last executing test programs: 1m0.411929137s ago: executing program 1 (id=191): syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x98, &(0x7f00000004c0)=ANY=[], 0xff, 0xa4, &(0x7f00000000c0)="$eJzs0b+pAkEQB+C5e/C4A9EC7OFq0CKswBKMBEEsyFYswdTIwNTkZHFFuGDBQFH4Ptg/P4ZdBuZw3U9jHNFvI/q/eOiT1XoXJf/FKr+gzmeThj655/M8YhYRVaqn7bJZHvMaPF80xd9Hb+sbAAB4XTXIdXTdM53afGk/2RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAN7kFAAD//z7jFwY=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz0\x00', {0xfe2c, 0x1000, 0xff00, 0x7ff}, 0x44, [0x0, 0x6, 0x7, 0x9, 0xc194, 0xdcf, 0x1, 0xd05, 0x7fff, 0x6, 0x8, 0x1, 0x0, 0x29, 0x3, 0x2, 0x81, 0x4, 0x9, 0x0, 0x5, 0x7, 0x0, 0x3, 0x20000000, 0x5, 0xb, 0x6, 0x7, 0xd0bc, 0x80000001, 0x200, 0x2, 0x42b90b17, 0x7, 0x5, 0x8, 0x0, 0xff, 0x200, 0x4, 0x5, 0x3, 0xefd0, 0x6, 0x98, 0xab4, 0x2, 0x4, 0x7f, 0x10000, 0x2, 0x8000, 0x8, 0x8f100000, 0x400, 0xffffffb3, 0x40, 0xc, 0x5, 0x8, 0xc2ee, 0x6c96, 0x88b0], [0xff, 0x49, 0x4, 0xc016, 0x6, 0x7ff, 0x5, 0x1, 0xb, 0x8, 0x80000001, 0x10000, 0xc74475f, 0x5, 0x224f22e7, 0xa, 0x2, 0x0, 0x0, 0x7fffffff, 0xfffffff2, 0x9ba1, 0x4, 0x47e, 0xbf2, 0xc, 0x5, 0x7, 0x3, 0xe2db, 0x6, 0x800, 0x6a1f, 0x5, 0x2448f173, 0x2, 0x4, 0x1, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x243e5e64, 0x0, 0x5, 0xbb5e, 0xc, 0x52, 0x1, 0xfffffffe, 0x85, 0x8, 0x3, 0x800, 0x4, 0x1, 0x10, 0x7, 0x6, 0xd, 0x1000, 0x7], [0x41ea, 0x8, 0xcf72, 0x7, 0x7, 0x6, 0x3, 0x10000, 0x80000000, 0x7, 0x1, 0x400, 0x5, 0x26eff1d2, 0x5, 0x5, 0x5, 0x200, 0xffff7fff, 0x5, 0xdd, 0xffff, 0xa263, 0x1, 0x7, 0x8, 0x8, 0x4, 0x1, 0x5, 0x2, 0x9, 0x6, 0x6, 0x8, 0x7, 0x8, 0x5, 0x3000000, 0xb5, 0x43, 0xfffffffa, 0xfffe, 0x2000000, 0x4, 0x3, 0x3, 0x6, 0x6, 0x1, 0x80000001, 0x1, 0x2, 0xffff, 0x4, 0x80000001, 0x2, 0x0, 0x4, 0x0, 0x7, 0x37d9272d, 0x80000000], [0x9, 0x7f, 0x5, 0x0, 0x8, 0x8, 0x5, 0x0, 0x283, 0x7, 0x0, 0x0, 0x3ce, 0x7, 0x4, 0xff, 0x3, 0x4da, 0x7, 0x5, 0x1, 0x9, 0x1ff, 0x40, 0x7be, 0xfffffffe, 0x200, 0x3, 0xfffffff9, 0x3, 0x1, 0x3, 0x7, 0xfffffff3, 0x5, 0x5, 0xfffffffb, 0x9, 0x800, 0xcaaf, 0x7, 0xfffffffa, 0x8, 0x81, 0xa, 0x7, 0x6, 0x10, 0x4d5, 0xf929, 0x0, 0x7c753245, 0x4, 0xffffffff, 0x8d, 0x4305, 0x7, 0x5ef81e72, 0x1, 0x4, 0xfffffffd, 0x5a, 0x5, 0x2]}, 0x45c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x14, 0x30, r0, 0x0) sync_file_range(r0, 0x6, 0x0, 0x6) 58.116110931s ago: executing program 1 (id=194): r0 = open(0x0, 0x10000, 0x0) getdents(r0, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000140)={0x6, 0xfffffffffffff7fd, 0x0, 0x3, 0x0, [0x8, 0x10001, 0x6, 0x1]}) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00= 504) [ 165.007941][ T6804] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 165.114236][ T6804] F2FS-fs (loop3): invalid crc value [ 165.526897][ T6818] loop4: detected capacity change from 0 to 32768 [ 165.613353][ T6804] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 165.660944][ T6804] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 165.660976][ T6804] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 165.681594][ T6818] JBD2: Ignoring recovery information on journal [ 165.869424][ T6827] loop2: detected capacity change from 0 to 1024 [ 165.871721][ T6827] EXT4-fs: inline encryption not supported [ 165.895115][ T6818] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 165.914530][ T6816] loop0: detected capacity change from 0 to 40427 [ 165.940617][ T6816] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 165.940644][ T6816] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 166.048473][ T6827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.049456][ T6816] F2FS-fs (loop0): invalid crc value [ 166.077680][ T141] CPU: 1 UID: 0 PID: 141 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 166.077718][ T141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 166.077732][ T141] Workqueue: writeback wb_workfn (flush-7:3) [ 166.077755][ T141] Call Trace: [ 166.077762][ T141] [ 166.077768][ T141] dump_stack_lvl+0x189/0x250 [ 166.077790][ T141] ? reacquire_held_locks+0x127/0x1d0 [ 166.077811][ T141] ? rt_spin_lock+0x1c1/0x3e0 [ 166.077828][ T141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.077848][ T141] ? __pfx_queue_work_on+0x10/0x10 [ 166.077870][ T141] ? rt_spin_unlock+0x150/0x200 [ 166.077890][ T141] ? rt_spin_unlock+0x161/0x200 [ 166.077908][ T141] f2fs_handle_critical_error+0x354/0x510 [ 166.077933][ T141] f2fs_write_end_io+0x886/0xb60 [ 166.077971][ T141] __submit_merged_bio+0x27a/0x6a0 [ 166.077996][ T141] __submit_merged_write_cond+0x255/0x530 [ 166.078021][ T141] f2fs_write_data_pages+0x261d/0x3000 [ 166.078075][ T141] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 166.078109][ T141] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 166.078162][ T141] ? rtlock_slowlock_locked+0xd8/0x4010 [ 166.078178][ T141] ? cpuacct_charge+0x117/0x320 [ 166.078210][ T141] ? do_raw_spin_lock+0x121/0x290 [ 166.078246][ T141] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 166.078267][ T141] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 166.078289][ T141] ? __lock_acquire+0xab9/0xd20 [ 166.078309][ T141] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 166.078333][ T141] do_writepages+0x32e/0x550 [ 166.078354][ T141] ? rt_mutex_slowunlock+0x493/0x8a0 [ 166.078368][ T141] ? rt_spin_lock+0x1c1/0x3e0 [ 166.078398][ T141] __writeback_single_inode+0x145/0x1000 [ 166.078426][ T141] writeback_sb_inodes+0x6b7/0xf60 [ 166.078449][ T141] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 166.078488][ T141] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 166.078551][ T141] ? rcu_is_watching+0x15/0xb0 [ 166.078585][ T141] wb_writeback+0x43b/0xaf0 [ 166.078602][ T141] ? __lock_acquire+0xab9/0xd20 [ 166.078629][ T141] ? queue_io+0x351/0x560 [ 166.078651][ T141] ? __pfx_wb_writeback+0x10/0x10 [ 166.078687][ T141] wb_workfn+0x40e/0xf00 [ 166.078722][ T141] ? __pfx_wb_workfn+0x10/0x10 [ 166.078744][ T141] ? __lock_acquire+0xab9/0xd20 [ 166.078776][ T141] ? process_scheduled_works+0x9ef/0x17b0 [ 166.078804][ T141] ? _raw_spin_unlock_irq+0x23/0x50 [ 166.078823][ T141] ? process_scheduled_works+0x9ef/0x17b0 [ 166.078839][ T141] ? process_scheduled_works+0x9ef/0x17b0 [ 166.078857][ T141] process_scheduled_works+0xae1/0x17b0 [ 166.078905][ T141] ? __pfx_process_scheduled_works+0x10/0x10 [ 166.078939][ T141] worker_thread+0x8a0/0xda0 [ 166.078960][ T141] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 166.078987][ T141] ? __kthread_parkme+0x7b/0x200 [ 166.079017][ T141] kthread+0x711/0x8a0 [ 166.079041][ T141] ? __pfx_worker_thread+0x10/0x10 [ 166.079058][ T141] ? __pfx_kthread+0x10/0x10 [ 166.079076][ T141] ? rt_spin_unlock+0x150/0x200 [ 166.079096][ T141] ? rt_spin_unlock+0x161/0x200 [ 166.079109][ T141] ? __pfx_kthread+0x10/0x10 [ 166.079131][ T141] ret_from_fork+0x4bc/0x870 [ 166.079153][ T141] ? __pfx_ret_from_fork+0x10/0x10 [ 166.079178][ T141] ? __switch_to_asm+0x39/0x70 [ 166.079191][ T141] ? __switch_to_asm+0x33/0x70 [ 166.079203][ T141] ? __pfx_kthread+0x10/0x10 [ 166.079224][ T141] ret_from_fork_asm+0x1a/0x30 [ 166.079263][ T141] [ 166.079271][ T141] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 166.225383][ T37] audit: type=1800 audit(1762118026.616:19): pid=6832 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.168" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 166.405359][ T6804] VFS:Filesystem freeze failed [ 166.663887][ T5810] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.664142][ T6816] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 166.664481][ T5804] ocfs2: Unmounting device (7,4) on (node local) [ 166.698623][ T6816] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 166.698655][ T6816] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 166.702718][ T6820] loop1: detected capacity change from 0 to 32768 [ 166.833412][ T6820] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 166.874721][ T6820] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 166.947079][ T6820] XFS (loop1): Ending clean mount [ 166.960291][ T6820] XFS (loop1): Quotacheck needed: Please wait. [ 167.033831][ T6850] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 167.068999][ T6852] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 167.119070][ T6852] overlayfs: overlapping lowerdir path [ 167.123945][ T6850] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 167.123991][ T6850] overlayfs: overlapping lowerdir path [ 167.180493][ T1132] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x10 [ 167.180538][ T1132] XFS (loop1): Unmount and run xfs_repair [ 167.180550][ T1132] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 167.180566][ T1132] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 167.180578][ T1132] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 167.180588][ T1132] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 167.180600][ T1132] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 167.180612][ T1132] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 167.180624][ T1132] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 167.180635][ T1132] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 167.180648][ T1132] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 167.180660][ T1132] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x10 len 8 error 74 [ 167.217397][ T37] audit: type=1800 audit(1762118027.626:20): pid=6851 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.166" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 167.326148][ T6820] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 167.497219][ T5818] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 167.605468][ T5818] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 168.018075][ T6862] loop2: detected capacity change from 0 to 128 [ 168.118392][ T6862] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 168.118663][ T6862] hpfs: filesystem error: improperly stopped [ 168.118679][ T6862] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 168.118693][ T6862] hpfs: You really don't want any checks? You are crazy... [ 168.121943][ T6862] hpfs: hpfs_map_sector(): read error [ 168.121958][ T6862] hpfs: code page support is disabled [ 168.124002][ T6862] hpfs: hpfs_map_4sectors(): unaligned read [ 168.124566][ T6862] hpfs: hpfs_map_4sectors(): unaligned read [ 168.124579][ T6862] hpfs: filesystem error: unable to find root dir [ 168.239189][ T6862] hpfs: hpfs_map_4sectors(): unaligned read [ 168.257191][ T6862] hpfs: hpfs_map_sector(): read error [ 168.290898][ T6862] hpfs: hpfs_map_4sectors(): unaligned read [ 168.349668][ T6864] loop3: detected capacity change from 0 to 4096 [ 168.400118][ T6864] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 168.404408][ T6866] loop1: detected capacity change from 0 to 128 [ 168.535065][ T6866] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.550246][ T6866] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 168.760537][ T37] audit: type=1800 audit(1762118029.166:21): pid=6866 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.174" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 168.959500][ T6858] loop4: detected capacity change from 0 to 40427 [ 169.032424][ T5818] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.041148][ T6870] loop2: detected capacity change from 0 to 2048 [ 169.107786][ T6858] F2FS-fs (loop4): Image doesn't support compression [ 169.107810][ T6858] F2FS-fs (loop4): build fault injection rate: 690 [ 169.131553][ T6858] F2FS-fs (loop4): invalid crc value [ 169.318056][ T5859] loop2: p1 < > p4 [ 169.456795][ T6878] loop3: detected capacity change from 0 to 1024 [ 169.463471][ T5859] loop2: p4 size 8388608 extends beyond EOD, truncated [ 169.485782][ T6878] EXT4-fs: Ignoring removed bh option [ 169.490409][ T6878] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 169.593979][ T6878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.642789][ T6870] loop2: p1 < > p4 [ 169.688520][ T6870] loop2: p4 size 8388608 extends beyond EOD, truncated [ 169.783336][ T6858] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 169.810419][ T6858] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 170.019913][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.093337][ T6858] bio_check_eod: 24 callbacks suppressed [ 170.093359][ T6858] syz.4.176: attempt to access beyond end of device [ 170.093359][ T6858] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 170.132772][ T6031] udevd[6031]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 170.133801][ T6718] udevd[6718]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 170.351029][ T6718] udevd[6718]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 170.377430][ T5859] udevd[5859]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 170.492867][ T5804] syz-executor: attempt to access beyond end of device [ 170.492867][ T5804] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 170.492942][ T5804] CPU: 0 UID: 0 PID: 5804 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 170.492970][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.492982][ T5804] Call Trace: [ 170.492990][ T5804] [ 170.492998][ T5804] dump_stack_lvl+0x189/0x250 [ 170.493028][ T5804] ? reacquire_held_locks+0x127/0x1d0 [ 170.493056][ T5804] ? rt_spin_lock+0x1c1/0x3e0 [ 170.493078][ T5804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.493108][ T5804] ? __pfx_queue_work_on+0x10/0x10 [ 170.493135][ T5804] ? rt_spin_unlock+0x150/0x200 [ 170.493160][ T5804] ? rt_spin_unlock+0x161/0x200 [ 170.493183][ T5804] f2fs_handle_critical_error+0x354/0x510 [ 170.493214][ T5804] f2fs_write_end_io+0x886/0xb60 [ 170.493259][ T5804] __submit_merged_bio+0x27a/0x6a0 [ 170.493291][ T5804] __submit_merged_write_cond+0x255/0x530 [ 170.493323][ T5804] f2fs_write_data_pages+0x261d/0x3000 [ 170.493383][ T5804] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 170.493474][ T5804] ? __lock_acquire+0xab9/0xd20 [ 170.493522][ T5804] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 170.493547][ T5804] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.493571][ T5804] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 170.493663][ T5804] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 170.493690][ T5804] do_writepages+0x32e/0x550 [ 170.493712][ T5804] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 170.493735][ T5804] ? rt_spin_unlock+0x150/0x200 [ 170.493766][ T5804] filemap_fdatawrite+0x19c/0x240 [ 170.493798][ T5804] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 170.493868][ T5804] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 170.493898][ T5804] ? rt_spin_unlock+0x161/0x200 [ 170.493921][ T5804] f2fs_sync_dirty_inodes+0x31f/0x830 [ 170.493964][ T5804] f2fs_write_checkpoint+0x93e/0x2440 [ 170.493990][ T5804] ? __lock_acquire+0xab9/0xd20 [ 170.494043][ T5804] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 170.494130][ T5804] kill_f2fs_super+0x2cc/0x6d0 [ 170.494162][ T5804] ? __pfx_kill_f2fs_super+0x10/0x10 [ 170.494207][ T5804] ? shrinker_free+0x2ce/0x3e0 [ 170.494233][ T5804] deactivate_locked_super+0xbc/0x130 [ 170.494257][ T5804] cleanup_mnt+0x425/0x4c0 [ 170.494277][ T5804] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.494304][ T5804] task_work_run+0x1d4/0x260 [ 170.494327][ T5804] ? __pfx_task_work_run+0x10/0x10 [ 170.494343][ T5804] ? __x64_sys_umount+0x122/0x160 [ 170.494369][ T5804] ? exit_to_user_mode_loop+0x40/0x130 [ 170.494398][ T5804] exit_to_user_mode_loop+0xe9/0x130 [ 170.494422][ T5804] do_syscall_64+0x2bd/0xfa0 [ 170.494445][ T5804] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.494468][ T5804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.494486][ T5804] ? clear_bhb_loop+0x60/0xb0 [ 170.494510][ T5804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.494528][ T5804] RIP: 0033:0x7f11f9b502f7 [ 170.494547][ T5804] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 170.494562][ T5804] RSP: 002b:00007ffd006e6e98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 170.494590][ T5804] RAX: 0000000000000000 RBX: 00007f11f9bd1d7d RCX: 00007f11f9b502f7 [ 170.494603][ T5804] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd006e6f50 [ 170.494615][ T5804] RBP: 00007ffd006e6f50 R08: 0000000000000000 R09: 0000000000000000 [ 170.494627][ T5804] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd006e7fe0 [ 170.494640][ T5804] R13: 00007f11f9bd1d7d R14: 0000000000029865 R15: 00007ffd006e8020 [ 170.494674][ T5804] [ 170.494682][ T5804] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 170.640653][ T6883] loop0: detected capacity change from 0 to 32768 [ 170.759325][ T6883] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 171.096802][ T6883] XFS (loop0): Ending clean mount [ 171.113267][ T6883] XFS (loop0): Quotacheck needed: Please wait. [ 171.424213][ T6883] XFS (loop0): Quotacheck: Done. [ 171.470880][ T37] audit: type=1800 audit(1762118031.876:22): pid=6883 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.173" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 171.496452][ T6883] XFS (loop0): User initiated shutdown received. [ 171.522224][ T6883] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:472). Shutting down filesystem. [ 171.522284][ T6883] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 171.543220][ T6890] loop3: detected capacity change from 0 to 32768 [ 171.593739][ T6887] loop2: detected capacity change from 0 to 32768 [ 171.621157][ T6890] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 171.680413][ T6887] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 171.700108][ T5803] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 171.701566][ T6887] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 171.773157][ T3572] (kworker/u8:15,3572,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 171.851205][ T6892] loop1: detected capacity change from 0 to 40427 [ 172.039290][ T6890] XFS (loop3): Ending clean mount [ 172.104755][ T6892] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 172.154475][ T6890] XFS (loop3): Quotacheck needed: Please wait. [ 172.472439][ T6890] XFS (loop3): Quotacheck: Done. [ 172.495058][ T6920] loop0: detected capacity change from 0 to 2048 [ 172.547522][ T6912] (syz.2.184,6912,0):ocfs2_find_entry:1094 ERROR: status = -117 [ 172.547555][ T6912] (syz.2.184,6912,0):ocfs2_orphan_del:2396 ERROR: status = -117 [ 172.547577][ T6912] (syz.2.184,6912,0):ocfs2_orphan_del:2418 ERROR: status = -117 [ 172.547598][ T6912] (syz.2.184,6912,0):ocfs2_remove_inode:752 ERROR: status = -117 [ 172.547647][ T6912] (syz.2.184,6912,0):ocfs2_wipe_inode:897 ERROR: status = -117 [ 172.547681][ T6912] (syz.2.184,6912,0):ocfs2_delete_inode:1158 ERROR: status = -117 [ 172.643624][ T6920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.701884][ T6892] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 172.816951][ T37] audit: type=1800 audit(1762118033.226:23): pid=6925 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.187" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 172.846947][ T6892] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 172.899068][ T6914] loop4: detected capacity change from 0 to 32768 [ 172.900330][ T6914] btrfs: Deprecated parameter 'usebackuproot' [ 172.900352][ T6914] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 172.902175][ T6914] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.186 (6914) [ 172.946938][ T6914] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 172.947020][ T6914] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 172.947053][ T6914] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 173.029648][ T5803] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.037182][ T5805] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 173.096936][ T5810] ocfs2: Unmounting device (7,2) on (node local) [ 173.101089][ T5818] syz-executor: attempt to access beyond end of device [ 173.101089][ T5818] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 173.101157][ T5818] CPU: 0 UID: 0 PID: 5818 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 173.101180][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.101191][ T5818] Call Trace: [ 173.101199][ T5818] [ 173.101208][ T5818] dump_stack_lvl+0x189/0x250 [ 173.101236][ T5818] ? reacquire_held_locks+0x127/0x1d0 [ 173.101263][ T5818] ? rt_spin_lock+0x1c1/0x3e0 [ 173.101285][ T5818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.101310][ T5818] ? __pfx_queue_work_on+0x10/0x10 [ 173.101345][ T5818] ? rt_spin_unlock+0x150/0x200 [ 173.101371][ T5818] ? rt_spin_unlock+0x161/0x200 [ 173.101394][ T5818] f2fs_handle_critical_error+0x354/0x510 [ 173.101425][ T5818] f2fs_write_end_io+0x886/0xb60 [ 173.101470][ T5818] __submit_merged_bio+0x27a/0x6a0 [ 173.101501][ T5818] __submit_merged_write_cond+0x255/0x530 [ 173.101532][ T5818] f2fs_write_data_pages+0x261d/0x3000 [ 173.101594][ T5818] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 173.101616][ T5818] ? try_to_take_rt_mutex+0x840/0xb00 [ 173.101691][ T5818] ? __lock_acquire+0xab9/0xd20 [ 173.101739][ T5818] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 173.101764][ T5818] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.101789][ T5818] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 173.101829][ T5818] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 173.101856][ T5818] do_writepages+0x32e/0x550 [ 173.101879][ T5818] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 173.101901][ T5818] ? rt_spin_unlock+0x150/0x200 [ 173.101932][ T5818] filemap_fdatawrite+0x19c/0x240 [ 173.101954][ T5818] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 173.102015][ T5818] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 173.102044][ T5818] ? rt_spin_unlock+0x161/0x200 [ 173.102067][ T5818] f2fs_sync_dirty_inodes+0x31f/0x830 [ 173.102107][ T5818] f2fs_write_checkpoint+0x93e/0x2440 [ 173.102130][ T5818] ? __lock_acquire+0xab9/0xd20 [ 173.102177][ T5818] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 173.102258][ T5818] kill_f2fs_super+0x2cc/0x6d0 [ 173.102291][ T5818] ? __pfx_kill_f2fs_super+0x10/0x10 [ 173.102340][ T5818] ? shrinker_free+0x2ce/0x3e0 [ 173.102365][ T5818] deactivate_locked_super+0xbc/0x130 [ 173.102386][ T5818] cleanup_mnt+0x425/0x4c0 [ 173.102403][ T5818] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.102426][ T5818] task_work_run+0x1d4/0x260 [ 173.102447][ T5818] ? __pfx_task_work_run+0x10/0x10 [ 173.102462][ T5818] ? __x64_sys_umount+0x122/0x160 [ 173.102486][ T5818] ? exit_to_user_mode_loop+0x40/0x130 [ 173.102514][ T5818] exit_to_user_mode_loop+0xe9/0x130 [ 173.102537][ T5818] do_syscall_64+0x2bd/0xfa0 [ 173.102559][ T5818] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.102582][ T5818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.102601][ T5818] ? clear_bhb_loop+0x60/0xb0 [ 173.102624][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.102642][ T5818] RIP: 0033:0x7fc662bb02f7 [ 173.102660][ T5818] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 173.102675][ T5818] RSP: 002b:00007fff3de268a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 173.102694][ T5818] RAX: 0000000000000000 RBX: 00007fc662c31d7d RCX: 00007fc662bb02f7 [ 173.102707][ T5818] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3de26960 [ 173.102719][ T5818] RBP: 00007fff3de26960 R08: 0000000000000000 R09: 0000000000000000 [ 173.102731][ T5818] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff3de279f0 [ 173.102744][ T5818] R13: 00007fc662c31d7d R14: 000000000002a2e2 R15: 00007fff3de27a30 [ 173.102777][ T5818] [ 173.104771][ T5818] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 173.223411][ T1185] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 173.223740][ T6914] BTRFS error (device loop4): failed to load root extent [ 173.223783][ T6914] BTRFS warning (device loop4): try to load backup roots slot 1 [ 173.224121][ T1185] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 173.224271][ T6914] BTRFS warning (device loop4): couldn't read tree root [ 173.224290][ T6914] BTRFS warning (device loop4): try to load backup roots slot 2 [ 173.224584][ T1185] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 173.224703][ T6914] BTRFS warning (device loop4): couldn't read tree root [ 173.224720][ T6914] BTRFS warning (device loop4): try to load backup roots slot 3 [ 173.440952][ T6914] BTRFS info (device loop4): rebuilding free space tree [ 173.735008][ T6914] BTRFS info (device loop4): disabling free space tree [ 173.735104][ T6914] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 173.735131][ T6914] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 173.796048][ T6914] BTRFS info (device loop4): setting nodatasum [ 173.796075][ T6914] BTRFS info (device loop4): setting nodatacow [ 173.796091][ T6914] BTRFS info (device loop4): enabling ssd optimizations [ 173.796108][ T6914] BTRFS info (device loop4): turning off barriers [ 173.796124][ T6914] BTRFS info (device loop4): turning on sync discard [ 173.796141][ T6914] BTRFS info (device loop4): enabling disk space caching [ 173.796156][ T6914] BTRFS info (device loop4): force clearing of disk cache [ 173.796173][ T6914] BTRFS info (device loop4): enabling auto defrag [ 173.796189][ T6914] BTRFS info (device loop4): trying to use backup root at mount time [ 173.796207][ T6914] BTRFS info (device loop4): max_inline set to 0 [ 174.129287][ T6948] loop2: detected capacity change from 0 to 64 [ 174.774268][ T6948] syz.2.189: attempt to access beyond end of device [ 174.774268][ T6948] loop2: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 174.928143][ T6951] loop1: detected capacity change from 0 to 64 [ 175.035578][ T6951] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 175.069286][ T5804] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 175.134867][ T6942] loop0: detected capacity change from 0 to 32768 [ 175.173585][ T6946] loop3: detected capacity change from 0 to 32768 [ 175.394740][ T6942] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 175.495590][ T6946] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 175.557640][ T6942] XFS (loop0): Ending clean mount [ 175.690846][ T6971] loop2: detected capacity change from 0 to 128 [ 175.694048][ T6968] (syz.3.188,6968,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 175.792753][ T37] audit: type=1800 audit(1762118036.196:24): pid=6969 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.190" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 175.825386][ T37] audit: type=1800 audit(1762118036.196:25): pid=6942 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.190" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 175.895851][ T6971] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 175.910032][ T6971] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 176.092453][ T5803] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 176.209736][ T5805] ocfs2: Unmounting device (7,3) on (node local) [ 176.466052][ T6979] loop4: detected capacity change from 0 to 4096 [ 176.598040][ T5810] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 176.830877][ T6982] loop3: detected capacity change from 0 to 16 [ 176.974354][ T6982] erofs (device loop3): rootino(nid 36) is not a directory(i_mode 125300) [ 177.215090][ T6976] loop1: detected capacity change from 0 to 32768 [ 177.366113][ T6991] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.376490][ T6976] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 177.722312][ T6976] XFS (loop1): Ending clean mount [ 177.747021][ T6976] XFS (loop1): Quotacheck needed: Please wait. [ 177.945090][ T6985] loop0: detected capacity change from 0 to 32768 [ 178.018814][ T6976] XFS (loop1): Quotacheck: Done. [ 178.051598][ T6985] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 178.172651][ T6979] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 178.172688][ T6979] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12) [ 178.277263][ T6983] loop2: detected capacity change from 0 to 32768 [ 178.402725][ T6979] Remounting filesystem read-only [ 178.402744][ T6979] NILFS (loop4): error -5 truncating bmap (ino=12) [ 178.451729][ T6983] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 178.514739][ T7002] NILFS (loop4): mounting fs with errors [ 178.694687][ T6983] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 178.756533][ T6976] XFS (loop1): User initiated shutdown received. [ 178.756675][ T6976] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:466). Shutting down filesystem. [ 178.756732][ T6976] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 178.768141][ T6983] XFS (loop2): Starting recovery (logdev: internal) [ 178.875114][ T7014] loop3: detected capacity change from 0 to 128 [ 178.880053][ T5803] ocfs2: Unmounting device (7,0) on (node local) [ 178.891473][ T7014] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 178.987437][ T5818] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 179.002689][ T6983] XFS (loop2): Ending recovery (logdev: internal) [ 179.070188][ T7014] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.219856][ T7017] loop4: detected capacity change from 0 to 512 [ 179.223677][ T7017] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 179.230415][ T7017] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.205: bad orphan inode 131083 [ 179.254283][ T7017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.473629][ T5810] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 179.573216][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.752929][ T7027] loop3: detected capacity change from 0 to 512 [ 179.785636][ T7027] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 179.804697][ T7027] EXT4-fs (loop3): 1 truncate cleaned up [ 179.828454][ T7027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.906135][ T7027] EXT4-fs error (device loop3): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.3.210: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 179.944465][ T7027] EXT4-fs (loop3): Remounting filesystem read-only [ 180.060964][ T7032] loop0: detected capacity change from 0 to 16 [ 180.198357][ T7032] erofs (device loop0): mounted with root inode @ nid 36. [ 180.207563][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.250903][ T7032] erofs (device loop0): corrupted dir block 8200 @ nid 36 [ 180.385589][ T7036] loop4: detected capacity change from 0 to 1024 [ 180.387064][ T7036] EXT4-fs: Ignoring removed orlov option [ 180.395628][ T7036] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 180.515486][ T7036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.902244][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.310516][ T7021] loop1: detected capacity change from 0 to 40427 [ 181.329876][ T7021] F2FS-fs (loop1): build fault injection rate: 174 [ 181.329902][ T7021] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 181.335008][ T7021] F2FS-fs (loop1): invalid crc value [ 181.445715][ T7035] loop2: detected capacity change from 0 to 32768 [ 181.589789][ T7035] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 181.645714][ T7039] loop3: detected capacity change from 0 to 32768 [ 181.738754][ T7039] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 181.753362][ T7039] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 182.073167][ T7039] XFS (loop3): Ending clean mount [ 182.083739][ T7039] XFS (loop3): Quotacheck needed: Please wait. [ 182.163939][ T7021] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 182.183042][ T7021] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 182.386679][ T7039] XFS (loop3): Quotacheck: Done. [ 182.444957][ T7043] loop4: detected capacity change from 0 to 32768 [ 182.543131][ T5805] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 182.654049][ T7043] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 182.795408][ T7057] (syz.2.208,7057,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 182.819892][ T7043] XFS (loop4): Ending clean mount [ 182.841316][ T7043] XFS (loop4): Quotacheck needed: Please wait. [ 183.006174][ T7021] F2FS-fs (loop1): inject inconsistent footer in sanity_check_node_footer of read_inline_xattr+0x1af/0x320 [ 183.006222][ T7021] F2FS-fs (loop1): inconsistent node block, node_type:1, nid:20, node_footer[nid:20,ino:20,ofs:0,cpver:0,blkaddr:0] [ 183.085430][ T7043] XFS (loop4): Quotacheck: Done. [ 183.226407][ T7021] overlayfs: failed to set xattr on upper [ 183.226423][ T7021] overlayfs: ...falling back to redirect_dir=nofollow. [ 183.226433][ T7021] overlayfs: ...falling back to index=off. [ 183.226440][ T7021] overlayfs: ...falling back to uuid=null. [ 183.275183][ T7032] syz.0.211 (7032): drop_caches: 2 [ 183.340529][ T5810] ocfs2: Unmounting device (7,2) on (node local) [ 183.463677][ T5818] syz-executor: attempt to access beyond end of device [ 183.463677][ T5818] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 183.463822][ T5818] syz-executor: attempt to access beyond end of device [ 183.463822][ T5818] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 183.510070][ T5804] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 183.814424][ T7075] loop0: detected capacity change from 0 to 128 [ 183.836854][ T1132] kworker/u8:8: attempt to access beyond end of device [ 183.836854][ T1132] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 183.836927][ T1132] CPU: 1 UID: 0 PID: 1132 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 183.836945][ T1132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.836955][ T1132] Workqueue: writeback wb_workfn (flush-7:1) [ 183.836981][ T1132] Call Trace: [ 183.836988][ T1132] [ 183.836996][ T1132] dump_stack_lvl+0x189/0x250 [ 183.837020][ T1132] ? reacquire_held_locks+0x127/0x1d0 [ 183.837044][ T1132] ? rt_spin_lock+0x1c1/0x3e0 [ 183.837062][ T1132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.837084][ T1132] ? __pfx_queue_work_on+0x10/0x10 [ 183.837107][ T1132] ? rt_spin_unlock+0x150/0x200 [ 183.837126][ T1132] ? rt_spin_unlock+0x161/0x200 [ 183.837145][ T1132] f2fs_handle_critical_error+0x354/0x510 [ 183.837170][ T1132] f2fs_write_end_io+0x886/0xb60 [ 183.837208][ T1132] __submit_merged_bio+0x27a/0x6a0 [ 183.837234][ T1132] __submit_merged_write_cond+0x255/0x530 [ 183.837260][ T1132] f2fs_write_data_pages+0x261d/0x3000 [ 183.837311][ T1132] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 183.837380][ T1132] ? rtlock_slowlock_locked+0xd8/0x4010 [ 183.837398][ T1132] ? cpuacct_charge+0x117/0x320 [ 183.837429][ T1132] ? do_raw_spin_lock+0x121/0x290 [ 183.837465][ T1132] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 183.837487][ T1132] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 183.837509][ T1132] ? __lock_acquire+0xab9/0xd20 [ 183.837530][ T1132] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 183.837562][ T1132] do_writepages+0x32e/0x550 [ 183.837585][ T1132] ? rt_mutex_slowunlock+0x493/0x8a0 [ 183.837603][ T1132] ? rt_spin_lock+0x1c1/0x3e0 [ 183.837637][ T1132] __writeback_single_inode+0x145/0x1000 [ 183.837669][ T1132] writeback_sb_inodes+0x6b7/0xf60 [ 183.837696][ T1132] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 183.837743][ T1132] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 183.837811][ T1132] ? rcu_is_watching+0x15/0xb0 [ 183.837840][ T1132] wb_writeback+0x43b/0xaf0 [ 183.837861][ T1132] ? __lock_acquire+0xab9/0xd20 [ 183.837891][ T1132] ? queue_io+0x351/0x560 [ 183.837917][ T1132] ? __pfx_wb_writeback+0x10/0x10 [ 183.837959][ T1132] wb_workfn+0x40e/0xf00 [ 183.837996][ T1132] ? __pfx_wb_workfn+0x10/0x10 [ 183.838021][ T1132] ? __lock_acquire+0xab9/0xd20 [ 183.838056][ T1132] ? process_scheduled_works+0x9ef/0x17b0 [ 183.838087][ T1132] ? _raw_spin_unlock_irq+0x23/0x50 [ 183.838109][ T1132] ? process_scheduled_works+0x9ef/0x17b0 [ 183.838130][ T1132] ? process_scheduled_works+0x9ef/0x17b0 [ 183.838156][ T1132] process_scheduled_works+0xae1/0x17b0 [ 183.838211][ T1132] ? __pfx_process_scheduled_works+0x10/0x10 [ 183.838253][ T1132] worker_thread+0x8a0/0xda0 [ 183.838277][ T1132] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 183.838312][ T1132] ? __kthread_parkme+0x7b/0x200 [ 183.838347][ T1132] kthread+0x711/0x8a0 [ 183.838374][ T1132] ? __pfx_worker_thread+0x10/0x10 [ 183.838395][ T1132] ? __pfx_kthread+0x10/0x10 [ 183.838416][ T1132] ? rt_spin_unlock+0x150/0x200 [ 183.838442][ T1132] ? rt_spin_unlock+0x161/0x200 [ 183.838460][ T1132] ? __pfx_kthread+0x10/0x10 [ 183.838487][ T1132] ret_from_fork+0x4bc/0x870 [ 183.838512][ T1132] ? __pfx_ret_from_fork+0x10/0x10 [ 183.838543][ T1132] ? __switch_to_asm+0x39/0x70 [ 183.838567][ T1132] ? __switch_to_asm+0x33/0x70 [ 183.838584][ T1132] ? __pfx_kthread+0x10/0x10 [ 183.838619][ T1132] ret_from_fork_asm+0x1a/0x30 [ 183.838659][ T1132] [ 183.838667][ T1132] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 183.838843][ T1132] CPU: 1 UID: 0 PID: 1132 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 183.838866][ T1132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.838878][ T1132] Workqueue: writeback wb_workfn (flush-7:1) [ 183.838901][ T1132] Call Trace: [ 183.838908][ T1132] [ 183.838916][ T1132] dump_stack_lvl+0x189/0x250 [ 183.838941][ T1132] ? reacquire_held_locks+0x127/0x1d0 [ 183.838966][ T1132] ? rt_spin_lock+0x1c1/0x3e0 [ 183.838987][ T1132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.839013][ T1132] ? __pfx_queue_work_on+0x10/0x10 [ 183.839038][ T1132] ? rt_spin_unlock+0x150/0x200 [ 183.839063][ T1132] ? rt_spin_unlock+0x161/0x200 [ 183.839087][ T1132] f2fs_handle_critical_error+0x354/0x510 [ 183.839117][ T1132] f2fs_write_end_io+0x886/0xb60 [ 183.839161][ T1132] __submit_merged_bio+0x27a/0x6a0 [ 183.839193][ T1132] __submit_merged_write_cond+0x255/0x530 [ 183.839225][ T1132] f2fs_write_data_pages+0x261d/0x3000 [ 183.839286][ T1132] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 183.839365][ T1132] ? rtlock_slowlock_locked+0xd8/0x4010 [ 183.839387][ T1132] ? cpuacct_charge+0x117/0x320 [ 183.839421][ T1132] ? do_raw_spin_lock+0x121/0x290 [ 183.839459][ T1132] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 183.839483][ T1132] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 183.839508][ T1132] ? __lock_acquire+0xab9/0xd20 [ 183.839530][ T1132] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 183.839564][ T1132] do_writepages+0x32e/0x550 [ 183.839588][ T1132] ? rt_mutex_slowunlock+0x493/0x8a0 [ 183.839606][ T1132] ? rt_spin_lock+0x1c1/0x3e0 [ 183.839640][ T1132] __writeback_single_inode+0x145/0x1000 [ 183.839672][ T1132] writeback_sb_inodes+0x6b7/0xf60 [ 183.839699][ T1132] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 183.839745][ T1132] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 183.839813][ T1132] ? rcu_is_watching+0x15/0xb0 [ 183.839841][ T1132] wb_writeback+0x43b/0xaf0 [ 183.839862][ T1132] ? __lock_acquire+0xab9/0xd20 [ 183.839892][ T1132] ? queue_io+0x351/0x560 [ 183.839924][ T1132] ? __pfx_wb_writeback+0x10/0x10 [ 183.839965][ T1132] wb_workfn+0x40e/0xf00 [ 183.840001][ T1132] ? __pfx_wb_workfn+0x10/0x10 [ 183.840026][ T1132] ? __lock_acquire+0xab9/0xd20 [ 183.840062][ T1132] ? process_scheduled_works+0x9ef/0x17b0 [ 183.840092][ T1132] ? _raw_spin_unlock_irq+0x23/0x50 [ 183.840114][ T1132] ? process_scheduled_works+0x9ef/0x17b0 [ 183.840135][ T1132] ? process_scheduled_works+0x9ef/0x17b0 [ 183.840160][ T1132] process_scheduled_works+0xae1/0x17b0 [ 183.840215][ T1132] ? __pfx_process_scheduled_works+0x10/0x10 [ 183.840258][ T1132] worker_thread+0x8a0/0xda0 [ 183.840284][ T1132] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 183.840317][ T1132] ? __kthread_parkme+0x7b/0x200 [ 183.840351][ T1132] kthread+0x711/0x8a0 [ 183.840381][ T1132] ? __pfx_worker_thread+0x10/0x10 [ 183.840402][ T1132] ? __pfx_kthread+0x10/0x10 [ 183.840424][ T1132] ? rt_spin_unlock+0x150/0x200 [ 183.840450][ T1132] ? rt_spin_unlock+0x161/0x200 [ 183.840467][ T1132] ? __pfx_kthread+0x10/0x10 [ 183.840494][ T1132] ret_from_fork+0x4bc/0x870 [ 183.840519][ T1132] ? __pfx_ret_from_fork+0x10/0x10 [ 183.840549][ T1132] ? __switch_to_asm+0x39/0x70 [ 183.840573][ T1132] ? __switch_to_asm+0x33/0x70 [ 183.840590][ T1132] ? __pfx_kthread+0x10/0x10 [ 183.840616][ T1132] ret_from_fork_asm+0x1a/0x30 [ 183.840655][ T1132] [ 183.840663][ T1132] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 183.840702][ T1132] CPU: 1 UID: 0 PID: 1132 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 183.840723][ T1132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.840735][ T1132] Workqueue: writeback wb_workfn (flush-7:1) [ 183.840756][ T1132] Call Trace: [ 183.840763][ T1132] [ 183.840771][ T1132] dump_stack_lvl+0x189/0x250 [ 183.840795][ T1132] ? reacquire_held_locks+0x127/0x1d0 [ 183.840821][ T1132] ? rt_spin_lock+0x1c1/0x3e0 [ 183.840840][ T1132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.840866][ T1132] ? __pfx_queue_work_on+0x10/0x10 [ 183.840893][ T1132] ? rt_spin_unlock+0x150/0x200 [ 183.840918][ T1132] ? rt_spin_unlock+0x161/0x200 [ 183.840941][ T1132] f2fs_handle_critical_error+0x354/0x510 [ 183.840970][ T1132] f2fs_write_end_io+0x886/0xb60 [ 183.841014][ T1132] __submit_merged_bio+0x27a/0x6a0 [ 183.841041][ T1132] __submit_merged_write_cond+0x255/0x530 [ 183.841071][ T1132] f2fs_write_data_pages+0x261d/0x3000 [ 183.841131][ T1132] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 183.841213][ T1132] ? rtlock_slowlock_locked+0xd8/0x4010 [ 183.841234][ T1132] ? cpuacct_charge+0x117/0x320 [ 183.841269][ T1132] ? do_raw_spin_lock+0x121/0x290 [ 183.841308][ T1132] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 183.841332][ T1132] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 183.841357][ T1132] ? __lock_acquire+0xab9/0xd20 [ 183.841380][ T1132] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 183.841405][ T1132] do_writepages+0x32e/0x550 [ 183.841428][ T1132] ? rt_mutex_slowunlock+0x493/0x8a0 [ 183.841447][ T1132] ? rt_spin_lock+0x1c1/0x3e0 [ 183.841480][ T1132] __writeback_single_inode+0x145/0x1000 [ 183.841513][ T1132] writeback_sb_inodes+0x6b7/0xf60 [ 183.841539][ T1132] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 183.841592][ T1132] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 183.841660][ T1132] ? rcu_is_watching+0x15/0xb0 [ 183.841689][ T1132] wb_writeback+0x43b/0xaf0 [ 183.841710][ T1132] ? __lock_acquire+0xab9/0xd20 [ 183.841741][ T1132] ? queue_io+0x351/0x560 [ 183.841767][ T1132] ? __pfx_wb_writeback+0x10/0x10 [ 183.841807][ T1132] wb_workfn+0x40e/0xf00 [ 183.841843][ T1132] ? __pfx_wb_workfn+0x10/0x10 [ 183.841868][ T1132] ? __lock_acquire+0xab9/0xd20 [ 183.841904][ T1132] ? process_scheduled_works+0x9ef/0x17b0 [ 183.841934][ T1132] ? _raw_spin_unlock_irq+0x23/0x50 [ 183.841956][ T1132] ? process_scheduled_works+0x9ef/0x17b0 [ 183.841977][ T1132] ? process_scheduled_works+0x9ef/0x17b0 [ 183.842002][ T1132] process_scheduled_works+0xae1/0x17b0 [ 183.842058][ T1132] ? __pfx_process_scheduled_works+0x10/0x10 [ 183.842100][ T1132] worker_thread+0x8a0/0xda0 [ 183.842126][ T1132] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 183.842160][ T1132] ? __kthread_parkme+0x7b/0x200 [ 183.842194][ T1132] kthread+0x711/0x8a0 [ 183.842222][ T1132] ? __pfx_worker_thread+0x10/0x10 [ 183.842245][ T1132] ? __pfx_kthread+0x10/0x10 [ 183.842267][ T1132] ? rt_spin_unlock+0x150/0x200 [ 183.842292][ T1132] ? rt_spin_unlock+0x161/0x200 [ 183.842310][ T1132] ? __pfx_kthread+0x10/0x10 [ 183.842337][ T1132] ret_from_fork+0x4bc/0x870 [ 183.842362][ T1132] ? __pfx_ret_from_fork+0x10/0x10 [ 183.842392][ T1132] ? __switch_to_asm+0x39/0x70 [ 183.842415][ T1132] ? __switch_to_asm+0x33/0x70 [ 183.842432][ T1132] ? __pfx_kthread+0x10/0x10 [ 183.842467][ T1132] ret_from_fork_asm+0x1a/0x30 [ 183.842506][ T1132] [ 183.842514][ T1132] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 184.028698][ T7075] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.068531][ T7075] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 184.148406][ T37] audit: type=1800 audit(1762118044.556:26): pid=7075 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.220" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 184.171950][ T7073] loop2: detected capacity change from 0 to 4096 [ 184.419885][ T37] audit: type=1804 audit(1762118044.826:27): pid=7080 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.220" name="/newroot/31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop0" ino=12 res=1 errno=0 [ 184.597203][ T7082] loop3: detected capacity change from 0 to 2048 [ 184.692898][ T37] audit: type=1800 audit(1762118045.096:28): pid=7080 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.220" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 184.756235][ T37] audit: type=1800 audit(1762118045.146:29): pid=7073 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.216" name="file1" dev="loop2" ino=0 res=0 errno=0 [ 184.761088][ T7082] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.100890][ T7087] loop4: detected capacity change from 0 to 128 [ 185.266192][ T5803] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 185.283265][ T7087] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 185.283334][ T7087] hpfs: filesystem error: improperly stopped [ 185.283348][ T7087] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 185.283363][ T7087] hpfs: You really don't want any checks? You are crazy... [ 185.283817][ T7087] hpfs: hpfs_map_sector(): read error [ 185.283827][ T7087] hpfs: code page support is disabled [ 185.285117][ T7087] hpfs: hpfs_map_4sectors(): unaligned read [ 185.332436][ T7087] hpfs: hpfs_map_4sectors(): unaligned read [ 185.332454][ T7087] hpfs: filesystem error: unable to find root dir [ 185.786459][ T7094] overlayfs: failed to decode file handle (len=5, type=248, flags=0, err=-22) [ 185.903375][ T7097] overlayfs: overlapping lowerdir path [ 185.944813][ T7096] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 186.166693][ T7099] loop0: detected capacity change from 0 to 1024 [ 186.280841][ T7101] loop4: detected capacity change from 0 to 256 [ 186.415088][ T7099] hfsplus: catalog searching failed [ 186.430365][ T7101] FAT-fs (loop4): Directory bread(block 64) failed [ 186.430404][ T7101] FAT-fs (loop4): Directory bread(block 65) failed [ 186.430508][ T7101] FAT-fs (loop4): Directory bread(block 66) failed [ 186.430535][ T7101] FAT-fs (loop4): Directory bread(block 67) failed [ 186.430677][ T7101] FAT-fs (loop4): Directory bread(block 68) failed [ 186.430705][ T7101] FAT-fs (loop4): Directory bread(block 69) failed [ 186.430805][ T7101] FAT-fs (loop4): Directory bread(block 70) failed [ 186.430832][ T7101] FAT-fs (loop4): Directory bread(block 71) failed [ 186.430939][ T7101] FAT-fs (loop4): Directory bread(block 72) failed [ 186.430966][ T7101] FAT-fs (loop4): Directory bread(block 73) failed [ 186.615104][ T7101] syz.4.228: attempt to access beyond end of device [ 186.615104][ T7101] loop4: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 186.652003][ T7092] loop2: detected capacity change from 0 to 32768 [ 186.665026][ T7101] syz.4.228: attempt to access beyond end of device [ 186.665026][ T7101] loop4: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 186.683027][ T37] audit: type=1800 audit(1762118047.076:30): pid=7101 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.228" name="file0" dev="loop4" ino=1048626 res=0 errno=0 [ 186.799728][ T3481] hfsplus: bad catalog file entry [ 186.812141][ T7092] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 187.029673][ T7092] XFS (loop2): Ending clean mount [ 187.033717][ T7092] XFS (loop2): Quotacheck needed: Please wait. [ 187.079776][ T7118] loop0: detected capacity change from 0 to 256 [ 187.417772][ T1132] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.462884][ T7092] XFS (loop2): Quotacheck: Done. [ 187.863150][ T5810] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 188.024371][ T1132] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.112753][ T7116] loop4: detected capacity change from 0 to 32768 [ 188.298333][ T7116] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 188.522850][ T7120] loop3: detected capacity change from 0 to 32768 [ 188.580071][ T7120] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.232 (7120) [ 188.624495][ T7116] XFS (loop4): Ending clean mount [ 188.639117][ T7116] XFS (loop4): Quotacheck needed: Please wait. [ 188.651732][ T7120] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 188.651814][ T7120] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 188.741127][ T7140] loop0: detected capacity change from 0 to 1024 [ 188.986273][ T7120] BTRFS info (device loop3): enabling ssd optimizations [ 188.986302][ T7120] BTRFS info (device loop3): turning on async discard [ 188.986319][ T7120] BTRFS info (device loop3): enabling free space tree [ 189.112213][ T1132] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.175605][ T7116] XFS (loop4): Quotacheck: Done. [ 189.413871][ T7163] loop0: detected capacity change from 0 to 64 [ 189.440491][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.445191][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.462805][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.473320][ T5804] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 189.485111][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.505608][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 189.507033][ T37] audit: type=1800 audit(1762118049.916:31): pid=7163 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.239" name="file1" dev="loop0" ino=22 res=0 errno=0 [ 189.550811][ T37] audit: type=1800 audit(1762118049.956:32): pid=7163 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.239" name="file1" dev="loop0" ino=22 res=0 errno=0 [ 189.621754][ T7160] loop2: detected capacity change from 0 to 4096 [ 189.634435][ T5805] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 189.916681][ T1132] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.105332][ T7167] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.378751][ T37] audit: type=1800 audit(1762118050.756:33): pid=7160 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.238" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 190.889204][ T7175] loop4: detected capacity change from 0 to 256 [ 191.544884][ T7172] loop0: detected capacity change from 0 to 16384 [ 191.545639][ T5121] Bluetooth: hci4: command tx timeout [ 191.897632][ T7186] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.971451][ T7185] loop3: detected capacity change from 0 to 2048 [ 191.989251][ T1132] bridge_slave_1: left allmulticast mode [ 191.989407][ T1132] bridge_slave_1: left promiscuous mode [ 191.992924][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.096883][ T7185] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.185825][ T7180] loop2: detected capacity change from 0 to 32768 [ 192.192188][ T7180] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.244 (7180) [ 192.253967][ T7180] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 192.254052][ T7180] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 192.294127][ T1132] bridge_slave_0: left allmulticast mode [ 192.294157][ T1132] bridge_slave_0: left promiscuous mode [ 192.294404][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.620083][ T7180] BTRFS info (device loop2): turning off barriers [ 192.620109][ T7180] BTRFS info (device loop2): enabling free space tree [ 192.620132][ T7180] BTRFS info (device loop2): use zstd compression, level 3 [ 192.831674][ T37] audit: type=1800 audit(1762118053.236:34): pid=7180 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.244" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 193.024624][ T5810] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 193.268300][ T7182] loop4: detected capacity change from 0 to 40427 [ 193.363325][ T7182] F2FS-fs (loop4): invalid crc value [ 193.628390][ T5121] Bluetooth: hci4: command tx timeout [ 193.756657][ T7182] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 193.757411][ T7182] F2FS-fs (loop4): Start checkpoint disabled! [ 193.838329][ T7182] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 193.842496][ T7182] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 193.889977][ T7219] loop2: detected capacity change from 0 to 512 [ 194.126764][ T7222] loop3: detected capacity change from 0 to 4096 [ 194.157706][ T3481] kworker/u8:12: attempt to access beyond end of device [ 194.157706][ T3481] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 194.157767][ T3481] CPU: 1 UID: 0 PID: 3481 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 194.157788][ T3481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 194.157800][ T3481] Workqueue: writeback wb_workfn (flush-7:4) [ 194.157826][ T3481] Call Trace: [ 194.157833][ T3481] [ 194.157842][ T3481] dump_stack_lvl+0x189/0x250 [ 194.157868][ T3481] ? reacquire_held_locks+0x127/0x1d0 [ 194.157895][ T3481] ? rt_spin_lock+0x1c1/0x3e0 [ 194.157915][ T3481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.157941][ T3481] ? __pfx_queue_work_on+0x10/0x10 [ 194.157968][ T3481] ? rt_spin_unlock+0x150/0x200 [ 194.157993][ T3481] ? rt_spin_unlock+0x161/0x200 [ 194.158016][ T3481] f2fs_handle_critical_error+0x354/0x510 [ 194.158046][ T3481] f2fs_write_end_io+0x886/0xb60 [ 194.158090][ T3481] __submit_merged_bio+0x27a/0x6a0 [ 194.158120][ T3481] __submit_merged_write_cond+0x44c/0x530 [ 194.158152][ T3481] f2fs_sync_node_pages+0x1479/0x15e0 [ 194.158196][ T3481] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 194.158217][ T3481] ? __percpu_counter_sum+0x1c2/0x1e0 [ 194.158272][ T3481] ? rcu_is_watching+0x15/0xb0 [ 194.158290][ T3481] ? blk_start_plug+0x52/0x1b0 [ 194.158317][ T3481] f2fs_write_node_pages+0x303/0x6e0 [ 194.158345][ T3481] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 194.158373][ T3481] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 194.158396][ T3481] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 194.158420][ T3481] ? __lock_acquire+0xab9/0xd20 [ 194.158441][ T3481] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 194.158464][ T3481] do_writepages+0x32e/0x550 [ 194.158487][ T3481] ? rt_mutex_slowunlock+0x493/0x8a0 [ 194.158504][ T3481] ? rt_spin_lock+0x1c1/0x3e0 [ 194.158544][ T3481] __writeback_single_inode+0x145/0x1000 [ 194.158574][ T3481] writeback_sb_inodes+0x6b7/0xf60 [ 194.158601][ T3481] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 194.158642][ T3481] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 194.158704][ T3481] ? rcu_is_watching+0x15/0xb0 [ 194.158731][ T3481] wb_writeback+0x43b/0xaf0 [ 194.158750][ T3481] ? __lock_acquire+0xab9/0xd20 [ 194.158777][ T3481] ? queue_io+0x351/0x560 [ 194.158797][ T3481] ? __pfx_wb_writeback+0x10/0x10 [ 194.158835][ T3481] wb_workfn+0x40e/0xf00 [ 194.158867][ T3481] ? __pfx_wb_workfn+0x10/0x10 [ 194.158889][ T3481] ? __lock_acquire+0xab9/0xd20 [ 194.158918][ T3481] ? process_scheduled_works+0x9ef/0x17b0 [ 194.158945][ T3481] ? _raw_spin_unlock_irq+0x23/0x50 [ 194.158965][ T3481] ? process_scheduled_works+0x9ef/0x17b0 [ 194.158986][ T3481] ? process_scheduled_works+0x9ef/0x17b0 [ 194.159010][ T3481] process_scheduled_works+0xae1/0x17b0 [ 194.159065][ T3481] ? __pfx_process_scheduled_works+0x10/0x10 [ 194.159107][ T3481] worker_thread+0x8a0/0xda0 [ 194.159163][ T3481] kthread+0x711/0x8a0 [ 194.159191][ T3481] ? __pfx_worker_thread+0x10/0x10 [ 194.159213][ T3481] ? __pfx_kthread+0x10/0x10 [ 194.159235][ T3481] ? rt_spin_unlock+0x150/0x200 [ 194.159260][ T3481] ? rt_spin_unlock+0x161/0x200 [ 194.159278][ T3481] ? __pfx_kthread+0x10/0x10 [ 194.159305][ T3481] ret_from_fork+0x4bc/0x870 [ 194.159331][ T3481] ? __pfx_ret_from_fork+0x10/0x10 [ 194.159362][ T3481] ? __switch_to_asm+0x39/0x70 [ 194.159380][ T3481] ? __switch_to_asm+0x33/0x70 [ 194.159397][ T3481] ? __pfx_kthread+0x10/0x10 [ 194.159425][ T3481] ret_from_fork_asm+0x1a/0x30 [ 194.159464][ T3481] [ 194.162222][ T7219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.162784][ T7222] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 194.163806][ T3481] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 194.163865][ T3481] CPU: 1 UID: 0 PID: 3481 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 194.163888][ T3481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 194.163901][ T3481] Workqueue: writeback wb_workfn (flush-7:4) [ 194.163928][ T3481] Call Trace: [ 194.163935][ T3481] [ 194.163945][ T3481] dump_stack_lvl+0x189/0x250 [ 194.163972][ T3481] ? reacquire_held_locks+0x127/0x1d0 [ 194.163998][ T3481] ? rt_spin_lock+0x1c1/0x3e0 [ 194.164020][ T3481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.164047][ T3481] ? __pfx_queue_work_on+0x10/0x10 [ 194.164074][ T3481] ? rt_spin_unlock+0x150/0x200 [ 194.164099][ T3481] ? rt_spin_unlock+0x161/0x200 [ 194.164122][ T3481] f2fs_handle_critical_error+0x354/0x510 [ 194.164152][ T3481] f2fs_write_end_io+0x886/0xb60 [ 194.164197][ T3481] __submit_merged_bio+0x27a/0x6a0 [ 194.164227][ T3481] __submit_merged_write_cond+0x44c/0x530 [ 194.164259][ T3481] f2fs_sync_node_pages+0x1479/0x15e0 [ 194.164304][ T3481] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 194.164327][ T3481] ? __percpu_counter_sum+0x1c2/0x1e0 [ 194.164386][ T3481] ? rcu_is_watching+0x15/0xb0 [ 194.164404][ T3481] ? blk_start_plug+0x52/0x1b0 [ 194.164433][ T3481] f2fs_write_node_pages+0x303/0x6e0 [ 194.164462][ T3481] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 194.164492][ T3481] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 194.164521][ T3481] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 194.164546][ T3481] ? __lock_acquire+0xab9/0xd20 [ 194.164569][ T3481] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 194.164592][ T3481] do_writepages+0x32e/0x550 [ 194.164615][ T3481] ? rt_mutex_slowunlock+0x493/0x8a0 [ 194.164634][ T3481] ? rt_spin_lock+0x1c1/0x3e0 [ 194.164668][ T3481] __writeback_single_inode+0x145/0x1000 [ 194.164700][ T3481] writeback_sb_inodes+0x6b7/0xf60 [ 194.164728][ T3481] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 194.164773][ T3481] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 194.164841][ T3481] ? rcu_is_watching+0x15/0xb0 [ 194.164870][ T3481] wb_writeback+0x43b/0xaf0 [ 194.164891][ T3481] ? __lock_acquire+0xab9/0xd20 [ 194.164922][ T3481] ? queue_io+0x351/0x560 [ 194.164948][ T3481] ? __pfx_wb_writeback+0x10/0x10 [ 194.164989][ T3481] wb_workfn+0x40e/0xf00 [ 194.165025][ T3481] ? __pfx_wb_workfn+0x10/0x10 [ 194.165049][ T3481] ? __lock_acquire+0xab9/0xd20 [ 194.165084][ T3481] ? process_scheduled_works+0x9ef/0x17b0 [ 194.165114][ T3481] ? _raw_spin_unlock_irq+0x23/0x50 [ 194.165137][ T3481] ? process_scheduled_works+0x9ef/0x17b0 [ 194.165158][ T3481] ? process_scheduled_works+0x9ef/0x17b0 [ 194.165182][ T3481] process_scheduled_works+0xae1/0x17b0 [ 194.165231][ T3481] ? __pfx_process_scheduled_works+0x10/0x10 [ 194.165268][ T3481] worker_thread+0x8a0/0xda0 [ 194.165319][ T3481] kthread+0x711/0x8a0 [ 194.165348][ T3481] ? __pfx_worker_thread+0x10/0x10 [ 194.165370][ T3481] ? __pfx_kthread+0x10/0x10 [ 194.165393][ T3481] ? rt_spin_unlock+0x150/0x200 [ 194.165418][ T3481] ? rt_spin_unlock+0x161/0x200 [ 194.165440][ T3481] ? __pfx_kthread+0x10/0x10 [ 194.165467][ T3481] ret_from_fork+0x4bc/0x870 [ 194.165492][ T3481] ? __pfx_ret_from_fork+0x10/0x10 [ 194.165528][ T3481] ? __switch_to_asm+0x39/0x70 [ 194.165546][ T3481] ? __switch_to_asm+0x33/0x70 [ 194.165563][ T3481] ? __pfx_kthread+0x10/0x10 [ 194.165593][ T3481] ret_from_fork_asm+0x1a/0x30 [ 194.165635][ T3481] [ 194.228556][ T7219] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.233853][ T3481] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 194.331950][ T7222] ntfs3(loop3): ino=1a, mi_enum_attr [ 194.331982][ T7222] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 194.333361][ T7222] ntfs3(loop3): ino=1a, mi_enum_attr [ 194.333388][ T7222] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 194.368410][ T7209] loop0: detected capacity change from 0 to 32768 [ 194.455188][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.456606][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.531262][ T7209] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 194.548241][ T37] audit: type=1800 audit(1762118054.936:35): pid=7222 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.253" name="file2" dev="loop3" ino=24 res=0 errno=0 [ 194.668367][ T7219] EXT4-fs error (device loop2): ext4_empty_dir:3086: inode #12: block 32: comm syz.2.252: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 194.767438][ T7219] EXT4-fs (loop2): Remounting filesystem read-only [ 194.767464][ T7219] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #12: comm syz.2.252: directory missing '.' [ 194.887522][ T7209] XFS (loop0): Ending clean mount [ 194.900515][ T7209] XFS (loop0): Quotacheck needed: Please wait. [ 195.076433][ T5810] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.368217][ T7209] XFS (loop0): Quotacheck: Done. [ 195.478065][ T7237] loop3: detected capacity change from 0 to 4096 [ 195.483988][ T7237] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 195.583445][ T7239] loop2: detected capacity change from 0 to 4096 [ 195.605367][ T7239] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 195.727516][ T5121] Bluetooth: hci4: command tx timeout [ 195.884399][ T5803] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 196.308299][ T7242] loop3: detected capacity change from 0 to 128 [ 196.635889][ T7246] loop4: detected capacity change from 0 to 512 [ 196.637197][ T7246] EXT4-fs: Ignoring removed oldalloc option [ 196.653962][ T7246] EXT4-fs (loop4): Test dummy encryption mode enabled [ 196.653986][ T7246] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 196.682893][ T7246] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.260: inode has both inline data and extents flags [ 196.683383][ T7246] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.260: couldn't read orphan inode 15 (err -117) [ 196.686731][ T7246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.708707][ T7246] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 196.800833][ T7249] loop0: detected capacity change from 0 to 2048 [ 196.934771][ T7249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.003763][ T37] audit: type=1800 audit(1762118057.396:36): pid=7249 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.257" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 197.211835][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.267084][ T5803] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.302586][ T7255] loop3: detected capacity change from 0 to 1024 [ 197.428309][ T7251] loop2: detected capacity change from 0 to 32768 [ 197.431950][ T7255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.448527][ T7255] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.261: bg 0: block 88: padding at end of block bitmap is not set [ 197.682903][ T7251] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 197.764657][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.827784][ T5817] Bluetooth: hci4: command tx timeout [ 197.922124][ T7251] XFS (loop2): Ending clean mount [ 197.980136][ T7251] XFS (loop2): Quotacheck needed: Please wait. [ 198.114252][ T7273] loop0: detected capacity change from 0 to 1024 [ 198.365564][ T7251] XFS (loop2): Quotacheck: Done. [ 198.483789][ T37] audit: type=1800 audit(1762118058.886:37): pid=7251 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.259" name="bus" dev="loop2" ino=9290 res=0 errno=0 [ 198.786020][ T7271] loop3: detected capacity change from 0 to 32768 [ 198.809279][ T5810] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 198.861445][ T7266] loop4: detected capacity change from 0 to 32768 [ 198.969518][ T7271] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 199.223499][ T7271] XFS (loop3): Ending clean mount [ 199.259512][ T7271] XFS (loop3): Quotacheck needed: Please wait. [ 199.405684][ T3461] XFS (loop3): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:640). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 199.405720][ T3461] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x8 [ 199.405757][ T3461] XFS (loop3): Unmount and run xfs_repair [ 199.405768][ T3461] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 199.405782][ T3461] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 199.405796][ T3461] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f ................ [ 199.405809][ T3461] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91 ......N..b..1... [ 199.405822][ T3461] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13 ................ [ 199.405835][ T3461] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 199.405847][ T3461] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 199.405860][ T3461] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 199.405873][ T3461] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 199.405888][ T3461] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x8 len 4 error 74 [ 199.528384][ T7271] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 199.638282][ T7271] XFS (loop3): Corruption warning: Metadata has LSN (1:65407) ahead of current LSN (1:640). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 199.638324][ T7271] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x8 [ 199.638370][ T7271] XFS (loop3): Unmount and run xfs_repair [ 199.638382][ T7271] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 199.638441][ T7271] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 199.638457][ T7271] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 ff 7f ................ [ 199.638473][ T7271] 00000020: 00 00 00 00 00 00 4e ed a5 62 11 a8 31 b3 f7 91 ......N..b..1... [ 199.638489][ T7271] 00000030: 00 00 00 00 b0 b0 1a b8 00 00 00 0d 00 00 00 13 ................ [ 199.638504][ T7271] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 199.638520][ T7271] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 199.638535][ T7271] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 199.638550][ T7271] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 199.638567][ T7271] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x8 len 4 error 74 [ 199.840906][ T7271] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 199.840966][ T7271] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 200.008069][ T5805] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 200.316191][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.352642][ T7293] loop4: detected capacity change from 0 to 128 [ 200.440875][ T7293] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 200.441961][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.464787][ T7293] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 200.589412][ T1132] bond0 (unregistering): Released all slaves [ 200.625946][ T7291] loop2: detected capacity change from 0 to 32768 [ 200.664047][ T7291] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.267 (7291) [ 200.865506][ T7291] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 200.865587][ T7291] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 200.871596][ T7289] loop0: detected capacity change from 0 to 32768 [ 200.921181][ T5804] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 200.954787][ T7162] chnl_net:caif_netlink_parms(): no params data found [ 201.005744][ T7289] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 201.234081][ T7291] BTRFS info (device loop2): rebuilding free space tree [ 201.334023][ T7326] loop4: detected capacity change from 0 to 128 [ 201.337721][ T7289] XFS (loop0): Ending clean mount [ 201.348355][ T7289] XFS (loop0): Quotacheck needed: Please wait. [ 201.436886][ T7291] BTRFS info (device loop2): disabling free space tree [ 201.436972][ T7291] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 201.437001][ T7291] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 201.457367][ T7326] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.509517][ T7291] BTRFS info (device loop2): setting nodatasum [ 201.509543][ T7291] BTRFS info (device loop2): setting nodatacow [ 201.509561][ T7291] BTRFS info (device loop2): turning off barriers [ 201.509576][ T7291] BTRFS info (device loop2): force clearing of disk cache [ 201.515084][ T7326] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 201.916157][ T7289] XFS (loop0): Quotacheck: Done. [ 201.918564][ T5804] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.309461][ T7299] loop3: detected capacity change from 0 to 32768 [ 202.317339][ T5810] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 202.486504][ T7299] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 202.677912][ T5803] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 202.705562][ T7299] XFS (loop3): Ending clean mount [ 202.763517][ T7299] XFS (loop3): Quotacheck needed: Please wait. [ 203.037864][ T7299] XFS (loop3): Quotacheck: Done. [ 203.106588][ T7299] XFS (loop3): User initiated shutdown received. [ 203.106699][ T7299] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476). Shutting down filesystem. [ 203.106747][ T7299] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 203.361455][ T7358] loop0: detected capacity change from 0 to 4096 [ 203.422159][ T5805] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 203.675884][ T7362] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 203.746809][ T7358] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 203.809556][ T7358] NILFS (loop0): mounting fs with errors [ 203.983343][ T7337] loop4: detected capacity change from 0 to 32768 [ 204.045055][ T7364] loop2: detected capacity change from 0 to 256 [ 204.059554][ T7358] NILFS error (device loop0): nilfs_readdir: zero-length directory entry [ 204.078947][ T7337] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.274 (7337) [ 204.176074][ T7366] loop3: detected capacity change from 0 to 128 [ 204.246644][ T7337] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 204.246725][ T7337] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 204.410588][ T7366] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 204.411433][ T7366] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 204.522263][ T7366] syz.3.278 (pid 7366) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 204.663202][ T7384] loop0: detected capacity change from 0 to 512 [ 204.750335][ T7337] BTRFS info (device loop4): enabling ssd optimizations [ 204.750362][ T7337] BTRFS info (device loop4): turning on async discard [ 204.750379][ T7337] BTRFS info (device loop4): enabling free space tree [ 204.750398][ T7337] BTRFS info (device loop4): use zlib compression, level 3 [ 204.801531][ T5805] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.880043][ T7390] loop2: detected capacity change from 0 to 64 [ 204.889642][ T7384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.889805][ T7384] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.931737][ T7384] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.280: corrupted inode contents [ 204.961233][ T7384] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.280: mark_inode_dirty error [ 204.964328][ T7384] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.280: corrupted inode contents [ 204.964780][ T7384] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.280: mark_inode_dirty error [ 205.108561][ T7393] loop3: detected capacity change from 0 to 128 [ 205.128130][ T7393] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 205.168719][ T7393] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.272495][ T7394] Invalid source name [ 205.272514][ T7394] UBIFS error (pid: 7394): cannot open "./file0", error -22 [ 205.320062][ T7162] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.320200][ T7162] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.320413][ T7162] bridge_slave_0: entered allmulticast mode [ 205.348513][ T7162] bridge_slave_0: entered promiscuous mode [ 205.381194][ T7393] overlayfs: failed to create directory ./file0/work (errno: 28); mounting read-only [ 205.381431][ T7393] overlayfs: failed to get uuid (/bus, err=-95); falling back to uuid=null. [ 205.397484][ T7162] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.397618][ T7162] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.397881][ T7162] bridge_slave_1: entered allmulticast mode [ 205.404428][ T7162] bridge_slave_1: entered promiscuous mode [ 205.542854][ T5803] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.771024][ T5804] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 205.792871][ T7400] loop0: detected capacity change from 0 to 64 [ 205.860402][ T7400] hfs: unable to locate alternate MDB [ 205.860417][ T7400] hfs: continuing without an alternate MDB [ 206.124180][ T7402] loop2: detected capacity change from 0 to 47 [ 206.419100][ T7162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.453574][ T7408] loop3: detected capacity change from 0 to 64 [ 206.622655][ T7408] hfs: request for non-existent node 131072 in B*Tree [ 206.622674][ T7408] hfs: request for non-existent node 131072 in B*Tree [ 206.664411][ T7414] loop4: detected capacity change from 0 to 512 [ 206.718391][ T1132] hsr_slave_0: left promiscuous mode [ 206.726179][ T7414] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 206.772100][ T7414] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.285: bad orphan inode 131083 [ 206.778212][ T7414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.806128][ T1132] hsr_slave_1: left promiscuous mode [ 206.807302][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.807442][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.841498][ T37] audit: type=1800 audit(1762118067.246:38): pid=7414 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.285" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 207.008874][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.008904][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.112503][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.382047][ T1132] veth1_macvtap: left promiscuous mode [ 207.382370][ T1132] veth0_macvtap: left promiscuous mode [ 207.383482][ T1132] veth1_vlan: left promiscuous mode [ 207.383952][ T1132] veth0_vlan: left promiscuous mode [ 207.480295][ T7423] loop3: detected capacity change from 0 to 1024 [ 207.495063][ T7410] loop0: detected capacity change from 0 to 32768 [ 207.497574][ T7410] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.291 (7410) [ 207.519255][ T7410] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 207.519335][ T7410] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 207.562663][ T7412] loop2: detected capacity change from 0 to 32768 [ 207.564004][ T7412] btrfs: Deprecated parameter 'usebackuproot' [ 207.564027][ T7412] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 207.571441][ T7412] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.290 (7412) [ 207.669066][ T7412] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 207.669164][ T7412] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 207.669196][ T7412] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 207.736512][ T7423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.834186][ T7423] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 207.899575][ T37] audit: type=1804 audit(1762118068.286:39): pid=7440 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.294" name="/newroot/74/file0/file1" dev="loop3" ino=15 res=1 errno=0 [ 208.144535][ T7410] BTRFS info (device loop0): setting nodatasum [ 208.144561][ T7410] BTRFS info (device loop0): setting nodatacow [ 208.144579][ T7410] BTRFS info (device loop0): enabling ssd optimizations [ 208.144595][ T7410] BTRFS info (device loop0): disabling log replay at mount time [ 208.144612][ T7410] BTRFS info (device loop0): turning on async discard [ 208.144628][ T7410] BTRFS info (device loop0): enabling free space tree [ 208.144645][ T7410] BTRFS info (device loop0): ignoring unknown super block flags [ 208.191405][ T12] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 208.194868][ T7412] BTRFS error (device loop2): failed to load root extent [ 208.194917][ T7412] BTRFS warning (device loop2): try to load backup roots slot 1 [ 208.195340][ T12] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 208.215653][ T7412] BTRFS warning (device loop2): couldn't read tree root [ 208.215680][ T7412] BTRFS warning (device loop2): try to load backup roots slot 2 [ 208.216106][ T3481] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 208.216233][ T7412] BTRFS warning (device loop2): couldn't read tree root [ 208.216251][ T7412] BTRFS warning (device loop2): try to load backup roots slot 3 [ 208.258558][ T7412] BTRFS info (device loop2): rebuilding free space tree [ 208.314537][ T7412] BTRFS info (device loop2): disabling free space tree [ 208.314622][ T7412] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 208.314649][ T7412] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 208.351002][ T7412] BTRFS info (device loop2): setting nodatasum [ 208.351026][ T7412] BTRFS info (device loop2): setting nodatacow [ 208.351042][ T7412] BTRFS info (device loop2): enabling ssd optimizations [ 208.351056][ T7412] BTRFS info (device loop2): turning off barriers [ 208.351071][ T7412] BTRFS info (device loop2): turning on sync discard [ 208.351086][ T7412] BTRFS info (device loop2): enabling disk space caching [ 208.351102][ T7412] BTRFS info (device loop2): force clearing of disk cache [ 208.351116][ T7412] BTRFS info (device loop2): enabling auto defrag [ 208.351132][ T7412] BTRFS info (device loop2): trying to use backup root at mount time [ 208.351148][ T7412] BTRFS info (device loop2): max_inline set to 0 [ 208.362199][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.779369][ T7412] BTRFS info (device loop2 state M): max_inline set to 0 [ 208.865713][ T5803] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 209.043942][ T5810] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 209.054586][ T7463] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 209.193947][ T7421] loop4: detected capacity change from 0 to 40427 [ 209.225052][ T7421] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 209.225079][ T7421] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 209.284419][ T7421] F2FS-fs (loop4): invalid crc value [ 209.533882][ T7470] loop0: detected capacity change from 0 to 256 [ 209.535125][ T7470] exfat: Deprecated parameter 'utf8' [ 209.545561][ T7470] exfat: Deprecated parameter 'namecase' [ 209.647138][ T7470] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 209.724087][ T37] audit: type=1800 audit(1762118070.116:40): pid=7470 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.296" name="file1" dev="loop0" ino=1048639 res=0 errno=0 [ 209.916586][ T7476] loop3: detected capacity change from 0 to 512 [ 209.946770][ T7476] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 209.996315][ T7476] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.300: iget: bad i_size value: 38620345925642 [ 210.023794][ T7421] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 210.045836][ T7476] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.300: couldn't read orphan inode 15 (err -117) [ 210.063501][ T7421] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 210.063535][ T7421] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 210.069702][ T7476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.159065][ T7421] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 210.199033][ T7476] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.300: bg 0: block 5: invalid block bitmap [ 210.529377][ T7476] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 210.529422][ T7476] EXT4-fs (loop3): This should not happen!! Data will be lost [ 210.529422][ T7476] [ 210.529438][ T7476] EXT4-fs (loop3): Total free blocks count 0 [ 210.529454][ T7476] EXT4-fs (loop3): Free/Dirty block details [ 210.529488][ T7476] EXT4-fs (loop3): free_blocks=0 [ 210.529518][ T7476] EXT4-fs (loop3): dirty_blocks=2 [ 210.529530][ T7476] EXT4-fs (loop3): Block reservation details [ 210.529542][ T7476] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 210.855667][ T7473] loop2: detected capacity change from 0 to 32768 [ 210.869862][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.111070][ T7473] JFS: block map error in dbBackSplit [ 211.111119][ T7473] ERROR: (device loop2): dbDiscardAG: -EIO [ 211.111119][ T7473] [ 211.143687][ T7483] JFS: block map error in dbBackSplit [ 211.143734][ T7483] ERROR: (device loop2): dbDiscardAG: -EIO [ 211.143734][ T7483] [ 211.156972][ T7473] syz.2.298: attempt to access beyond end of device [ 211.156972][ T7473] loop2: rw=2051, sector=2629632, nr_sectors = 8192 limit=32768 [ 211.157128][ T7473] JFS: sb_issue_discard(ffff88805ace8000, 328704, 1024, GFP_NOFS, 0) = -5 => failed! [ 211.157239][ T7473] blkno = 50400, nblocks = 400 [ 211.157251][ T7473] ERROR: (device loop2): dbFree: block to be freed is outside the map [ 211.157251][ T7473] [ 211.792833][ T7482] loop0: detected capacity change from 0 to 32768 [ 211.844831][ T7487] loop2: detected capacity change from 0 to 512 [ 211.911475][ T5809] Bluetooth: hci3: command 0x0406 tx timeout [ 211.911513][ T5809] Bluetooth: hci1: command 0x0406 tx timeout [ 211.967531][ T7482] JBD2: Ignoring recovery information on journal [ 212.091597][ T7485] loop3: detected capacity change from 0 to 32768 [ 212.128451][ T7485] btrfs: Deprecated parameter 'usebackuproot' [ 212.128476][ T7485] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 212.138507][ T7485] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.303 (7485) [ 212.191378][ T7485] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 212.191456][ T7485] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 212.247989][ T7482] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 212.287450][ T7487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.401190][ T37] audit: type=1800 audit(1762118072.756:41): pid=7487 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.304" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 212.597015][ T5803] ocfs2: Unmounting device (7,0) on (node local) [ 212.690162][ T5810] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.693266][ T7485] BTRFS info (device loop3): rebuilding free space tree [ 212.783790][ T7485] BTRFS info (device loop3): allowing degraded mounts [ 212.783818][ T7485] BTRFS info (device loop3): enabling ssd optimizations [ 212.783836][ T7485] BTRFS info (device loop3): turning on flush-on-commit [ 212.783852][ T7485] BTRFS info (device loop3): enabling free space tree [ 212.783869][ T7485] BTRFS info (device loop3): force clearing of disk cache [ 212.783886][ T7485] BTRFS info (device loop3): trying to use backup root at mount time [ 212.783905][ T7485] BTRFS info (device loop3): use zstd compression, level 3 [ 213.145500][ T7515] loop2: detected capacity change from 0 to 1024 [ 213.151358][ T7515] EXT4-fs: Ignoring removed mblk_io_submit option [ 213.246401][ T5805] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 213.265788][ T7515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.485467][ T7508] loop4: detected capacity change from 0 to 32768 [ 213.530201][ T7519] loop0: detected capacity change from 0 to 2048 [ 213.621208][ T7508] JBD2: Ignoring recovery information on journal [ 213.650511][ T7519] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.706242][ T37] audit: type=1800 audit(1762118074.116:42): pid=7519 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.306" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 213.882542][ T5810] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.900043][ T7508] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 214.603213][ T141] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 214.622222][ T141] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 626 with error 28 [ 214.622256][ T141] EXT4-fs (loop0): This should not happen!! Data will be lost [ 214.622256][ T141] [ 214.622270][ T141] EXT4-fs (loop0): Total free blocks count 0 [ 214.622283][ T141] EXT4-fs (loop0): Free/Dirty block details [ 214.622316][ T141] EXT4-fs (loop0): free_blocks=4096 [ 214.622356][ T141] EXT4-fs (loop0): dirty_blocks=640 [ 214.622368][ T141] EXT4-fs (loop0): Block reservation details [ 214.622379][ T141] EXT4-fs (loop0): i_reserved_data_blocks=40 [ 214.630262][ T5804] ocfs2: Unmounting device (7,4) on (node local) [ 214.873648][ T5803] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.263057][ T7529] loop2: detected capacity change from 0 to 32768 [ 215.297447][ T7537] loop4: detected capacity change from 0 to 512 [ 215.304325][ T7537] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 215.368476][ T7529] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 215.436987][ T7537] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.312: bad orphan inode 131083 [ 215.461818][ T7537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.511678][ T7529] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 215.604219][ T141] (kworker/u8:5,141,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 215.676676][ T7533] loop3: detected capacity change from 0 to 32768 [ 215.756063][ T7533] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 215.929743][ T7533] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 216.001674][ T5810] ocfs2: Unmounting device (7,2) on (node local) [ 216.134361][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 216.431131][ T5805] ocfs2: Unmounting device (7,3) on (node local) [ 216.695077][ T7535] loop0: detected capacity change from 0 to 40427 [ 216.705624][ T7535] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 216.705650][ T7535] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 216.731213][ T7535] F2FS-fs (loop0): invalid crc value [ 216.910467][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 216.994606][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 216.994649][ T5817] Bluetooth: hci0: command 0x0406 tx timeout [ 217.032361][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.184013][ T7547] loop2: detected capacity change from 0 to 32768 [ 217.192094][ T7535] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 217.208089][ T7535] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 217.208121][ T7535] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 217.249973][ T7553] loop4: detected capacity change from 0 to 1024 [ 217.273530][ T7553] EXT4-fs: Ignoring removed bh option [ 217.273593][ T7553] EXT4-fs: inline encryption