last executing test programs: 22.656525396s ago: executing program 3 (id=205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000002780)={0x63c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x5f0, 0x8, 0x0, 0x1, [{0x5ec, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x100, @local, 0x8}}, @WGPEER_A_ALLOWEDIPS={0x194, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x720, @mcast2, 0x5}}, @WGPEER_A_ALLOWEDIPS={0x3dc, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}]}]}]}, 0x63c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) 22.391075554s ago: executing program 3 (id=206): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@multiplanar_mmap={0x5, 0x1, 0x4, 0x800, 0x7, {}, {0x2, 0xa, 0x5, 0x5, 0xc, 0x2, "b3848769"}, 0x5, 0x1, {0x0}, 0x8}) 22.17813738s ago: executing program 3 (id=208): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 22.07406272s ago: executing program 3 (id=209): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000d00)={r1, 0x101, 0x10}) 22.005101025s ago: executing program 3 (id=211): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mmap$xdp(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x1000000, 0x4014811, r0, 0x80000000) 21.942723534s ago: executing program 3 (id=213): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fba85b08e90f71db3e530102030109021200010400200009049c070000000000f87f06235e0053418dec393b74"], 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_stats={0x1d, 0x4, [0x0, 0x3, 0xbaf, 0x7fffffffffffffff]}}) 6.824942885s ago: executing program 32 (id=213): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fba85b08e90f71db3e530102030109021200010400200009049c070000000000f87f06235e0053418dec393b74"], 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000040)=@ethtool_stats={0x1d, 0x4, [0x0, 0x3, 0xbaf, 0x7fffffffffffffff]}}) 3.666788263s ago: executing program 2 (id=436): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004) 2.495256946s ago: executing program 0 (id=449): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xad3, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x7f) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc1}}) 2.011986561s ago: executing program 0 (id=450): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0x6, 0x0, 0x7}, 0x14, 0x0}}], 0x1, 0x0) 1.917338055s ago: executing program 0 (id=451): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_adj\x00') exit(0x5) write$cgroup_int(r0, &(0x7f0000000000)=0x1, 0x12) 1.795162605s ago: executing program 2 (id=453): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@barrier}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0xfe, 0x47b, &(0x7f0000001f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.574400215s ago: executing program 2 (id=458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000180)={0x38, r1, 0x1, 0x70bd25, 0x3, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x62}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x5}]}]}]}, 0x38}}, 0x0) 1.356276377s ago: executing program 2 (id=462): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0xfffffff7, @loopback, 0x40}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="40010000000000002900000036"], 0x140}}], 0x1, 0x8000) 1.33719538s ago: executing program 4 (id=463): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xffbf, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 1.256518642s ago: executing program 2 (id=464): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000000380), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000340), &(0x7f0000048000)=0x1, 0x0) 1.210896202s ago: executing program 4 (id=465): r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$link(0x8, r0, r1) 1.156361803s ago: executing program 4 (id=466): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) 993.905834ms ago: executing program 0 (id=467): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f00000004c0)={[{@orlov}, {@nodelalloc}, {@i_version}, {@bh}, {@quota}, {@dioread_nolock}, {@quota}, {@grpjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}]}, 0x0, 0x493, &(0x7f0000000640)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes128, 0x1, @desc4}) 947.259801ms ago: executing program 4 (id=468): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x1, 0x0, &(0x7f0000000000)) 812.906932ms ago: executing program 4 (id=470): syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x200414, &(0x7f0000000400)=ANY=[@ANYRES16], 0xff, 0x5ad0, &(0x7f000000bec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x12042, 0x0) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50}, 0x2000) 798.099112ms ago: executing program 0 (id=471): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x7, 0x4, 0x300, 0x5}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000000), 0x0}, 0x20) 760.691282ms ago: executing program 1 (id=472): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000000440)={0x0, &(0x7f0000000300), 0xfffffffeffffffff}) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 670.086524ms ago: executing program 1 (id=473): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x20741, 0x0) writev(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000100)="48a0f96c33a017488c1e064596ff779d12d911fb4b43cad0091e548d2cacb792e462020a5282d0d3e4181c9e55936f8e960bc2dc05fc85170d5f1af7c76fd0bcab2b11b28e5c4a73c92e6143667ec57676dd15681015cd980e583c160f671f1ea3bf24c6f8d5d9b14a9596b2664eb142351962cfb4eda29f922ab26db2716dc720ebef96d4f6df0005d7f744ec8204c46aff0db8225878a8dd190a8af4d31a9d", 0xfeb7}], 0x2) 607.632228ms ago: executing program 0 (id=474): syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000005d40)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="696f636861000000000000007f366946313efae74a984a479104fd2a6bc23c88ede15a5d240ec3c24e7b9f8c1fa84ed03147441f1b9220e91bf21427d987e0ad982af5a8142f895f10e416878f"], 0x1, 0x5ce8, &(0x7f0000005dc0)="$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") setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x11) 527.991338ms ago: executing program 1 (id=475): r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{}, {0x0, 0x3938700}}, 0x0) read(r0, &(0x7f0000000280)=""/73, 0x49) 471.374387ms ago: executing program 1 (id=476): r0 = io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x83be, 0x1046}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 374.367243ms ago: executing program 1 (id=477): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0x4) cachestat(r0, &(0x7f0000000040), &(0x7f0000000080), 0x0) 307.985446ms ago: executing program 2 (id=478): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}}, 0x0) 295.189053ms ago: executing program 1 (id=479): syz_mount_image$ocfs2(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119, @ANYRES32], 0x1, 0x443a, &(0x7f00000088c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x9c93, 0x0, 0x1, 0x0, &(0x7f00000000c0)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) 0s ago: executing program 4 (id=480): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000740)=@mpls_getroute={0x24, 0x1a, 0xf21, 0x0, 0x25dfdbfc, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@RTA_TTL_PROPAGATE={0x5, 0x1e}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts. [ 33.937584][ T6503] cgroup: Unknown subsys name 'net' [ 34.081918][ T6503] cgroup: Unknown subsys name 'cpuset' [ 34.085799][ T6503] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.285851][ T6503] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 35.721795][ T6518] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.722541][ T6520] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 35.727097][ T6521] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 35.727159][ T6520] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.727895][ T6520] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 35.728674][ T6520] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 35.729091][ T6520] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 35.730042][ T6520] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.730694][ T6520] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.731139][ T6520] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.765397][ T6520] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 35.771889][ T6521] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 35.774661][ T6521] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 35.777142][ T6518] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 35.777881][ T6521] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 35.778142][ T6518] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 35.779147][ T6521] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 35.779248][ T6518] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 35.779558][ T6518] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 35.780180][ T6518] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 35.780624][ T6518] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 35.784885][ T6084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 35.800269][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 35.805704][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 35.806153][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.088593][ T6522] chnl_net:caif_netlink_parms(): no params data found [ 36.140611][ T6515] chnl_net:caif_netlink_parms(): no params data found [ 36.169094][ T6516] chnl_net:caif_netlink_parms(): no params data found [ 36.192482][ T6525] chnl_net:caif_netlink_parms(): no params data found [ 36.213260][ T6522] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.215455][ T6522] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.216881][ T6522] bridge_slave_0: entered allmulticast mode [ 36.217858][ T6522] bridge_slave_0: entered promiscuous mode [ 36.219965][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.220011][ T6522] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.220106][ T6522] bridge_slave_1: entered allmulticast mode [ 36.221003][ T6522] bridge_slave_1: entered promiscuous mode [ 36.237253][ T6523] chnl_net:caif_netlink_parms(): no params data found [ 36.274908][ T6522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.278389][ T6522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.332503][ T6522] team0: Port device team_slave_0 added [ 36.350187][ T6522] team0: Port device team_slave_1 added [ 36.369293][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.371427][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.373521][ T6516] bridge_slave_0: entered allmulticast mode [ 36.376162][ T6516] bridge_slave_0: entered promiscuous mode [ 36.377968][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.378015][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.378113][ T6516] bridge_slave_1: entered allmulticast mode [ 36.378974][ T6516] bridge_slave_1: entered promiscuous mode [ 36.386409][ T6515] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.386484][ T6515] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.390928][ T6515] bridge_slave_0: entered allmulticast mode [ 36.393483][ T6515] bridge_slave_0: entered promiscuous mode [ 36.436247][ T6515] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.436956][ T6515] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.437062][ T6515] bridge_slave_1: entered allmulticast mode [ 36.437877][ T6515] bridge_slave_1: entered promiscuous mode [ 36.444753][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.444799][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.444899][ T6525] bridge_slave_0: entered allmulticast mode [ 36.445767][ T6525] bridge_slave_0: entered promiscuous mode [ 36.447571][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.447640][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.447744][ T6525] bridge_slave_1: entered allmulticast mode [ 36.448684][ T6525] bridge_slave_1: entered promiscuous mode [ 36.468050][ T6516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.471268][ T6522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.471321][ T6522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.471388][ T6522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.503107][ T6525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.503269][ T6523] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.503338][ T6523] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.503445][ T6523] bridge_slave_0: entered allmulticast mode [ 36.504717][ T6523] bridge_slave_0: entered promiscuous mode [ 36.506079][ T6523] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.506124][ T6523] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.506245][ T6523] bridge_slave_1: entered allmulticast mode [ 36.508192][ T6523] bridge_slave_1: entered promiscuous mode [ 36.509886][ T6516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.523142][ T6522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.523192][ T6522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.523446][ T6522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.530437][ T6515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.532842][ T6515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.534289][ T6525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.552144][ T6516] team0: Port device team_slave_0 added [ 36.580738][ T6516] team0: Port device team_slave_1 added [ 36.592483][ T6522] hsr_slave_0: entered promiscuous mode [ 36.593067][ T6522] hsr_slave_1: entered promiscuous mode [ 36.613721][ T6523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.621976][ T6515] team0: Port device team_slave_0 added [ 36.623601][ T6525] team0: Port device team_slave_0 added [ 36.624952][ T6523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.639031][ T6525] team0: Port device team_slave_1 added [ 36.647801][ T6515] team0: Port device team_slave_1 added [ 36.663105][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.665140][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.666691][ T6516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.667811][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.667835][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.667867][ T6516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.694593][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.694639][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.694839][ T6525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.695961][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.695985][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.696017][ T6525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.723329][ T6523] team0: Port device team_slave_0 added [ 36.753544][ T6525] hsr_slave_0: entered promiscuous mode [ 36.754054][ T6525] hsr_slave_1: entered promiscuous mode [ 36.754386][ T6525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.754455][ T6525] Cannot create hsr debugfs directory [ 36.762893][ T6523] team0: Port device team_slave_1 added [ 36.775722][ T6516] hsr_slave_0: entered promiscuous mode [ 36.777212][ T6516] hsr_slave_1: entered promiscuous mode [ 36.777511][ T6516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.777539][ T6516] Cannot create hsr debugfs directory [ 36.785010][ T6515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.785068][ T6515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.785110][ T6515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.786212][ T6515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.786236][ T6515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.786269][ T6515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.865205][ T6523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.865260][ T6523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.865303][ T6523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.885819][ T6523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.885874][ T6523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.885921][ T6523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.911484][ T6515] hsr_slave_0: entered promiscuous mode [ 36.912006][ T6515] hsr_slave_1: entered promiscuous mode [ 36.912298][ T6515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.912326][ T6515] Cannot create hsr debugfs directory [ 37.000855][ T6523] hsr_slave_0: entered promiscuous mode [ 37.001437][ T6523] hsr_slave_1: entered promiscuous mode [ 37.001787][ T6523] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.001815][ T6523] Cannot create hsr debugfs directory [ 37.172022][ T6522] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.177182][ T6522] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.181543][ T6522] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.185422][ T6522] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.240812][ T6516] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.249630][ T6516] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.265716][ T6516] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.276447][ T6516] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.311347][ T6525] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.316445][ T6525] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.321725][ T6525] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.335527][ T6525] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.382379][ T6515] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.386175][ T6515] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.404812][ T6515] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.409118][ T6515] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.439466][ T6523] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.443355][ T6523] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.461343][ T6523] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.465226][ T6523] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.480296][ T6522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.513048][ T6522] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.519328][ T6525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.536199][ T6516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.556821][ T2225] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.557080][ T2225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.562830][ T2225] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.562904][ T2225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.572239][ T6525] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.576520][ T2225] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.576633][ T2225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.601395][ T6515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.614054][ T2225] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.614132][ T2225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.645057][ T6516] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.663619][ T844] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.663692][ T844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.664598][ T844] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.664650][ T844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.695340][ T6515] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.714893][ T6516] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.718086][ T6516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.775759][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.775846][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.778758][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.778805][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.787977][ T6520] Bluetooth: hci1: command tx timeout [ 37.789702][ T52] Bluetooth: hci0: command tx timeout [ 37.812759][ T6523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.814338][ T6515] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.814385][ T6515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.844832][ T6522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.859576][ T6525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.867776][ T52] Bluetooth: hci3: command tx timeout [ 37.869433][ T6520] Bluetooth: hci4: command tx timeout [ 37.870931][ T6084] Bluetooth: hci2: command tx timeout [ 37.893605][ T6516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.901675][ T6523] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.931327][ T844] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.931419][ T844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.936313][ T844] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.936424][ T844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.955892][ T6523] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.959040][ T6523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.982999][ T6522] veth0_vlan: entered promiscuous mode [ 38.003992][ T6515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.009765][ T6522] veth1_vlan: entered promiscuous mode [ 38.014651][ T6516] veth0_vlan: entered promiscuous mode [ 38.031690][ T6516] veth1_vlan: entered promiscuous mode [ 38.057687][ T6525] veth0_vlan: entered promiscuous mode [ 38.065251][ T6525] veth1_vlan: entered promiscuous mode [ 38.076178][ T6522] veth0_macvtap: entered promiscuous mode [ 38.111071][ T6522] veth1_macvtap: entered promiscuous mode [ 38.122423][ T6516] veth0_macvtap: entered promiscuous mode [ 38.126434][ T6516] veth1_macvtap: entered promiscuous mode [ 38.130626][ T6525] veth0_macvtap: entered promiscuous mode [ 38.142481][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.149724][ T6515] veth0_vlan: entered promiscuous mode [ 38.158064][ T6525] veth1_macvtap: entered promiscuous mode [ 38.163800][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.164828][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.166478][ T6516] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.166533][ T6516] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.167640][ T6516] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.167676][ T6516] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.182443][ T6523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.191802][ T6525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.193264][ T6525] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.193302][ T6525] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.193332][ T6525] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.193361][ T6525] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.233007][ T6522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.235189][ T6522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.243139][ T6522] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.243209][ T6522] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.243239][ T6522] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.243268][ T6522] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.286486][ T2225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.286842][ T2225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.332730][ T6515] veth1_vlan: entered promiscuous mode [ 38.350822][ T6515] veth0_macvtap: entered promiscuous mode [ 38.354437][ T6515] veth1_macvtap: entered promiscuous mode [ 38.363485][ T6515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.367483][ T6515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.381667][ T649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.383910][ T649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.398273][ T844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.398331][ T844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.406545][ T6515] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.411930][ T6515] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.411962][ T6515] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.411992][ T6515] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.451414][ T286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.451471][ T286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.489992][ T6516] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.510268][ T2225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.510328][ T2225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.575740][ T6523] veth0_vlan: entered promiscuous mode [ 38.581254][ T555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.581309][ T555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.623428][ T6523] veth1_vlan: entered promiscuous mode [ 38.627501][ T2225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.627557][ T2225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.663649][ T6523] veth0_macvtap: entered promiscuous mode [ 38.711843][ T6523] veth1_macvtap: entered promiscuous mode [ 38.734096][ T286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.734151][ T286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.745852][ T6523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.764327][ T6523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.775257][ T6523] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.775336][ T6523] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.775394][ T6523] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.775430][ T6523] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.956853][ T555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.956909][ T555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.013335][ T6637] loop2: detected capacity change from 0 to 32768 [ 39.024442][ T6637] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.8 (6637) [ 39.047920][ T6637] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 39.048055][ T6637] BTRFS info (device loop2): using sha256 (sha256-arm64) checksum algorithm [ 39.050575][ T2225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.050607][ T2225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.176838][ T6662] Bluetooth: MGMT ver 1.23 [ 39.201505][ T6637] BTRFS info (device loop2): rebuilding free space tree [ 39.218081][ T6645] loop3: detected capacity change from 0 to 32768 [ 39.218615][ T6645] ======================================================= [ 39.218615][ T6645] WARNING: The mand mount option has been deprecated and [ 39.218615][ T6645] and is ignored by this kernel. Remove the mand [ 39.218615][ T6645] option from the mount to silence this warning. [ 39.218615][ T6645] ======================================================= [ 39.260486][ T6637] BTRFS info (device loop2): disabling free space tree [ 39.260594][ T6637] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 39.260647][ T6637] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 39.328297][ T6645] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 39.468566][ T6637] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 39.665823][ T6515] ocfs2: Unmounting device (7,3) on (node local) [ 39.720549][ T6525] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 39.775517][ T6681] loop1: detected capacity change from 0 to 32768 [ 39.841187][ T6689] random: crng reseeded on system resumption [ 39.867337][ T52] Bluetooth: hci0: command tx timeout [ 39.869258][ T52] Bluetooth: hci1: command tx timeout [ 39.936682][ T6689] Restarting kernel threads ... [ 39.937344][ T6689] Done restarting kernel threads. [ 39.946932][ T6520] Bluetooth: hci3: command tx timeout [ 39.948503][ T52] Bluetooth: hci4: command tx timeout [ 39.948609][ T52] Bluetooth: hci2: command tx timeout [ 40.044167][ T6698] netlink: 'syz.3.25': attribute type 12 has an invalid length. [ 40.044266][ T6698] netlink: 132 bytes leftover after parsing attributes in process `syz.3.25'. [ 40.270977][ T6713] delete_channel: no stack [ 40.471919][ T6723] delete_channel: no stack [ 40.552677][ T6727] binder: BINDER_SET_CONTEXT_MGR already set [ 40.552763][ T6727] binder: 6726:6727 ioctl 40046207 0 returned -16 [ 40.676814][ T6735] loop0: detected capacity change from 0 to 64 [ 40.826492][ T6739] tipc: Started in network mode [ 40.826558][ T6739] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 40.826820][ T6739] tipc: Enabled bearer , priority 10 [ 40.868394][ T6597] kernel write not supported for file /input/event0 (pid: 6597 comm: kworker/1:5) [ 40.888068][ T6716] loop2: detected capacity change from 0 to 40427 [ 40.899962][ T6716] F2FS-fs (loop2): heap/no_heap options were deprecated [ 40.908044][ T6716] F2FS-fs (loop2): invalid crc value [ 40.945468][ T6748] loop1: detected capacity change from 0 to 1024 [ 41.136747][ T6716] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 41.310225][ T6525] syz-executor: attempt to access beyond end of device [ 41.310225][ T6525] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 41.310608][ T6525] CPU: 1 UID: 0 PID: 6525 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-g25b50375179c #0 PREEMPT [ 41.310627][ T6525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 41.310634][ T6525] Call trace: [ 41.310638][ T6525] show_stack+0x2c/0x3c (C) [ 41.310659][ T6525] __dump_stack+0x30/0x40 [ 41.310673][ T6525] dump_stack_lvl+0xd8/0x12c [ 