Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts. 2026/08/14 08:53:24 parsed 1 programs 2026/08/14 08:53:24 serving rpc on tcp://44921 [ 85.832503][ T5630] cgroup: Unknown subsys name 'net' [ 85.959477][ T5630] cgroup: Unknown subsys name 'cpuset' [ 85.969451][ T5630] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.658786][ T5630] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.267723][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.268330][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.268652][ T5645] bridge_slave_0: entered allmulticast mode [ 91.273955][ T5645] bridge_slave_0: entered promiscuous mode [ 91.288721][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.289060][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.290656][ T5645] bridge_slave_1: entered allmulticast mode [ 91.294636][ T5645] bridge_slave_1: entered promiscuous mode [ 91.337824][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.346990][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.375661][ T5645] team0: Port device team_slave_0 added [ 91.382023][ T5645] team0: Port device team_slave_1 added [ 91.406945][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.406987][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.407011][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.413101][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.413139][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.413207][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.519795][ T5645] hsr_slave_0: entered promiscuous mode [ 91.523221][ T5645] hsr_slave_1: entered promiscuous mode [ 91.673861][ T5645] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.685173][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.689707][ T5645] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.700970][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.710061][ T5645] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.720161][ T25] cfg80211: failed to load regulatory.db [ 91.729699][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.731703][ T5645] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.746804][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.782425][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.782735][ T5645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.784727][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.785004][ T5645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.858838][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.878216][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.885815][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.903144][ T5645] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.914619][ T203] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.914758][ T203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.934670][ T1046] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.934762][ T1046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.283422][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.330716][ T5645] veth0_vlan: entered promiscuous mode [ 92.341739][ T5645] veth1_vlan: entered promiscuous mode [ 92.371680][ T5645] veth0_macvtap: entered promiscuous mode [ 92.380205][ T5645] veth1_macvtap: entered promiscuous mode [ 92.398366][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.406726][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.437472][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.456710][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.466621][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.485814][ T203] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.521162][ T5645] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.638840][ T203] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.714386][ T203] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.792077][ T203] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.861534][ T203] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.582220][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.592014][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.599922][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.608264][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.619305][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.025338][ T1046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.033508][ T1046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.068064][ T1046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.068115][ T1046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.451879][ T203] bridge_slave_1: left allmulticast mode [ 95.451929][ T203] bridge_slave_1: left promiscuous mode [ 95.452515][ T203] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.474157][ T203] bridge_slave_0: left allmulticast mode [ 95.474206][ T203] bridge_slave_0: left promiscuous mode [ 95.476608][ T203] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.604973][ T203] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.618759][ T203] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.631517][ T203] bond0 (unregistering): Released all slaves [ 95.748817][ T203] hsr_slave_0: left promiscuous mode [ 95.775757][ T203] hsr_slave_1: left promiscuous mode [ 95.778233][ T203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.778304][ T203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.798997][ T203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.799036][ T203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.834064][ T203] veth1_macvtap: left promiscuous mode [ 95.834137][ T203] veth0_macvtap: left promiscuous mode [ 95.834450][ T203] veth1_vlan: left promiscuous mode [ 95.843013][ T203] veth0_vlan: left promiscuous mode [ 96.339611][ T203] team0 (unregistering): Port device team_slave_1 removed [ 96.362217][ T203] team0 (unregistering): Port device team_slave_0 removed [ 96.529661][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1 2026/08/14 08:53:40 executed programs: 0 [ 97.370301][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.373779][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.377152][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.381765][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.386883][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.708188][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2 [ 98.452969][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3 [ 98.932173][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.939718][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.947729][ T5782] bridge_slave_0: entered allmulticast mode [ 98.955627][ T5782] bridge_slave_0: entered promiscuous mode [ 98.964528][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.972740][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.981495][ T5782] bridge_slave_1: entered allmulticast mode [ 98.989172][ T5782] bridge_slave_1: entered promiscuous mode [ 