last executing test programs: 1m29.025871297s ago: executing program 4 (id=154): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_virt_wifi\x00'}) socket(0x400000000010, 0x3, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0xffff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 'hsr0\x00'}}, 0x1e) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x400454ca, 0xf0ff1f00000000) sendmmsg(r0, &(0x7f0000001cc0), 0x400000000000026, 0x0) 1m29.004423209s ago: executing program 4 (id=156): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r0, 0x1000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1m28.947858143s ago: executing program 4 (id=158): openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1m28.929437985s ago: executing program 4 (id=159): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x22000b0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r1 = open_tree(r0, &(0x7f0000000080)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 1m28.898657117s ago: executing program 4 (id=160): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x808008, &(0x7f0000000380)=ANY=[@ANYBLOB="636f6465706167653d757466382c66696c655f756d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d63703737352c71756965742c008f7881d185c35a6a28ef06c5b85628f12a02248de249c2a338d049166371583781680d171f47"], 0x1, 0x2df, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0) 1m27.72599967s ago: executing program 4 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, 0x0, &(0x7f0000000280)}, 0x20) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0, 0x0, &(0x7f0000000c40)=[@hopopts={{0xd8, 0x29, 0x36, {0x2c, 0x17, '\x00', [@generic={0x7d, 0x42, "d30783f7a07f31d3664a2d2f31f2e73fda305965eec12d3f56d6abe379f2564db12c4c0b8ae100f693edbc5fcbca9dd969911464c65e39f6d36c2c68afcf78725c9f"}, @generic={0x2, 0x67, "8bcef587f3b2542a11a332d817d70e2b01b1c5a997542bdb7b7f7a83979a41ca1d320f694d50c09763b684b8e395fa20005f90779d2d1eac59597b0934e2b05f78bd635906a51db9a8d675fe0cb944cd373d6af59e970840ca45dcf3c08718e364550fc3746b73"}, @generic={0x2}, @enc_lim={0x4, 0x1, 0x1e}, @enc_lim={0x4, 0x1, 0x8}, @pad1, @ra={0x5, 0x2, 0x7ff}]}}}], 0xd8}, 0x40c0) 1m27.249855558s ago: executing program 32 (id=166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, 0x0, &(0x7f0000000280)}, 0x20) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0, 0x0, &(0x7f0000000c40)=[@hopopts={{0xd8, 0x29, 0x36, {0x2c, 0x17, '\x00', [@generic={0x7d, 0x42, "d30783f7a07f31d3664a2d2f31f2e73fda305965eec12d3f56d6abe379f2564db12c4c0b8ae100f693edbc5fcbca9dd969911464c65e39f6d36c2c68afcf78725c9f"}, @generic={0x2, 0x67, "8bcef587f3b2542a11a332d817d70e2b01b1c5a997542bdb7b7f7a83979a41ca1d320f694d50c09763b684b8e395fa20005f90779d2d1eac59597b0934e2b05f78bd635906a51db9a8d675fe0cb944cd373d6af59e970840ca45dcf3c08718e364550fc3746b73"}, @generic={0x2}, @enc_lim={0x4, 0x1, 0x1e}, @enc_lim={0x4, 0x1, 0x8}, @pad1, @ra={0x5, 0x2, 0x7ff}]}}}], 0xd8}, 0x40c0) 1.218030583s ago: executing program 2 (id=896): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0xba01, 0x0, 0x40011}, 0x0) 1.112030341s ago: executing program 2 (id=903): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1.074043414s ago: executing program 2 (id=905): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) 1.053491836s ago: executing program 2 (id=909): syz_open_dev$vim2m(0x0, 0x7, 0x2) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 949.994904ms ago: executing program 0 (id=911): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 923.670306ms ago: executing program 1 (id=913): ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000000)=0xde) 620.576271ms ago: executing program 0 (id=914): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc34}}, 0x20}, 0x1, 0xba01, 0x0, 0x40011}, 0x0) 599.899322ms ago: executing program 1 (id=916): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x0) 570.050055ms ago: executing program 3 (id=918): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 550.356196ms ago: executing program 0 (id=919): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x14000084}, 0x20004080) 550.248956ms ago: executing program 5 (id=920): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) 550.050146ms ago: executing program 1 (id=921): r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/212, 0xd4}, {0x0}], 0x2, 0x33, 0x10001) 535.228567ms ago: executing program 3 (id=922): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, 0x0, 0x0, 0x33, 0x10001) 535.130637ms ago: executing program 1 (id=923): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc34}}, 0x20}, 0x1, 0xba01, 0x0, 0x40011}, 0x0) 534.869517ms ago: executing program 0 (id=924): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 521.575028ms ago: executing program 5 (id=925): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0), 0x0, 0x400c094, 0x0, 0x0) 507.614279ms ago: executing program 0 (id=926): mkdirat(0xffffffffffffff9c, 0x0, 0x88) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2240}}, 0x20}}, 0x0) setreuid(0xffffffffffffffff, 0xee00) setresuid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$UHID_INPUT(r5, 0x0, 0x0) 495.72318ms ago: executing program 3 (id=927): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000014001b0528bd7000ff"], 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) 495.35178ms ago: executing program 5 (id=928): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 380.43466ms ago: executing program 3 (id=929): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc34}}, 0x20}, 0x1, 0xba01, 0x0, 0x40011}, 0x0) 380.05229ms ago: executing program 5 (id=930): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc34}}, 0x20}, 0x1, 0xba01, 0x0, 0x40011}, 0x0) 378.07323ms ago: executing program 1 (id=931): r0 = socket(0x1e, 0x4, 0x0) recvmmsg(r0, &(0x7f0000008140), 0x0, 0x7fb14726dca9, 0x0) 171.949106ms ago: executing program 3 (id=932): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 168.489866ms ago: executing program 2 (id=933): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 143.704128ms ago: executing program 5 (id=934): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, 0x0, 0x0, 0x33, 0x10001) 72.963234ms ago: executing program 1 (id=935): r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, 0x0) 42.893856ms ago: executing program 3 (id=936): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 355.94µs ago: executing program 0 (id=937): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, 0x0, 0x0, 0x33, 0x10001) 160.98µs ago: executing program 2 (id=938): capset(0x0, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) 0s ago: executing program 5 (id=939): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r0, 0x8946, 0x0) kernel console output (not intermixed with test programs): 0] binder: undelivered transaction 30, process died. [ 61.934491][ T4730] binder: undelivered TRANSACTION_COMPLETE [ 61.940968][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 61.993621][ T4928] loop5: detected capacity change from 0 to 1024 [ 62.013706][ T4928] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 62.015225][ T4928] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 62.016909][ T4928] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 62.029819][ T4928] EXT4-fs error (device loop5): ext4_get_journal_inode:5158: inode #17: comm syz.5.221: iget: bad i_size value: 4398046511204 [ 62.034362][ T4928] EXT4-fs (loop5): no journal found [ 62.129495][ T4920] loop1: detected capacity change from 0 to 256 [ 62.201432][ T4920] FAT-fs (loop1): Directory bread(block 64) failed [ 62.204645][ T4920] FAT-fs (loop1): Directory bread(block 65) failed [ 62.208147][ T4920] FAT-fs (loop1): Directory bread(block 66) failed [ 62.215999][ T4920] FAT-fs (loop1): Directory bread(block 67) failed [ 62.217271][ T4903] loop0: detected capacity change from 0 to 131072 [ 62.219689][ T4920] FAT-fs (loop1): Directory bread(block 68) failed [ 62.227905][ T4920] FAT-fs (loop1): Directory bread(block 69) failed [ 62.230314][ T4920] FAT-fs (loop1): Directory bread(block 70) failed [ 62.233837][ T4920] FAT-fs (loop1): Directory bread(block 71) failed [ 62.236122][ T4920] FAT-fs (loop1): Directory bread(block 72) failed [ 62.238409][ T4920] FAT-fs (loop1): Directory bread(block 73) failed [ 62.267273][ T4903] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 62.268776][ T4903] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 62.276382][ T4903] F2FS-fs (loop0): invalid crc value [ 62.286243][ T4903] F2FS-fs (loop0): Found nat_bits in checkpoint [ 62.298543][ T4903] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 62.299830][ T4903] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 62.381041][ T4940] binder: 4939:4940 tried to acquire reference to desc 0, got 1 instead [ 62.384203][ T4109] binder: undelivered TRANSACTION_COMPLETE [ 62.389408][ T4109] binder: undelivered transaction 38, process died. [ 62.711340][ T4950] loop0: detected capacity change from 0 to 32768 [ 62.721018][ T4950] XFS: noikeep mount option is deprecated. [ 62.776958][ T4950] XFS (loop0): Mounting V5 Filesystem [ 62.835551][ T4951] loop5: detected capacity change from 0 to 32768 [ 62.847069][ T4950] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 62.867934][ T4950] XFS (loop0): Starting recovery (logdev: internal) [ 62.877927][ T4950] XFS (loop0): Ending recovery (logdev: internal) [ 62.969211][ T4951] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 62.970934][ T4951] BTRFS info (device loop5): using free space tree [ 62.972262][ T4951] BTRFS info (device loop5): has skinny extents [ 63.011873][ T4048] XFS (loop0): Unmounting Filesystem [ 63.085636][ T4951] BTRFS info (device loop5): enabling ssd optimizations [ 63.433733][ T4999] loop0: detected capacity change from 0 to 512 [ 63.477530][ T4999] EXT4-fs (loop0): Ignoring removed oldalloc option [ 63.552732][ T4999] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.556682][ T4999] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c01c, mo2=0102] [ 63.558190][ T4999] System zones: 0-2, 18-18, 34-34 [ 63.559909][ T4999] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.237: iget: bad i_size value: 360287970189639680 [ 63.562272][ T4999] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.237: couldn't read orphan inode 15 (err -117) [ 63.564980][ T4999] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,min_batch_time=0x0000000000000006,acl,data_err=ignore,jqfmt=vfsv0,grpquota,oldalloc,grpjquota=,usrjquota=,acl,,errors=continue. Quota mode: writeback. [ 63.714045][ T5005] input: syz1 as /devices/virtual/input/input2 [ 63.724363][ T5007] loop1: detected capacity change from 0 to 1024 [ 63.747333][ T5007] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 63.756174][ T5007] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,max_dir_size_kb=0x00000000000007b1,nolazytime,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 64.019710][ T5015] tipc: Started in network mode [ 64.020965][ T5015] tipc: Node identity 7, cluster identity 4711 [ 64.022046][ T5015] tipc: Node number set to 7 [ 64.033203][ T5011] loop2: detected capacity change from 0 to 40427 [ 64.069372][ T5020] loop1: detected capacity change from 0 to 256 [ 64.099276][ T5011] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 64.099651][ T5020] exfat: Deprecated parameter 'utf8' [ 64.100644][ T5011] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x2 [ 64.104167][ T5011] F2FS-fs (loop2): invalid crc value [ 64.106460][ T5017] loop3: detected capacity change from 0 to 40427 [ 64.108635][ T5020] exfat: Deprecated parameter 'namecase' [ 64.112145][ T5020] exfat: Deprecated parameter 'namecase' [ 64.113587][ T5020] exfat: Deprecated parameter 'utf8' [ 64.114033][ T5011] F2FS-fs (loop2): Found nat_bits in checkpoint [ 64.120803][ T5020] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x8212fc2e, utbl_chksum : 0xe619d30d) [ 64.124449][ T5011] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 64.168349][ T5017] F2FS-fs (loop3): Found nat_bits in checkpoint [ 64.201315][ T5017] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 64.221440][ T5017] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 64.399732][ T5041] loop3: detected capacity change from 0 to 4096 [ 64.450361][ T5042] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 64.692875][ T5028] loop0: detected capacity change from 0 to 40427 [ 64.729874][ T5028] F2FS-fs (loop0): Found nat_bits in checkpoint [ 64.737335][ T5035] loop5: detected capacity change from 0 to 40427 [ 64.752052][ T5028] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 64.757735][ T5035] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 64.760722][ T5035] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 64.769732][ T5035] F2FS-fs (loop5): invalid crc value [ 64.775015][ T5053] loop3: detected capacity change from 0 to 512 [ 64.776841][ T5028] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 64.782598][ T5035] F2FS-fs (loop5): Found nat_bits in checkpoint [ 64.810550][ T5035] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 64.815456][ T5035] F2FS-fs (loop5): Start checkpoint disabled! [ 64.824653][ T4048] attempt to access beyond end of device [ 64.824653][ T4048] loop0: rw=2049, want=45104, limit=40427 [ 64.837848][ T5035] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 64.839671][ T5035] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 65.134661][ T4432] udevd[4432]: setting mode of /dev/gsmtty32 to 020600 failed: No such file or directory [ 65.136619][ T4432] udevd[4432]: setting owner of /dev/gsmtty32 to uid=0, gid=0 failed: No such file or directory [ 65.202880][ T5075] loop1: detected capacity change from 0 to 4096 [ 65.247315][ T5075] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 65.320771][ T5083] loop3: detected capacity change from 0 to 256 [ 65.410653][ T5082] loop0: detected capacity change from 0 to 32768 [ 65.489548][ T5083] FAT-fs (loop3): Directory bread(block 64) failed [ 65.490753][ T5083] FAT-fs (loop3): Directory bread(block 65) failed [ 65.492067][ T5083] FAT-fs (loop3): Directory bread(block 66) failed [ 65.496996][ T5083] FAT-fs (loop3): Directory bread(block 67) failed [ 65.498071][ T5083] FAT-fs (loop3): Directory bread(block 