last executing test programs: 1m35.325404273s ago: executing program 3 (id=24): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$netlink(r0, &(0x7f0000005d80)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x200}, 0x2, &(0x7f0000005cc0)=[{&(0x7f0000000180)=ANY=[], 0x28}, {&(0x7f0000004540)={0x10, 0x37, 0x1, 0x70bd26, 0x25dfdc02}, 0x10}], 0x2, 0x0, 0x0, 0x44011}, 0x40830) 1m35.218986512s ago: executing program 3 (id=28): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaa6, &(0x7f0000001100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x401, 0x9, 0xfffffffffffffffe}) 1m35.038784796s ago: executing program 3 (id=34): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'vlan0\x00', 0x4}, 0x18) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040)=ANY=[], 0x4) 1m34.944065481s ago: executing program 3 (id=35): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$nfs4(&(0x7f0000000180)='/', &(0x7f00000001c0)='./file1\x00', 0x0, 0x2085008, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x8000, &(0x7f0000000240)={0x0, 0x0, 0x40000}, 0x20) 1m34.848321057s ago: executing program 3 (id=37): syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_CLASS_OF_DEV={{}, 0xc}}}, 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) 1m33.027214813s ago: executing program 3 (id=79): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000600)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf2509000000240004"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 1m32.881998745s ago: executing program 32 (id=79): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000600)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf2509000000240004"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 55.036976701s ago: executing program 0 (id=1123): mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2002, &(0x7f00000001c0)=0x3ff, 0x20, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='numa_maps\x00') read$FUSE(r0, &(0x7f0000000b40)={0x2020}, 0x2020) 54.986400898s ago: executing program 0 (id=1124): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000100)=0x2, 0x4) 54.852838112s ago: executing program 0 (id=1125): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe4d, 0x10, 0x0, 0x0, 0x0}}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) 54.832626294s ago: executing program 0 (id=1126): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$nfs4(&(0x7f0000000180)='/', &(0x7f00000001c0)='./file1\x00', 0x0, 0x2085008, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x8000, &(0x7f0000000240)={0x0, 0x0, 0x40000}, 0x20) 54.807214018s ago: executing program 0 (id=1127): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x173242, 0x22) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x401, 0x1000, r0, 0x0) 54.496250936s ago: executing program 0 (id=1133): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000380)={0x0, 0x0, 0x7, 0xd012}) cachestat(r0, &(0x7f0000000200)={0x10011}, &(0x7f0000000000), 0x0) 54.454537057s ago: executing program 33 (id=1133): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000380)={0x0, 0x0, 0x7, 0xd012}) cachestat(r0, &(0x7f0000000200)={0x10011}, &(0x7f0000000000), 0x0) 28.844806137s ago: executing program 5 (id=2024): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 28.703607405s ago: executing program 5 (id=2036): syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000000)=ANY=[@ANYBLOB="6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00ecb1696642cb97380abf69dce83f1c1dd0eb96506352e4c7d6b88109eebe378da654d5d91d6a45e65053658f366b87b26180bdb0a0e2ef4103c4336999ae591f101bac606a7595fc5a131d32d3723526dc1d4b5c1ce2f300a7eb59286590c97f58ae092a495a425b0bec6265"], 0x1, 0x9e15, &(0x7f000000a040)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 28.616188415s ago: executing program 5 (id=2038): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000100)=0x2, 0x4) 28.190958546s ago: executing program 5 (id=2040): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$nfs4(&(0x7f0000000180)='/', &(0x7f00000001c0)='./file1\x00', 0x0, 0x2085008, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x8000, &(0x7f0000000240)={0x0, 0x0, 0x40000}, 0x20) 28.083417548s ago: executing program 5 (id=2044): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$dmmidi(&(0x7f0000000c00), 0x2, 0x80) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000c40)) 27.522054437s ago: executing program 5 (id=2056): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x173242, 0x22) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x401, 0x1000, r0, 0x0) 27.327014794s ago: executing program 34 (id=2056): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x173242, 0x22) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x401, 0x1000, r0, 0x0) 2.031167235s ago: executing program 1 (id=2856): syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.905156999s ago: executing program 1 (id=2851): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 1.785869434s ago: executing program 1 (id=2854): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000002940), &(0x7f0000000000)=0x4) 1.754150863s ago: executing program 1 (id=2857): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) sendto$inet6(r0, 0x0, 0xffffffffffffff94, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x1000, @mcast2}, 0x1c) 1.666032466s ago: executing program 1 (id=2858): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 1.141796249s ago: executing program 4 (id=2870): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.141587965s ago: executing program 4 (id=2871): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ppoll(&(0x7f00000000c0)=[{r0, 0x1007}], 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000280)=@multiplanar_overlay={0x9, 0x1, 0x4, 0x0, 0x1, {}, {0x0, 0x8, 0x5, 0xd6, 0xf9, 0x8, "ce7bd827"}, 0x9151, 0x3, {0x0}}) 853.436138ms ago: executing program 1 (id=2882): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x9) 663.927404ms ago: executing program 7 (id=2892): r0 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) 640.797479ms ago: executing program 7 (id=2893): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1e) bind$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x2, @private=0xa010100}}, 0x1e) 580.392911ms ago: executing program 7 (id=2897): r0 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x800000001fe, 0x20382) r1 = dup(r0) read$FUSE(r1, &(0x7f0000002500)={0x2020}, 0x2020) 509.476465ms ago: executing program 7 (id=2901): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) flock(r0, 0x6) read$eventfd(r0, &(0x7f0000001ec0), 0x8) 433.769095ms ago: executing program 7 (id=2907): ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000100)={0xda, 0x7}) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) 433.498234ms ago: executing program 7 (id=2909): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) statx(r0, 0x0, 0x1000, 0x10, 0x0) 273.281757ms ago: executing program 4 (id=2921): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r0, 0x4b64, 0x0) 273.12374ms ago: executing program 4 (id=2922): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f0000001040)=@hci={0x1f, 0x1, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="90"], 0x10}, 0x4004000) 272.920206ms ago: executing program 6 (id=2923): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004004}, 0x24004040) 260.919074ms ago: executing program 2 (id=2924): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000280)={0xf0f022}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @vbi={0x5, 0x6, 0x6, 0x3132564e, [0x1, 0x3ae], [0x5, 0x101], 0x1}}) 235.106267ms ago: executing program 6 (id=2925): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket(0x2, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x88, 0x68, 0x0, 0x20000000) 225.567532ms ago: executing program 2 (id=2926): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc08c5332, &(0x7f0000000400)={{0x40, 0x3}, 0x1, 0x4, 0x88, {}, 0x0, 0xffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)) 156.540003ms ago: executing program 2 (id=2927): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="1408000000000000b89e08dc88a8", 0x0, 0xfe2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 156.221239ms ago: executing program 6 (id=2928): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0xa000000, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700260a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 155.9199ms ago: executing program 2 (id=2929): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$usbmon(r0, &(0x7f00000009c0)=""/30, 0x1e) pread64(r0, &(0x7f0000000140)=""/121, 0x79, 0x10000b5) 155.755072ms ago: executing program 4 (id=2930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0027", @ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 155.591398ms ago: executing program 6 (id=2931): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/125, 0x7d) 132.185651ms ago: executing program 2 (id=2932): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 836.213µs ago: executing program 4 (id=2933): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) readv(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000080)=""/58, 0x3a}], 0x2) 574.251µs ago: executing program 6 (id=2934): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 244.567µs ago: executing program 2 (id=2935): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x5, 0x550b, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x1a37c1, 0x1e4) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x1, 0x7f, 0x7}) 0s ago: executing program 6 (id=2936): syz_mount_image$erofs(&(0x7f0000000240), &(0x7f0000000400)='./file1\x00', 0x8, &(0x7f0000002500)=ANY=[], 0x1, 0x1d1, &(0x7f0000002300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xd8580, 0x11c) finit_module(r0, 0x0, 0x1) kernel console output (not intermixed with test programs): ) failed [ 95.873291][T12981] FAT-fs (loop6): Directory bread(block 68) failed [ 95.873305][T12981] FAT-fs (loop6): Directory bread(block 69) failed [ 95.873328][T12981] FAT-fs (loop6): Directory bread(block 70) failed [ 95.873341][T12981] FAT-fs (loop6): Directory bread(block 71) failed [ 95.873363][T12981] FAT-fs (loop6): Directory bread(block 72) failed [ 95.873376][T12981] FAT-fs (loop6): Directory bread(block 73) failed [ 96.164236][T12986] loop2: detected capacity change from 0 to 40427 [ 96.166729][T12986] F2FS-fs (loop2): Image doesn't support compression [ 96.176957][T12986] F2FS-fs (loop2): build fault injection rate: 690 [ 96.177761][T12986] F2FS-fs (loop2): invalid crc value [ 96.196298][T12986] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 96.198091][T12986] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 96.291941][ T9908] syz-executor: attempt to access beyond end of device [ 96.291941][ T9908] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 96.291995][ T9908] CPU: 0 UID: 0 PID: 9908 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 96.292004][ T9908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 96.292008][ T9908] Call trace: [ 96.292011][ T9908] show_stack+0x2c/0x3c (C) [ 96.292023][ T9908] __dump_stack+0x30/0x40 [ 96.292029][ T9908] dump_stack_lvl+0xd8/0x12c [ 96.292034][ T9908] dump_stack+0x1c/0x28 [ 96.292038][ T9908] f2fs_handle_critical_error+0x34c/0x4b8 [ 96.292046][ T9908] f2fs_stop_checkpoint+0x5c/0x70 [ 96.292051][ T9908] f2fs_write_end_io+0x768/0xa70 [ 96.292057][ T9908] bio_endio+0x858/0x894 [ 96.292062][ T9908] submit_bio_noacct+0xd64/0x186c [ 96.292068][ T9908] submit_bio+0x3b4/0x550 [ 96.292074][ T9908] f2fs_submit_write_bio+0x13c/0x324 [ 96.292080][ T9908] __submit_merged_bio+0x254/0x704 [ 96.292086][ T9908] __submit_merged_write_cond+0x23c/0x4ac [ 96.292092][ T9908] f2fs_write_data_pages+0x1d28/0x2634 [ 96.292098][ T9908] do_writepages+0x270/0x468 [ 96.292105][ T9908] filemap_fdatawrite+0x14c/0x1f4 [ 96.292110][ T9908] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 96.292115][ T9908] f2fs_write_checkpoint+0x70c/0x1c30 [ 96.292120][ T9908] kill_f2fs_super+0x228/0x594 [ 96.292126][ T9908] deactivate_locked_super+0xc4/0x12c [ 96.292133][ T9908] deactivate_super+0xe0/0x100 [ 96.292138][ T9908] cleanup_mnt+0x31c/0x3ac [ 96.292145][ T9908] __cleanup_mnt+0x20/0x30 [ 96.292150][ T9908] task_work_run+0x1dc/0x260 [ 96.292157][ T9908] exit_to_user_mode_loop+0xfc/0x178 [ 96.292163][ T9908] el0_svc+0x170/0x254 [ 96.292170][ T9908] el0t_64_sync_handler+0x84/0x12c [ 96.292176][ T9908] el0t_64_sync+0x198/0x19c [ 96.292183][ T9908] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 96.304905][T12988] loop6: detected capacity change from 0 to 32768 [ 96.310215][T12988] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2055 (12988) [ 96.327265][T12988] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 96.327348][T12988] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 96.359130][ T590] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.361463][T12988] BTRFS info (device loop6): enabling ssd optimizations [ 96.361491][T12988] BTRFS info (device loop6): turning on async discard [ 96.361500][T12988] BTRFS info (device loop6): enabling free space tree [ 96.396340][T13009] loop4: detected capacity change from 0 to 1024 [ 96.424064][T10343] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 96.461074][T10473] hfsplus: b-tree write err: -5, ino 4 [ 96.483660][ T590] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.621693][T13014] loop2: detected capacity change from 0 to 64 [ 96.651613][T13014] syz.2.2067: attempt to access beyond end of device [ 96.651613][T13014] loop2: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 96.651653][T13014] Buffer I/O error on dev loop2, logical block 134217734, async page read [ 96.697684][ T590] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.781107][ T6561] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.786108][ T590] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.801707][ T6561] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.802955][T13022] netlink: 'syz.4.2070': attribute type 298 has an invalid length. [ 96.826781][ T6561] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.855300][ T6561] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.861406][ T6561] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.930863][ T6552] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.933490][ T6552] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.934872][ T6552] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.936547][ T6552] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.938864][ T6552] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.003677][ T590] bridge_slave_1: left allmulticast mode [ 97.003713][ T590] bridge_slave_1: left promiscuous mode [ 97.003817][ T590] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.018015][ T590] bridge_slave_0: left allmulticast mode [ 97.018999][ T590] bridge_slave_0: left promiscuous mode [ 97.020302][ T590] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.248688][ T590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.271562][ T590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.311397][ T590] bond0 (unregistering): Released all slaves [ 97.314639][ T590] bond1 (unregistering): Released all slaves [ 97.381493][ T6567] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 97.386398][ T590] tipc: Left network mode [ 97.417801][T13028] chnl_net:caif_netlink_parms(): no params