99.025670][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.037704][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.076887][ T5782] team0: Port device team_slave_0 added [ 99.091976][ T5782] team0: Port device team_slave_1 added [ 99.125135][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.134032][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.161654][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.174530][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.181593][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.191688][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.226114][ T5278] 8021q: adding VLAN 0 to HW filter on device eth4 [ 99.270606][ T5782] hsr_slave_0: entered promiscuous mode [ 99.278683][ T5782] hsr_slave_1: entered promiscuous mode [ 99.476641][ T4932] Bluetooth: hci0: command tx timeout [ 99.869038][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.884652][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.895010][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.907242][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.910767][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.923865][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.932224][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.942740][ T5782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.034914][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.063643][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.076548][ T3005] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.076841][ T3005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.100250][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.100465][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.610846][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.674091][ T5782] veth0_vlan: entered promiscuous mode [ 100.689748][ T5782] veth1_vlan: entered promiscuous mode [ 100.730880][ T5782] veth0_macvtap: entered promiscuous mode [ 100.739590][ T5782] veth1_macvtap: entered promiscuous mode [ 100.769438][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.788265][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.847729][ T203] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.848549][ T203] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.848656][ T203] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.848766][ T203] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.930482][ T203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.930533][ T203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.991357][ T3005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.991409][ T3005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.379291][ T5887] loop0: detected capacity change from 0 to 40427 [ 101.400868][ T5887] F2FS-fs (loop0): invalid crc value [ 101.551156][ T5887] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 101.561291][ T4932] Bluetooth: hci0: command tx timeout [ 101.577829][ T5887] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 101.614573][ T5782] syz-executor: attempt to access beyond end of device [ 101.614573][ T5782] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 101.633506][ T5782] CPU: 1 UID: 0 PID: 5782 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 101.633535][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.633559][ T5782] Call Trace: [ 101.633572][ T5782] [ 101.633581][ T5782] dump_stack_lvl+0xe8/0x150 [ 101.633622][ T5782] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 101.633655][ T5782] f2fs_write_end_bio+0x1211/0x16e0 [ 101.633710][ T5782] __submit_merged_bio+0x258/0x6a0 [ 101.633735][ T5782] ? rcu_is_watching+0x16/0xb0 [ 101.633762][ T5782] __submit_merged_write_cond+0x3c9/0x4e0 [ 101.633797][ T5782] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 101.633847][ T5782] f2fs_write_data_pages+0x2a27/0x36f0 [ 101.633878][ T5782] ? __lock_acquire+0x6df/0x2e50 [ 101.633935][ T5782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 101.634012][ T5782] ? rcu_is_watching+0x16/0xb0 [ 101.634039][ T5782] ? __bfs+0x153/0x290 [ 101.634059][ T5782] ? __pfx_hlock_conflict+0x10/0x10 [ 101.634104][ T5782] ? lockdep_unlock+0x5c/0xd0 [ 101.634134][ T5782] ? __lock_acquire+0x14b9/0x2e50 [ 101.634183][ T5782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 101.634225][ T5782] do_writepages+0x338/0x560 [ 101.634265][ T5782] ? do_raw_spin_unlock+0xf5/0x200 [ 101.634298][ T5782] filemap_fdatawrite+0x1e9/0x2f0 [ 101.634330][ T5782] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 101.634406][ T5782] ? do_raw_spin_unlock+0xf5/0x200 [ 101.634442][ T5782] f2fs_sync_dirty_inodes+0x30e/0x830 [ 101.634491][ T5782] f2fs_write_checkpoint+0xa3d/0x2710 [ 101.634534][ T5782] ? __lock_acquire+0x6df/0x2e50 [ 101.634595][ T5782] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 101.634658][ T5782] ? try_to_wake_up+0x8b6/0x14d0 [ 101.634696][ T5782] kill_f2fs_super+0x2dd/0x700 [ 101.634734][ T5782] ? __pfx_kill_f2fs_super+0x10/0x10 [ 101.634773][ T5782] ? call_rcu+0x64d/0x8b0 [ 101.634796][ T5782] ? lockdep_hardirqs_on+0x7b/0x110 [ 101.634836][ T5782] deactivate_locked_super+0xbc/0x110 [ 101.634859][ T5782] cleanup_mnt+0x3d3/0x460 [ 101.634888][ T5782] task_work_run+0x1d9/0x270 [ 101.634913][ T5782] ? __pfx_task_work_run+0x10/0x10 [ 101.634944][ T5782] exit_to_user_mode_loop+0x204/0x770 [ 101.634965][ T5782] ? rcu_is_watching+0x16/0xb0 [ 101.634992][ T5782] do_syscall_64+0x328/0x520 [ 101.635018][ T5782] ? trace_irq_disable+0x3b/0x140 [ 101.635037][ T5782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.635058][ T5782] ? clear_bhb_loop+0x70/0xc0 [ 101.635083][ T5782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.635103][ T5782] RIP: 0033:0x7f003cd9f317 [ 101.635129][ T5782] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 101.635146][ T5782] RSP: 002b:00007ffe0931de98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 101.635171][ T5782] RAX: 0000000000000000 RBX: 00007f003ce34474 RCX: 00007f003cd9f317 [ 101.635184][ T5782] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0931df50 [ 101.635195][ T5782] RBP: 00007ffe0931df50 R08: 00007ffe0931ef50 R09: 00000000ffffffff [ 101.635207][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0931efe0 [ 101.635235][ T5782] R13: 00007f003ce34474 R14: 0000000000018cc2 R15: 00007ffe0931f020 [ 101.635262][ T5782] [ 101.718078][ T5782] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.766352][ T4932] [ 101.965862][ T4932] ============================= [ 101.970726][ T4932] WARNING: suspicious RCU usage [ 101.975643][ T4932] syzkaller #0 Not tainted [ 101.980068][ T4932] ----------------------------- [ 101.984917][ T4932] ./include/linux/radix-tree.h:179 suspicious rcu_dereference_check() usage! [ 101.993696][ T4932] [ 101.993696][ T4932] other info that might help us debug this: [ 101.993696][ T4932] [ 102.003939][ T4932] [ 102.003939][ T4932] rcu_scheduler_active = 2, debug_locks = 1 [ 102.012022][ T4932] locks held by kworker/u9:1/4932: 4, last CPU#1: [ 102.018459][ T4932] #0: ffff888027ad1140 ((wq_completion)f2fs_evict_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 102.030326][ T4932] #1: ffffc9000eae7c40 ((work_completion)(&ew->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 102.042266][ T4932] #2: ffff8880b873a820 (lock){+.