last executing test programs: 1m23.51347168s ago: executing program 0 (id=7): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f00000232c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1d4) getdents64(r0, 0xfffffffffffffffe, 0xffffffffffffff15) 1m22.97909661s ago: executing program 0 (id=8): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000500)='./file0\x00', 0x800, &(0x7f0000000080)=ANY=[], 0x1, 0x17f, &(0x7f00000005c0)="$eJzskr1OOkEUxc/sLh//f5RoYkUDBfGjUJZFjZ2W2NvZSGBF4qLCkiiEYo0xFBbG0ifgNUx8AS2MD0BNQazNmtm5OxnwEZxfsWfumTt35l4489t+CsD3dFDDASJMZPDOGCwAOSa8iSH0ifSD9FEI3ijvkPw70qzf6ycpJ49lYZxXPc/t5AF8RZ60/P1bA5Oo1Od0UOOLEwBhGIbcqwM8HQtKjgmgreRkLWAlaiKUObwRHqwBKHZbV0W/199stqoNt+FeOGZ519627R2neNr0XFt8mXIFtQKuGwBSaUj4fgLAPcX/MQtTnkb77B+O5dlkPMMMwzyGcjZWhhf5rhTi3ws4wir4s64DpriFqIqFqKUKGEwKSpbyPnFXOtrYql169SEYWHxsBEvWKI2RkIGjBuW9AIui1JBKFkgrpCPSMWlu7i9jBfz7QNF6ACRxU+12OyU+JLFi8cqRnrMUqAPjtz4bs829Gr9mq9FoNBqNRqPRaDR/jZ8AAAD//8JqdgE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x20) 1m22.291103964s ago: executing program 0 (id=12): r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x20) ftruncate(r0, 0x2007ffa) 1m21.803499113s ago: executing program 0 (id=14): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000140)=ANY=[@ANYRES16=0x0], 0x11, 0xb0d, &(0x7f0000000d80)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x535b01, 0x4) 1m20.000813318s ago: executing program 0 (id=19): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='discard,errors=remount-ro,zero_size_dir,keep_last_dots,iocharset=macromanian,time_offset=0x0000000000000000,dmask=00000000000000000000001,allow_utime=00000000000000000002000,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c757466382c666d61736b3d30303030303030303030303030303030303030303030302c74696d655f6f66667365743d307830303030303030303030c8373bb2c08a7857603030303030622c6f626a5f726f6c653d6163746976655f6c6f67733d342c646566636f6e746578743d726f6f742c6d6561737572652c66756e633d4b455845435f494e495452414d46535f434845434b2c646f6e745f686173682c7063720830303030303030303030303030303030303033382c00"], 0xfc, 0x1557, &(0x7f0000004a40)="$eJzs3AmYjtX7OPD7Puc8Y0h6m2QZzjn3w5sshyTJkiRLkiRJki0hSfKVhMSQLWkIIdnJHpItJo1935eEJkmTJNmyJed/DeanvtW/fr/6/VzXd+7Pdb2Xcz/Pc5/nfud+l+c9453vOgysUq9qxTpEBH8LXv4nAQBiAaAvANwAAAEAlIwrGZe2P7PEhL93EvbPemzata6AXUvc/4yN+5+xcf8zNu5/xsb9z9i4/xkb9z9j4/4zlpFtmZ77Rr5l3Buv/2dk/P7/HyS16Kiv1hW9uSNAzF9N4f5nbNz//1jBXzmI+5+xcf8zqthrXQD7J83+n6Xx8z8jyPSHe7j/GRv3n7GM7NI6cGa45uvQ1+oGkYz9O5Br/fhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZYxnPVXKQBIH1/ruhhjjDHGGGOMMfbP8ZmudQWMMcYYY4wxxhj734cgQIKCAGIgE8RCZsgCAgCuh2xwA0TgRoiDmyA73Aw5ICfkgtwQD3kgL2gwYIEghHyQH6JwCxSAW6EgFILCUAQcFIVicBsUh9uhBNwBJeFOKAV3QWkoA2WhHNwN5eEeqAD3QkW4DypBZagCVeF+qAYPIB4BqAEPQU14GGrBI1AbHoU68BjUhcehHjwB9eFJaAANoRE0hia/zYfq8GB6fszv578CXeBV6ArdIAG6Qw94DXpCL+gNfaAvvA794A3oD29CIgyAgfAWDILBMATehqEwDIbDOzAC3oWRMApGwxgYC+NgPEyAifAeTILJMAWmwjSYDjPgfZgJs2A2fABz4EOYC/NgPiyAhfARLILFkAQfwxL4BJJhKSyD5bACVsIqWA1rYC2sg/U/9YSNsAk2wxbYCttgO+yAnbALPoXd8Bnsgb2D5wFACnzxB/niSm//Pf9Mej7sg88hBToiIKBAgQoVxmAMxmIsZsEsAWBWzIbZMIIRjMM4zI7ZMQfmwFyYC+MxHvNiXjRokJAwH+bDKEaxABbAglgQC2NhdOiwGBbD4ng7lsASWBJLYikshaWxDJbBclgOy2N5rIAVsCJWxEpYCatgFbwf78fuWB2rYw2sgTWxZvryFNbBOlgX62I9rIf1sT42wAbYCBthE2yCTbEpNsNm2AJbYEtsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yEnVJfyQT4Kr6K3bCS6I49sAf2xMRMvbEP9sHXsR++gW/gm5iIA3AgvoVv4WAckhlwKA7D4Tg8Nq2ekTgKSYzBsTgWx+N4nIgTcRJOxsk4FafhdJyBM3AmzsJZ+AHOwQ/xQ5yH83ABLsSFuAgXYxIm4RI8g8m4FJfhclyBK3EFrsY1uBrX4XpchxtxI27GzbgVt+J23I47cSd+igoAP8O9uBcTMQVTcD/uxwN4AA/iQUzFVDyEh/AwHs4KeASP4lE8hsfxBB7HU3gKT+MZPItn8Tyexwv4Uvw3dT8ttDYRRBollIgRMSJWxIosIovIKrKKbCKbiIiIiBNxIrvILnKIHCKXyCXiRbzIK/IKI4wgEcYAgIiKqCggCoiCoqAoLAoLJ5woJoqJ4qK4KCFKiJLiTlFK3CVKizKiuSsnyonyooWrIO4VFUVFUUlUFlVEVVFVVBPVRHVRXdQQNURNUVPUEo+I2qI79sbHRFpn6okBWF8MxAaioZCXHxsKxBBsJpqLFuIZMQyHYivR1LUWz4s2YiS2Ff8So/BF0V6MwQ7iZdFRdBKdxSuii2jmuopuYhJ2Fz3EVOwpeoneoo+YiZXFBzgncxXxpkgUA8RA8ZZYgIPFEPG2GCqGieHiHTFCvCtGilFitBgjxopxYryYICaK98QkMVlMEVPFNDFdzBDvi5lilpgtPhBzxIdirpgn5osFYqH4SCwSi0WS+FgsEZ+IZLFULBPLxQqxUqwSq8UasVasE+vFBrFRbBKbxRaxVWwT28UOsVPsEp+K3eIzsUfsFfvE5yJFfCH2iy/FAfGVOCi+FqniG3FIfCsOi+/EEfG9OCp+EMfEcXFCnBSnxI/itDgjzopz4rz4SVwQP4uLwguQKIWUUslAxshMMlZmllnkdTKrDK68htwo4+RNMru8WeaQOWUumVvGyzwyr9TSSCtJhjKfzC+j8hZZQN4qC8pCsrAsIp0sKovJ22RxebssIe+QJeWdspS8S5aWZWRZWU7eLcvLeyRELp+jkqwsq8iq8n6ZAA/I6vJBWUM+JGvKh2Ut+YisLR+VdeRjsq58XNaTT8j68knZQDaUjWRj2UQ+JZvKp2Uz2Vy2kM/IlvJZ2Uo+J1vL52Ub6a88RGIB5Euyg3xZdpSdZGf5s7wovewqu0noDrKHfE32lL1kb9lH9pWvy37yDdlfvikT5QA5UL4lB8nBcoh8Ww6Vw+Rw+Y4cId+VI+UoOVqOkWPlODleTpAT5Xtykpwsp8ipcpqcLntfmWm2lH+aP+F38vtfOvtmuUVuldvkdrlD7pS7ZNpLz265R+6R++Q+mSJT5H65Xx6QB+RBeVCmylR5SB6Sh+VheUQekUflUXlMHpfn5El5Sv4oT8sz8ow8J8/L8/LClZ8BKFRCSaVUoGJUJhWrMqss6jqVVV2vsqkbVETdqOLUTSq7ulnlUDlVLpVbxas8Kq/SyiirSIUqn8qvouoWvPKAUYVVEeVUUVVM3fbfyVcF1K2qoCr0q/z0+hL+oL4mqolqqpqqZqqZaqFaqJaqpWqlWqnWqrVqo9qotqqtaqfaqfaqveqgOqiOqqPqrDqrLqqL6qq6qgSVoHqo11RP1Uv1Vn1UX/W66qf6qf6qv0pUiWqgGqgGqUFqiBqihqqhargarkaoEWqkGqlGq9FqrBqrxqvxaqKaqCapSWqKmqKmqWlqhpqhZqqZaraareaoOWqumqvmq/lqoVqoFqlFKkklqSVqiUpWS9VStVwtVyvVSrVarVZr1Vq1Xq1XG9VGlay2qC1qm9qmdqgdapfapXar3WqP2qP2qX0qRaWo/Wq/OqAOqIPqoEpVqeqQOqQOq8PqiDqijqqj6pg6pk6oE+qUOqVOq9PqrDqrzqvz6oK6oC6qi2mXfYEIRKACFcQEMUFsEBtkCbIEWYOsQbYgWxAJIkFcEBdkD24OcgQ5g1xB7iA+yBPkDXRgAhukX2lEg1uCAsGtQcGgUFA4KBK4oGhQLObKzuCOoGRwZ1AquCsoHZQJygblgruD8sE9QYXg3qBicF9QKagcVAmqBvcH1YIHgurBg0GN4KGgZvBwUCt4JKgdPBrUCR4L6gaPB/WCJ4L6wZNBg6Bh0ChoHDQJbg9K/GPze38659Ouq+6mE3R33UO/pnvqXrq37qP76td1P/2G7q/f1Il6gB6o39KD9GA9RL+th+pherh+R4/Q7+qRepQercfosXqcHq8n6In6PT1JT9ZT9FQ9TU/XM/T7eqaepWfrD/Qc/aGeq+fp+XqBXqg/0ov0Yp2kP9Zp1zzJeqleppfrFXqlXqVX6zV6rV6n1+sNeqPepDfrLXqr3qa36x16p96lP9W79Wd6j96r9+nPdYr+Qu/XX+oD+it9UH+tU/U3+pD+Vh/W3+kj+nt9VP+gj+nj+oQ+qU/pH/VpfUaf1ef0ef2TvqB/1he1T7u4T3t7N8ooE2NiTKyJNVlMFpPVZDXZTDYTMRETZ+JMdpPd5DA5TC6Ty8SbeJPX5DVpyJDJZ/KZqImaAqaAKWgKmsKmsHHGmWKmmCluipsSpoQpaUqaUqaUKW1Km7KmrLnb3G3uMfeYe8295j5zn6lsKpuqpqqpZqqZ6qa6qWFqmJqmpqllapnaprapY+qYuqauqWfqmfqmvmlgGphGppFpYpqYpqapaWaamRamhWlpWppWppVpbVqbNqaNaWvamnamnWlv2psOpoPpaDqazqaz6WK6mK6mq0kwCaaH6WF6mp6mt+lt+pq+pp/pZ/qb/ibRJJqBZqAZZAaZIWaIGWqGmeFpTTPvmpFmVPobpxlvxpuJZqKZZCaZKWaKmWammRlmhvF+ppltZps5Zo6Za+aa+Wa+WWgWmkVmkUkySWaJWWKSTbJZZpaZFWaFWWVWmTVmjVln1pkNsMFsMpvMFrPFbDPbzA6zw+wyu8xus9skmD1mn9lnUkyK2W/2mwPmgDloDppUk2oOmUPmsDlsjpgj5qg5ao6ZY+aEOWFOmVPmtDltzpqz5rzJeeX90ptYm9lmsdfZrPZ6m83eYP89zmVz23ibx+a12uawOX8VG2ttQVvIFrZFrLNFbTF722/i0raMLWvL2btteXuPrfCbuJp9wFa3D9oa9iFb1d7/q7imfdjWsk/Y2ogAtqGtaxvbevYJW98+aRvYhraRbWxb2mdtK/ucbW2ft23sC7+JF9nFdo1da9fZ9XaP3WvP2nP2sP3Onrc/2a62m+1rX7f97Bu2v33TJtoBl+IrPxxIi4fbd+wI+64daUfZ0XbMb+IpdqqdZqfbGfZ9O9PO+k280H5k59gkO9fOs/PtgktxWk1J9mO7xH5ik20Ay+xyu8KutKvs6v+qdbndaDfZzXa3/cxus9vtDrvT7kovzO61++znNsV+YQ/Zb+0B+5U9aI/YVPvNpTjt/h2x39uj9gd7zB63J+xJe8r+qNKz0+77SfuzvWi9BUICkqQooBjKRLGUmbLQdZSVrqdsdANF6EaKo5soO91MOSgn5aLcFE95KC9pMmSJKKR8lJ+idAull1eYipCjolSMbqPidDuVoDuoJN1JpeguKk1lqCyVo7upPN1DFeheqkj3USWqTFWoKt1P1egBqk4PUg16iGrSw1SLHqHa9CjVoceoLj1O9egJqk9PUgNqSI2oMTWhp6gpPU3NqDm1oGeoJT1Lreg5ak3PUxt6gdrSv6gdvUjt6SXqQC9TR+pEnekV6kKvUlfqRgnUnXrQa9STFPSmPtSXXqd+9Ab1pzcpkQbQQHqLBtFgGkJv01AaRsPpHRpB79JIGkWjaQyNpXE0nibQRHqPJtFkmkJTaRpNpxn0Ps2kWTSbPqA59CHNpXk0nxbQQvqIFtFiSqKPaQl9Qsm0lJbRclpBK2kVraY1tJbW0XraQBtpE22mLbSVttF22kE7aRd9SrvpM9pDe2kffU4p9AXtpy/pAH1FB+lrSqVv6BB9S4fpOzpC3/tu9AMdo+N0gk7SKfqRTtMZOkvn6Dz9RBfoZ7pIniDEUIQyVGEQxoSZwtgwc5glvC7MGl4fZgtvCCPhjWFceFOYPbw5zBHmDHOFucP4ME+YN9ShCW1IYRjmC/OH0fCWsEB4a1gwLBQWDouELiwaFgtvC4uHt4clwjvCkuGdYanwrrB0WCZ84qFy4d1h+fCesEJ4b1gxvC+sFFYOq4RVw/vDauEDYRA+GNYIHwpLhA+HtcJHwtrho2Gd8LGwbvh4WC98IqwfPhk2CBuGjcLGYZPwqbBp+HTYLGwetgifCVuGz4atwufC1uHzYZvwhUv7H178x/sTwu5hj/C18LXQ+wfl/OiC6MLoR9FF0cXRpOjH0SXRT6LJ0aXRZdHl0RXRldFV0dXRNdG10XXR9dEN0Y3RTdHNUe+rZgKHTjjplAtcjMvkYl1ml8Vd57K66102d4OLuBtdnLvJZXc3uxwup8vlcrt4l8flddoZZx250OVz+V3U3eIKuFtdQVfIFXZFnHNFXTHX2DVxTVxT97Rr5pq7Fu4Z94x71j3rnnPPueddG/eCa+v+5dq5F11795J7yb3sOrpOrrN7xXVx47Jdfk4muB6uh+vperrerrfr6/q6fq6f6+/6u0SX6Aa6gW6QG+SGuCFuqBvqhrvhboQb4Ua6kW60G+3GurFuvBvvJrqJbpKb5Ka4KW6am+ZmuBluppvpys+6fJa5bq6b7+a7hW6hW+TSrhmT3BK3xCW7ZLfMLXMr3Aq3yq1ya9wat86tcxvcBrfJbXJb3Ba3zW1zO9wOt8vtcrvdbrfH33B5Upfi9rv97oA74A66r12q+8Ydct+6w+47d8R97466H9wxd9ydcCfdKfejO+3OuLPunDvvfnIX3M/uovNubGRcZHxkQmRi5L3IpMjkyJTI1Mi0yPTIjMj7kZmRWZHZkQ8icyIfRuZG5kXmRxZEFkY+iiyKLI4kRT6OLIl8EkmOLI0siyyPrIisjHifZ1vo8/n8Pupv8QX8rb6gL+QL+yLe+aK+mL/NF/e3+xL+Dl/S3+lL+bt8aV/Gl/VP+ga+oW/kG/sm/inf1D/tm/nmvoV/xrf0z/pW/jnf2j/v2/gXfFv/L9/Ov+jb+5d8B/+y7+g7+c7+Fd/Fv+q7+m4+wXf3Pfxrvqfv5Xv7Pr6vf93382/4/v5Nn+gH+IH+LT/ID/ZD/Nt+qB/mh8e840ekf0SGMX6sH+fH+wl+on/PT/KT/RQ/1U/z0/0M/76f6Wf52f4DP8d/6Of6eX6+X+AX+o/8Ir/YJ/mP/RL/iU/2S9MXlf0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v93v8Dv9Lv+p3+0/83v8Xr/Pf+5T/Bd+v//S3zr4K3/Qf+1T/Tf+kP/WH/bf+SP+e3/U/+CP+eP+hD/pT/kf/Wl/xp/15/x5/5O/4H/2F/k7a4wxxhhjf8m4q0Px6z2Xl/O7/06O+MXBPQDg+u25U3+5P+2KckOOy+NeIr5lBACe79bhsfRbpUoJCQlXjk2WEOSfB5D+m6A0l5aNr8RLoQU8C62hORT/3fp7iU7n6U/mj94JkOUXObFwNb46/5cAmPA78z/1zPBFpcKzcf+f+ecBFMx/NSczXI2XQotL6yvNocQf1J+z6Z/Un/mrsQDNfpGTFa7GV+svBk/DC9D6V0cyxhhjjDHGGGOX9RJl26V//kz/jyu/9/k8Xl3NyQRX4z/7fM4YY4wxxhhjjLFr78VOnZ97Kv2be0+1bt283aUtf2VQ4b9z8F8aXP/LLfXhH5yZB38+yAQA6VsUAPzNCQHSBvL/8l5s/T85V+KVZ8u/71pxzgfQucCVLz3+cyeN/fu9+MuDGPivLdfqFYkxxhhjjDH2v+Xq1f+vt6trVRBjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZYB/cU/DDYB/sbfFbvW95ExxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhi71v5fAAAA//8dC+YX") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x1, 0x9005) truncate(&(0x7f00000000c0)='./file1\x00', 0x1000) 1m17.83900155s ago: executing program 0 (id=25): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000002d80)='2', 0x1, 0x8080c61) 1m17.272307461s ago: executing program 32 (id=25): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000002d80)='2', 0x1, 0x8080c61) 28.564154759s ago: executing program 2 (id=143): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1 current cno (= 3) [ 112.058232][ T5966] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 112.092538][ T5966] Remounting filesystem read-only [ 112.285932][ T5813] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 112.286435][ T5813] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 112.400556][ T5984] loop1: detected capacity change from 0 to 64 [ 112.470861][ T5817] ocfs2: Unmounting device (7,2) on (node local) [ 112.548823][ T5984] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 112.943109][ T5955] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 113.086011][ T5955] F2FS-fs (loop3): Start checkpoint disabled! [ 113.159271][ T5955] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 113.403694][ T5992] loop1: detected capacity change from 0 to 1024 [ 113.451464][ T5983] loop4: detected capacity change from 0 to 32768 [ 113.531386][ T5992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.612509][ T5983] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 113.697112][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.810602][ T5813] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 113.930284][ T5983] XFS (loop4): Ending clean mount [ 114.095887][ T5983] XFS (loop4): Quotacheck needed: Please wait. [ 114.293299][ T5983] XFS (loop4): Quotacheck: Done. [ 114.442166][ T5990] loop2: detected capacity change from 0 to 32768 [ 114.456591][ T5990] btrfs: Deprecated parameter 'usebackuproot' [ 114.467954][ T5990] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 114.487367][ T5990] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.23 (5990) [ 114.710499][ T3522] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.734608][ T5823] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 114.740707][ T5990] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.740886][ T5990] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 114.740953][ T5990] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 114.855552][ T6008] loop3: detected capacity change from 0 to 4096 [ 115.275511][ T6008] ntfs3(loop3): ino=5, "/" indx_read [ 115.300166][ T5990] BTRFS info (device loop2): rebuilding free space tree [ 115.539874][ T3522] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.655168][ T5990] BTRFS info (device loop2): disabling free space tree [ 115.655387][ T5990] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 115.655415][ T5990] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 115.748922][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.771206][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.774217][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.777108][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.778077][ T5815] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.882179][ T5990] BTRFS info (device loop2): enabling ssd optimizations [ 115.882213][ T5990] BTRFS info (device loop2): turning on flush-on-commit [ 115.882233][ T5990] BTRFS info (device loop2): enabling disk space caching [ 115.882251][ T5990] BTRFS info (device loop2): force clearing of disk cache [ 115.882274][ T5990] BTRFS info (device loop2): trying to use backup root at mount time [ 115.882302][ T5990] BTRFS info (device loop2): force zlib compression, level 3 [ 116.011094][ T6034] loop4: detected capacity change from 0 to 512 [ 116.043092][ T6034] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.043117][ T6034] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 116.149952][ T6034] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 116.150158][ T6034] System zones: 0-2, 18-18, 34-34 [ 116.192384][ T6034] EXT4-fs error (device loop4): ext4_orphan_get:1392: comm syz.4.28: inode #15: comm syz.4.28: iget: illegal inode # [ 116.257897][ T6034] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.28: couldn't read orphan inode 15 (err -117) [ 116.262302][ T6034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.391772][ T6034] EXT4-fs (loop4): shut down requested (1) [ 116.407524][ T3522] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.683835][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.952817][ T6040] loop4: detected capacity change from 0 to 256 [ 116.954420][ T6040] exfat: Deprecated parameter 'namecase' [ 116.954526][ T6040] exfat: Deprecated parameter 'namecase' [ 117.010932][ T5817] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.164484][ T6040] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d) [ 117.236623][ T3522] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.294918][ T6032] loop1: detected capacity change from 0 to 32768 [ 117.374905][ T6032] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 117.443114][ T6028] loop3: detected capacity change from 0 to 32768 [ 117.563424][ T6028] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 117.766142][ T6032] XFS (loop1): Ending clean mount [ 117.795104][ T6032] XFS (loop1): Quotacheck needed: Please wait. [ 117.899757][ T5815] Bluetooth: hci2: command tx timeout [ 117.938668][ T6028] XFS (loop3): Ending clean mount [ 118.029230][ T6028] XFS (loop3): Quotacheck needed: Please wait. [ 118.189499][ T6032] XFS (loop1): Quotacheck: Done. [ 118.337987][ T6028] XFS (loop3): Quotacheck: Done. [ 118.489473][ T6064] loop4: detected capacity change from 0 to 512 [ 118.574083][ T6064] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.36: corrupted in-inode xattr: invalid ea_ino [ 118.583507][ T6064] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.36: couldn't read orphan inode 15 (err -117) [ 118.605935][ T6064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.756282][ T5812] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.836358][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.891498][ T5811] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 119.058672][ T6068] loop2: detected capacity change from 0 to 4096 [ 119.066507][ T6068] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 119.161032][ T3522] bridge_slave_1: left allmulticast mode [ 119.161238][ T3522] bridge_slave_1: left promiscuous mode [ 119.163943][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.302592][ T6072] loop3: detected capacity change from 0 to 512 [ 119.307297][ T6072] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 119.307319][ T6072] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 119.411196][ T6072] EXT4-fs (loop3): 1 truncate cleaned up [ 119.453426][ T6072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.454848][ T3522] bridge_slave_0: left allmulticast mode [ 119.454877][ T3522] bridge_slave_0: left promiscuous mode [ 119.455145][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.536185][ T6070] loop4: detected capacity change from 0 to 8192 [ 119.658928][ T38] audit: type=1800 audit(1759667288.488:2): pid=6072 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.40" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 119.879789][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.978130][ T5815] Bluetooth: hci2: command tx timeout [ 120.275801][ T6082] loop3: detected capacity change from 0 to 4096 [ 120.342444][ T6084] loop4: detected capacity change from 0 to 1024 [ 120.529203][ T6085] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.802228][ T6084] syz.4.43: attempt to access beyond end of device [ 120.802228][ T6084] loop4: rw=0, sector=393228, nr_sectors = 2 limit=1024 [ 120.803204][ T6084] syz.4.43: attempt to access beyond end of device [ 120.803204][ T6084] loop4: rw=2049, sector=5778, nr_sectors = 2 limit=1024 [ 120.803381][ T6084] Buffer I/O error on dev loop4, logical block 2889, lost async page write [ 120.803543][ T6084] syz.4.43: attempt to access beyond end of device [ 120.803543][ T6084] loop4: rw=2049, sector=393216, nr_sectors = 2 limit=1024 [ 120.803569][ T6084] Buffer I/O error on dev loop4, logical block 196608, lost async page write [ 120.803670][ T6084] syz.4.43: attempt to access beyond end of device [ 120.803670][ T6084] loop4: rw=2049, sector=393218, nr_sectors = 2 limit=1024 [ 120.803695][ T6084] Buffer I/O error on dev loop4, logical block 196609, lost async page write [ 120.803779][ T6084] syz.4.43: attempt to access beyond end of device [ 120.803779][ T6084] loop4: rw=2049, sector=393220, nr_sectors = 2 limit=1024 [ 120.803804][ T6084] Buffer I/O error on dev loop4, logical block 196610, lost async page write [ 121.042972][ T38] audit: type=1800 audit(1759667289.878:3): pid=6082 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.42" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 121.298170][ T70] hfsplus: b-tree write err: -5, ino 8 [ 121.298287][ T70] kworker/u8:4: attempt to access beyond end of device [ 121.298287][ T70] loop4: rw=1, sector=5778, nr_sectors = 2 limit=1024 [ 121.303512][ T6090] loop2: detected capacity change from 0 to 1024 [ 121.408625][ T6081] loop1: detected capacity change from 0 to 32768 [ 122.067999][ T5815] Bluetooth: hci2: command tx timeout [ 122.199746][ T6098] loop3: detected capacity change from 0 to 512 [ 122.231708][ T6098] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 122.278806][ T6098] EXT4-fs (loop3): invalid journal inode [ 122.278988][ T6098] EXT4-fs (loop3): can't get journal size [ 122.334246][ T6098] EXT4-fs (loop3): 1 truncate cleaned up [ 122.372221][ T6098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.777264][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.921844][ T6092] loop4: detected capacity change from 0 to 40427 [ 122.935728][ T6092] F2FS-fs (loop4): invalid crc value [ 123.088578][ T6096] loop2: detected capacity change from 0 to 32768 [ 123.162174][ T6096] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 123.331873][ T6111] loop1: detected capacity change from 0 to 512 [ 123.342509][ T6096] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 123.463138][ T6092] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 123.546157][ T6113] loop3: detected capacity change from 0 to 1024 [ 123.555662][ T6092] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 123.569755][ T6111] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 123.593269][ T6113] EXT4-fs: Ignoring removed oldalloc option [ 123.593393][ T6113] EXT4-fs: Ignoring removed orlov option [ 123.625836][ T6113] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 123.720320][ T6113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.806434][ T38] audit: type=1800 audit(1759667292.678:4): pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.48" name="file1" dev="loop2" ino=17060 res=0 errno=0 [ 123.824140][ T6114] syz.2.48 (6114) used greatest stack depth: 18872 bytes left [ 123.909340][ T6113] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 124.092954][ T5823] syz-executor: attempt to access beyond end of device [ 124.092954][ T5823] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 124.094844][ T5823] CPU: 1 UID: 0 PID: 5823 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 124.094870][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 124.094887][ T5823] Call Trace: [ 124.094896][ T5823] [ 124.094907][ T5823] dump_stack_lvl+0x189/0x250 [ 124.094947][ T5823] ? reacquire_held_locks+0x127/0x1d0 [ 124.094975][ T5823] ? rt_spin_lock+0x1c1/0x3e0 [ 124.094996][ T5823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.095026][ T5823] ? __pfx_queue_work_on+0x10/0x10 [ 124.095057][ T5823] ? rt_spin_unlock+0x150/0x200 [ 124.095080][ T5823] ? rt_spin_unlock+0x161/0x200 [ 124.095102][ T5823] f2fs_handle_critical_error+0x354/0x510 [ 124.095130][ T5823] f2fs_write_end_io+0x886/0xb60 [ 124.095175][ T5823] __submit_merged_bio+0x27a/0x6a0 [ 124.095205][ T5823] __submit_merged_write_cond+0x255/0x530 [ 124.095235][ T5823] f2fs_write_data_pages+0x261d/0x3000 [ 124.095302][ T5823] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 124.095384][ T5823] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 124.095411][ T5823] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.095452][ T5823] ? rt_mutex_slowunlock+0x493/0x8a0 [ 124.095468][ T5823] ? reacquire_held_locks+0x127/0x1d0 [ 124.095486][ T5823] ? rt_spin_lock+0x1c1/0x3e0 [ 124.095514][ T5823] ? rt_spin_unlock+0x150/0x200 [ 124.095537][ T5823] ? rt_spin_unlock+0x161/0x200 [ 124.095554][ T5823] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 124.095581][ T5823] do_writepages+0x32b/0x550 [ 124.095603][ T5823] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 124.095623][ T5823] ? rt_spin_unlock+0x150/0x200 [ 124.095671][ T5823] filemap_fdatawrite+0x19c/0x240 [ 124.095695][ T5823] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 124.095760][ T5823] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 124.095783][ T5823] ? __rcu_read_unlock+0x84/0xe0 [ 124.095811][ T5823] ? rt_spin_unlock+0x161/0x200 [ 124.095832][ T5823] f2fs_sync_dirty_inodes+0x31f/0x830 [ 124.095876][ T5823] f2fs_write_checkpoint+0x93e/0x2440 [ 124.095902][ T5823] ? __lock_acquire+0xab9/0xd20 [ 124.095961][ T5823] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 124.096062][ T5823] kill_f2fs_super+0x2cc/0x6d0 [ 124.096099][ T5823] ? __pfx_kill_f2fs_super+0x10/0x10 [ 124.096153][ T5823] ? shrinker_free+0x2ce/0x3e0 [ 124.096186][ T5823] deactivate_locked_super+0xbc/0x130 [ 124.096214][ T5823] cleanup_mnt+0x425/0x4c0 [ 124.096237][ T5823] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.096270][ T5823] task_work_run+0x1d4/0x260 [ 124.096299][ T5823] ? __pfx_task_work_run+0x10/0x10 [ 124.096320][ T5823] ? __x64_sys_umount+0x122/0x160 [ 124.096355][ T5823] ? exit_to_user_mode_loop+0x40/0x130 [ 124.096395][ T5823] exit_to_user_mode_loop+0xe9/0x130 [ 124.096429][ T5823] do_syscall_64+0x2bd/0x3b0 [ 124.096459][ T5823] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.096488][ T5823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.096510][ T5823] ? clear_bhb_loop+0x60/0xb0 [ 124.096539][ T5823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.096561][ T5823] RIP: 0033:0x7fc9412301f7 [ 124.096590][ T5823] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 124.096608][ T5823] RSP: 002b:00007ffd7183cea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 124.096632][ T5823] RAX: 0000000000000000 RBX: 00007fc9412b1d7d RCX: 00007fc9412301f7 [ 124.096647][ T5823] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd7183cf60 [ 124.096660][ T5823] RBP: 00007ffd7183cf60 R08: 0000000000000000 R09: 0000000000000000 [ 124.096674][ T5823] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd7183dff0 [ 124.096689][ T5823] R13: 00007fc9412b1d7d R14: 000000000001e303 R15: 00007ffd7183e030 [ 124.096728][ T5823] [ 124.096737][ T5823] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 124.138697][ T5815] Bluetooth: hci2: command tx timeout [ 124.282690][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.288512][ T5817] ocfs2: Unmounting device (7,2) on (node local) [ 125.232915][ T6125] loop2: detected capacity change from 0 to 4096 [ 125.298559][ T6121] loop1: detected capacity change from 0 to 32768 [ 125.316365][ T6121] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.55 (6121) [ 125.387266][ T6121] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 125.387351][ T6121] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 125.418845][ T6126] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.507516][ T6123] loop3: detected capacity change from 0 to 32768 [ 125.567933][ T3522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.669968][ T6123] JBD2: Ignoring recovery information on journal [ 125.725708][ T6121] BTRFS info (device loop1): enabling ssd optimizations [ 125.725739][ T6121] BTRFS info (device loop1): enabling free space tree [ 125.746404][ T3522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.873933][ T3522] bond0 (unregistering): Released all slaves [ 125.948115][ T6123] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 126.223203][ T6123] OCFS2: ERROR (device loop3): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 73 has 4294901761 used bits but only 0 total [ 126.223283][ T6123] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 126.223295][ T6123] OCFS2: File system is now read-only. [ 126.223308][ T6123] (syz.3.57,6123,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30 [ 126.223333][ T6123] (syz.3.57,6123,0):ocfs2_claim_metadata:2088 ERROR: status = -30 [ 126.223355][ T6123] (syz.3.57,6123,0):ocfs2_claim_metadata:2101 ERROR: status = -30 [ 126.223377][ T6123] (syz.3.57,6123,0):ocfs2_dx_dir_attach_index:2336 ERROR: status = -30 [ 126.223400][ T6123] (syz.3.57,6123,0):ocfs2_expand_inline_dir:3029 ERROR: status = -30 [ 126.223575][ T6123] (syz.3.57,6123,0):ocfs2_extend_dir:3211 ERROR: status = -30 [ 126.223599][ T6123] (syz.3.57,6123,0):ocfs2_prepare_dir_for_insert:4316 ERROR: status = -30 [ 126.223622][ T6123] (syz.3.57,6123,0):ocfs2_mknod:301 ERROR: status = -30 [ 126.223648][ T6123] (syz.3.57,6123,0):ocfs2_mknod:505 ERROR: status = -30 [ 126.223670][ T6123] (syz.3.57,6123,0):ocfs2_mkdir:661 ERROR: status = -30 [ 126.371972][ T6149] loop2: detected capacity change from 0 to 128 [ 126.428666][ T6149] EXT4-fs (loop2): Test dummy encryption mode enabled [ 126.451801][ T5812] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 126.476189][ T6149] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.491148][ T6149] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.720364][ T5811] ocfs2: Unmounting device (7,3) on (node local) [ 126.765153][ T6029] chnl_net:caif_netlink_parms(): no params data found [ 126.826146][ T6149] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 127.127040][ T5817] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.533875][ T6163] loop2: detected capacity change from 0 to 128 [ 127.650752][ T6163] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 127.651114][ T6163] hpfs: filesystem error: improperly stopped [ 127.651132][ T6163] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 127.651147][ T6163] hpfs: You really don't want any checks? You are crazy... [ 127.652155][ T6163] hpfs: hpfs_map_sector(): read error [ 127.652167][ T6163] hpfs: code page support is disabled [ 127.653677][ T6163] hpfs: hpfs_map_4sectors(): unaligned read [ 127.654204][ T6163] hpfs: hpfs_map_4sectors(): unaligned read [ 127.654219][ T6163] hpfs: filesystem error: unable to find root dir [ 127.756564][ T6147] loop4: detected capacity change from 0 to 32768 [ 127.953197][ T6147] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 128.285233][ T6147] XFS (loop4): Ending clean mount [ 128.305650][ T6147] XFS (loop4): Quotacheck needed: Please wait. [ 128.597984][ T6147] XFS (loop4): Quotacheck: Done. [ 128.735773][ T6184] loop2: detected capacity change from 0 to 128 [ 128.797970][ T6184] EXT4-fs (loop2): Test dummy encryption mode enabled [ 128.846532][ T6184] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.891911][ T6165] loop3: detected capacity change from 0 to 32768 [ 128.896989][ T6184] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 128.910407][ T6165] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.60 (6165) [ 128.967696][ T6165] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 128.971806][ T6165] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 129.004776][ T6158] loop1: detected capacity change from 0 to 32768 [ 129.052412][ T5823] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 129.196810][ T6158] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 129.420020][ T6165] BTRFS info (device loop3): enabling ssd optimizations [ 129.420048][ T6165] BTRFS info (device loop3): enabling free space tree [ 129.602149][ T6158] XFS (loop1): Ending clean mount [ 129.614049][ T6158] XFS (loop1): Quotacheck needed: Please wait. [ 129.788653][ T5811] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 129.863358][ T6158] XFS (loop1): Quotacheck: Done. [ 130.300571][ T5812] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 130.585884][ T6229] loop3: detected capacity change from 0 to 16 [ 130.713287][ T6229] erofs (device loop3): mounted with root inode @ nid 36. [ 130.744141][ T6229] syz.3.68: attempt to access beyond end of device [ 130.744141][ T6229] loop3: rw=0, sector=48, nr_sectors = 16 limit=16 [ 130.774247][ T6229] erofs (device loop3): read error -5 @ 43 of nid 36 [ 130.872400][ T6029] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.872556][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.872808][ T6029] bridge_slave_0: entered allmulticast mode [ 130.875752][ T6029] bridge_slave_0: entered promiscuous mode [ 130.930026][ T6029] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.953922][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.954178][ T6029] bridge_slave_1: entered allmulticast mode [ 130.987989][ T6029] bridge_slave_1: entered promiscuous mode [ 130.988063][ T6231] loop1: detected capacity change from 0 to 2048 [ 131.004937][ T6231] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 131.173174][ T6232] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 131.243388][ T5817] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.314127][ T38] audit: type=1800 audit(1759667300.188:5): pid=6231 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.67" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 131.419293][ T6234] loop2: detected capacity change from 0 to 1024 [ 131.435616][ T6234] EXT4-fs: Ignoring removed oldalloc option [ 131.462167][ T6231] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 131.487546][ T3522] hsr_slave_0: left promiscuous mode [ 131.545039][ T6234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 131.545199][ T6234] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.572280][ T3522] hsr_slave_1: left promiscuous mode [ 131.577233][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.577348][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.631792][ T6227] loop4: detected capacity change from 0 to 32768 [ 131.710472][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.710503][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.711047][ T6227] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 131.753523][ T6231] Remounting filesystem read-only [ 131.754541][ T6231] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 3044605952 [ 131.754567][ T6231] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=15) [ 131.754585][ T6231] NILFS (loop1): error -5 truncating bmap (ino=15) [ 131.863268][ T6229] syz.3.68 (6229): drop_caches: 2 [ 131.967964][ T6237] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 131.999849][ T6227] XFS (loop4): Ending clean mount [ 132.021870][ T5812] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 132.029066][ T6227] XFS (loop4): Quotacheck needed: Please wait. [ 132.032491][ T3522] veth1_macvtap: left promiscuous mode [ 132.032771][ T3522] veth0_macvtap: left promiscuous mode [ 132.070687][ T3522] veth1_vlan: left promiscuous mode [ 132.071305][ T3522] veth0_vlan: left promiscuous mode [ 132.328223][ T6247] loop3: detected capacity change from 0 to 512 [ 132.329158][ T6227] XFS (loop4): Quotacheck: Done. [ 132.342810][ T6249] loop1: detected capacity change from 0 to 8 [ 132.425955][ T6249] SQUASHFS error: Failed to read block 0xe000000000001ea: -5 [ 132.426014][ T6249] unable to read xattr id index table [ 132.859584][ T5823] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 133.538985][ T6258] loop1: detected capacity change from 0 to 4096 [ 133.670229][ T6260] loop4: detected capacity change from 0 to 2048 [ 133.671851][ T6260] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.753808][ T6234] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.69: lblock 0 mapped to illegal pblock 0 (length 1) [ 133.811845][ T6260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.945484][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 134.029511][ T6264] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.74: bg 0: block 234: padding at end of block bitmap is not set [ 134.048584][ T6264] EXT4-fs (loop4): Remounting filesystem read-only [ 134.290317][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.327102][ T6254] loop3: detected capacity change from 0 to 32768 [ 134.365264][ T6267] loop2: detected capacity change from 0 to 1024 [ 134.567699][ T6269] loop4: detected capacity change from 0 to 4096 [ 134.705138][ T6270] non-latin1 character 0x163 found in JFS file name [ 134.705159][ T6270] mount with iocharset=utf8 to access [ 134.795333][ T6271] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 135.128404][ T6267] hfsplus: b-tree write err: -5, ino 3 [ 135.279405][ T70] hfsplus: b-tree write err: -5, ino 3 [ 135.648237][ T6277] loop4: detected capacity change from 0 to 64 [ 135.680913][ T6277] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 135.989352][ T6273] loop1: detected capacity change from 0 to 32768 [ 135.991829][ T6273] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.79 (6273) [ 135.996889][ T6273] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 135.996968][ T6273] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 136.209098][ T6290] loop3: detected capacity change from 0 to 256 [ 136.217644][ T6294] loop4: detected capacity change from 0 to 128 [ 136.299562][ T6290] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 136.455615][ T6294] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.458058][ T6294] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.528424][ T6273] BTRFS info (device loop1): enabling ssd optimizations [ 136.528452][ T6273] BTRFS info (device loop1): enabling free space tree [ 136.713870][ T5823] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.794852][ T6306] loop2: detected capacity change from 0 to 4096 [ 137.555738][ T5812] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 137.786732][ T6316] loop2: detected capacity change from 0 to 4096 [ 137.805857][ T6316] EXT4-fs: Ignoring removed bh option [ 137.867823][ T6316] EXT4-fs (loop2): Test dummy encryption mode enabled [ 137.917935][ T6316] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 137.984151][ T6316] System zones: 0-5 [ 138.016294][ T6316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.126939][ T6316] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 138.164249][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.164351][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.461831][ T6322] loop1: detected capacity change from 0 to 256 [ 138.467549][ T6310] loop4: detected capacity change from 0 to 32768 [ 138.550954][ T6310] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.86 (6310) [ 138.594269][ T6312] loop3: detected capacity change from 0 to 40427 [ 138.639944][ T6312] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 138.639974][ T6312] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 138.660771][ T6310] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.660873][ T6310] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 138.753613][ T6316] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 138.971313][ T6310] BTRFS info (device loop4): enabling ssd optimizations [ 138.971340][ T6310] BTRFS info (device loop4): turning off barriers [ 138.971357][ T6310] BTRFS info (device loop4): disabling tree log [ 138.971373][ T6310] BTRFS info (device loop4): enabling free space tree [ 138.971400][ T6310] BTRFS info (device loop4): max_inline set to 4096 [ 139.006485][ T5817] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.237063][ T6312] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 139.378942][ T6312] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 139.378973][ T6312] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 139.413904][ T6347] loop1: detected capacity change from 0 to 256 [ 139.415594][ T6347] exfat: Deprecated parameter 'namecase' [ 139.453238][ T6347] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 139.660368][ T6347] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 139.689180][ T5823] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 139.772966][ T6345] loop2: detected capacity change from 0 to 4096 [ 140.277122][ T37] ntfs3(loop2): ino=5, mi_enum_attr [ 140.346647][ T6352] loop4: detected capacity change from 0 to 256 [ 140.367116][ T3522] team0 (unregistering): Port device team_slave_1 removed [ 140.425992][ T6352] exfat: Deprecated parameter 'utf8' [ 140.459680][ T6352] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3aa54e9, utbl_chksum : 0xe619d30d) [ 140.517539][ T6312] syz.3.88 (6312): drop_caches: 2 [ 141.072219][ T3522] team0 (unregistering): Port device team_slave_0 removed [ 141.452493][ T6350] loop1: detected capacity change from 0 to 32768 [ 141.454785][ T6350] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.95 (6350) [ 141.525215][ T6350] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.525300][ T6350] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 141.825834][ T6350] BTRFS info (device loop1): enabling ssd optimizations [ 141.825861][ T6350] BTRFS info (device loop1): enabling free space tree [ 142.056595][ T6356] loop2: detected capacity change from 0 to 40427 [ 142.087905][ T6356] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 142.087932][ T6356] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 142.117363][ T5812] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 142.143792][ T6356] F2FS-fs (loop2): invalid crc value [ 142.617573][ T6356] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 142.661959][ T6356] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 142.661993][ T6356] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 143.290653][ T6389] loop3: detected capacity change from 0 to 64 [ 144.151387][ T6393] loop3: detected capacity change from 0 to 4096 [ 144.188176][ T6393] NILFS (loop3): invalid segment: Checksum error in segment payload [ 144.188203][ T6393] NILFS (loop3): trying rollback from an earlier position [ 144.272648][ T6393] NILFS (loop3): recovery complete [ 144.357901][ T6394] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.362245][ T6387] loop1: detected capacity change from 0 to 32768 [ 144.478199][ T6387] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 144.517186][ T6401] loop2: detected capacity change from 0 to 2048 [ 144.533672][ T6401] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 144.709286][ T6387] XFS (loop1): Ending clean mount [ 144.748047][ T6406] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.792796][ T6387] XFS (loop1): Quotacheck needed: Please wait. [ 144.901088][ T6391] loop4: detected capacity change from 0 to 32768 [ 145.075183][ T6387] XFS (loop1): Quotacheck: Done. [ 145.086188][ T6391] [ 145.086188][ T6391] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.086188][ T6391] [ 145.215697][ T38] audit: type=1800 audit(1759667314.038:6): pid=6391 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.103" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 145.328285][ T6413] loop2: detected capacity change from 0 to 64 [ 145.545391][ T5812] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 146.044767][ T6417] loop2: detected capacity change from 0 to 64 [ 146.114276][ T6391] ERROR: (device loop4): xtSearch: stack overrun! [ 146.114276][ T6391] [ 146.158238][ T6417] hfs: unable to locate alternate MDB [ 146.158255][ T6417] hfs: continuing without an alternate MDB [ 146.180447][ T6391] ERROR: (device loop4): xtSearch: stack overrun! [ 146.180447][ T6391] [ 146.180489][ T6391] xtLookup: xtSearch returned -5 [ 146.180534][ T6391] ERROR: (device loop4): xtTruncate: stack overrun! [ 146.180534][ T6391] [ 146.397182][ T6419] loop1: detected capacity change from 0 to 256 [ 146.427974][ T3562] [ 146.427974][ T3562] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.427974][ T3562] [ 146.428011][ T3562] [ 146.428011][ T3562] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.428011][ T3562] [ 146.428031][ T3562] [ 146.428031][ T3562] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.428031][ T3562] [ 146.428049][ T3562] [ 146.428049][ T3562] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.428049][ T3562] [ 146.527691][ T3562] JFS: metapage_get_blocks failed [ 146.537808][ T3562] [ 146.537808][ T3562] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.537808][ T3562] [ 146.541210][ T5823] [ 146.541210][ T5823] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.541210][ T5823] [ 146.548698][ T5823] [ 146.548698][ T5823] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.548698][ T5823] [ 146.624755][ T6410] loop3: detected capacity change from 0 to 32768 [ 146.694273][ T6410] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 146.829914][ T6410] XFS (loop3): Ending clean mount [ 146.836867][ T6410] XFS (loop3): Quotacheck needed: Please wait. [ 146.867022][ T6429] loop2: detected capacity change from 0 to 1024 [ 146.975296][ T6429] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.976640][ T6410] XFS (loop3): Quotacheck: Done. [ 147.244273][ T5811] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 147.381358][ T6431] loop4: detected capacity change from 0 to 512 [ 147.435312][ T6433] loop1: detected capacity change from 0 to 1024 [ 147.437478][ T6431] EXT4-fs: Ignoring removed nobh option [ 147.465629][ T6433] EXT4-fs: Invalid want_extra_isize 512 [ 147.724482][ T6431] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #3: comm syz.4.111: corrupted inode contents [ 147.853178][ T6431] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #3: comm syz.4.111: mark_inode_dirty error [ 147.876157][ T6431] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #3: comm syz.4.111: corrupted inode contents [ 147.910884][ T6431] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.111: mark_inode_dirty error [ 148.023572][ T6431] Quota error (device loop4): write_blk: dquota write failed [ 148.023748][ T6431] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 148.023810][ T6431] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.111: Failed to acquire dquot