data found [ 97.424372][ T590] IPVS: stopping master sync thread 10840 ... [ 97.435940][T13017] chnl_net:caif_netlink_parms(): no params data found [ 97.518582][T13028] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.519966][T13028] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.521263][T13028] bridge_slave_0: entered allmulticast mode [ 97.521716][T13028] bridge_slave_0: entered promiscuous mode [ 97.522515][T13028] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.522531][T13028] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.522579][T13028] bridge_slave_1: entered allmulticast mode [ 97.523010][T13028] bridge_slave_1: entered promiscuous mode [ 97.523736][T13017] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.528895][T13017] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.529010][T13017] bridge_slave_0: entered allmulticast mode [ 97.529805][T13017] bridge_slave_0: entered promiscuous mode [ 97.531537][T13017] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.531585][T13017] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.531644][T13017] bridge_slave_1: entered allmulticast mode [ 97.532118][T13017] bridge_slave_1: entered promiscuous mode [ 97.580133][T13028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.583265][T13028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.584366][T13017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.589612][T13017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.665283][T13028] team0: Port device team_slave_0 added [ 97.667060][T13017] team0: Port device team_slave_0 added [ 97.669077][T13017] team0: Port device team_slave_1 added [ 97.671895][T13028] team0: Port device team_slave_1 added [ 97.688626][T13017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.689906][T13017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.695559][T13017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.698028][T13017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.700082][T13017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.704762][T13017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.736484][ T590] hsr_slave_0: left promiscuous mode [ 97.737592][ T590] hsr_slave_1: left promiscuous mode [ 97.737940][ T590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.737950][ T590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.738728][ T590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.738738][ T590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.746674][ T590] veth1_macvtap: left promiscuous mode [ 97.746723][ T590] veth0_macvtap: left promiscuous mode [ 97.747567][ T590] veth1_vlan: left promiscuous mode [ 97.747606][ T590] veth0_vlan: left promiscuous mode [ 97.914969][ T590] team0 (unregistering): Port device team_slave_1 removed [ 97.929803][ T590] team0 (unregistering): Port device team_slave_0 removed [ 98.078325][T13028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.078349][T13028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.078363][T13028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.079013][T13028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.079020][T13028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.079033][T13028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.088321][T13017] hsr_slave_0: entered promiscuous mode [ 98.088632][T13017] hsr_slave_1: entered promiscuous mode [ 98.088815][T13017] debugfs: 'hsr0' already exists in 'hsr' [ 98.088825][T13017] Cannot create hsr debugfs directory [ 98.137360][T13028] hsr_slave_0: entered promiscuous mode [ 98.137745][T13028] hsr_slave_1: entered promiscuous mode [ 98.137971][T13028] debugfs: 'hsr0' already exists in 'hsr' [ 98.137980][T13028] Cannot create hsr debugfs directory [ 98.211776][T13017] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 98.213437][T13017] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 98.226426][T13017] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 98.228904][T13017] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 98.249267][T13028] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.258604][T13017] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.258648][T13017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.258760][T13017] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.258786][T13017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.279806][T13017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.285564][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.286878][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.312608][T13017] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.315771][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.315810][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.320121][ T590] IPVS: stop unused estimator thread 0... [ 98.323822][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.323867][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.338162][T13028] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.623080][T13028] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.648085][T13017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.667553][T13028] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.709964][T13017] veth0_vlan: entered promiscuous mode [ 98.713967][T13017] veth1_vlan: entered promiscuous mode [ 98.719655][T13017] veth0_macvtap: entered promiscuous mode [ 98.723384][T13017] veth1_macvtap: entered promiscuous mode [ 98.728727][ T590] bridge_slave_1: left allmulticast mode [ 98.729702][ T590] bridge_slave_1: left promiscuous mode [ 98.731456][ T590] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.733513][ T590] bridge_slave_0: left allmulticast mode [ 98.733533][ T590] bridge_slave_0: left promiscuous mode [ 98.733607][ T590] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.738494][ T590] batman_adv: batadv0: Interface deactivated: gretap1 [ 98.873297][ T590] batman_adv: batadv0: Removing interface: gretap1 [ 98.900393][ T6567] Bluetooth: hci1: command tx timeout [ 98.969252][ T590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.982680][ T590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.990451][ T6567] Bluetooth: hci3: command tx timeout [ 99.021349][ T590] bond0 (unregistering): Released all slaves [ 99.037835][T13017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.038903][T13017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.041729][ T15] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.043771][ T15] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.043812][ T15] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.043832][ T15] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.051309][T13028] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.053864][T13028] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.056065][T13028] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.058395][T13028] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.112481][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.112506][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.127484][T13028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.129509][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.129533][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.223347][T13028] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.226586][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.226620][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.229852][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.229899][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.299011][T13134] loop6: detected capacity change from 0 to 128 [ 99.308242][T13136] loop4: detected capacity change from 0 to 512 [ 99.308808][T13136] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.318728][T13134] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 99.318770][T13134] System zones: 1-3, 19-19, 35-36 [ 99.322496][T13134] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.327816][T13139] loop2: detected capacity change from 0 to 512 [ 99.335658][T13139] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.352258][T10343] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.353971][T13139] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 99.385095][ T9908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.431486][T13028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.439460][T13028] veth0_vlan: entered promiscuous mode [ 99.499581][T13157] loop7: detected capacity change from 0 to 256 [ 99.501527][ T590] hsr_slave_0: left promiscuous mode [ 99.524757][T13157] FAT-fs (loop7): Directory bread(block 64) failed [ 99.524794][T13157] FAT-fs (loop7): Directory bread(block 65) failed [ 99.524816][T13157] FAT-fs (loop7): Directory bread(block 66) failed [ 99.524826][T13157] FAT-fs (loop7): Directory bread(block 67) failed [ 99.524846][T13157] FAT-fs (loop7): Directory bread(block 68) failed [ 99.524856][T13157] FAT-fs (loop7): Directory bread(block 69) failed [ 99.524875][T13157] FAT-fs (loop7): Directory bread(block 70) failed [ 99.524884][T13157] FAT-fs (loop7): Directory bread(block 71) failed [ 99.524906][T13157] FAT-fs (loop7): Directory bread(block 72) failed [ 99.524915][T13157] FAT-fs (loop7): Directory bread(block 73) failed [ 99.535261][ T590] hsr_slave_1: left promiscuous mode [ 99.535671][ T590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.535702][ T590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.552971][ T590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.554501][ T590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.590394][ T590] veth1_macvtap: left promiscuous mode [ 99.590503][ T590] veth0_macvtap: left promiscuous mode [ 99.590571][ T590] veth1_vlan: left promiscuous mode [ 99.590618][ T590] veth0_vlan: left promiscuous mode [ 99.620937][T13156] loop6: detected capacity change from 0 to 40427 [ 99.624221][T13156] F2FS-fs (loop6): Image doesn't support compression [ 99.624252][T13156] F2FS-fs (loop6): build fault injection rate: 690 [ 99.624955][T13156] F2FS-fs (loop6): invalid crc value [ 99.660093][T13156] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 99.665323][T13156] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 99.711031][T13166] loop7: detected capacity change from 0 to 64 [ 99.723238][T13168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2077'. [ 99.723284][T13168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2077'. [ 99.745245][T13166] syz.7.2073: attempt to access beyond end of device [ 99.745245][T13166] loop7: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 99.745289][T13166] Buffer I/O error on dev loop7, logical block 134217734, async page read [ 99.769454][T10343] syz-executor: attempt to access beyond end of device [ 99.769454][T10343] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.769510][T10343] CPU: 1 UID: 0 PID: 10343 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 99.769518][T10343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 99.769523][T10343] Call trace: [ 99.769526][T10343] show_stack+0x2c/0x3c (C) [ 99.769541][T10343] __dump_stack+0x30/0x40 [ 99.769548][T10343] dump_stack_lvl+0xd8/0x12c [ 99.769553][T10343] dump_stack+0x1c/0x28 [ 99.769558][T10343] f2fs_handle_critical_error+0x34c/0x4b8 [ 99.769566][T10343] f2fs_stop_checkpoint+0x5c/0x70 [ 99.769571][T10343] f2fs_write_end_io+0x768/0xa70 [ 99.769578][T10343] bio_endio+0x858/0x894 [ 99.769583][T10343] submit_bio_noacct+0xd64/0x186c [ 99.769589][T10343] submit_bio+0x3b4/0x550 [ 99.769595][T10343] f2fs_submit_write_bio+0x13c/0x324 [ 99.769601][T10343] __submit_merged_bio+0x254/0x704 [ 99.769606][T10343] __submit_merged_write_cond+0x23c/0x4ac [ 99.769612][T10343] f2fs_write_data_pages+0x1d28/0x2634 [ 99.769618][T10343] do_writepages+0x270/0x468 [ 99.769626][T10343] filemap_fdatawrite+0x14c/0x1f4 [ 99.769631][T10343] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 99.769636][T10343] f2fs_write_checkpoint+0x70c/0x1c30 [ 99.769641][T10343] kill_f2fs_super+0x228/0x594 [ 99.769647][T10343] deactivate_locked_super+0xc4/0x12c [ 99.769654][T10343] deactivate_super+0xe0/0x100 [ 99.769659][T10343] cleanup_mnt+0x31c/0x3ac [ 99.769666][T10343] __cleanup_mnt+0x20/0x30 [ 99.769672][T10343] task_work_run+0x1dc/0x260 [ 99.769678][T10343] exit_to_user_mode_loop+0xfc/0x178 [ 99.769684][T10343] el0_svc+0x170/0x254 [ 99.769691][T10343] el0t_64_sync_handler+0x84/0x12c [ 99.769697][T10343] el0t_64_sync+0x198/0x19c [ 99.769704][T10343] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 99.920232][T13176] loop7: detected capacity change from 0 to 1024 [ 99.964228][T13176] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.985820][T13153] loop2: detected capacity change from 0 to 131072 [ 99.987972][T13153] F2FS-fs (loop2): Invalid log sectors per block(570425347) log sectorsize(9) [ 99.988013][T13153] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 99.989030][T13153] F2FS-fs (loop2): invalid crc value [ 99.997317][T13017] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.028242][T13153] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 100.051918][T13153] F2FS-fs (loop2): Bad quota inode 2:50331648 [ 100.053146][T13153] F2FS-fs (loop2): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 100.054992][T13153] F2FS-fs (loop2): Cannot turn on quotas: error -22 [ 100.055040][T13153] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 100.057093][T13153] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 100.057108][T13153] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b [ 100.077216][T13153] F2FS-fs (loop2): quota sysfile already exists [ 100.110252][T13194] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2086'. [ 100.112548][T13194] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2086'. [ 100.202751][ T590] team0 (unregistering): Port device team_slave_1 removed [ 100.217408][ T590] team0 (unregistering): Port device team_slave_0 removed [ 100.431799][T13180] sp0: Synchronizing with TNC [ 100.448958][T13028] veth1_vlan: entered promiscuous mode [ 100.510146][T13028] veth0_macvtap: entered promiscuous mode [ 100.514924][T13028] veth1_macvtap: entered promiscuous mode [ 100.529132][T13028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.542893][T13028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.592836][ T41] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.594928][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.594981][ T41] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.595000][ T41] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.658396][ T231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.658451][ T231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.688997][T13220] loop6: detected capacity change from 0 to 4096 [ 100.720400][T13222] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.730176][T13219] loop2: detected capacity change from 0 to 32768 [ 100.747458][T10473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.749449][T10473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.787591][T13219] JBD2: Ignoring recovery information on journal [ 100.814046][T13219] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 100.816631][T13228] loop4: detected capacity change from 0 to 1024 [ 100.835474][T13228] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.903872][T13240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2103'. [ 