+.}-{3:3}, at: __radix_tree_preload+0x82/0x870 [ 102.051362][ T4932] #3: ffff8880251d88c8 (&im->ino_lock){+.+.}-{3:3}, at: __f2fs_add_ino_entry+0x14c/0x830 [ 102.061409][ T4932] [ 102.061409][ T4932] stack backtrace: [ 102.067332][ T4932] CPU: 1 UID: 0 PID: 4932 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 102.076805][ T4932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.086876][ T4932] Workqueue: f2fs_evict_wq f2fs_evict_inode_work [ 102.093238][ T4932] Call Trace: [ 102.096509][ T4932] [ 102.099448][ T4932] dump_stack_lvl+0xe8/0x150 [ 102.104049][ T4932] lockdep_rcu_suspicious+0x140/0x1d0 [ 102.109426][ T4932] __f2fs_add_ino_entry+0x782/0x830 [ 102.114638][ T4932] ? process_scheduled_works+0x97a/0x1630 [ 102.120367][ T4932] f2fs_evict_inode_work+0xa1/0x120 [ 102.125580][ T4932] process_scheduled_works+0xc3d/0x1630 [ 102.131165][ T4932] ? __pfx_process_scheduled_works+0x10/0x10 [ 102.137154][ T4932] ? assign_work+0x3cf/0x5d0 [ 102.141754][ T4932] worker_thread+0xa47/0xfb0 [ 102.146387][ T4932] ? __kthread_parkme+0x71/0x1f0 [ 102.151347][ T4932] kthread+0x38b/0x480 [ 102.155405][ T4932] ? __pfx_worker_thread+0x10/0x10 [ 102.160512][ T4932] ? __pfx_kthread+0x10/0x10 [ 102.165108][ T4932] ret_from_fork+0x514/0xb70 [ 102.169716][ T4932] ? __pfx_ret_from_fork+0x10/0x10 [ 102.174846][ T4932] ? __switch_to+0xc89/0x1420 [ 102.179539][ T4932] ? __pfx_kthread+0x10/0x10 [ 102.184128][ T4932] ret_from_fork_asm+0x1a/0x30 [ 102.188914][ T4932] [ 102.733928][ T5912] loop0: detected capacity change from 0 to 40427 [ 102.749493][ T5912] F2FS-fs (loop0): invalid crc value [ 102.860205][ T5912] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 102.878426][ T5912] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 102.903706][ T5782] syz-executor: attempt to access beyond end of device [ 102.903706][ T5782] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 102.920264][ T5782] CPU: 1 UID: 0 PID: 5782 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 102.920288][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.920299][ T5782] Call Trace: [ 102.920306][ T5782] [ 102.920314][ T5782] dump_stack_lvl+0xe8/0x150 2026/08/14 08:53:45 executed programs: 4 [ 102.920346][ T5782] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 102.920373][ T5782] f2fs_write_end_bio+0x1211/0x16e0 [ 102.920404][ T5782] ? blkg_put+0x22/0x240 [ 102.920436][ T5782] __submit_merged_bio+0x258/0x6a0 [ 102.920458][ T5782] ? rcu_is_watching+0x16/0xb0 [ 102.920486][ T5782] __submit_merged_write_cond+0x3c9/0x4e0 [ 102.920517][ T5782] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 102.920559][ T5782] f2fs_write_data_pages+0x2a27/0x36f0 [ 102.920585][ T5782] ? __lock_acquire+0x6df/0x2e50 [ 102.920643][ T5782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 102.920710][ T5782] ? __bfs+0x153/0x290 [ 102.920727][ T5782] ? __pfx_hlock_conflict+0x10/0x10 [ 102.920766][ T5782] ? lockdep_unlock+0x5c/0xd0 [ 102.920792][ T5782] ? __lock_acquire+0x14b9/0x2e50 [ 102.920834][ T5782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 102.920862][ T5782] do_writepages+0x338/0x560 [ 102.920896][ T5782] ? do_raw_spin_unlock+0xf5/0x200 [ 102.920926][ T5782] filemap_fdatawrite+0x1e9/0x2f0 [ 102.920955][ T5782] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 102.921019][ T5782] ? do_raw_spin_unlock+0xf5/0x200 [ 102.921049][ T5782] f2fs_sync_dirty_inodes+0x30e/0x830 [ 102.921089][ T5782] f2fs_write_checkpoint+0xa3d/0x2710 [ 102.921117][ T5782] ? __lock_acquire+0x6df/0x2e50 [ 102.921163][ T5782] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 102.921223][ T5782] ? try_to_wake_up+0x8b6/0x14d0 [ 102.921258][ T5782] kill_f2fs_super+0x2dd/0x700 [ 102.921293][ T5782] ? __pfx_kill_f2fs_super+0x10/0x10 [ 102.921330][ T5782] ? call_rcu+0x64d/0x8b0 [ 102.921352][ T5782] ? lockdep_hardirqs_on+0x7b/0x110 [ 102.921390][ T5782] deactivate_locked_super+0xbc/0x110 [ 102.921412][ T5782] cleanup_mnt+0x3d3/0x460 [ 102.921439][ T5782] task_work_run+0x1d9/0x270 [ 102.921462][ T5782] ? __pfx_task_work_run+0x10/0x10 [ 102.921491][ T5782] exit_to_user_mode_loop+0x204/0x770 [ 102.921511][ T5782] ? rcu_is_watching+0x16/0xb0 [ 102.921537][ T5782] do_syscall_64+0x328/0x520 [ 102.921563][ T5782] ? trace_irq_disable+0x3b/0x140 [ 102.921581][ T5782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.921601][ T5782] ? clear_bhb_loop+0x70/0xc0 [ 102.921632][ T5782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.921652][ T5782] RIP: 0033:0x7f003cd9f317 [ 102.921668][ T5782] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 102.921709][ T5782] RSP: 002b:00007ffe0931de98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 102.921733][ T5782] RAX: 0000000000000000 RBX: 00007f003ce34474 RCX: 00007f003cd9f317 [ 102.921749][ T5782] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0931df50 [ 102.921763][ T5782] RBP: 00007ffe0931df50 R08: 00007ffe0931ef50 R09: 00000000ffffffff [ 102.921779][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0931efe0 [ 102.921793][ T5782] R13: 00007f003ce34474 R14: 00000000000191cc R15: 00007ffe0931f020 [ 102.921829][ T5782] [ 102.948477][ T5782] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 103.637414][ T4932] Bluetooth: hci0: command tx timeout [ 103.834059][ T5937] loop0: detected capacity change from 0 to 40427 [ 103.848696][ T5937] F2FS-fs (loop0): invalid crc value [ 103.928972][ T5937] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 103.952294][ T5937] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 103.990220][ T5782] syz-executor: attempt to access beyond end of device [ 103.990220][ T5782] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 104.010243][ T5782] CPU: 0 UID: 0 PID: 5782 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 104.010270][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.010283][ T5782] Call Trace: [ 104.010291][ T5782] [ 104.010299][ T5782] dump_stack_lvl+0xe8/0x150 [ 104.010333][ T5782] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 104.010374][ T5782] f2fs_write_end_bio+0x1211/0x16e0 [ 104.010404][ T5782] ? blkg_put+0x22/0x240 [ 104.010438][ T5782] __submit_merged_bio+0x258/0x6a0 [ 104.010461][ T5782] ? rcu_is_watching+0x16/0xb0 [ 104.010489][ T5782] __submit_merged_write_cond+0x3c9/0x4e0 [ 104.010519][ T5782] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 104.010562][ T5782] f2fs_write_data_pages+0x2a27/0x36f0 [ 104.010605][ T5782] ? __lock_acquire+0x6df/0x2e50 [ 104.010656][ T5782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 104.010735][ T5782] ? __bfs+0x153/0x290 [ 104.010754][ T5782] ? __pfx_hlock_conflict+0x10/0x10 [ 104.010791][ T5782] ? lockdep_unlock+0x5c/0xd0 [ 104.010818][ T5782] ? __lock_acquire+0x14b9/0x2e50 [ 104.010879][ T5782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 104.010907][ T5782] do_writepages+0x338/0x560 [ 104.010943][ T5782] ? do_raw_spin_unlock+0xf5/0x200 [ 104.010975][ T5782] filemap_fdatawrite+0x1e9/0x2f0 [ 104.011004][ T5782] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 104.011097][ T5782] ? do_raw_spin_unlock+0xf5/0x200 [ 104.011132][ T5782] f2fs_sync_dirty_inodes+0x30e/0x830 [ 104.011179][ T5782] f2fs_write_checkpoint+0xa3d/0x2710 [ 104.011209][ T5782] ? __lock_acquire+0x6df/0x2e50 [ 104.011263][ T5782] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 104.011331][ T5782] ? try_to_wake_up+0x8b6/0x14d0 [ 104.011370][ T5782] kill_f2fs_super+0x2dd/0x700 [ 104.011411][ T5782] ? __pfx_kill_f2fs_super+0x10/0x10 [ 104.011457][ T5782] ? call_rcu+0x64d/0x8b0 [ 104.011483][ T5782] ? lockdep_hardirqs_on+0x7b/0x110 [ 104.011526][ T5782] deactivate_locked_super+0xbc/0x110 [ 104.011551][ T5782] cleanup_mnt+0x3d3/0x460 [ 104.011582][ T5782] task_work_run+0x1d9/0x270 [ 104.011608][ T5782] ? __pfx_task_work_run+0x10/0x10 [ 104.011642][ T5782] exit_to_user_mode_loop+0x204/0x770 [ 104.011682][ T5782] ? rcu_is_watching+0x16/0xb0 [ 104.011713][ T5782] do_syscall_64+0x328/0x520 [ 104.011742][ T5782] ? trace_irq_disable+0x3b/0x140 [ 104.011764][ T5782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.011787][ T5782] ? clear_bhb_loop+0x70/0xc0 [ 104.011815][ T5782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.011838][ T5782] RIP: 0033:0x7f003cd9f317 [ 104.011858][ T5782] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 104.011877][ T5782] RSP: 002b:00007ffe0931de98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 104.011901][ T5782] RAX: 0000000000000000 RBX: 00007f003ce34474 RCX: 00007f003cd9f317 [ 104.011916][ T5782] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0931df50 [ 104.011929][ T5782] RBP: 00007ffe0931df50 R08: 00007ffe0931ef50 R09: 00000000ffffffff [ 104.011945][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0931efe0 [ 104.011958][ T5782] R13: 00007f003ce34474 R14: 0000000000019602 R15: 00007ffe0931f020 [ 104.011994][ T5782] [ 104.018902][ T5782] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 104.871678][ T5957] loop0: detected capacity change from 0 to 40427 [ 104.889195][ T5957] F2FS-fs (loop0): invalid crc value [ 104.975106][ T5957] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 104.985110][ T5957] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 105.001116][ T5782] syz-executor: attempt to access beyond end of device [ 105.001116][ T5782] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 105.012847][ T5782] CPU: 1 UID: 0 PID: 5782 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 105.012921][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.012954][ T5782] Call Trace: [ 105.012969][ T5782] [ 105.012993][ T5782] dump_stack_lvl+0xe8/0x150 [ 105.013087][ T5782] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 105.013170][ T5782] f2fs_write_end_bio+0x1211/0x16e0 [ 105.013267][ T5782] ? blkg_put+0x22/0x240 [ 105.013374][ T5782] __submit_merged_bio+0x258/0x6a0 [ 105.013444][ T5782] ? rcu_is_watching+0x16/0xb0 [ 105.013534][ T5782] __submit_merged_write_cond+0x3c9/0x4e0 [ 105.013621][ T5782] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 105.013749][ T5782] f2fs_write_data_pages+0x2a27/0x36f0 [ 105.013950][ T5782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 105.014174][ T5782] ? __bfs+0x153/0x290 [ 105.014228][ T5782] ? __pfx_hlock_conflict+0x10/0x10 [ 105.014346][ T5782] ? lockdep_unlock+0x5c/0xd0 [ 105.014422][ T5782] ? __lock_acquire+0x14b9/0x2e50 [ 105.014557][ T5782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 105.014632][ T5782] do_writepages+0x338/0x560 [ 105.014737][ T5782] ? do_raw_spin_unlock+0xf5/0x200 [ 105.014823][ T5782] filemap_fdatawrite+0x1e9/0x2f0 [ 105.014906][ T5782] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 105.015092][ T5782] ? do_raw_spin_unlock+0xf5/0x200 [ 105.015127][ T5782] f2fs_sync_dirty_inodes+0x30e/0x830 [ 105.015173][ T5782] f2fs_write_checkpoint+0xa3d/0x2710 [ 105.015204][ T5782] ? __lock_acquire+0x6df/0x2e50 [ 105.015259][ T5782] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 105.015328][ T5782] ? try_to_wake_up+0x8f2/0x14d0 [ 105.015369][ T5782] kill_f2fs_super+0x2dd/0x700 [ 105.015410][ T5782] ? __pfx_kill_f2fs_super+0x10/0x10 [ 105.015468][ T5782] ? call_rcu+0x64d/0x8b0 [ 105.015495][ T5782] ? lockdep_hardirqs_on+0x7b/0x110 [ 105.015539][ T5782] deactivate_locked_super+0xbc/0x110 [ 105.015565][ T5782] cleanup_mnt+0x3d3/0x460 [ 105.015596][ T5782] task_work_run+0x1d9/0x270 [ 105.015624][ T5782] ? __pfx_task_work_run+0x10/0x10 [ 105.015659][ T5782] exit_to_user_mode_loop+0x204/0x770 [ 105.015683][ T5782] ? rcu_is_watching+0x16/0xb0 [ 105.015713][ T5782] do_syscall_64+0x328/0x520 [ 105.015742][ T5782] ? trace_irq_disable+0x3b/0x140 [ 105.015760][ T5782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.015783][ T5782] ? clear_bhb_loop+0x70/0xc0 [ 105.015808][ T5782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.015830][ T5782] RIP: 0033:0x7f003cd9f317 [ 105.015849][ T5782] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 105.015867][ T5782] RSP: 002b:00007ffe0931de98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 105.015889][ T5782] RAX: 0000000000000000 RBX: 00007f003ce34474 RCX: 00007f003cd9f317 [ 105.015903][ T5782] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0931df50 [ 105.015917][ T5782] RBP: 00007ffe0931df50 R08: 00007ffe0931ef50 R09: 00000000ffffffff [ 105.015974][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0931efe0 [ 105.016014][ T5782] R13: 00007f003ce34474 R14: 00000000000199fa R15: 00007ffe0931f020 [ 105.016125][ T5782] [ 105.039362][ T5782] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 105.674006][ T5963] loop0: detected capacity change from 0 to 40427 [ 105.683081][ T5963] F2FS-fs (loop0): invalid crc value [ 105.715623][ T4932] Bluetooth: hci0: command tx timeout [ 105.771234][ T5963] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 105.783947][ T5963] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 105.798639][ T5782] syz-executor: attempt to access beyond end of device [ 105.798639][ T5782] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 105.814377][ T5782] CPU: 0 UID: 0 PID: 5782 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 105.814401][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.814412][ T5782] Call Trace: [ 105.814421][ T5782] [ 105.814429][ T5782] dump_stack_lvl+0xe8/0x150 [ 105.814461][ T5782] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 105.814489][ T5782] f2fs_write_end_bio+0x1211/0x16e0 [ 105.814520][ T5782] ? blkg_put+0x22/0x240 [ 105.814554][ T5782] __submit_merged_bio+0x258/0x6a0 [ 105.814576][ T5782] ? rcu_is_watching+0x16/0xb0 [ 105.814602][ T5782] __submit_merged_write_cond+0x3c9/0x4e0 [ 105.814634][ T5782] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 105.814677][ T5782] f2fs_write_data_pages+0x2a27/0x36f0 [ 105.814736][ T5782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 105.814773][ T5782] ? lock_acquire+0x115/0x350 [ 105.814815][ T5782] ? __bfs+0x153/0x290 [ 105.814833][ T5782] ? __pfx_hlock_conflict+0x10/0x10 [ 105.814870][ T5782] ? lockdep_unlock+0x5c/0xd0 [ 105.814904][ T5782] ? __lock_acquire+0x14b9/0x2e50 [ 105.814946][ T5782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 105.814973][ T5782] do_writepages+0x338/0x560 [ 105.815004][ T5782] ? do_raw_spin_unlock+0xf5/0x200 [ 105.815033][ T5782] filemap_fdatawrite+0x1e9/0x2f0 [ 105.815059][ T5782] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 105.815120][ T5782] ? do_raw_spin_unlock+0xf5/0x200 [ 105.815150][ T5782] f2fs_sync_dirty_inodes+0x30e/0x830 [ 105.815192][ T5782] f2fs_write_checkpoint+0xa3d/0x2710 [ 105.815218][ T5782] ? __lock_acquire+0x6df/0x2e50 [ 105.815268][ T5782] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 105.815328][ T5782] ? try_to_wake_up+0x8b6/0x14d0 [ 105.815363][ T5782] kill_f2fs_super+0x2dd/0x700 [ 105.815398][ T5782] ? __pfx_kill_f2fs_super+0x10/0x10 [ 105.815437][ T5782] ? call_rcu+0x64d/0x8b0 [ 105.815457][ T5782] ? lockdep_hardirqs_on+0x7b/0x110 [ 105.815492][ T5782] deactivate_locked_super+0xbc/0x110 [ 105.815514][ T5782] cleanup_mnt+0x3d3/0x460 [ 105.815543][ T5782] task_work_run+0x1d9/0x270 [ 105.815567][ T5782] ? __pfx_task_work_run+0x10/0x10 [ 105.815594][ T5782] exit_to_user_mode_loop+0x204/0x770 [ 105.815612][ T5782] ? rcu_is_watching+0x16/0xb0 [ 105.815638][ T5782] do_syscall_64+0x328/0x520 [ 105.815664][ T5782] ? trace_irq_disable+0x3b/0x140 [ 105.815683][ T5782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.815702][ T5782] ? clear_bhb_loop+0x70/0xc0 [ 105.815726][ T5782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.815745][ T5782] RIP: 0033:0x7f003cd9f317 [ 105.815763][ T5782] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 105.815779][ T5782] RSP: 002b:00007ffe0931de98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 105.815800][ T5782] RAX: 0000000000000000 RBX: 00007f003ce34474 RCX: 00007f003cd9f317 [ 105.815812][ T5782] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0931df50 [ 105.815824][ T5782] RBP: 00007ffe0931df50 R08: 00007ffe0931ef50 R09: 00000000ffffffff [ 105.815837][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0931efe0 [ 105.815849][ T5782] R13: 00007f003ce34474 R14: 0000000000019d1c R15: 00007ffe0931f020 [ 105.815879][ T5782] [ 105.825620][ T5782] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 106.463280][ T5969] loop0: detected capacity change from 0 to 40427 [ 106.472541][ T5969] F2FS-fs (loop0): invalid crc value [ 106.554858][ T5969] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 106.568206][ T5969] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 106.587758][ T5782] syz-executor: attempt to access beyond end of device [ 106.587758][ T5782] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 106.604022][ T5782] CPU: 1 UID: 0 PID: 5782 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 106.604049][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.604062][ T5782] Call Trace: [ 106.604071][ T5782] [ 106.604080][ T5782] dump_stack_lvl+0xe8/0x150 [ 106.604118][ T5782] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 106.604155][ T5782] f2fs_write_end_bio+0x1211/0x16e0 [ 106.604190][ T5782] ? blkg_put+0x22/0x240 [ 106.604232][ T5782] __submit_merged_bio+0x258/0x6a0 [ 106.604258][ T5782] ? rcu_is_watching+0x16/0xb0 [ 106.604291][ T5782] __submit_merged_write_cond+0x3c9/0x4e0 [ 106.604340][ T5782] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 106.604394][ T5782] f2fs_write_data_pages+0x2a27/0x36f0 [ 106.604424][ T5782] ? __lock_acquire+0x6df/0x2e50 [ 106.604491][ T5782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 106.604593][ T5782] ? __bfs+0x153/0x290 [ 106.604614][ T5782] ? __pfx_hlock_conflict+0x10/0x10 [ 106.604664][ T5782] ? lockdep_unlock+0x5c/0xd0 [ 106.604695][ T5782] ? __lock_acquire+0x14b9/0x2e50 [ 106.604750][ T5782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 106.604783][ T5782] do_writepages+0x338/0x560 [ 106.604823][ T5782] ? do_raw_spin_unlock+0xf5/0x200 [ 106.604860][ T5782] filemap_fdatawrite+0x1e9/0x2f0 [ 106.604895][ T5782] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 106.604981][ T5782] ? do_raw_spin_unlock+0xf5/0x200 [ 106.605018][ T5782] f2fs_sync_dirty_inodes+0x30e/0x830 [ 106.605070][ T5782] f2fs_write_checkpoint+0xa3d/0x2710 [ 106.605102][ T5782] ? __lock_acquire+0x6df/0x2e50 [ 106.605163][ T5782] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 106.605241][ T5782] ? try_to_wake_up+0x8b6/0x14d0 [ 106.605284][ T5782] kill_f2fs_super+0x2dd/0x700 [ 106.605337][ T5782] ? __pfx_kill_f2fs_super+0x10/0x10 [ 106.605384][ T5782] ? call_rcu+0x64d/0x8b0 [ 106.605411][ T5782] ? lockdep_hardirqs_on+0x7b/0x110 [ 106.605458][ T5782] deactivate_locked_super+0xbc/0x110 [ 106.605485][ T5782] cleanup_mnt+0x3d3/0x460 [ 106.605519][ T5782] task_work_run+0x1d9/0x270 [ 106.605547][ T5782] ? __pfx_task_work_run+0x10/0x10 [ 106.605584][ T5782] exit_to_user_mode_loop+0x204/0x770 [ 106.605608][ T5782] ? rcu_is_watching+0x16/0xb0 [ 106.605640][ T5782] do_syscall_64+0x328/0x520 [ 106.605681][ T5782] ? trace_irq_disable+0x3b/0x140 [ 106.605701][ T5782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.605724][ T5782] ? clear_bhb_loop+0x70/0xc0 [ 106.605752][ T5782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.605774][ T5782] RIP: 0033:0x7f003cd9f317 [ 106.605795][ T5782] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 106.605812][ T5782] RSP: 002b:00007ffe0931de98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 106.605835][ T5782] RAX: 0000000000000000 RBX: 00007f003ce34474 RCX: 00007f003cd9f317 [ 106.605850][ T5782] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0931df50 [ 106.605863][ T5782] RBP: 00007ffe0931df50 R08: 00007ffe0931ef50 R09: 00000000ffffffff [ 106.605878][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0931efe0 [ 106.605892][ T5782] R13: 00007f003ce34474 R14: 0000000000019ef7 R15: 00007ffe0931f020 [ 106.605930][ T5782] [ 106.672831][ T5782] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 107.239964][ T5975] loop0: detected capacity change from 0 to 40427 [ 107.255585][ T5975] F2FS-fs (loop0): invalid crc value [ 107.330462][ T5975] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 107.342144][ T5975] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 107.361379][ T5782] syz-executor: attempt to access beyond end of device [ 107.361379][ T5782] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 107.364204][ T5782] CPU: 1 UID: 0 PID: 5782 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 107.364264][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.364294][ T5782] Call Trace: [ 107.364321][ T5782] [ 107.364347][ T5782] dump_stack_lvl+0xe8/0x150 [ 107.364439][ T5782] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 107.364527][ T5782] f2fs_write_end_bio+0x1211/0x16e0 [ 107.364620][ T5782] ? blkg_put+0x22/0x240 [ 107.364715][ T5782] __submit_merged_bio+0x258/0x6a0 [ 107.364783][ T5782] ? rcu_is_watching+0x16/0xb0 [ 107.364859][ T5782] __submit_merged_write_cond+0x3c9/0x4e0 [ 107.364938][ T5782] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 107.365059][ T5782] f2fs_write_data_pages+0x2a27/0x36f0 [ 107.365127][ T5782] ? __lock_acquire+0x6df/0x2e50 [ 107.365248][ T5782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 107.365424][ T5782] ? __bfs+0x153/0x290 [ 107.365469][ T5782] ? __pfx_hlock_conflict+0x10/0x10 [ 107.365559][ T5782] ? lockdep_unlock+0x5c/0xd0 [ 107.365622][ T5782] ? __lock_acquire+0x14b9/0x2e50 [ 107.365750][ T5782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 107.365832][ T5782] do_writepages+0x338/0x560 [ 107.365902][ T5782] ? do_raw_spin_unlock+0xf5/0x200 [ 107.365980][ T5782] filemap_fdatawrite+0x1e9/0x2f0 [ 107.366055][ T5782] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 107.366212][ T5782] ? do_raw_spin_unlock+0xf5/0x200 [ 107.366290][ T5782] f2fs_sync_dirty_inodes+0x30e/0x830 [ 107.366395][ T5782] f2fs_write_checkpoint+0xa3d/0x2710 [ 107.366460][ T5782] ? __lock_acquire+0x6df/0x2e50 [ 107.366572][ T5782] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 107.366709][ T5782] ? try_to_wake_up+0x8f2/0x14d0 [ 107.366807][ T5782] kill_f2fs_super+0x2dd/0x700 [ 107.366891][ T5782] ? __pfx_kill_f2fs_super+0x10/0x10 [ 107.366982][ T5782] ? call_rcu+0x64d/0x8b0 [ 107.367036][ T5782] ? lockdep_hardirqs_on+0x7b/0x110 [ 107.367126][ T5782] deactivate_locked_super+0xbc/0x110 [ 107.367180][ T5782] cleanup_mnt+0x3d3/0x460 [ 107.367258][ T5782] task_work_run+0x1d9/0x270 [ 107.367308][ T5782] ? __pfx_task_work_run+0x10/0x10 [ 107.367387][ T5782] exit_to_user_mode_loop+0x204/0x770 [ 107.367434][ T5782] ? rcu_is_watching+0x16/0xb0 [ 107.367497][ T5782] do_syscall_64+0x328/0x520 [ 107.367560][ T5782] ? trace_irq_disable+0x3b/0x140 [ 107.367612][ T5782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.367659][ T5782] ? clear_bhb_loop+0x70/0xc0 [ 107.367721][ T5782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.367774][ T5782] RIP: 0033:0x7f003cd9f317 [ 107.367814][ T5782] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 107.367858][ T5782] RSP: 002b:00007ffe0931de98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 107.367906][ T5782] RAX: 0000000000000000 RBX: 00007f003ce34474 RCX: 00007f003cd9f317 [ 107.367940][ T5782] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0931df50 [ 107.367956][ T5782] RBP: 00007ffe0931df50 R08: 00007ffe0931ef50 R09: 00000000ffffffff [ 107.368001][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0931efe0 [ 107.368030][ T5782] R13: 00007f003ce34474 R14: 000000000001a332 R15: 00007ffe0931f020 [ 107.368103][ T5782] [ 107.370790][ T5782] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 107.381268][ T25] loop0: lost filesystem error report for type 5 error -108 [ 108.010791][ T5981] loop0: detected capacity change from 0 to 40427 [ 108.020175][ T5981] F2FS-fs (loop0): invalid crc value [ 108.114259][ T5981] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 108.124377][ T5981] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 108.142383][ T5782] syz-executor: attempt to access beyond end of device [ 108.142383][ T5782] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 2026/08/14 08:53:50 executed programs: 10 [ 108.149726][ T5782] CPU: 0 UID: 0 PID: 5782 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 108.149789][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.149818][ T5782] Call Trace: [ 108.149837][ T5782] [ 108.149862][ T5782] dump_stack_lvl+0xe8/0x150 [ 108.149950][ T5782] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 108.150018][ T5782] f2fs_write_end_bio+0x1211/0x16e0 [ 108.150122][ T5782] ? blkg_put+0x22/0x240 [ 108.150210][ T5782] __submit_merged_bio+0x258/0x6a0 [ 108.150267][ T5782] ? rcu_is_watching+0x16/0xb0 [ 108.150358][ T5782] __submit_merged_write_cond+0x3c9/0x4e0 [ 108.150434][ T5782] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 108.150545][ T5782] f2fs_write_data_pages+0x2a27/0x36f0 [ 108.150686][ T5782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 108.150790][ T5782] ? lock_acquire+0x115/0x350 [ 108.150896][ T5782] ? __bfs+0x153/0x290 [ 108.150963][ T5782] ? __pfx_hlock_conflict+0x10/0x10 [ 108.151091][ T5782] ? lockdep_unlock+0x5c/0xd0 [ 108.151166][ T5782] ? __lock_acquire+0x14b9/0x2e50 [ 108.151285][ T5782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 108.151373][ T5782] do_writepages+0x338/0x560 [ 108.151458][ T5782] ? do_raw_spin_unlock+0xf5/0x200 [ 108.151532][ T5782] filemap_fdatawrite+0x1e9/0x2f0 [ 108.151600][ T5782] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 108.151828][ T5782] ? do_raw_spin_unlock+0xf5/0x200 [ 108.151910][ T5782] f2fs_sync_dirty_inodes+0x30e/0x830 [ 108.152025][ T5782] f2fs_write_checkpoint+0xa3d/0x2710 [ 108.152101][ T5782] ? __lock_acquire+0x6df/0x2e50 [ 108.152244][ T5782] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 108.152437][ T5782] ? try_to_wake_up+0x8b6/0x14d0 [ 108.152545][ T5782] kill_f2fs_super+0x2dd/0x700 [ 108.152646][ T5782] ? __pfx_kill_f2fs_super+0x10/0x10 [ 108.152744][ T5782] ? call_rcu+0x64d/0x8b0 [ 108.152807][ T5782] ? lockdep_hardirqs_on+0x7b/0x110 [ 108.152924][ T5782] deactivate_locked_super+0xbc/0x110 [ 108.152975][ T5782] cleanup_mnt+0x3d3/0x460 [ 108.153051][ T5782] task_work_run+0x1d9/0x270 [ 108.153110][ T5782] ? __pfx_task_work_run+0x10/0x10 [ 108.153184][ T5782] exit_to_user_mode_loop+0x204/0x770 [ 108.153234][ T5782] ? rcu_is_watching+0x16/0xb0 [ 108.153300][ T5782] do_syscall_64+0x328/0x520 [ 108.153428][ T5782] ? trace_irq_disable+0x3b/0x140 [ 108.153490][ T5782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.153550][ T5782] ? clear_bhb_loop+0x70/0xc0 [ 108.153615][ T5782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.153673][ T5782] RIP: 0033:0x7f003cd9f317 [ 108.153730][ T5782] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 108.153785][ T5782] RSP: 002b:00007ffe0931de98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 108.153861][ T5782] RAX: 0000000000000000 RBX: 00007f003ce34474 RCX: 00007f003cd9f317 [ 108.153901][ T5782] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0931df50 [ 108.153932][ T5782] RBP: 00007ffe0931df50 R08: 00007ffe0931ef50 R09: 00000000ffffffff [ 108.153972][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0931efe0 [ 108.154004][ T5782] R13: 00007f003ce34474 R14: 000000000001a641 R15: 00007ffe0931f020 [ 108.154095][ T5782] [ 108.155283][ T5782] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 108.787001][ T5987] loop0: detected capacity change from 0 to 40427 [ 108.795854][ T5987] F2FS-fs (loop0): invalid crc value [ 108.873928][ T5987] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 108.888039][ T5987] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 108.902691][ T5782] syz-executor: attempt to access beyond end of device [ 108.902691][ T5782] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 108.911079][ T5782] CPU: 1 UID: 0 PID: 5782 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 