41.310687][ T6525] dump_stack+0x1c/0x28 [ 41.310699][ T6525] f2fs_handle_critical_error+0x34c/0x4b8 [ 41.310712][ T6525] f2fs_stop_checkpoint+0x5c/0x70 [ 41.310725][ T6525] f2fs_write_end_io+0x58c/0x818 [ 41.310737][ T6525] bio_endio+0x804/0x840 [ 41.310748][ T6525] submit_bio_noacct+0x158/0x176c [ 41.310761][ T6525] submit_bio+0x354/0x4d4 [ 41.310773][ T6525] f2fs_submit_write_bio+0x13c/0x324 [ 41.310784][ T6525] __submit_merged_bio+0x254/0x704 [ 41.310795][ T6525] __submit_merged_write_cond+0x23c/0x4ac [ 41.310806][ T6525] f2fs_write_data_pages+0x1d28/0x2634 [ 41.310818][ T6525] do_writepages+0x270/0x468 [ 41.310832][ T6525] filemap_fdatawrite+0x144/0x1e8 [ 41.310846][ T6525] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 41.310859][ T6525] f2fs_write_checkpoint+0x684/0x1694 [ 41.310873][ T6525] kill_f2fs_super+0x21c/0x584 [ 41.310884][ T6525] deactivate_locked_super+0xc4/0x12c [ 41.310896][ T6525] deactivate_super+0xe0/0x100 [ 41.310906][ T6525] cleanup_mnt+0x31c/0x3ac [ 41.310917][ T6525] __cleanup_mnt+0x20/0x30 [ 41.310928][ T6525] task_work_run+0x1dc/0x260 [ 41.310939][ T6525] do_notify_resume+0x174/0x1f4 [ 41.310950][ T6525] el0_svc+0xb8/0x180 [ 41.310963][ T6525] el0t_64_sync_handler+0x84/0x12c [ 41.310975][ T6525] el0t_64_sync+0x198/0x19c [ 41.310988][ T6525] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 41.361693][ T6745] loop4: detected capacity change from 0 to 32768 [ 41.533245][ T6770] loop1: detected capacity change from 0 to 4096 [ 41.576984][ T6770] ntfs3(loop1): It is recommened to use chkdsk. [ 41.580488][ T6770] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 41.580566][ T6770] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 41.580616][ T6770] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 41.580648][ T6770] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 41.580678][ T6770] ntfs3(loop1): try to read out of volume at offset 0x3fffffc1c00 [ 41.580708][ T6770] ntfs3(loop1): try to read out of volume at offset 0x3fffffc2c00 [ 41.580753][ T6770] ntfs3(loop1): try to read out of volume at offset 0x3fffffc4c00 [ 41.580784][ T6770] ntfs3(loop1): try to read out of volume at offset 0x3fffffc8c00 [ 41.580814][ T6770] ntfs3(loop1): try to read out of volume at offset 0x3fffffd0c00 [ 41.634229][ T6766] loop0: detected capacity change from 0 to 32768 [ 41.763823][ T6781] netlink: 'syz.2.62': attribute type 2 has an invalid length. [ 41.764387][ T6781] netlink: 'syz.2.62': attribute type 2 has an invalid length. [ 41.947801][ T6084] Bluetooth: hci1: command tx timeout [ 41.947876][ T6084] Bluetooth: hci0: command tx timeout [ 41.957351][ T6564] tipc: Node number set to 10463914 [ 42.026983][ T6520] Bluetooth: hci3: command tx timeout [ 42.027007][ T6084] Bluetooth: hci2: command tx timeout [ 42.027098][ T6520] Bluetooth: hci4: command tx timeout [ 42.051149][ T6791] loop2: detected capacity change from 0 to 4096 [ 42.066350][ T6791] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 42.553441][ T6811] loop4: detected capacity change from 0 to 4096 [ 42.559140][ T6795] loop1: detected capacity change from 0 to 32768 [ 42.564117][ T6811] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 42.567013][ T6795] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.70 (6795) [ 42.613861][ T6795] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 42.613992][ T6795] BTRFS info (device loop1): using crc32c (crc32c-arm64) checksum algorithm [ 42.614029][ T6795] BTRFS info (device loop1): disk space caching is enabled [ 42.614144][ T6795] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 42.761333][ T6795] BTRFS info (device loop1): rebuilding free space tree [ 42.779912][ T6795] BTRFS info (device loop1): disabling free space tree [ 42.779984][ T6795] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 42.780013][ T6795] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 42.882546][ T6839] devtmpfs: Too few inodes for current use [ 42.971711][ T6516] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 43.022590][ T6843] loop4: detected capacity change from 0 to 764 [ 43.047973][ T6843] rock: directory entry would overflow storage [ 43.048038][ T6843] rock: sig=0x4654, size=5, remaining=4 [ 43.217604][ T6849] Bluetooth: MGMT ver 1.23 [ 43.286035][ T6820] loop2: detected capacity change from 0 to 65536 [ 43.300780][ T31] audit: type=1326 audit(43.010:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6848 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9715a9a8 code=0x7fc00000 [ 43.300848][ T31] audit: type=1326 audit(43.010:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6848 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9715a9a8 code=0x7fc00000 [ 43.300904][ T31] audit: type=1326 audit(43.010:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6848 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9715a9a8 code=0x7fc00000 [ 43.300951][ T31] audit: type=1326 audit(43.010:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6848 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9715a9a8 code=0x7fc00000 [ 43.300996][ T31] audit: type=1326 audit(43.010:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6848 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9715a9a8 code=0x7fc00000 [ 43.301041][ T31] audit: type=1326 audit(43.010:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6848 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9715a9a8 code=0x7fc00000 [ 43.301085][ T31] audit: type=1326 audit(43.010:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6848 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9715a9a8 code=0x7fc00000 [ 43.301124][ T31] audit: type=1326 audit(43.010:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6848 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9715a9a8 code=0x7fc00000 [ 43.301162][ T31] audit: type=1326 audit(43.010:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6848 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9715a9a8 code=0x7fc00000 [ 43.301199][ T31] audit: type=1326 audit(43.010:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6848 comm="syz.4.88" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9715a9a8 code=0x7fc00000 [ 43.371995][ T6816] loop3: detected capacity change from 0 to 32768 [ 43.406083][ T6820] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 43.414659][ T6845] loop0: detected capacity change from 0 to 40427 [ 43.428859][ T6845] F2FS-fs (loop0): invalid crc value [ 43.499353][ T6820] XFS (loop2): Ending clean mount [ 43.508496][ T6820] XFS (loop2): Quotacheck needed: Please wait. [ 43.514679][ T6845] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 43.527570][ T2225] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 [ 43.529321][ T2225] XFS (loop2): Unmount and run xfs_repair [ 43.529344][ T2225] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 43.529375][ T2225] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 43.529397][ T2225] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 43.529417][ T2225] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 43.529446][ T2225] 00000030: 00 00 00 00 ac fb 87 b1 00 00 00 0d 00 00 00 03 ................ [ 43.529467][ T2225] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 43.529487][ T2225] 00000050: 00 00 00 00 00 00 08 00 00 00 00 00 00 00 00 00 ................ [ 43.529507][ T2225] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 43.529528][ T2225] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 43.529612][ T2225] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x4 len 2 error 74 [ 43.533596][ T6820] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 43.713810][ T6522] syz-executor: attempt to access beyond end of device [ 43.713810][ T6522] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 43.714241][ T6522] CPU: 1 UID: 0 PID: 6522 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-g25b50375179c #0 PREEMPT [ 43.714260][ T6522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 43.714267][ T6522] Call trace: [ 43.714271][ T6522] show_stack+0x2c/0x3c (C) [ 43.714291][ T6522] __dump_stack+0x30/0x40 [ 43.714305][ T6522] dump_stack_lvl+0xd8/0x12c [ 43.714318][ T6522] dump_stack+0x1c/0x28 [ 43.714331][ T6522] f2fs_handle_critical_error+0x34c/0x4b8 [ 43.714343][ T6522] f2fs_stop_checkpoint+0x5c/0x70 [ 43.714356][ T6522] f2fs_write_end_io+0x58c/0x818 [ 43.714385][ T6522] bio_endio+0x804/0x840 [ 43.714397][ T6522] submit_bio_noacct+0x158/0x176c [ 43.714410][ T6522] submit_bio+0x354/0x4d4 [ 43.714422][ T6522] f2fs_submit_write_bio+0x13c/0x324 [ 43.714441][ T6522] __submit_merged_bio+0x254/0x704 [ 43.714451][ T6522] __submit_merged_write_cond+0x23c/0x4ac [ 43.714462][ T6522] f2fs_write_data_pages+0x1d28/0x2634 [ 43.714474][ T6522] do_writepages+0x270/0x468 [ 43.714488][ T6522] filemap_fdatawrite+0x144/0x1e8 [ 43.714503][ T6522] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 43.714516][ T6522] f2fs_write_checkpoint+0x684/0x1694 [ 43.714530][ T6522] kill_f2fs_super+0x21c/0x584 [ 43.714541][ T6522] deactivate_locked_super+0xc4/0x12c [ 43.714552][ T6522] deactivate_super+0xe0/0x100 [ 43.714562][ T6522] cleanup_mnt+0x31c/0x3ac [ 43.714574][ T6522] __cleanup_mnt+0x20/0x30 [ 43.714584][ T6522] task_work_run+0x1dc/0x260 [ 43.714595][ T6522] do_notify_resume+0x174/0x1f4 [ 43.714607][ T6522] el0_svc+0xb8/0x180 [ 43.714620][ T6522] el0t_64_sync_handler+0x84/0x12c [ 43.714632][ T6522] el0t_64_sync+0x198/0x19c [ 43.714647][ T6522] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 43.778980][ T6525] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 43.783458][ T6525] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair. [ 44.027221][ T6520] Bluetooth: hci0: command tx timeout [ 44.027294][ T6520] Bluetooth: hci1: command tx timeout [ 44.060143][ T6866] loop4: detected capacity change from 0 to 40427 [ 44.086318][ T6866] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 44.086388][ T6866] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 44.096898][ T6866] F2FS-fs (loop4): build fault injection rate: 17008 [ 44.096960][ T6866] F2FS-fs (loop4): build fault injection type: 0x1f8 [ 44.103587][ T6866] F2FS-fs (loop4): invalid crc value [ 44.106955][ T52] Bluetooth: hci4: command tx timeout [ 44.107017][ T52] Bluetooth: hci2: command tx timeout [ 44.107070][ T52] Bluetooth: hci3: command tx timeout [ 44.237849][ T6866] F2FS-fs (loop4): Start checkpoint disabled! [ 44.268992][ T6866] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 44.269054][ T6866] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 44.326867][ T6883] loop3: detected capacity change from 0 to 32768 [ 44.329497][ T6883] XFS: noikeep mount option is deprecated. [ 44.359410][ T6883] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 44.398750][ T6866] F2FS-fs (loop4): access invalid blkaddr:3355443200 [ 44.398849][ T6866] CPU: 1 UID: 0 PID: 6866 Comm: syz.4.90 Not tainted 6.16.0-rc4-syzkaller-g25b50375179c #0 PREEMPT [ 44.398864][ T6866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 44.398871][ T6866] Call trace: [ 44.398876][ T6866] show_stack+0x2c/0x3c (C) [ 44.398897][ T6866] __dump_stack+0x30/0x40 [ 44.398912][ T6866] dump_stack_lvl+0xd8/0x12c [ 44.398926][ T6866] dump_stack+0x1c/0x28 [ 44.398939][ T6866] __f2fs_is_valid_blkaddr+0xae0/0x107c [ 44.398955][ T6866] f2fs_is_valid_blkaddr_raw+0x34/0x4c [ 44.398969][ T6866] f2fs_truncate_data_blocks_range+0x4e4/0xfac [ 44.398983][ T6866] f2fs_do_truncate_blocks+0x6b4/0xd50 [ 44.398996][ T6866] f2fs_truncate_blocks+0xd8/0x2a0 [ 44.399008][ T6866] f2fs_truncate+0x404/0x768 [ 44.399020][ T6866] f2fs_setattr+0xa44/0x1034 [ 44.399033][ T6866] notify_change+0x9a4/0xc50 [ 44.399047][ T6866] do_truncate+0x198/0x210 [ 44.399059][ T6866] path_openat+0x25a0/0x2c40 [ 44.399070][ T6866] do_file_open_root+0x23c/0x480 [ 44.399081][ T6866] file_open_root+0x144/0x18c [ 44.399094][ T6866] do_handle_open+0x654/0x6dc [ 44.399107][ T6866] __arm64_sys_open_by_handle_at+0x80/0x94 [ 44.399119][ T6866] invoke_syscall+0x98/0x2b8 [ 44.399134][ T6866] el0_svc_common+0x130/0x23c [ 44.399148][ T6866] do_el0_svc+0x48/0x58 [ 44.399162][ T6866] el0_svc+0x58/0x180 [ 44.399175][ T6866] el0t_64_sync_handler+0x84/0x12c [ 44.399188][ T6866] el0t_64_sync+0x198/0x19c [ 44.404825][ T6883] XFS (loop3): Ending clean mount [ 44.419463][ T6883] XFS (loop3): Quotacheck needed: Please wait. [ 44.441687][ T555] XFS (loop3): Metadata corruption detected at xfs_dinode_verify+0x140/0x1150, inode 0x1148 dinode [ 44.441766][ T555] XFS (loop3): Unmount and run xfs_repair [ 44.441786][ T555] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 44.441809][ T555] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00 IN.............. [ 44.441830][ T555] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 44.441850][ T555] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 a5 b6 11 4.Xh....4.Xh.... [ 44.441870][ T555] 00000030: 34 f7 58 68 a5 a5 b6 11 00 00 00 00 00 00 00 64 4.Xh...........d [ 44.441890][ T555] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01 ................ [ 44.441911][ T555] 00000050: 00 00 18 02 00 00 00 00 00 00 00 00 3f ea 7e 76 ............?.~v [ 44.441931][ T555] 00000060: ff ff ff ff 24 f6 12 e4 00 00 00 00 00 00 00 05 ....$........... [ 44.441951][ T555] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08 ................ [ 44.494670][ T6883] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 44.630608][ T6911] Injecting memory failure for pfn 0x13664c at process virtual address 0x20000000 [ 44.634607][ T6911] Memory failure: 0x13664c: recovery action for clean LRU page: Recovered [ 44.649153][ T6515] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 44.653391][ T6515] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 44.694251][ T6915] capability: warning: `syz.0.107' uses deprecated v2 capabilities in a way that may be insecure [ 45.013739][ T6891] loop1: detected capacity change from 0 to 32768 [ 45.037855][ T6891] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 45.169795][ T6891] XFS (loop1): Ending clean mount [ 45.171430][ T6891] XFS (loop1): Quotacheck needed: Please wait. [ 45.196036][ T6891] XFS (loop1): Quotacheck: Done. [ 45.328785][ T6516] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 45.602392][ T6928] loop2: detected capacity change from 0 to 32768 [ 45.883673][ T6949] loop4: detected capacity change from 0 to 32768 [ 45.886350][ T6949] btrfs: Deprecated parameter 'usebackuproot' [ 45.890564][ T6949] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 45.897231][ T6949] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.121 (6949) [ 45.932979][ T6949] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 45.933069][ T6949] BTRFS info (device loop4): using crc32c (crc32c-arm64) checksum algorithm [ 45.933105][ T6949] BTRFS info (device loop4): using free-space-tree [ 45.972874][ T6971] netlink: 'syz.2.125': attribute type 28 has an invalid length. [ 46.010476][ T42] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 46.010823][ T6949] BTRFS warning (device loop4): couldn't read tree root [ 46.010856][ T6949] BTRFS warning (device loop4): try to load backup roots slot 1 [ 46.011124][ T42] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 46.011245][ T6949] BTRFS warning (device loop4): couldn't read tree root [ 46.011270][ T6949] BTRFS warning (device loop4): try to load backup roots slot 2 [ 46.011531][ T42] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 46.011591][ T6949] BTRFS warning (device loop4): couldn't read tree root [ 46.011616][ T6949] BTRFS warning (device loop4): try to load backup roots slot 3 [ 46.027157][ T6949] BTRFS info (device loop4): rebuilding free space tree [ 46.038392][ T6949] BTRFS info (device loop4): checking UUID tree [ 46.080562][ T6985] veth0_to_bond: entered allmulticast mode [ 46.176056][ T6965] loop1: detected capacity change from 0 to 32768 [ 46.184298][ T6987] loop2: detected capacity change from 0 to 512 [ 46.213237][ T6965] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 46.238174][ T6987] EXT4-fs (loop2): 1 truncate cleaned up [ 46.239119][ T6987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.314559][ T6987] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.130: Directory hole found for htree leaf block 0 [ 46.365980][ T6965] XFS (loop1): Ending clean mount [ 46.412050][ T6525] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.608666][ T6949] BTRFS info (device loop4 state M): allowing degraded mounts [ 46.608733][ T6949] BTRFS info (device loop4 state M): trying to use backup root at mount time [ 46.608778][ T6949] BTRFS info (device loop4 state M): force zlib compression, level 3 [ 46.631933][ T6917] loop3: detected capacity change from 0 to 131072 [ 46.672574][ T6917] F2FS-fs (loop3): invalid crc value [ 46.695132][ T6523] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 46.703498][ T6516] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 46.778950][ T6917] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 46.839198][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.135'. [ 46.839256][ T7012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.135'. [ 46.839306][ T7012] netlink: 'syz.4.135': attribute type 5 has an invalid length. [ 46.999259][ T7014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.137'. [ 47.002522][ T7014] netlink: 76 bytes leftover after parsing attributes in process `syz.4.137'. [ 47.717990][ T7022] loop3: detected capacity change from 0 to 40427 [ 47.721835][ T7022] F2FS-fs (loop3): Invalid log sectorsize (131081) [ 47.721906][ T7022] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 47.723504][ T7022] F2FS-fs (loop3): invalid crc value [ 47.773646][ T7022] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 47.773730][ T7022] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 47.776439][ T7002] loop2: detected capacity change from 0 to 65536 [ 47.825499][ T7002] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 47.895088][ T7002] XFS (loop2): Starting recovery (logdev: internal) [ 47.914560][ T7002] XFS (loop2): Ending recovery (logdev: internal) [ 47.921699][ T7002] XFS (loop2): Quotacheck needed: Please wait. [ 47.987328][ T7002] XFS (loop2): Quotacheck: Done. [ 48.090044][ T6525] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 48.132047][ T7062] capability: warning: `syz.0.153' uses 32-bit capabilities (legacy support in use) [ 48.606070][ T7086] loop0: detected capacity change from 0 to 4096 [ 48.678219][ T7094] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 48.694538][ T7095] netlink: 96 bytes leftover after parsing attributes in process `syz.3.166'. [ 48.694601][ T7095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.166'. [ 48.703315][ T7095] vlan2: entered allmulticast mode [ 48.705258][ T7095] gretap0: entered allmulticast mode [ 49.124439][ T7058] loop1: detected capacity change from 0 to 65536 [ 49.156146][ T7058] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 49.179176][ T7111] netlink: 'syz.2.175': attribute type 1 has an invalid length. [ 49.179288][ T7111] netlink: 244 bytes leftover after parsing attributes in process `syz.2.175'. [ 49.195045][ T7123] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.212519][ T7058] XFS (loop1): Ending clean mount [ 49.213511][ T7058] XFS (loop1): Quotacheck needed: Please wait. [ 49.217887][ T649] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_cntbt block 0x6 [ 49.218056][ T649] XFS (loop1): Unmount and run xfs_repair [ 49.218078][ T649] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 49.218101][ T649] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 49.218122][ T649] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 49.218143][ T649] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 49.218163][ T649] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 49.218184][ T649] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 49.218204][ T649] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 49.218224][ T649] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 49.218245][ T649] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 49.218268][ T649] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x6 len 2 error 74 [ 49.234411][ T7058] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 49.417223][ T6516] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 49.421155][ T6516] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 49.846853][ T7155] tipc: Started in network mode [ 49.846931][ T7155] tipc: Node identity ac14140d, cluster identity 4711 [ 49.847664][ T7155] tipc: Enabled bearer , priority 10 [ 49.964887][ T7161] loop3: detected capacity change from 0 to 128 [ 49.972770][ T7131] loop2: detected capacity change from 0 to 40427 [ 49.998172][ T7161] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 49.999338][ T7131] F2FS-fs (loop2): build fault injection rate: 690 [ 50.000678][ T7161] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 50.013420][ T7131] F2FS-fs (loop2): invalid crc value [ 50.072290][ T7169] loop1: detected capacity change from 0 to 512 [ 50.114873][ T7169] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 50.114976][ T7169] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.115000][ T7169] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 50.130216][ T7169] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 50.133714][ T7169] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 50.136299][ T7169] System zones: 0-2, 18-18, 34-35 [ 50.141069][ T7131] F2FS-fs (loop2): Start checkpoint disabled! [ 50.151928][ T7131] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 50.191235][ T286] kworker/u8:5: attempt to access beyond end of device [ 50.191235][ T286] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 50.198373][ T286] CPU: 0 UID: 0 PID: 286 Comm: kworker/u8:5 Not tainted 6.16.0-rc4-syzkaller-g25b50375179c #0 PREEMPT [ 50.198397][ T286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.198405][ T286] Workqueue: writeback wb_workfn (flush-7:2) [ 50.198427][ T286] Call trace: [ 50.198431][ T286] show_stack+0x2c/0x3c (C) [ 50.198448][ T286] __dump_stack+0x30/0x40 [ 50.198461][ T286] dump_stack_lvl+0xd8/0x12c [ 50.198474][ T286] dump_stack+0x1c/0x28 [ 50.198487][ T286] f2fs_handle_critical_error+0x34c/0x4b8 [ 50.198499][ T286] f2fs_stop_checkpoint+0x5c/0x70 [ 50.198512][ T286] f2fs_write_end_io+0x58c/0x818 [ 50.198524][ T286] bio_endio+0x804/0x840 [ 50.198535][ T286] submit_bio_noacct+0x158/0x176c [ 50.198548][ T286] submit_bio+0x354/0x4d4 [ 50.198560][ T286] f2fs_submit_write_bio+0x13c/0x324 [ 50.198572][ T286] __submit_merged_bio+0x254/0x704 [ 50.198582][ T286] __submit_merged_write_cond+0x23c/0x4ac [ 50.198593][ T286] f2fs_write_data_pages+0x1d28/0x2634 [ 50.198605][ T286] do_writepages+0x270/0x468 [ 50.198619][ T286] __writeback_single_inode+0x15c/0x13e8 [ 50.198633][ T286] writeback_sb_inodes+0x558/0xe38 [ 50.198646][ T286] wb_writeback+0x3cc/0xd70 [ 50.198659][ T286] wb_workfn+0x338/0xdc0 [ 50.198671][ T286] process_one_work+0x7e8/0x155c [ 50.198685][ T286] worker_thread+0x958/0xed8 [ 50.198698][ T286] kthread+0x5fc/0x75c [ 50.198710][ T286] ret_from_fork+0x10/0x20 [ 50.249932][ T286] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 50.256144][ T7169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.288244][ T7177] loop3: detected capacity change from 0 to 2048 [ 50.300944][ T7177] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 50.334677][ T7182] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 50.335256][ T7169] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 50.406539][ T7177] NILFS (loop3): error -2 truncating bmap (ino=16) [ 50.465696][ T7182] NILFS (loop3): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 50.469248][ T6516] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.469989][ T7182] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=16) [ 50.492972][ T7182] Remounting filesystem read-only [ 50.498913][ T6515] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 50.958875][ T7184] loop4: detected capacity change from 0 to 32768 [ 50.959884][ T7184] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.203 (7184) [ 50.966744][ T1823] tipc: Node number set to 2886997005 [ 50.974388][ T7184] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 50.974484][ T7184] BTRFS info (device loop4): using sha256 (sha256-arm64) checksum algorithm [ 50.974539][ T7184] BTRFS info (device loop4): disk space caching is enabled [ 50.974569][ T7184] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 51.032652][ T7186] loop1: detected capacity change from 0 to 32768 [ 51.058696][ T7184] BTRFS info (device loop4): rebuilding free space tree [ 51.085728][ T7186] read_mapping_page failed! [ 51.087628][ T7186] ERROR: (device loop1): txAbort: [ 51.087628][ T7186] [ 51.093754][ T7186] ERROR: (device loop1): remounting filesystem as read-only [ 51.093907][ T7186] ERROR: (device loop1): diFree: numfree > numinos [ 51.093907][ T7186] [ 51.102058][ T7184] BTRFS info (device loop4): disabling free space tree [ 51.102132][ T7184] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 51.102160][ T7184] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 51.117639][ T7188] loop2: detected capacity change from 0 to 32768 [ 51.155925][ T7188] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 51.335791][ T6523] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 51.392191][ T7188] XFS (loop2): Ending clean mount [ 51.556078][ T6525] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 51.789298][ T7247] loop0: detected capacity change from 0 to 1764 [ 51.949207][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.224'. [ 52.666685][ T7255] loop0: detected capacity change from 0 to 32768 [ 52.676700][ T7255] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.226 (7255) [ 52.688444][ T7255] BTRFS info (device loop0 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 52.688532][ T7255] BTRFS info (device loop0 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 52.688584][ T7255] BTRFS info (device loop0 state S): using free-space-tree [ 52.973004][ T7300] loop1: detected capacity change from 0 to 4096 [ 53.065133][ T7306] loop4: detected capacity change from 0 to 512 [ 53.124309][ T7306] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.243: casefold flag without casefold feature [ 53.129512][ T7306] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.243: couldn't read orphan inode 15 (err -117) [ 53.132726][ T7306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.278575][ T6523] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.398108][ T7255] BTRFS info (device loop0 state MCS): resize thread pool 3 -> 65537 [ 53.406798][ T7255] workqueue: max_active 65537 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 53.409916][ T7255] workqueue: max_active 65537 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 53.413156][ T7255] BTRFS info (device loop0 state MCS): turning off barriers [ 53.415305][ T7255] BTRFS info (device loop0 state MCS): disabling log replay at mount time [ 53.417909][ T7255] BTRFS info (device loop0 state MCS): ignoring bad roots [ 53.420023][ T7255] BTRFS info (device loop0 state MCS): ignoring unknown super block flags [ 53.422751][ T7255] BTRFS info (device loop0 state MCS): setting datacow [ 53.451314][ T6522] BTRFS info (device loop0 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 53.576123][ T7330] tipc: Started in network mode [ 53.578073][ T7330] tipc: Node identity e0000001, cluster identity 4711 [ 53.580059][ T7330] tipc: Enabling of bearer rejected, failed to enable media [ 54.003935][ T7332] loop4: detected capacity change from 0 to 32768 [ 54.067355][ T7332] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 54.302998][ T7354] loop1: detected capacity change from 0 to 4096 [ 54.330250][ T7332] XFS (loop4): Ending clean mount [ 54.333886][ T7332] XFS (loop4): Quotacheck needed: Please wait. [ 54.349545][ T7354] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 54.349613][ T7354] UDF-fs: Scanning with blocksize 512 failed [ 54.380775][ T7332] XFS (loop4): Quotacheck: Done. [ 54.389807][ T7354] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 54.530073][ T7356] loop2: detected capacity change from 0 to 256 [ 54.563486][ T6523] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 54.602324][ T7356] FAT-fs (loop2): Directory bread(block 64) failed [ 54.602473][ T7356] FAT-fs (loop2): Directory bread(block 65) failed [ 54.602533][ T7356] FAT-fs (loop2): Directory bread(block 66) failed [ 54.602565][ T7356] FAT-fs (loop2): Directory bread(block 67) failed [ 54.602615][ T7356] FAT-fs (loop2): Directory bread(block 68) failed [ 54.602646][ T7356] FAT-fs (loop2): Directory bread(block 69) failed [ 54.602694][ T7356] FAT-fs (loop2): Directory bread(block 70) failed [ 54.602725][ T7356] FAT-fs (loop2): Directory bread(block 71) failed [ 54.602772][ T7356] FAT-fs (loop2): Directory bread(block 72) failed [ 54.602802][ T7356] FAT-fs (loop2): Directory bread(block 73) failed [ 54.642680][ T7358] loop0: detected capacity change