5753] ? __pfx_hlock_conflict+0x10/0x10 [ 108.979512][ T5753] ? lockdep_unlock+0x5c/0xd0 [ 108.979534][ T5753] ? __lock_acquire+0x14b9/0x2e50 [ 108.979577][ T5753] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 108.979600][ T5753] do_writepages+0x338/0x560 [ 108.979633][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 108.979660][ T5753] filemap_fdatawrite+0x1e9/0x2f0 [ 108.979686][ T5753] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 108.979751][ T5753] ? do_raw_spin_unlock+0xf5/0x200 [ 108.979779][ T5753] f2fs_sync_dirty_inodes+0x30e/0x830 [ 108.979817][ T5753] f2fs_write_checkpoint+0xa3d/0x2710 [ 108.979840][ T5753] ? __lock_acquire+0x6df/0x2e50 [ 108.979888][ T5753] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 108.979947][ T5753] ? try_to_wake_up+0x8b6/0x14d0 [ 108.979989][ T5753] kill_f2fs_super+0x2dd/0x700 [ 108.980021][ T5753] ? __pfx_kill_f2fs_super+0x10/0x10 [ 108.980057][ T5753] ? call_rcu+0x64d/0x8b0 [ 108.980077][ T5753] ? lockdep_hardirqs_on+0x7b/0x110 [ 108.980110][ T5753] deactivate_locked_super+0xbc/0x110 [ 108.980132][ T5753] cleanup_mnt+0x3d3/0x460 [ 108.980157][ T5753] task_work_run+0x1d9/0x270 [ 108.980179][ T5753] ? __pfx_task_work_run+0x10/0x10 [ 108.980208][ T5753] exit_to_user_mode_loop+0x204/0x770 [ 108.980226][ T5753] ? rcu_is_watching+0x16/0xb0 [ 108.980250][ T5753] do_syscall_64+0x328/0x520 [ 108.980268][ T5753] ? trace_irq_disable+0x3b/0x140 [ 108.980285][ T5753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.980303][ T5753] ? clear_bhb_loop+0x70/0xc0 [ 108.980325][ T5753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.980342][ T5753] RIP: 0033:0x7f5d1279f317 [ 108.980359][ T5753] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 108.980373][ T5753] RSP: 002b:00007ffdd08d5238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 108.980393][ T5753] RAX: 0000000000000000 RBX: 00007f5d12834474 RCX: 00007f5d1279f317 [ 108.980404][ T5753] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdd08d52f0 [ 108.980415][ T5753] RBP: 00007ffdd08d52f0 R08: 00007ffdd08d62f0 R09: 00000000ffffffff [ 108.980426][ T5753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdd08d6380 [ 108.980437][ T5753] R13: 00007f5d12834474 R14: 000000000001a971 R15: 00007ffdd08d63c0 [ 108.980467][ T5753] [ 108.981139][ T5753] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 109.488821][ T5900] loop0: detected capacity change from 0 to 40427 [ 109.499726][ T5900] F2FS-fs (loop0): invalid crc value