68) failed [ 65.499077][ T5083] FAT-fs (loop3): Directory bread(block 69) failed [ 65.500100][ T5083] FAT-fs (loop3): Directory bread(block 70) failed [ 65.501079][ T5083] FAT-fs (loop3): Directory bread(block 71) failed [ 65.530479][ T5083] FAT-fs (loop3): Directory bread(block 72) failed [ 65.536978][ T5083] FAT-fs (loop3): Directory bread(block 73) failed [ 65.761333][ T5094] loop3: detected capacity change from 0 to 1024 [ 65.815469][ T5094] hfsplus: unable to parse mount options [ 66.045105][ T5102] loop0: detected capacity change from 0 to 40427 [ 66.051844][ T5104] loop3: detected capacity change from 0 to 256 [ 66.074547][ T5102] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 66.075763][ T5102] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 66.078711][ T5102] F2FS-fs (loop0): invalid crc value [ 66.131203][ T5102] F2FS-fs (loop0): Found nat_bits in checkpoint [ 66.156750][ T5102] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 66.157833][ T5102] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 66.174950][ T5100] loop2: detected capacity change from 0 to 32768 [ 66.182261][ T5098] loop1: detected capacity change from 0 to 40427 [ 66.214096][ T5100] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.271 (5100) [ 66.235119][ T5098] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 66.236280][ T5098] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 66.246416][ T5098] F2FS-fs (loop1): invalid crc value [ 66.248960][ T5098] F2FS-fs (loop1): Found nat_bits in checkpoint [ 66.282220][ T5100] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 66.282568][ T5098] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 66.283840][ T5100] BTRFS info (device loop2): setting nodatacow, compression disabled [ 66.286855][ T5100] BTRFS info (device loop2): setting datacow [ 66.287993][ T5100] BTRFS info (device loop2): doing ref verification [ 66.289073][ T5100] BTRFS info (device loop2): force clearing of disk cache [ 66.293309][ T5100] BTRFS info (device loop2): turning off barriers [ 66.294444][ T5100] BTRFS info (device loop2): enabling ssd optimizations [ 66.295551][ T5100] BTRFS info (device loop2): using spread ssd allocation scheme [ 66.296844][ T5100] BTRFS info (device loop2): using free space tree [ 66.297918][ T5100] BTRFS info (device loop2): has skinny extents [ 66.303284][ T5098] F2FS-fs (loop1): Start checkpoint disabled! [ 66.339631][ T5098] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 66.340794][ T5098] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 66.408110][ T5098] attempt to access beyond end of device [ 66.408110][ T5098] loop1: rw=2049, want=53264, limit=40427 [ 66.467289][ T4740] attempt to access beyond end of device [ 66.467289][ T4740] loop1: rw=2049, want=40976, limit=40427 [ 66.530030][ T5128] loop3: detected capacity change from 0 to 1024 [ 66.559301][ T5128] EXT4-fs (loop3): inline encryption not supported [ 66.560318][ T5128] EXT4-fs (loop3): Ignoring removed bh option [ 66.561220][ T5128] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 66.628394][ T5128] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,noauto_da_alloc,data_err=ignore,discard,data_err=ignore,grpquota,noblock_validity,user_xattr,bh,errors=remount-ro,. Quota mode: writeback. [ 66.650322][ T5100] BTRFS info (device loop2): clearing free space tree [ 66.651515][ T5100] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 66.653831][ T5100] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 66.659976][ T5100] BTRFS info (device loop2): creating free space tree [ 66.661934][ T5100] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 66.676266][ T5128] Invalid ELF header len 10 [ 66.682918][ T5100] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 66.745126][ T5147] loop0: detected capacity change from 0 to 1024 [ 66.775071][ T5147] EXT4-fs (loop0): Ignoring removed nobh option [ 66.776079][ T5147] EXT4-fs (loop0): Ignoring removed bh option [ 66.777127][ T5147] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 66.788505][ T5100] BTRFS info (device loop2): balance: start -d -m [ 66.791143][ T5100] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata [ 66.821267][ T136] BTRFS info (device loop2): space_info 5 has 589824 free, is not full [ 66.822898][ T136] BTRFS info (device loop2): space_info total=3276800, used=61440, pinned=0, reserved=8192, may_use=978944, readonly=1638400 zone_unusable=0 [ 66.825258][ T136] BTRFS info (device loop2): global_block_rsv: size 851968 reserved 851968 [ 66.826754][ T136] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0 [ 66.827971][ T136] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0 [ 66.829108][ T136] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0 [ 66.830344][ T136] BTRFS info (device loop2): delayed_refs_rsv: size 262144 reserved 126976 [ 66.844667][ T5147] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 66.867365][ T5154] loop1: detected capacity change from 0 to 1024 [ 66.916970][ T5154] EXT4-fs (loop1): Ignoring removed orlov option [ 66.917981][ T5154] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 66.957823][ T5147] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.278: Allocating blocks 497-513 which overlap fs metadata [ 66.961021][ T5154] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 67.015789][ T5146] EXT4-fs (loop0): pa 00000000686f90d9: logic 80, phys. 209, len 19 [ 67.017386][ T5146] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 67.033063][ T5150] BTRFS info (device loop2): scrub: started on devid 1 [ 67.087321][ T5150] BTRFS info (device loop2): scrub: finished on devid 1 with status: 0 [ 67.089169][ T5100] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata [ 67.123637][ T5154] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.280: iget: checksum invalid [ 67.194616][ T5100] BTRFS info (device loop2): found 10 extents, stage: move data extents [ 67.267575][ T5100] BTRFS info (device loop2): found 1 extents, stage: update data pointers [ 67.301024][ T5100] BTRFS info (device loop2): balance: ended with status: 0 [ 67.357854][ T5175] loop3: detected capacity change from 0 to 256 [ 67.523108][ T5175] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 67.524508][ T5175] FAT-fs (loop3): Filesystem has been set read-only [ 67.525522][ T5175] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 67.527312][ T5175] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 67.533225][ T5175] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2097152) [ 67.542963][ T4112] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 67.748102][ T5185] loop3: detected capacity change from 0 to 32768 [ 67.777833][ T4432] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 25 /dev/loop2 scanned by udevd (4432) [ 67.833475][ T5185] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.289 (5185) [ 67.845841][ T5185] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 67.847142][ T5185] BTRFS info (device loop3): using free space tree [ 67.848200][ T5185] BTRFS info (device loop3): has skinny extents [ 67.875752][ T4112] usb 1-1: Using ep0 maxpacket: 16 [ 68.013378][ T4112] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.014985][ T4112] usb 1-1: config 0 has no interfaces? [ 68.020830][ T5183] loop1: detected capacity change from 0 to 40427 [ 68.025670][ T5183] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 68.027510][ T5183] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 68.029824][ T5183] F2FS-fs (loop1): invalid crc value [ 68.049340][ T5179] loop2: detected capacity change from 0 to 32768 [ 68.067041][ T5183] F2FS-fs (loop1): Found nat_bits in checkpoint [ 68.096649][ T5183] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 68.097782][ T5183] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 68.105121][ T5185] BTRFS info (device loop3): enabling ssd optimizations [ 68.180852][ T5179] XFS (loop2): Mounting V5 Filesystem [ 68.186747][ T4112] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 68.188245][ T4112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.189579][ T4112] usb 1-1: Product: syz [ 68.190191][ T4112] usb 1-1: Manufacturer: syz [ 68.190855][ T4112] usb 1-1: SerialNumber: syz [ 68.199549][ T4112] usb 1-1: config 0 descriptor?? [ 68.308203][ T5179] XFS (loop2): Ending clean mount [ 68.347567][ T4049] XFS (loop2): Unmounting Filesystem [ 68.385395][ T5224] loop1: detected capacity change from 0 to 1024 [ 68.497777][ T5224] EXT4-fs (loop1): Ignoring removed nobh option [ 68.498868][ T5224] EXT4-fs (loop1): Ignoring removed bh option [ 68.499782][ T5224] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 68.515887][ T5222] loop5: detected capacity change from 0 to 40427 [ 68.527425][ T5224] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 68.537950][ T5224] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.303: Allocating blocks 497-513 which overlap fs metadata [ 68.541028][ T5223] EXT4-fs (loop1): pa 000000000ff093c8: logic 80, phys. 209, len 19 [ 68.542356][ T5223] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 68.559620][ T5228] loop3: detected capacity change from 0 to 1024 [ 68.582148][ T5222] F2FS-fs (loop5): build fault injection attr: rate: 19, type: 0x1ffff [ 68.593714][ T5222] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0xe [ 68.602826][ T5222] F2FS-fs (loop5): invalid crc value [ 68.609120][ T5222] F2FS-fs (loop5) : inject kvmalloc in f2fs_kvmalloc of build_dirty_segmap+0x174/0xd0c [ 68.610765][ T5222] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-12) [ 68.881451][ T5236] loop2: detected capacity change from 0 to 40427 [ 68.918404][ T5236] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 68.919794][ T5236] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 68.932480][ T5236] F2FS-fs (loop2): SIT is corrupted data# 5 7 vs 11 [ 68.933844][ T5236] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 68.992864][ T5247] device syzkaller0 entered promiscuous mode [ 69.109350][ T5245] loop5: detected capacity change from 0 to 32768 [ 69.149482][ T5245] XFS (loop5): Mounting V5 Filesystem [ 69.167099][ T5245] XFS (loop5): Ending clean mount [ 69.191136][ T4656] XFS (loop5): Unmounting Filesystem [ 69.566002][ T5260] loop3: detected capacity change from 0 to 40427 [ 69.606638][ T5260] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 69.607840][ T5260] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 69.613177][ T5260] F2FS-fs (loop3): invalid crc value [ 69.626645][ T3338] cfg80211: failed to load regulatory.db [ 69.629407][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.630614][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.730648][ T5260] F2FS-fs (loop3): Found nat_bits in checkpoint [ 69.797381][ T5260] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 69.798548][ T5260] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 70.259549][ T3338] usb 1-1: USB disconnect, device number 4 [ 70.319341][ T5278] loop0: detected capacity change from 0 to 1024 [ 70.352199][ T5278] EXT4-fs (loop0): Ignoring removed nobh option [ 70.354033][ T5278] EXT4-fs (loop0): Ignoring removed bh option [ 70.355012][ T5278] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 70.379620][ T5278] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 71.414244][ T5297] loop5: detected capacity change from 0 to 40427 [ 71.465402][ T5297] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 71.466791][ T5297] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 71.473080][ T5297] F2FS-fs (loop5): invalid crc value [ 71.497165][ T5297] F2FS-fs (loop5): Found nat_bits in checkpoint [ 71.512438][ T5297] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 71.513869][ T5297] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 71.840470][ T5314] loop3: detected capacity change from 0 to 1024 [ 71.979876][ T5314] EXT4-fs (loop3): Ignoring removed nobh option [ 71.980916][ T5314] EXT4-fs (loop3): Ignoring removed bh option [ 71.981834][ T5314] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 72.031160][ T5314] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 72.296932][ T5338] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 72.648884][ T5353] loop5: detected capacity change from 0 to 1024 [ 72.660868][ T5353] EXT4-fs (loop5): Ignoring removed nobh option [ 72.667270][ T5353] EXT4-fs (loop5): Ignoring removed bh option [ 72.668238][ T5353] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 72.682914][ T5356] loop1: detected capacity change from 0 to 1024 [ 72.696839][ T5356] EXT4-fs (loop1): Ignoring removed bh option [ 72.702091][ T5353] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 72.719462][ T5356] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 72.957011][ T5356] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:106: comm syz.1.337: Corrupt inode bitmap - block_group = 0, inode_bitmap = 4 [ 72.966811][ T5356] EXT4-fs (loop1): Remounting filesystem read-only [ 73.245533][ T5366] loop0: detected capacity change from 0 to 1024 [ 73.308758][ T5366] EXT4-fs (loop0): Ignoring removed nobh option [ 73.309884][ T5366] EXT4-fs (loop0): Ignoring removed bh option [ 73.310920][ T5366] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 73.338142][ T5366] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 73.371553][ T5366] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.348: Allocating blocks 497-513 which overlap fs metadata [ 73.380377][ T5364] EXT4-fs (loop0): pa 000000000a9cc734: logic 304, phys. 433, len 5 [ 73.381710][ T5364] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 73.422875][ T5377] binder: 5376:5377 tried to acquire reference to desc 0, got 1 instead [ 73.425989][ T5377] binder: 5376:5377 got transaction with fd, 0, but target does not allow fds [ 73.428044][ T5377] binder: 5376:5377 transaction failed 29201/-1, size 112-24 line 3331 [ 73.435246][ T3625] binder: undelivered TRANSACTION_ERROR: 29201 [ 73.876378][ T5390] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 74.143423][ T5395] loop2: detected capacity change from 0 to 1024 [ 74.159595][ T5395] EXT4-fs (loop2): Ignoring removed bh option [ 74.188969][ T5395] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 74.308865][ T5063] udevd[5063]: incorrect