type 0 [ 148.086606][ T6440] loop3: detected capacity change from 0 to 256 [ 148.118530][ T6431] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.111: corrupted inode contents [ 148.140261][ T6431] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #16: comm syz.4.111: mark_inode_dirty error [ 148.171101][ T6431] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.111: corrupted inode contents [ 148.188219][ T6431] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.111: mark_inode_dirty error [ 148.202138][ T6431] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.111: corrupted inode contents [ 148.217133][ T6431] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 148.217661][ T6431] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.111: corrupted inode contents [ 148.218802][ T6431] EXT4-fs error (device loop4): ext4_truncate:4637: inode #16: comm syz.4.111: mark_inode_dirty error [ 148.219385][ T6431] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 148.321200][ T6431] EXT4-fs (loop4): 1 truncate cleaned up [ 148.324229][ T6431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.324373][ T6431] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.509744][ T6431] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 148.579125][ T6431] EXT4-fs: Ignoring removed orlov option [ 148.579273][ T6431] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.579306][ T6431] EXT4-fs (loop4): can't enable nombcache during remount [ 148.870384][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.902794][ T6029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.960855][ T6029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.206613][ T6445] loop4: detected capacity change from 0 to 1024 [ 149.216242][ T6445] EXT4-fs: Ignoring removed oldalloc option [ 149.216277][ T6445] EXT4-fs: Ignoring removed bh option [ 149.303268][ T6438] loop2: detected capacity change from 0 to 32768 [ 149.342363][ T6445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.388934][ T6445] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 149.423308][ T6433] loop1: detected capacity change from 0 to 32768 [ 149.444897][ T6445] EXT4-fs: Ignoring removed orlov option [ 149.471202][ T6438] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 149.483104][ T6433] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 149.491841][ T6029] team0: Port device team_slave_0 added [ 149.497595][ T6029] team0: Port device team_slave_1 added [ 149.517109][ T6433] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 149.557703][ T6445] EXT4-fs (loop4): can't enable nombcache during remount [ 149.709291][ T6433] XFS (loop1): Ending clean mount [ 149.737401][ T6433] XFS (loop1): Quotacheck needed: Please wait. [ 149.747235][ T6443] loop3: detected capacity change from 0 to 32768 [ 149.783276][ T6443] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.116 (6443) [ 149.824599][ T6443] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 149.824684][ T6443] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 149.856353][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.077101][ T6433] XFS (loop1): Quotacheck: Done. [ 150.229807][ T5817] ocfs2: Unmounting device (7,2) on (node local) [ 150.248330][ T6443] BTRFS info (device loop3): enabling ssd optimizations [ 150.248357][ T6443] BTRFS info (device loop3): enabling free space tree [ 150.418704][ T6029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.418724][ T6029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.418751][ T6029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.460330][ T6029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.460354][ T6029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.460386][ T6029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.600051][ T5812] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 151.393210][ T6029] hsr_slave_0: entered promiscuous mode [ 151.394627][ T6029] hsr_slave_1: entered promiscuous mode [ 151.395642][ T6029] debugfs: 'hsr0' already exists in 'hsr' [ 151.395666][ T6029] Cannot create hsr debugfs directory [ 151.513556][ T5811] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 152.045656][ T6474] loop4: detected capacity change from 0 to 32768 [ 152.189650][ T6474] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 152.482448][ T6474] XFS (loop4): Ending clean mount [ 152.538314][ T6474] XFS (loop4): Quotacheck needed: Please wait. [ 152.771180][ T6493] loop1: detected capacity change from 0 to 32768 [ 152.799028][ T6493] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.120 (6493) [ 152.862875][ T6493] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.913190][ T6493] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 153.037623][ T6488] loop2: detected capacity change from 0 to 40427 [ 153.125445][ T6474] XFS (loop4): Quotacheck: Done. [ 153.145611][ T6488] F2FS-fs (loop2): invalid crc value [ 153.237368][ T6493] BTRFS info (device loop1): rebuilding free space tree [ 153.331352][ T5823] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 153.332538][ T6493] BTRFS info (device loop1): allowing degraded mounts [ 153.332560][ T6493] BTRFS info (device loop1): enabling ssd optimizations [ 153.332577][ T6493] BTRFS info (device loop1): enabling free space tree [ 153.332593][ T6493] BTRFS info (device loop1): force clearing of disk cache [ 153.332612][ T6493] BTRFS info (device loop1): use zstd compression, level 3 [ 153.332658][ T6493] BTRFS info (device loop1): max_inline set to 0 [ 153.786687][ T6488] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 153.838091][ T6488] F2FS-fs (loop2): Start checkpoint disabled! [ 153.919775][ T6488] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 153.938377][ T6488] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 153.968316][ T5812] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 154.447231][ T3522] kworker/u8:11: attempt to access beyond end of device [ 154.447231][ T3522] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 154.466666][ T3522] CPU: 0 UID: 0 PID: 3522 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 154.466698][ T3522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 154.466712][ T3522] Workqueue: writeback wb_workfn (flush-7:2) [ 154.466745][ T3522] Call Trace: [ 154.466754][ T3522] [ 154.466764][ T3522] dump_stack_lvl+0x189/0x250 [ 154.466799][ T3522] ? reacquire_held_locks+0x127/0x1d0 [ 154.466821][ T3522] ? rt_spin_lock+0x1c1/0x3e0 [ 154.466845][ T3522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.466887][ T3522] ? __pfx_queue_work_on+0x10/0x10 [ 154.466922][ T3522] ? rt_spin_unlock+0x150/0x200 [ 154.466947][ T3522] ? rt_spin_unlock+0x161/0x200 [ 154.466973][ T3522] f2fs_handle_critical_error+0x354/0x510 [ 154.467006][ T3522] f2fs_write_end_io+0x886/0xb60 [ 154.467058][ T3522] __submit_merged_bio+0x27a/0x6a0 [ 154.467092][ T3522] __submit_merged_write_cond+0x255/0x530 [ 154.467125][ T3522] f2fs_write_data_pages+0x261d/0x3000 [ 154.467192][ T3522] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 154.467236][ T3522] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 154.467309][ T3522] ? rtlock_slowlock_locked+0xd8/0x4010 [ 154.467353][ T3522] ? do_raw_spin_lock+0x121/0x290 [ 154.467401][ T3522] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 154.467429][ T3522] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 154.467459][ T3522] ? __lock_acquire+0xab9/0xd20 [ 154.467491][ T3522] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 154.467521][ T3522] do_writepages+0x32b/0x550 [ 154.467550][ T3522] ? rt_mutex_slowunlock+0x493/0x8a0 [ 154.467570][ T3522] ? rt_spin_lock+0x1c1/0x3e0 [ 154.467607][ T3522] __writeback_single_inode+0x145/0x1000 [ 154.467646][ T3522] writeback_sb_inodes+0x6b7/0xf60 [ 154.467679][ T3522] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 154.467734][ T3522] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 154.467806][ T3522] ? rcu_is_watching+0x15/0xb0 [ 154.467841][ T3522] wb_writeback+0x43b/0xaf0 [ 154.467875][ T3522] ? __lock_acquire+0xab9/0xd20 [ 154.467915][ T3522] ? queue_io+0x371/0x560 [ 154.467946][ T3522] ? __pfx_wb_writeback+0x10/0x10 [ 154.467993][ T3522] wb_workfn+0x40e/0xf00 [ 154.468032][ T3522] ? __pfx_wb_workfn+0x10/0x10 [ 154.468061][ T3522] ? __lock_acquire+0xab9/0xd20 [ 154.468105][ T3522] ? process_scheduled_works+0x9ef/0x17b0 [ 154.468141][ T3522] ? _raw_spin_unlock_irq+0x23/0x50 [ 154.468168][ T3522] ? process_scheduled_works+0x9ef/0x17b0 [ 154.468196][ T3522] ? process_scheduled_works+0x9ef/0x17b0 [ 154.468228][ T3522] process_scheduled_works+0xae1/0x17b0 [ 154.468290][ T3522] ? __pfx_process_scheduled_works+0x10/0x10 [ 154.468340][ T3522] worker_thread+0x8a0/0xda0 [ 154.468400][ T3522] kthread+0x711/0x8a0 [ 154.468426][ T3522] ? __pfx_worker_thread+0x10/0x10 [ 154.468456][ T3522] ? __pfx_kthread+0x10/0x10 [ 154.468474][ T3522] ? rt_spin_unlock+0x150/0x200 [ 154.468502][ T3522] ? rt_spin_unlock+0x161/0x200 [ 154.468522][ T3522] ? __pfx_kthread+0x10/0x10 [ 154.468545][ T3522] ret_from_fork+0x436/0x7d0 [ 154.468576][ T3522] ? __pfx_ret_from_fork+0x10/0x10 [ 154.468613][ T3522] ? __switch_to_asm+0x39/0x70 [ 154.468633][ T3522] ? __switch_to_asm+0x33/0x70 [ 154.468653][ T3522] ? __pfx_kthread+0x10/0x10 [ 154.468676][ T3522] ret_from_fork_asm+0x1a/0x30 [ 154.468715][ T3522] [ 154.805210][ T3522] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 154.975188][ T6029] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.030723][ T6029] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.130574][ T6029] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.154706][ T6029] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.309851][ T6539] loop4: detected capacity change from 0 to 32768 [ 155.311297][ T6539] btrfs: Deprecated parameter 'usebackuproot' [ 155.311319][ T6539] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 155.327419][ T6539] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.123 (6539) [ 155.478498][ T6539] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.478575][ T6539] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 155.478606][ T6539] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 155.555240][ T6548] loop1: detected capacity change from 0 to 4096 [ 155.574427][ T6548] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 155.869640][ T6548] ntfs3(loop1): ino=1a, mi_enum_attr [ 155.869673][ T6548] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 155.873946][ T6029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.965420][ T6539] BTRFS info (device loop4): rebuilding free space tree [ 156.086441][ T6539] BTRFS info (device loop4): disabling free space tree [ 156.086526][ T6539] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 156.086553][ T6539] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 156.101476][ T6029] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.187582][ T6539] BTRFS info (device loop4): enabling ssd optimizations [ 156.187610][ T6539] BTRFS info (device loop4): turning on flush-on-commit [ 156.187637][ T6539] BTRFS info (device loop4): enabling disk space caching [ 156.187653][ T6539] BTRFS info (device loop4): force clearing of disk cache [ 156.187670][ T6539] BTRFS info (device loop4): trying to use backup root at mount time [ 156.187688][ T6539] BTRFS info (device loop4): force zlib compression, level 3 [ 156.228928][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.229104][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.310709][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.310873][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.891229][ T6544] loop3: detected capacity change from 0 to 40427 [ 156.971666][ T6544] F2FS-fs (loop3): Image doesn't support compression [ 156.971692][ T6544] F2FS-fs (loop3): build fault injection rate: 684 [ 156.971710][ T6544] F2FS-fs (loop3): build fault injection type: 0x35f7 [ 157.016057][ T6544] F2FS-fs (loop3): invalid crc value [ 157.143832][ T5823] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 157.395415][ T6589] loop1: detected capacity change from 0 to 1024 [ 157.433679][ T6589] EXT4-fs: inline encryption not supported [ 157.433704][ T6589] EXT4-fs: Ignoring removed i_version option [ 157.561096][ T6589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.790162][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.002644][ T6544] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 158.037688][ T6544] F2FS-fs (loop3): Start checkpoint disabled! [ 158.170841][ T6544] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 158.409566][ T6575] loop2: detected capacity change from 0 to 32768 [ 158.423405][ T6029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.613688][ T6609] loop1: detected capacity change from 0 to 164 [ 158.786606][ T6609] rock: directory entry would overflow storage [ 158.786624][ T6609] rock: sig=0x66, size=4, remaining=3 [ 158.849521][ T6609] rock: directory entry would overflow storage [ 158.849536][ T6609] rock: sig=0x66, size=4, remaining=3 [ 159.766748][ T6597] loop4: detected capacity change from 0 to 32768 [ 159.818665][ T6597] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.129 (6597) [ 159.839858][ T6597] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 159.839941][ T6597] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 160.163634][ T6597] BTRFS info (device loop4): enabling ssd optimizations [ 160.163662][ T6597] BTRFS info (device loop4): enabling free space tree [ 160.368553][ T38] audit: type=1800 audit(1759667329.248:7): pid=6597 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.129" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 160.440607][ T6029] veth0_vlan: entered promiscuous mode [ 160.508046][ T6641] loop3: detected capacity change from 0 to 4096 [ 160.514477][ T6029] veth1_vlan: entered promiscuous mode [ 160.527643][ T6641] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 160.759734][ T5823] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.762627][ T6029] veth0_macvtap: entered promiscuous mode [ 160.796033][ T6029] veth1_macvtap: entered promiscuous mode [ 160.943738][ T6029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.989224][ T6654] loop1: detected capacity change from 0 to 4096 [ 161.030330][ T6654] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 161.031518][ T6654] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 161.111591][ T6029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.154609][ T1512] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.155149][ T1512] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.155475][ T1512] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.155678][ T1512] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.218497][ T6659] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 161.561402][ T6652] loop2: detected capacity change from 0 to 32768 [ 161.657120][ T6652] btrfs: Deprecated parameter 'usebackuproot' [ 161.657146][ T6652] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 161.687013][ T6652] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.137 (6652) [ 161.716210][ T6652] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 161.716289][ T6652] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 162.021636][ T3562] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 162.021928][ T6652] BTRFS error (device loop2): failed to load root extent [ 162.021974][ T6652] BTRFS warning (device loop2): try to load backup roots slot 1 [ 162.022315][ T3562] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 162.022437][ T6652] BTRFS warning (device loop2): couldn't read tree root [ 162.022457][ T6652] BTRFS warning (device loop2): try to load backup roots slot 2 [ 162.022825][ T58] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 162.053028][ T6652] BTRFS warning (device loop2): couldn't read tree root [ 162.053061][ T6652] BTRFS warning (device loop2): try to load backup roots slot 3 [ 162.260479][ T6680] loop4: detected capacity change from 0 to 512 [ 162.281858][ T6680] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.142: casefold flag without casefold feature [ 162.282380][ T6680] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.142: couldn't read orphan inode 15 (err -117) [ 162.314731][ T6680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.392375][ T6652] BTRFS info (device loop2): rebuilding free space tree [ 162.425075][ T38] audit: type=1800 audit(1759667331.258:8): pid=6680 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.142" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 162.452256][ T3648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.452282][ T3648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.553068][ T6652] BTRFS info (device loop2): checking UUID tree [ 162.586551][ T6652] BTRFS info (device loop2): setting nodatasum [ 162.586579][ T6652] BTRFS info (device loop2): setting nodatacow [ 162.586596][ T6652] BTRFS info (device loop2): enabling ssd optimizations [ 162.586612][ T6652] BTRFS info (device loop2): turning off barriers [ 162.586629][ T6652] BTRFS info (device loop2): turning on sync discard [ 162.586645][ T6652] BTRFS info (device loop2): enabling free space tree [ 162.586661][ T6652] BTRFS info (device loop2): force clearing of disk cache [ 162.586677][ T6652] BTRFS info (device loop2): trying to use backup root at mount time [ 162.586694][ T6652] BTRFS info (device loop2): max_inline set to 0 [ 162.990992][ T1512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.991014][ T1512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.299376][ T6663] loop3: detected capacity change from 0 to 32768 [ 163.431727][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.552616][ T5817] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 163.613688][ T38] audit: type=1800 audit(1759667332.478:9): pid=6663 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.140" name="bus" dev="loop3" ino=3 res=0 errno=0 [ 163.746141][ T6690] loop5: detected capacity change from 0 to 512 [ 163.789932][ T6690] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 163.827023][ T6692] loop4: detected capacity change from 0 to 256 [ 163.939782][ T6690] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.27: invalid indirect mapped block 4294967295 (level 0) [ 163.955698][ T6690] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.27: invalid indirect mapped block 4294967295 (level 1) [ 163.957412][ T6690] EXT4-fs (loop5): 1 orphan inode deleted [ 163.957435][ T6690] EXT4-fs (loop5): 1 truncate cleaned up [ 163.960059][ T6690] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.251351][ T6678] loop1: detected capacity change from 0 to 40427 [ 164.263941][ T6678] F2FS-fs: heap/no_heap options were deprecated [ 164.272325][ T6678] F2FS-fs (loop1): build fault injection rate: 23 [ 164.272354][ T6678] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 164.282764][ T6678] F2FS-fs (loop1): invalid crc value [ 164.330554][ T6029] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.381466][ T6678] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 164.453599][ T6703] loop4: detected capacity change from 0 to 2048 [ 164.561812][ T6703] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.946612][ T6705] loop5: detected capacity change from 0 to 4096 [ 164.963245][ T6705] EXT4-fs: Ignoring removed mblk_io_submit option [ 165.014026][ T6705] EXT4-fs (loop5): Test dummy encryption mode enabled [ 165.297271][ T6678] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 165.310117][ T6705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.381041][ T6710] loop4: detected capacity change from 0 to 2048 [ 165.395973][ T6710] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 165.512955][ T6712] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.620938][ T6710] NILFS error (device loop4): nilfs_readdir: zero-length directory entry [ 165.641287][ T6714] loop3: detected capacity change from 0 to 2048 [ 165.678067][ T6710] Remounting filesystem read-only [ 165.770747][ T6698] loop2: detected capacity change from 0 to 32768 [ 165.772290][ T6698] btrfs: Deprecated parameter 'usebackuproot' [ 165.772312][ T6698] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 165.773519][ T6714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.773661][ T6714] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.833837][ T6029] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.851229][ T6698] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.146 (6698) [ 165.866938][ T38] audit: type=1800 audit(1759667334.728:10): pid=6714 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.145" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 165.942509][ T6698] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 165.942595][ T6698] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 166.319804][ T6698] BTRFS info (device loop2): rebuilding free space tree [ 166.414150][ T6698] BTRFS info (device loop2): allowing degraded mounts [ 166.414176][ T6698] BTRFS info (device loop2): enabling ssd optimizations [ 166.414193][ T6698] BTRFS info (device loop2): turning on flush-on-commit [ 166.414209][ T6698] BTRFS info (device loop2): enabling free space tree [ 166.414225][ T6698] BTRFS info (device loop2): force clearing of disk cache [ 166.414242][ T6698] BTRFS info (device loop2): trying to use backup root at mount time [ 166.414259][ T6698] BTRFS info (device loop2): use zstd compression, level 3 [ 166.691839][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.817914][ T6744] loop5: detected capacity change from 0 to 512 [ 166.837002][ T6744] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 167.115123][ T6744] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.156: bg 0: block 104: invalid block bitmap [ 167.146314][ T6744] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 167.177696][ T6744] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.156: invalid indirect mapped block 1 (level 1) [ 167.205310][ T6744] EXT4-fs (loop5): 1 truncate cleaned up [ 167.210923][ T6744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.275664][ T6750] loop3: detected capacity change from 0 to 1024 [ 167.277175][ T6750] EXT4-fs: Ignoring removed oldalloc option [ 167.277295][ T6750] EXT4-fs: Ignoring removed orlov option [ 167.301619][ T5817] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 167.378970][ T6750] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 167.425344][ T6750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.609775][ T6750] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 433:freeing already freed block (bit 27); block bitmap corrupt. [ 167.726038][ T6029] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.998712][ T6748] loop1: detected capacity change from 0 to 32768 [ 168.090339][ T6756] loop5: detected capacity change from 0 to 64 [ 168.180978][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.612139][ T6765] loop3: detected capacity change from 0 to 512 [ 168.785952][ T6765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.786109][ T6765] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.846545][ T6742] loop4: detected capacity change from 0 to 32768 [ 168.916484][ T6742] (syz.4.154,6742,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 168.916993][ T6742] (syz.4.154,6742,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 169.094636][ T6765] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #2: comm syz.3.159: corrupted inode contents [ 169.170309][ T6742] JBD2: Ignoring recovery information on journal [ 169.235593][ T6765] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #2: comm syz.3.159: mark_inode_dirty error [ 169.238046][ T6765] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #2: comm syz.3.159: corrupted inode contents [ 169.242526][ T6765] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.159: mark_inode_dirty error [ 169.452810][ T38] audit: type=1800 audit(1759667338.328:11): pid=6770 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.159" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 169.551174][ T6742] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 169.554030][ T6764] loop5: detected capacity change from 0 to 32768 [ 169.796093][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.818423][ T13] ocfs2: Finishing quota recovery on device (7,4) for slot 0 [ 169.850519][ T6764] JBD2: Ignoring recovery information on journal [ 170.021407][ T6764] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 170.300505][ T5823] ocfs2: Unmounting device (7,4) on (node local) [ 170.622683][ T6761] loop2: detected capacity change from 0 to 32768 [ 170.828840][ T6792] loop4: detected capacity change from 0 to 512 [ 170.939853][ T6792] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.166: iget: bad i_size value: 38620345925642 [ 170.972339][ T6792] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.166: couldn't read orphan inode 15 (err -117) [ 170.978888][ T6792] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.097438][ T6792] EXT4-fs (loop4): shut down requested (2) [ 171.097691][ T6792] EXT4-fs warning (device loop4): empty_inline_dir:1767: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 171.203351][ T5817] read_mapping_page failed! [ 171.203463][ T5817] ERROR: (device loop2): txCommit: [ 171.203463][ T5817] [ 171.206577][ T5817] read_mapping_page failed! [ 171.206669][ T5817] ERROR: (device loop2): txCommit: [ 171.206669][ T5817] [ 171.241492][ T6029] ocfs2: Unmounting device (7,5) on (node local) [ 171.318928][ T6777] loop1: detected capacity change from 0 to 32768 [ 171.393439][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.451822][ T6777] (syz.1.164,6777,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 171.455032][ T6777] (syz.1.164,6777,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 171.554455][ T6777] JBD2: Ignoring recovery information on journal [ 171.759892][ T6777] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 171.996817][ T6784] loop3: detected capacity change from 0 to 32768 [ 172.012616][ T6784] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.165 (6784) [ 172.043609][ T6784] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 172.043700][ T6784] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 172.043734][ T6784] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 172.344783][ T6784] BTRFS info (device loop3): rebuilding free space tree [ 172.432800][ T38] audit: type=1800 audit(1759667341.308:12): pid=6777 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.164" name="file1" dev="loop1" ino=16979 res=0 errno=0 [ 172.434435][ T6784] BTRFS info (device loop3): disabling free space tree [ 172.434522][ T6784] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 172.434550][ T6784] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 172.471385][ T6784] BTRFS info (device loop3): enabling ssd optimizations [ 172.471420][ T6784] BTRFS info (device loop3): enabling disk space caching [ 172.471440][ T6784] BTRFS info (device loop3): force clearing of disk cache [ 172.471461][ T6784] BTRFS info (device loop3): use zstd compression, level 3 [ 172.625715][ T6804] loop5: detected capacity change from 0 to 40427 [ 172.657529][ T6804] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 172.657558][ T6804] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 172.759562][ T6804] F2FS-fs (loop5): invalid crc value [ 172.823127][ T5812] ocfs2: Unmounting device (7,1) on (node local) [ 173.313140][ T5811] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 173.485757][ T6804] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 173.519429][ T6804] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 173.519461][ T6804] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 173.895180][ T6800] loop4: detected capacity change from 0 to 32768 [ 174.288152][ T6800] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.412864][ T3522] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.470718][ T6837] block device autoloading is deprecated and will be removed. [ 174.716943][ T6800] XFS (loop4): Ending clean mount [ 174.727200][ T6800] XFS (loop4): Quotacheck needed: Please wait. [ 175.089486][ T6800] XFS (loop4): Quotacheck: Done. [ 175.243723][ T3522] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.304340][ T5823] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.410649][ T5819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.434782][ T5819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.448227][ T5819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.454479][ T5819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.455501][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.982965][ T3522] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.986170][ T6839] loop3: detected capacity change from 0 to 40427 [ 176.097662][ T6839] F2FS-fs (loop3): invalid crc value [ 176.157957][ T6853] loop1: detected capacity change from 0 to 32768 [ 176.161546][ T6853] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.175 (6853) [ 176.278778][ T6853] BTRFS info (device loop1 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 176.279461][ T6853] BTRFS info (device loop1 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 176.667422][ T1512] BTRFS warning (device loop1 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0xb929531db417ae5491593d99afe1510df15bdaa63fb6603d26a93ec9245f098d found 0x8883588ed640b7a5f22f0afabea3add9399913a6417ca0e34e9d294b2a9d89c6 level 0, ignored [ 176.709111][ T1333] BTRFS warning (device loop1 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xb0a94d7ee065037a65389cfe9114fa45a636cde09d54bd2302c1c963c1dcf690 level 0, ignored [ 176.709203][ T1333] page: refcount:3 mapcount:0 mapping:ffff88803de1f8f0 index:0x517 pfn:0x49c05 [ 176.709225][ T1333] memcg:ffff888140458000 [ 176.709240][ T1333] aops:btree_aops ino:1 [ 176.709267][ T1333] flags: 0x80000000004000(private|node=0|zone=1) [ 176.709300][ T1333] raw: 0080000000004000 0000000000000000 dead000000000122 ffff88803de1f8f0 [ 176.709320][ T1333] raw: 0000000000000517 ffff88823bf9ce30 00000003ffffffff ffff888140458000 [ 176.709332][ T1333] page dumped because: eb page dump [ 176.709348][ T1333] page_owner tracks the page as allocated [ 176.709356][ T1333] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x8c40(GFP_NOFS|__GFP_NOFAIL), pid 6853, tgid 6852 (syz.1.175), ts 176708740775, free_ts 176660810075 [ 176.709389][ T1333] post_alloc_hook+0x240/0x2a0 [ 176.709420][ T1333] get_page_from_freelist+0x28c0/0x2960 [ 176.709440][ T1333] __alloc_frozen_pages_noprof+0x181/0x370 [ 176.709459][ T1333] alloc_pages_bulk_noprof+0x5fa/0x7d0 [ 176.709492][ T1333] alloc_eb_folio_array+0xfc/0x4b0 [ 176.709522][ T1333] alloc_extent_buffer+0x31d/0x26c0 [ 176.709560][ T1333] read_tree_root_path+0x286/0xab0 [ 176.709591][ T1333] load_global_roots_objectid+0x42f/0xba0 [ 176.709613][ T1333] init_tree_roots+0xb4f/0x1ff0 [ 176.709639][ T1333] open_ctree+0x1c88/0x3d20 [ 176.709664][ T1333] btrfs_get_tree+0xf5a/0x1830 [ 176.709681][ T1333] vfs_get_tree+0x92/0x2b0 [ 176.709708][ T1333] do_new_mount+0x302/0xa10 [ 176.709736][ T1333] __se_sys_mount+0x313/0x410 [ 176.709765][ T1333] do_syscall_64+0xfa/0x3b0 [ 176.709795][ T1333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.709816][ T1333] page last free pid 28 tgid 28 stack trace: [ 176.709828][ T1333] __free_frozen_pages+0xfb6/0x1140 [ 176.709858][ T1333] tlb_remove_table_rcu+0x85/0x100 [ 176.709878][ T1333] rcu_cpu_kthread+0xbf3/0x1b50 [ 176.709896][ T1333] smpboot_thread_fn+0x542/0xa60 [ 176.709925][ T1333] kthread+0x711/0x8a0 [ 176.709943][ T1333] ret_from_fork+0x436/0x7d0 [ 176.709969][ T1333] ret_from_fork_asm+0x1a/0x30 [ 176.710267][ T1333] BTRFS critical (device loop1 state S): corrupt leaf: root=2 block=5337088 slot=6, bad key order, prev (4300255232 169 0) current (5292032 169 0) [ 176.710311][ T1333] BTRFS error (device loop1 state S): read time tree block corruption detected on logical 5337088 mirror 1 [ 176.727908][ T6853] BTRFS error (device loop1 state S): failed to load root extent [ 176.740177][ T1333] BTRFS warning (device loop1 state CS): checksum verify failed on logical 5341184 mirror 1 wanted 0x000000000000a5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a found 0xc53d3c5bb04ba5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a level 0, ignored [ 176.743338][ T6853] BTRFS warning (device loop1 state CS): mismatching generation and generation_v2 found in root item. This root was probably mounted with an older kernel. Resetting all new fields. [ 176.744110][ T3648] BTRFS error (device loop1 state CS): parent transid verify failed on logical 5292032 mirror 1 wanted 2 found 5 [ 176.792320][ T6853] BTRFS info (device loop1 state CS): enabling ssd optimizations [ 176.792355][ T6853] BTRFS info (device loop1 state CS): disabling log replay at mount time [ 176.792375][ T6853] BTRFS info (device loop1 state CS): turning on flush-on-commit [ 176.792394][ T6853] BTRFS info (device loop1 state CS): turning on async discard [ 176.792415][ T6853] BTRFS info (device loop1 state CS): enabling free space tree [ 176.792435][ T6853] BTRFS info (device loop1 state CS): ignoring bad roots [ 176.792454][ T6853] BTRFS info (device loop1 state CS): ignoring data csums [ 176.792472][ T6853] BTRFS info (device loop1 state CS): ignoring meta csums [ 176.792492][ T6853] BTRFS info (device loop1 state CS): ignoring unknown super block flags [ 176.879817][ T6839] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 177.244784][ T6839] F2FS-fs (loop3): Start checkpoint disabled! [ 177.246860][ T6839] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 177.395705][ T3522] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.437222][ T5812] BTRFS info (device loop1 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 177.577982][ T5819] Bluetooth: hci3: command tx timeout [ 177.623528][ T6862] loop5: detected capacity change from 0 to 32768 [ 177.624945][ T6862] btrfs: Deprecated parameter 'usebackuproot' [ 177.624967][ T6862] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 177.690903][ T6862] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.174 (6862) [ 177.778056][ T6862] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.778138][ T6862] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm [ 177.778173][ T6862] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 178.156768][ T58] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 178.168256][ T6862] BTRFS error (device loop5): failed to load root extent [ 178.168314][ T6862] BTRFS warning (device loop5): try to load backup roots slot 1 [ 178.186247][ T58] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 178.212218][ T6862] BTRFS warning (device loop5): couldn't read tree root [ 178.212250][ T6862] BTRFS warning (device loop5): try to load backup roots slot 2 [ 178.229464][ T1512] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 178.229872][ T6862] BTRFS warning (device loop5): couldn't read tree root [ 178.229899][ T6862] BTRFS warning (device loop5): try to load backup roots slot 3 [ 178.415607][ T6862] BTRFS info (device loop5): rebuilding free space tree [ 178.541191][ T6862] BTRFS info (device loop5): disabling free space tree [ 178.541293][ T6862] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 178.541322][ T6862] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 178.566267][ T6865] loop4: detected capacity change from 0 to 40427 [ 178.610631][ T6865] F2FS-fs: heap/no_heap options were deprecated [ 178.668463][ T6865] F2FS-fs (loop4): build fault injection rate: 19 [ 178.668487][ T6865] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 178.714262][ T6862] BTRFS info (device loop5): setting nodatasum [ 178.714290][ T6862] BTRFS info (device loop5): setting nodatacow [ 178.714306][ T6862] BTRFS info (device loop5): enabling ssd optimizations [ 178.714323][ T6862] BTRFS info (device loop5): turning off barriers [ 178.714340][ T6862] BTRFS info (device loop5): turning on sync discard [ 178.714356][ T6862] BTRFS info (device loop5): enabling disk space caching [ 178.714373][ T6862] BTRFS info (device loop5): force clearing of disk cache [ 178.714389][ T6862] BTRFS info (device loop5): enabling auto defrag [ 178.714404][ T6862] BTRFS info (device loop5): trying to use backup root at mount time [ 178.714421][ T6862] BTRFS info (device loop5): max_inline set to 0 [ 178.809419][ T6865] F2FS-fs (loop4): invalid crc value [ 178.929820][ T6865] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 179.128547][ T6029] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 179.431981][ T6925] loop3: detected capacity change from 0 to 128 [ 179.521231][ T6925] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 179.537491][ T6925] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.561111][ T6865] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0 [ 179.615501][ T6855] chnl_net:caif_netlink_parms(): no params data found [ 179.658725][ T6865] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 179.659110][ T5819] Bluetooth: hci3: command tx timeout [ 180.371477][ T6937] loop3: detected capacity change from 0 to 1024 [ 180.372925][ T6937] EXT4-fs: inline encryption not supported [ 180.372947][ T6937] EXT4-fs: Ignoring removed i_version option [ 180.530999][ T6937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.714612][ T6937] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 181.277532][ T6929] loop5: detected capacity change from 0 to 40427 [ 181.279213][ T5811] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.413759][ T6929] F2FS-fs (loop5): invalid crc value [ 181.518707][ T6953] loop4: detected capacity change from 0 to 512 [ 181.679793][ T6953] EXT4-fs error (device loop4): ext4_iget_extra_inode:5075: inode #15: comm syz.4.183: corrupted in-inode xattr: overlapping e_value [ 181.680203][ T6953] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.183: couldn't read orphan inode 15 (err -117) [ 181.766196][ T5819] Bluetooth: hci3: command tx timeout [ 181.768851][ T6953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.865175][ T6929] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 181.865805][ T6929] F2FS-fs (loop5): Start checkpoint disabled! [ 181.932915][ T6929] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 181.934954][ T6929] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 181.956628][ T6953] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 182.067201][ T6932] loop1: detected capacity change from 0 to 40427 [ 182.191190][ T6855] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.191355][ T6855] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.191611][ T6855] bridge_slave_0: entered allmulticast mode [ 182.252141][ T6855] bridge_slave_0: entered promiscuous mode [ 182.281188][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.401246][ T6855] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.401386][ T6855] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.401644][ T6855] bridge_slave_1: entered allmulticast mode [ 182.404608][ T6855] bridge_slave_1: entered promiscuous mode [ 182.536686][ T1512] kworker/u8:9: attempt to access beyond end of device [ 182.536686][ T1512] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 182.536754][ T1512] CPU: 1 UID: 0 PID: 1512 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 182.536780][ T1512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 182.536794][ T1512] Workqueue: writeback wb_workfn (flush-7:5) [ 182.536825][ T1512] Call Trace: [ 182.536834][ T1512] [ 182.536844][ T1512] dump_stack_lvl+0x189/0x250 [ 182.536878][ T1512] ? reacquire_held_locks+0x127/0x1d0 [ 182.536901][ T1512] ? rt_spin_lock+0x1c1/0x3e0 [ 182.536933][ T1512] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.536966][ T1512] ? __pfx_queue_work_on+0x10/0x10 [ 182.537003][ T1512] ? rt_spin_unlock+0x150/0x200 [ 182.537030][ T1512] ? rt_spin_unlock+0x161/0x200 [ 182.537057][ T1512] f2fs_handle_critical_error+0x354/0x510 [ 182.537092][ T1512] f2fs_write_end_io+0x886/0xb60 [ 182.537142][ T1512] __submit_merged_bio+0x27a/0x6a0 [ 182.537177][ T1512] __submit_merged_write_cond+0x255/0x530 [ 182.537211][ T1512] f2fs_write_data_pages+0x261d/0x3000 [ 182.537278][ T1512] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 182.537324][ T1512] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 182.537397][ T1512] ? rtlock_slowlock_locked+0xd8/0x4010 [ 182.537441][ T1512] ? do_raw_spin_lock+0x121/0x290 [ 182.537490][ T1512] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 182.537520][ T1512] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 182.537551][ T1512] ? __lock_acquire+0xab9/0xd20 [ 182.537584][ T1512] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 182.537616][ T1512] do_writepages+0x32b/0x550 [ 182.537644][ T1512] ? rt_mutex_slowunlock+0x493/0x8a0 [ 182.537664][ T1512] ? rt_spin_lock+0x1c1/0x3e0 [ 182.537700][ T1512] __writeback_single_inode+0x145/0x1000 [ 182.537741][ T1512] writeback_sb_inodes+0x6b7/0xf60 [ 182.537771][ T1512] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 182.537821][ T1512] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 182.537893][ T1512] ? rcu_is_watching+0x15/0xb0 [ 182.537935][ T1512] wb_writeback+0x43b/0xaf0 [ 182.537960][ T1512] ? __lock_acquire+0xab9/0xd20 [ 182.537997][ T1512] ? queue_io+0x371/0x560 [ 182.538027][ T1512] ? __pfx_wb_writeback+0x10/0x10 [ 182.538073][ T1512] wb_workfn+0x40e/0xf00 [ 182.538112][ T1512] ? __pfx_wb_workfn+0x10/0x10 [ 182.538140][ T1512] ? __lock_acquire+0xab9/0xd20 [ 182.538185][ T1512] ? process_scheduled_works+0x9ef/0x17b0 [ 182.538221][ T1512] ? _raw_spin_unlock_irq+0x23/0x50 [ 182.538248][ T1512] ? process_scheduled_works+0x9ef/0x17b0 [ 182.538276][ T1512] ? process_scheduled_works+0x9ef/0x17b0 [ 182.538306][ T1512] process_scheduled_works+0xae1/0x17b0 [ 182.538367][ T1512] ? __pfx_process_scheduled_works+0x10/0x10 [ 182.538414][ T1512] worker_thread+0x8a0/0xda0 [ 182.538448][ T1512] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 182.538487][ T1512] ? __kthread_parkme+0x7b/0x200 [ 182.538530][ T1512] kthread+0x711/0x8a0 [ 182.538555][ T1512] ? __pfx_worker_thread+0x10/0x10 [ 182.538585][ T1512] ? __pfx_kthread+0x10/0x10 [ 182.538603][ T1512] ? rt_spin_unlock+0x150/0x200 [ 182.538631][ T1512] ? rt_spin_unlock+0x161/0x200 [ 182.538651][ T1512] ? __pfx_kthread+0x10/0x10 [ 182.538673][ T1512] ret_from_fork+0x436/0x7d0 [ 182.538705][ T1512] ? __pfx_ret_from_fork+0x10/0x10 [ 182.538740][ T1512] ? __switch_to_asm+0x39/0x70 [ 182.538760][ T1512] ? __switch_to_asm+0x33/0x70 [ 182.538779][ T1512] ? __pfx_kthread+0x10/0x10 [ 182.538802][ T1512] ret_from_fork_asm+0x1a/0x30 [ 182.538842][ T1512] [ 182.552142][ T1512] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 182.699273][ T6932] F2FS-fs (loop1): invalid crc value [ 182.942363][ T3522] bridge_slave_1: left allmulticast mode [ 182.942394][ T3522] bridge_slave_1: left promiscuous mode [ 182.942643][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.160910][ T3522] bridge_slave_0: left allmulticast mode [ 183.160943][ T3522] bridge_slave_0: left promiscuous mode [ 183.162880][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.199341][ T6932] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 183.312798][ T6956] loop3: detected capacity change from 0 to 40427 [ 183.375569][ T6956] F2FS-fs (loop3): invalid crc value [ 183.746467][ T6966] loop4: detected capacity change from 0 to 32768 [ 183.791745][ T6966] btrfs: Deprecated parameter 'usebackuproot' [ 183.791777][ T6966] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 