last executing test programs: 2m23.905464151s ago: executing program 1 (id=2): syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=adaptive,heap,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00'], 0x1, 0x105c9, &(0x7f0000020bc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000004380)='./file0/file0\x00', 0x0) 2m18.317459046s ago: executing program 0 (id=19): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c646174613d77726974656261636b2c6572726f72733d72656d6f756e742d726f2c6e6f61636c2c0033b67a38edf7ca65cff4aecf1bccac7b7847e83ec6928ad9eff2281ff7a2314d9a8541a9772b98d067c1463bb01ed3ebf5764745d29402107611df2e22d6cfb25eb0a8b970f339cf6413aaef25cee228060d70ce0ade90d917a9c5"], 0x1, 0x442f, &(0x7f0000004480)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m18.022942668s ago: executing program 1 (id=20): chdir(&(0x7f0000000480)='./cgroup\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fchown(r0, 0x0, 0x0) 2m17.927165268s ago: executing program 1 (id=21): r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='@\x00', &(0x7f0000000040)='>\t', 0x2) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000980)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\x92\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 122.161924][ T5805] RSP: 002b:00007ffc2324de18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 122.161947][ T5805] RAX: 0000000000000000 RBX: 00007f08e31e1d7d RCX: 00007f08e31602f7 [ 122.161960][ T5805] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2324ded0 [ 122.161970][ T5805] RBP: 00007ffc2324ded0 R08: 0000000000000000 R09: 0000000000000000 [ 122.161982][ T5805] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc2324ef60 [ 122.161994][ T5805] R13: 00007f08e31e1d7d R14: 000000000001dc17 R15: 00007ffc2324efa0 [ 122.162026][ T5805] [ 122.162033][ T5805] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 122.190168][ T6172] BTRFS info (device loop2): turning on async discard [ 122.190191][ T6172] BTRFS info (device loop2): enabling free space tree [ 122.190222][ T6172] BTRFS info (device loop2): use zlib compression, level 3 [ 122.190241][ T6172] BTRFS info (device loop2): max_inline set to 0 [ 122.419665][ T61] Bluetooth: hci3: command tx timeout [ 122.758296][ T6180] loop4: detected capacity change from 0 to 32768 [ 122.767754][ T5815] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.881739][ T6180] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.209730][ T6180] XFS (loop4): Ending clean mount [ 123.585243][ T5807] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.992405][ T3886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.092113][ T3886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.149613][ T3886] bond0 (unregistering): Released all slaves [ 124.502691][ T61] Bluetooth: hci3: command tx timeout [ 125.329053][ T6213] loop3: detected capacity change from 0 to 32768 [ 125.469704][ T6213] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.584508][ T6215] loop4: detected capacity change from 0 to 32768 [ 125.636507][ T6215] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.64 (6215) [ 125.668826][ T5804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 125.684660][ T5804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 125.688843][ T5804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 125.697629][ T6123] chnl_net:caif_netlink_parms(): no params data found [ 125.721945][ T5804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 125.730107][ T5804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 125.751239][ T6215] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 125.751313][ T6215] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 125.751346][ T6215] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 126.021106][ T6213] XFS (loop3): Ending clean mount [ 126.028683][ T6213] XFS (loop3): Quotacheck needed: Please wait. [ 126.073043][ T6215] BTRFS info (device loop4): rebuilding free space tree [ 126.181782][ T6215] BTRFS info (device loop4): disabling free space tree [ 126.181865][ T6215] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 126.181889][ T6215] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 126.231760][ T6213] XFS (loop3): Quotacheck: Done. [ 126.320703][ T6215] BTRFS info (device loop4): enabling ssd optimizations [ 126.320731][ T6215] BTRFS info (device loop4): turning on async discard [ 126.320748][ T6215] BTRFS info (device loop4): enabling disk space caching [ 126.320764][ T6215] BTRFS info (device loop4): force clearing of disk cache [ 126.320782][ T6215] BTRFS info (device loop4): use zstd compression, level 3 [ 126.394367][ T37] audit: type=1804 audit(1762031348.298:6): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.61" name="/newroot/16/file0/bus" dev="loop3" ino=9291 res=1 errno=0 [ 126.521217][ T37] audit: type=1800 audit(1762031348.428:7): pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.64" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 126.745030][ T5805] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 126.912790][ T5807] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 127.653997][ T6270] loop3: detected capacity change from 0 to 1024 [ 127.732016][ T6270] EXT4-fs: Ignoring removed orlov option [ 127.732048][ T6270] EXT4-fs: Ignoring removed nomblk_io_submit option [ 127.782265][ T61] Bluetooth: hci5: command tx timeout [ 127.909047][ T6270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.965206][ T6123] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.965351][ T6123] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.965573][ T6123] bridge_slave_0: entered allmulticast mode [ 127.989769][ T6123] bridge_slave_0: entered promiscuous mode [ 127.990288][ T37] audit: type=1800 audit(1762031349.898:8): pid=6270 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.66" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 128.289086][ T6267] loop4: detected capacity change from 0 to 32768 [ 128.374422][ T3886] hsr_slave_0: left promiscuous mode [ 128.436416][ T6267] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 128.456579][ T5805] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.472516][ T3886] hsr_slave_1: left promiscuous mode [ 128.473692][ T3886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.473787][ T3886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.542736][ T3886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.542763][ T3886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.625324][ T6267] XFS (loop4): Ending clean mount [ 128.684631][ T6267] XFS (loop4): Quotacheck needed: Please wait. [ 128.717742][ T3886] veth1_macvtap: left promiscuous mode [ 128.718019][ T3886] veth0_macvtap: left promiscuous mode [ 128.718334][ T3886] veth1_vlan: left promiscuous mode [ 128.719276][ T3886] veth0_vlan: left promiscuous mode [ 128.757117][ T6265] loop2: detected capacity change from 0 to 32768 [ 128.782042][ T6265] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.68 (6265) [ 128.806347][ T6265] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 128.806426][ T6265] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 128.955865][ T6267] XFS (loop4): Quotacheck: Done. [ 129.099899][ T6265] BTRFS info (device loop2): rebuilding free space tree [ 129.199131][ T5807] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 129.254782][ T6265] BTRFS info (device loop2): disabling free space tree [ 129.254868][ T6265] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 129.254896][ T6265] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 129.291395][ T6265] BTRFS info (device loop2): enabling ssd optimizations [ 129.291421][ T6265] BTRFS info (device loop2): turning on async discard [ 129.291438][ T6265] BTRFS info (device loop2): force clearing of disk cache [ 129.291455][ T6265] BTRFS info (device loop2): enabling auto defrag [ 129.291472][ T6265] BTRFS info (device loop2): max_inline set to 4096 [ 129.407690][ T37] audit: type=1800 audit(1762031351.348:9): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.68" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 129.859745][ T61] Bluetooth: hci5: command tx timeout [ 130.054180][ T37] audit: type=1800 audit(1762031351.998:10): pid=6302 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.70" name="file1" dev="overlay" ino=120 res=0 errno=0 [ 130.096135][ T5815] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 130.207631][ T6284] loop3: detected capacity change from 0 to 32768 [ 130.230004][ T6284] BTRFS info: device /dev/loop3 (7:3) using temp-fsid a0a4ca46-3c1d-4ad4-b0ca-b8b3621c58e0 [ 130.230074][ T6284] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.69 (6284) [ 130.332275][ T6284] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 130.332351][ T6284] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 130.613607][ T6284] BTRFS info (device loop3): enabling ssd optimizations [ 130.613632][ T6284] BTRFS info (device loop3): turning on async discard [ 130.613647][ T6284] BTRFS info (device loop3): enabling free space tree [ 130.613663][ T6284] BTRFS info (device loop3): enabling auto defrag [ 131.241751][ T5805] BTRFS info (device loop3): last unmount of filesystem a0a4ca46-3c1d-4ad4-b0ca-b8b3621c58e0 [ 131.771612][ T6321] loop4: detected capacity change from 0 to 32768 [ 131.772973][ T6321] btrfs: Deprecated parameter 'usebackuproot' [ 131.772993][ T6321] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 131.805337][ T6321] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.72 (6321) [ 131.854848][ T6321] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.854925][ T6321] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm [ 131.854956][ T6321] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 131.939859][ T61] Bluetooth: hci5: command tx timeout [ 132.240470][ T6321] BTRFS info (device loop4): rebuilding free space tree [ 132.317786][ T6321] BTRFS info (device loop4): disabling free space tree [ 132.317875][ T6321] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 132.317903][ T6321] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 132.395679][ T6328] loop2: detected capacity change from 0 to 32768 [ 132.396357][ T6321] BTRFS