100.903909][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2103'. [ 100.909163][ T9675] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.923729][ T9908] ocfs2: Unmounting device (7,2) on (node local) [ 100.980848][ T6567] Bluetooth: hci1: command tx timeout [ 101.037808][T13253] loop4: detected capacity change from 0 to 64 [ 101.061034][ T6567] Bluetooth: hci3: command tx timeout [ 101.076947][T13257] loop7: detected capacity change from 0 to 4096 [ 101.083018][T13259] loop1: detected capacity change from 0 to 512 [ 101.116736][T13262] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.123933][T13264] loop6: detected capacity change from 0 to 512 [ 101.124415][T13264] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.143590][T13266] loop2: detected capacity change from 0 to 1024 [ 101.156088][T13259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.165269][T13266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.201075][T13259] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 101.215651][T13028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.218478][ T9908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.293469][T13282] loop1: detected capacity change from 0 to 128 [ 101.303338][T13282] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 101.303401][T13282] System zones: 1-3, 19-19, 35-36 [ 101.303958][T13282] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.364046][T13028] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.389109][T13274] loop7: detected capacity change from 0 to 40427 [ 101.395036][T13274] F2FS-fs (loop7): Image doesn't support compression [ 101.395083][T13274] F2FS-fs (loop7): build fault injection rate: 690 [ 101.408702][T13274] F2FS-fs (loop7): invalid crc value [ 101.449143][T13298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2121'. [ 101.449180][T13298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2121'. [ 101.470144][T13274] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 101.481727][T13274] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 101.559232][T13307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2142'. [ 101.559274][T13307] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2142'. [ 101.582243][T13017] syz-executor: attempt to access beyond end of device [ 101.582243][T13017] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 101.582298][T13017] CPU: 1 UID: 0 PID: 13017 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 101.582309][T13017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 101.582315][T13017] Call trace: [ 101.582319][T13017] show_stack+0x2c/0x3c (C) [ 101.582334][T13017] __dump_stack+0x30/0x40 [ 101.582342][T13017] dump_stack_lvl+0xd8/0x12c [ 101.582347][T13017] dump_stack+0x1c/0x28 [ 101.582352][T13017] f2fs_handle_critical_error+0x34c/0x4b8 [ 101.582362][T13017] f2fs_stop_checkpoint+0x5c/0x70 [ 101.582368][T13017] f2fs_write_end_io+0x768/0xa70 [ 101.582376][T13017] bio_endio+0x858/0x894 [ 101.582381][T13017] submit_bio_noacct+0xd64/0x186c [ 101.582389][T13017] submit_bio+0x3b4/0x550 [ 101.582395][T13017] f2fs_submit_write_bio+0x13c/0x324 [ 101.582401][T13017] __submit_merged_bio+0x254/0x704 [ 101.582407][T13017] __submit_merged_write_cond+0x23c/0x4ac [ 101.582413][T13017] f2fs_write_data_pages+0x1d28/0x2634 [ 101.582419][T13017] do_writepages+0x270/0x468 [ 101.582428][T13017] filemap_fdatawrite+0x14c/0x1f4 [ 101.582433][T13017] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 101.582439][T13017] f2fs_write_checkpoint+0x70c/0x1c30 [ 101.582444][T13017] kill_f2fs_super+0x228/0x594 [ 101.582451][T13017] deactivate_locked_super+0xc4/0x12c [ 101.582459][T13017] deactivate_super+0xe0/0x100 [ 101.582464][T13017] cleanup_mnt+0x31c/0x3ac [ 101.582472][T13017] __cleanup_mnt+0x20/0x30 [ 101.582478][T13017] task_work_run+0x1dc/0x260 [ 101.582485][T13017] exit_to_user_mode_loop+0xfc/0x178 [ 101.582494][T13017] el0_svc+0x170/0x254 [ 101.582501][T13017] el0t_64_sync_handler+0x84/0x12c [ 101.582507][T13017] el0t_64_sync+0x198/0x19c [ 101.582527][T13017] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 101.614411][T13311] loop2: detected capacity change from 0 to 512 [ 101.615481][T13311] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.718305][T13319] loop4: detected capacity change from 0 to 128 [ 101.728285][T13319] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 101.728334][T13319] System zones: 1-3, 19-19, 35-36 [ 101.728871][T13319] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.808780][ T9675] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.908128][T13292] loop6: detected capacity change from 0 to 131072 [ 101.909474][T13292] F2FS-fs (loop6): Invalid log sectors per block(570425347) log sectorsize(9) [ 101.909486][T13292] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 101.910998][T13292] F2FS-fs (loop6): invalid crc value [ 101.950214][T13292] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 101.959716][T13292] F2FS-fs (loop6): Bad quota inode 2:50331648 [ 101.959749][T13292] F2FS-fs (loop6): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 101.959759][T13292] F2FS-fs (loop6): Cannot turn on quotas: error -22 [ 101.959768][T13292] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 101.961974][T13292] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 101.961988][T13292] F2FS-fs (loop6): Mounted with checkpoint version = 753bd00b [ 102.000738][T13292] F2FS-fs (loop6): quota sysfile already exists [ 102.168624][T13360] loop7: detected capacity change from 0 to 16 [ 102.169995][T13360] erofs (device loop7): mounted with root inode @ nid 36. [ 102.184529][T13360] erofs (device loop7): readahead error at folio 4 @ nid 36 [ 102.184586][T13360] erofs (device loop7): readahead error at folio 2 @ nid 36 [ 102.186505][T13360] syz.7.2157: attempt to access beyond end of device [ 102.186505][T13360] loop7: rw=524288, sector=13478624032, nr_sectors = 64 limit=16 [ 102.189181][T13360] syz.7.2157: attempt to access beyond end of device [ 102.189181][T13360] loop7: rw=0, sector=13478624032, nr_sectors = 8 limit=16 [ 102.189212][T13360] erofs (device loop7): read error -5 @ 0 of nid 36 [ 102.189220][T13360] erofs (device loop7): failed to readdir of logical block 0 of nid 36 [ 102.391589][T13376] loop1: detected capacity change from 0 to 4096 [ 102.409468][T13378] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.601574][T13400] loop7: detected capacity change from 0 to 128 [ 102.617180][T13400] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 102.617227][T13400] System zones: 1-3, 19-19, 35-36 [ 102.617759][T13400] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.724687][T13017] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.729942][T13405] sp0: Synchronizing with TNC [ 103.060840][ T6567] Bluetooth: hci1: command tx timeout [ 103.126046][T13417] loop6: detected capacity change from 0 to 32768 [ 103.140524][ T6567] Bluetooth: hci3: command tx timeout [ 103.166979][T13417] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 103.180162][T13435] loop1: detected capacity change from 0 to 164 [ 103.197850][T13435] Unable to read rock-ridge attributes [ 103.201034][T13435] Unable to read rock-ridge attributes [ 103.208179][T13419] loop7: detected capacity change from 0 to 40427 [ 103.220548][T13417] (syz.6.2183,13417,0):ocfs2_verify_group_and_input:430 ERROR: input chain exceeds the limit. [ 103.222586][T13417] (syz.6.2183,13417,0):ocfs2_group_add:511 ERROR: status = -22 [ 103.236538][T13419] F2FS-fs (loop7): Small segment_count (9 < 1 * 24) [ 103.236585][T13419] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 103.264540][T13344] loop2: detected capacity change from 0 to 262144 [ 103.265321][T13344] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2149 (13344) [ 103.266544][T13344] BTRFS info (device loop2): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 103.266575][T13344] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 103.281221][T10343] ocfs2: Unmounting device (7,6) on (node local) [ 103.282677][T13419] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 103.289875][T13419] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 103.289937][T13419] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 103.335164][T13399] loop4: detected capacity change from 0 to 131072 [ 103.337095][T13017] syz-executor: attempt to access beyond end of device [ 103.337095][T13017] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 103.337142][T13017] CPU: 1 UID: 0 PID: 13017 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 103.337154][T13017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 103.337161][T13017] Call trace: [ 103.337164][T13017] show_stack+0x2c/0x3c (C) [ 103.337178][T13017] __dump_stack+0x30/0x40 [ 103.337184][T13017] dump_stack_lvl+0xd8/0x12c [ 103.337189][T13017] dump_stack+0x1c/0x28 [ 103.337194][T13017] f2fs_handle_critical_error+0x34c/0x4b8 [ 103.337202][T13017] f2fs_stop_checkpoint+0x5c/0x70 [ 103.337207][T13017] f2fs_write_end_io+0x768/0xa70 [ 103.337214][T13017] bio_endio+0x858/0x894 [ 103.337219][T13017] submit_bio_noacct+0xd64/0x186c [ 103.337226][T13017] submit_bio+0x3b4/0x550 [ 103.337232][T13017] f2fs_submit_write_bio+0x13c/0x324 [ 103.337238][T13017] __submit_merged_bio+0x254/0x704 [ 103.337243][T13017] __submit_merged_write_cond+0x23c/0x4ac [ 103.337249][T13017] f2fs_write_data_pages+0x1d28/0x2634 [ 103.337256][T13017] do_writepages+0x270/0x468 [ 103.337263][T13017] filemap_fdatawrite+0x14c/0x1f4 [ 103.337268][T13017] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 103.337274][T13017] f2fs_write_checkpoint+0x70c/0x1c30 [ 103.337279][T13017] kill_f2fs_super+0x228/0x594 [ 103.337285][T13017] deactivate_locked_super+0xc4/0x12c [ 103.337292][T13017] deactivate_super+0xe0/0x100 [ 103.337298][T13017] cleanup_mnt+0x31c/0x3ac [ 103.337305][T13017] __cleanup_mnt+0x20/0x30 [ 103.337311][T13017] task_work_run+0x1dc/0x260 [ 103.337317][T13017] exit_to_user_mode_loop+0xfc/0x178 [ 103.337324][T13017] el0_svc+0x170/0x254 [ 103.337331][T13017] el0t_64_sync_handler+0x84/0x12c [ 103.337337][T13017] el0t_64_sync+0x198/0x19c [ 103.337356][T13017] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 103.371003][T13399] F2FS-fs (loop4): Invalid log sectors per block(570425347) log sectorsize(9) [ 103.371037][T13399] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 103.374994][T13399] F2FS-fs (loop4): invalid crc value [ 103.401313][T13344] BTRFS info (device loop2): enabling ssd optimizations [ 103.401350][T13344] BTRFS info (device loop2): turning on async discard [ 103.401371][T13344] BTRFS info (device loop2): enabling free space tree [ 103.425338][T13399] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix. [ 103.427617][T13399] F2FS-fs (loop4): Bad quota inode 2:50331648 [ 103.427650][T13399] F2FS-fs (loop4): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 103.427667][T13399] F2FS-fs (loop4): Cannot turn on quotas: error -22 [ 103.427679][T13399] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 103.434645][T13399] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 103.434672][T13399] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 103.463790][T13399] F2FS-fs (loop4): quota sysfile already exists [ 103.513814][ T9908] BTRFS info (device loop2): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 103.552820][T13482] netlink: 'syz.6.2207': attribute type 1 has an invalid length. [ 103.642868][T13490] netlink: 'syz.7.2210': attribute type 9 has an invalid length. [ 103.747778][T13507] loop6: detected capacity change from 0 to 2048 [ 103.807134][T13507] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 103.880663][T13517] loop7: detected capacity change from 0 to 1024 [ 103.886668][T13526] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.908047][T13517] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.010174][T13017] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.040594][T13532] loop1: detected capacity change from 0 to 4096 [ 104.081786][T13532] ntfs3(loop1): ino=b, mi_enum_attr [ 104.081825][T13532] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 104.083265][T13532] ntfs3(loop1): Failed to load $Extend (-22). [ 104.083282][T13532] ntfs3(loop1): Failed to initialize $Extend. [ 104.094118][T13543] loop4: detected capacity change from 0 to 512 [ 104.105750][T13543] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.107152][T13532] ntfs3(loop1): ino=1e, "file1" attr_set_size [ 104.145251][T13545] loop6: detected capacity change from 0 to 64 [ 104.146005][T13543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.196285][ T9675] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.361353][T13581] loop6: detected capacity change from 0 to 64 [ 104.379202][T13581] syz.6.2249: attempt to access beyond end of device [ 104.379202][T13581] loop6: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 104.433507][T13591] loop7: detected capacity change from 0 to 1024 [ 104.470660][ T590] hfsplus: b-tree write err: -5, ino 4 [ 104.493150][T13598] tipc: Enabling of bearer rejected, failed to enable media [ 104.596293][T13607] loop4: detected capacity change from 0 to 4096 [ 104.597960][T13607] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 104.721363][T13627] openvswitch: netlink: Flow key attr not present in new flow. [ 104.888792][T13649] loop2: detected capacity change from 0 to 1024 [ 104.916085][T13650] loop4: detected capacity change from 0 to 4096 [ 104.917179][T13652] loop7: detected capacity change from 0 to 128 [ 104.919245][T13650] ntfs3(loop4): ino=3, Correct links count -> 2. [ 104.938369][T13649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.985854][T13650] ntfs3(loop4): failed to convert "0080" to macgreek [ 104.988975][T13650] ntfs3(loop4): failed to convert name for inode 1e. [ 104.994029][T13650] ntfs3(loop4): ino=1f, mi_enum_attr [ 104.994076][T13650] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 105.027749][ T9908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.057605][T13660] sch_tbf: burst 0 is lower than device macvtap0 mtu (1514) ! [ 105.142214][ T6567] Bluetooth: hci1: command tx timeout [ 105.212832][T13633] loop6: detected capacity change from 0 to 131072 [ 105.220810][ T6567] Bluetooth: hci3: command tx timeout [ 105.251996][T13633] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 105.262371][T13633] F2FS-fs (loop6): Mounted with checkpoint version = 1b41e955 [ 105.285666][T13633] F2FS-fs (loop6): f2fs_convert_inline_folio: corrupted inline inode ino=7, i_addr[0]:0xff0000, run fsck to fix. [ 105.350228][T13679] loop7: detected capacity change from 0 to 64 [ 105.373061][T13666] loop2: detected capacity change from 0 to 32768 [ 105.375566][T13676] loop4: detected capacity change from 0 to 32768 [ 105.385428][T13666] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2290 (13666) [ 105.392288][T13676] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 105.402870][T13666] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 105.402937][T13666] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 105.429052][T13676] XFS (loop4): Ending clean mount [ 105.433744][T13697] __nla_validate_parse: 5 callbacks suppressed [ 105.433777][T13697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2298'. [ 105.464374][T13666] BTRFS info (device loop2): enabling ssd optimizations [ 105.465672][T13666] BTRFS info (device loop2): turning on async discard [ 105.466988][T13666] BTRFS