from 0 to 2048 [ 54.653448][ T7358] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 55.099541][ T7379] loop2: detected capacity change from 0 to 2048 [ 55.169648][ T6633] udevd[6633]: symlink '../../loop1' '/dev/disk/by-diskseq/130.tmp-b7:1' failed: Read-only file system [ 55.170744][ T6633] udevd[6633]: symlink '../../loop1' '/dev/disk/by-label/LinuxUDF.tmp-b7:1' failed: Read-only file system [ 55.171675][ T6633] udevd[6633]: symlink '../../loop1' '/dev/disk/by-uuid/1234567812345678.tmp-b7:1' failed: Read-only file system [ 55.180587][ T7379] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 55.424727][ T6686] udevd[6686]: symlink '../../loop2' '/dev/disk/by-label/LinuxUDF.tmp-b7:2' failed: Read-only file system [ 55.426312][ T6686] udevd[6686]: symlink '../../loop2' '/dev/disk/by-uuid/1234567812345678.tmp-b7:2' failed: Read-only file system [ 55.544241][ T7407] loop4: detected capacity change from 0 to 256 [ 55.588077][ T6633] udevd[6633]: symlink '../../loop2' '/dev/disk/by-label/LinuxUDF.tmp-b7:1' failed: Read-only file system [ 55.589814][ T6633] udevd[6633]: symlink '../../loop2' '/dev/disk/by-uuid/1234567812345678.tmp-b7:1' failed: Read-only file system [ 55.590602][ T6633] udevd[6633]: symlink '../../loop1' '/dev/disk/by-diskseq/130.tmp-b7:1' failed: Read-only file system [ 55.656030][ T7393] loop1: detected capacity change from 0 to 32768 [ 55.762115][ T7412] loop2: detected capacity change from 0 to 256 [ 55.775680][ T6686] udevd[6686]: symlink '../../loop0' '/dev/disk/by-diskseq/136.tmp-b7:0' failed: Read-only file system [ 55.803488][ T6508] udevd[6508]: symlink '../../loop2' '/dev/disk/by-diskseq/135.tmp-b7:2' failed: Read-only file system [ 55.918494][ T7393] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 55.918552][ T7393] allowing incompatible features above 0.0: (unknown version) [ 55.918580][ T7393] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 55.918640][ T7393] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 55.918753][ T7393] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 55.918901][ T7393] bcachefs (loop1): Version upgrade required: [ 55.918901][ T7393] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 55.918901][ T7393] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 55.918901][ T7393] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 55.919338][ T7393] bcachefs (loop1): dropping and reconstructing all alloc info [ 56.021785][ T7393] bcachefs (loop1): accounting_read... [ 56.027294][ T7420] loop2: detected capacity change from 0 to 1764 [ 56.127535][ T7393] done [ 56.127602][ T7393] bcachefs (loop1): alloc_read... done [ 56.128242][ T7393] bcachefs (loop1): snapshots_read... done [ 56.129939][ T7393] bcachefs (loop1): done starting filesystem [ 56.243872][ T7393] bcachefs (loop1): Cannot offline required disk [ 56.323726][ T6516] bcachefs (loop1): shutting down [ 56.388990][ T6516] bcachefs (loop1): shutdown complete [ 56.437465][ T7401] loop0: detected capacity change from 0 to 40427 [ 56.447550][ T7401] F2FS-fs (loop0): heap/no_heap options were deprecated [ 56.447621][ T7401] F2FS-fs (loop0): build fault injection rate: 19 [ 56.447671][ T7401] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 56.451937][ T7401] F2FS-fs (loop0): invalid crc value [ 56.468773][ T7401] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4e8/0x7ac [ 56.504499][ T7401] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1b0/0x3b0 [ 56.547510][ T7401] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 56.629638][ T7401] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x19c/0x9ac [ 56.637984][ T7401] F2FS-fs (loop0): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0xe4/0x6d0 [ 56.707692][ T6522] syz-executor: attempt to access beyond end of device [ 56.707692][ T6522] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 56.708068][ T6522] CPU: 1 UID: 0 PID: 6522 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-g25b50375179c #0 PREEMPT [ 56.708092][ T6522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.708100][ T6522] Call trace: [ 56.708105][ T6522] show_stack+0x2c/0x3c (C) [ 56.708126][ T6522] __dump_stack+0x30/0x40 [ 56.708140][ T6522] dump_stack_lvl+0xd8/0x12c [ 56.708153][ T6522] dump_stack+0x1c/0x28 [ 56.708166][ T6522] f2fs_handle_critical_error+0x34c/0x4b8 [ 56.708179][ T6522] f2fs_stop_checkpoint+0x5c/0x70 [ 56.708192][ T6522] f2fs_write_end_io+0x58c/0x818 [ 56.708204][ T6522] bio_endio+0x804/0x840 [ 56.708215][ T6522] submit_bio_noacct+0x158/0x176c [ 56.708228][ T6522] submit_bio+0x354/0x4d4 [ 56.708240][ T6522] f2fs_submit_write_bio+0x13c/0x324 [ 56.708252][ T6522] __submit_merged_bio+0x254/0x704 [ 56.708262][ T6522] __submit_merged_write_cond+0x23c/0x4ac [ 56.708273][ T6522] f2fs_write_data_pages+0x1d28/0x2634 [ 56.708285][ T6522] do_writepages+0x270/0x468 [ 56.708300][ T6522] filemap_fdatawrite+0x144/0x1e8 [ 56.708314][ T6522] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 56.708328][ T6522] f2fs_write_checkpoint+0x684/0x1694 [ 56.708342][ T6522] kill_f2fs_super+0x21c/0x584 [ 56.708353][ T6522] deactivate_locked_super+0xc4/0x12c [ 56.708372][ T6522] deactivate_super+0xe0/0x100 [ 56.708384][ T6522] cleanup_mnt+0x31c/0x3ac [ 56.708403][ T6522] __cleanup_mnt+0x20/0x30 [ 56.708424][ T6522] task_work_run+0x1dc/0x260 [ 56.708436][ T6522] do_notify_resume+0x174/0x1f4 [ 56.708447][ T6522] el0_svc+0xb8/0x180 [ 56.708460][ T6522] el0t_64_sync_handler+0x84/0x12c [ 56.708472][ T6522] el0t_64_sync+0x198/0x19c [ 56.708672][ T6522] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 56.848026][ T7428] loop4: detected capacity change from 0 to 4096 [ 56.922474][ T7428] ntfs3(loop4): ino=19, mi_enum_attr [ 56.922556][ T7428] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 57.193172][ T7439] loop0: detected capacity change from 0 to 64 [ 57.269922][ T7433] loop2: detected capacity change from 0 to 32768 [ 57.275604][ T7433] btrfs: Deprecated parameter 'usebackuproot' [ 57.278789][ T7433] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 57.282070][ T7433] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.296 (7433) [ 57.308968][ T7433] BTRFS info (device loop2 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 57.309069][ T7433] BTRFS info (device loop2 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 57.309115][ T7433] BTRFS info (device loop2 state S): disk space caching is enabled [ 57.309139][ T7433] BTRFS warning (device loop2 state S): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 57.309183][ T7433] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 57.319120][ T7433] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 57.365763][ T7433] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 57.369579][ T7433] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 57.373440][ T7433] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 57.386880][ T7433] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 57.390994][ T7433] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 57.435759][ T7453] loop4: detected capacity change from 0 to 4096 [ 57.474404][ T7453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.588915][ T6525] BTRFS info (device loop2 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 57.652350][ T6523] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.787251][ T6520] Bluetooth: hci3: command tx timeout [ 58.004641][ T7462] loop0: detected capacity change from 0 to 32768 [ 58.373579][ T7462] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 58.373639][ T7462] allowing incompatible features above 0.0: (unknown version) [ 58.406553][ T7462] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 58.412984][ T7462] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 58.413084][ T7462] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 58.413162][ T7462] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 58.413162][ T7462] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 58.462981][ T7462] bcachefs (loop0): accounting_read... done [ 58.494899][ T7462] bcachefs (loop0): alloc_read... done [ 58.496684][ T7462] bcachefs (loop0): snapshots_read... done [ 58.502030][ T7462] bcachefs (loop0): check_allocations... [ 58.518348][ T7462] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 58.518430][ T7462] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 75277f57b0c8c24 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 58.524052][ T7462] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 58.524069][ T7462] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 58.524890][ T7462] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 58.524904][ T7462] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 58.525878][ T7462] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 58.525893][ T7462] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 58.528087][ T7462] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 58.528102][ T7462] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 58.554265][ T7462] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 58.554312][ T7462] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9a831b4a3f983356 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 58.588143][ T7462] done [ 58.604983][ T7496] loop4: detected capacity change from 0 to 1764 [ 58.606777][ T7462] bcachefs (loop0): going read-write [ 58.643815][ T7462] bcachefs (loop0): journal_replay... [ 58.904842][ T7507] process 'syz.2.317' launched '/dev/fd/3' with NULL argv: empty string added [ 58.925914][ T7462] done [ 58.935363][ T7462] bcachefs (loop0): check_extents_to_backpointers... [ 58.936219][ T7462] bcachefs (loop0): scanning for missing backpointers in 6/128 buckets [ 58.946186][ T7462] done [ 58.949115][ T7462] bcachefs (loop0): check_inodes... done [ 58.953833][ T7462] bcachefs (loop0): resume_logged_ops... done [ 58.956342][ T7462] bcachefs (loop0): delete_dead_inodes... done [ 58.959963][ T7462] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 58.960029][ T7462] bcachefs (loop0): check_extents_to_backpointers... done [ 58.963765][ T7462] bcachefs (loop0): check_inodes... done [ 58.967031][ T7462] bcachefs (loop0): resume_logged_ops... done [ 58.967872][ T7462] bcachefs (loop0): delete_dead_inodes... done [ 58.970909][ T7462] bcachefs (loop0): done starting filesystem [ 59.116799][ T6522] bcachefs (loop0): shutting down [ 59.116857][ T6522] bcachefs (loop0): going read-only [ 59.117118][ T6522] bcachefs (loop0): finished waiting for writes to stop [ 59.168941][ T6522] bcachefs (loop0): flushing journal and stopping allocators, journal seq 15 [ 59.172119][ T6522] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 15 [ 59.187108][ T6522] bcachefs (loop0): clean shutdown complete, journal seq 16 [ 59.190405][ T6522] bcachefs (loop0): marking filesystem clean [ 59.237799][ T7511] netlink: 104 bytes leftover after parsing attributes in process `syz.4.320'. [ 59.319231][ T6522] bcachefs (loop0): shutdown complete [ 59.361339][ T7503] loop1: detected capacity change from 0 to 40427 [ 59.388313][ T7503] F2FS-fs (loop1): heap/no_heap options were deprecated [ 59.388394][ T7503] F2FS-fs (loop1): build fault injection rate: 19 [ 59.388466][ T7503] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 59.396909][ T7503] F2FS-fs (loop1): invalid crc value [ 59.438966][ T7503] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4e8/0x7ac [ 59.508820][ T7503] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1b0/0x3b0 [ 59.518752][ T7503] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 59.615252][ T7503] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x19c/0x9ac [ 59.631452][ T7503] F2FS-fs (loop1): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x9f0/0x1678 [ 59.635591][ T7503] F2FS-fs (loop1): inconsistent node block, node_type:0, nid:14, node_footer[nid:14,ino:10,ofs:1,cpver:0,blkaddr:0] [ 59.700627][ T6516] syz-executor: attempt to access beyond end of device [ 59.700627][ T6516] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 59.700720][ T6516] CPU: 1 UID: 0 PID: 6516 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-g25b50375179c #0 PREEMPT [ 59.700735][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.700742][ T6516] Call trace: [ 59.700747][ T6516] show_stack+0x2c/0x3c (C) [ 59.700766][ T6516] __dump_stack+0x30/0x40 [ 59.700781][ T6516] dump_stack_lvl+0xd8/0x12c [ 59.700794][ T6516] dump_stack+0x1c/0x28 [ 59.700806][ T6516] f2fs_handle_critical_error+0x34c/0x4b8 [ 59.700819][ T6516] f2fs_stop_checkpoint+0x5c/0x70 [ 59.700832][ T6516] f2fs_write_end_io+0x58c/0x818 [ 59.700844][ T6516] bio_endio+0x804/0x840 [ 59.700856][ T6516] submit_bio_noacct+0x158/0x176c [ 59.700869][ T6516] submit_bio+0x354/0x4d4 [ 59.700882][ T6516] f2fs_submit_write_bio+0x13c/0x324 [ 59.700893][ T6516] __submit_merged_bio+0x254/0x704 [ 59.700904][ T6516] __submit_merged_write_cond+0x23c/0x4ac [ 59.700915][ T6516] f2fs_write_data_pages+0x1d28/0x2634 [ 59.700927][ T6516] do_writepages+0x270/0x468 [ 59.700941][ T6516] filemap_fdatawrite+0x144/0x1e8 [ 59.700956][ T6516] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 59.700970][ T6516] f2fs_write_checkpoint+0x684/0x1694 [ 59.700995][ T6516] kill_f2fs_super+0x21c/0x584 [ 59.701007][ T6516] deactivate_locked_super+0xc4/0x12c [ 59.701018][ T6516] deactivate_super+0xe0/0x100 [ 59.701028][ T6516] cleanup_mnt+0x31c/0x3ac [ 59.701040][ T6516] __cleanup_mnt+0x20/0x30 [ 59.701050][ T6516] task_work_run+0x1dc/0x260 [ 59.701062][ T6516] do_notify_resume+0x174/0x1f4 [ 59.701073][ T6516] el0_svc+0xb8/0x180 [ 59.701086][ T6516] el0t_64_sync_handler+0x84/0x12c [ 59.701098][ T6516] el0t_64_sync+0x198/0x19c [ 59.702322][ T6516] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 59.935532][ T7529] loop4: detected capacity change from 0 to 64 [ 60.045229][ T7515] loop2: detected capacity change from 0 to 32768 [ 60.195448][ T6507] udevd[6507]: symlink '../../loop4' '/dev/disk/by-diskseq/163.tmp-b7:4' failed: Read-only file system [ 60.224070][ T6507] udevd[6507]: symlink '../../loop4' '/dev/disk/by-diskseq/163.tmp-b7:4' failed: Read-only file system [ 60.254720][ T7534] loop1: detected capacity change from 0 to 512 [ 60.282902][ T7534] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 60.294409][ T7534] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c042c119, mo2=0002] [ 60.302525][ T7534] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.326: corrupted in-inode xattr: e_value size too large [ 60.303299][ T7534] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.326: couldn't read orphan inode 