108.911167][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.911190][ T5782] Call Trace: [ 108.911215][ T5782] [ 108.911240][ T5782] dump_stack_lvl+0xe8/0x150 [ 108.911331][ T5782] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 108.911405][ T5782] f2fs_write_end_bio+0x1211/0x16e0 [ 108.911480][ T5782] ? blkg_put+0x22/0x240 [ 108.911581][ T5782] __submit_merged_bio+0x258/0x6a0 [ 108.911641][ T5782] ? rcu_is_watching+0x16/0xb0 [ 108.911750][ T5782] __submit_merged_write_cond+0x3c9/0x4e0 [ 108.911876][ T5782] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 108.912001][ T5782] f2fs_write_data_pages+0x2a27/0x36f0 [ 108.912184][ T5782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 108.912382][ T5782] ? __bfs+0x153/0x290 [ 108.912433][ T5782] ? __pfx_hlock_conflict+0x10/0x10 [ 108.912546][ T5782] ? lockdep_unlock+0x5c/0xd0 [ 108.912628][ T5782] ? __lock_acquire+0x14b9/0x2e50 [ 108.912766][ T5782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 108.912856][ T5782] do_writepages+0x338/0x560 [ 108.912953][ T5782] ? do_raw_spin_unlock+0xf5/0x200 [ 108.913035][ T5782] filemap_fdatawrite+0x1e9/0x2f0 [ 108.913119][ T5782] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 108.913286][ T5782] ? do_raw_spin_unlock+0xf5/0x200 [ 108.913362][ T5782] f2fs_sync_dirty_inodes+0x30e/0x830 [ 108.913464][ T5782] f2fs_write_checkpoint+0xa3d/0x2710 [ 108.913531][ T5782] ? __lock_acquire+0x6df/0x2e50 [ 108.913645][ T5782] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 108.913805][ T5782] ? try_to_wake_up+0x8b6/0x14d0 [ 108.913890][ T5782] kill_f2fs_super+0x2dd/0x700 [ 108.913989][ T5782] ? __pfx_kill_f2fs_super+0x10/0x10 [ 108.914107][ T5782] ? call_rcu+0x64d/0x8b0 [ 108.914164][ T5782] ? lockdep_hardirqs_on+0x7b/0x110 [ 108.914259][ T5782] deactivate_locked_super+0xbc/0x110 [ 108.914322][ T5782] cleanup_mnt+0x3d3/0x460 [ 108.914389][ T5782] task_work_run+0x1d9/0x270 [ 108.914452][ T5782] ? __pfx_task_work_run+0x10/0x10 [ 108.914522][ T5782] exit_to_user_mode_loop+0x204/0x770 [ 108.914578][ T5782] ? rcu_is_watching+0x16/0xb0 [ 108.914665][ T5782] do_syscall_64+0x328/0x520 [ 108.914732][ T5782] ? trace_irq_disable+0x3b/0x140 [ 108.914776][ T5782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.914835][ T5782] ? clear_bhb_loop+0x70/0xc0 [ 108.914905][ T5782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.914956][ T5782] RIP: 0033:0x7f003cd9f317 [ 108.915014][ T5782] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 108.915055][ T5782] RSP: 002b:00007ffe0931de98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 108.915124][ T5782] RAX: 0000000000000000 RBX: 00007f003ce34474 RCX: 00007f003cd9f317 [ 108.915157][ T5782] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0931df50 [ 108.915205][ T5782] RBP: 00007ffe0931df50 R08: 00007ffe0931ef50 R09: 00000000ffffffff [ 108.915237][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0931efe0 [ 108.915274][ T5782] R13: 00007f003ce34474 R14: 000000000001a93c R15: 00007ffe0931f020 [ 108.915354][ T5782] [ 108.934825][ T5782] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 109.558559][ T5993] loop0: detected capacity change from 0 to 40427 [ 109.567534][ T5993] F2FS-fs (loop0): invalid crc value [ 109.661272][ T5993] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 109.669805][ T5993] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 109.687636][ T5782] syz-executor: attempt to access beyond end of device [ 109.687636][ T5782] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 109.693124][ T5782] CPU: 1 UID: 0 PID: 5782 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 109.693181][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.693210][ T5782] Call Trace: [ 109.693229][ T5782] [ 109.693254][ T5782] dump_stack_lvl+0xe8/0x150 [ 109.693342][ T5782] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 109.693427][ T5782] f2fs_write_end_bio+0x1211/0x16e0 [ 109.693522][ T5782] ? blkg_put+0x22/0x240 [ 109.693622][ T5782] __submit_merged_bio+0x258/0x6a0 [ 109.693678][ T5782] ? rcu_is_watching+0x16/0xb0 [ 109.693745][ T5782] __submit_merged_write_cond+0x3c9/0x4e0 [ 109.693814][ T5782] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 109.693926][ T5782] f2fs_write_data_pages+0x2a27/0x36f0 [ 109.694067][ T5782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 109.694227][ T5782] ? __bfs+0x153/0x290 [ 109.694264][ T5782] ? __pfx_hlock_conflict+0x10/0x10 [ 109.694360][ T5782] ? lockdep_unlock+0x5c/0xd0 [ 109.694421][ T5782] ? __lock_acquire+0x14b9/0x2e50 [ 109.694519][ T5782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 109.694590][ T5782] do_writepages+0x338/0x560 [ 109.694675][ T5782] ? do_raw_spin_unlock+0xf5/0x200 [ 109.694752][ T5782] filemap_fdatawrite+0x1e9/0x2f0 [ 109.694832][ T5782] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 109.694994][ T5782] ? do_raw_spin_unlock+0xf5/0x200 [ 109.695086][ T5782] f2fs_sync_dirty_inodes+0x30e/0x830 [ 109.695194][ T5782] f2fs_write_checkpoint+0xa3d/0x2710 [ 109.695261][ T5782] ? __lock_acquire+0x6df/0x2e50 [ 109.695387][ T5782] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 109.695535][ T5782] ? try_to_wake_up+0x8f2/0x14d0 [ 109.695629][ T5782] kill_f2fs_super+0x2dd/0x700 [ 109.695720][ T5782] ? __pfx_kill_f2fs_super+0x10/0x10 [ 109.695813][ T5782] ? call_rcu+0x64d/0x8b0 [ 109.695870][ T5782] ? lockdep_hardirqs_on+0x7b/0x110 [ 109.695967][ T5782] deactivate_locked_super+0xbc/0x110 [ 109.696023][ T5782] cleanup_mnt+0x3d3/0x460 [ 109.696098][ T5782] task_work_run+0x1d9/0x270 [ 109.696163][ T5782] ? __pfx_task_work_run+0x10/0x10 [ 109.696256][ T5782] exit_to_user_mode_loop+0x204/0x770 [ 109.696328][ T5782] ? rcu_is_watching+0x16/0xb0 [ 109.696390][ T5782] do_syscall_64+0x328/0x520 [ 109.696440][ T5782] ? trace_irq_disable+0x3b/0x140 [ 109.696478][ T5782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.696528][ T5782] ? clear_bhb_loop+0x70/0xc0 [ 109.696606][ T5782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.696660][ T5782] RIP: 0033:0x7f003cd9f317 [ 109.696710][ T5782] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 109.696763][ T5782] RSP: 002b:00007ffe0931de98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 109.696806][ T5782] RAX: 0000000000000000 RBX: 00007f003ce34474 RCX: 00007f003cd9f317 [ 109.696835][ T5782] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0931df50 [ 109.696864][ T5782] RBP: 00007ffe0931df50 R08: 00007ffe0931ef50 R09: 00000000ffffffff [ 109.696895][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0931efe0 [ 109.696918][ T5782] R13: 00007f003ce34474 R14: 000000000001ac4a R15: 00007ffe0931f020 [ 109.697018][ T5782] [ 109.731382][ T5782] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 110.340828][ T5999] loop0: detected capacity change from 0 to 40427 [ 110.351927][ T5999] F2FS-fs (loop0): invalid crc value [ 110.442520][ T5999] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 110.453196][ T5999] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 110.471583][ T5782] syz-executor: attempt to access beyond end of device [ 110.471583][ T5782] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 110.486943][ T5782] CPU: 1 UID: 0 PID: 5782 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 110.486967][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.486978][ T5782] Call Trace: [ 110.486986][ T5782] [ 110.486993][ T5782] dump_stack_lvl+0xe8/0x150 [ 110.487026][ T5782] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 110.487053][ T5782] f2fs_write_end_bio+0x1211/0x16e0 [ 110.487083][ T5782] ? blkg_put+0x22/0x240 [ 110.487117][ T5782] __submit_merged_bio+0x258/0x6a0 [ 110.487140][ T5782] ? rcu_is_watching+0x16/0xb0 [ 110.487168][ T5782] __submit_merged_write_cond+0x3c9/0x4e0 [ 110.487202][ T5782] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 110.487247][ T5782] f2fs_write_data_pages+0x2a27/0x36f0 [ 110.487305][ T5782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 110.487370][ T5782] ? __bfs+0x153/0x290 [ 110.487388][ T5782] ? __pfx_hlock_conflict+0x10/0x10 [ 110.487425][ T5782] ? lockdep_unlock+0x5c/0xd0 [ 110.487451][ T5782] ? __lock_acquire+0x14b9/0x2e50 [ 110.487491][ T5782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 110.487525][ T5782] do_writepages+0x338/0x560 [ 110.487558][ T5782] ? do_raw_spin_unlock+0xf5/0x200 [ 110.487587][ T5782] filemap_fdatawrite+0x1e9/0x2f0 [ 110.487614][ T5782] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 110.487679][ T5782] ? do_raw_spin_unlock+0xf5/0x200 [ 110.487709][ T5782] f2fs_sync_dirty_inodes+0x30e/0x830 [ 110.487749][ T5782] f2fs_write_checkpoint+0xa3d/0x2710 [ 110.487793][ T5782] ? __lock_acquire+0x6df/0x2e50 [ 110.487841][ T5782] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 110.487905][ T5782] ? try_to_wake_up+0x8b6/0x14d0 [ 110.487942][ T5782] kill_f2fs_super+0x2dd/0x700 [ 110.487978][ T5782] ? __pfx_kill_f2fs_super+0x10/0x10 [ 110.488034][ T5782] ? call_rcu+0x64d/0x8b0 [ 110.488057][ T5782] ? lockdep_hardirqs_on+0x7b/0x110 [ 110.488097][ T5782] deactivate_locked_super+0xbc/0x110 [ 110.488120][ T5782] cleanup_mnt+0x3d3/0x460 [ 110.488166][ T5782] task_work_run+0x1d9/0x270 [ 110.488192][ T5782] ? __pfx_task_work_run+0x10/0x10 [ 110.488225][ T5782] exit_to_user_mode_loop+0x204/0x770 [ 110.488247][ T5782] ? rcu_is_watching+0x16/0xb0 [ 110.488277][ T5782] do_syscall_64+0x328/0x520 [ 110.488305][ T5782] ? trace_irq_disable+0x3b/0x140 [ 110.488326][ T5782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.488348][ T5782] ? clear_bhb_loop+0x70/0xc0 [ 110.488375][ T5782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.488396][ T5782] RIP: 0033:0x7f003cd9f317 [ 110.488416][ T5782] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 110.488434][ T5782] RSP: 002b:00007ffe0931de98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 110.488456][ T5782] RAX: 0000000000000000 RBX: 00007f003ce34474 RCX: 00007f003cd9f317 [ 110.488471][ T5782] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0931df50 [ 110.488484][ T5782] RBP: 00007ffe0931df50 R08: 00007ffe0931ef50 R09: 00000000ffffffff [ 110.488506][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0931efe0 [ 110.488519][ T5782] R13: 00007f003ce34474 R14: 000000000001ae24 R15: 00007ffe0931f020 [ 110.488553][ T5782] [ 110.508640][ T5782] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 111.120556][ T6005] loop0: detected capacity change from 0 to 40427 [ 111.130995][ T6005] F2FS-fs (loop0): invalid crc value [ 111.213033][ T6005] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 111.228932][ T6005] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 111.247904][ T5782] syz-executor: attempt to access beyond end of device [ 111.247904][ T5782] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 111.252145][ T5782] CPU: 1 UID: 0 PID: 5782 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 111.252219][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.252258][ T5782] Call Trace: [ 111.252286][ T5782] [ 111.252314][ T5782] dump_stack_lvl+0xe8/0x150 [ 111.252422][ T5782] f2fs_stop_checkpoint+0x3f6/0x5d0 [ 111.252506][ T5782] f2fs_write_end_bio+0x1211/0x16e0 [ 111.252599][ T5782] ? blkg_put+0x22/0x240 [ 111.252701][ T5782] __submit_merged_bio+0x258/0x6a0 [ 111.252765][ T5782] ? rcu_is_watching+0x16/0xb0 [ 111.252847][ T5782] __submit_merged_write_cond+0x3c9/0x4e0 [ 111.252936][ T5782] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 111.253061][ T5782] f2fs_write_data_pages+0x2a27/0x36f0 [ 111.253127][ T5782] ? __lock_acquire+0x6df/0x2e50 [ 111.253251][ T5782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 111.253420][ T5782] ? __bfs+0x153/0x290 [ 111.253475][ T5782] ? __pfx_hlock_conflict+0x10/0x10 [ 111.253571][ T5782] ? lockdep_unlock+0x5c/0xd0 [ 111.253639][ T5782] ? __lock_acquire+0x14b9/0x2e50 [ 111.253757][ T5782] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 111.253833][ T5782] do_writepages+0x338/0x560 [ 111.253919][ T5782] ? do_raw_spin_unlock+0xf5/0x200 [ 111.253996][ T5782] filemap_fdatawrite+0x1e9/0x2f0 [ 111.254051][ T5782] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 111.254252][ T5782] ? do_raw_spin_unlock+0xf5/0x200 [ 111.254332][ T5782] f2fs_sync_dirty_inodes+0x30e/0x830 [ 111.254443][ T5782] f2fs_write_checkpoint+0xa3d/0x2710 [ 111.254521][ T5782] ? __lock_acquire+0x6df/0x2e50 [ 111.254642][ T5782] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 111.254807][ T5782] ? try_to_wake_up+0x8b6/0x14d0 [ 111.254904][ T5782] kill_f2fs_super+0x2dd/0x700 [ 111.255023][ T5782] ? __pfx_kill_f2fs_super+0x10/0x10 [ 111.255138][ T5782] ? call_rcu+0x64d/0x8b0 [ 111.255200][ T5782] ? lockdep_hardirqs_on+0x7b/0x110 [ 111.255294][ T5782] deactivate_locked_super+0xbc/0x110 [ 111.255350][ T5782] cleanup_mnt+0x3d3/0x460 [ 111.255417][ T5782] task_work_run+0x1d9/0x270 [ 111.255483][ T5782] ? __pfx_task_work_run+0x10/0x10 [ 111.255558][ T5782] exit_to_user_mode_loop+0x204/0x770 [ 111.255617][ T5782] ? rcu_is_watching+0x16/0xb0 [ 111.255676][ T5782] do_syscall_64+0x328/0x520 [ 111.255741][ T5782] ? trace_irq_disable+0x3b/0x140 [ 111.255788][ T5782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.255836][ T5782] ? clear_bhb_loop+0x70/0xc0 [ 111.255892][ T5782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.255941][ T5782] RIP: 0033:0x7f003cd9f317 [ 111.255964][ T5782] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 111.256013][ T5782] RSP: 002b:00007ffe0931de98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 111.256068][ T5782] RAX: 0000000000000000 RBX: 00007f003ce34474 RCX: 00007f003cd9f317 [ 111.256098][ T5782] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe0931df50 [ 111.256126][ T5782] RBP: 00007ffe0931df50 R08: 00007ffe0931ef50 R09: 00000000ffffffff [ 111.256163][ T5782] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe0931efe0 [ 111.256191][ T5782] R13: 00007f003ce34474 R14: 000000000001b129 R15: 00007ffe0931f020 [ 111.256266][ T5782] [ 111.259168][ T5782] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 111.890155][ T6011] loop0: detected capacity change from 0 to 40427 [ 111.898564][ T6011] F2FS-fs (loop0): invalid crc value