info (device loop2): enabling free space tree [ 105.474791][ T9675] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 105.524543][ T9908] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 105.553092][T13711] loop1: detected capacity change from 0 to 512 [ 105.565657][T13711] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.579063][T13711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.659858][T13028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.000160][ T6567] Bluetooth: hci2: Malformed LE Event: 0x0d [ 106.058709][T13765] loop4: detected capacity change from 0 to 32768 [ 106.063714][T13765] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2323 (13765) [ 106.067974][T13765] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 106.068025][T13765] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 106.068061][T13765] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 106.129297][T13765] BTRFS info (device loop4): rebuilding free space tree [ 106.138846][T13792] loop7: detected capacity change from 0 to 4096 [ 106.152469][T13765] BTRFS info (device loop4): disabling free space tree [ 106.152518][T13765] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 106.152528][T13765] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 106.154512][T13765] BTRFS info (device loop4): enabling ssd optimizations [ 106.154523][T13765] BTRFS info (device loop4): enabling disk space caching [ 106.154530][T13765] BTRFS info (device loop4): force clearing of disk cache [ 106.154536][T13765] BTRFS info (device loop4): enabling auto defrag [ 106.154542][T13765] BTRFS info (device loop4): max_inline set to 0 [ 106.161980][T13792] ntfs3(loop7): ino=b, mi_enum_attr [ 106.162010][T13792] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 106.163243][T13792] ntfs3(loop7): Failed to load $Extend (-22). [ 106.163257][T13792] ntfs3(loop7): Failed to initialize $Extend. [ 106.192292][T13792] ntfs3(loop7): ino=1e, "file1" attr_set_size [ 106.243860][ T590] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 106.264616][ T9675] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 106.286843][T13798] loop1: detected capacity change from 0 to 32768 [ 106.292615][T13777] loop6: detected capacity change from 0 to 40427 [ 106.293650][T13777] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 106.293671][T13777] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 106.295985][T13798] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 106.316703][T13777] F2FS-fs (loop6): invalid crc value [ 106.352097][T13798] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 106.362896][T13798] XFS (loop1): Starting recovery (logdev: internal) [ 106.382788][T13798] XFS (loop1): Ending recovery (logdev: internal) [ 106.383961][T13777] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 106.390981][T13777] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 106.391019][T13777] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 106.423452][T13028] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 106.544289][T13832] loop2: detected capacity change from 0 to 64 [ 106.560510][T13832] syz.2.2345: attempt to access beyond end of device [ 106.560510][T13832] loop2: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 106.612375][T13835] netlink: 'syz.1.2356': attribute type 9 has an invalid length. [ 106.661869][T13841] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2346'. [ 106.668288][T13844] loop1: detected capacity change from 0 to 512 [ 106.688281][T13845] netlink: 'syz.7.2349': attribute type 1 has an invalid length. [ 106.723018][T13849] tipc: Enabling of bearer rejected, failed to enable media [ 106.744635][T13844] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2348: bg 0: block 248: padding at end of block bitmap is not set [ 106.745161][T13844] Quota error (device loop1): write_blk: dquota write failed [ 106.745214][T13844] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 106.745236][T13844] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2348: Failed to acquire dquot type 1 [ 106.745794][T13844] EXT4-fs (loop1): 1 truncate cleaned up [ 106.746252][T13844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.808948][T13028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.811853][ T590] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 106.811893][ T590] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 1 [ 106.907766][T13862] loop7: detected capacity change from 0 to 512 [ 106.908916][T13862] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 106.922414][T13862] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.2360: Invalid block bitmap block 0 in block_group 0 [ 106.929700][T13862] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 106.934605][T13862] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #11: comm syz.7.2360: attempt to clear invalid blocks 983261 len 1 [ 106.937263][T13862] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.2360: Invalid inode table block 0 in block_group 0 [ 106.939468][T13862] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 106.942017][T13862] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 106.943614][T13862] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.2360: Invalid inode table block 0 in block_group 0 [ 106.946290][T13862] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 106.951183][T13862] EXT4-fs error (device loop7): ext4_truncate:4637: inode #11: comm syz.7.2360: mark_inode_dirty error [ 106.956644][T13862] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 106.958522][T13862] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.2360: Invalid inode table block 0 in block_group 0 [ 106.960990][T13862] EXT4-fs (loop7): 1 truncate cleaned up [ 106.961450][T13862] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.026358][T13017] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.071526][T13893] loop1: detected capacity change from 0 to 4096 [ 107.096784][T13893] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 107.102068][T13892] loop2: detected capacity change from 0 to 1024 [ 107.147870][T13892] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 107.148049][T13892] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 107.168559][T13904] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2379'. [ 107.186748][ T590] hfsplus: b-tree write err: -5, ino 4 [ 107.199617][T13907] syz.4.2380 (13907): /proc/13906/oom_adj is deprecated, please use /proc/13906/oom_score_adj instead. [ 107.245179][T13913] loop4: detected capacity change from 0 to 512 [ 107.253744][T13913] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 107.255275][T13910] loop6: detected capacity change from 0 to 164 [ 107.262221][T13913] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2381: Invalid block bitmap block 0 in block_group 0 [ 107.262369][T13913] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 107.262478][T13913] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.2381: attempt to clear invalid blocks 983261 len 1 [ 107.262584][T13913] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.2381: Invalid inode table block 0 in block_group 0 [ 107.262696][T13913] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 107.263158][T13913] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 107.263306][T13913] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.2381: Invalid inode table block 0 in block_group 0 [ 107.265340][T13913] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 107.265542][T13913] EXT4-fs error (device loop4): ext4_truncate:4637: inode #11: comm syz.4.2381: mark_inode_dirty error [ 107.265663][T13913] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 107.265777][T13913] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.2381: Invalid inode table block 0 in block_group 0 [ 107.265909][T13913] EXT4-fs (loop4): 1 truncate cleaned up [ 107.266367][T13913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.324216][T13912] loop1: detected capacity change from 0 to 4096 [ 107.326798][T13912] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 107.360856][T13922] sch_tbf: burst 0 is lower than device macvtap0 mtu (1514) ! [ 107.404557][ T9675] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.466630][T13918] loop7: detected capacity change from 0 to 32768 [ 107.488755][T13918] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 107.528072][T13918] XFS (loop7): Ending clean mount [ 107.559566][T13947] tipc: Started in network mode [ 107.559606][T13947] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 107.563559][T13947] tipc: Enabled bearer , priority 10 [ 107.618030][ T6554] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 107.621317][ T6554] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 107.625942][T13017] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 107.631530][T13956] loop2: detected capacity change from 0 to 4096 [ 107.641290][T13956] ntfs3(loop2): ino=3, Correct links count -> 2. [ 107.703974][T13956] ntfs3(loop2): failed to convert "0080" to macgreek [ 107.705882][T13956] ntfs3(loop2): failed to convert name for inode 1e. [ 107.717610][T13956] ntfs3(loop2): ino=1f, mi_enum_attr [ 107.717664][T13956] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 107.799488][T13964] fido_id[13964]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 107.806316][T13961] loop6: detected capacity change from 0 to 32768 [ 107.818582][T13961] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 107.852270][T13961] XFS (loop6): Ending clean mount [ 107.878834][T13961] XFS (loop6): Metadata CRC error detected at xfs_rmapbt_read_verify+0x50/0xf0, xfs_rmapbt block 0x14 [ 107.882085][T13961] XFS (loop6): Unmount and run xfs_repair [ 107.883636][T13961] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 107.883684][T13961] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 107.883701][T13961] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 107.883714][T13961] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 107.883726][T13961] 00000030: 00 00 00 00 5b af 3b 81 00 00 00 00 00 00 00 01 ....[.;......... [ 107.883736][T13961] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 107.883745][T13961] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 107.883754][T13961] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 107.883762][T13961] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 107.883880][T13961] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x14 len 4 error 74 [ 107.911898][T13966] loop4: detected capacity change from 0 to 32768 [ 107.915517][T13961] XFS (loop6): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x4c8/0x964 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 107.918334][T13961] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 107.924102][T13966] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2403 (13966) [ 107.938058][T13966] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 107.938369][T13966] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 107.944112][T10343] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 108.038388][T13999] loop6: detected capacity change from 0 to 4096 [ 108.039901][T13966] BTRFS info (device loop4): enabling ssd optimizations [ 108.039928][T13966] BTRFS info (device loop4): turning on async discard [ 108.039954][T13966] BTRFS info (device loop4): enabling free space tree [ 108.078063][T14010] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.091413][ T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 108.095094][ T9675] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.113493][ T9] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 108.117398][T13999] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 108.134451][T13999] Remounting filesystem read-only [ 108.153798][T14011] fido_id[14011]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 108.175109][T10343] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 108.343664][T14034] loop4: detected capacity change from 0 to 128 [ 108.344003][T14034] EXT4-fs: Ignoring removed nobh option [ 108.369559][T14034] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.393625][ T9675] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.517286][T14032] loop7: detected capacity change from 0 to 32768 [ 108.522403][T14032] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2423 (14032) [ 108.523418][T14030] loop2: detected capacity change from 0 to 40427 [ 108.523989][T14030] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 108.524000][T14030] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 108.524682][T14030] F2FS-fs (loop2): invalid crc value [ 108.542943][T14032] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.543002][T14032] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm [ 108.583136][T14030] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 108.585255][T14030] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 108.585287][T14030] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 108.615244][ T847] BTRFS warning (device loop7): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 108.617645][T14032] BTRFS warning (device loop7): couldn't read tree root [ 108.617675][T14032] BTRFS warning (device loop7): try to load backup roots slot 1 [ 108.620742][ T231] BTRFS warning (device loop7): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 108.623675][T14032] BTRFS warning (device loop7): couldn't read tree root [ 108.623704][T14032] BTRFS warning (device loop7): try to load backup roots slot 2 [ 108.624031][ T231] BTRFS error (device loop7): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 108.627846][T14032] BTRFS warning (device loop7): couldn't read tree root [ 108.627874][T14032] BTRFS warning (device loop7): try to load backup roots slot 3 [ 108.648536][T14071] ALSA: mixer_oss: invalid OSS volume 'öœ"g„L–Ê' [ 108.649176][T14032] BTRFS info (device loop7): checking UUID tree [ 108.651479][T14032] BTRFS info (device loop7): setting nodatasum [ 108.651527][T14032] BTRFS info (device loop7): enabling ssd optimizations [ 108.651550][T14032] BTRFS info (device loop7): turning on flush-on-commit [ 108.651563][T14032] BTRFS info (device loop7): turning on async discard [ 108.651571][T14032] BTRFS info (device loop7): enabling free space tree [ 108.651578][T14032] BTRFS info (device loop7): trying to use backup root at mount time [ 108.651585][T14032] BTRFS info (device loop7): max_inline set to 0 [ 108.674604][T14047] loop4: detected capacity change from 0 to 32768 [ 108.691273][ T1861] tipc: Node number set to 1 [ 108.703741][T14047] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 108.742869][T14047] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 108.774127][T14047] XFS (loop4): Starting recovery (logdev: internal) [ 108.782793][T14093] loop1: detected capacity change from 0 to 1024 [ 108.784251][T14093] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.789126][T14093] EXT4-fs: Ignoring removed oldalloc option [ 108.789181][T14093] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.790041][T14047] XFS (loop4): Ending recovery (logdev: internal) [ 108.804788][T13017] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.813982][T14093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.886122][T13028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.888785][ T9675] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 