15 (err -117) [ 60.309166][ T7534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.334068][ T6507] udevd[6507]: symlink '../../loop1' '/dev/disk/by-diskseq/167.tmp-b7:1' failed: Read-only file system [ 60.366466][ T6507] udevd[6507]: symlink '../../loop1' '/dev/disk/by-label/\x86\x5b.tmp-b7:1' failed: Read-only file system [ 60.417678][ T6508] udevd[6508]: symlink '../../loop2' '/dev/disk/by-diskseq/165.tmp-b7:2' failed: Read-only file system [ 60.420522][ T6516] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.429240][ T6508] udevd[6508]: symlink '../../loop2' '/dev/disk/by-uuid/da441363-bb6a-4ab9-999b-c1f40db4fee2.tmp-b7:2' failed: Read-only file system [ 60.435740][ T6507] udevd[6507]: symlink '../../loop1' '/dev/disk/by-diskseq/167.tmp-b7:1' failed: Read-only file system [ 60.457449][ T6507] udevd[6507]: symlink '../../loop1' '/dev/disk/by-label/\x86\x5b.tmp-b7:1' failed: Read-only file system [ 60.490570][ T6507] udevd[6507]: symlink '../../loop1' '/dev/disk/by-diskseq/167.tmp-b7:1' failed: Read-only file system [ 60.522784][ T7538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.330'. [ 60.528018][ T7532] loop4: detected capacity change from 0 to 32768 [ 60.529838][ T7532] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.329 (7532) [ 60.543256][ T6507] udevd[6507]: symlink '../../loop1' '/dev/disk/by-diskseq/167.tmp-b7:1' failed: Read-only file system [ 60.556247][ T7532] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 60.556341][ T7532] BTRFS info (device loop4): using sha256 (sha256-arm64) checksum algorithm [ 60.630671][ T7515] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,recovery_pass_last=initialize_subvolumes,nojournal_transaction_names,noexcl,read_only [ 60.636545][ T7515] allowing incompatible features above 0.0: (unknown version) [ 60.643011][ T7515] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 60.649177][ T7515] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 60.651678][ T7515] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 60.654169][ T7515] bcachefs (loop2): Version upgrade required: [ 60.654169][ T7515] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 60.654169][ T7515] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 60.654169][ T7515] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 60.698345][ T7515] bcachefs (loop2): accounting_read... [ 60.717166][ T7532] BTRFS info (device loop4): rebuilding free space tree [ 60.723103][ T7532] BTRFS info (device loop4): disabling free space tree [ 60.723188][ T7532] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 60.723216][ T7532] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 60.765934][ T7515] done [ 60.765991][ T7515] bcachefs (loop2): alloc_read... done [ 60.775979][ T7515] bcachefs (loop2): done starting filesystem [ 60.946959][ T6525] bcachefs (loop2): shutting down [ 61.033312][ T6525] bcachefs (loop2): shutdown complete [ 61.042919][ T6523] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 61.063926][ T7567] loop1: detected capacity change from 0 to 4096 [ 61.072750][ T7567] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 61.119556][ T7567] ntfs3(loop1): ino=19, mi_enum_attr [ 61.119630][ T7567] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 61.657142][ T7584] netlink: 596 bytes leftover after parsing attributes in process `syz.1.345'. [ 61.833522][ T7595] netlink: zone id is out of range [ 61.848187][ T7595] netlink: zone id is out of range [ 61.848262][ T7595] netlink: zone id is out of range [ 61.848283][ T7595] netlink: zone id is out of range [ 61.848302][ T7595] netlink: zone id is out of range [ 61.848467][ T7595] netlink: zone id is out of range [ 61.848487][ T7595] netlink: zone id is out of range [ 61.848549][ T7595] netlink: zone id is out of range [ 61.848913][ T7595] netlink: zone id is out of range [ 61.849052][ T7595] netlink: zone id is out of range [ 61.906764][ T7596] loop4: detected capacity change from 0 to 512 [ 61.923583][ T7596] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.940710][ T7596] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.351: bad orphan inode 131083 [ 61.969674][ T7596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.970201][ T7598] loop1: detected capacity change from 0 to 256 [ 62.090196][ T6523] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.345139][ T7614] loop4: detected capacity change from 0 to 8 [ 62.352243][ T7615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'. [ 62.368655][ T7614] SQUASHFS error: zstd decompression error: 10 [ 62.368771][ T7614] SQUASHFS error: zstd decompression failed, data probably corrupt [ 62.368824][ T7614] SQUASHFS error: Failed to read block 0x4ec: -5 [ 62.368845][ T7614] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 62.368865][ T7614] SQUASHFS error: Unable to read inode 0x2011f [ 62.842799][ T7609] loop0: detected capacity change from 0 to 32768 [ 62.926159][ T7621] loop4: detected capacity change from 0 to 32768 [ 62.938757][ T7621] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.362 (7621) [ 62.969237][ T7621] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 62.969325][ T7621] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 62.969397][ T7621] BTRFS info (device loop4): using free-space-tree [ 63.028737][ T7609] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 63.033016][ T7609] allowing incompatible features above 0.0: (unknown version) [ 63.035531][ T7609] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 63.075833][ T7609] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 63.075914][ T7609] bcachefs (loop0): initializing new filesystem [ 63.079498][ T7609] bcachefs (loop0): going read-write [ 63.098495][ T42] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xf8bb6bdef03b64ff3b11a2a87ba7a2aeacfdb41cc49a87adad5cc1644d216b29 level 0 [ 63.098701][ T7621] BTRFS error (device loop4): failed to load root extent [ 63.112479][ T2225] BTRFS warning (device loop4): checksum verify failed on logical 5341184 mirror 1 wanted 0xc53d3c5bb04ba5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a found 0xd34891a64d32c06b063fbbf3d26e09cb4d5acf5ade8dc51c4cd532bb53f895d0 level 0 [ 63.119345][ T7621] BTRFS error (device loop4): failed to load root free space [ 63.122268][ T42] BTRFS warning (device loop4): checksum verify failed on logical 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0xcc73edc8ee24564a8c6ce1ce085684ad2f9862e56f948f195b5cd36555a6be2f level 0 [ 63.132750][ T42] BTRFS warning (device loop4): checksum verify failed on logical 5292032 mirror 1 wanted 0xcbbb23d5b53a3b4892a5068ee5011732ffcd94742b434497e3f11d7ca86a6d23 found 0x6ab87e71a537053373402d980abd70276b583e303a68e0dd0a46bb41cfc306c8 level 0 [ 63.137033][ T7609] bcachefs (loop0): marking superblocks [ 63.177785][ T7609] bcachefs (loop0): initializing freespace [ 63.183032][ T7609] bcachefs (loop0): done initializing freespace [ 63.199273][ T6523] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 63.199858][ T7609] bcachefs (loop0): reading snapshots table [ 63.199914][ T7609] bcachefs (loop0): reading snapshots done [ 63.263149][ T7609] bcachefs (loop0): loop0: Superblock write was silently dropped! (seq 0 expected 42) [ 63.263610][ T7609] bcachefs (loop0): done starting filesystem [ 63.290480][ T7629] loop2: detected capacity change from 0 to 32768 [ 63.337110][ T7629] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 63.376289][ T7629] XFS (loop2): Ending clean mount [ 63.383603][ T7627] loop1: detected capacity change from 0 to 32768 [ 63.444750][ T6522] bcachefs (loop0): shutting down [ 63.444865][ T6522] bcachefs (loop0): going read-only [ 63.444895][ T6522] bcachefs (loop0): finished waiting for writes to stop [ 63.479909][ T6522] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2 [ 63.553280][ T7627] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 63.553330][ T7627] allowing incompatible features above 0.0: (unknown version) [ 63.555735][ T7627] features: atomic_nlink [ 63.555802][ T7627] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 63.555846][ T7627] bcachefs (loop1): initializing new filesystem [ 63.559714][ T7627] bcachefs (loop1): going read-write [ 63.574479][ T6525] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 63.614548][ T6522] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 63.616823][ T7627] bcachefs (loop1): marking superblocks [ 63.636181][ T7627] bcachefs (loop1): initializing freespace [ 63.639459][ T7627] bcachefs (loop1): done initializing freespace [ 63.643572][ T7627] bcachefs (loop1): reading snapshots table [ 63.643640][ T7627] bcachefs (loop1): reading snapshots done [ 63.646070][ T6522] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 63.646935][ T6522] bcachefs (loop0): marking filesystem clean [ 63.678426][ T7668] loop4: detected capacity change from 0 to 32768 [ 63.683385][ T7668] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.368 (7668) [ 63.693595][ T6522] bcachefs (loop0): shutdown complete [ 63.695041][ T7627] bcachefs (loop1): done starting filesystem [ 63.750938][ T7668] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 63.751036][ T7668] BTRFS info (device loop4): using sha256 (sha256-arm64) checksum algorithm [ 63.751077][ T7668] BTRFS info (device loop4): using free-space-tree [ 63.879472][ T6516] bcachefs (loop1): shutting down [ 63.879530][ T6516] bcachefs (loop1): going read-only [ 63.879580][ T6516] bcachefs (loop1): finished waiting for writes to stop [ 63.986632][ T6516] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 64.081049][ T6516] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 64.087771][ T6516] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 64.088542][ T6516] bcachefs (loop1): marking filesystem clean [ 64.163313][ T6516] bcachefs (loop1): shutdown complete [ 64.280918][ T6523] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 64.629894][ T7728] loop2: detected capacity change from 0 to 256 [ 64.669403][ T7728] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xcc9b7de9, utbl_chksum : 0xe619d30d) [ 64.750714][ T2411] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.750859][ T2411] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.907768][ T52] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 64.910427][ T52] Bluetooth: hci2: Injecting HCI hardware error event [ 64.911536][ T52] Bluetooth: hci2: hardware error 0x00 [ 64.937552][ T7733] loop2: detected capacity change from 0 to 2048 [ 64.996862][ T7733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.046260][ T7733] EXT4-fs error (device loop2): ext4_ext_precache:649: inode #2: comm syz.2.387: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 65.124989][ T7730] loop4: detected capacity change from 0 to 32768 [ 65.130478][ T6525] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.245658][ T6507] udevd[6507]: symlink '../../loop2' '/dev/disk/by-diskseq/189.tmp-b7:2' failed: Read-only file system [ 65.246485][ T6507] udevd[6507]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 65.319645][ T6507] udevd[6507]: symlink '../../loop2' '/dev/disk/by-diskseq/192.tmp-b7:2' failed: Read-only file system [ 65.334846][ T7726] loop0: detected capacity change from 0 to 32768 [ 65.379966][ T6507] udevd[6507]: symlink '../../loop2' '/dev/disk/by-diskseq/192.tmp-b7:2' failed: Read-only file system [ 65.433771][ T6507] udevd[6507]: symlink '../../loop2' '/dev/disk/by-diskseq/192.tmp-b7:2' failed: Read-only file system [ 65.469520][ T6507] udevd[6507]: symlink '../../loop2' '/dev/disk/by-diskseq/192.tmp-b7:2' failed: Read-only file system [ 65.505758][ T6507] udevd[6507]: symlink '../../loop2' '/dev/disk/by-diskseq/194.tmp-b7:2' failed: Read-only file system [ 65.639358][ T6633] udevd[6633]: symlink '../../loop4' '/dev/disk/by-diskseq/193.tmp-b7:4' failed: Read-only file system [ 65.640364][ T6633] udevd[6633]: symlink '../../loop4' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:4' failed: Read-only file system [ 65.681260][ T7751] loop4: detected capacity change from 0 to 512 [ 65.708439][ T7751] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.732473][ T7751] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.394: Invalid block bitmap block 0 in block_group 0 [ 65.735240][ T7751] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 65.735540][ T7751] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.394: attempt to clear invalid blocks 983260 len 1 [ 65.735876][ T7751] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.394: Invalid inode table block 0 in block_group 0 [ 65.737591][ T7751] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 65.737849][ T7751] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 65.738069][ T7751] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.394: Invalid inode table block 0 in block_group 0 [ 65.738285][ T7751] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 65.738525][ T7751] EXT4-fs error (device loop4): ext4_truncate:4597: inode #11: comm syz.4.394: mark_inode_dirty error [ 65.741719][ T7751] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 65.744814][ T7751] EXT4-fs (loop4): 1 truncate cleaned up [ 65.746018][ T7751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.847958][ T6523] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.868431][ T7726] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 65.868488][ T7726] allowing incompatible features above 0.0: (unknown version) [ 65.868507][ T7726] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 65.868564][ T7726] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 65.868660][ T7726] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 65.868731][ T7726] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 65.868731][ T7726] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 65.874437][ T7760] loop2: detected capacity change from 0 to 256 [ 65.927156][ T7726] bcachefs (loop0): accounting_read... [ 65.963522][ T7760] FAT-fs (loop2): Directory bread(block 64) failed [ 65.963604][ T7760] FAT-fs (loop2): Directory bread(block 65) failed [ 65.963657][ T7760] FAT-fs (loop2): Directory bread(block 66) failed [ 65.963689][ T7760] FAT-fs (loop2): Directory bread(block 67) failed [ 65.963743][ T7760] FAT-fs (loop2): Directory bread(block 68) failed [ 65.963776][ T7760] FAT-fs (loop2): Directory bread(block 69) failed [ 65.963837][ T7760] FAT-fs (loop2): Directory bread(block 70) failed [ 65.963869][ T7760] FAT-fs (loop2): Directory bread(block 71) failed [ 65.963920][ T7760] FAT-fs (loop2): Directory bread(block 72) failed [ 