jbd checksum on /dev/loop2 [ 74.324970][ T5395] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:106: comm syz.2.350: Corrupt inode bitmap - block_group = 0, inode_bitmap = 4 [ 74.333211][ T5395] EXT4-fs (loop2): Remounting filesystem read-only [ 74.656861][ T5412] binder: 5411:5412 tried to acquire reference to desc 0, got 1 instead [ 74.658871][ T5412] binder: 5411:5412 got transaction with fd, 0, but target does not allow fds [ 74.660646][ T5412] binder: 5411:5412 transaction failed 29201/-1, size 112-24 line 3331 [ 74.660716][ T5414] loop1: detected capacity change from 0 to 1024 [ 74.663489][ T3338] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.743294][ T5414] EXT4-fs (loop1): Ignoring removed nobh option [ 74.744304][ T5414] EXT4-fs (loop1): Ignoring removed bh option [ 74.745258][ T5414] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 74.795583][ T5414] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 74.801762][ T5418] block device autoloading is deprecated and will be removed. [ 74.806589][ T5422] block device autoloading is deprecated and will be removed. [ 74.818858][ T5414] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.356: Allocating blocks 497-513 which overlap fs metadata [ 74.833224][ T5413] EXT4-fs (loop1): pa 000000008a674bb7: logic 304, phys. 433, len 5 [ 74.834419][ T5413] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 75.026211][ T5430] loop2: detected capacity change from 0 to 128 [ 75.032423][ T5428] loop0: detected capacity change from 0 to 1024 [ 75.067248][ T5428] EXT4-fs (loop0): Ignoring removed nobh option [ 75.068234][ T5428] EXT4-fs (loop0): Ignoring removed bh option [ 75.069225][ T5428] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.090570][ T5430] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,init_itable,,errors=continue. Quota mode: none. [ 75.123557][ T5436] loop3: detected capacity change from 0 to 1024 [ 75.128568][ T5428] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 75.137974][ T5428] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.371: Allocating blocks 497-513 which overlap fs metadata [ 75.140859][ T5427] EXT4-fs (loop0): pa 000000004b043adb: logic 304, phys. 433, len 5 [ 75.142126][ T5427] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 75.164608][ T5436] EXT4-fs (loop3): Ignoring removed bh option [ 75.178638][ T5436] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 75.276558][ T5063] udevd[5063]: incorrect jbd checksum on /dev/loop3 [ 75.281713][ T5436] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:106: comm syz.3.364: Corrupt inode bitmap - block_group = 0, inode_bitmap = 4 [ 75.286059][ T5436] EXT4-fs (loop3): Remounting filesystem read-only [ 75.392433][ T5448] loop0: detected capacity change from 0 to 1024 [ 75.399190][ T5450] loop3: detected capacity change from 0 to 512 [ 75.405507][ T5448] EXT4-fs (loop0): Ignoring removed bh option [ 75.428957][ T5448] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 75.475081][ T5450] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 75.489027][ T5450] EXT4-fs (loop3): 1 truncate cleaned up [ 75.491240][ T5450] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 75.543082][ T5448] EXT4-fs error (device loop0): ext4_validate_inode_bitmap:106: comm syz.0.380: Corrupt inode bitmap - block_group = 0, inode_bitmap = 4 [ 75.545677][ T5448] EXT4-fs (loop0): Remounting filesystem read-only [ 75.597116][ T5458] binder: 5457:5458 tried to acquire reference to desc 0, got 1 instead [ 75.599240][ T5458] binder: 5457:5458 got transaction with invalid handle, 3 [ 75.600612][ T5458] binder: 5457:5458 transaction failed 29201/-22, size 72-24 line 3242 [ 75.602679][ T4095] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.912157][ T5469] loop0: detected capacity change from 0 to 1024 [ 75.957732][ T5469] EXT4-fs (loop0): Ignoring removed nobh option [ 75.958874][ T5469] EXT4-fs (loop0): Ignoring removed bh option [ 75.959865][ T5469] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 75.984477][ T5465] block device autoloading is deprecated and will be removed. [ 75.996677][ T5469] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 76.028648][ T5469] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.378: Allocating blocks 497-513 which overlap fs metadata [ 76.031755][ T5468] EXT4-fs (loop0): pa 00000000dfafe3e9: logic 304, phys. 433, len 5 [ 76.033357][ T5468] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 76.729287][ T5484] loop0: detected capacity change from 0 to 1024 [ 76.746648][ T5484] EXT4-fs (loop0): Ignoring removed nobh option [ 76.754763][ T5484] EXT4-fs (loop0): Ignoring removed bh option [ 76.755739][ T5484] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 76.797375][ T5484] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 76.821924][ T5484] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.391: Allocating blocks 497-513 which overlap fs metadata [ 76.825978][ T5483] EXT4-fs (loop0): pa 00000000cc9589e9: logic 304, phys. 433, len 5 [ 76.827241][ T5483] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 76.834633][ T5495] block device autoloading is deprecated and will be removed. [ 76.841488][ T5496] loop2: detected capacity change from 0 to 512 [ 76.850155][ T5488] md: md2 stopped. [ 76.864615][ T5500] loop1: detected capacity change from 0 to 256 [ 76.878573][ T5496] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 76.886575][ T5498] binder: 5497:5498 tried to acquire reference to desc 0, got 1 instead [ 76.894288][ T5500] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.895975][ T5496] EXT4-fs (loop2): 1 truncate cleaned up [ 76.896203][ T5500] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 76.897000][ T5496] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 76.899677][ T5503] loop3: detected capacity change from 0 to 128 [ 76.924919][ T5498] binder: 5497:5498 got transaction with invalid handle, 3 [ 76.926379][ T5498] binder: 5497:5498 transaction failed 29201/-22, size 72-24 line 3242 [ 76.929840][ T5500] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 76.935407][ T4169] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.970130][ T5503] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,init_itable,,errors=continue. Quota mode: none. [ 77.087345][ T5514] binder: 5513:5514 tried to acquire reference to desc 0, got 1 instead [ 77.089119][ T5514] binder: 5513:5514 transaction failed 29201/-22, size 120--83 line 3085 [ 77.090899][ T4169] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.328838][ T5518] loop3: detected capacity change from 0 to 32768 [ 77.367578][ T5518] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.395 (5518) [ 77.404301][ T5522] udc-core: couldn't find an available UDC or it's busy [ 77.405745][ T5518] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 77.405786][ T5522] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 77.407171][ T5518] BTRFS info (device loop3): force clearing of disk cache [ 77.409489][ T5518] BTRFS info (device loop3): force zlib compression, level 3 [ 77.410967][ T5518] BTRFS info (device loop3): enabling auto defrag [ 77.412751][ T5518] BTRFS info (device loop3): max_inline at 0 [ 77.414761][ T5518] BTRFS info (device loop3): enabling disk space caching [ 77.415978][ T5518] BTRFS info (device loop3): disk space caching is enabled [ 77.417480][ T5518] BTRFS info (device loop3): has skinny extents [ 77.421699][ T5522] netlink: 44278 bytes leftover after parsing attributes in process `syz.1.396'. [ 77.424559][ T5522] net_ratelimit: 67 callbacks suppressed [ 77.424567][ T5522] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 77.442307][ T5518] BTRFS info (device loop3): enabling ssd optimizations [ 77.446699][ T5518] BTRFS info (device loop3): clearing free space tree [ 77.448223][ T5518] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 77.450265][ T5518] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 77.503187][ T4633] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 77.528822][ T4633] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 77.661428][ T5544] loop2: detected capacity change from 0 to 1024 [ 77.668627][ T5544] EXT4-fs (loop2): Ignoring removed nobh option [ 77.669784][ T5544] EXT4-fs (loop2): Ignoring removed bh option [ 77.670738][ T5544] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 77.698117][ T5544] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 77.708989][ T5544] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3876: comm syz.2.399: Allocating blocks 497-513 which overlap fs metadata [ 77.712162][ T5543] EXT4-fs (loop2): pa 000000004e7382e3: logic 304, phys. 433, len 5 [ 77.713686][ T5543] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 77.804970][ T5550] binder: 5549:5550 ioctl c0306201 20000080 returned -14 [ 77.808167][ T5553] loop0: detected capacity change from 0 to 1024 [ 77.818278][ T5550] binder: 5549:5550 tried to acquire reference to desc 0, got 1 instead [ 77.820288][ T5550] binder: 5549:5550 got transaction with invalid offsets ptr [ 77.821474][ T5550] binder: 5549:5550 transaction failed 29201/-22, size 112-24 line 3417 [ 77.831911][ T13] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.834556][ T5554] Bluetooth: (null): Invalid header checksum [ 77.847685][ T5558] loop2: detected capacity change from 0 to 256 [ 77.855394][ T5553] EXT4-fs (loop0): Ignoring removed nobh option [ 77.856349][ T5553] EXT4-fs (loop0): Ignoring removed bh option [ 77.857378][ T5553] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 77.877564][ T5553] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 77.889145][ T5558] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.890867][ T5558] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 77.891104][ T5561] block device autoloading is deprecated and will be removed. [ 77.899841][ T5558] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 77.923319][ T5553] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.411: Allocating blocks 497-513 which overlap fs metadata [ 77.926907][ T5551] EXT4-fs (loop0): pa 00000000e00fc363: logic 80, phys. 209, len 19 [ 77.928304][ T5551] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 77.952404][ T5556] md: md2 stopped. [ 78.014421][ T5565] binder: 5564:5565 tried to acquire reference to desc 0, got 1 instead [ 78.016242][ T5565] binder: 5564:5565 transaction failed 29201/-22, size 120--83 line 3085 [ 78.030238][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.041561][ T5570] loop0: detected capacity change from 0 to 4096 [ 78.099653][ T5575] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 78.100732][ T5575] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 78.101928][ T5575] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 78.103030][ T5575] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 78.125524][ T5575] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 78.126600][ T5575] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 78.130280][ T5570] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.138223][ T5575] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 78.139326][ T5575] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 78.140339][ T5575] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 78.234921][ T5579] loop2: detected capacity change from 0 to 32768 [ 78.245615][ T5570] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 78.247361][ T5570] overlayfs: failed to set xattr on upper [ 78.248189][ T5570] overlayfs: ...falling back to index=off,metacopy=off. [ 78.271808][ T5581] binder: 5580:5581 tried to acquire reference to desc 0, got 1 instead [ 78.276275][ T5581] binder: 5580:5581 got transaction with invalid offset (80, min 0 max 104) or object. [ 78.285505][ T5579] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.409 (5579) [ 78.296442][ T5581] binder: 5580:5581 transaction failed 29201/-22, size 104-24 line 3199 [ 78.299057][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.341058][ T5588] binder: 5586:5588 ioctl c0306201 20000080 returned -14 [ 78.347633][ T5579] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 78.350321][ T5579] BTRFS info (device loop2): force clearing of disk cache [ 78.351672][ T5588] binder: 5586:5588 tried to acquire reference to desc 0, got 1 instead [ 78.353002][ T5579] BTRFS info (device loop2): force zlib compression, level 3 [ 78.359095][ T5588] binder: 5586:5588 got transaction with invalid offsets ptr [ 78.360585][ T5588] binder: 5586:5588 transaction failed 29201/-22, size 112-24 line 3417 [ 78.361770][ T5579] BTRFS info (device loop2): enabling auto defrag [ 78.367172][ T5579] BTRFS info (device loop2): max_inline at 0 [ 78.369858][ T5579] BTRFS info (device loop2): enabling disk space caching [ 78.373315][ T5579] BTRFS info (device loop2): disk space caching is enabled [ 78.373835][ T4095] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.377791][ T5579] BTRFS info (device loop2): has skinny extents [ 78.469149][ T5600] Bluetooth: (null): Invalid header checksum [ 78.527050][ T5579] BTRFS info (device loop2): enabling ssd optimizations [ 78.528849][ T5579] BTRFS info (device loop2): clearing free space tree [ 78.530012][ T5579] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 78.531829][ T5579] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 78.555155][ T5608] udc-core: couldn't find an available UDC or it's busy [ 78.556403][ T5608] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 78.559090][ T5608] netlink: 44278 bytes leftover after parsing attributes in process `syz.3.417'. [ 78.567613][ T5616] loop1: detected capacity change from 0 to 1024 [ 78.595304][ T4740] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 78.606894][ T5616] EXT4-fs (loop1): Ignoring removed nobh option [ 78.608105][ T5616] EXT4-fs (loop1): Ignoring removed bh option [ 78.609203][ T5616] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.627441][ T136] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 78.657874][ T5616] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 78.738846][ T5616] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.418: Allocating blocks 481-513 which overlap fs metadata [ 78.747358][ T5615] EXT4-fs (loop1): pa 