not supported [ 217.401796][ T7553] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 217.421985][ T7553] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 217.447125][ T7557] ERROR: (device loop2): diAllocAG: nfreeinos = 0, but iag on freelist [ 217.447125][ T7557] [ 217.449629][ T7535] F2FS-fs (loop0): Stopped filesystem due to reason: 0 [ 217.572527][ T7557] ERROR: (device loop2): remounting filesystem as read-only [ 217.572550][ T7557] ialloc: diAlloc returned -5! [ 217.730626][ T7553] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.316: lblock 2 mapped to illegal pblock 2 (length 1) [ 217.766261][ T7553] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 217.766324][ T7553] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.316: lblock 0 mapped to illegal pblock 48 (length 1) [ 217.766614][ T7553] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 217.766632][ T7553] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.316: Failed to acquire dquot type 0 [ 217.767630][ T7553] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 217.844062][ T7553] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.316: mark_inode_dirty error [ 217.846565][ T7553] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 217.846915][ T7553] EXT4-fs (loop4): 1 orphan inode deleted [ 217.849819][ T7553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.907031][ T13] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 218.007832][ T13] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 218.007901][ T13] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 218.183481][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.197926][ T5804] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 218.221591][ T5804] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 218.225540][ T5804] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 218.243915][ T7555] loop3: detected capacity change from 0 to 40427 [ 218.258852][ T7555] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 218.258879][ T7555] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 218.316366][ T7555] F2FS-fs (loop3): build fault injection rate: 17008 [ 218.316391][ T7555] F2FS-fs (loop3): build fault injection type: 0x6ed91a [ 218.319636][ T7555] F2FS-fs (loop3): invalid crc value [ 218.586935][ T7565] loop2: detected capacity change from 0 to 512 [ 218.732791][ T7563] loop4: detected capacity change from 0 to 4096 [ 218.743018][ T7565] EXT4-fs (loop2): 1 truncate cleaned up [ 218.794076][ T7565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.823805][ T7555] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 218.943630][ T7555] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 218.943661][ T7555] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 218.996161][ T5810] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.099256][ T7563] ntfs3(loop4): failed to convert "0000" to iso8859-6 [ 219.101260][ T7563] ntfs3(loop4): failed to convert "0030" to iso8859-6 [ 219.153898][ T7571] ntfs3(loop4): failed to convert "0000" to iso8859-6 [ 219.154509][ T7571] ntfs3(loop4): failed to convert "0030" to iso8859-6 [ 219.159976][ T7563] ntfs3(loop4): failed to convert name for inode 1e. [ 219.160005][ T7563] ntfs3(loop4): failed to convert "0032" to iso8859-6 [ 219.197020][ T7571] ntfs3(loop4): failed to convert name for inode 1e. [ 219.197045][ T7571] ntfs3(loop4): failed to convert "0032" to iso8859-6 [ 219.214466][ T7563] ntfs3(loop4): ino=1f, mi_enum_attr [ 219.214587][ T7563] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 219.317359][ T5805] syz-executor: attempt to access beyond end of device [ 219.317359][ T5805] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 219.317425][ T5805] CPU: 1 UID: 0 PID: 5805 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 219.317448][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 219.317460][ T5805] Call Trace: [ 219.317467][ T5805] [ 219.317476][ T5805] dump_stack_lvl+0x189/0x250 [ 219.317505][ T5805] ? reacquire_held_locks+0x127/0x1d0 [ 219.317532][ T5805] ? rt_spin_lock+0x1c1/0x3e0 [ 219.317553][ T5805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.317579][ T5805] ? __pfx_queue_work_on+0x10/0x10 [ 219.317607][ T5805] ? rt_spin_unlock+0x150/0x200 [ 219.317632][ T5805] ? rt_spin_unlock+0x161/0x200 [ 219.317656][ T5805] f2fs_handle_critical_error+0x354/0x510 [ 219.317695][ T5805] f2fs_write_end_io+0x886/0xb60 [ 219.317740][ T5805] __submit_merged_bio+0x27a/0x6a0 [ 219.317771][ T5805] __submit_merged_write_cond+0x255/0x530 [ 219.317803][ T5805] f2fs_write_data_pages+0x261d/0x3000 [ 219.317864][ T5805] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 219.317943][ T5805] ? __lock_acquire+0xab9/0xd20 [ 219.317989][ T5805] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 219.318013][ T5805] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.318038][ T5805] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 219.318079][ T5805] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 219.318105][ T5805] do_writepages+0x32e/0x550 [ 219.318128][ T5805] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 219.318150][ T5805] ? rt_spin_unlock+0x150/0x200 [ 219.318182][ T5805] filemap_fdatawrite+0x19c/0x240 [ 219.318205][ T5805] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 219.318267][ T5805] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 219.318297][ T5805] ? rt_spin_unlock+0x161/0x200 [ 219.318320][ T5805] f2fs_sync_dirty_inodes+0x31f/0x830 [ 219.318363][ T5805] f2fs_write_checkpoint+0x93e/0x2440 [ 219.318388][ T5805] ? __lock_acquire+0xab9/0xd20 [ 219.318443][ T5805] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 219.318529][ T5805] kill_f2fs_super+0x2cc/0x6d0 [ 219.318562][ T5805] ? __pfx_kill_f2fs_super+0x10/0x10 [ 219.318607][ T5805] ? shrinker_free+0x2ce/0x3e0 [ 219.318638][ T5805] deactivate_locked_super+0xbc/0x130 [ 219.318662][ T5805] cleanup_mnt+0x425/0x4c0 [ 219.318692][ T5805] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.318718][ T5805] task_work_run+0x1d4/0x260 [ 219.318741][ T5805] ? __pfx_task_work_run+0x10/0x10 [ 219.318757][ T5805] ? __x64_sys_umount+0x122/0x160 [ 219.318785][ T5805] ? exit_to_user_mode_loop+0x40/0x130 [ 219.318813][ T5805] exit_to_user_mode_loop+0xe9/0x130 [ 219.318838][ T5805] do_syscall_64+0x2bd/0xfa0 [ 219.318860][ T5805] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.318882][ T5805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.318905][ T5805] ? clear_bhb_loop+0x60/0xb0 [ 219.318928][ T5805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.318946][ T5805] RIP: 0033:0x7f47040602f7 [ 219.318964][ T5805] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 219.318981][ T5805] RSP: 002b:00007fff4f9c7f28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 219.319002][ T5805] RAX: 0000000000000000 RBX: 00007f47040e1d7d RCX: 00007f47040602f7 [ 219.319015][ T5805] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4f9c7fe0 [ 219.319027][ T5805] RBP: 00007fff4f9c7fe0 R08: 0000000000000000 R09: 0000000000000000 [ 219.319039][ T5805] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff4f9c9070 [ 219.319052][ T5805] R13: 00007f47040e1d7d R14: 000000000003575d R15: 00007fff4f9c90b0 [ 219.319086][ T5805] [ 219.319093][ T5805] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 219.321118][ T7573] loop0: detected capacity change from 0 to 64 [ 219.982063][ T7579] loop0: detected capacity change from 0 to 256 [ 220.017010][ T7579] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 220.484541][ T7577] loop2: detected capacity change from 0 to 32768 [ 220.626411][ T7577] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 220.745993][ T7577] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 220.846304][ T7577] XFS (loop2): Starting recovery (logdev: internal) [ 220.868052][ T7599] loop0: detected capacity change from 0 to 512 [ 220.900130][ T7599] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 220.909817][ T7577] XFS (loop2): Ending recovery (logdev: internal) [ 220.923004][ T7577] XFS (loop2): AG 0: Corrupt finobt pointer at level 1 index 0. [ 220.928861][ T7577] XFS (loop2): Failed to initialize disk quotas, err -117. [ 221.010466][ T7602] XFS (loop2): User initiated shutdown received. [ 221.010592][ T7602] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476). Shutting down filesystem. [ 221.010644][ T7602] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 221.014747][ T7599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.014893][ T7599] ext4 filesystem being mounted at /58/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.215774][ T5810] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 221.299197][ T5803] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.483248][ T7595] loop3: detected capacity change from 0 to 32768 [ 221.586252][ T7595] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.327 (7595) [ 221.615843][ T7595] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 221.615926][ T7595] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 221.615958][ T7595] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 222.015918][ T7591] loop4: detected capacity change from 0 to 32768 [ 222.051030][ T7591] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.326 (7591) [ 222.056241][ T7622] loop2: detected capacity change from 0 to 256 [ 222.067758][ T7595] BTRFS info (device loop3): rebuilding free space tree [ 222.204402][ T7595] BTRFS info (device loop3): disabling free space tree [ 222.204489][ T7595] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 222.204517][ T7595] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 222.222191][ T7622] FAT-fs (loop2): Directory bread(block 64) failed [ 222.222227][ T7622] FAT-fs (loop2): Directory bread(block 65) failed [ 222.222324][ T7622] FAT-fs (loop2): Directory bread(block 66) failed [ 222.222350][ T7622] FAT-fs (loop2): Directory bread(block 67) failed [ 222.222446][ T7622] FAT-fs (loop2): Directory bread(block 68) failed [ 222.222476][ T7622] FAT-fs (loop2): Directory bread(block 69) failed [ 222.222593][ T7622] FAT-fs (loop2): Directory bread(block 70) failed [ 222.222619][ T7622] FAT-fs (loop2): Directory bread(block 71) failed [ 222.222713][ T7622] FAT-fs (loop2): Directory bread(block 72) failed [ 222.222749][ T7622] FAT-fs (loop2): Directory bread(block 73) failed [ 222.295321][ T7591] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 222.295406][ T7591] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 222.295440][ T7591] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 222.331103][ T7595] BTRFS info (device loop3): enabling ssd optimizations [ 222.331130][ T7595] BTRFS info (device loop3): enabling disk space caching [ 222.331147][ T7595] BTRFS info (device loop3): force clearing of disk cache [ 222.331164][ T7595] BTRFS info (device loop3): force zstd compression, level 3 [ 222.642649][ T7606] loop0: detected capacity change from 0 to 32768 [ 222.820090][ T7606] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 222.911359][ T7606] XFS (loop0): Ending clean mount [ 222.912177][ T7591] BTRFS info (device loop4): rebuilding free space tree [ 222.927296][ T7606] XFS (loop0): Quotacheck needed: Please wait. [ 223.088105][ T7591] BTRFS info (device loop4): disabling free space tree [ 223.088186][ T7591] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 223.088213][ T7591] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 223.160804][ T7591] BTRFS info (device loop4): enabling ssd optimizations [ 223.160831][ T7591] BTRFS info (device loop4): turning on async discard [ 223.160848][ T7591] BTRFS info (device loop4): enabling disk space caching [ 223.160864][ T7591] BTRFS info (device loop4): force clearing of disk cache [ 223.160882][ T7591] BTRFS info (device loop4): use zstd compression, level 3 [ 223.426075][ T7606] XFS (loop0): Quotacheck: Done. [ 223.499629][ T37] audit: type=1800 audit(1762118083.906:43): pid=7606 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.330" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 223.545564][ T5805] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 224.045446][ T5803] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 224.522925][ T37] audit: type=1800 audit(1762118084.926:44): pid=7622 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.328" name="file1" dev="loop2" ino=1048642 res=0 errno=0 [ 224.631701][ T5804] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 224.838420][ T7659] loop3: detected capacity change from 0 to 512 [ 224.862390][ T7659] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 224.870553][ T7659] EXT4-fs (loop3): invalid journal inode [ 224.870657][ T7659] EXT4-fs (loop3): can't get journal size [ 224.949461][ T7659] EXT4-fs (loop3): 1 truncate cleaned up [ 224.952610][ T7659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.158341][ T7665] loop2: detected capacity change from 0 to 4096 [ 225.375335][ T7668] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 225.719434][ T7670] loop4: detected capacity change from 0 to 64 [ 225.761952][ T7162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.841265][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.015073][ T7672] loop2: detected capacity change from 0 to 512 [ 226.054921][ T7672] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 226.111213][ T7672] EXT4-fs (loop2): 1 truncate cleaned up [ 226.183307][ T7672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.196329][ T7677] loop4: detected capacity change from 0 to 128 [ 226.199360][ T7677] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 226.209559][ T7677] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.232992][ T7672] EXT4-fs (loop2): shut down requested (2) [ 226.266709][ T7661] loop0: detected capacity change from 0 to 32768 [ 226.334605][ T7661] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 226.548876][ T5810] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.566131][ T7162] team0: Port device team_slave_0 added [ 226.593294][ T7661] XFS (loop0): Ending clean mount [ 226.603520][ T7162] team0: Port device team_slave_1 added [ 226.614680][ T7661] XFS (loop0): Quotacheck needed: Please wait. [ 226.741291][ T7693] loop4: detected capacity change from 0 to 128 [ 226.742972][ T7693] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 226.796127][ T7693] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 