65.963953][ T7760] FAT-fs (loop2): Directory bread(block 73) failed [ 65.985231][ T6508] udevd[6508]: symlink '../../loop0' '/dev/disk/by-diskseq/195.tmp-b7:0' failed: Read-only file system [ 66.072964][ T7726] done [ 66.073031][ T7726] bcachefs (loop0): alloc_read... done [ 66.084953][ T7726] bcachefs (loop0): snapshots_read... done [ 66.085604][ T7726] bcachefs (loop0): check_allocations... [ 66.087266][ T7726] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 66.087283][ T7726] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 75277f57b0c8c24 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 66.088561][ T7726] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 66.088575][ T7726] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 66.102962][ T7726] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 66.102979][ T7726] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 66.103909][ T7726] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 66.103924][ T7726] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 66.137357][ T7726] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 66.137423][ T7726] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 66.156917][ T7726] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 66.156959][ T7726] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9a831b4a3f983356 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 66.171703][ T7726] done [ 66.190466][ T7726] bcachefs (loop0): going read-write [ 66.223629][ T7726] bcachefs (loop0): journal_replay... [ 66.402967][ T7775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.400'. [ 66.454313][ T7726] done [ 66.455495][ T7726] bcachefs (loop0): check_extents_to_backpointers... [ 66.456301][ T7726] bcachefs (loop0): scanning for missing backpointers in 6/128 buckets [ 66.469530][ T7726] done [ 66.474851][ T7726] bcachefs (loop0): check_inodes... done [ 66.480069][ T7726] bcachefs (loop0): resume_logged_ops... done [ 66.482484][ T7726] bcachefs (loop0): delete_dead_inodes... done [ 66.494267][ T7726] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 66.494329][ T7726] bcachefs (loop0): check_extents_to_backpointers... done [ 66.496022][ T7726] bcachefs (loop0): check_inodes... done [ 66.501838][ T7726] bcachefs (loop0): resume_logged_ops... done [ 66.514310][ T7726] bcachefs (loop0): delete_dead_inodes... done [ 66.520365][ T7726] bcachefs (loop0): done starting filesystem [ 66.537515][ T6084] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 66.539702][ T6084] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 66.540271][ T6084] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 66.540950][ T6084] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 66.544080][ T6084] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 66.703740][ T6522] bcachefs (loop0): shutting down [ 66.703802][ T6522] bcachefs (loop0): going read-only [ 66.703832][ T6522] bcachefs (loop0): finished waiting for writes to stop [ 66.755022][ T6522] bcachefs (loop0): flushing journal and stopping allocators, journal seq 16 [ 66.756421][ T6522] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 17 [ 66.758634][ T6522] bcachefs (loop0): clean shutdown complete, journal seq 18 [ 66.759389][ T6522] bcachefs (loop0): marking filesystem clean [ 66.797726][ T7785] loop2: detected capacity change from 0 to 64 [ 66.903134][ T6522] bcachefs (loop0): shutdown complete [ 66.952569][ T7762] loop4: detected capacity change from 0 to 65536 [ 66.977884][ T7762] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 67.001846][ T7773] loop1: detected capacity change from 0 to 32768 [ 67.011310][ T7773] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.399 (7773) [ 67.017875][ T7762] XFS (loop4): Ending clean mount [ 67.020137][ T7773] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 67.020237][ T7773] BTRFS info (device loop1): using sha256 (sha256-arm64) checksum algorithm [ 67.020284][ T7773] BTRFS info (device loop1): using free-space-tree [ 67.123313][ T7762] XFS (loop4): EXPERIMENTAL online shrink feature enabled. Use at your own risk! [ 67.146761][ T52] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 67.201342][ T6523] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 67.228565][ T7773] BTRFS info (device loop1): device stats zeroed by syz.1.399 (7773) [ 67.254926][ T6516] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 67.264895][ T7799] loop2: detected capacity change from 0 to 32768 [ 67.296235][ T7799] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 67.437792][ T7799] XFS (loop2): Ending clean mount [ 67.445198][ T7799] XFS (loop2): Quotacheck needed: Please wait. [ 67.491339][ T7799] XFS (loop2): Quotacheck: Done. [ 67.520495][ T649] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.561948][ T7776] chnl_net:caif_netlink_parms(): no params data found [ 67.669954][ T6525] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 67.885198][ T649] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.928880][ T7836] loop4: detected capacity change from 0 to 32768 [ 68.052246][ T7776] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.054848][ T7776] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.061771][ T7776] bridge_slave_0: entered allmulticast mode [ 68.079635][ T7776] bridge_slave_0: entered promiscuous mode [ 68.176314][ T649] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.201561][ T7776] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.201643][ T7776] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.201828][ T7776] bridge_slave_1: entered allmulticast mode [ 68.202726][ T7776] bridge_slave_1: entered promiscuous mode [ 68.321641][ T649] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.352625][ T7776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.354472][ T7776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.467663][ T7776] team0: Port device team_slave_0 added [ 68.473444][ T7776] team0: Port device team_slave_1 added [ 68.583728][ T7776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.583794][ T7776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.583844][ T7776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.584984][ T7776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.585009][ T7776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.585051][ T7776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.599515][ T52] Bluetooth: hci5: command tx timeout [ 68.640741][ T7836] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 68.640788][ T7836] allowing incompatible features above 0.0: (unknown version) [ 68.667293][ T7836] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 68.667415][ T7836] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 68.667470][ T7836] bcachefs (loop4): initializing new filesystem [ 68.670735][ T7836] bcachefs (loop4): going read-write [ 68.686123][ T7878] loop2: detected capacity change from 0 to 64 [ 68.690610][ T7875] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 68.777629][ T7836] bcachefs (loop4): marking superblocks [ 68.785294][ T7836] bcachefs (loop4): initializing freespace [ 68.786047][ T7776] hsr_slave_0: entered promiscuous mode [ 68.786663][ T7776] hsr_slave_1: entered promiscuous mode [ 68.786996][ T7776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.787025][ T7776] Cannot create hsr debugfs directory [ 68.814006][ T7836] bcachefs (loop4): done initializing freespace [ 68.824211][ T7836] bcachefs (loop4): reading snapshots table [ 68.824298][ T7836] bcachefs (loop4): reading snapshots done [ 68.888808][ T7836] bcachefs (loop4): done starting filesystem [ 69.001604][ T649] bridge_slave_1: left allmulticast mode [ 69.001721][ T649] bridge_slave_1: left promiscuous mode [ 69.003364][ T649] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.055147][ T649] bridge_slave_0: left allmulticast mode [ 69.055218][ T649] bridge_slave_0: left promiscuous mode [ 69.055856][ T649] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.120982][ T7898] loop0: detected capacity change from 0 to 1024 [ 69.198109][ T6523] bcachefs (loop4): shutting down [ 69.198175][ T6523] bcachefs (loop4): going read-only [ 69.198204][ T6523] bcachefs (loop4): finished waiting for writes to stop [ 69.232351][ T6523] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2 [ 69.273355][ T2225] hfsplus: b-tree write err: -5, ino 4 [ 69.339641][ T6523] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 69.340407][ T6523] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 69.341144][ T6523] bcachefs (loop4): marking filesystem clean [ 69.428348][ T7906] 9pnet_fd: Insufficient options for proto=fd [ 69.461103][ T6523] bcachefs (loop4): shutdown complete [ 69.478445][ T7884] loop1: detected capacity change from 0 to 32768 [ 69.873686][ T9] cfg80211: failed to load regulatory.db [ 69.965477][ T7914] loop0: detected capacity change from 0 to 32768 [ 69.976327][ T7914] [ 69.976327][ T7914] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 69.976327][ T7914] [ 69.993575][ T7914] ERROR: (device loop0): diWrite: ixpxd invalid [ 69.993575][ T7914] [ 70.003868][ T7914] ERROR: (device loop0): txAbort: [ 70.003868][ T7914] [ 70.012226][ T7914] jfs_unlink: dtDelete returned -2 [ 70.043299][ T7921] loop1: detected capacity change from 0 to 1024 [ 70.077761][ T6522] [ 70.077761][ T6522] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 70.077761][ T6522] [ 70.078029][ T6522] [ 70.078029][ T6522] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 70.078029][ T6522] [ 70.155250][ T7921] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 70.155429][ T7921] hfsplus: xattr searching failed [ 70.155510][ T7921] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 70.155534][ T7921] hfsplus: xattr searching failed [ 70.155599][ T7921] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 70.155622][ T7921] hfsplus: xattr searching failed [ 70.155694][ T7921] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 70.155717][ T7921] hfsplus: xattr searching failed [ 70.156017][ T7921] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 70.248186][ T6633] udevd[6633]: symlink '../../loop0' '/dev/disk/by-diskseq/218.tmp-b7:0' failed: Read-only file system [ 70.298865][ T6633] udevd[6633]: symlink '../../loop0' '/dev/disk/by-diskseq/218.tmp-b7:0' failed: Read-only file system [ 70.325293][ T6507] udevd[6507]: symlink '../../loop1' '/dev/disk/by-diskseq/219.tmp-b7:1' failed: Read-only file system [ 70.357534][ T6507] udevd[6507]: symlink '../../loop1' '/dev/disk/by-diskseq/219.tmp-b7:1' failed: Read-only file system [ 70.387038][ T7923] loop0: detected capacity change from 0 to 40427 [ 70.397870][ T7923] F2FS-fs (loop0): Invalid Fs Meta Ino: node(3) meta(0) root(3) [ 70.397926][ T7923] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 70.397977][ T7923] F2FS-fs (loop0): heap/no_heap options were deprecated [ 70.413139][ T7923] F2FS-fs (loop0): invalid crc value [ 70.448562][ T7923] F2FS-fs (loop0): Start checkpoint disabled! [ 70.476625][ T7923] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 70.476682][ T7923] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 70.488873][ T6633] udevd[6633]: symlink '../../loop1' '/dev/disk/by-diskseq/221.tmp-b7:1' failed: Read-only file system [ 70.590903][ T6507] udevd[6507]: symlink '../../loop0' '/dev/disk/by-diskseq/222.tmp-b7:0' failed: Read-only file system [ 70.591964][ T6507] udevd[6507]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system [ 70.606126][ T475] kworker/u8:6: attempt to access beyond end of device [ 70.606126][ T475] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 70.606214][ T475] CPU: 1 UID: 0 PID: 475 Comm: kworker/u8:6 Not tainted 6.16.0-rc4-syzkaller-g25b50375179c #0 PREEMPT [ 70.606228][ T475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.606236][ T475] Workqueue: writeback wb_workfn (flush-7:0) [ 70.606257][ T475] Call trace: [ 70.606261][ T475] show_stack+0x2c/0x3c (C) [ 70.606278][ T475] __dump_stack+0x30/0x40 [ 70.606292][ T475] dump_stack_lvl+0xd8/0x12c [ 70.606305][ T475] dump_stack+0x1c/0x28 [ 70.606318][ T475] f2fs_handle_critical_error+0x34c/0x4b8 [ 70.606331][ T475] f2fs_stop_checkpoint+0x5c/0x70 [ 70.606343][ T475] f2fs_write_end_io+0x58c/0x818 [ 70.606355][ T475] bio_endio+0x804/0x840 [ 70.606379][ T475] submit_bio_noacct+0x158/0x176c [ 70.606393][ T475] submit_bio+0x354/0x4d4 [ 70.606405][ T475] f2fs_submit_write_bio+0x13c/0x324 [ 70.606421][ T475] __submit_merged_bio+0x254/0x704 [ 70.606432][ T475] __submit_merged_write_cond+0x23c/0x4ac [ 70.606443][ T475] f2fs_write_data_pages+0x1d28/0x2634 [ 70.606454][ T475] do_writepages+0x270/0x468 [ 70.606469][ T475] __writeback_single_inode+0x15c/0x13e8 [ 70.606483][ T475] writeback_sb_inodes+0x558/0xe38 [ 70.606496][ T475] wb_writeback+0x3cc/0xd70 [ 70.606508][ T475] wb_workfn+0x338/0xdc0 [ 70.606520][ T475] process_one_work+0x7e8/0x155c [ 70.606534][ T475] worker_thread+0x958/0xed8 [ 70.606547][ T475] kthread+0x5fc/0x75c [ 70.606559][ T475] ret_from_fork+0x10/0x20 [ 70.612953][ T475] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 70.666783][ T52] Bluetooth: hci5: command tx timeout [ 70.683358][ T6507] udevd[6507]: symlink '../../loop0' '/dev/disk/by-diskseq/222.tmp-b7:0' failed: Read-only file system [ 70.687690][ T6507] udevd[6507]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system [ 70.781803][ T6507] udevd[6507]: symlink '../../loop0' '/dev/disk/by-diskseq/222.tmp-b7:0' failed: Read-only file system [ 70.951976][ T7938] loop0: detected capacity change from 0 to 2048 [ 70.966780][ T7939] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.032916][ T649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.104327][ T649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.133226][ T649] bond0 (unregistering): Released all slaves [ 71.296720][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.452'. [ 71.319802][ T649] tipc: Disabling bearer [ 71.340090][ T7950] loop2: detected capacity change from 0 to 512 [ 71.343647][ T7950] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.345979][ T649] tipc: Left network mode [ 71.353396][ T7950] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 71.393190][ T7950] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 71.393291][ T7950] System zones: 1-12 [ 71.397124][ T7950] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.453: bad orphan inode 65551 [ 71.412878][ T7950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.602163][ T6525] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.789976][ T7776] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 71.862914][ T7776] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 71.885913][ T7776] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 71.899120][ T7776] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 72.058485][ T7982] loop1: detected capacity change from 0 to 32768 [ 72.083973][ T7982] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 72.187152][ T6516] ocfs2: Unmounting device (7,1) on (node local) [ 72.191942][ T8005] loop0: detected capacity change from 0 to 512 [ 72.196049][ T8005] EXT4-fs: Ignoring removed orlov option [ 72.196471][ T8005] EXT4-fs: Ignoring removed i_version option [ 72.196498][ T8005] EXT4-fs: Ignoring removed bh option [ 72.203215][ T8005] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.211473][ T649] hsr_slave_0: left promiscuous mode [ 72.214236][ T8005] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.467: casefold flag without casefold feature [ 72.214492][ T8005] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.467: couldn't read orphan inode 15 (err -117) [ 72.215572][ T8005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.220651][ T649] hsr_slave_1: left promiscuous mode [ 72.221127][ T649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.221183][ T649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.223781][ T649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.223822][ T649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.253991][ T8005] EXT4-fs error (device loop0): ext4_empty_dir:3075: inode #2: comm syz.0.467: invalid size [ 72.291760][ T649] veth1_macvtap: left promiscuous mode [ 72.294285][ T649] veth0_macvtap: left promiscuous mode [ 72.294991][ T649] veth1_vlan: left promiscuous mode [ 72.295141][ T649] veth0_vlan: left promiscuous mode [ 72.317432][ T6522] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.372288][ T8013] ubi31: attaching mtd0 [ 72.372437][ T8013] ubi31 error: ubi_attach_mtd_dev: bad VID header (536871680) or data offsets (536871744) [ 72.570700][ T8014] loop4: detected capacity change from 0 to 32768 [ 72.719277][ T8014] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 72.734495][ T8014] allowing incompatible features above 0.0: (unknown version) [ 72.734550][ T8014] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 72.734611][ T8014] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 72.734657][ T8014] bcachefs (loop4): initializing new filesystem [ 72.748773][ T52] Bluetooth: hci5: command tx timeout [ 72.751760][ T8014] bcachefs (loop4): going read-write [ 72.821568][ T8014] bcachefs (loop4): marking superblocks [ 72.838956][ T8014] bcachefs (loop4): initializing freespace [ 72.847208][ T8014] bcachefs (loop4): done initializing freespace [ 72.848223][ T8014] bcachefs (loop4): reading snapshots table [ 72.848286][ T8014] bcachefs (loop4): reading snapshots done [ 72.866357][ T8014] bcachefs (loop4): done starting filesystem [ 72.993361][ T8020] loop0: detected capacity change from 0 to 32768 [ 73.020678][ T8020] jfs: Unknown parameter 'iocha' [ 73.094938][ T8041] loop1: detected capacity change from 0 to 32768 [ 73.105240][ T8041] JBD2: Ignoring recovery information on journal [ 73.133122][ T6523] bcachefs (loop4): shutting down [ 73.133486][ T6523] bcachefs (loop4): going read-only [ 73.133539][ T6523] bcachefs (loop4): finished waiting for writes to stop [ 73.150870][ T8041] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 73.168885][ T6523] bcachefs (loop4): flushing journal and stopping allocators, journal seq 9 [ 73.247194][ T6523] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 11 [ 73.250536][ T6523] bcachefs (loop4): clean shutdown complete, journal seq 12 [ 73.251320][ T6523] bcachefs (loop4): marking filesystem clean [ 73.263928][ T8041] [ 73.264532][ T8041] ====================================================== [ 73.266466][ T8041] WARNING: possible circular locking dependency detected [ 73.268448][ T8041] 6.16.0-rc4-syzkaller-g25b50375179c #0 Not tainted [ 73.270311][ T8041] ------------------------------------------------------ [ 73.272352][ T8041] syz.1.479/8041 is trying to acquire lock: [ 73.273978][ T8041] ffff0000f5385c78 (&oi->ip_xattr_sem){+.+.}-{4:4}, at: ocfs2_xattr_set_handle+0x2a8/0x5e4 [ 73.276868][ T8041] [ 73.276868][ T8041] but task is already holding lock: [ 73.279119][ T8041] ffff0000c78a2950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe4c/0x10dc [ 73.281746][ T8041] [ 73.281746][ T8041] which lock already depends on the new lock. [ 73.281746][ T8041] [ 73.284713][ T8041] [ 73.284713][ T8041] the existing dependency chain (in reverse order) is: [ 73.287138][ T8041] [ 73.287138][ T8041] -> #3 (jbd2_handle){++++}-{0:0}: [ 73.289232][ T8041] start_this_handle+0xe74/0x10dc [ 73.290787][ T8041] jbd2__journal_start+0x288/0x51c [ 73.292421][ T8041] jbd2_journal_start+0x3c/0x4c [ 73.293882][ T8041] ocfs2_start_trans+0x368/0x6b0 [ 73.295466][ T8041] ocfs2_reserve_suballoc_bits+0x630/0x3b9c [ 73.297269][ T8041] ocfs2_reserve_new_metadata_blocks+0x368/0x810 [ 73.299280][ T8041] ocfs2_init_xattr_set_ctxt+0x318/0x774 [ 73.301031][ T8041] ocfs2_xattr_set+0x920/0xe9c [ 73.302535][ T8041] ocfs2_set_acl+0x574/0x628 [ 73.303983][ T8041] ocfs2_iop_set_acl+0x190/0x25c [ 73.305626][ T8041] vfs_set_acl+0x70c/0x974 [ 73.307120][ T8041] do_set_acl+0xe0/0x1a8 [ 73.308473][ T8041] filename_setxattr+0x268/0x4f8 [ 73.310064][ T8041] path_setxattrat+0x2e8/0x320 [ 73.311541][ T8041] __arm64_sys_setxattr+0xc0/0xdc [ 73.313174][ T8041] invoke_syscall+0x98/0x2b8 [ 73.314733][ T8041] el0_svc_common+0x130/0x23c [ 73.316191][ T8041] do_el0_svc+0x48/0x58 [ 73.317505][ T8041] el0_svc+0x58/0x180 [ 73.318787][ T8041] el0t_64_sync_handler+0x84/0x12c [ 73.320356][ T8041] el0t_64_sync+0x198/0x19c [ 73.321728][ T8041] [ 73.321728][ T8041] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 73.324113][ T8041] down_read+0x58/0x2f8 [ 73.325414][ T8041] ocfs2_start_trans+0x35c/0x6b0 [ 73.327000][ T8041] ocfs2_reserve_suballoc_bits+0x630/0x3b9c [ 73.328940][ T8041] ocfs2_reserve_new_metadata_blocks+0x368/0x810 [ 73.330939][ T8041] ocfs2_init_xattr_set_ctxt+0x318/0x774 [ 73.332645][ T8041] ocfs2_xattr_set+0x920/0xe9c [ 73.334182][ T8041] ocfs2_set_acl+0x574/0x628 [ 73.335598][ T8041] ocfs2_iop_set_acl+0x190/0x25c [ 73.337091][ T8041] vfs_set_acl+0x70c/0x974 [ 73.338428][ T8041] do_set_acl+0xe0/0x1a8 [ 73.339796][ T8041] filename_setxattr+0x268/0x4f8 [ 73.341319][ T8041] path_setxattrat+0x2e8/0x320 [ 73.342875][ T8041] __arm64_sys_setxattr+0xc0/0xdc [ 73.344503][ T8041] invoke_syscall+0x98/0x2b8 [ 73.345918][ T8041] el0_svc_common+0x130/0x23c [ 73.347359][ T8041] do_el0_svc+0x48/0x58 [ 73.348723][ T8041] el0_svc+0x58/0x180 [ 73.350015][ T8041] el0t_64_sync_handler+0x84/0x12c [ 73.351556][ T8041] el0t_64_sync+0x198/0x19c [ 73.352961][ T8041] [ 73.352961][ T8041] -> #1 (sb_internal#3){.+.+}-{0:0}: [ 73.355111][ T8041] ocfs2_start_trans+0x1f4/0x6b0 [ 73.356749][ T8041] ocfs2_xattr_set+0xac4/0xe9c [ 73.358242][ T8041] ocfs2_set_acl+0x574/0x628 [ 73.359717][ T8041] ocfs2_iop_set_acl+0x190/0x25c [ 73.361346][ T8041] vfs_set_acl+0x70c/0x974 [ 73.362823][ T8041] do_set_acl+0xc8/0x1a8 [ 73.364224][ T8041] filename_setxattr+0x268/0x4f8 [ 73.365856][ T8041] path_setxattrat+0x2e8/0x320 [ 73.367401][ T8041] __arm64_sys_setxattr+0xc0/0xdc [ 73.369065][ T8041] invoke_syscall+0x98/0x2b8 [ 73.370506][ T8041] el0_svc_common+0x130/0x23c [ 73.371953][ T8041] do_el0_svc+0x48/0x58 [ 73.373330][ T8041] el0_svc+0x58/0x180 [ 73.374824][ T8041] el0t_64_sync_handler+0x84/0x12c [ 73.376587][ T8041] el0t_64_sync+0x198/0x19c [ 73.378097][ T8041] [ 73.378097][ T8041] -> #0 (&oi->ip_xattr_sem){+.+.}-{4:4}: [ 73.380341][ T8041] __lock_acquire+0x1774/0x30a4 [ 73.381879][ T8041] lock_acquire+0x14c/0x2e0 [ 73.383259][ T8041] down_write+0x50/0xc0 [ 73.384666][ T8041] ocfs2_xattr_set_handle+0x2a8/0x5e4 [ 73.386363][ T8041] ocfs2_init_security_set+0xb4/0xd8 [ 73.387942][ T8041] ocfs2_mknod+0x106c/0x1cf0 [ 73.389387][ T8041] ocfs2_mkdir+0x190/0x474 [ 73.390732][ T8041] vfs_mkdir+0x284/0x424 [ 73.392083][ T8041] do_mkdirat+0x1f8/0x4c8 [ 73.393465][ T8041] __arm64_sys_mkdirat+0x8c/0xa4 [ 73.395072][ T8041] invoke_syscall+0x98/0x2b8 [ 73.396576][ T8041] el0_svc_common+0x130/0x23c [ 73.398073][ T8041] do_el0_svc+0x48/0x58 [ 73.399452][ T8041] el0_svc+0x58/0x180 [ 73.400749][ T8041] el0t_64_sync_handler+0x84/0x12c [ 73.402435][ T8041] el0t_64_sync+0x198/0x19c [ 73.403920][ T8041] [ 73.403920][ T8041] other info that might help us debug this: [ 73.403920][ T8041] [ 73.406767][ T8041] Chain exists of: [ 73.406767][ T8041] &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle [ 73.406767][ T8041] [ 73.410560][ T8041] Possible unsafe locking scenario: [ 73.410560][ T8041] [ 73.412608][ T8041] CPU0 CPU1 [ 73.414041][ T8041] ---- ---- [ 73.415544][ T8041] rlock(jbd2_handle); [ 73.416775][ T8041] lock(&journal->j_trans_barrier); [ 73.418947][ T8041] lock(jbd2_handle); [ 73.420882][ T8041] lock(&oi->ip_xattr_sem); [ 73.422188][ T8041] [ 73.422188][ T8041] *** DEADLOCK *** [ 73.422188][ T8041] [ 73.424469][ T8041] 8 locks held by syz.1.479/8041: [ 73.425924][ T8041] #0: ffff0000fdc98428 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 73.428748][ T8041] #1: ffff0000fe042640 (&type->i_mutex_dir_key#9/1){+.+.}-{4:4}, at: filename_create+0x1ac/0x3b4 [ 73.431798][ T8041] #2: ffff0000fe08a640 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x12c/0x3b9c [ 73.435638][ T8041] #3: ffff0000fe089800 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x12c/0x3b9c [ 73.439729][ T8041] #4: ffff0000fe08c2c0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x104/0x26a0 [ 73.443916][ T8041] #5: ffff0000fdc98618 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_mknod+0xc50/0x1cf0 [ 73.446596][ T8041] #6: ffff0000f62740e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x35c/0x6b0 [ 73.449825][ T8041] #7: ffff0000c78a2950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe4c/0x10dc [ 73.452620][ T8041] [ 73.452620][ T8041] stack backtrace: [ 73.454340][ T8041] CPU: 1 UID: 0 PID: 8041 Comm: syz.1.479 Not tainted 6.16.0-rc4-syzkaller-g25b50375179c #0 PREEMPT [ 73.457567][ T8041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.460365][ T8041] Call trace: [ 73.461273][ T8041] show_stack+0x2c/0x3c (C) [ 73.462636][ T8041] __dump_stack+0x30/0x40 [ 73.463882][ T8041] dump_stack_lvl+0xd8/0x12c [ 73.465197][ T8041] dump_stack+0x1c/0x28 [ 73.466389][ T8041] print_circular_bug+0x324/0x32c [ 73.467826][ T8041] check_noncircular+0x154/0x174 [ 73.469205][ T8041] __lock_acquire+0x1774/0x30a4 [ 73.470588][ T8041] lock_acquire+0x14c/0x2e0 [ 73.471788][ T8041] down_write+0x50/0xc0 [ 73.472904][ T8041] ocfs2_xattr_set_handle+0x2a8/0x5e4 [ 73.474460][ T8041] ocfs2_init_security_set+0xb4/0xd8 [ 73.475878][ T8041] ocfs2_mknod+0x106c/0x1cf0 [ 73.477093][ T8041] ocfs2_mkdir+0x190/0x474 [ 73.478309][ T8041] vfs_mkdir+0x284/0x424 [ 73.479501][ T8041] do_mkdirat+0x1f8/0x4c8 [ 73.480711][ T8041] __arm64_sys_mkdirat+0x8c/0xa4 [ 73.482124][ T8041] invoke_syscall+0x98/0x2b8 [ 73.483438][ T8041] el0_svc_common+0x130/0x23c [ 73.484761][ T8041] do_el0_svc+0x48/0x58 [ 73.485949][ T8041] el0_svc+0x58/0x180 [ 73.487130][ T8041] el0t_64_sync_handler+0x84/0x12c [ 73.488511][ T8041] el0t_64_sync+0x198/0x19c [ 73.490064][ C1] vkms_vblank_simulate: vblank timer overrun [ 73.496062][ T6523] bcachefs (loop4): shutdown complete [ 73.517722][ T8041] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (312, expected 74) [ 73.517786][ T8041] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 73.517814][ T8041] OCFS2: File system is now read-only. [ 73.517835][ T8041] (syz.1.479,8041,1):ocfs2_search_one_group:1738 ERROR: status = -30 [ 73.517858][ T8041] (syz.1.479,8041,1):ocfs2_claim_suballoc_bits:1989 ERROR: status = -30 [ 73.517880][ T8041] (syz.1.479,8041,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30 [ 73.517902][ T8041] (syz.1.479,8041,1):ocfs2_claim_new_inode:2298 ERROR: status = -30 [ 73.517924][ T8041] (syz.1.479,8041,1):ocfs2_claim_new_inode:2313 ERROR: status = -30 [ 73.517945][ T8041] (syz.1.479,8041,1):ocfs2_mknod_locked:638 ERROR: status = -30 [ 73.517967][ T8041] (syz.1.479,8041,1):ocfs2_mknod:385 ERROR: status = -30 [ 73.518071][ T8041] (syz.1.479,8041,1):ocfs2_mknod:502 ERROR: status = -30 [ 73.518094][ T8041] (syz.1.479,8041,1):ocfs2_create:675 ERROR: status = -30 [ 73.549612][ T6516] ocfs2: Unmounting device (7,1) on (node local) [ 74.687513][ T649] team0 (unregistering): Port device team_slave_1 removed [ 74.826801][ T52] Bluetooth: hci5: command tx timeout [ 74.867343][ T649] team0 (unregistering): Port device team_slave_0 removed [ 76.998514][ T8048] netlink: 'syz.4.480': attribute type 30 has an invalid length. [ 77.013657][ T6507] udevd[6507]: symlink '../../loop2' '/dev/disk/by-diskseq/228.tmp-b7:2' failed: Read-only file system [ 77.029880][ T6633] udevd[6633]: symlink '../../loop4' '/dev/disk/by-diskseq/238.tmp-b7:4' failed: Read-only file system [ 77.042475][ T7776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.071420][ T7776] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.074096][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.074173][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.084087][ T844] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.084149][ T844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.185669][ T7776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.331870][ T7776] veth0_vlan: entered promiscuous mode [ 77.336167][ T7776] veth1_vlan: entered promiscuous mode [ 77.355701][ T7776] veth0_macvtap: entered promiscuous mode [ 77.359512][ T7776] veth1_macvtap: entered promiscuous mode [ 77.366387][ T7776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.382025][ T7776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.386523][ T7776] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.390667][ T7776] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.393302][ T7776] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.396029][ T7776] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.418743][ T7776] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 77.430268][ T7776] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 77.434021][ T555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.434061][ T555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.445318][ T555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.445360][ T555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50