00000000a5250940: logic 48, phys. 161, len 22 [ 78.748769][ T5615] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 2 [ 78.790040][ T5625] loop2: detected capacity change from 0 to 128 [ 78.814088][ T5627] loop0: detected capacity change from 0 to 1024 [ 78.839370][ T5629] loop1: detected capacity change from 0 to 4096 [ 78.864653][ T5627] EXT4-fs (loop0): Ignoring removed orlov option [ 78.876395][ T5631] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 78.905084][ T5627] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,journal_dev=0x0000000000001045,errors=continue,noquota,data_err=ignore,noblock_validity,delalloc,noauto_da_alloc,orlov,user_xattr,nodioread_nolock,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 78.911645][ T5629] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 78.965940][ T7] Process accounting resumed [ 78.966515][ T5629] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 78.967896][ T5629] overlayfs: failed to set xattr on upper [ 78.969214][ T5629] overlayfs: ...falling back to index=off,metacopy=off. [ 79.110465][ T5639] binder: 5638:5639 tried to acquire reference to desc 0, got 1 instead [ 79.119854][ T5639] binder: 5638:5639 got transaction with invalid offset (80, min 0 max 104) or object. [ 79.121500][ T5639] binder: 5638:5639 transaction failed 29201/-22, size 104-24 line 3199 [ 79.133296][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.804654][ T5652] loop5: detected capacity change from 0 to 1024 [ 79.826925][ T5652] EXT4-fs (loop5): Ignoring removed nobh option [ 79.828012][ T5652] EXT4-fs (loop5): Ignoring removed bh option [ 79.828992][ T5652] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 79.860739][ T5652] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 79.891027][ T5652] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3876: comm syz.5.434: Allocating blocks 481-513 which overlap fs metadata [ 79.906727][ T5651] EXT4-fs (loop5): pa 00000000a0bf2856: logic 48, phys. 161, len 22 [ 79.908134][ T5651] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 2 [ 79.925081][ T5647] tipc: Started in network mode [ 79.925943][ T5647] tipc: Node identity 7, cluster identity 4711 [ 79.926948][ T5647] tipc: Node number set to 7 [ 79.936579][ T5653] chnl_net:caif_netlink_parms(): no params data found [ 79.985075][ T5653] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.986304][ T5653] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.988009][ T5653] device bridge_slave_0 entered promiscuous mode [ 79.990148][ T5653] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.991413][ T5653] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.993659][ T5653] device bridge_slave_1 entered promiscuous mode [ 80.011753][ T5653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.023976][ T5653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.043122][ T5653] team0: Port device team_slave_0 added [ 80.045851][ T5653] team0: Port device team_slave_1 added [ 80.100480][ T5653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.101702][ T5653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.120388][ T5653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.129030][ T5653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.130166][ T5653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.140521][ T5653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.197253][ T5668] loop5: detected capacity change from 0 to 32768 [ 80.200633][ T5668] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.435 (5668) [ 80.212169][ T5668] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 80.214376][ T5668] BTRFS info (device loop5): force clearing of disk cache [ 80.215523][ T5668] BTRFS info (device loop5): force zlib compression, level 3 [ 80.216720][ T5668] BTRFS info (device loop5): enabling auto defrag [ 80.217765][ T5668] BTRFS info (device loop5): max_inline at 0 [ 80.218752][ T5668] BTRFS info (device loop5): enabling disk space caching [ 80.219864][ T5668] BTRFS info (device loop5): disk space caching is enabled [ 80.221042][ T5668] BTRFS info (device loop5): has skinny extents [ 80.244130][ T5653] device hsr_slave_0 entered promiscuous mode [ 80.283009][ T5653] device hsr_slave_1 entered promiscuous mode [ 80.307166][ T5668] BTRFS info (device loop5): enabling ssd optimizations [ 80.308865][ T5668] BTRFS info (device loop5): clearing free space tree [ 80.310190][ T5668] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 80.311724][ T5668] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 80.314969][ T5653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.316226][ T5653] Cannot create hsr debugfs directory [ 80.394972][ T9] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 80.448672][ T5653] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.456960][ T4740] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 80.580180][ T5653] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.588966][ T5696] udc-core: couldn't find an available UDC or it's busy [ 80.590124][ T5696] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 80.592852][ T5696] netlink: 44278 bytes leftover after parsing attributes in process `syz.2.439'. [ 80.681789][ T5653] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.687262][ T5699] loop5: detected capacity change from 0 to 128 [ 80.736546][ T5653] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.798056][ T5705] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 80.924638][ T5709] loop1: detected capacity change from 0 to 1024 [ 80.939913][ T5709] EXT4-fs (loop1): Ignoring removed nobh option [ 80.941280][ T5709] EXT4-fs (loop1): Ignoring removed bh option [ 80.942265][ T5709] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 80.951552][ T5653] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.955891][ T5711] input: syz1 as /devices/virtual/input/input3 [ 80.973797][ T5709] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 80.995091][ T5709] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.446: Allocating blocks 481-513 which overlap fs metadata [ 81.014403][ T5653] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.019579][ T5708] EXT4-fs (loop1): pa 000000001e1935af: logic 48, phys. 161, len 22 [ 81.020893][ T5708] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 2 [ 81.110078][ T5653] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.120915][ T5718] loop0: detected capacity change from 0 to 1024 [ 81.159975][ T5653] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.167501][ T5718] EXT4-fs (loop0): Ignoring removed nobh option [ 81.168516][ T5718] EXT4-fs (loop0): Ignoring removed bh option [ 81.169460][ T5718] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.204486][ T5718] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 81.216992][ T5718] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.460: Allocating blocks 481-513 which overlap fs metadata [ 81.220033][ T5716] EXT4-fs (loop0): pa 00000000f4596a7c: logic 48, phys. 161, len 22 [ 81.221423][ T5716] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 2 [ 81.320554][ T5719] tipc: Started in network mode [ 81.321425][ T5719] tipc: Node identity 7, cluster identity 4711 [ 81.322444][ T5719] tipc: Node number set to 7 [ 81.367700][ T5653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.383382][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.385003][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.389143][ T5653] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.392375][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.394645][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.396155][ T4633] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.397349][ T4633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.399081][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.402064][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.404237][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.405589][ T4633] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.406692][ T4633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.409331][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.412585][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.416323][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.420415][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.422167][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.432178][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.435176][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.441268][ T5653] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.443304][ T5653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.447468][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.449174][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.450934][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.452540][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.454352][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.711574][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.713051][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.718452][ T5653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.725385][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.727161][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.735197][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.736885][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.739170][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.740717][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.747378][ T5653] device veth0_vlan entered promiscuous mode [ 81.751187][ T5653] device veth1_vlan entered promiscuous mode [ 81.761512][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.764578][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.766215][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.767788][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.770597][ T5653] device veth0_macvtap entered promiscuous mode [ 81.776436][ T5653] device veth1_macvtap entered promiscuous mode [ 81.786000][ T5653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.787575][ T5653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.789308][ T5653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.791144][ T5653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.793380][ T5653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.795132][ T5653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.796600][ T5653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.798182][ T5653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.799846][ T5653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.801415][ T5653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.804227][ T5653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.806549][ T5653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.808185][ T5653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.809827][ T5653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.811604][ T5653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.814831][ T5653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.816465][ T5653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.817992][ T5653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.819600][ T5653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.821270][ T5653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.823158][ T5653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.824848][ T5653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.826613][ T5653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.829461][ T5653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.834692][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.836306][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.837838][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.839457][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.841584][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.843423][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.847323][ T5653] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.848893][ T5653] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.850387][ T5653] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.851846][ T5653] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.863991][ T25] Bluetooth: hci4: command 0x0409 tx timeout [ 81.887871][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.889712][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.894883][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.900935][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.903096][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.918576][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.956160][ T5739] loop3: detected capacity change from 0 to 1024 [ 81.967499][ T5739] EXT4-fs (loop3): Ignoring removed orlov option [ 81.987737][ T5739] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,journal_dev=0x0000000000001045,errors=continue,noquota,data_err=ignore,noblock_validity,delalloc,noauto_da_alloc,orlov,user_xattr,nodioread_nolock,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 82.009259][ T25] Process accounting resumed [ 82.111046][ T5740] chnl_net:caif_netlink_parms(): no params data found [ 82.161816][ T5755] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 82.172791][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.174091][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.180948][ T5740] device bridge_slave_0 entered promiscuous mode [ 82.203308][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.206793][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.208426][ T5740] device bridge_slave_1 entered promiscuous mode [ 82.252072][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.271087][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.333611][ T5740] team0: Port device team_slave_0 added [ 82.342081][ T5740] team0: Port device team_slave_1 added [ 82.379289][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.380481][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.391984][ T5760] loop0: detected capacity change from 0 to 32768 [ 