108.913599][T14100] loop7: detected capacity change from 0 to 4096 [ 108.927016][T14100] ntfs3(loop7): ino=3, Correct links count -> 2. [ 108.974340][ T6567] Bluetooth: hci0: Malformed LE Event: 0x0d [ 109.028816][T14113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2441'. [ 109.054527][T14100] ntfs3(loop7): failed to convert "0080" to macgreek [ 109.057432][T14100] ntfs3(loop7): failed to convert name for inode 1e. [ 109.058627][T14100] ntfs3(loop7): ino=1f, mi_enum_attr [ 109.058667][T14100] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 109.108554][T14121] loop1: detected capacity change from 0 to 64 [ 109.166878][T14125] loop2: detected capacity change from 0 to 164 [ 109.266933][T14136] tipc: Started in network mode [ 109.266973][T14136] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 109.267161][T14136] tipc: Enabled bearer , priority 10 [ 109.394232][T14151] loop2: detected capacity change from 0 to 8 [ 109.439870][T14152] loop1: detected capacity change from 0 to 4096 [ 109.444387][T14152] ntfs3(loop1): ino=3, Correct links count -> 2. [ 109.446232][T14154] loop2: detected capacity change from 0 to 1024 [ 109.447871][T14154] EXT4-fs: Ignoring removed orlov option [ 109.474154][T14154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.521165][T14152] ntfs3(loop1): failed to convert "0080" to macgreek [ 109.522857][T14152] ntfs3(loop1): failed to convert name for inode 1e. [ 109.524511][T14152] ntfs3(loop1): ino=1f, mi_enum_attr [ 109.524551][T14152] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 109.529130][ T9908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.538798][T14162] loop4: detected capacity change from 0 to 4096 [ 109.608284][T14169] loop2: detected capacity change from 0 to 512 [ 109.617254][T14169] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.632335][T14169] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 109.634894][T14169] EXT4-fs (loop2): 1 truncate cleaned up [ 109.635407][T14169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.642241][T14176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2470'. [ 109.644644][T14169] EXT4-fs warning (device loop2): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 109.661640][ T9908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.894620][T14200] loop6: detected capacity change from 0 to 4096 [ 109.902090][T14200] ntfs3(loop6): ino=3, Correct links count -> 2. [ 109.947098][T14209] loop4: detected capacity change from 0 to 1024 [ 109.979476][T14209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 109.993711][T14200] ntfs3(loop6): failed to convert "0080" to macgreek [ 109.994203][T14200] ntfs3(loop6): failed to convert name for inode 1e. [ 109.994314][T14200] ntfs3(loop6): ino=1f, mi_enum_attr [ 109.994325][T14200] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 110.000230][T14186] loop2: detected capacity change from 0 to 40427 [ 110.009193][T14186] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 110.009242][T14186] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 110.009263][T14186] F2FS-fs (loop2): build fault injection rate: 771 [ 110.013653][T14186] F2FS-fs (loop2): invalid crc value [ 110.031196][ T9675] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 110.038627][T14186] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 110.057811][T14186] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 110.057856][T14186] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 110.074483][T14186] F2FS-fs (loop2): Can't enable fs-verity on inode 10: the verity feature is not enabled on this filesystem [ 110.108907][ T9908] syz-executor: attempt to access beyond end of device [ 110.108907][ T9908] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 110.112622][ T9908] CPU: 0 UID: 0 PID: 9908 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 110.112635][ T9908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 110.112640][ T9908] Call trace: [ 110.112644][ T9908] show_stack+0x2c/0x3c (C) [ 110.112659][ T9908] __dump_stack+0x30/0x40 [ 110.112666][ T9908] dump_stack_lvl+0xd8/0x12c [ 110.112672][ T9908] dump_stack+0x1c/0x28 [ 110.112676][ T9908] f2fs_handle_critical_error+0x34c/0x4b8 [ 110.112684][ T9908] f2fs_stop_checkpoint+0x5c/0x70 [ 110.112690][ T9908] f2fs_write_end_io+0x768/0xa70 [ 110.112696][ T9908] bio_endio+0x858/0x894 [ 110.112702][ T9908] submit_bio_noacct+0xd64/0x186c [ 110.112708][ T9908] submit_bio+0x3b4/0x550 [ 110.112714][ T9908] f2fs_submit_write_bio+0x13c/0x324 [ 110.112720][ T9908] __submit_merged_bio+0x254/0x704 [ 110.112726][ T9908] __submit_merged_write_cond+0x23c/0x4ac [ 110.112731][ T9908] f2fs_write_data_pages+0x1d28/0x2634 [ 110.112738][ T9908] do_writepages+0x270/0x468 [ 110.112745][ T9908] filemap_fdatawrite+0x14c/0x1f4 [ 110.112750][ T9908] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 110.112755][ T9908] f2fs_write_checkpoint+0x70c/0x1c30 [ 110.112760][ T9908] kill_f2fs_super+0x228/0x594 [ 110.112766][ T9908] deactivate_locked_super+0xc4/0x12c [ 110.112773][ T9908] deactivate_super+0xe0/0x100 [ 110.112779][ T9908] cleanup_mnt+0x31c/0x3ac [ 110.112786][ T9908] __cleanup_mnt+0x20/0x30 [ 110.112792][ T9908] task_work_run+0x1dc/0x260 [ 110.112798][ T9908] exit_to_user_mode_loop+0xfc/0x178 [ 110.112805][ T9908] el0_svc+0x170/0x254 [ 110.112812][ T9908] el0t_64_sync_handler+0x84/0x12c [ 110.112817][ T9908] el0t_64_sync+0x198/0x19c [ 110.146758][ T9908] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 110.189112][T14237] loop4: detected capacity change from 0 to 128 [ 110.190426][T14237] EXT4-fs (loop4): Test dummy encryption mode enabled [ 110.201632][T14237] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.234785][T14244] loop6: detected capacity change from 0 to 128 [ 110.236175][T14237] EXT4-fs (loop4): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 110.242016][T14237] EXT4-fs (loop4): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. [ 110.251275][T14244] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 110.251321][T14244] hpfs: filesystem error: improperly stopped [ 110.251339][T14244] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 110.251353][T14244] hpfs: You really don't want any checks? You are crazy... [ 110.251420][T14244] hpfs: hpfs_map_sector(): read error [ 110.251428][T14244] hpfs: code page support is disabled [ 110.266028][T14244] hpfs: hpfs_map_4sectors(): unaligned read [ 110.266126][T14244] hpfs: hpfs_map_4sectors(): unaligned read [ 110.266148][T14244] hpfs: filesystem error: unable to find root dir [ 110.272041][ T9675] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.390472][ T26] tipc: Node number set to 1 [ 110.468701][T14281] loop2: detected capacity change from 0 to 256 [ 110.473197][T14270] loop6: detected capacity change from 0 to 4096 [ 110.476794][T14281] FAT-fs (loop2): Directory bread(block 64) failed [ 110.476829][T14281] FAT-fs (loop2): Directory bread(block 65) failed [ 110.476853][T14281] FAT-fs (loop2): Directory bread(block 66) failed [ 110.476864][T14281] FAT-fs (loop2): Directory bread(block 67) failed [ 110.476884][T14281] FAT-fs (loop2): Directory bread(block 68) failed [ 110.476894][T14281] FAT-fs (loop2): Directory bread(block 69) failed [ 110.476913][T14281] FAT-fs (loop2): Directory bread(block 70) failed [ 110.476926][T14281] FAT-fs (loop2): Directory bread(block 71) failed [ 110.476949][T14281] FAT-fs (loop2): Directory bread(block 72) failed [ 110.476959][T14281] FAT-fs (loop2): Directory bread(block 73) failed [ 110.487012][T14270] ntfs3(loop6): ino=3, Correct links count -> 2. [ 110.563271][T14270] ntfs3(loop6): failed to convert "0080" to macgreek [ 110.567646][T14270] ntfs3(loop6): failed to convert name for inode 1e. [ 110.569304][T14270] ntfs3(loop6): ino=1f, mi_enum_attr [ 110.570609][T14270] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 110.573203][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2503'. [ 110.676128][T14303] loop7: detected capacity change from 0 to 256 [ 110.687195][T14303] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.708893][T14304] loop2: detected capacity change from 0 to 512 [ 110.736576][T14304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.806986][T14318] loop6: detected capacity change from 0 to 1764 [ 110.810103][ T9908] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.883365][T14330] loop1: detected capacity change from 0 to 1024 [ 110.884409][T14330] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 110.916719][T14330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.949416][T14338] loop2: detected capacity change from 0 to 64 [ 111.024585][T13028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.095679][T14356] loop6: detected capacity change from 0 to 512 [ 111.132805][T14356] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.233834][T10343] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.245528][T14375] netlink: 'syz.2.2539': attribute type 3 has an invalid length. [ 111.273319][T14373] loop4: detected capacity change from 0 to 8192 [ 111.292689][T14379] trusted_key: encrypted_key: insufficient parameters specified [ 111.324927][T14381] loop1: detected capacity change from 0 to 4096 [ 111.340182][T14381] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 111.379834][T14387] devtmpfs: Cannot change global quota limit on remount [ 111.399353][T13028] ntfs3(loop1): ino=9, ntfs_sync_fs failed, -22. [ 111.485453][T14389] loop6: detected capacity change from 0 to 32768 [ 111.510612][T14389] JBD2: Ignoring recovery information on journal [ 111.529375][T14389] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 111.603351][T10343] ocfs2: Unmounting device (7,6) on (node local) [ 111.682638][T14413] loop1: detected capacity change from 0 to 256 [ 111.729090][T14413] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d) [ 111.736028][T14413] exFAT-fs (loop1): failed to exfat_utf8_to_utf16 (err : -22) nls len : 165 [ 111.848807][T14409] loop4: detected capacity change from 0 to 40427 [ 111.851296][T14383] loop7: detected capacity change from 0 to 65536 [ 111.859059][T14409] F2FS-fs (loop4): invalid crc value [ 111.884129][T14409] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 111.886806][T14409] F2FS-fs (loop4): Start checkpoint disabled! [ 111.888111][T14383] XFS (loop7): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 111.890782][T14409] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 111.893007][T14409] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 111.913573][T14409] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 111.918507][T14383] XFS (loop7): Ending clean mount [ 111.919537][T14383] XFS (loop7): Quotacheck needed: Please wait. [ 111.936776][T14419] loop6: detected capacity change from 0 to 32768 [ 111.970547][T14383] XFS (loop7): Quotacheck: Done. [ 111.981684][T14433] loop1: detected capacity change from 0 to 4096 [ 111.998638][T14433] EXT4-fs (loop1): Test dummy encryption mode enabled [ 112.007246][T14433] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 112.007322][T14433] System zones: 0-5 [ 112.011528][T14433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.032935][T13017] XFS (loop7): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 112.033866][T14438] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 112.110118][T13028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.110146][T14443] loop2: detected capacity change from 0 to 4096 [ 112.166090][T14443] ntfs3(loop2): ino=1a, mi_enum_attr [ 112.166140][T14443] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 112.278846][T14463] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2575'. [ 112.382652][T14477] loop7: detected capacity change from 0 to 512 [ 112.383020][T14477] EXT4-fs: inline encryption not supported [ 112.388227][T14477] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 112.389806][T14477] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2580: invalid indirect mapped block 2683928664 (level 1) [ 112.394505][T14477] EXT4-fs (loop7): 1 truncate cleaned up [ 112.396040][T14477] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.459226][T13017] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.476385][T14488] loop7: detected capacity change from 0 to 128 [ 112.492740][T14488] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.534098][T13017] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.674058][T14483] syz.1.2586 (14483): drop_caches: 1 [ 112.687819][T14483] syz.1.2586 (14483): drop_caches: 1 [ 112.859453][T14517] loop4: detected capacity change from 0 to 32768 [ 112.867157][T14510] loop7: detected capacity change from 0 to 32768 [ 112.893525][T14510] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2599 (14510) [ 112.903378][T14510] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 112.903446][T14510] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 112.903477][T14510] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 112.961551][T14510] BTRFS info (device loop7): rebuilding free space tree [ 112.972949][T14510] BTRFS info (device loop7): disabling free space tree [ 112.972995][T14510] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.973006][T14510] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 112.980134][T14510] BTRFS info (device loop7): enabling ssd optimizations [ 112.983576][T14510] BTRFS info (device loop7): enabling disk space caching [ 112.983635][T14510] BTRFS info (device loop7): force clearing of disk cache [ 112.983657][T14510] BTRFS info (device loop7): enabling auto defrag [ 112.983672][T14510] BTRFS info (device loop7): max_inline set to 0 [ 113.068917][T13017] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 113.069502][T14548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2620'. [ 113.170949][T14556] loop1: detected capacity change from 0 to 128 [ 113.220211][ T1861] hid-generic 0000:0006:8000.0006: item fetching failed at offset 0/1 [ 113.220509][ T1861] hid-generic 0000:0006:8000.0006: probe with driver hid-generic failed with error -22 [ 113.298779][T14514] loop6: detected capacity change from 0 to 131072 [ 113.319041][T14514] F2FS-fs (loop6): invalid crc value [ 113.350026][T14514] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 113.357010][T14514] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 113.408231][T14514] F2FS-fs (loop6): Corrupted max_depth of 3: 16842753 [ 113.624805][T14569] loop2: detected capacity change from 0 to 32768 [ 113.636410][T14569] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 113.662258][T14569] XFS (loop2): Ending clean mount [ 113.682761][T14563] loop7: detected capacity change from 0 to 131072 [ 113.685143][T14563] F2FS-fs: heap/no_heap options were deprecated [ 113.686701][T14586] loop1: detected capacity change from 0 to 128 [ 113.712185][T14563] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 113.715386][T14563] F2FS-fs (loop7): Mounted with checkpoint version = 1b41e955 [ 113.732257][ T9908] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 114.026108][T14611] netlink: 'syz.6.2630': attribute type 1 has an invalid length. [ 114.027553][T14611] netlink: 'syz.6.2630': attribute type 2 has an invalid length. [ 114.029085][T14611] netlink: 16134 bytes leftover after parsing attributes in process `syz.6.2630'. [ 114.043537][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2631'. [ 114.043574][T14615] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2631'. [ 