226.802009][ T7691] loop2: detected capacity change from 0 to 1024 [ 226.976303][ T68] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 227.234917][ T7690] hfsplus: invalid extended attribute record [ 227.395813][ T13] hfsplus: b-tree write err: -5, ino 4 [ 227.428962][ T7162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.428980][ T7162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.429006][ T7162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.431434][ T7162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.431450][ T7162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.431476][ T7162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.465604][ T7661] XFS (loop0): Quotacheck: Done. [ 227.696332][ T7700] loop2: detected capacity change from 0 to 8 [ 227.953583][ T7703] loop3: detected capacity change from 0 to 256 [ 228.143123][ T5803] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 228.244242][ T7162] hsr_slave_0: entered promiscuous mode [ 228.264452][ T7162] hsr_slave_1: entered promiscuous mode [ 228.271749][ T7162] debugfs: 'hsr0' already exists in 'hsr' [ 228.271775][ T7162] Cannot create hsr debugfs directory [ 228.841492][ T7714] loop3: detected capacity change from 0 to 4096 [ 228.911686][ T7714] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 228.963414][ T7719] loop0: detected capacity change from 0 to 512 [ 229.131423][ T7719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.131577][ T7719] ext4 filesystem being mounted at /62/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.162333][ T7696] loop4: detected capacity change from 0 to 40427 [ 229.209907][ T7696] F2FS-fs (loop4): invalid crc value [ 229.355771][ T7731] loop2: detected capacity change from 0 to 16 [ 229.367886][ T7719] EXT4-fs error (device loop0): ext4_get_first_dir_block:3540: inode #12: comm syz.0.346: directory missing '.' [ 229.465891][ T7731] erofs (device loop2): mounted with root inode @ nid 36. [ 229.810042][ T5803] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.844983][ T7735] loop2: detected capacity change from 0 to 128 [ 229.900694][ T7696] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 229.901682][ T7696] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 229.979392][ T7696] F2FS-fs (loop4): inconsistent node block, node_type:1, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0] [ 230.072987][ T7735] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 230.104860][ T7735] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 230.178710][ T7739] loop0: detected capacity change from 0 to 512 [ 230.212314][ T7739] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 230.215084][ T7741] loop3: detected capacity change from 0 to 512 [ 230.228334][ T7739] EXT4-fs (loop0): 1 truncate cleaned up [ 230.231027][ T7739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.314283][ T7741] EXT4-fs: Ignoring removed bh option [ 230.349647][ T7741] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 230.371881][ T5804] syz-executor: attempt to access beyond end of device [ 230.371881][ T5804] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 230.392069][ T5804] CPU: 1 UID: 0 PID: 5804 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 230.392094][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 230.392103][ T5804] Call Trace: [ 230.392109][ T5804] [ 230.392115][ T5804] dump_stack_lvl+0x189/0x250 [ 230.392142][ T5804] ? reacquire_held_locks+0x127/0x1d0 [ 230.392164][ T5804] ? rt_spin_lock+0x1c1/0x3e0 [ 230.392180][ T5804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.392200][ T5804] ? __pfx_queue_work_on+0x10/0x10 [ 230.392221][ T5804] ? rt_spin_unlock+0x150/0x200 [ 230.392239][ T5804] ? rt_spin_unlock+0x161/0x200 [ 230.392256][ T5804] f2fs_handle_critical_error+0x354/0x510 [ 230.392279][ T5804] f2fs_write_end_io+0x886/0xb60 [ 230.392313][ T5804] __submit_merged_bio+0x27a/0x6a0 [ 230.392337][ T5804] __submit_merged_write_cond+0x44c/0x530 [ 230.392360][ T5804] f2fs_sync_node_pages+0x1479/0x15e0 [ 230.392394][ T5804] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 230.392411][ T5804] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 230.392455][ T5804] ? f2fs_write_checkpoint+0xdad/0x2440 [ 230.392482][ T5804] f2fs_write_checkpoint+0xdde/0x2440 [ 230.392503][ T5804] ? __lock_acquire+0xab9/0xd20 [ 230.392544][ T5804] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 230.392612][ T5804] kill_f2fs_super+0x2cc/0x6d0 [ 230.392638][ T5804] ? __pfx_kill_f2fs_super+0x10/0x10 [ 230.392673][ T5804] ? shrinker_free+0x2ce/0x3e0 [ 230.392694][ T5804] deactivate_locked_super+0xbc/0x130 [ 230.392712][ T5804] cleanup_mnt+0x425/0x4c0 [ 230.392727][ T5804] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.392748][ T5804] task_work_run+0x1d4/0x260 [ 230.392766][ T5804] ? __pfx_task_work_run+0x10/0x10 [ 230.392778][ T5804] ? __x64_sys_umount+0x122/0x160 [ 230.392799][ T5804] ? exit_to_user_mode_loop+0x40/0x130 [ 230.392821][ T5804] exit_to_user_mode_loop+0xe9/0x130 [ 230.392840][ T5804] do_syscall_64+0x2bd/0xfa0 [ 230.392858][ T5804] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.392889][ T5804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.392910][ T5804] ? clear_bhb_loop+0x60/0xb0 [ 230.392930][ T5804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.392943][ T5804] RIP: 0033:0x7f11f9b502f7 [ 230.392958][ T5804] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 230.392971][ T5804] RSP: 002b:00007ffd006e6e98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 230.392987][ T5804] RAX: 0000000000000000 RBX: 00007f11f9bd1d7d RCX: 00007f11f9b502f7 [ 230.392997][ T5804] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd006e6f50 [ 230.393007][ T5804] RBP: 00007ffd006e6f50 R08: 0000000000000000 R09: 0000000000000000 [ 230.393016][ T5804] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd006e7fe0 [ 230.393026][ T5804] R13: 00007f11f9bd1d7d R14: 000000000003819b R15: 00007ffd006e8020 [ 230.393053][ T5804] [ 230.393061][ T5804] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 230.429902][ T7741] EXT4-fs (loop3): 1 truncate cleaned up [ 230.454877][ T5804] CPU: 1 UID: 0 PID: 5804 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 230.454906][ T5804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 230.454918][ T5804] Call Trace: [ 230.454926][ T5804] [ 230.454935][ T5804] dump_stack_lvl+0x189/0x250 [ 230.454964][ T5804] ? reacquire_held_locks+0x127/0x1d0 [ 230.455000][ T5804] ? rt_spin_lock+0x1c1/0x3e0 [ 230.455022][ T5804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.455048][ T5804] ? __pfx_queue_work_on+0x10/0x10 [ 230.455074][ T5804] ? rt_spin_unlock+0x150/0x200 [ 230.455102][ T5804] ? rt_spin_unlock+0x161/0x200 [ 230.455125][ T5804] f2fs_handle_critical_error+0x354/0x510 [ 230.455155][ T5804] f2fs_write_end_io+0x886/0xb60 [ 230.455199][ T5804] __submit_merged_bio+0x27a/0x6a0 [ 230.455227][ T5804] __submit_merged_write_cond+0x44c/0x530 [ 230.455255][ T5804] f2fs_sync_node_pages+0x1479/0x15e0 [ 230.455299][ T5804] ? __pfx_f2fs_sync_node_pages+0x10/0x10 [ 230.455322][ T5804] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 230.455379][ T5804] ? f2fs_write_checkpoint+0xdad/0x2440 [ 230.455414][ T5804] f2fs_write_checkpoint+0xdde/0x2440 [ 230.455440][ T5804] ? __lock_acquire+0xab9/0xd20 [ 230.455492][ T5804] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 230.455578][ T5804] kill_f2fs_super+0x2cc/0x6d0 [ 230.455611][ T5804] ? __pfx_kill_f2fs_super+0x10/0x10 [ 230.455655][ T5804] ? shrinker_free+0x2ce/0x3e0 [ 230.455680][ T5804] deactivate_locked_super+0xbc/0x130 [ 230.455705][ T5804] cleanup_mnt+0x425/0x4c0 [ 230.455724][ T5804] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.455750][ T5804] task_work_run+0x1d4/0x260 [ 230.455775][ T5804] ? __pfx_task_work_run+0x10/0x10 [ 230.455790][ T5804] ? __x64_sys_umount+0x122/0x160 [ 230.455816][ T5804] ? exit_to_user_mode_loop+0x40/0x130 [ 230.455844][ T5804] exit_to_user_mode_loop+0xe9/0x130 [ 230.455868][ T5804] do_syscall_64+0x2bd/0xfa0 [ 230.455891][ T5804] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.455914][ T5804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.455932][ T5804] ? clear_bhb_loop+0x60/0xb0 [ 230.455955][ T5804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.455979][ T5804] RIP: 0033:0x7f11f9b502f7 [ 230.455997][ T5804] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 230.456013][ T5804] RSP: 002b:00007ffd006e6e98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 230.456033][ T5804] RAX: 0000000000000000 RBX: 00007f11f9bd1d7d RCX: 00007f11f9b502f7 [ 230.456045][ T5804] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd006e6f50 [ 230.456057][ T5804] RBP: 00007ffd006e6f50 R08: 0000000000000000 R09: 0000000000000000 [ 230.456068][ T5804] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd006e7fe0 [ 230.456081][ T5804] R13: 00007f11f9bd1d7d R14: 000000000003819b R15: 00007ffd006e8020 [ 230.456119][ T5804] [ 230.469928][ T7741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.490961][ T5804] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 231.193168][ T5810] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 231.199391][ T5803] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.203837][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.444936][ T7752] loop0: detected capacity change from 0 to 512 [ 231.481398][ T7752] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 231.546572][ T7752] EXT4-fs (loop0): 1 truncate cleaned up [ 231.582776][ T7752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.878464][ T7162] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 232.008091][ T7162] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 232.100500][ T5803] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.103993][ T7162] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 232.173616][ T7162] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 232.782395][ T7776] loop4: detected capacity change from 0 to 2048 [ 232.802575][ T7162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.844307][ T7776] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 232.859506][ T7776] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.969106][ T7162] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.104793][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.115835][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.181369][ T7756] loop2: detected capacity change from 0 to 32768 [ 233.207963][ T3461] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.208112][ T3461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.350391][ T7755] loop3: detected capacity change from 0 to 32768 [ 233.393257][ T7756] UFO tlock:0xffffc90003512048 [ 233.529594][ T122] Oops: stack segment: 0000 [#1] SMP KASAN PTI [ 233.529623][ T122] CPU: 0 UID: 0 PID: 122 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 233.529645][ T122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 233.529656][ T122] RIP: 0010:__list_add_valid_or_report+0x3e/0x130 [ 233.529684][ T122] Code: 00 00 00 48 89 d3 48 85 d2 0f 84 93 00 00 00 49 89 f6 49 89 ff 49 bd 00 00 00 00 00 fc ff df 4c 8d 63 08 4c 89 e5 48 c1 ed 03 <42> 80 7c 2d 00 00 74 08 4c 89 e7 e8 d2 c3 9d fd 4d 39 34 24 75 71 [ 233.529700][ T122] RSP: 0018:ffffc900039bfa20 EFLAGS: 00010a06 [ 233.529719][ T122] RAX: 0000000000000000 RBX: dead000000000100 RCX: ffff88801e3c9e00 [ 233.529733][ T122] RDX: dead000000000100 RSI: ffffc900031f11a0 RDI: ffff888057a6a3b8 [ 233.529747][ T122] RBP: 1bd5a00000000021 R08: 0000000000000000 R09: 0000000000000000 [ 233.529760][ T122] R10: dffffc0000000000 R11: fffffbfff1dac5ef R12: dead000000000108 [ 233.529774][ T122] R13: dffffc0000000000 R14: ffffc900031f11a0 R15: ffff888057a6a3b8 [ 233.529789][ T122] FS: 0000000000000000(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000 [ 233.529804][ T122] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.529818][ T122] CR2: 00007fa315e0da90 CR3: 0000000036528000 CR4: 00000000003526f0 [ 233.529834][ T122] Call Trace: [ 233.529842][ T122] [ 233.529851][ T122] dbUpdatePMap+0x7e4/0xeb0 [ 233.529879][ T122] txAllocPMap+0x57d/0x6b0 [ 233.529895][ T122] ? rt_mutex_slowunlock+0x493/0x8a0 [ 233.529921][ T122] ? rt_spin_lock+0x1c1/0x3e0 [ 233.529941][ T122] txUpdateMap+0x2a2/0x9c0 [ 233.529971][ T122] jfs_lazycommit+0x3f1/0xa10 [ 233.529997][ T122] ? __pfx_jfs_lazycommit+0x10/0x10 [ 233.530022][ T122] ? __pfx_default_wake_function+0x10/0x10 [ 233.530041][ T122] ? __kthread_parkme+0x7b/0x200 [ 233.530063][ T122] ? __kthread_parkme+0x1a1/0x200 [ 233.530083][ T122] kthread+0x711/0x8a0 [ 233.530105][ T122] ? __pfx_jfs_lazycommit+0x10/0x10 [ 233.530127][ T122] ? __pfx_kthread+0x10/0x10 [ 233.530148][ T122] ? rt_spin_unlock+0x150/0x200 [ 233.530168][ T122] ? rt_spin_unlock+0x161/0x200 [ 233.530184][ T122] ? __pfx_kthread+0x10/0x10 [ 233.530206][ T122] ret_from_fork+0x4bc/0x870 [ 233.530226][ T122] ? __pfx_ret_from_fork+0x10/0x10 [ 233.530245][ T122] ? __switch_to_asm+0x39/0x70 [ 233.530261][ T122] ? __switch_to_asm+0x33/0x70 [ 233.530275][ T122] ? __pfx_kthread+0x10/0x10 [ 233.530295][ T122] ret_from_fork_asm+0x1a/0x30 [ 233.530315][ T122] [ 233.530321][ T122] Modules linked in: [ 233.530340][ T122] ---[ end trace 0000000000000000 ]--- [ 233.530349][ T122] RIP: 0010:__list_add_valid_or_report+0x3e/0x130 [ 233.530373][ T122] Code: 00 00 00 48 89 d3 48 85 d2 0f 84 93 00 00 00 49 89 f6 49 89 ff 49 bd 00 00 00 00 00 fc ff df 4c 8d 63 08 4c 89 e5 48 c1 ed 03 <42> 80 7c 2d 00 00 74 08 4c 89 e7 e8 d2 c3 9d fd 4d 39 34 24 75 71 [ 233.530388][ T122] RSP: 0018:ffffc900039bfa20 EFLAGS: 00010a06 [ 233.530404][ T122] RAX: 0000000000000000 RBX: dead000000000100 RCX: ffff88801e3c9e00 [ 233.530418][ T122] RDX: dead000000000100 RSI: ffffc900031f11a0 RDI: ffff888057a6a3b8 [ 233.530432][ T122] RBP: 1bd5a00000000021 R08: 0000000000000000 R09: 0000000000000000 [ 233.530444][ T122] R10: dffffc0000000000 R11: fffffbfff1dac5ef R12: dead000000000108 [ 233.530458][ T122] R13: dffffc0000000000 R14: ffffc900031f11a0 R15: ffff888057a6a3b8 [ 233.530472][ T122] FS: 0000000000000000(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000 [ 233.530488][ T122] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 233.530501][ T122] CR2: 00007fa315e0da90 CR3: 0000000036528000 CR4: 00000000003526f0 [ 233.530519][ T122] Kernel panic - not syncing: Fatal exception [ 233.530827][ T122] Kernel Offset: disabled