82.398056][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.400970][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.402059][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.418107][ T5771] input: syz1 as /devices/virtual/input/input4 [ 82.427338][ T5769] loop2: detected capacity change from 0 to 1024 [ 82.429016][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.464722][ T5769] EXT4-fs (loop2): Ignoring removed nobh option [ 82.465762][ T5769] EXT4-fs (loop2): Ignoring removed bh option [ 82.474564][ T5740] device hsr_slave_0 entered promiscuous mode [ 82.482763][ T5760] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.453 (5760) [ 82.487111][ T5769] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.519455][ T5760] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 82.520942][ T5760] BTRFS info (device loop0): force clearing of disk cache [ 82.522092][ T5760] BTRFS info (device loop0): force zlib compression, level 3 [ 82.524252][ T5740] device hsr_slave_1 entered promiscuous mode [ 82.538308][ T5760] BTRFS info (device loop0): enabling auto defrag [ 82.539384][ T5760] BTRFS info (device loop0): max_inline at 0 [ 82.540308][ T5760] BTRFS info (device loop0): enabling disk space caching [ 82.541444][ T5760] BTRFS info (device loop0): disk space caching is enabled [ 82.542493][ T5760] BTRFS info (device loop0): has skinny extents [ 82.550260][ T5769] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 82.554699][ T5740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.555815][ T5740] Cannot create hsr debugfs directory [ 82.603402][ T5769] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3876: comm syz.2.462: Allocating blocks 481-513 which overlap fs metadata [ 82.607894][ T5768] EXT4-fs (loop2): pa 000000005b3a97f1: logic 48, phys. 161, len 22 [ 82.609187][ T5768] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 2 [ 82.680080][ T5740] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.685762][ T5789] loop2: detected capacity change from 0 to 1024 [ 82.703679][ T5760] BTRFS info (device loop0): enabling ssd optimizations [ 82.705392][ T5760] BTRFS info (device loop0): clearing free space tree [ 82.706807][ T5760] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 82.708766][ T5760] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 82.750880][ T5789] EXT4-fs (loop2): Ignoring removed orlov option [ 82.766962][ T136] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 82.788650][ T5740] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.817302][ T5789] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,journal_dev=0x0000000000001045,errors=continue,noquota,data_err=ignore,noblock_validity,delalloc,noauto_da_alloc,orlov,user_xattr,nodioread_nolock,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 82.858200][ T136] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 82.866231][ T4113] Process accounting resumed [ 82.875040][ T5740] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.934846][ T5740] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.097654][ T5740] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 83.129912][ T5803] loop2: detected capacity change from 0 to 1024 [ 83.130596][ T5801] loop0: detected capacity change from 0 to 1024 [ 83.164210][ T5740] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 83.179347][ T5801] EXT4-fs (loop0): Ignoring removed nobh option [ 83.180405][ T5801] EXT4-fs (loop0): Ignoring removed bh option [ 83.181361][ T5801] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 83.201412][ T5803] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 83.203056][ T5740] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 83.222437][ T5803] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,max_dir_size_kb=0x00000000000007b1,nolazytime,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 83.234976][ T5740] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 83.271784][ T5801] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 83.314856][ T5801] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.474: Allocating blocks 481-513 which overlap fs metadata [ 83.331297][ T5800] EXT4-fs (loop0): pa 000000009f2a2ebc: logic 48, phys. 161, len 22 [ 83.332581][ T5800] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 2 [ 83.430143][ T5807] tipc: Started in network mode [ 83.431011][ T5807] tipc: Node identity 7, cluster identity 4711 [ 83.431953][ T5807] tipc: Node number set to 7 [ 83.476839][ T5823] loop2: detected capacity change from 0 to 512 [ 83.501944][ T5823] EXT4-fs (loop2): Ignoring removed oldalloc option [ 83.559941][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.568011][ T5823] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.577365][ T5823] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c01c, mo2=0102] [ 83.578798][ T5823] System zones: 0-2, 18-18, 34-34 [ 83.580399][ T5823] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.467: iget: bad i_size value: 360287970189639680 [ 83.589881][ T5823] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.467: couldn't read orphan inode 15 (err -117) [ 83.597123][ T5823] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,min_batch_time=0x0000000000000006,acl,data_err=ignore,jqfmt=vfsv0,grpquota,oldalloc,grpjquota=,usrjquota=,acl,,errors=continue. Quota mode: writeback. [ 83.616815][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.629536][ T4740] device hsr_slave_0 left promiscuous mode [ 83.673818][ T4740] device hsr_slave_1 left promiscuous mode [ 83.743722][ T4740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.745081][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.747237][ T4740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.748682][ T4740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.751975][ T4740] device bridge_slave_1 left promiscuous mode [ 83.756265][ T4740] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.795582][ T4740] device bridge_slave_0 left promiscuous mode [ 83.796719][ T4740] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.923150][ T4740] device veth1_macvtap left promiscuous mode [ 83.924456][ T4740] device veth0_macvtap left promiscuous mode [ 83.925452][ T4740] device veth1_vlan left promiscuous mode [ 83.926389][ T4740] device veth0_vlan left promiscuous mode [ 83.942768][ T3625] Bluetooth: hci4: command 0x041b tx timeout [ 84.027300][ T3625] Bluetooth: hci1: command 0x0409 tx timeout [ 84.179842][ T4740] team0 (unregistering): Port device team_slave_1 removed [ 84.200694][ T4740] team0 (unregistering): Port device team_slave_0 removed [ 84.209180][ T4740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.272116][ T4740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.419437][ T5845] input: syz1 as /devices/virtual/input/input5 [ 84.480148][ T4740] bond0 (unregistering): Released all slaves [ 84.586774][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.588479][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.607589][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.609450][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.620324][ T4212] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.621633][ T4212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.631603][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.633863][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.635425][ T4212] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.636596][ T4212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.638271][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.639947][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.659609][ T5740] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.661341][ T5740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.665505][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.667023][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.669138][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.670819][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.677652][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.679513][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.680966][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.682549][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.685428][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.709070][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.710816][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.782334][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.783844][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.788577][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.871886][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.873827][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.886517][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.888086][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.889666][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.891199][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.899253][ T5740] device veth0_vlan entered promiscuous mode [ 84.904874][ T5740] device veth1_vlan entered promiscuous mode [ 84.919842][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.921241][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.922592][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.925214][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.929174][ T5740] device veth0_macvtap entered promiscuous mode [ 84.929405][ T5861] loop1: detected capacity change from 0 to 32768 [ 84.931899][ T5740] device veth1_macvtap entered promiscuous mode [ 84.939077][ T5861] XFS: noikeep mount option is deprecated. [ 84.949449][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.951349][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.960284][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.962114][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.964405][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.966230][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.967966][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.969778][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.971927][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.978677][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.990030][ T5861] XFS (loop1): Mounting V5 Filesystem [ 84.995064][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.996536][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.998097][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.999917][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.001668][ T4212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.007045][ T5867] loop0: detected capacity change from 0 to 32768 [ 85.020718][ T5867] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.480 (5867) [ 85.033959][ T5867] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 85.036592][ T5867] BTRFS info (device loop0): using free space tree [ 85.038855][ T5861] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 85.038974][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.042329][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.045369][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.047158][ T5867] BTRFS info (device loop0): has skinny extents [ 85.050424][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.053954][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.055659][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.057223][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.058905][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.060464][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.067892][ T5861] XFS (loop1): Starting recovery (logdev: internal) [ 85.069148][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.070908][ T5740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.075130][ T5740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.080110][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.081601][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.083363][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.087242][ T5861] XFS (loop1): Ending recovery (logdev: internal) [ 85.090769][ T5740] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.102733][ T5740] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.104163][ T5740] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.105528][ T5740] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.146974][ T4633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.148420][ T4633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.151912][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.155080][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.156624][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.159042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.199062][ T5867] BTRFS info (device loop0): enabling ssd optimizations [ 85.261765][ T4044] XFS (loop1): Unmounting Filesystem [ 85.325473][ T5906] udc-core: couldn't find an available UDC or it's busy [ 85.335391][ T5906] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 85.349476][ T5905] netlink: 44278 bytes leftover after parsing attributes in process `syz.5.463'. [ 85.351593][ T5905] net_ratelimit: 297 callbacks suppressed [ 85.351599][ T5905] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 85.370456][ T5063] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (5063) [ 86.032784][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 86.102825][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 86.155863][ T5918] tipc: Started in network mode [ 86.158994][ T5918] tipc: Node identity 7, cluster identity 4711 [ 86.159990][ T5918] tipc: Node number set to 7 [ 86.202174][ T5914] loop2: detected capacity change from 0 to 32768 [ 86.222212][ T5914] XFS: noikeep mount option is deprecated. [ 86.285131][ T5920] loop3: detected capacity change from 0 to 32768 [ 86.309722][ T5914] XFS (loop2): Mounting V5 Filesystem [ 86.362377][ T5914] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 86.382094][ T5914] XFS (loop2): Starting recovery (logdev: internal) [ 86.395246][ T5914] XFS (loop2): Ending recovery (logdev: internal) [ 86.531184][ T4049] XFS (loop2): Unmounting Filesystem [ 86.666814][ T5939] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 