114.043593][T14615] netlink: 'syz.7.2631': attribute type 13 has an invalid length. [ 114.115992][T14604] loop1: detected capacity change from 0 to 32768 [ 114.148413][T14604] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 114.185756][T14604] XFS (loop1): Ending clean mount [ 114.266015][T14636] loop7: detected capacity change from 0 to 32768 [ 114.272872][T13028] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 114.278371][T14636] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2641 (14636) [ 114.293905][T14636] BTRFS info (device loop7): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 114.293977][T14636] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 114.375227][T14636] BTRFS info (device loop7): enabling ssd optimizations [ 114.375262][T14636] BTRFS info (device loop7): turning on async discard [ 114.375455][T14636] BTRFS info (device loop7): enabling free space tree [ 114.375566][T14636] BTRFS info (device loop7): use lzo compression, level 1 [ 114.423485][T14619] loop6: detected capacity change from 0 to 32768 [ 114.433769][T14619] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 114.471632][T14619] XFS (loop6): Ending clean mount [ 114.496487][T13017] BTRFS info (device loop7): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 114.508876][T10343] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 114.560848][T14683] netlink: 'syz.6.2650': attribute type 1 has an invalid length. [ 114.673992][T14679] loop2: detected capacity change from 0 to 32768 [ 114.711938][T14679] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 114.731930][T14679] XFS (loop2): Ending clean mount [ 114.813472][T14715] loop4: detected capacity change from 0 to 1024 [ 114.842719][ T9908] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 114.852168][T14718] sp0: Synchronizing with TNC [ 114.872743][T14714] [U] è` [ 114.954662][ T590] hfsplus: b-tree write err: -5, ino 4 [ 115.108744][T14699] loop6: detected capacity change from 0 to 65536 [ 115.141068][T14699] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 115.152829][T14720] loop7: detected capacity change from 0 to 32768 [ 115.156836][T14699] XFS (loop6): Ending clean mount [ 115.158633][T14699] XFS (loop6): Quotacheck needed: Please wait. [ 115.168844][T14720] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2663 (14720) [ 115.204523][T14699] XFS (loop6): Quotacheck: Done. [ 115.214847][T14720] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.214926][T14720] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 115.214961][T14720] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 115.239183][T14752] loop2: detected capacity change from 0 to 8 [ 115.243292][T14720] BTRFS info (device loop7): rebuilding free space tree [ 115.247102][T14720] BTRFS info (device loop7): disabling free space tree [ 115.248644][T14720] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 115.250804][T14720] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 115.253968][T14752] syz.2.2674: attempt to access beyond end of device [ 115.253968][T14752] loop2: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8 [ 115.254035][T14752] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5 [ 115.254056][T14752] unable to read xattr id index table [ 115.259187][T14720] BTRFS info (device loop7): setting nodatasum [ 115.260804][T14720] BTRFS info (device loop7): setting nodatacow [ 115.262059][T14720] BTRFS info (device loop7): enabling ssd optimizations [ 115.263469][T14720] BTRFS info (device loop7): turning on async discard [ 115.264674][T14720] BTRFS info (device loop7): enabling disk space caching [ 115.266038][T14720] BTRFS info (device loop7): force clearing of disk cache [ 115.267460][T14720] BTRFS info (device loop7): enabling auto defrag [ 115.268814][T14720] BTRFS info (device loop7): max_inline set to 0 [ 115.281311][T10343] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 115.302046][T14752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.302255][T14752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.407215][T13017] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.433239][T14777] loop4: detected capacity change from 0 to 512 [ 115.446085][T14779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2680'. [ 115.455207][T14779] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 115.477115][T14777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.530561][T14777] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2693: corrupted inode contents [ 115.535388][T14777] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.2693: mark_inode_dirty error [ 115.537706][T14777] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2693: corrupted inode contents [ 115.544488][T14777] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2693: corrupted inode contents [ 115.550459][T14777] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.2693: mark_inode_dirty error [ 115.552771][T14777] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2693: corrupted inode contents [ 115.647973][ T9675] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.727647][T14802] loop6: detected capacity change from 0 to 8 [ 115.727991][T14802] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 115.735010][ T8962] udevd[8962]: incorrect cramfs checksum on /dev/loop6 [ 115.743615][T14802] cramfs: Error -5 while decompressing! [ 115.743647][T14802] cramfs: 000000009a06d5c6(26)->000000003af0497b(4096) [ 115.743664][T14802] cramfs: Error -3 while decompressing! [ 115.743668][T14802] cramfs: 00000000c2e9da02(26)->000000004fb20f68(4096) [ 115.743676][T14802] cramfs: Error -3 while decompressing! [ 115.743679][T14802] cramfs: 000000006b958b99(16)->00000000063fbc20(4096) [ 115.743697][T14802] cramfs: Error -5 while decompressing! [ 115.743701][T14802] cramfs: 000000009a06d5c6(26)->000000003af0497b(4096) [ 115.758982][ T6569] udevd[6569]: incorrect cramfs checksum on /dev/loop6 [ 115.815559][T14793] loop1: detected capacity change from 0 to 32768 [ 115.816015][T14793] XFS (loop1): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 115.955382][T14809] loop7: detected capacity change from 0 to 32768 [ 115.961629][T14809] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2696 (14809) [ 115.975479][T14809] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.975541][T14809] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 115.982543][T14821] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2701'. [ 116.011305][T14809] BTRFS info (device loop7): enabling ssd optimizations [ 116.011333][T14809] BTRFS info (device loop7): turning on async discard [ 116.011358][T14809] BTRFS info (device loop7): enabling free space tree [ 116.150573][T13017] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 116.453095][T14875] binder: 14873:14875 ioctl c0046209 9999999999999999 returned -22 [ 116.485973][T14880] netlink: 1028 bytes leftover after parsing attributes in process `syz.1.2720'. [ 116.637999][T14898] loop2: detected capacity change from 0 to 64 [ 116.813120][T14913] netlink: 'syz.7.2736': attribute type 39 has an invalid length. [ 116.846904][T14872] loop6: detected capacity change from 0 to 65536 [ 116.868849][T14872] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 116.892024][T14872] XFS (loop6): Ending clean mount [ 116.892655][T14872] XFS (loop6): Quotacheck needed: Please wait. [ 116.926580][T14872] XFS (loop6): Quotacheck: Done. [ 117.006449][T10343] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 117.332706][T14944] loop7: detected capacity change from 0 to 4096 [ 117.409228][T14945] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.454669][T14944] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 117.455015][T14944] Remounting filesystem read-only [ 117.457384][T14927] loop2: detected capacity change from 0 to 131072 [ 117.482194][T14927] F2FS-fs (loop2): invalid crc value [ 117.485715][T14942] loop6: detected capacity change from 0 to 32768 [ 117.492917][T14892] loop4: detected capacity change from 0 to 131072 [ 117.493773][T13017] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 117.516240][T14942] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 117.519368][T14940] loop1: detected capacity change from 0 to 32768 [ 117.534318][T14940] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 117.540059][T14927] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 117.548897][T14927] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 117.554588][T14942] XFS (loop6): Ending clean mount [ 117.559306][T14892] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 117.564332][T14892] F2FS-fs (loop4): Mounted with checkpoint version = 1b41e955 [ 117.570914][T14942] XFS (loop6): Quotacheck needed: Please wait. [ 117.605201][T14942] XFS (loop6): Quotacheck: Done. [ 117.609039][T14940] XFS (loop1): Ending clean mount [ 117.620287][T14892] F2FS-fs (loop4): f2fs_convert_inline_folio: corrupted inline inode ino=7, i_addr[0]:0xff0000, run fsck to fix. [ 117.662648][T14940] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x50/0xf0, xfs_rmapbt block 0x14 [ 117.662697][T14940] XFS (loop1): Unmount and run xfs_repair [ 117.662718][T14940] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 117.662727][T14940] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 117.662735][T14940] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 117.662742][T14940] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 117.662747][T14940] 00000030: 00 00 00 00 5b af 3b 81 00 00 00 00 00 00 00 01 ....[.;......... [ 117.662753][T14940] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 117.662758][T14940] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 117.662763][T14940] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 117.662768][T14940] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 117.662775][T14940] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x14 len 4 error 74 [ 117.667472][T14940] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x4c8/0x964 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 117.667496][T14940] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 117.677654][T10343] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 117.698333][T13028] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 117.864840][T14981] loop7: detected capacity change from 0 to 128 [ 117.868146][T14981] EXT4-fs: Ignoring removed nobh option [ 117.873223][T14982] loop1: detected capacity change from 0 to 1024 [ 117.876271][T14981] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.895044][T14982] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 117.900097][T13017] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.940677][T14982] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.2768: lblock 2 mapped to illegal pblock 2 (length 1) [ 117.940900][T14982] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 117.940916][T14982] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.2768: lblock 0 mapped to illegal pblock 48 (length 1) [ 117.941003][T14982] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 117.941011][T14982] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2768: Failed to acquire dquot type 0 [ 117.941124][T14982] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 117.942418][T14982] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.2768: mark_inode_dirty error [ 117.942521][T14982] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 117.942561][T14982] EXT4-fs (loop1): 1 orphan inode deleted [ 117.943019][T14982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.969886][ T41] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 117.970165][ T41] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 117.970180][ T41] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 0 [ 118.002475][T13028] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.004684][ T231] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 118.005155][ T231] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 118.005176][ T231] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 118.005737][T13028] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 118.005840][T13028] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 118.005904][T13028] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 118.026044][T14988] loop7: detected capacity change from 0 to 4096 [ 118.030172][T14988] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 118.235180][T15004] loop1: detected capacity change from 0 to 512 [ 118.239496][T15004] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 118.242613][T15003] loop2: detected capacity change from 0 to 1024 [ 118.255395][T15003] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 118.261435][T15004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.264980][T15003] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.2776: lblock 2 mapped to illegal pblock 2 (length 1) [ 118.265733][T15003] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 118.265771][T15003] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2776: lblock 0 mapped to illegal pblock 48 (length 1) [ 118.265916][T15003] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 118.265929][T15003] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2776: Failed to acquire dquot type 0 [ 118.266071][T15003] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 118.266190][T15003] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2776: mark_inode_dirty error [ 118.266251][T15003] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 118.266285][T15003] EXT4-fs (loop2): 1 orphan inode deleted [ 118.266736][T15003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.290497][T10473] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 118.293563][T10473] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 118.293601][T10473] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:9: Failed to release dquot type 0 [ 118.333319][ T847] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 118.336974][ T847] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 118.338588][ T847] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0 [ 118.348830][ T9908] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 118.355339][ T9908] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 118.359620][ T9908] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 118.364616][T14996] loop7: detected capacity change from 0 to 32768 [ 118.381024][T14996] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 118.386507][T15014] netlink: 'syz.4.2770': attribute type 39 has an invalid length. [ 118.434159][T13017] ocfs2: Unmounting device (7,7) on (node local) [ 118.509671][T15019] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 118.562708][T15028] loop1: detected capacity change from 0 to 512 [ 118.585990][T15028] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2775: bg 0: block 248: padding at end of block bitmap is not set [ 118.586305][T15028] Quota error (device loop1): write_blk: dquota write failed [ 118.586333][T15028] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 118.586352][T15028] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2775: Failed to acquire dquot type 1 [ 118.589460][T15028] EXT4-fs (loop1): 1 truncate cleaned up [ 118.680816][T15028] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 118.737549][T15042] loop4: detected capacity change from 0 to 64 [ 