183.793718][ T6966] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.187 (6966) [ 183.817914][ T5819] Bluetooth: hci3: command tx timeout [ 183.881288][ T6956] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 183.889458][ T6966] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 183.889583][ T6966] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 183.932611][ T6956] F2FS-fs (loop3): Start checkpoint disabled! [ 183.942808][ T6956] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 183.956974][ T6956] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 184.001937][ T6973] loop5: detected capacity change from 0 to 1024 [ 184.184341][ T6956] syz.3.184: attempt to access beyond end of device [ 184.184341][ T6956] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 184.294211][ T6966] BTRFS info (device loop4): rebuilding free space tree [ 184.418326][ T6966] BTRFS info (device loop4): allowing degraded mounts [ 184.418354][ T6966] BTRFS info (device loop4): enabling ssd optimizations [ 184.418371][ T6966] BTRFS info (device loop4): turning on flush-on-commit [ 184.418387][ T6966] BTRFS info (device loop4): enabling free space tree [ 184.418403][ T6966] BTRFS info (device loop4): force clearing of disk cache [ 184.418420][ T6966] BTRFS info (device loop4): trying to use backup root at mount time [ 184.418438][ T6966] BTRFS info (device loop4): use zstd compression, level 3 [ 184.555952][ T13] kworker/u8:1: attempt to access beyond end of device [ 184.555952][ T13] loop3: rw=1, sector=45096, nr_sectors = 16 limit=40427 [ 184.589189][ T13] kworker/u8:1: attempt to access beyond end of device [ 184.589189][ T13] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 184.589259][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 184.589284][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 184.589299][ T13] Workqueue: writeback wb_workfn (flush-7:3) [ 184.589332][ T13] Call Trace: [ 184.589341][ T13] [ 184.589351][ T13] dump_stack_lvl+0x189/0x250 [ 184.589412][ T13] ? reacquire_held_locks+0x127/0x1d0 [ 184.589436][ T13] ? rt_spin_lock+0x1c1/0x3e0 [ 184.589460][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.589499][ T13] ? __pfx_queue_work_on+0x10/0x10 [ 184.589537][ T13] ? rt_spin_unlock+0x150/0x200 [ 184.589566][ T13] ? rt_spin_unlock+0x161/0x200 [ 184.589593][ T13] f2fs_handle_critical_error+0x354/0x510 [ 184.589629][ T13] f2fs_write_end_io+0x886/0xb60 [ 184.589691][ T13] __submit_merged_bio+0x27a/0x6a0 [ 184.589728][ T13] __submit_merged_write_cond+0x255/0x530 [ 184.589766][ T13] f2fs_write_data_pages+0x261d/0x3000 [ 184.589842][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 184.589891][ T13] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 184.589974][ T13] ? rtlock_slowlock_locked+0xd8/0x4010 [ 184.590023][ T13] ? do_raw_spin_lock+0x121/0x290 [ 184.590076][ T13] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 184.590106][ T13] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 184.590138][ T13] ? __lock_acquire+0xab9/0xd20 [ 184.590171][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 184.590202][ T13] do_writepages+0x32b/0x550 [ 184.590232][ T13] ? rt_mutex_slowunlock+0x493/0x8a0 [ 184.590254][ T13] ? rt_spin_lock+0x1c1/0x3e0 [ 184.590294][ T13] __writeback_single_inode+0x145/0x1000 [ 184.590334][ T13] writeback_sb_inodes+0x6b7/0xf60 [ 184.590367][ T13] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 184.590425][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 184.590508][ T13] ? rcu_is_watching+0x15/0xb0 [ 184.590545][ T13] wb_writeback+0x43b/0xaf0 [ 184.590571][ T13] ? __lock_acquire+0xab9/0xd20 [ 184.590611][ T13] ? queue_io+0x371/0x560 [ 184.590643][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 184.590700][ T13] wb_workfn+0x40e/0xf00 [ 184.590744][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 184.590773][ T13] ? __lock_acquire+0xab9/0xd20 [ 184.590818][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 184.590855][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 184.590882][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 184.590909][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 184.590940][ T13] process_scheduled_works+0xae1/0x17b0 [ 184.591007][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 184.591060][ T13] worker_thread+0x8a0/0xda0 [ 184.591127][ T13] kthread+0x711/0x8a0 [ 184.591153][ T13] ? __pfx_worker_thread+0x10/0x10 [ 184.591184][ T13] ? __pfx_kthread+0x10/0x10 [ 184.591202][ T13] ? rt_spin_unlock+0x150/0x200 [ 184.591230][ T13] ? rt_spin_unlock+0x161/0x200 [ 184.591249][ T13] ? __pfx_kthread+0x10/0x10 [ 184.591273][ T13] ret_from_fork+0x436/0x7d0 [ 184.591307][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 184.591346][ T13] ? __switch_to_asm+0x39/0x70 [ 184.591367][ T13] ? __switch_to_asm+0x33/0x70 [ 184.591387][ T13] ? __pfx_kthread+0x10/0x10 [ 184.591411][ T13] ret_from_fork_asm+0x1a/0x30 [ 184.591456][ T13] [ 184.591466][ T13] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 184.994409][ T5823] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 185.397269][ T6994] loop1: detected capacity change from 0 to 4096 [ 185.455114][ T6994] EXT4-fs (loop1): Test dummy encryption mode enabled [ 185.539741][ T6994] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 185.539872][ T6994] System zones: 0-5 [ 185.591945][ T6994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.704864][ T6992] loop5: detected capacity change from 0 to 32768 [ 185.805392][ T6992] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.189 (6992) [ 185.844280][ T6992] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 185.844374][ T6992] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 186.116195][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.239337][ T6992] BTRFS info (device loop5): rebuilding free space tree [ 186.263696][ T6992] BTRFS info (device loop5): checking UUID tree [ 186.277084][ T6992] BTRFS info (device loop5): setting nodatasum [ 186.277110][ T6992] BTRFS info (device loop5): setting nodatacow [ 186.277126][ T6992] BTRFS info (device loop5): enabling ssd optimizations [ 186.277144][ T6992] BTRFS info (device loop5): turning on async discard [ 186.277161][ T6992] BTRFS info (device loop5): enabling free space tree [ 186.277177][ T6992] BTRFS info (device loop5): force clearing of disk cache [ 186.277194][ T6992] BTRFS info (device loop5): max_inline set to 0 [ 186.532867][ T7023] loop1: detected capacity change from 0 to 512 [ 186.607122][ T7024] loop4: detected capacity change from 0 to 512 [ 186.638362][ T7023] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 186.728353][ T7024] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 186.757437][ T7024] EXT4-fs (loop4): invalid journal inode [ 186.757543][ T7024] EXT4-fs (loop4): can't get journal size [ 186.812052][ T6029] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 186.880047][ T7024] EXT4-fs (loop4): 1 truncate cleaned up [ 186.885566][ T7023] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 186.905891][ T7024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.949937][ T7023] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.195: bg 0: block 248: padding at end of block bitmap is not set [ 186.973477][ T7023] Quota error (device loop1): write_blk: dquota write failed [ 186.973596][ T7023] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 186.973670][ T7023] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.195: Failed to acquire dquot type 1 [ 187.116909][ T7023] EXT4-fs (loop1): 1 truncate cleaned up [ 187.129489][ T7023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 187.520342][ T7036] loop5: detected capacity change from 0 to 1024 [ 187.624198][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 187.658148][ T70] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 187.658293][ T70] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 1 [ 187.702434][ T7036] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.752352][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.817002][ T7042] loop3: detected capacity change from 0 to 1024 [ 187.823499][ T7036] EXT4-fs (loop5): shut down requested (2) [ 187.966559][ T7042] syz.3.202: attempt to access beyond end of device [ 187.966559][ T7042] loop3: rw=0, sector=393228, nr_sectors = 2 limit=1024 [ 187.967084][ T7042] syz.3.202: attempt to access beyond end of device [ 187.967084][ T7042] loop3: rw=2049, sector=5778, nr_sectors = 2 limit=1024 [ 187.967111][ T7042] Buffer I/O error on dev loop3, logical block 2889, lost async page write [ 187.967198][ T7042] syz.3.202: attempt to access beyond end of device [ 187.967198][ T7042] loop3: rw=2049, sector=393216, nr_sectors = 2 limit=1024 [ 187.967221][ T7042] Buffer I/O error on dev loop3, logical block 196608, lost async page write [ 187.967315][ T7042] syz.3.202: attempt to access beyond end of device [ 187.967315][ T7042] loop3: rw=2049, sector=393218, nr_sectors = 2 limit=1024 [ 187.967344][ T7042] Buffer I/O error on dev loop3, logical block 196609, lost async page write [ 187.967435][ T7042] syz.3.202: attempt to access beyond end of device [ 187.967435][ T7042] loop3: rw=2049, sector=393220, nr_sectors = 2 limit=1024 [ 187.967459][ T7042] Buffer I/O error on dev loop3, logical block 196610, lost async page write [ 188.155591][ T6029] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.261549][ T7046] loop4: detected capacity change from 0 to 2048 [ 188.335799][ T7046] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.377905][ T1512] hfsplus: b-tree write err: -5, ino 8 [ 188.378026][ T1512] kworker/u8:9: attempt to access beyond end of device [ 188.378026][ T1512] loop3: rw=1, sector=5778, nr_sectors = 2 limit=1024 [ 189.034017][ T7055] loop4: detected capacity change from 0 to 512 [ 189.051155][ T7055] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.051183][ T7055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.058304][ T7055] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 189.136800][ T7055] EXT4-fs (loop4): 1 truncate cleaned up [ 189.141561][ T7055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.146266][ T7057] loop3: detected capacity change from 0 to 1024 [ 189.171389][ T7057] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 189.171426][ T7057] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 189.171540][ T7057] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 189.171564][ T7057] EXT4-fs (loop3): filesystem has both journal inode and journal device! [ 189.276466][ T7055] EXT4-fs error (device loop4): ext4_check_dx_root:2203: inode #2: comm syz.4.206: Corrupt dir, invalid name for '..', running e2fsck is recommended [ 189.562705][ T7050] loop5: detected capacity change from 0 to 32768 [ 189.602100][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.649561][ T38] audit: type=1800 audit(1759667358.528:13): pid=7050 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.203" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 189.962748][ T7063] loop4: detected capacity change from 0 to 16 [ 189.973885][ T7063] erofs (device loop4): mounted with root inode @ nid 36. [ 190.035954][ T7048] loop1: detected capacity change from 0 to 40427 [ 190.068681][ T7048] F2FS-fs (loop1): Invalid log_blocksize (64), supports only 12 [ 190.068710][ T7048] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 190.094481][ T7048] F2FS-fs (loop1): invalid crc value [ 190.203684][ T3522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.352797][ T3522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.379700][ T7069] loop4: detected capacity change from 0 to 64 [ 190.461505][ T7071] loop5: detected capacity change from 0 to 512 [ 190.467401][ T3522] bond0 (unregistering): Released all slaves [ 190.626946][ T7071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.627108][ T7071] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.668823][ T7069] syz.4.211: attempt to access beyond end of device [ 190.668823][ T7069] loop4: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 190.678830][ T7048] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 190.680135][ T7048] F2FS-fs (loop1): Start checkpoint disabled! [ 190.682897][ T7048] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 190.689287][ T7048] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 190.689322][ T7048] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 190.993476][ T70] kworker/u8:4: attempt to access beyond end of device [ 190.993476][ T70] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 191.015285][ T70] CPU: 1 UID: 0 PID: 70 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 191.015316][ T70] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 191.015331][ T70] Workqueue: writeback wb_workfn (flush-7:1) [ 191.015363][ T70] Call Trace: [ 191.015372][ T70] [ 191.015381][ T70] dump_stack_lvl+0x189/0x250 [ 191.015416][ T70] ? reacquire_held_locks+0x127/0x1d0 [ 191.015440][ T70] ? rt_spin_lock+0x1c1/0x3e0 [ 191.015463][ T70] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.015496][ T70] ? __pfx_queue_work_on+0x10/0x10 [ 191.015533][ T70] ? rt_spin_unlock+0x150/0x200 [ 191.015561][ T70] ? rt_spin_unlock+0x161/0x200 [ 191.015587][ T70] f2fs_handle_critical_error+0x354/0x510 [ 191.015621][ T70] f2fs_write_end_io+0x886/0xb60 [ 191.015673][ T70] __submit_merged_bio+0x27a/0x6a0 [ 191.015709][ T70] __submit_merged_write_cond+0x255/0x530 [ 191.015744][ T70] f2fs_write_data_pages+0x261d/0x3000 [ 191.015812][ T70] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 191.015859][ T70] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 191.015934][ T70] ? rtlock_slowlock_locked+0xd8/0x4010 [ 191.015979][ T70] ? do_raw_spin_lock+0x121/0x290 [ 191.016050][ T70] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 191.016081][ T70] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 191.016109][ T70] ? __lock_acquire+0xab9/0xd20 [ 191.016140][ T70] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 191.016170][ T70] do_writepages+0x32b/0x550 [ 191.016197][ T70] ? rt_mutex_slowunlock+0x493/0x8a0 [ 191.016217][ T70] ? rt_spin_lock+0x1c1/0x3e0 [ 191.016250][ T70] __writeback_single_inode+0x145/0x1000 [ 191.016287][ T70] writeback_sb_inodes+0x6b7/0xf60 [ 191.016321][ T70] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 191.016371][ T70] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 191.016443][ T70] ? rcu_is_watching+0x15/0xb0 [ 191.016476][ T70] wb_writeback+0x43b/0xaf0 [ 191.016501][ T70] ? __lock_acquire+0xab9/0xd20 [ 191.016543][ T70] ? queue_io+0x371/0x560 [ 191.016572][ T70] ? __pfx_wb_writeback+0x10/0x10 [ 191.016620][ T70] wb_workfn+0x40e/0xf00 [ 191.016660][ T70] ? __pfx_wb_workfn+0x10/0x10 [ 191.016688][ T70] ? __lock_acquire+0xab9/0xd20 [ 191.016733][ T70] ? process_scheduled_works+0x9ef/0x17b0 [ 191.016771][ T70] ? _raw_spin_unlock_irq+0x23/0x50 [ 191.016799][ T70] ? process_scheduled_works+0x9ef/0x17b0 [ 191.016828][ T70] ? process_scheduled_works+0x9ef/0x17b0 [ 191.016861][ T70] process_scheduled_works+0xae1/0x17b0 [ 191.016924][ T70] ? __pfx_process_scheduled_works+0x10/0x10 [ 191.016975][ T70] worker_thread+0x8a0/0xda0 [ 191.017049][ T70] kthread+0x711/0x8a0 [ 191.017076][ T70] ? __pfx_worker_thread+0x10/0x10 [ 191.017108][ T70] ? __pfx_kthread+0x10/0x10 [ 191.017127][ T70] ? rt_spin_unlock+0x150/0x200 [ 191.017155][ T70] ? rt_spin_unlock+0x161/0x200 [ 191.017175][ T70] ? __pfx_kthread+0x10/0x10 [ 191.017198][ T70] ret_from_fork+0x436/0x7d0 [ 191.017233][ T70] ? __pfx_ret_from_fork+0x10/0x10 [ 191.017270][ T70] ? __switch_to_asm+0x39/0x70 [ 191.017292][ T70] ? __switch_to_asm+0x33/0x70 [ 191.017312][ T70] ? __pfx_kthread+0x10/0x10 [ 191.017335][ T70] ret_from_fork_asm+0x1a/0x30 [ 191.017375][ T70] [ 191.017385][ T70] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 191.017459][ T70] CPU: 1 UID: 0 PID: 70 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 191.017483][ T70] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 191.017498][ T70] Workqueue: writeback wb_workfn (flush-7:1) [ 191.017526][ T70] Call Trace: [ 191.017535][ T70] [ 191.017544][ T70] dump_stack_lvl+0x189/0x250 [ 191.017577][ T70] ? reacquire_held_locks+0x127/0x1d0 [ 191.017600][ T70] ? rt_spin_lock+0x1c1/0x3e0 [ 191.017625][ T70] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.017659][ T70] ? __pfx_queue_work_on+0x10/0x10 [ 191.017696][ T70] ? rt_spin_unlock+0x150/0x200 [ 191.017728][ T70] ? rt_spin_unlock+0x161/0x200 [ 191.017754][ T70] f2fs_handle_critical_error+0x354/0x510 [ 191.017789][ T70] f2fs_write_end_io+0x886/0xb60 [ 191.017841][ T70] __submit_merged_bio+0x27a/0x6a0 [ 191.017878][ T70] __submit_merged_write_cond+0x255/0x530 [ 191.017920][ T70] f2fs_write_data_pages+0x261d/0x3000 [ 191.017996][ T70] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 191.018050][ T70] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 191.018124][ T70] ? rtlock_slowlock_locked+0xd8/0x4010 [ 191.018171][ T70] ? do_raw_spin_lock+0x121/0x290 [ 191.018221][ T70] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 191.018251][ T70] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 191.018282][ T70] ? __lock_acquire+0xab9/0xd20 [ 191.018313][ T70] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 191.018346][ T70] do_writepages+0x32b/0x550 [ 191.018373][ T70] ? rt_mutex_slowunlock+0x493/0x8a0 [ 191.018394][ T70] ? rt_spin_lock+0x1c1/0x3e0 [ 191.018431][ T70] __writeback_single_inode+0x145/0x1000 [ 191.018472][ T70] writeback_sb_inodes+0x6b7/0xf60 [ 191.018505][ T70] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 191.018562][ T70] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 191.018647][ T70] ? rcu_is_watching+0x15/0xb0 [ 191.018683][ T70] wb_writeback+0x43b/0xaf0 [ 191.018708][ T70] ? __lock_acquire+0xab9/0xd20 [ 191.018750][ T70] ? queue_io+0x371/0x560 [ 191.018783][ T70] ? __pfx_wb_writeback+0x10/0x10 [ 191.018834][ T70] wb_workfn+0x40e/0xf00 [ 191.018878][ T70] ? __pfx_wb_workfn+0x10/0x10 [ 191.018906][ T70] ? __lock_acquire+0xab9/0xd20 [ 191.018953][ T70] ? process_scheduled_works+0x9ef/0x17b0 [ 191.018993][ T70] ? _raw_spin_unlock_irq+0x23/0x50 [ 191.019029][ T70] ? process_scheduled_works+0x9ef/0x17b0 [ 191.019058][ T70] ? process_scheduled_works+0x9ef/0x17b0 [ 191.019091][ T70] process_scheduled_works+0xae1/0x17b0 [ 191.019163][ T70] ? __pfx_process_scheduled_works+0x10/0x10 [ 191.019217][ T70] worker_thread+0x8a0/0xda0 [ 191.019283][ T70] kthread+0x711/0x8a0 [ 191.019310][ T70] ? __pfx_worker_thread+0x10/0x10 [ 191.019341][ T70] ? __pfx_kthread+0x10/0x10 [ 191.019360][ T70] ? rt_spin_unlock+0x150/0x200 [ 191.019390][ T70] ? rt_spin_unlock+0x161/0x200 [ 191.019409][ T70] ? __pfx_kthread+0x10/0x10 [ 191.019433][ T70] ret_from_fork+0x436/0x7d0 [ 191.019467][ T70] ? __pfx_ret_from_fork+0x10/0x10 [ 191.019506][ T70] ? __switch_to_asm+0x39/0x70 [ 191.019526][ T70] ? __switch_to_asm+0x33/0x70 [ 191.019546][ T70] ? __pfx_kthread+0x10/0x10 [ 191.019570][ T70] ret_from_fork_asm+0x1a/0x30 [ 191.019614][ T70] [ 191.059692][ T6855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.077464][ T6855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.193645][ T7076] loop4: detected capacity change from 0 to 2048 [ 191.401345][ T7076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.502246][ T70] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 191.564577][ T38] audit: type=1800 audit(1759667360.438:14): pid=7076 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.213" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 191.570910][ T6029] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.863946][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.258400][ T7082] loop4: detected capacity change from 0 to 4096 [ 192.293505][ T7065] loop3: detected capacity change from 0 to 32768 [ 192.342184][ T7065] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 192.575232][ T7080] loop5: detected capacity change from 0 to 32768 [ 192.601644][ T7065] XFS (loop3): Ending clean mount [ 192.617134][ T7082] [ 192.617146][ T7082] ====================================================== [ 192.617157][ T7082] WARNING: possible circular locking dependency detected [ 192.617171][ T7082] syzkaller #0 Not tainted [ 192.617182][ T7082] ------------------------------------------------------ [ 192.617192][ T7082] syz.4.216/7082 is trying to acquire lock: [ 192.617204][ T7082] ffff88805b6664e0 (&ni->ni_lock#2/5){+.+.}-{4:4}, at: attr_data_get_block+0x2ec/0x1ec0 [ 192.617290][ T7082] [ 192.617290][ T7082] but task is already holding lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 192.617297][ T7082] ffff88803b59bbd0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x214/0x4d0 [ 192.617353][ T7082] [ 192.617353][ T7082] which lock already depends on the new lock. [ 192.617353][ T7082] [ 192.617362][ T7082] [ 192.617362][ T7082] the existing dependency chain (in reverse order) is: [ 192.617370][ T7082] [ 192.617370][ T7082] -> #1 (&mm->mmap_lock){++++}-{4:4}: [ 192.617400][ T7082] lock_acquire+0x120/0x360 [ 192.617434][ T7082] __might_fault+0xcc/0x130 [ 192.617465][ T7082] _copy_to_user+0x2c/0xb0 [ 192.617484][ T7082] fiemap_fill_next_extent+0x1c0/0x390 [ 192.617509][ T7082] ni_fiemap+0x89c/0xbf0 [ 192.617536][ T7082] ntfs_fiemap+0x11d/0x1a0 [ 192.617566][ T7082] do_vfs_ioctl+0x1188/0x1440 [ 192.617588][ T7082] __se_sys_ioctl+0x82/0x170 [ 192.617610][ T7082] do_syscall_64+0xfa/0x3b0 [ 192.617640][ T7082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.617662][ T7082] [ 192.617662][ T7082] -> #0 (&ni->ni_lock#2/5){+.+.}-{4:4}: [ 192.617705][ T7082] validate_chain+0xb9b/0x2140 [ 192.617725][ T7082] __lock_acquire+0xab9/0xd20 [ 192.617754][ T7082] lock_acquire+0x120/0x360 [ 192.617783][ T7082] mutex_lock_nested+0x5a/0x1d0 [ 192.617802][ T7082] attr_data_get_block+0x2ec/0x1ec0 [ 192.617832][ T7082] ntfs_file_mmap_prepare+0x527/0x7c0 [ 192.617876][ T7082] mmap_region+0xb4f/0x20f0 [ 192.617899][ T7082] do_mmap+0xc23/0x10c0 [ 192.617925][ T7082] vm_mmap_pgoff+0x2a9/0x4d0 [ 192.617951][ T7082] ksys_mmap_pgoff+0x4e9/0x720 [ 192.617978][ T7082] do_syscall_64+0xfa/0x3b0 [ 192.618006][ T7082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.618027][ T7082] [ 192.618027][ T7082] other info that might help us debug this: [ 192.618027][ T7082] [ 192.618035][ T7082] Possible unsafe locking scenario: [ 192.618035][ T7082] [ 192.618042][ T7082] CPU0 CPU1 [ 192.618049][ T7082] ---- ---- [ 192.618056][ T7082] lock(&mm->mmap_lock); [ 192.618072][ T7082] lock(&ni->ni_lock#2/5); [ 192.618099][ T7082] lock(&mm->mmap_lock); [ 192.618115][ T7082] lock(&ni->ni_lock#2/5); [ 192.618141][ T7082] [ 192.618141][ T7082] *** DEADLOCK *** [ 192.618141][ T7082] [ 192.618146][ T7082] 1 lock held by syz.4.216/7082: [ 192.618160][ T7082] #0: ffff88803b59bbd0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x214/0x4d0 [ 192.618219][ T7082] [ 192.618219][ T7082] stack backtrace: [ 192.618232][ T7082] CPU: 1 UID: 0 PID: 7082 Comm: syz.4.216 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 192.618257][ T7082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 192.618271][ T7082] Call Trace: [ 192.618280][ T7082] [ 192.618290][ T7082] dump_stack_lvl+0x189/0x250 [ 192.618326][ T7082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.618358][ T7082] ? __pfx__printk+0x10/0x10 [ 192.618384][ T7082] ? print_lock_name+0xde/0x100 [ 192.618409][ T7082] print_circular_bug+0x2ee/0x310 [ 192.618434][ T7082] check_noncircular+0x134/0x160 [ 192.618462][ T7082] validate_chain+0xb9b/0x2140 [ 192.618491][ T7082] ? look_up_lock_class+0x74/0x170 [ 192.618520][ T7082] ? register_lock_class+0x51/0x320 [ 192.618554][ T7082] __lock_acquire+0xab9/0xd20 [ 192.618591][ T7082] ? attr_data_get_block+0x2ec/0x1ec0 [ 192.618623][ T7082] lock_acquire+0x120/0x360 [ 192.618654][ T7082] ? attr_data_get_block+0x2ec/0x1ec0 [ 192.618693][ T7082] ? attr_data_get_block+0x2ec/0x1ec0 [ 192.618723][ T7082] mutex_lock_nested+0x5a/0x1d0 [ 192.618744][ T7082] ? attr_data_get_block+0x2ec/0x1ec0 [ 192.618777][ T7082] attr_data_get_block+0x2ec/0x1ec0 [ 192.618808][ T7082] ? rt_spin_unlock+0x161/0x200 [ 192.618836][ T7082] ? __pfx_attr_data_get_block+0x10/0x10 [ 192.618878][ T7082] ? __virt_addr_valid+0x1c8/0x5c0 [ 192.618902][ T7082] ? ___free_pages+0xb2/0x230 [ 192.618924][ T7082] ? tlb_finish_mmu+0x165/0x1d0 [ 192.618947][ T7082] ? vms_clear_ptes+0x42c/0x540 [ 192.618978][ T7082] ntfs_file_mmap_prepare+0x527/0x7c0 [ 192.619015][ T7082] ? __pfx_ntfs_file_mmap_prepare+0x10/0x10 [ 192.619058][ T7082] ? mas_find+0xb40/0xd30 [ 192.619090][ T7082] mmap_region+0xb4f/0x20f0 [ 192.619121][ T7082] ? finish_task_switch+0x32f/0x950 [ 192.619145][ T7082] ? __pfx_mmap_region+0x10/0x10 [ 192.619206][ T7082] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 192.619244][ T7082] ? rcu_is_watching+0x15/0xb0 [ 192.619267][ T7082] ? cap_capable+0x11f/0x460 [ 192.619299][ T7082] ? cap_mmap_addr+0xb0/0x100 [ 192.619318][ T7082] ? safesetid_security_capable+0xa9/0x1a0 [ 192.619354][ T7082] ? bpf_lsm_capable+0x9/0x20 [ 192.619378][ T7082] ? security_capable+0x7e/0x2e0 [ 192.619400][ T7082] ? shmem_mapping+0xd/0x50 [ 192.619427][ T7082] ? memfd_check_seals_mmap+0xcb/0x210 [ 192.619451][ T7082] do_mmap+0xc23/0x10c0 [ 192.619484][ T7082] ? __pfx_do_mmap+0x10/0x10 [ 192.619517][ T7082] ? rwbase_write_lock+0x56f/0x750 [ 192.619555][ T7082] vm_mmap_pgoff+0x2a9/0x4d0 [ 192.619586][ T7082] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 192.619619][ T7082] ? __fget_files+0x2a/0x420 [ 192.619651][ T7082] ? __fget_files+0x3a6/0x420 [ 192.619681][ T7082] ? __fget_files+0x2a/0x420 [ 192.619715][ T7082] ksys_mmap_pgoff+0x4e9/0x720 [ 192.619746][ T7082] ? __x64_sys_mmap+0x7f/0x140 [ 192.619779][ T7082] do_syscall_64+0xfa/0x3b0 [ 192.619807][ T7082] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.619834][ T7082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.619866][ T7082] ? clear_bhb_loop+0x60/0xb0 [ 192.619892][ T7082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.619913][ T7082] RIP: 0033:0x7fc94122eec9 [ 192.619931][ T7082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.619950][ T7082] RSP: 002b:00007fc93f496038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 192.619973][ T7082] RAX: ffffffffffffffda RBX: 00007fc941485fa0 RCX: 00007fc94122eec9 [ 192.619988][ T7082] RDX: 8088e3ad122bc192 RSI: 0000000000600000 RDI: 0000200000000000 [ 192.620002][ T7082] RBP: 00007fc9412b1f91 R08: 0000000000000004 R09: 0000000001000000 [ 192.620016][ T7082] R10: 0000000004002011 R11: 0000000000000246 R12: 0000000000000000 [ 192.620028][ T7082] R13: 00007fc941486038 R14: 00007fc941485fa0 R15: 00007ffd7183dc18 [ 192.620051][ T7082] [ 192.630547][ T7080] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 192.703269][ T7080] XFS (loop5): Ending clean mount [ 192.874684][ T7100] loop1: detected capacity change from 0 to 512 [ 192.933909][ T7100] EXT4-fs error (device loop1): ext4_get_journal_inode:5808: comm syz.1.214: inode #1792: comm syz.1.214: iget: illegal inode # [ 192.934521][ T7100] EXT4-fs (loop1): Remounting filesystem read-only [ 192.934541][ T7100] EXT4-fs (loop1): no journal found [ 192.934554][ T7100] EXT4-fs (loop1): can't get journal size [ 192.945023][ T7065] XFS (loop3): Quotacheck needed: Please wait. [ 192.952877][ T7100] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 192.954642][ T7100] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 192.956147][ T7100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.016773][ T7100] EXT4-fs (loop1): shut down requested (1) [ 193.045478][ T7065] XFS (loop3): Quotacheck: Done. [ 193.395432][ T6029] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 193.397175][ T7100] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 193.504008][ T5811] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 193.537878][ T6855] team0: Port device team_slave_0 added [ 194.426391][ T7100] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.437985][ T3522] hsr_slave_0: left promiscuous mode [ 195.477952][ T3522] hsr_slave_1: left promiscuous mode [ 195.478614][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.478647][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.519755][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.519781][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.588416][ T3522] veth1_macvtap: left promiscuous mode [ 195.588484][ T3522] veth0_macvtap: left promiscuous mode [ 195.588639][ T3522] veth1_vlan: left promiscuous mode [ 195.588736][ T3522] veth0_vlan: left promiscuous mode [ 197.309720][ T3522] team0 (unregistering): Port device team_slave_1 removed [ 197.498419][ T3522] team0 (unregistering): Port device team_slave_0 removed [ 199.581755][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.581808][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.680088][ T3522] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.909234][ T3522] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.139806][ T3522] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.350106][ T3522] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0