86.808373][ T5943] binder: 5942:5943 tried to acquire reference to desc 0, got 1 instead [ 86.816617][ T7] binder: undelivered TRANSACTION_COMPLETE [ 86.827615][ T3625] binder: undelivered transaction 99, process died. [ 86.998859][ T5955] loop3: detected capacity change from 0 to 1024 [ 87.013226][ T5955] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 87.018139][ T5955] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 87.024377][ T5955] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 87.032145][ T5955] EXT4-fs error (device loop3): ext4_get_journal_inode:5158: inode #17: comm syz.3.498: iget: bad i_size value: 4398046511204 [ 87.039817][ T5955] EXT4-fs (loop3): no journal found [ 87.287055][ T5974] binder: 5972:5974 tried to acquire reference to desc 0, got 1 instead [ 87.297941][ T5974] binder: 5972:5974 ioctl c0306201 20000680 returned -14 [ 87.321828][ T5977] binder: 5976:5977 tried to acquire reference to desc 0, got 1 instead [ 87.323516][ T4088] binder: undelivered transaction 110, process died. [ 87.340071][ T4088] binder: undelivered TRANSACTION_COMPLETE [ 87.342969][ T4088] binder: undelivered TRANSACTION_COMPLETE [ 87.355220][ T4088] binder: undelivered transaction 118, process died. [ 87.990272][ T6000] loop2: detected capacity change from 0 to 1024 [ 88.039817][ T6000] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 88.041571][ T6000] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 88.054244][ T6000] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 88.088437][ T6000] EXT4-fs error (device loop2): ext4_get_journal_inode:5158: inode #17: comm syz.2.517: iget: bad i_size value: 4398046511204 [ 88.092561][ T6008] binder: 6007:6008 tried to acquire reference to desc 0, got 1 instead [ 88.102786][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 88.107066][ T6000] EXT4-fs (loop2): no journal found [ 88.108885][ T6008] binder: 6007:6008 ioctl c0306201 20000680 returned -14 [ 88.138447][ T4991] binder: undelivered transaction 129, process died. [ 88.152924][ T4991] binder: undelivered TRANSACTION_COMPLETE [ 88.183602][ T4723] Bluetooth: hci1: command 0x040f tx timeout [ 88.224100][ T6016] loop2: detected capacity change from 0 to 512 [ 88.259740][ T6016] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.297276][ T6016] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.524: invalid indirect mapped block 4294967295 (level 0) [ 88.300007][ T6016] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #16: comm syz.2.524: invalid indirect mapped block 4294967295 (level 1) [ 88.309688][ T6016] EXT4-fs (loop2): 1 orphan inode deleted [ 88.315374][ T6016] EXT4-fs (loop2): 1 truncate cleaned up [ 88.316334][ T6016] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.374509][ T6011] loop5: detected capacity change from 0 to 256 [ 88.424912][ T6011] FAT-fs (loop5): Directory bread(block 64) failed [ 88.426019][ T6011] FAT-fs (loop5): Directory bread(block 65) failed [ 88.427089][ T6011] FAT-fs (loop5): Directory bread(block 66) failed [ 88.428152][ T6011] FAT-fs (loop5): Directory bread(block 67) failed [ 88.429261][ T6011] FAT-fs (loop5): Directory bread(block 68) failed [ 88.430318][ T6011] FAT-fs (loop5): Directory bread(block 69) failed [ 88.431286][ T6011] FAT-fs (loop5): Directory bread(block 70) failed [ 88.432249][ T6011] FAT-fs (loop5): Directory bread(block 71) failed [ 88.457095][ T6011] FAT-fs (loop5): Directory bread(block 72) failed [ 88.458742][ T6011] FAT-fs (loop5): Directory bread(block 73) failed [ 89.337091][ T6052] loop0: detected capacity change from 0 to 128 [ 89.378208][ T6052] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 89.403216][ T6055] loop3: detected capacity change from 0 to 1024 [ 89.418899][ T6052] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 89.438238][ T6055] EXT4-fs (loop3): Ignoring removed nobh option [ 89.439360][ T6055] EXT4-fs (loop3): Ignoring removed bh option [ 89.440429][ T6055] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 89.459017][ T6055] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 89.489673][ T6055] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3876: comm syz.3.540: Allocating blocks 481-513 which overlap fs metadata [ 89.500774][ T6054] EXT4-fs (loop3): pa 000000007560523a: logic 48, phys. 161, len 22 [ 89.502135][ T6054] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 2 [ 89.656184][ T6061] loop3: detected capacity change from 0 to 512 [ 89.660996][ T6061] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.671902][ T6061] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.542: invalid indirect mapped block 4294967295 (level 0) [ 89.674894][ T6061] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.542: invalid indirect mapped block 4294967295 (level 1) [ 89.677979][ T6061] EXT4-fs (loop3): 1 orphan inode deleted [ 89.679048][ T6061] EXT4-fs (loop3): 1 truncate cleaned up [ 89.680031][ T6061] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.087205][ T6088] loop2: detected capacity change from 0 to 1024 [ 90.090599][ T6088] EXT4-fs (loop2): Ignoring removed nobh option [ 90.091738][ T6088] EXT4-fs (loop2): Ignoring removed bh option [ 90.094802][ T6088] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 90.130241][ T6088] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 90.155234][ T6088] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3876: comm syz.2.553: Allocating blocks 481-513 which overlap fs metadata [ 90.158407][ T6087] EXT4-fs (loop2): pa 00000000d4cb7a20: logic 48, phys. 161, len 22 [ 90.159691][ T6087] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 2 [ 90.199337][ T6097] loop3: detected capacity change from 0 to 256 [ 90.229352][ T6099] loop2: detected capacity change from 0 to 128 [ 90.263627][ T4723] Bluetooth: hci1: command 0x0419 tx timeout [ 90.285120][ T6099] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.292622][ T6102] loop0: detected capacity change from 0 to 8 [ 90.295196][ T6102] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 90.304229][ T6097] FAT-fs (loop3): Directory bread(block 64) failed [ 90.305338][ T6097] FAT-fs (loop3): Directory bread(block 65) failed [ 90.306385][ T6097] FAT-fs (loop3): Directory bread(block 66) failed [ 90.307488][ T6097] FAT-fs (loop3): Directory bread(block 67) failed [ 90.311733][ T6097] FAT-fs (loop3): Directory bread(block 68) failed [ 90.313410][ T6097] FAT-fs (loop3): Directory bread(block 69) failed [ 90.314575][ T6097] FAT-fs (loop3): Directory bread(block 70) failed [ 90.315679][ T6097] FAT-fs (loop3): Directory bread(block 71) failed [ 90.316763][ T6097] FAT-fs (loop3): Directory bread(block 72) failed [ 90.317767][ T6097] FAT-fs (loop3): Directory bread(block 73) failed [ 90.320265][ T5061] udevd[5061]: incorrect cramfs checksum on /dev/loop0 [ 90.349951][ T6102] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 90.372048][ T6099] fscrypt: loop2: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 90.806200][ T6096] loop5: detected capacity change from 0 to 131072 [ 90.825237][ T6096] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 90.826609][ T6096] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 90.829812][ T6096] F2FS-fs (loop5): invalid crc value [ 90.840172][ T6113] loop0: detected capacity change from 0 to 32768 [ 90.844873][ T6096] F2FS-fs (loop5): Found nat_bits in checkpoint [ 90.855364][ T6096] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 90.856578][ T6096] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 90.895711][ T6113] XFS (loop0): Mounting V5 Filesystem [ 90.967601][ T6113] XFS (loop0): Ending clean mount [ 90.976216][ T6113] XFS (loop0): Quotacheck needed: Please wait. [ 91.024915][ T6136] loop1: detected capacity change from 0 to 1024 [ 91.030971][ T6113] XFS (loop0): Quotacheck: Done. [ 91.413448][ T6136] EXT4-fs (loop1): Ignoring removed nobh option [ 91.414555][ T6136] EXT4-fs (loop1): Ignoring removed bh option [ 91.415564][ T6136] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.452257][ T6136] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 91.500700][ T6136] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.565: Allocating blocks 481-513 which overlap fs metadata [ 91.513376][ T6135] EXT4-fs (loop1): pa 0000000029cc3641: logic 48, phys. 161, len 22 [ 91.514754][ T6135] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 2 [ 91.540713][ T4048] XFS (loop0): Unmounting Filesystem [ 91.625934][ T6156] loop1: detected capacity change from 0 to 8 [ 91.663319][ T6156] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 91.673874][ T6156] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 91.680818][ T5063] udevd[5063]: incorrect cramfs checksum on /dev/loop1 [ 91.718991][ T5063] udevd[5063]: incorrect cramfs checksum on /dev/loop1 [ 91.831999][ T6160] loop2: detected capacity change from 0 to 32768 [ 91.867467][ T6162] loop0: detected capacity change from 0 to 1024 [ 91.873399][ T6160] XFS: noikeep mount option is deprecated. [ 91.904759][ T6162] EXT4-fs (loop0): Ignoring removed nobh option [ 91.906335][ T6162] EXT4-fs (loop0): Ignoring removed bh option [ 91.907461][ T6162] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 91.915280][ T6162] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 91.941270][ T6162] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.580: Allocating blocks 497-513 which overlap fs metadata [ 91.951375][ T6160] XFS (loop2): Mounting V5 Filesystem [ 91.965113][ T6161] EXT4-fs (loop0): pa 00000000fa6abbf3: logic 304, phys. 433, len 5 [ 91.966486][ T6161] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 92.006190][ T6160] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 92.021986][ T6160] XFS (loop2): Starting recovery (logdev: internal) [ 92.031996][ T6160] XFS (loop2): Ending recovery (logdev: internal) [ 92.089208][ T6160] XFS (loop2): Metadata corruption detected at xfs_btree_lookup_get_block+0x3d4/0x5d4, xfs_bnobt block 0x8 [ 92.091175][ T6160] XFS (loop2): Unmount and run xfs_repair [ 92.097744][ T6160] XFS (loop2): Internal error i != 1 at line 482 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x578/0x7c8 [ 92.099944][ T6160] CPU: 1 PID: 6160 Comm: syz.2.574 Not tainted 5.15.189-syzkaller #0 [ 92.101149][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 92.102678][ T6160] Call trace: [ 92.103162][ T6160] dump_backtrace+0x0/0x43c [ 92.103939][ T6160] show_stack+0x2c/0x3c [ 92.104623][ T6160] __dump_stack+0x30/0x40 [ 92.105372][ T6160] dump_stack_lvl+0xf8/0x160 [ 92.106142][ T6160] dump_stack+0x1c/0x5c [ 92.106787][ T6160] xfs_corruption_error+0x124/0x180 [ 92.107653][ T6160] xfs_alloc_fixup_trees+0x5e8/0x7c8 [ 92.108445][ T6160] xfs_alloc_cur_finish+0xc0/0x4c0 [ 92.109305][ T6160] xfs_alloc_ag_vextent_near+0xb38/0x108c [ 92.110235][ T6160] xfs_alloc_ag_vextent+0xac/0x7d0 [ 92.111126][ T6160] xfs_alloc_vextent+0xe90/0x17cc [ 92.111954][ T6160] xfs_bmap_btalloc+0xa9c/0x1840 [ 92.112813][ T6160] xfs_bmapi_allocate+0x3b8/0xb74 [ 92.113608][ T6160] xfs_bmapi_write+0x60c/0xdb8 [ 92.114400][ T6160] xfs_da_grow_inode_int+0x1f8/0x780 [ 92.115236][ T6160] xfs_da_grow_inode+0x16c/0x3d8 [ 92.116080][ T6160] xfs_attr3_leaf_split+0x158/0xa00 [ 92.116939][ T6160] xfs_da3_split+0x254/0xfc8 [ 92.117701][ T6160] xfs_attr_node_addname+0x1dc/0x714 [ 92.118549][ T6160] xfs_attr_set_iter+0xc08/0x1b44 [ 92.119319][ T6160] xfs_attr_set_args+0xa0/0x160 [ 92.120097][ T6160] xfs_attr_set+0xa48/0x1034 [ 92.120850][ T6160] xfs_xattr_set+0xe8/0x1c4 [ 92.121562][ T6160] __vfs_setxattr+0x388/0x3a4 [ 92.122393][ T6160] __vfs_setxattr_noperm+0x120/0x564 [ 92.123315][ T6160] __vfs_setxattr_locked+0x1ec/0x218 [ 92.124135][ T6160] vfs_setxattr+0x158/0x2ac [ 92.124842][ T6160] setxattr+0x248/0x2ac [ 92.125536][ T6160] path_setxattr+0x12c/0x25c [ 92.126273][ T6160] __arm64_sys_setxattr+0xbc/0xd8 [ 92.127108][ T6160] invoke_syscall+0x98/0x2b8 [ 92.127829][ T6160] el0_svc_common+0x138/0x258 [ 92.128611][ T6160] do_el0_svc+0x58/0x14c [ 92.129287][ T6160] el0_svc+0x78/0x1e0 [ 92.129912][ T6160] el0t_64_sync_handler+0xcc/0xe4 [ 92.130745][ T6160] el0t_64_sync+0x1a0/0x1a4 [ 92.133094][ T6160] XFS (loop2): Corruption detected. Unmount and run xfs_repair [ 92.147268][ T4049] XFS (loop2): Unmounting Filesystem [ 93.798832][ T6175] loop0: detected capacity change from 0 to 1024 [ 93.889915][ T6175] EXT4-fs (loop0): Ignoring removed nobh option [ 93.890962][ T6175] EXT4-fs (loop0): Ignoring removed bh option [ 93.892248][ T6175] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 94.317584][ T6175] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 94.327893][ T6175] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.587: Allocating blocks 497-513 which overlap fs metadata [ 94.342473][ T6173] EXT4-fs (loop0): pa 00000000bbe64c2c: logic 304, phys. 433, len 5 [ 94.343936][ T6173] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 94.498425][ T6193] loop3: detected capacity change from 0 to 32768 [ 94.518316][ T6193] XFS (loop3): Mounting V5 Filesystem [ 94.557687][ T6193] XFS (loop3): Ending clean mount [ 94.560616][ T6193] XFS (loop3): Quotacheck needed: Please wait. [ 94.590498][ T6193] XFS (loop3): Quotacheck: Done. [ 94.667617][ T6197] loop0: detected capacity change from 0 to 256 [ 94.687626][ T6180] loop1: detected capacity change from 0 to 131072 [ 94.692419][ T6197] FAT-fs (loop0): Directory bread(block 64) failed [ 94.697506][ T6197] FAT-fs (loop0): Directory bread(block 65) failed [ 94.698687][ T6197] FAT-fs (loop0): Directory bread(block 66) failed [ 94.699795][ T6197] FAT-fs (loop0): Directory bread(block 67) failed [ 94.700852][ T6197] FAT-fs (loop0): Directory bread(block 68) failed [ 94.703759][ T6197] FAT-fs (loop0): Directory bread(block 69) failed [ 94.704806][ T6197] FAT-fs (loop0): Directory bread(block 70) failed [ 94.705769][ T5653] XFS (loop3): Unmounting Filesystem [ 94.705783][ T6197] FAT-fs (loop0): Directory bread(block 71) failed [ 94.707757][ T6197] FAT-fs (loop0): Directory bread(block 72) failed [ 94.708951][ T6197] FAT-fs (loop0): Directory bread(block 73) failed [ 94.734875][ T6180] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 94.736236][ T6180] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 94.741581][ T6180] F2FS-fs (loop1): invalid crc value [ 94.754331][ T6180] F2FS-fs (loop1): Found nat_bits in checkpoint [ 94.766418][ T6180] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 94.767576][ T6180] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 95.066901][ T6230] loop1: detected capacity change from 0 to 1024 [ 95.077223][ T6230] EXT4-fs (loop1): Ignoring removed nobh option [ 95.078689][ T6230] EXT4-fs (loop1): Ignoring removed bh option [ 95.080006][ T6230] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 95.122345][ T6230] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 95.141603][ T6230] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3876: comm syz.1.594: Allocating blocks 497-513 which overlap fs metadata [ 95.147689][ T6229] EXT4-fs (loop1): pa 000000001e1935af: logic 304, phys. 433, len 5 [ 95.148978][ T6229] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 1 [ 95.182223][ T6226] loop3: detected capacity change from 0 to 32768 [ 95.190157][ T6226] XFS: noikeep mount option is deprecated. [ 95.205041][ T6226] XFS (loop3): Mounting V5 Filesystem [ 95.231593][ T6226] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 95.250633][ T6243] loop1: detected capacity change from 0 to 512 [ 95.261316][ T6226] XFS (loop3): Starting recovery (logdev: internal) [ 95.268324][ T6226] XFS (loop3): Ending recovery (logdev: internal) [ 95.324516][ T6243] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 95.355777][ T6226] XFS (loop3): Metadata corruption detected at xfs_btree_lookup_get_block+0x3d4/0x5d4, xfs_bnobt block 0x8 [ 95.362811][ T6226] XFS (loop3): Unmount and run xfs_repair [ 95.368636][ T6226] XFS (loop3): Internal error i != 1 at line 482 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x578/0x7c8 [ 95.370929][ T6226] CPU: 0 PID: 6226 Comm: syz.3.591 Not tainted 5.15.189-syzkaller #0 [ 95.372259][ T6226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 95.373946][ T6226] Call trace: [ 95.374476][ T6226] dump_backtrace+0x0/0x43c [ 95.375243][ T6226] show_stack+0x2c/0x3c [ 95.375875][ T6226] __dump_stack+0x30/0x40 [ 95.376506][ T6226] dump_stack_lvl+0xf8/0x160 [ 95.377206][ T6226] dump_stack+0x1c/0x5c [ 95.377825][ T6226] xfs_corruption_error+0x124/0x180 [ 95.378635][ T6226] xfs_alloc_fixup_trees+0x5e8/0x7c8 [ 95.379523][ T6226] xfs_alloc_cur_finish+0xc0/0x4c0 [ 95.380371][ T6226] xfs_alloc_ag_vextent_near+0xb38/0x108c [ 95.381300][ T6226] xfs_alloc_ag_vextent+0xac/0x7d0 [ 95.382123][ T6226] xfs_alloc_vextent+0xe90/0x17cc [ 95.382994][ T6226] xfs_bmap_btalloc+0xa9c/0x1840 [ 95.383825][ T6226] xfs_bmapi_allocate+0x3b8/0xb74 [ 95.384629][ T6226] xfs_bmapi_write+0x60c/0xdb8 [ 95.385373][ T6226] xfs_da_grow_inode_int+0x1f8/0x780 [ 95.386207][ T6226] xfs_da_grow_inode+0x16c/0x3d8 [ 95.386998][ T6226] xfs_attr3_leaf_split+0x158/0xa00 [ 95.387792][ T6226] xfs_da3_split+0x254/0xfc8 [ 95.388520][ T6226] xfs_attr_node_addname+0x1dc/0x714 [ 95.389436][ T6226] xfs_attr_set_iter+0xc08/0x1b44 [ 95.390252][ T6226] xfs_attr_set_args+0xa0/0x160 [ 95.391002][ T6226] xfs_attr_set+0xa48/0x1034 [ 95.391683][ T6226] xfs_xattr_set+0xe8/0x1c4 [ 95.392336][ T6226] __vfs_setxattr+0x388/0x3a4 [ 95.393119][ T6226] __vfs_setxattr_noperm+0x120/0x564 [ 95.393973][ T6226] __vfs_setxattr_locked+0x1ec/0x218 [ 95.394862][ T6226] vfs_setxattr+0x158/0x2ac [ 95.395571][ T6226] setxattr+0x248/0x2ac [ 95.396209][ T6226] path_setxattr+0x12c/0x25c [ 95.396908][ T6226] __arm64_sys_setxattr+0xbc/0xd8 [ 95.397679][ T6226] invoke_syscall+0x98/0x2b8 [ 95.398329][ T6226] el0_svc_common+0x138/0x258 [ 95.399031][ T6226] do_el0_svc+0x58/0x14c [ 95.399625][ T6226] el0_svc+0x78/0x1e0 [ 95.400155][ T6226] el0t_64_sync_handler+0xcc/0xe4 [ 95.400869][ T6226] el0t_64_sync+0x1a0/0x1a4 [ 95.423128][ T6226] XFS (loop3): Corruption detected. Unmount and run xfs_repair [ 95.477346][ T5653] XFS (loop3): Unmounting Filesystem [ 95.561804][ T6251] loop0: detected capacity change from 0 to 40427 [ 95.618497][ T6251] F2FS-fs (loop0): invalid crc value [ 95.619706][ T6251] F2FS-fs (loop0): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 95.634215][ T6251] F2FS-fs (loop0): Found nat_bits in checkpoint [ 95.649148][ T6251] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 95.650735][ T6251] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 95.670985][ T6251] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 96.492158][ T6264] loop0: detected capacity change from 0 to 32768 [ 96.836221][ T6277] loop1: detected capacity change from 0 to 1024 [ 96.837811][ T6264] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 96.852478][ T6277] EXT4-fs (loop1): Ignoring removed nobh option [ 96.858029][ T6277] EXT4-fs (loop1): Ignoring removed bh option [ 96.860956][ T6277] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 96.887133][ T6264] OCFS2: ERROR (device loop0): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 263 in extent list [ 96.891522][ T6264] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 96.895042][ T6264] OCFS2: Returning error to the calling process. [ 96.896039][ T6264] (syz.0.600,6264,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 96.897206][ T6264] (syz.0.600,6264,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 96.898473][ T6264] (syz.0.600,6264,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 96.899631][ T6264] (syz.0.600,6264,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 96.900953][ T6264] (syz.0.600,6264,1):ocfs2_read_virt_blocks:981 ERROR: status = -30 [ 96.902244][ T6264] (syz.0.600,6264,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 96.904294][ T6264] (syz.0.600,6264,1):ocfs2_find_dir_space_el:3504 ERROR: status = -5 [ 96.905647][ T6264] (syz.0.600,6264,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -5 [ 96.906995][ T6264] (syz.0.600,6264,1):ocfs2_mknod:298 ERROR: status = -5 [ 96.908103][ T6264] (syz.0.600,6264,1):ocfs2_mknod:502 ERROR: status = -5 [ 96.909148][ T6264] (syz.0.600,6264,1):ocfs2_create:676 ERROR: status = -5 [ 96.911391][ T6277] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 96.956168][ T4048] ocfs2: Unmounting device (7,0) on (node local) [ 97.131215][ T6269] loop3: detected capacity change from 0 to 131072 [ 97.137794][ T6269] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 97.139141][ T6269] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 97.162878][ T6269] F2FS-fs (loop3): invalid crc value [ 97.165804][ T6269] F2FS-fs (loop3): Found nat_bits in checkpoint [ 97.178885][ T6269] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 97.180000][ T6269] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 97.229766][ T6286] loop0: detected capacity change from 0 to 1024 [ 97.311592][ T6286] EXT4-fs (loop0): Ignoring removed nobh option [ 97.312735][ T6286] EXT4-fs (loop0): Ignoring removed bh option [ 97.314001][ T6286] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.371144][ T6286] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 97.416458][ T6288] loop1: detected capacity change from 0 to 256 [ 97.470472][ T6288] FAT-fs (loop1): Directory bread(block 64) failed [ 97.471770][ T6288] FAT-fs (loop1): Directory bread(block 65) failed [ 97.476633][ T6288] FAT-fs (loop1): Directory bread(block 66) failed [ 97.483379][ T6288] FAT-fs (loop1): Directory bread(block 67) failed [ 97.489800][ T6288] FAT-fs (loop1): Directory bread(block 68) failed [ 97.498559][ T6288] FAT-fs (loop1): Directory bread(block 69) failed [ 97.504101][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.609'. [ 97.506967][ T6288] FAT-fs (loop1): Directory bread(block 70) failed [ 97.517253][ T6288] FAT-fs (loop1): Directory bread(block 71) failed [ 97.528317][ T6288] FAT-fs (loop1): Directory bread(block 72) failed [ 97.540436][ T6288] FAT-fs (loop1): Directory bread(block 73) failed [ 98.277612][ T6307] loop5: detected capacity change from 0 to 32768 [ 98.315884][ T6307] XFS: noikeep mount option is deprecated. [ 98.441268][ T6307] XFS (loop5): Mounting V5 Filesystem [ 98.497559][ T6307] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 98.528284][ T6307] XFS (loop5): Starting recovery (logdev: internal) [ 98.563049][ T6307] XFS (loop5): Ending recovery (logdev: internal) [ 98.698700][ T6307] XFS (loop5): Metadata corruption detected at xfs_btree_lookup_get_block+0x3d4/0x5d4, xfs_bnobt block 0x8 [ 98.708651][ T6307] XFS (loop5): Unmount and run xfs_repair [ 98.718220][ T6307] XFS (loop5): Internal error i != 1 at line 482 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x578/0x7c8 [ 98.721723][ T6307] CPU: 0 PID: 6307 Comm: syz.5.610 Not tainted 5.15.189-syzkaller #0 [ 98.722987][ T6307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 98.724563][ T6307] Call trace: [ 98.725034][ T6307] dump_backtrace+0x0/0x43c [ 98.725726][ T6307] show_stack+0x2c/0x3c [ 98.726368][ T6307] __dump_stack+0x30/0x40 [ 98.727137][ T6307] dump_stack_lvl+0xf8/0x160 [ 98.727870][ T6307] dump_stack+0x1c/0x5c [ 98.728571][ T6307] xfs_corruption_error+0x124/0x180 [ 98.729453][ T6307] xfs_alloc_fixup_trees+0x5e8/0x7c8 [ 98.730275][ T6307] xfs_alloc_cur_finish+0xc0/0x4c0 [ 98.731182][ T6307] xfs_alloc_ag_vextent_near+0xb38/0x108c [ 98.732099][ T6307] xfs_alloc_ag_vextent+0xac/0x7d0 [ 98.732951][ T6307] xfs_alloc_vextent+0xe90/0x17cc [ 98.733806][ T6307] xfs_bmap_btalloc+0xa9c/0x1840 [ 98.734662][ T6307] xfs_bmapi_allocate+0x3b8/0xb74 [ 98.735579][ T6307] xfs_bmapi_write+0x60c/0xdb8 [ 98.736332][ T6307] xfs_da_grow_inode_int+0x1f8/0x780 [ 98.737206][ T6307] xfs_da_grow_inode+0x16c/0x3d8 [ 98.738071][ T6307] xfs_attr3_leaf_split+0x158/0xa00 [ 98.738913][ T6307] xfs_da3_split+0x254/0xfc8 [ 98.739601][ T6307] xfs_attr_node_addname+0x1dc/0x714 [ 98.740447][ T6307] xfs_attr_set_iter+0xc08/0x1b44 [ 98.741311][ T6307] xfs_attr_set_args+0xa0/0x160 [ 98.742176][ T6307] xfs_attr_set+0xa48/0x1034 [ 98.742952][ T6307] xfs_xattr_set+0xe8/0x1c4 [ 98.743676][ T6307] __vfs_setxattr+0x388/0x3a4 [ 98.744419][ T6307] __vfs_setxattr_noperm+0x120/0x564 [ 98.745259][ T6307] __vfs_setxattr_locked+0x1ec/0x218 [ 98.746103][ T6307] vfs_setxattr+0x158/0x2ac [ 98.746844][ T6307] setxattr+0x248/0x2ac [ 98.747507][ T6307] path_setxattr+0x12c/0x25c [ 98.748239][ T6307] __arm64_sys_setxattr+0xbc/0xd8 [ 98.749058][ T6307] invoke_syscall+0x98/0x2b8 [ 98.749824][ T6307] el0_svc_common+0x138/0x258 [ 98.750573][ T6307] do_el0_svc+0x58/0x14c [ 98.751273][ T6307] el0_svc+0x78/0x1e0 [ 98.751914][ T6307] el0t_64_sync_handler+0xcc/0xe4 [ 98.752734][ T6307] el0t_64_sync+0x1a0/0x1a4 [ 98.869235][ T6307] XFS (loop5): Corruption detected. Unmount and run xfs_repair [ 98.946811][ T5740] XFS (loop5): Unmounting Filesystem [ 99.559604][ T6304] loop3: detected capacity change from 0 to 40427 [ 99.608188][ T6304] F2FS-fs (loop3): invalid crc value [ 99.618773][ T6304] F2FS-fs (loop3): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 99.638061][ T6304] F2FS-fs (loop3): Found nat_bits in checkpoint [ 99.653476][ T6304] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 99.655851][ T6304] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 99.661650][ T6304] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 99.921381][ T6337] loop5: detected capacity change from 0 to 512 [ 99.959882][ T6337] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 100.290366][ T6333] loop2: detected capacity change from 0 to 131072 [ 100.329118][ T6333] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 100.330523][ T6333] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 100.334339][ T6333] F2FS-fs (loop2): invalid crc value [ 100.340114][ T6333] F2FS-fs (loop2): Found nat_bits in checkpoint [ 100.370368][ T6333] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 100.371677][ T6333] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 100.585018][ T6345] loop5: detected capacity change from 0 to 32768 [ 101.011302][ T6360] loop2: detected capacity change from 0 to 512 [ 101.050661][ T6345] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 101.080348][ T6345] OCFS2: ERROR (device loop5): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 263 in extent list [ 101.085143][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.624'. [ 101.096378][ T6345] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 101.098248][ T6345] OCFS2: Returning error to the calling process. [ 101.099238][ T6345] (syz.5.618,6345,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 101.100461][ T6345] (syz.5.618,6345,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 101.101893][ T6345] (syz.5.618,6345,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 101.103206][ T6345] (syz.5.618,6345,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 101.104481][ T6345] (syz.5.618,6345,1):ocfs2_read_virt_blocks:981 ERROR: status = -30 [ 101.105755][ T6345] (syz.5.618,6345,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 101.107431][ T6345] (syz.5.618,6345,1):ocfs2_find_dir_space_el:3504 ERROR: status = -5 [ 101.108850][ T6345] (syz.5.618,6345,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -5 [ 101.110206][ T6345] (syz.5.618,6345,1):ocfs2_mknod:298 ERROR: status = -5 [ 101.111276][ T6345] (syz.5.618,6345,1):ocfs2_mknod:502 ERROR: status = -5 [ 101.112333][ T6345] (syz.5.618,6345,1):ocfs2_create:676 ERROR: status = -5 [ 101.143678][ T6360] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 101.458998][ T5740] ocfs2: Unmounting device (7,5) on (node local) [ 104.209143][ T6397] loop3: detected capacity change from 0 to 128 [ 104.474566][ T6397] qnx6: superblock #1 checksum error [ 104.585043][ T6384] loop1: detected capacity change from 0 to 32768 [ 105.050959][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.640'. [ 105.057031][ T6384] XFS: noikeep mount option is deprecated. [ 105.181577][ T6384] XFS (loop1): Mounting V5 Filesystem [ 105.594477][ T6423] loop0: detected capacity change from 0 to 512 [ 105.600040][ T6384] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 105.631646][ T6384] XFS (loop1): Starting recovery (logdev: internal) [ 105.645567][ T6384] XFS (loop1): Ending recovery (logdev: internal) [ 105.646834][ T6423] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.678291][ T6410] loop2: detected capacity change from 0 to 32768 [ 105.714827][ T6384] XFS (loop1): Metadata