118.740616][T15040] ALSA: mixer_oss: invalid OSS volume 'öœ"g„L–Ê' [ 118.844414][T15051] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 118.879885][T15055] loop2: detected capacity change from 0 to 1024 [ 118.881640][T15055] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.882769][T15055] EXT4-fs: Ignoring removed oldalloc option [ 118.883810][T15055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.912101][T15046] loop4: detected capacity change from 0 to 32768 [ 118.918720][T15046] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2784 (15046) [ 118.922542][T15046] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.924221][T15046] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 118.973746][T15073] loop6: detected capacity change from 0 to 512 [ 118.977473][T15073] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 119.000047][ T12] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 119.000169][T15046] BTRFS warning (device loop4): couldn't read tree root [ 119.000184][T15046] BTRFS warning (device loop4): try to load backup roots slot 1 [ 119.000520][ T12] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 119.000565][T15046] BTRFS warning (device loop4): couldn't read tree root [ 119.000572][T15046] BTRFS warning (device loop4): try to load backup roots slot 2 [ 119.000666][ T12] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 119.000704][T15046] BTRFS warning (device loop4): couldn't read tree root [ 119.000711][T15046] BTRFS warning (device loop4): try to load backup roots slot 3 [ 119.001850][T15073] EXT4-fs (loop6): 1 truncate cleaned up [ 119.015345][T15046] BTRFS info (device loop4): checking UUID tree [ 119.015557][T15046] BTRFS info (device loop4): setting nodatasum [ 119.015567][T15046] BTRFS info (device loop4): enabling ssd optimizations [ 119.015576][T15046] BTRFS info (device loop4): turning on flush-on-commit [ 119.015585][T15046] BTRFS info (device loop4): turning on async discard [ 119.015591][T15046] BTRFS info (device loop4): enabling free space tree [ 119.015599][T15046] BTRFS info (device loop4): trying to use backup root at mount time [ 119.015606][T15046] BTRFS info (device loop4): max_inline set to 0 [ 119.031189][T15073] EXT4-fs warning (device loop6): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 119.115587][ T9675] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.183815][T15090] loop7: detected capacity change from 0 to 512 [ 119.206696][T15090] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2795: bg 0: block 248: padding at end of block bitmap is not set [ 119.206952][T15090] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.2795: Failed to acquire dquot type 1 [ 119.207428][T15090] EXT4-fs (loop7): 1 truncate cleaned up [ 119.242497][T15044] loop1: detected capacity change from 0 to 131072 [ 119.249895][T15044] F2FS-fs (loop1): QUOTA feature is enabled, so ignore qf_name [ 119.257125][T15044] F2FS-fs (loop1): invalid crc value [ 119.274986][T15044] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 119.278562][T15090] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 119.281159][T15044] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 119.296779][T15044] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=60000, run fsck to fix. [ 119.303011][T15044] F2FS-fs (loop1): Bad quota inode 2:393216 [ 119.304036][T15044] F2FS-fs (loop1): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 119.344541][T15100] loop6: detected capacity change from 0 to 1024 [ 119.351318][T15100] EXT4-fs: inline encryption not supported [ 119.474629][T15100] EXT4-fs (loop6): changing journal_checksum during remount not supported; ignoring [ 119.474673][T15100] EXT4-fs (loop6): can't disable delalloc during remount [ 119.528932][T15108] loop7: detected capacity change from 0 to 4096 [ 119.596297][T15114] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2803'. [ 119.663122][T15122] loop6: detected capacity change from 0 to 1024 [ 119.670015][T15122] EXT4-fs: Ignoring removed orlov option [ 119.796479][T15136] loop6: detected capacity change from 0 to 512 [ 119.812677][T15136] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2811: bg 0: block 248: padding at end of block bitmap is not set [ 119.815309][T15136] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.2811: Failed to acquire dquot type 1 [ 119.818850][T15136] EXT4-fs (loop6): 1 truncate cleaned up [ 119.862541][T15136] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 119.958044][T15146] loop4: detected capacity change from 0 to 1024 [ 119.958426][T15146] EXT4-fs: inline encryption not supported [ 120.033774][T15140] loop2: detected capacity change from 0 to 32768 [ 120.035607][T15140] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2816 (15140) [ 120.048491][T15140] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 120.048554][T15140] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 120.064856][T15148] loop1: detected capacity change from 0 to 40427 [ 120.081444][T15148] F2FS-fs (loop1): invalid crc value [ 120.095471][T15148] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 120.097671][T15148] F2FS-fs (loop1): Start checkpoint disabled! [ 120.098496][T15148] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 120.099679][T15148] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 120.113181][T15146] EXT4-fs (loop4): changing journal_checksum during remount not supported; ignoring [ 120.113231][T15146] EXT4-fs (loop4): can't disable delalloc during remount [ 120.146681][T15140] BTRFS info (device loop2): enabling ssd optimizations [ 120.146717][T15140] BTRFS info (device loop2): turning on async discard [ 120.146738][T15140] BTRFS info (device loop2): enabling free space tree [ 120.146747][T15140] BTRFS info (device loop2): use zstd compression, level 3 [ 120.152963][T15148] F2FS-fs (loop1): Stopped filesystem due to reason: 0 [ 120.261749][T15174] netlink: 'syz.6.2821': attribute type 298 has an invalid length. [ 120.266024][T15132] loop7: detected capacity change from 0 to 131072 [ 120.276202][T15132] F2FS-fs (loop7): QUOTA feature is enabled, so ignore qf_name [ 120.278351][T15132] F2FS-fs (loop7): invalid crc value [ 120.290992][T15132] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 120.292777][T15132] F2FS-fs (loop7): Mounted with checkpoint version = 753bd00b [ 120.306234][T15132] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=60000, run fsck to fix. [ 120.320819][T15132] F2FS-fs (loop7): Bad quota inode 2:393216 [ 120.320857][T15132] F2FS-fs (loop7): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix. [ 120.321580][ T9908] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 120.457535][T15189] loop1: detected capacity change from 0 to 1024 [ 120.459602][T15189] EXT4-fs: Ignoring removed orlov option [ 120.557805][T15180] loop4: detected capacity change from 0 to 32768 [ 120.569683][T15180] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2836 (15180) [ 120.590319][T15180] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 120.590386][T15180] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 120.613958][T15180] BTRFS info (device loop4): enabling ssd optimizations [ 120.613993][T15180] BTRFS info (device loop4): turning on async discard [ 120.614015][T15180] BTRFS info (device loop4): enabling free space tree [ 120.614028][T15180] BTRFS info (device loop4): use zstd compression, level 3 [ 120.739484][ T9675] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 120.777035][T15221] loop1: detected capacity change from 0 to 128 [ 120.786382][T15221] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 120.786436][T15221] hpfs: filesystem error: improperly stopped [ 120.786446][T15221] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 120.786455][T15221] hpfs: You really don't want any checks? You are crazy... [ 120.786523][T15221] hpfs: hpfs_map_sector(): read error [ 120.786527][T15221] hpfs: code page support is disabled [ 120.787463][T15221] hpfs: hpfs_map_4sectors(): unaligned read [ 120.787513][T15221] hpfs: hpfs_map_4sectors(): unaligned read [ 120.787524][T15221] hpfs: filesystem error: unable to find root dir [ 120.908569][T15199] loop6: detected capacity change from 0 to 40427 [ 120.910533][T15223] loop4: detected capacity change from 0 to 4096 [ 120.916842][T15223] EXT4-fs (loop4): Test dummy encryption mode enabled [ 120.917523][T15223] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 120.917553][T15223] System zones: 0-5 [ 120.931470][T15199] F2FS-fs (loop6): invalid crc value [ 120.956698][T15199] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 120.959499][T15199] F2FS-fs (loop6): Start checkpoint disabled! [ 120.961182][T15199] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0 [ 120.963842][T15199] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 121.018063][ T590] kworker/u8:5: attempt to access beyond end of device [ 121.018063][ T590] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 121.018110][ T590] CPU: 1 UID: 0 PID: 590 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT [ 121.018119][ T590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 121.018124][ T590] Workqueue: writeback wb_workfn (flush-7:6) [ 121.018144][ T590] Call trace: [ 121.018147][ T590] show_stack+0x2c/0x3c (C) [ 121.018156][ T590] __dump_stack+0x30/0x40 [ 121.018162][ T590] dump_stack_lvl+0xd8/0x12c [ 121.018167][ T590] dump_stack+0x1c/0x28 [ 121.018172][ T590] f2fs_handle_critical_error+0x34c/0x4b8 [ 121.018180][ T590] f2fs_stop_checkpoint+0x5c/0x70 [ 121.018185][ T590] f2fs_write_end_io+0x768/0xa70 [ 121.018192][ T590] bio_endio+0x858/0x894 [ 121.018197][ T590] submit_bio_noacct+0xd64/0x186c [ 121.018204][ T590] submit_bio+0x3b4/0x550 [ 121.018210][ T590] f2fs_submit_write_bio+0x13c/0x324 [ 121.018216][ T590] __submit_merged_bio+0x254/0x704 [ 121.018222][ T590] __submit_merged_write_cond+0x23c/0x4ac [ 121.018228][ T590] f2fs_write_data_pages+0x1d28/0x2634 [ 121.018234][ T590] do_writepages+0x270/0x468 [ 121.018242][ T590] __writeback_single_inode+0x15c/0x13e8 [ 121.018248][ T590] writeback_sb_inodes+0x55c/0xe40 [ 121.018253][ T590] wb_writeback+0x3cc/0xd70 [ 121.018259][ T590] wb_workfn+0x338/0xdc0 [ 121.018264][ T590] process_one_work+0x7e8/0x155c [ 121.018269][ T590] worker_thread+0x958/0xed8 [ 121.018274][ T590] kthread+0x5fc/0x75c [ 121.018281][ T590] ret_from_fork+0x10/0x20 [ 121.018288][ T590] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 121.506386][T15240] loop1: detected capacity change from 0 to 4096 [ 121.507593][T15242] loop2: detected capacity change from 0 to 512 [ 121.517543][T15233] loop4: detected capacity change from 0 to 32768 [ 121.546070][T15240] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.2840: corrupted inode contents [ 121.553415][T15240] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #15: comm syz.1.2840: mark_inode_dirty error [ 121.556161][T15240] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.2840: corrupted inode contents [ 121.561046][T15240] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.2840: mark_inode_dirty error [ 121.563073][T15240] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.2840: corrupted inode contents [ 121.565099][T15240] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #15: comm syz.1.2840: mark_inode_dirty error [ 121.567129][T15240] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.2840: corrupted inode contents [ 121.567494][T15233] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 121.575115][T15240] EXT4-fs error (device loop1): ext4_truncate:4637: inode #15: comm syz.1.2840: mark_inode_dirty error [ 121.580412][T15240] EXT4-fs error (device loop1) in ext4_setattr:6050: Corrupt filesystem [ 121.585373][T15240] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.2840: corrupted inode contents [ 121.622389][ T9675] ocfs2: Unmounting device (7,4) on (node local) [ 121.628788][T15235] loop7: detected capacity change from 0 to 40427 [ 121.658436][T15235] F2FS-fs (loop7): invalid crc value [ 121.677224][T15235] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 121.679400][T15235] F2FS-fs (loop7): Start checkpoint disabled! [ 121.681552][T15235] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 121.683612][T15235] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 121.741421][T15235] F2FS-fs (loop7): Stopped filesystem due to reason: 0 [ 121.971197][T15276] loop1: detected capacity change from 0 to 8 [ 121.986581][T15263] loop6: detected capacity change from 0 to 32768 [ 121.994365][T15263] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2847 (15263) [ 122.002211][T15263] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 122.002293][T15263] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 122.048524][T15264] loop4: detected capacity change from 0 to 40427 [ 122.049008][T15263] BTRFS info (device loop6): enabling ssd optimizations [ 122.049021][T15263] BTRFS info (device loop6): turning on async discard [ 122.049029][T15263] BTRFS info (device loop6): enabling free space tree [ 122.049036][T15263] BTRFS info (device loop6): use zstd compression, level 3 [ 122.061800][T15264] F2FS-fs (loop4): Image doesn't support compression [ 122.061832][T15264] F2FS-fs (loop4): build fault injection rate: 690 [ 122.068124][T15264] F2FS-fs (loop4): invalid crc value [ 122.110062][T15264] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 122.112304][T15264] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 122.159552][T15291] loop7: detected capacity change from 0 to 40427 [ 122.165498][T15291] F2FS-fs (loop7): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 122.166836][T15291] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 122.168419][T15291] F2FS-fs (loop7): build fault injection rate: 771 [ 122.170435][T15291] F2FS-fs (loop7): invalid crc value [ 122.213774][T10343] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 122.217930][T15291] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 122.224776][T15305] loop2: detected capacity change from 0 to 512 [ 122.226541][T15305] EXT4-fs: Ignoring removed nobh option [ 122.229830][T15291] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 122.229867][T15291] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 122.235855][ T9675] syz-executor: attempt to access beyond end of device [ 122.235855][ T9675] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.235917][ T9675] CPU: 1 UID: 0 PID: 9675 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 122.235931][ T9675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 122.235939][ T9675] Call trace: [ 122.235943][ T9675] show_stack+0x2c/0x3c (C) [ 122.235958][ T9675] __dump_stack+0x30/0x40 [ 122.235966][ T9675] dump_stack_lvl+0xd8/0x12c [ 122.235971][ T9675] dump_stack+0x1c/0x28 [ 122.235976][ T9675] f2fs_handle_critical_error+0x34c/0x4b8 [ 122.235984][ T9675] f2fs_stop_checkpoint+0x5c/0x70 [ 122.235989][ T9675] f2fs_write_end_io+0x768/0xa70 [ 122.235995][ T9675] bio_endio+0x858/0x894 [ 122.236001][ T9675] submit_bio_noacct+0xd64/0x186c [ 122.236008][ T9675] submit_bio+0x3b4/0x550 [ 122.236014][ T9675] f2fs_submit_write_bio+0x13c/0x324 [ 122.236020][ T9675] __submit_merged_bio+0x254/0x704 [ 122.236026][ T9675] __submit_merged_write_cond+0x23c/0x4ac [ 122.236032][ T9675] f2fs_write_data_pages+0x1d28/0x2634 [ 122.236038][ T9675] do_writepages+0x270/0x468 [ 122.236046][ T9675] filemap_fdatawrite+0x14c/0x1f4 [ 122.236051][ T9675] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 122.236057][ T9675] f2fs_write_checkpoint+0x70c/0x1c30 [ 122.236062][ T9675] kill_f2fs_super+0x228/0x594 [ 122.236068][ T9675] deactivate_locked_super+0xc4/0x12c [ 122.236075][ T9675] deactivate_super+0xe0/0x100 [ 122.236081][ T9675] cleanup_mnt+0x31c/0x3ac [ 122.236088][ T9675] __cleanup_mnt+0x20/0x30 [ 122.236094][ T9675] task_work_run+0x1dc/0x260 [ 122.236101][ T9675] exit_to_user_mode_loop+0xfc/0x178 [ 122.236108][ T9675] el0_svc+0x170/0x254 [ 122.236115][ T9675] el0t_64_sync_handler+0x84/0x12c [ 122.236120][ T9675] el0t_64_sync+0x198/0x19c [ 122.236278][ T9675] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 122.305137][T15291] F2FS-fs (loop7): Can't enable fs-verity on inode 10: the verity feature is not enabled on this filesystem [ 122.327796][T13017] syz-executor: attempt to access beyond end of device [ 122.327796][T13017] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.327843][T13017] CPU: 1 UID: 0 PID: 13017 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 122.327856][T13017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 122.327863][T13017] Call trace: [ 122.327867][T13017] show_stack+0x2c/0x3c (C) [ 122.327883][T13017] __dump_stack+0x30/0x40 [ 122.327890][T13017] dump_stack_lvl+0xd8/0x12c [ 122.327895][T13017] dump_stack+0x1c/0x28 [ 122.327900][T13017] f2fs_handle_critical_error+0x34c/0x4b8 [ 122.327908][T13017] f2fs_stop_checkpoint+0x5c/0x70 [ 122.327914][T13017] f2fs_write_end_io+0x768/0xa70 [ 122.327924][T13017] bio_endio+0x858/0x894 [ 122.327930][T13017] submit_bio_noacct+0xd64/0x186c [ 122.327937][T13017] submit_bio+0x3b4/0x550 [ 122.327944][T13017] f2fs_submit_write_bio+0x13c/0x324 [ 122.327950][T13017] __submit_merged_bio+0x254/0x704 [ 122.327956][T13017] __submit_merged_write_cond+0x23c/0x4ac [ 122.327962][T13017] f2fs_write_data_pages+0x1d28/0x2634 [ 122.327969][T13017] do_writepages+0x270/0x468 [ 122.327978][T13017] filemap_fdatawrite+0x14c/0x1f4 [ 122.327982][T13017] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 122.327988][T13017] f2fs_write_checkpoint+0x70c/0x1c30 [ 122.327993][T13017] kill_f2fs_super+0x228/0x594 [ 122.327999][T13017] deactivate_locked_super+0xc4/0x12c [ 122.328006][T13017] deactivate_super+0xe0/0x100 [ 122.328012][T13017] cleanup_mnt+0x31c/0x3ac [ 122.328019][T13017] __cleanup_mnt+0x20/0x30 [ 122.328025][T13017] task_work_run+0x1dc/0x260 [ 122.328031][T13017] exit_to_user_mode_loop+0xfc/0x178 [ 122.328038][T13017] el0_svc+0x170/0x254 [ 122.328045][T13017] el0t_64_sync_handler+0x84/0x12c [ 122.328051][T13017] el0t_64_sync+0x198/0x19c [ 122.328079][T13017] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 122.571285][T15334] loop7: detected capacity change from 0 to 512 [ 122.574068][T15334] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.661067][T15330] loop6: detected capacity change from 0 to 32768 [ 122.664004][T15330] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2872 (15330) [ 122.676381][T15330] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.676433][T15330] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm [ 122.698754][ T847] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 122.698832][T15330] BTRFS error (device loop6): failed to load root extent [ 122.698860][T15330] BTRFS warning (device loop6): try to load backup roots slot 1 [ 122.698947][ T847] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 122.698990][T15330] BTRFS warning (device loop6): couldn't read tree root [ 122.698997][T15330] BTRFS warning (device loop6): try to load backup roots slot 2 [ 122.699077][ T847] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 122.699110][T15330] BTRFS warning (device loop6): couldn't read tree root [ 122.699117][T15330] BTRFS warning (device loop6): try to load backup roots slot 3 [ 122.715940][T15330] BTRFS info (device loop6): checking UUID tree [ 122.717170][T15330] BTRFS info (device loop6): setting nodatasum [ 122.717703][T15330] BTRFS info (device loop6): setting nodatacow [ 122.717726][T15330] BTRFS info (device loop6): enabling ssd optimizations [ 122.717742][T15330] BTRFS info (device loop6): turning on flush-on-commit [ 122.717754][T15330] BTRFS info (device loop6): turning on async discard [ 122.717766][T15330] BTRFS info (device loop6): enabling free space tree [ 122.717778][T15330] BTRFS info (device loop6): enabling auto defrag [ 122.717788][T15330] BTRFS info (device loop6): trying to use backup root at mount time [ 122.717797][T15330] BTRFS info (device loop6): max_inline set to 0 [ 122.719494][T15355] loop2: detected capacity change from 0 to 512 [ 122.719720][T15362] loop7: detected capacity change from 0 to 512 [ 122.724840][T15362] EXT4-fs (loop7): orphan cleanup on readonly fs [ 122.725817][T15362] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.2878: inode has both inline data and extents flags [ 122.725953][T15362] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.2878: couldn't read orphan inode 15 (err -117) [ 122.770034][T10343] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.775989][T15355] EXT4-fs: Cannot change journaled quota options when quota turned on [ 123.274464][T15435] befs: (nullb0): No write support. Marking filesystem read-only [ 123.276860][T15435] befs: (nullb0): invalid magic header [ 123.277539][T15436] binder: 15433:15436 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 123.336447][T15445] trusted_key: encrypted_key: key trusted:syz not found [ 123.365422][T15451] loop2: detected capacity change from 0 to 64 [ 123.481547][T15467] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2928'. [ 123.494734][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 123.494783][ T31] audit: type=1400 audit(123.460:2): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=6192 comm="udevd" saddr=10.128.0.169 src=30028 daddr=10.128.0.238 dest=34512 netif=enp0s0 [ 123.509404][ T31] audit: type=1400 audit(123.480:3): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=6192 comm="udevd" saddr=10.128.0.169 src=30028 daddr=10.128.0.238 dest=34512 netif=enp0s0 [ 123.509446][ T31] audit: type=1400 audit(123.480:4): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=10343 comm="syz-executor" saddr=10.128.0.169 src=30028 daddr=10.128.0.238 dest=34512 netif=enp0s0 [ 123.509464][ T31] audit: type=1400 audit(123.480:5): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=10343 comm="syz-executor" saddr=10.128.0.169 src=30028 daddr=10.128.0.238 dest=34512 netif=enp0s0 [ 123.509479][ T31] audit: type=1400 audit(123.480:6): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=10343 comm="syz-executor" saddr=10.128.0.169 src=30028 daddr=10.128.0.238 dest=34512 netif=enp0s0 [ 123.518398][T15473] loop6: detected capacity change from 0 to 128 [ 123.531482][ T31] audit: type=1400 audit(123.510:7): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=15472 comm="syz.6.2931" saddr=10.128.0.169 src=30028 daddr=10.128.0.238 dest=34512 netif=enp0s0 [ 123.531715][ T31] audit: type=1400 audit(123.510:8): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=15472 comm="syz.6.2931" saddr=10.128.0.169 src=30028 daddr=10.128.0.238 dest=34512 netif=enp0s0 [ 123.560706][ T31] audit: type=1400 audit(123.540:9): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=6192 comm="udevd" saddr=10.128.0.169 src=30028 daddr=10.128.0.238 dest=34512 netif=enp0s0 [ 123.639032][T15484] loop6: detected capacity change from 0 to 16 [ 123.646208][T15484] erofs (device loop6): mounted with root inode @ nid 36. [ 123.652115][T15484] Invalid ELF header len 10 [ 123.663178][ T31] audit: type=1400 audit(123.640:10): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=6569 comm="udevd" saddr=10.128.0.169 src=30028 daddr=10.128.0.238 dest=34512 netif=enp0s0 [ 123.663281][ T31] audit: type=1400 audit(123.640:11): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=31 comm="kauditd" saddr=10.128.0.169 src=30028 daddr=10.128.0.238 dest=34512 netif=enp0s0 [ 123.718594][T15480] loop2: detected capacity change from 0 to 40427 [ 123.725584][T15480] F2FS-fs (loop2): build fault injection rate: 771 [ 123.728718][T15480] F2FS-fs (loop2): invalid crc value [ 123.739071][T15480] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 123.741369][T15480] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 123.759831][ T9908] syz-executor: attempt to access beyond end of device [ 123.759831][ T9908] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.759884][ T9908] CPU: 1 UID: 0 PID: 9908 Comm: syz-executor Not tainted syzkaller #0 PREEMPT [ 123.759898][ T9908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 123.759905][ T9908] Call trace: [ 123.759909][ T9908] show_stack+0x2c/0x3c (C) [ 123.759926][ T9908] __dump_stack+0x30/0x40 [ 123.759932][ T9908] dump_stack_lvl+0xd8/0x12c [ 123.759938][ T9908] dump_stack+0x1c/0x28 [ 123.759944][ T9908] f2fs_handle_critical_error+0x34c/0x4b8 [ 123.759953][ T9908] f2fs_stop_checkpoint+0x5c/0x70 [ 123.759959][ T9908] f2fs_write_end_io+0x768/0xa70 [ 123.759966][ T9908] bio_endio+0x858/0x894 [ 123.759971][ T9908] submit_bio_noacct+0xd64/0x186c [ 123.759978][ T9908] submit_bio+0x3b4/0x550 [ 123.759984][ T9908] f2fs_submit_write_bio+0x13c/0x324 [ 123.759991][ T9908] __submit_merged_bio+0x254/0x704 [ 123.759997][ T9908] __submit_merged_write_cond+0x23c/0x4ac [ 123.760002][ T9908] f2fs_write_data_pages+0x1d28/0x2634 [ 123.760009][ T9908] do_writepages+0x270/0x468 [ 123.760017][ T9908] filemap_fdatawrite+0x14c/0x1f4 [ 123.760022][ T9908] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 123.760027][ T9908] f2fs_write_checkpoint+0x70c/0x1c30 [ 123.760033][ T9908] kill_f2fs_super+0x228/0x594 [ 123.760039][ T9908] deactivate_locked_super+0xc4/0x12c [ 123.760046][ T9908] deactivate_super+0xe0/0x100 [ 123.760052][ T9908] cleanup_mnt+0x31c/0x3ac [ 123.760058][ T9908] __cleanup_mnt+0x20/0x30 [ 123.760064][ T9908] task_work_run+0x1dc/0x260 [ 123.760071][ T9908] exit_to_user_mode_loop+0xfc/0x178 [ 123.760078][ T9908] el0_svc+0x170/0x254 [ 123.760085][ T9908] el0t_64_sync_handler+0x84/0x12c [ 123.760091][ T9908] el0t_64_sync+0x198/0x19c [ 123.760098][ T9908] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 125.941224][ T2455] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.941265][ T2455] ieee802154 phy1 wpan1: encryption failed: -22 [ 130.261130][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 130.261164][ T31] audit: type=1400 audit(130.240:22): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.0.238 dest=34512 netif=enp0s0 [ 130.332674][ T31] audit: type=1400 audit(130.310:23): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.0.238 dest=34512 netif=enp0s0 [ 137.249440][ T31] audit: type=1400 audit(137.220:24): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.0.238 dest=34512 netif=enp0s0 [ 137.461636][ T31] audit: type=1400 audit(137.440:25): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.0.238 dest=34512 netif=enp0s0 [ 151.073538][ T31] audit: type=1400 audit(151.050:26): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.0.238 dest=34512 netif=enp0s0 [ 151.542755][ T31] audit: type=1400 audit(151.520:27): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.0.238 dest=34512 netif=enp0s0 [ 179.062152][ T31] audit: type=1400 audit(179.040:28): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.0.238 dest=34512 netif=enp0s0 [ 179.740700][ T31] audit: type=1400 audit(179.720:29): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.0.238 dest=34512 netif=enp0s0 [ 184.340681][ T6552] Bluetooth: hci0: command 0x0406 tx timeout [ 187.385126][ T2455] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.385175][ T2455] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.460753][ T6552] Bluetooth: hci2: command 0x0406 tx timeout [ 220.180730][ T6567] Bluetooth: hci3: command 0x0406 tx timeout [ 220.182435][ T6558] Bluetooth: hci1: command 0x0406 tx timeout [ 233.465324][ T31] audit: type=1400 audit(233.440:30): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=12 comm="kworker/u8:0" saddr=10.128.0.169 src=30028 daddr=10.128.0.238 dest=34512 netif=enp0s0 [ 235.036704][ T31] audit: type=1400 audit(235.010:31): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30028 daddr=10.128.0.238 dest=34512 netif=enp0s0 [ 248.820903][ T2455] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.820942][ T2455] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.940956][ ** replaying previous printk message ** [ 269.940956][ T32] INFO: task syz-executor:13028 blocked for more than 143 seconds. [ 269.940986][ T32] Not tainted syzkaller #0 [ 269.941006][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 269.941016][ T32] task:syz-executor state:D stack:0 pid:13028 tgid:13028 ppid:1 task_flags:0x400140 flags:0x00000011 [ 269.941037][ T32] Call trace: [ 269.941041][ T32] __switch_to+0x418/0x87c (T) [ 269.941055][ T32] __schedule+0x13b0/0x2864 [ 269.941062][ T32] schedule+0xb4/0x230 [ 269.941067][ T32] io_schedule+0x84/0xf0 [ 269.941073][ T32] folio_wait_bit_common+0x56c/0x9e0 [ 269.941080][ T32] __filemap_get_folio+0x1ec/0xc38 [ 269.941086][ T32] truncate_inode_pages_range+0x38c/0xe18 [ 269.941093][ T32] truncate_inode_pages_final+0x8c/0xbc [ 269.941100][ T32] evict+0x420/0x928 [ 269.941109][ T32] evict_inodes+0x638/0x6d0 [ 269.941116][ T32] generic_shutdown_super+0xa0/0x2b8 [ 269.941123][ T32] kill_block_super+0x44/0x90 [ 269.941130][ T32] deactivate_locked_super+0xc4/0x12c [ 269.941137][ T32] deactivate_super+0xe0/0x100 [ 269.941143][ T32] cleanup_mnt+0x31c/0x3ac [ 269.941150][ T32] __cleanup_mnt+0x20/0x30 [ 269.941157][ T32] task_work_run+0x1dc/0x260 [ 269.941164][ T32] exit_to_user_mode_loop+0xfc/0x178 [ 269.941172][ T32] el0_svc+0x170/0x254 [ 269.941178][ T32] el0t_64_sync_handler+0x84/0x12c [ 269.941185][ T32] el0t_64_sync+0x198/0x19c [ 269.941198][ T32] [ 269.941198][ T32] Showing all locks held in the system: [ 269.941202][ T32] 1 lock held by khungtaskd/32: [ 269.941206][ T32] #0: ffff80008f76b5a0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 [ 269.941228][ T32] 2 locks held by pr/ttyAMA-1/43: [ 269.941238][ T32] 2 locks held by getty/6334: [ 269.941242][ T32] #0: ffff0000d38ab0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 269.941260][ T32] #1: ffff80009bb2e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x34c/0xfa4 [ 269.941282][ T32] 1 lock held by syz-executor/13028: [ 269.941285][ T32] #0: ffff0000c5bae0e0 (&type->s_umount_key#120){+.+.}-{4:4}, at: deactivate_super+0xd8/0x100 [ 269.941306][ T32] [ 269.941308][ T32] ============================================= [ 269.941308][ T32] [ 269.941312][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 269.972564][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT [ 269.973859][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 269.975400][ T32] Call trace: [ 269.975906][ T32] show_stack+0x2c/0x3c (C) [ 269.976585][ T32] __dump_stack+0x30/0x40 [ 269.977277][ T32] dump_stack_lvl+0x30/0x12c [ 269.977975][ T32] dump_stack+0x1c/0x28 [ 269.978582][ T32] vpanic+0x22c/0x6c0 [ 269.979164][ T32] vpanic+0x0/0x6c0 [ 269.979726][ T32] hung_task_panic+0x0/0x2c [ 269.980404][ T32] kthread+0x5fc/0x75c [ 269.981038][ T32] ret_from_fork+0x10/0x20 [ 269.981687][ T32] SMP: stopping secondary CPUs [ 269.982409][ T32] Kernel Offset: disabled [ 269.983080][ T32] CPU features: 0x100000,0001e000,42702281,5427fea7 [ 269.984051][ T32] Memory Limit: none [ 270.353119][ T32] Rebooting in 86400 seconds..