corruption detected at xfs_btree_lookup_get_block+0x3d4/0x5d4, xfs_bnobt block 0x8 [ 105.717036][ T6384] XFS (loop1): Unmount and run xfs_repair [ 105.719927][ T6384] XFS (loop1): Internal error i != 1 at line 482 of file fs/xfs/libxfs/xfs_alloc.c. Caller xfs_alloc_fixup_trees+0x578/0x7c8 [ 105.723950][ T6410] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 105.727411][ T6384] CPU: 0 PID: 6384 Comm: syz.1.628 Not tainted 5.15.189-syzkaller #0 [ 105.728735][ T6384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 105.730442][ T6384] Call trace: [ 105.731003][ T6384] dump_backtrace+0x0/0x43c [ 105.731798][ T6384] show_stack+0x2c/0x3c [ 105.732466][ T6384] __dump_stack+0x30/0x40 [ 105.733111][ T6384] dump_stack_lvl+0xf8/0x160 [ 105.733821][ T6384] dump_stack+0x1c/0x5c [ 105.734466][ T6384] xfs_corruption_error+0x124/0x180 [ 105.735265][ T6384] xfs_alloc_fixup_trees+0x5e8/0x7c8 [ 105.736089][ T6384] xfs_alloc_cur_finish+0xc0/0x4c0 [ 105.736969][ T6384] xfs_alloc_ag_vextent_near+0xb38/0x108c [ 105.737921][ T6384] xfs_alloc_ag_vextent+0xac/0x7d0 [ 105.738795][ T6384] xfs_alloc_vextent+0xe90/0x17cc [ 105.739600][ T6384] xfs_bmap_btalloc+0xa9c/0x1840 [ 105.740419][ T6384] xfs_bmapi_allocate+0x3b8/0xb74 [ 105.741240][ T6384] xfs_bmapi_write+0x60c/0xdb8 [ 105.741983][ T6384] xfs_da_grow_inode_int+0x1f8/0x780 [ 105.742861][ T6384] xfs_da_grow_inode+0x16c/0x3d8 [ 105.743694][ T6384] xfs_attr3_leaf_split+0x158/0xa00 [ 105.744526][ T6384] xfs_da3_split+0x254/0xfc8 [ 105.745278][ T6384] xfs_attr_node_addname+0x1dc/0x714 [ 105.746100][ T6384] xfs_attr_set_iter+0xc08/0x1b44 [ 105.746933][ T6384] xfs_attr_set_args+0xa0/0x160 [ 105.747695][ T6384] xfs_attr_set+0xa48/0x1034 [ 105.748427][ T6384] xfs_xattr_set+0xe8/0x1c4 [ 105.749155][ T6384] __vfs_setxattr+0x388/0x3a4 [ 105.749915][ T6384] __vfs_setxattr_noperm+0x120/0x564 [ 105.750807][ T6384] __vfs_setxattr_locked+0x1ec/0x218 [ 105.751656][ T6384] vfs_setxattr+0x158/0x2ac [ 105.752411][ T6384] setxattr+0x248/0x2ac [ 105.753126][ T6384] path_setxattr+0x12c/0x25c [ 105.753918][ T6384] __arm64_sys_setxattr+0xbc/0xd8 [ 105.754773][ T6384] invoke_syscall+0x98/0x2b8 [ 105.755584][ T6384] el0_svc_common+0x138/0x258 [ 105.756399][ T6384] do_el0_svc+0x58/0x14c [ 105.757150][ T6384] el0_svc+0x78/0x1e0 [ 105.757809][ T6384] el0t_64_sync_handler+0xcc/0xe4 [ 105.758639][ T6384] el0t_64_sync+0x1a0/0x1a4 [ 105.764106][ T6384] XFS (loop1): Corruption detected. Unmount and run xfs_repair [ 105.791470][ T6410] OCFS2: ERROR (device loop2): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 263 in extent list [ 105.796076][ T6410] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 105.797672][ T6410] OCFS2: Returning error to the calling process. [ 105.798650][ T6410] (syz.2.638,6410,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 105.799877][ T6410] (syz.2.638,6410,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 105.801265][ T6410] (syz.2.638,6410,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 105.807372][ T4044] XFS (loop1): Unmounting Filesystem [ 105.818868][ T6410] (syz.2.638,6410,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 105.820482][ T6410] (syz.2.638,6410,0):ocfs2_read_virt_blocks:981 ERROR: status = -30 [ 105.821856][ T6410] (syz.2.638,6410,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 105.823296][ T6410] (syz.2.638,6410,0):ocfs2_find_dir_space_el:3504 ERROR: status = -5 [ 105.824631][ T6410] (syz.2.638,6410,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -5 [ 105.826024][ T6410] (syz.2.638,6410,0):ocfs2_mknod:298 ERROR: status = -5 [ 105.827142][ T6410] (syz.2.638,6410,0):ocfs2_mknod:502 ERROR: status = -5 [ 105.828286][ T6410] (syz.2.638,6410,0):ocfs2_create:676 ERROR: status = -5 [ 105.945907][ T4049] ocfs2: Unmounting device (7,2) on (node local) [ 108.711758][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.652'. [ 109.301780][ T6478] loop5: detected capacity change from 0 to 128 [ 109.391086][ T6478] qnx6: superblock #1 checksum error [ 109.670761][ T6475] loop2: detected capacity change from 0 to 512 [ 109.803420][ T6487] loop5: detected capacity change from 0 to 128 [ 111.442236][ T6487] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 111.448026][ T6475] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 111.533496][ T6507] loop3: detected capacity change from 0 to 1024 [ 112.028046][ T6507] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 113.232896][ T6530] loop2: detected capacity change from 0 to 128 [ 114.124117][ T6530] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 114.917521][ T6549] loop1: detected capacity change from 0 to 128 [ 114.971770][ T6549] qnx6: superblock #1 checksum error [ 115.948226][ T6538] loop0: detected capacity change from 0 to 32768 [ 116.428937][ T6538] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 116.430357][ T6538] BTRFS info (device loop0): force clearing of disk cache [ 116.431534][ T6538] BTRFS info (device loop0): enabling auto defrag [ 116.432502][ T6538] BTRFS info (device loop0): max_inline at 0 [ 116.433858][ T6538] BTRFS info (device loop0): enabling disk space caching [ 116.435081][ T6538] BTRFS info (device loop0): disk space caching is enabled [ 116.436366][ T6538] BTRFS info (device loop0): has skinny extents [ 117.468066][ T6538] BTRFS error (device loop0): open_ctree failed: -22 [ 117.497044][ T6599] loop1: detected capacity change from 0 to 1024 [ 117.629834][ T6599] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 119.950336][ T6652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.969752][ T6652] device batadv_slave_0 entered promiscuous mode [ 120.340674][ T6690] loop0: detected capacity change from 0 to 512 [ 120.389712][ T6690] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 120.423692][ T6690] EXT4-fs (loop0): 1 truncate cleaned up [ 120.424965][ T6690] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,max_dir_size_kb=0x0000000000000005,quota,,errors=continue. Quota mode: writeback. [ 120.752376][ T6714] hub 1-0:1.0: USB hub found [ 120.754300][ T6714] hub 1-0:1.0: 1 port detected [ 120.780969][ T6714] loop1: detected capacity change from 0 to 64 [ 122.193546][ T6739] loop5: detected capacity change from 0 to 512 [ 122.412632][ C1] sched: RT throttling activated [ 122.483638][ T6739] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.743: bad orphan inode 11862016 [ 122.485757][ T6739] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 122.661011][ T4633] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.528025][ T6789] hub 1-0:1.0: USB hub found [ 123.529594][ T6789] hub 1-0:1.0: 1 port detected [ 123.555999][ T6789] loop2: detected capacity change from 0 to 64 [ 124.261017][ T6787] loop1: detected capacity change from 0 to 32768 [ 124.276603][ T6787] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.763 (6787) [ 124.292175][ T6787] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 124.293812][ T6787] BTRFS info (device loop1): force clearing of disk cache [ 124.298183][ T6787] BTRFS info (device loop1): enabling auto defrag [ 124.309982][ T6787] BTRFS info (device loop1): max_inline at 0 [ 124.311041][ T6787] BTRFS info (device loop1): enabling disk space caching [ 124.319529][ T6787] BTRFS info (device loop1): disk space caching is enabled [ 124.320859][ T6787] BTRFS info (device loop1): has skinny extents [ 124.510884][ T6815] loop3: detected capacity change from 0 to 512 [ 124.528184][ T6787] BTRFS info (device loop1): enabling ssd optimizations [ 124.529741][ T6787] BTRFS info (device loop1): clearing free space tree [ 124.530839][ T6787] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 124.532429][ T6787] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 125.725372][ T6815] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.767: bad orphan inode 11862016 [ 125.727274][ T6815] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 126.236889][ T6847] loop0: detected capacity change from 0 to 64 [ 126.364856][ T6480] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.926125][ T6859] loop5: detected capacity change from 0 to 1024 [ 127.479803][ T6859] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none. [ 131.096187][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.097214][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.408275][ T6917] loop5: detected capacity change from 0 to 32768 [ 131.425154][ T6917] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.789 (6917) [ 131.436761][ T6917] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm [ 131.438204][ T6917] BTRFS info (device loop5): force clearing of disk cache [ 131.439340][ T6917] BTRFS info (device loop5): enabling auto defrag [ 131.440400][ T6917] BTRFS info (device loop5): max_inline at 0 [ 131.441272][ T6917] BTRFS info (device loop5): enabling disk space caching [ 131.442323][ T6917] BTRFS info (device loop5): disk space caching is enabled [ 131.456649][ T6917] BTRFS info (device loop5): has skinny extents [ 131.511109][ T6917] BTRFS info (device loop5): enabling ssd optimizations [ 131.512747][ T6917] BTRFS info (device loop5): clearing free space tree [ 131.513857][ T6917] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 131.515472][ T6917] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 131.728041][ T6945] loop2: detected capacity change from 0 to 512 [ 132.430618][ T6945] EXT4-fs (loop2): too many log groups per flexible block group [ 132.432104][ T6945] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 132.433689][ T6945] EXT4-fs (loop2): mount failed [ 132.648227][ T6966] loop0: detected capacity change from 0 to 2048 [ 132.724851][ T6963] loop1: detected capacity change from 0 to 1024 [ 133.584134][ T6966] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 133.585413][ T6966] EXT4-fs (loop0): Ignoring removed nobh option [ 133.586899][ T6963] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.596511][ T6982] loop5: detected capacity change from 0 to 512 [ 133.659545][ T6966] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,barrier=0x0000000000000008,mblk_io_submit,minixdf,resuid=0x0000000000000000,nobh,bsddf,. Quota mode: none. [ 133.728103][ T6982] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 133.730840][ T6982] EXT4-fs (loop5): Remounting filesystem read-only [ 133.910856][ T6982] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.806: invalid indirect mapped block 4278190080 (level 0) [ 133.927279][ T6982] EXT4-fs (loop5): Remounting filesystem read-only [ 133.928304][ T6982] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.806: invalid indirect mapped block 1 (level 1) [ 133.937866][ T6982] EXT4-fs (loop5): Remounting filesystem read-only [ 133.967297][ T6982] EXT4-fs (loop5): 1 truncate cleaned up [ 133.968230][ T6982] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,errors=remount-ro,barrier=0x00000000000000cb,resgid=0x0000000000000000,nolazytime,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x000000000000. Quota mode: none. [ 134.066209][ T7003] IPVS: stopping backup sync thread 7006 ... [ 134.066618][ T7006] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 134.089693][ T7005] tipc: Enabled bearer , priority 0 [ 134.097151][ T6982] EXT4-fs error (device loop5): ext4_lookup:1850: inode #2: comm syz.5.806: bad inode number: 1 [ 134.106413][ T6982] EXT4-fs (loop5): Remounting filesystem read-only [ 134.112221][ T7005] device syzkaller0 entered promiscuous mode [ 134.127174][ T7002] loop1: detected capacity change from 0 to 64 [ 134.162247][ T6982] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.806: corrupted in-inode xattr [ 134.177271][ T6982] EXT4-fs (loop5): Remounting filesystem read-only [ 134.179209][ T6982] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.806: corrupted in-inode xattr [ 134.181294][ T6982] EXT4-fs (loop5): Remounting filesystem read-only [ 134.211086][ T7005] tipc: Resetting bearer [ 134.239585][ T7004] tipc: Resetting bearer [ 134.247617][ T7004] tipc: Disabling bearer [ 137.090750][ T7269] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP [ 137.092068][ T7269] Modules linked in: [ 137.092726][ T7269] CPU: 0 PID: 7269 Comm: syz.2.938 Not tainted 5.15.189-syzkaller #0 [ 137.094083][ T7269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 137.095865][ T7269] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) [ 137.097171][ T7269] pc : cap_validate_magic+0x150/0x418 [ 137.098052][ T7269] lr : cap_validate_magic+0x12c/0x418 [ 137.098872][ T7269] sp : ffff800023567b00 [ 137.099509][ T7269] x29: ffff800023567ba0 x28: 1fffe00019af56d4 x27: 0000000000000000 [ 137.100828][ T7269] x26: ffff800023567b20 x25: dfff800000000000 x24: ffff7000046acf64 [ 137.102158][ T7269] x23: 00000000fffffff2 x22: ffff0000cd7ab6a4 x21: ffff0000cd7ab680 [ 137.103408][ T7269] x20: 0000000000000000 x19: 0000000000000000 x18: 0000000000000000 [ 137.104650][ T7269] x17: 0000000000000000 x16: ffff8000081afdfc x15: 0000000000000000 [ 137.105919][ T7269] x14: 0000000000000000 x13: 1ffff0000282e06b x12: 0000000000ff0100 [ 137.107231][ T7269] x11: 0000000000000000 x10: 0000000000000002 x9 : 0000000000000000 [ 137.108525][ T7269] x8 : 0000ffffffffffff x7 : ffff800008750ed4 x6 : 0000000000000000 [ 137.109869][ T7269] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 [ 137.111133][ T7269] x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 [ 137.112384][ T7269] Call trace: [ 137.112880][ T7269] cap_validate_magic+0x150/0x418 [ 137.113621][ T7269] __arm64_sys_capset+0x108/0x7b8 [ 137.114376][ T7269] invoke_syscall+0x98/0x2b8 [ 137.115054][ T7269] el0_svc_common+0x138/0x258 [ 137.115831][ T7269] do_el0_svc+0x58/0x14c [ 137.116503][ T7269] el0_svc+0x78/0x1e0 [ 137.117047][ T7269] el0t_64_sync_handler+0xcc/0xe4 [ 137.117792][ T7269] el0t_64_sync+0x1a0/0x1a4 [ 137.118498][ T7269] Code: d503229f 2a1f03f7 2a1f03e0 b8400933 (2a1703e1) [ 137.119505][ T7269] ---[ end trace bb9b1807c46958de ]--- [ 137.387518][ T7269] Kernel panic - not syncing: Oops - BTI: Fatal exception [ 137.388663][ T7269] SMP: stopping secondary CPUs [ 137.389372][ T7269] Kernel Offset: disabled [ 137.390027][ T7269] CPU features: 0x8,000003c1,7d33ffd9 [ 137.390794][ T7269] Memory Limit: none [ 137.659897][ T7269] Rebooting in 86400 seconds..