info (device loop4): turning on sync discard [ 132.396379][ T6321] BTRFS info (device loop4): enabling disk space caching [ 132.396395][ T6321] BTRFS info (device loop4): force clearing of disk cache [ 132.396411][ T6321] BTRFS info (device loop4): trying to use backup root at mount time [ 132.550062][ T6328] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 132.709851][ T6328] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 132.738350][ T58] (kworker/u8:3,58,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 132.925530][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.925628][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.221067][ T6328] syz.2.74 (6328) used greatest stack depth: 18344 bytes left [ 133.374437][ T5807] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 133.510322][ T5815] ocfs2: Unmounting device (7,2) on (node local) [ 133.710045][ T6346] loop3: detected capacity change from 0 to 40427 [ 133.777516][ T6346] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 133.777543][ T6346] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 133.899045][ T6346] F2FS-fs (loop3): invalid crc value [ 134.004096][ T6346] F2FS-fs (loop3): NAT is corrupt, run fsck to fix it [ 134.025667][ T61] Bluetooth: hci5: command tx timeout [ 134.072249][ T6346] F2FS-fs (loop3): Failed to initialize F2FS node manager (-117) [ 134.461261][ T6365] loop4: detected capacity change from 0 to 2048 [ 134.557931][ T6365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.323774][ T6365] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.78: bg 0: block 234: padding at end of block bitmap is not set [ 135.359714][ T6365] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 4 with max blocks 1422 with error 28 [ 135.359749][ T6365] EXT4-fs (loop4): This should not happen!! Data will be lost [ 135.359749][ T6365] [ 135.359763][ T6365] EXT4-fs (loop4): Total free blocks count 0 [ 135.359775][ T6365] EXT4-fs (loop4): Free/Dirty block details [ 135.359818][ T6365] EXT4-fs (loop4): free_blocks=0 [ 135.359857][ T6365] EXT4-fs (loop4): dirty_blocks=1440 [ 135.359871][ T6365] EXT4-fs (loop4): Block reservation details [ 135.359883][ T6365] EXT4-fs (loop4): i_reserved_data_blocks=90 [ 135.522433][ T6363] loop2: detected capacity change from 0 to 40427 [ 135.526891][ T6363] F2FS-fs: heap/no_heap options were deprecated [ 135.540653][ T6363] F2FS-fs (loop2): build fault injection rate: 19 [ 135.540674][ T6363] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 135.543939][ T6363] F2FS-fs (loop2): invalid crc value [ 135.641134][ T6363] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 135.926957][ T5807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.959753][ T6363] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0 [ 136.044127][ T6363] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 136.063345][ T6363] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 136.081996][ T6363] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40 [ 136.154433][ T6375] F2FS-fs (loop2): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xab4/0x1cf0 [ 136.154478][ T6375] F2FS-fs (loop2): inconsistent node block, node_type:3, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0] [ 136.157662][ T37] audit: type=1800 audit(1762031358.098:11): pid=6363 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.77" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 136.387134][ T6363] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 136.428148][ T3886] team0 (unregistering): Port device team_slave_1 removed [ 136.752310][ T6370] loop3: detected capacity change from 0 to 40427 [ 136.774852][ T6370] F2FS-fs (loop3): build fault injection rate: 771 [ 136.778955][ T6370] F2FS-fs (loop3): invalid crc value [ 136.844140][ T6374] loop4: detected capacity change from 0 to 32768 [ 136.846889][ T3886] team0 (unregistering): Port device team_slave_0 removed [ 137.387806][ T6370] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 137.419668][ T6370] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 137.689459][ T6382] loop2: detected capacity change from 0 to 64 [ 137.723076][ T5805] syz-executor: attempt to access beyond end of device [ 137.723076][ T5805] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 137.723140][ T5805] CPU: 0 UID: 0 PID: 5805 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 137.723187][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 137.723211][ T5805] Call Trace: [ 137.723228][ T5805] [ 137.723245][ T5805] dump_stack_lvl+0x189/0x250 [ 137.723309][ T5805] ? reacquire_held_locks+0x127/0x1d0 [ 137.723364][ T5805] ? rt_spin_lock+0x1c1/0x3e0 [ 137.723386][ T5805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.723412][ T5805] ? __pfx_queue_work_on+0x10/0x10 [ 137.723439][ T5805] ? rt_spin_unlock+0x150/0x200 [ 137.723463][ T5805] ? rt_spin_unlock+0x161/0x200 [ 137.723486][ T5805] f2fs_handle_critical_error+0x354/0x510 [ 137.723516][ T5805] f2fs_write_end_io+0x886/0xb60 [ 137.723561][ T5805] __submit_merged_bio+0x27a/0x6a0 [ 137.723591][ T5805] __submit_merged_write_cond+0x255/0x530 [ 137.723622][ T5805] f2fs_write_data_pages+0x261d/0x3000 [ 137.723684][ T5805] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 137.723764][ T5805] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 137.723788][ T5805] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.723831][ T5805] ? rt_mutex_slowunlock+0x493/0x8a0 [ 137.723849][ T5805] ? reacquire_held_locks+0x127/0x1d0 [ 137.723874][ T5805] ? rt_spin_lock+0x1c1/0x3e0 [ 137.723904][ T5805] ? rt_spin_unlock+0x150/0x200 [ 137.723929][ T5805] ? rt_spin_unlock+0x161/0x200 [ 137.723947][ T5805] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 137.723973][ T5805] do_writepages+0x32e/0x550 [ 137.723996][ T5805] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 137.724018][ T5805] ? rt_spin_unlock+0x150/0x200 [ 137.724049][ T5805] filemap_fdatawrite+0x19c/0x240 [ 137.724070][ T5805] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 137.724127][ T5805] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 137.724156][ T5805] ? rt_spin_unlock+0x161/0x200 [ 137.724179][ T5805] f2fs_sync_dirty_inodes+0x31f/0x830 [ 137.724221][ T5805] f2fs_write_checkpoint+0x93e/0x2440 [ 137.724245][ T5805] ? stack_depot_save_flags+0x40/0x860 [ 137.724302][ T5805] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 137.724375][ T5805] ? f2fs_stop_gc_thread+0x82/0xb0 [ 137.724393][ T5805] ? kfree+0x197/0x950 [ 137.724412][ T5805] ? f2fs_stop_gc_thread+0x82/0xb0 [ 137.724438][ T5805] kill_f2fs_super+0x2cc/0x6d0 [ 137.724470][ T5805] ? __pfx_kill_f2fs_super+0x10/0x10 [ 137.724514][ T5805] ? shrinker_free+0x2ce/0x3e0 [ 137.724540][ T5805] deactivate_locked_super+0xbc/0x130 [ 137.724563][ T5805] cleanup_mnt+0x425/0x4c0 [ 137.724583][ T5805] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.724609][ T5805] task_work_run+0x1d4/0x260 [ 137.724632][ T5805] ? __pfx_task_work_run+0x10/0x10 [ 137.724648][ T5805] ? __x64_sys_umount+0x122/0x160 [ 137.724674][ T5805] ? exit_to_user_mode_loop+0x40/0x130 [ 137.724702][ T5805] exit_to_user_mode_loop+0xe9/0x130 [ 137.724727][ T5805] do_syscall_64+0x2bd/0xfa0 [ 137.724749][ T5805] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.724771][ T5805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.724788][ T5805] ? clear_bhb_loop+0x60/0xb0 [ 137.724808][ T5805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.724825][ T5805] RIP: 0033:0x7f08e31602f7 [ 137.724841][ T5805] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 137.724856][ T5805] RSP: 002b:00007ffc2324de18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 137.724876][ T5805] RAX: 0000000000000000 RBX: 00007f08e31e1d7d RCX: 00007f08e31602f7 [ 137.724888][ T5805] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc2324ded0 [ 137.724899][ T5805] RBP: 00007ffc2324ded0 R08: 0000000000000000 R09: 0000000000000000 [ 137.724909][ T5805] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc2324ef60 [ 137.724920][ T5805] R13: 00007f08e31e1d7d R14: 00000000000218d6 R15: 00007ffc2324efa0 [ 137.724948][ T5805] [ 137.724956][ T5805] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 137.995824][ T37] audit: type=1800 audit(1762031359.938:12): pid=6384 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.81" name="file1" dev="loop2" ino=22 res=0 errno=0 [ 138.040196][ T37] audit: type=1800 audit(1762031359.938:13): pid=6382 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.81" name="file1" dev="loop2" ino=22 res=0 errno=0 [ 138.040246][ T37] audit: type=1804 audit(1762031359.958:14): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.81" name="/newroot/21/bus/file1" dev="loop2" ino=22 res=1 errno=0 [ 138.119646][ T37] audit: type=1804 audit(1762031360.058:15): pid=6382 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.81" name="/newroot/21/bus/file1" dev="loop2" ino=22 res=1 errno=0 [ 138.459001][ T6386] loop2: detected capacity change from 0 to 64 [ 139.813480][ T6388] loop3: detected capacity change from 0 to 32768 [ 139.919908][ T6388] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.126243][ T6388] XFS (loop3): Ending clean mount [ 140.132118][ T6388] XFS (loop3): Quotacheck needed: Please wait. [ 140.256911][ T6398] loop4: detected capacity change from 0 to 4096 [ 140.335005][ T6398] EXT4-fs (loop4): Test dummy encryption mode enabled [ 140.392340][ T6398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.514952][ T6388] XFS (loop3): Quotacheck: Done. [ 140.557151][ T6398] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 140.641221][ T37] audit: type=1800 audit(1762031362.578:16): pid=6388 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.82" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 140.897643][ T5807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.094078][ T6400] loop2: detected capacity change from 0 to 32768 [ 141.137123][ T6400] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.85 (6400) [ 141.183667][ T6400] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 141.183743][ T6400] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 141.281032][ T6412] loop4: detected capacity change from 0 to 512 [ 141.344968][ T6412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.345109][ T6412] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.390698][ T6400] BTRFS info (device loop2): enabling ssd optimizations [ 141.390724][ T6400] BTRFS info (device loop2): turning on async discard [ 141.390740][ T6400] BTRFS info (device loop2): enabling free space tree [ 141.402681][ T6412] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.86: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 141.492209][ T6412] EXT4-fs (loop4): Remounting filesystem read-only [ 142.441439][ T5807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.481779][ T5805] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 143.370940][ T6432] loop3: detected capacity change from 0 to 4096 [ 143.378071][ T6432] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 143.575270][ T5815] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 143.613572][ T6430] loop4: detected capacity change from 0 to 32768 [ 143.758864][ T6123] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.758994][ T6123] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.759175][ T6123] bridge_slave_1: entered allmulticast mode [ 143.762305][ T6123] bridge_slave_1: entered promiscuous mode [ 143.777799][ T6430] JBD2: Ignoring recovery information on journal [ 143.953636][ T6430] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 144.464902][ T5807] ocfs2: Unmounting device (7,4) on (node local) [ 144.501018][ T6123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.592579][ T6123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.944507][ T6443] loop4: detected capacity change from 0 to 1024 [ 145.132155][ T6443] syz.4.90: attempt to access beyond end of device [ 145.132155][ T6443] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 145.132190][ T6443] Buffer I/O error on dev loop4, logical block 2889, async page read [ 145.132424][ T6443] syz.4.90: attempt to access beyond end of device [ 145.132424][ T6443] loop4: rw=0, sector=393216, nr_sectors = 2 limit=1024 [ 145.132448][ T6443] Buffer I/O error on dev loop4, logical block 196608, async page read [ 145.132540][ T6443] syz.4.90: attempt to access beyond end of device [ 145.132540][ T6443] loop4: rw=0, sector=393218, nr_sectors = 2 limit=1024 [ 145.132563][ T6443] Buffer I/O error on dev loop4, logical block 196609, async page read [ 145.132654][ T6443] syz.4.90: attempt to access beyond end of device [ 145.132654][ T6443] loop4: rw=0, sector=393220, nr_sectors = 2 limit=1024 [ 145.132677][ T6443] Buffer I/O error on dev loop4, logical block 196610, async page read [ 145.132992][ T6443] syz.4.90: attempt to access beyond end of device [ 145.132992][ T6443] loop4: rw=0, sector=393222, nr_sectors = 2 limit=1024 [ 145.133015][ T6443] Buffer I/O error on dev loop4, logical block 196611, async page read [ 145.133106][ T6443] syz.4.90: attempt to access beyond end of device [ 145.133106][ T6443] loop4: rw=0, sector=393224, nr_sectors = 2 limit=1024 [ 145.133128][ T6443] Buffer I/O error on dev loop4, logical block 196612, async page read [ 145.133222][ T6443] syz.4.90: attempt to access beyond end of device [ 145.133222][ T6443] loop4: rw=0, sector=393226, nr_sectors = 2 limit=1024 [ 145.133245][ T6443] Buffer I/O error on dev loop4, logical block 196613, async page read [ 145.133341][ T6443] syz.4.90: attempt to access beyond end of device [ 145.133341][ T6443] loop4: rw=0, sector=393228, nr_sectors = 2 limit=1024 [ 145.133363][ T6443] Buffer I/O error on dev loop4, logical block 196614, async page read [ 145.133556][ T6443] syz.4.90: attempt to access beyond end of device [ 145.133556][ T6443] loop4: rw=0, sector=393230, nr_sectors = 2 limit=1024 [ 145.133579][ T6443] Buffer I/O error on dev loop4, logical block 196615, async page read [ 145.133669][ T6443] syz.4.90: attempt to access beyond end of device [ 145.133669][ T6443] loop4: rw=0, sector=393232, nr_sectors = 2 limit=1024 [ 145.133692][ T6443] Buffer I/O error on dev loop4, logical block 196616, async page read [ 145.607374][ T6123] team0: Port device team_slave_0 added [ 145.617661][ T6123] team0: Port device team_slave_1 added [ 145.808477][ T6438] loop2: detected capacity change from 0 to 32768 [ 145.880544][ T6438] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.89 (6438) [ 145.951329][ T6438] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 145.951407][ T6438] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 146.057092][ T156] hfsplus: b-tree write err: -5, ino 8 [ 146.353620][ T6473] loop4: detected capacity change from 0 to 128 [ 146.359022][ T6123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.359036][ T6123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.359061][ T6123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.427479][ T6473] EXT4-fs (loop4): Test dummy encryption mode enabled [ 146.445366][ T6123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.445381][ T6123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.445406][ T6123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.447718][ T6438] BTRFS info (device loop2): enabling ssd optimizations [ 146.447742][ T6438] BTRFS info (device loop2): turning on async discard [ 146.447758][ T6438] BTRFS info (device loop2): enabling free space tree [ 146.447775][ T6438] BTRFS info (device loop2): use zstd compression, level 3 [ 146.474012][ T6473] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 146.507491][ T6473] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.588162][ T6473] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 146.600614][ T37] audit: type=1800 audit(1762031368.548:17): pid=6473 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.92" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 146.945536][ T5807] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 147.104815][ T6484] loop3: detected capacity change from 0 to 256 [ 147.106127][ T6484] exfat: Bad value for 'dmask' [ 147.204960][ T6484] loop3: detected capacity change from 0 to 256 [ 147.250188][ T6484] vfat: Unknown parameter './file0' [ 147.333376][ T5815] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 147.577325][ T6123] hsr_slave_0: entered promiscuous mode [ 147.590997][ T6123] hsr_slave_1: entered promiscuous mode [ 147.613939][ T6488] loop3: detected capacity change from 0 to 4096 [ 147.617940][ T6123] debugfs: 'hsr0' already exists in 'hsr' [ 147.617966][ T6123] Cannot create hsr debugfs directory [ 147.682891][ T6488] ntfs3(loop3): Primary boot: invalid record size -14. [ 147.683090][ T6488] ntfs3(loop3): try to read out of volume at offset 0x1ffe00 [ 148.285070][ T6491] loop2: detected capacity change from 0 to 2048 [ 148.335139][ T6486] loop4: detected capacity change from 0 to 32768 [ 148.338145][ T6494] loop3: detected capacity change from 0 to 8 [ 148.481499][ T6491] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.603633][ T6495] SQUASHFS error: Failed to read block 0x2d7: -5 [ 148.603656][ T6495] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 148.603830][ T6495] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 148.603982][ T6495] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 148.758989][ T6237] chnl_net:caif_netlink_parms(): no params data found [ 149.119668][ T5805] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 149.120899][ T5805] SQUASHFS error: Unknown inode type 0 in squashfs_iget! [ 150.850920][ T6513] loop2: detected capacity change from 0 to 32768 [ 150.929286][ T6513] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 150.940645][ T6513] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 150.996392][ T6513] XFS (loop2): Ending clean mount [ 151.036197][ T6513] XFS (loop2): Quotacheck needed: Please wait. [ 151.134767][ T43] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x10 [ 151.134812][ T43] XFS (loop2): Unmount and run xfs_repair [ 151.134824][ T43] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 151.134840][ T43] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 151.134854][ T43] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 151.134867][ T43] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 151.134879][ T43] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 151.134892][ T43] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 151.134904][ T43] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 151.134917][ T43] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.134929][ T43] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.135198][ T43] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x10 len 8 error 74 [ 151.166581][ T6513] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 151.284162][ T6237] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.284395][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.284622][ T6237] bridge_slave_0: entered allmulticast mode [ 151.346253][ T6237] bridge_slave_0: entered promiscuous mode [ 151.400521][ T6527] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x10 [ 151.400569][ T6527] XFS (loop2): Unmount and run xfs_repair [ 151.400582][ T6527] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 151.400599][ T6527] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 151.400614][ T6527] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 151.400629][ T6527] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 151.400642][ T6527] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 151.400664][ T6527] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 151.400679][ T6527] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 151.400693][ T6527] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.400708][ T6527] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 151.400723][ T6527] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x10 len 8 error 74 [ 151.590239][ T6527] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 151.590294][ T6527] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 151.772462][ T5815] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 151.962670][ T1202] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.183979][ T6237] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.184121][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.184372][ T6237] bridge_slave_1: entered allmulticast mode [ 152.221373][ T6237] bridge_slave_1: entered promiscuous mode [ 152.341074][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.370218][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.372119][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.393164][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.399758][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.871703][ T6529] loop4: detected capacity change from 0 to 32768 [ 152.880500][ T6529] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.102 (6529) [ 152.887932][ T6529] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 152.888004][ T6529] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 152.980489][ T1202] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.036607][ T6237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.109971][ T6529] BTRFS info (device loop4): rebuilding free space tree [ 153.122150][ T6237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.267690][ T6529] BTRFS info (device loop4): disabling free space tree [ 153.267771][ T6529] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 153.267795][ T6529] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 153.275545][ T6529] BTRFS info (device loop4): setting nodatasum [ 153.275568][ T6529] BTRFS info (device loop4): setting nodatacow [ 153.275583][ T6529] BTRFS info (device loop4): turning off barriers [ 153.275599][ T6529] BTRFS info (device loop4): force clearing of disk cache [ 153.309823][ T6533] loop2: detected capacity change from 0 to 32768 [ 153.321793][ T6533] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.103 (6533) [ 153.343873][ T6533] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 153.343948][ T6533] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 153.344019][ T6533] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 153.622248][ T6533] BTRFS info (device loop2): rebuilding free space tree [ 153.751148][ T6533] BTRFS info (device loop2): disabling free space tree [ 153.751235][ T6533] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 153.751261][ T6533] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 153.787124][ T6533] BTRFS info (device loop2): enabling ssd optimizations [ 153.787150][ T6533] BTRFS info (device loop2): enabling disk space caching [ 153.787166][ T6533] BTRFS info (device loop2): force clearing of disk cache [ 153.787182][ T6533] BTRFS info (device loop2): enabling auto defrag [ 153.787199][ T6533] BTRFS info (device loop2): max_inline set to 0 [ 154.178000][ T1202] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.266974][ T174] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 154.441680][ T6237] team0: Port device team_slave_0 added [ 154.500845][ T61] Bluetooth: hci1: command tx timeout [ 154.587424][ T6237] team0: Port device team_slave_1 added [ 154.673558][ T5815] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 154.905368][ T1202] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.995792][ T6123] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.347695][ T6123] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.494222][ T5807] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 155.588169][ T6123] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.633814][ T6571] loop2: detected capacity change from 0 to 32768 [ 155.667832][ T6237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.667848][ T6237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.667871][ T6237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.691678][ T6571] (syz.2.104,6571,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 155.692186][ T6571] (syz.2.104,6571,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 155.705883][ T6571] JBD2: Ignoring recovery information on journal [ 155.746546][ T6123] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.857616][ T6237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.857632][ T6237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 155.857657][ T6237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.876728][ T6571] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 156.361785][ T6571] (syz.2.104,6571,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 156.389785][ T6583] loop4: detected capacity change from 0 to 128 [ 156.513981][ T6583] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 156.542740][ T6583] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 156.598980][ T61] Bluetooth: hci1: command tx timeout [ 156.818542][ T5807] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.991226][ T6237] hsr_slave_0: entered promiscuous mode [ 157.006014][ T6237] hsr_slave_1: entered promiscuous mode [ 157.006996][ T6237] debugfs: 'hsr0' already exists in 'hsr' [ 157.007018][ T6237] Cannot create hsr debugfs directory [ 157.034497][ T6593] fuse: Bad value for 'fd' [ 157.374943][ T5815] ocfs2: Unmounting device (7,2) on (node local) [ 157.833138][ T1202] bridge_slave_1: left allmulticast mode [ 157.833165][ T1202] bridge_slave_1: left promiscuous mode [ 157.833405][ T1202] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.910966][ T1202] bridge_slave_0: left allmulticast mode [ 157.910994][ T1202] bridge_slave_0: left promiscuous mode [ 157.911243][ T1202] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.976799][ T6604] loop2: detected capacity change from 0 to 256 [ 157.987470][ T6604] exfat: Deprecated parameter 'utf8' [ 157.987597][ T6604] exfat: Deprecated parameter 'namecase' [ 158.081015][ T6604] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 158.253389][ T6598] loop4: detected capacity change from 0 to 32768 [ 158.290090][ T6598] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.107 (6598) [ 158.332756][ T6598] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 158.332835][ T6598] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 158.589091][ T6598] BTRFS info (device loop4): enabling ssd optimizations [ 158.589117][ T6598] BTRFS info (device loop4): turning on async discard [ 158.589133][ T6598] BTRFS info (device loop4): enabling free space tree [ 158.589150][ T6598] BTRFS info (device loop4): enabling auto defrag [ 158.659856][ T5804] Bluetooth: hci1: command tx timeout [ 158.880526][ T6623] loop2: detected capacity change from 0 to 2048 [ 158.939314][ T6623] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 159.189220][ T5807] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 159.263361][ T6625] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.324890][ T6623] bio_check_eod: 882 callbacks suppressed [ 159.324911][ T6623] syz.2.109: attempt to access beyond end of device [ 159.324911][ T6623] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 159.766473][ T6623] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 16777227 [ 159.766529][ T6623] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=16) [ 159.829817][ T6623] Remounting filesystem read-only [ 159.829848][ T6623] NILFS (loop2): error -5 truncating bmap (ino=16) [ 160.082344][ T5815] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 160.592975][ T6628] loop4: detected capacity change from 0 to 40427 [ 160.673569][ T6628] F2FS-fs (loop4): invalid crc value [ 160.740092][ T5804] Bluetooth: hci1: command tx timeout [ 161.066955][ T6628] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 161.067690][ T6628] F2FS-fs (loop4): Start checkpoint disabled! [ 161.069068][ T6628] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 161.072623][ T6628] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 161.145906][ T37] audit: type=1800 audit(1762031383.088:18): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.110" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 161.173780][ T6628] syz.4.110: attempt to access beyond end of device [ 161.173780][ T6628] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 161.179065][ T6628] syz.4.110: attempt to access beyond end of device [ 161.179065][ T6628] loop4: rw=2049, sector=45224, nr_sectors = 128 limit=40427 [ 161.189426][ T6628] syz.4.110: attempt to access beyond end of device [ 161.189426][ T6628] loop4: rw=2049, sector=45352, nr_sectors = 128 limit=40427 [ 161.249417][ T6628] syz.4.110: attempt to access beyond end of device [ 161.249417][ T6628] loop4: rw=2049, sector=45480, nr_sectors = 128 limit=40427 [ 161.266414][ T6628] syz.4.110: attempt to access beyond end of device [ 161.266414][ T6628] loop4: rw=2049, sector=45608, nr_sectors = 128 limit=40427 [ 161.311669][ T6628] syz.4.110: attempt to access beyond end of device [ 161.311669][ T6628] loop4: rw=2049, sector=45736, nr_sectors = 128 limit=40427 [ 161.316617][ T6628] syz.4.110: attempt to access beyond end of device [ 161.316617][ T6628] loop4: rw=2049, sector=45864, nr_sectors = 128 limit=40427 [ 161.318936][ T6628] syz.4.110: attempt to access beyond end of device [ 161.318936][ T6628] loop4: rw=2049, sector=45992, nr_sectors = 128 limit=40427 [ 161.381550][ T6628] syz.4.110: attempt to access beyond end of device [ 161.381550][ T6628] loop4: rw=2049, sector=46120, nr_sectors = 128 limit=40427 [ 161.488724][ T6633] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 161.519060][ T6630] loop2: detected capacity change from 0 to 40427 [ 161.587822][ T6630] F2FS-fs (loop2): invalid crc value [ 161.950474][ T6630] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 161.951148][ T6630] F2FS-fs (loop2): Start checkpoint disabled! [ 161.981445][ T6630] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 161.981883][ T6630] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 162.043174][ T37] audit: type=1800 audit(1762031383.988:19): pid=6630 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.111" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 162.190413][ T1202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.296619][ T1202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.364359][ T1202] bond0 (unregistering): Released all slaves [ 162.482415][ T6636] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 162.994299][ T6640] loop4: detected capacity change from 0 to 256 [ 163.038687][ T6640] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 163.164516][ T6640] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 163.688352][ T6530] chnl_net:caif_netlink_parms(): no params data found [ 164.267242][ T6640] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 164.507321][ T6642] loop2: detected capacity change from 0 to 32768 [ 164.596838][ T6642] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 164.677563][ T6642] XFS (loop2): Ending clean mount [ 164.689287][ T6642] XFS (loop2): Quotacheck needed: Please wait. [ 164.927982][ T6642] XFS (loop2): Quotacheck: Done. [ 165.001981][ T1202] hsr_slave_0: left promiscuous mode [ 165.040176][ T1202] hsr_slave_1: left promiscuous mode [ 165.042539][ T1202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.042564][ T1202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.080653][ T1202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.080688][ T1202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.214246][ T1202] veth1_macvtap: left promiscuous mode [ 165.214355][ T1202] veth0_macvtap: left promiscuous mode [ 165.214621][ T1202] veth1_vlan: left promiscuous mode [ 165.214811][ T1202] veth0_vlan: left promiscuous mode [ 165.568166][ T6657] loop4: detected capacity change from 0 to 32768 [ 165.595233][ T6657] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.114 (6657) [ 165.632935][ T6657] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 165.633010][ T6657] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 165.840074][ T6657] BTRFS info (device loop4): rebuilding free space tree [ 165.919990][ T6657] BTRFS info (device loop4): disabling free space tree [ 165.920073][ T6657] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 165.920098][ T6657] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 165.955822][ T6657] BTRFS info (device loop4): enabling ssd optimizations [ 165.955848][ T6657] BTRFS info (device loop4): turning on async discard [ 165.955864][ T6657] BTRFS info (device loop4): force clearing of disk cache [ 165.955880][ T6657] BTRFS info (device loop4): enabling auto defrag [ 165.955897][ T6657] BTRFS info (device loop4): max_inline set to 4096 [ 166.221579][ T37] audit: type=1800 audit(1762031388.168:20): pid=6674 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.114" name="file2" dev="loop4" ino=260 res=0 errno=0 [ 166.405743][ T5815] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 166.562314][ T5807] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 167.120722][ T6680] loop4: detected capacity change from 0 to 512 [ 167.154532][ T6680] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 167.154686][ T6680] System zones: 1-12 [ 167.156764][ T6680] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.117: Directory hole found for htree index block 0 [ 167.221566][ T6680] EXT4-fs (loop4): Remounting filesystem read-only [ 167.222234][ T6680] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 167.222789][ T6680] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 167.225430][ T6680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.432261][ T5807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.948031][ T6682] loop2: detected capacity change from 0 to 32768 [ 167.956221][ T6682] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.115 (6682) [ 168.011938][ T6682] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 168.012016][ T6682] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 168.241639][ T6682] BTRFS info (device loop2): enabling ssd optimizations [ 168.241667][ T6682] BTRFS info (device loop2): turning on async discard [ 168.241683][ T6682] BTRFS info (device loop2): enabling free space tree [ 168.241700][ T6682] BTRFS info (device loop2): enabling auto defrag [ 168.725370][ T6686] loop4: detected capacity change from 0 to 32768 [ 168.895313][ T6686] JBD2: Ignoring recovery information on journal [ 169.110203][ T6686] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 169.793978][ T5815] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 169.875609][ T5807] ocfs2: Unmounting device (7,4) on (node local) [ 170.900046][ T1202] team0 (unregistering): Port device team_slave_1 removed [ 171.052415][ T6711] loop4: detected capacity change from 0 to 32768 [ 171.067263][ T6711] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.120 (6711) [ 171.084590][ T6713] loop2: detected capacity change from 0 to 32768 [ 171.106699][ T6713] JBD2: Ignoring recovery information on journal [ 171.115170][ T6711] BTRFS info (device loop4 state S): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.115247][ T6711] BTRFS info (device loop4 state S): using sha256 (sha256-lib) checksum algorithm [ 171.115327][ T6711] BTRFS error (device loop4 state S): nologreplay must be used with ro mount option [ 171.115345][ T6711] BTRFS error (device loop4 state S): cannot disable free-space-tree [ 171.115361][ T6711] BTRFS warning (device loop4 state S): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 171.115817][ T6711] BTRFS error (device loop4 state S): open_ctree failed: -22 [ 171.310307][ T6713] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 171.460990][ T1202] team0 (unregistering): Port device team_slave_0 removed [ 171.970970][ T5815] ocfs2: Unmounting device (7,2) on (node local) [ 172.459434][ T6719] loop4: detected capacity change from 0 to 32768 [ 172.472349][ T6719] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.121 (6719) [ 172.490666][ T6719] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 172.490742][ T6719] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 172.806379][ T6719] BTRFS info (device loop4): enabling ssd optimizations [ 172.806405][ T6719] BTRFS info (device loop4): turning on async discard [ 172.806422][ T6719] BTRFS info (device loop4): enabling free space tree [ 172.806439][ T6719] BTRFS info (device loop4): enabling auto defrag [ 173.373029][ T6723] loop2: detected capacity change from 0 to 40427 [ 173.520964][ T6723] F2FS-fs (loop2): invalid crc value [ 173.529018][ T5807] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 173.936860][ T6723] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 173.959425][ T6723] F2FS-fs (loop2): Start checkpoint disabled! [ 173.984985][ T6723] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 173.999700][ T6723] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 174.053164][ T37] audit: type=1800 audit(1762031395.998:21): pid=6723 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.122" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 174.073464][ T6723] bio_check_eod: 29 callbacks suppressed [ 174.073486][ T6723] syz.2.122: attempt to access beyond end of device [ 174.073486][ T6723] loop2: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 174.077652][ T6723] syz.2.122: attempt to access beyond end of device [ 174.077652][ T6723] loop2: rw=2049, sector=45224, nr_sectors = 128 limit=40427 [ 174.149943][ T6723] syz.2.122: attempt to access beyond end of device [ 174.149943][ T6723] loop2: rw=2049, sector=45352, nr_sectors = 128 limit=40427 [ 174.177408][ T6723] syz.2.122: attempt to access beyond end of device [ 174.177408][ T6723] loop2: rw=2049, sector=45480, nr_sectors = 128 limit=40427 [ 174.209861][ T6723] syz.2.122: attempt to access beyond end of device [ 174.209861][ T6723] loop2: rw=2049, sector=45608, nr_sectors = 128 limit=40427 [ 174.224455][ T6723] syz.2.122: attempt to access beyond end of device [ 174.224455][ T6723] loop2: rw=2049, sector=45736, nr_sectors = 128 limit=40427 [ 174.275112][ T6723] syz.2.122: attempt to access beyond end of device [ 174.275112][ T6723] loop2: rw=2049, sector=45864, nr_sectors = 128 limit=40427 [ 174.277996][ T6723] syz.2.122: attempt to access beyond end of device [ 174.277996][ T6723] loop2: rw=2049, sector=45992, nr_sectors = 128 limit=40427 [ 174.311213][ T6723] syz.2.122: attempt to access beyond end of device [ 174.311213][ T6723] loop2: rw=2049, sector=46120, nr_sectors = 128 limit=40427 [ 174.313752][ T6723] syz.2.122: attempt to access beyond end of device [ 174.313752][ T6723] loop2: rw=2049, sector=46248, nr_sectors = 128 limit=40427 [ 174.464215][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 174.464245][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.464257][ T12] Workqueue: writeback wb_workfn (flush-7:2) [ 174.464285][ T12] Call Trace: [ 174.464293][ T12] [ 174.464301][ T12] dump_stack_lvl+0x189/0x250 [ 174.464328][ T12] ? reacquire_held_locks+0x127/0x1d0 [ 174.464354][ T12] ? rt_spin_lock+0x1c1/0x3e0 [ 174.464376][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.464402][ T12] ? __pfx_queue_work_on+0x10/0x10 [ 174.464429][ T12] ? rt_spin_unlock+0x150/0x200 [ 174.464454][ T12] ? rt_spin_unlock+0x161/0x200 [ 174.464484][ T12] f2fs_handle_critical_error+0x354/0x510 [ 174.464514][ T12] f2fs_write_end_io+0x886/0xb60 [ 174.464558][ T12] __submit_merged_bio+0x27a/0x6a0 [ 174.464589][ T12] __submit_merged_write_cond+0x255/0x530 [ 174.464621][ T12] f2fs_write_data_pages+0x261d/0x3000 [ 174.464683][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 174.464723][ T12] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 174.464780][ T12] ? rtlock_slowlock_locked+0xd8/0x4010 [ 174.464820][ T12] ? do_raw_spin_lock+0x121/0x290 [ 174.464864][ T12] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 174.464888][ T12] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 174.464919][ T12] ? __lock_acquire+0xab9/0xd20 [ 174.464942][ T12] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 174.464968][ T12] do_writepages+0x32e/0x550 [ 174.464990][ T12] ? rt_mutex_slowunlock+0x493/0x8a0 [ 174.465009][ T12] ? rt_spin_lock+0x1c1/0x3e0 [ 174.465042][ T12] __writeback_single_inode+0x145/0x1000 [ 174.465074][ T12] writeback_sb_inodes+0x6b7/0xf60 [ 174.465100][ T12] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 174.465146][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 174.465214][ T12] ? rcu_is_watching+0x15/0xb0 [ 174.465243][ T12] wb_writeback+0x43b/0xaf0 [ 174.465263][ T12] ? __lock_acquire+0xab9/0xd20 [ 174.465294][ T12] ? queue_io+0x351/0x560 [ 174.465319][ T12] ? __pfx_wb_writeback+0x10/0x10 [ 174.465363][ T12] wb_workfn+0x40e/0xf00 [ 174.465400][ T12] ? __pfx_wb_workfn+0x10/0x10 [ 174.465424][ T12] ? __lock_acquire+0xab9/0xd20 [ 174.465459][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 174.465499][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 174.465521][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 174.465541][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 174.465565][ T12] process_scheduled_works+0xae1/0x17b0 [ 174.465619][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 174.465661][ T12] worker_thread+0x8a0/0xda0 [ 174.465718][ T12] kthread+0x711/0x8a0 [ 174.465747][ T12] ? __pfx_worker_thread+0x10/0x10 [ 174.465769][ T12] ? __pfx_kthread+0x10/0x10 [ 174.465791][ T12] ? rt_spin_unlock+0x150/0x200 [ 174.465816][ T12] ? rt_spin_unlock+0x161/0x200 [ 174.465833][ T12] ? __pfx_kthread+0x10/0x10 [ 174.465860][ T12] ret_from_fork+0x4bc/0x870 [ 174.465885][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 174.465915][ T12] ? __switch_to_asm+0x39/0x70 [ 174.465932][ T12] ? __switch_to_asm+0x33/0x70 [ 174.465949][ T12] ? __pfx_kthread+0x10/0x10 [ 174.465975][ T12] ret_from_fork_asm+0x1a/0x30 [ 174.466014][ T12] [ 174.466022][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 174.900810][ T6744] loop4: detected capacity change from 0 to 32768 [ 174.918613][ T6744] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.123 (6744) [ 174.980077][ T6744] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 174.980151][ T6744] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 175.128479][ T6744] BTRFS info (device loop4): enabling ssd optimizations [ 175.128506][ T6744] BTRFS info (device loop4): turning on async discard [ 175.128522][ T6744] BTRFS info (device loop4): enabling free space tree [ 175.128539][ T6744] BTRFS info (device loop4): enabling auto defrag [ 176.245893][ T5807] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 176.603655][ T6768] loop4: detected capacity change from 0 to 64 [ 176.739963][ T6768] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 176.823872][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 176.832574][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 176.835443][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 176.861643][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 176.865648][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 177.051988][ T6765] loop2: detected capacity change from 0 to 40427 [ 177.103770][ T6765] F2FS-fs (loop2): invalid crc value [ 177.505568][ T6765] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 177.611671][ T6765] F2FS-fs (loop2): Start checkpoint disabled! [ 177.620215][ T6765] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 177.639784][ T6765] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 177.727634][ T37] audit: type=1800 audit(1762031399.668:22): pid=6765 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.124" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 178.164608][ T6530] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.164721][ T6530] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.164895][ T6530] bridge_slave_0: entered allmulticast mode [ 178.216862][ T6530] bridge_slave_0: entered promiscuous mode [ 178.259829][ T6530] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.259974][ T6530] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.260202][ T6530] bridge_slave_1: entered allmulticast mode [ 178.283943][ T6530] bridge_slave_1: entered promiscuous mode [ 178.496855][ T6776] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 178.889589][ T6237] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 178.982525][ T5804] Bluetooth: hci6: command tx timeout [ 179.026315][ T6530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.321698][ T6778] loop4: detected capacity change from 0 to 32768 [ 179.426194][ T6778] JBD2: Ignoring recovery information on journal [ 179.581874][ T6778] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 179.719682][ T6237] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 179.783007][ T6530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.803583][ T6237] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 180.158256][ T6237] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 180.187209][ T5807] ocfs2: Unmounting device (7,4) on (node local) [ 180.536287][ T6530] team0: Port device team_slave_0 added [ 180.584367][ T6530] team0: Port device team_slave_1 added [ 181.002066][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.002083][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.002108][ T6530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.059938][ T5804] Bluetooth: hci6: command tx timeout [ 181.097949][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.097965][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.097990][ T6530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.171758][ T6798] loop2: detected capacity change from 0 to 32768 [ 181.200835][ T6798] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.128 (6798) [ 181.254386][ T6798] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 181.254467][ T6798] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 181.254542][ T6798] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 181.420232][ T6805] loop4: detected capacity change from 0 to 32768 [ 181.485696][ T6805] JBD2: Ignoring recovery information on journal [ 181.563612][ T6798] BTRFS info (device loop2): rebuilding free space tree [ 181.675555][ T6798] BTRFS info (device loop2): disabling free space tree [ 181.675633][ T6798] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 181.675658][ T6798] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 181.693964][ T6805] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 181.721343][ T6798] BTRFS info (device loop2): enabling ssd optimizations [ 181.721369][ T6798] BTRFS info (device loop2): enabling disk space caching [ 181.721386][ T6798] BTRFS info (device loop2): force clearing of disk cache [ 181.721402][ T6798] BTRFS info (device loop2): enabling auto defrag [ 181.721420][ T6798] BTRFS info (device loop2): max_inline set to 0 [ 182.068821][ T6530] hsr_slave_0: entered promiscuous mode [ 182.074989][ T6530] hsr_slave_1: entered promiscuous mode [ 182.075961][ T6530] debugfs: 'hsr0' already exists in 'hsr' [ 182.075984][ T6530] Cannot create hsr debugfs directory [ 182.180486][ T6805] (syz.4.129,6805,0):ocfs2_dio_end_io:2401 ERROR: Direct IO failed, bytes = 0 [ 182.365606][ T58] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 182.503760][ T5807] ocfs2: Unmounting device (7,4) on (node local) [ 182.921803][ T5815] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 183.140077][ T5804] Bluetooth: hci6: command tx timeout [ 184.121332][ T6832] loop4: detected capacity change from 0 to 40427 [ 184.178496][ T6832] F2FS-fs (loop4): invalid crc value [ 184.547749][ T6769] chnl_net:caif_netlink_parms(): no params data found [ 184.617037][ T6834] loop2: detected capacity change from 0 to 40427 [ 184.644011][ T6832] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 184.677417][ T6832] F2FS-fs (loop4): Start checkpoint disabled! [ 184.707372][ T6832] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 184.708372][ T6834] F2FS-fs (loop2): invalid crc value [ 184.708892][ T6832] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 184.858827][ T37] audit: type=1800 audit(1762031406.798:23): pid=6832 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.130" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 184.908012][ T6832] bio_check_eod: 20 callbacks suppressed [ 184.908033][ T6832] syz.4.130: attempt to access beyond end of device [ 184.908033][ T6832] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 184.938021][ T6832] syz.4.130: attempt to access beyond end of device [ 184.938021][ T6832] loop4: rw=2049, sector=45224, nr_sectors = 128 limit=40427 [ 184.962797][ T6832] syz.4.130: attempt to access beyond end of device [ 184.962797][ T6832] loop4: rw=2049, sector=45352, nr_sectors = 128 limit=40427 [ 184.965597][ T6832] syz.4.130: attempt to access beyond end of device [ 184.965597][ T6832] loop4: rw=2049, sector=45480, nr_sectors = 128 limit=40427 [ 185.021667][ T6832] syz.4.130: attempt to access beyond end of device [ 185.021667][ T6832] loop4: rw=2049, sector=45608, nr_sectors = 128 limit=40427 [ 185.025361][ T6832] syz.4.130: attempt to access beyond end of device [ 185.025361][ T6832] loop4: rw=2049, sector=45736, nr_sectors = 128 limit=40427 [ 185.117570][ T6832] syz.4.130: attempt to access beyond end of device [ 185.117570][ T6832] loop4: rw=2049, sector=45864, nr_sectors = 128 limit=40427 [ 185.135751][ T6832] syz.4.130: attempt to access beyond end of device [ 185.135751][ T6832] loop4: rw=2049, sector=45992, nr_sectors = 128 limit=40427 [ 185.161839][ T6832] syz.4.130: attempt to access beyond end of device [ 185.161839][ T6832] loop4: rw=2049, sector=46120, nr_sectors = 128 limit=40427 [ 185.164823][ T6832] syz.4.130: attempt to access beyond end of device [ 185.164823][ T6832] loop4: rw=2049, sector=46248, nr_sectors = 128 limit=40427 [ 185.219655][ T5804] Bluetooth: hci6: command tx timeout [ 185.353555][ T6834] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 185.387321][ T6834] F2FS-fs (loop2): Start checkpoint disabled! [ 185.420247][ T6834] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 185.426962][ T6834] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 185.467585][ T6851] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 185.534470][ T37] audit: type=1800 audit(1762031407.478:24): pid=6834 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.131" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 186.140894][ T6857] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 186.344237][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 186.348049][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 186.349357][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 186.357316][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 186.365628][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.104483][ T6870] loop4: detected capacity change from 0 to 256 [ 187.113842][ T6870] exfat: Deprecated parameter 'utf8' [ 187.113979][ T6870] exfat: Deprecated parameter 'namecase' [ 187.165508][ T6870] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 187.324255][ T6769] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.324389][ T6769] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.324590][ T6769] bridge_slave_0: entered allmulticast mode [ 187.328895][ T6769] bridge_slave_0: entered promiscuous mode [ 187.541483][ T6769] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.541684][ T6769] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.541914][ T6769] bridge_slave_1: entered allmulticast mode [ 187.544722][ T6769] bridge_slave_1: entered promiscuous mode [ 188.012370][ T6769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.113073][ T6769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.343308][ T1202] bridge_slave_1: left allmulticast mode [ 188.343336][ T1202] bridge_slave_1: left promiscuous mode [ 188.343609][ T1202] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.377133][ T6875] loop2: detected capacity change from 0 to 32768 [ 188.402123][ T1202] bridge_slave_0: left allmulticast mode [ 188.402157][ T1202] bridge_slave_0: left promiscuous mode [ 188.402414][ T1202] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.476430][ T6875] JBD2: Ignoring recovery information on journal [ 188.510345][ T61] Bluetooth: hci3: command tx timeout [ 188.591063][ T6875] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 188.760754][ T6873] loop4: detected capacity change from 0 to 40427 [ 188.827737][ T6873] F2FS-fs (loop4): invalid crc value [ 189.290924][ T6873] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 189.292674][ T5815] ocfs2: Unmounting device (7,2) on (node local) [ 189.322668][ T6873] F2FS-fs (loop4): Start checkpoint disabled! [ 189.324174][ T6873] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 189.324742][ T6873] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 189.393412][ T37] audit: type=1800 audit(1762031411.338:25): pid=6873 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.134" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 189.732387][ T6883] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 189.798774][ T1202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.910461][ T1202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.009018][ T1202] bond0 (unregistering): Released all slaves [ 190.187909][ T6885] loop2: detected capacity change from 0 to 32768 [ 190.235215][ T6885] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.135 (6885) [ 190.298799][ T6885] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 190.298879][ T6885] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 190.298954][ T6885] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 190.424015][ T6769] team0: Port device team_slave_0 added [ 190.467577][ T6769] team0: Port device team_slave_1 added [ 190.523003][ T6885] BTRFS info (device loop2): rebuilding free space tree [ 190.579994][ T61] Bluetooth: hci3: command tx timeout [ 190.633092][ T6885] BTRFS info (device loop2): disabling free space tree [ 190.633178][ T6885] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 190.633206][ T6885] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 190.688010][ T6885] BTRFS info (device loop2): enabling ssd optimizations [ 190.688035][ T6885] BTRFS info (device loop2): enabling disk space caching [ 190.688050][ T6885] BTRFS info (device loop2): force clearing of disk cache [ 190.688065][ T6885] BTRFS info (device loop2): enabling auto defrag [ 190.688081][ T6885] BTRFS info (device loop2): max_inline set to 0 [ 191.026216][ T1202] hsr_slave_0: left promiscuous mode [ 191.071996][ T1202] hsr_slave_1: left promiscuous mode [ 191.081352][ T1202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.120626][ T1202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.236130][ T87] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 191.476573][ T6903] loop4: detected capacity change from 0 to 32768 [ 191.531711][ T6903] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.136 (6903) [ 191.562802][ T6903] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 191.562885][ T6903] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 191.777400][ T5815] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 191.851669][ T6903] BTRFS info (device loop4): enabling ssd optimizations [ 191.851694][ T6903] BTRFS info (device loop4): turning on async discard [ 191.851710][ T6903] BTRFS info (device loop4): enabling free space tree [ 191.851726][ T6903] BTRFS info (device loop4): enabling auto defrag [ 192.659848][ T61] Bluetooth: hci3: command tx timeout [ 192.955484][ T1202] team0 (unregistering): Port device team_slave_1 removed [ 193.098130][ T5807] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 193.355240][ T1202] team0 (unregistering): Port device team_slave_0 removed [ 193.489901][ T6927] loop2: detected capacity change from 0 to 32768 [ 193.534197][ T6927] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.137 (6927) [ 193.554598][ T6927] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 193.554678][ T6927] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 193.761060][ T6927] BTRFS info (device loop2): enabling ssd optimizations [ 193.761087][ T6927] BTRFS info (device loop2): turning on async discard [ 193.761108][ T6927] BTRFS info (device loop2): enabling free space tree [ 193.761125][ T6927] BTRFS info (device loop2): enabling auto defrag [ 194.381121][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.381193][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.529306][ T6945] loop4: detected capacity change from 0 to 32768 [ 194.711587][ T6945] JBD2: Ignoring recovery information on journal [ 194.739658][ T61] Bluetooth: hci3: command tx timeout [ 194.860353][ T5815] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 194.864225][ T6945] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 195.363441][ T5807] ocfs2: Unmounting device (7,4) on (node local) [ 195.419788][ T6530] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 195.683134][ T6530] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 195.794924][ T6769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.794939][ T6769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.794964][ T6769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.797646][ T6530] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 195.928852][ T6769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.928867][ T6769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.928894][ T6769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.045238][ T6530] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 196.589491][ T6769] hsr_slave_0: entered promiscuous mode [ 196.590939][ T6769] hsr_slave_1: entered promiscuous mode [ 196.591913][ T6769] debugfs: 'hsr0' already exists in 'hsr' [ 196.591937][ T6769] Cannot create hsr debugfs directory [ 196.741226][ T6957] loop4: detected capacity change from 0 to 32768 [ 196.794586][ T6957] (syz.4.140,6957,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 196.794905][ T6957] (syz.4.140,6957,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 196.854261][ T6957] JBD2: Ignoring recovery information on journal [ 196.894006][ T6955] loop2: detected capacity change from 0 to 40427 [ 196.959072][ T6955] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 196.959100][ T6955] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 197.090458][ T6957] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 197.214725][ T6957] (syz.4.140,6957,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 197.329799][ T6957] (syz.4.140,6957,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 197.445609][ T6955] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 197.482632][ T6955] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 197.482664][ T6955] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 198.405341][ T5807] ocfs2: Unmounting device (7,4) on (node local) [ 198.640447][ T6864] chnl_net:caif_netlink_parms(): no params data found [ 199.855002][ T6988] loop4: detected capacity change from 0 to 40427 [ 199.907056][ T6988] F2FS-fs (loop4): invalid crc value [ 200.257806][ T6988] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 200.258563][ T6988] F2FS-fs (loop4): Start checkpoint disabled! [ 200.278425][ T6988] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 200.287136][ T6988] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 200.397235][ T37] audit: type=1800 audit(1762031422.338:26): pid=6988 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.141" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 200.404527][ T6988] bio_check_eod: 84 callbacks suppressed [ 200.404546][ T6988] syz.4.141: attempt to access beyond end of device [ 200.404546][ T6988] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 200.408611][ T6988] syz.4.141: attempt to access beyond end of device [ 200.408611][ T6988] loop4: rw=2049, sector=45224, nr_sectors = 128 limit=40427 [ 200.429439][ T6988] syz.4.141: attempt to access beyond end of device [ 200.429439][ T6988] loop4: rw=2049, sector=45352, nr_sectors = 128 limit=40427 [ 200.443832][ T6988] syz.4.141: attempt to access beyond end of device [ 200.443832][ T6988] loop4: rw=2049, sector=45480, nr_sectors = 128 limit=40427 [ 200.448041][ T6988] syz.4.141: attempt to access beyond end of device [ 200.448041][ T6988] loop4: rw=2049, sector=45608, nr_sectors = 128 limit=40427 [ 200.461056][ T6988] syz.4.141: attempt to access beyond end of device [ 200.461056][ T6988] loop4: rw=2049, sector=45736, nr_sectors = 128 limit=40427 [ 200.465317][ T6988] syz.4.141: attempt to access beyond end of device [ 200.465317][ T6988] loop4: rw=2049, sector=45864, nr_sectors = 128 limit=40427 [ 200.467884][ T6988] syz.4.141: attempt to access beyond end of device [ 200.467884][ T6988] loop4: rw=2049, sector=45992, nr_sectors = 128 limit=40427 [ 200.505303][ T6988] syz.4.141: attempt to access beyond end of device [ 200.505303][ T6988] loop4: rw=2049, sector=46120, nr_sectors = 128 limit=40427 [ 200.507897][ T6988] syz.4.141: attempt to access beyond end of device [ 200.507897][ T6988] loop4: rw=2049, sector=46248, nr_sectors = 128 limit=40427 [ 201.231224][ T6996] loop2: detected capacity change from 0 to 32768 [ 201.266394][ T6996] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.142 (6996) [ 201.283496][ T6996] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 201.283572][ T6996] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 201.472906][ T6996] BTRFS info (device loop2): enabling ssd optimizations [ 201.472934][ T6996] BTRFS info (device loop2): turning on async discard [ 201.472952][ T6996] BTRFS info (device loop2): enabling free space tree [ 201.472969][ T6996] BTRFS info (device loop2): enabling auto defrag [ 201.599074][ T3886] CPU: 1 UID: 0 PID: 3886 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 201.599104][ T3886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 201.599116][ T3886] Workqueue: writeback wb_workfn (flush-7:4) [ 201.599145][ T3886] Call Trace: [ 201.599153][ T3886] [ 201.599162][ T3886] dump_stack_lvl+0x189/0x250 [ 201.599190][ T3886] ? reacquire_held_locks+0x127/0x1d0 [ 201.599216][ T3886] ? rt_spin_lock+0x1c1/0x3e0 [ 201.599237][ T3886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.599263][ T3886] ? __pfx_queue_work_on+0x10/0x10 [ 201.599289][ T3886] ? rt_spin_unlock+0x150/0x200 [ 201.599315][ T3886] ? rt_spin_unlock+0x161/0x200 [ 201.599338][ T3886] f2fs_handle_critical_error+0x354/0x510 [ 201.599367][ T3886] f2fs_write_end_io+0x886/0xb60 [ 201.599411][ T3886] __submit_merged_bio+0x27a/0x6a0 [ 201.599442][ T3886] __submit_merged_write_cond+0x255/0x530 [ 201.599475][ T3886] f2fs_write_data_pages+0x261d/0x3000 [ 201.599539][ T3886] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 201.599627][ T3886] ? rtlock_slowlock_locked+0xd8/0x4010 [ 201.599672][ T3886] ? do_raw_spin_lock+0x121/0x290 [ 201.599716][ T3886] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 201.599742][ T3886] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 201.599766][ T3886] ? __lock_acquire+0xab9/0xd20 [ 201.599790][ T3886] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 201.599818][ T3886] do_writepages+0x32e/0x550 [ 201.599842][ T3886] ? rt_mutex_slowunlock+0x493/0x8a0 [ 201.599861][ T3886] ? rt_spin_lock+0x1c1/0x3e0 [ 201.599898][ T3886] __writeback_single_inode+0x145/0x1000 [ 201.599933][ T3886] writeback_sb_inodes+0x6b7/0xf60 [ 201.599990][ T3886] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 201.600074][ T3886] ? rcu_is_watching+0x15/0xb0 [ 201.600106][ T3886] wb_writeback+0x43b/0xaf0 [ 201.600126][ T3886] ? __lock_acquire+0xab9/0xd20 [ 201.600159][ T3886] ? queue_io+0x351/0x560 [ 201.600186][ T3886] ? __pfx_wb_writeback+0x10/0x10 [ 201.600231][ T3886] wb_workfn+0x40e/0xf00 [ 201.600272][ T3886] ? __pfx_wb_workfn+0x10/0x10 [ 201.600298][ T3886] ? __lock_acquire+0xab9/0xd20 [ 201.600336][ T3886] ? process_scheduled_works+0x9ef/0x17b0 [ 201.600367][ T3886] ? _raw_spin_unlock_irq+0x23/0x50 [ 201.600390][ T3886] ? process_scheduled_works+0x9ef/0x17b0 [ 201.600411][ T3886] ? process_scheduled_works+0x9ef/0x17b0 [ 201.600436][ T3886] process_scheduled_works+0xae1/0x17b0 [ 201.600498][ T3886] ? __pfx_process_scheduled_works+0x10/0x10 [ 201.600545][ T3886] worker_thread+0x8a0/0xda0 [ 201.600571][ T3886] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 201.600607][ T3886] ? __kthread_parkme+0x7b/0x200 [ 201.600645][ T3886] kthread+0x711/0x8a0 [ 201.600675][ T3886] ? __pfx_worker_thread+0x10/0x10 [ 201.600697][ T3886] ? __pfx_kthread+0x10/0x10 [ 201.600720][ T3886] ? rt_spin_unlock+0x150/0x200 [ 201.600747][ T3886] ? rt_spin_unlock+0x161/0x200 [ 201.600764][ T3886] ? __pfx_kthread+0x10/0x10 [ 201.600792][ T3886] ret_from_fork+0x4bc/0x870 [ 201.600818][ T3886] ? __pfx_ret_from_fork+0x10/0x10 [ 201.600851][ T3886] ? __switch_to_asm+0x39/0x70 [ 201.600869][ T3886] ? __switch_to_asm+0x33/0x70 [ 201.600886][ T3886] ? __pfx_kthread+0x10/0x10 [ 201.600914][ T3886] ret_from_fork_asm+0x1a/0x30 [ 201.600957][ T3886] [ 201.619358][ T3886] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 201.697314][ T6864] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.697446][ T6864] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.697685][ T6864] bridge_slave_0: entered allmulticast mode [ 201.721765][ T6864] bridge_slave_0: entered promiscuous mode [ 202.019851][ T6864] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.019981][ T6864] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.020217][ T6864] bridge_slave_1: entered allmulticast mode [ 202.039834][ T6864] bridge_slave_1: entered promiscuous mode [ 202.393767][ T5815] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 202.620300][ T6864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.638975][ T6864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.404275][ T6864] team0: Port device team_slave_0 added [ 203.582083][ T6864] team0: Port device team_slave_1 added [ 203.961215][ T7020] loop2: detected capacity change from 0 to 40427 [ 203.987396][ T7020] F2FS-fs (loop2): invalid crc value [ 204.059947][ T7022] loop4: detected capacity change from 0 to 32768 [ 204.080543][ T7022] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.143 (7022) [ 204.108096][ T7022] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 204.108175][ T7022] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 204.171315][ T6864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.171333][ T6864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.171358][ T6864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.434081][ T6864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.434097][ T6864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.434119][ T6864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.491341][ T7022] BTRFS info (device loop4): enabling ssd optimizations [ 204.491369][ T7022] BTRFS info (device loop4): turning on async discard [ 204.491386][ T7022] BTRFS info (device loop4): enabling free space tree [ 204.491403][ T7022] BTRFS info (device loop4): enabling auto defrag [ 204.519096][ T6530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.531406][ T7020] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 204.537549][ T7020] F2FS-fs (loop2): Start checkpoint disabled! [ 204.549810][ T7020] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 204.550533][ T7020] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 204.631432][ T1202] bridge_slave_1: left allmulticast mode [ 204.631460][ T1202] bridge_slave_1: left promiscuous mode [ 204.631721][ T1202] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.689792][ T37] audit: type=1800 audit(1762031426.628:27): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.144" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 204.741077][ T1202] bridge_slave_0: left allmulticast mode [ 204.741105][ T1202] bridge_slave_0: left promiscuous mode [ 204.741362][ T1202] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.480151][ T7020] bio_check_eod: 102 callbacks suppressed [ 205.480171][ T7020] syz.2.144: attempt to access beyond end of device [ 205.480171][ T7020] loop2: rw=2049, sector=78208, nr_sectors = 128 limit=40427 [ 205.482978][ T7020] syz.2.144: attempt to access beyond end of device [ 205.482978][ T7020] loop2: rw=2049, sector=78336, nr_sectors = 128 limit=40427 [ 205.487183][ T7020] syz.2.144: attempt to access beyond end of device [ 205.487183][ T7020] loop2: rw=2049, sector=78464, nr_sectors = 128 limit=40427 [ 205.554026][ T7020] syz.2.144: attempt to access beyond end of device [ 205.554026][ T7020] loop2: rw=2049, sector=78592, nr_sectors = 128 limit=40427 [ 205.581868][ T7042] syz.2.144: attempt to access beyond end of device [ 205.581868][ T7042] loop2: rw=2049, sector=78720, nr_sectors = 64 limit=40427 [ 205.582077][ T7042] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 205.863549][ T5807] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 206.160317][ T1202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.308831][ T1202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.392868][ T1202] bond0 (unregistering): Released all slaves [ 206.539640][ T6769] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 206.761936][ T6769] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 207.001454][ T6769] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 207.077813][ T7047] loop4: detected capacity change from 0 to 32768 [ 207.096446][ T7047] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.145 (7047) [ 207.184235][ T6864] hsr_slave_0: entered promiscuous mode [ 207.185794][ T6864] hsr_slave_1: entered promiscuous mode [ 207.186759][ T6864] debugfs: 'hsr0' already exists in 'hsr' [ 207.186782][ T6864] Cannot create hsr debugfs directory [ 207.188459][ T7047] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 207.188531][ T7047] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 207.203782][ T6769] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 207.449684][ T1202] hsr_slave_0: left promiscuous mode [ 207.503272][ T7047] BTRFS info (device loop4): enabling ssd optimizations [ 207.503299][ T7047] BTRFS info (device loop4): turning on async discard [ 207.503316][ T7047] BTRFS info (device loop4): enabling free space tree [ 207.503333][ T7047] BTRFS info (device loop4): enabling auto defrag [ 207.536642][ T1202] hsr_slave_1: left promiscuous mode [ 207.537657][ T1202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.580561][ T1202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.331356][ T7049] loop2: detected capacity change from 0 to 40427 [ 208.347799][ T7049] F2FS-fs (loop2): build fault injection rate: 174 [ 208.347822][ T7049] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 208.379035][ T7049] F2FS-fs (loop2): invalid crc value [ 208.597450][ T7049] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 208.623587][ T7049] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 208.713453][ T5807] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 208.764026][ T7049] syz.2.146: attempt to access beyond end of device [ 208.764026][ T7049] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 208.766383][ T7049] CPU: 1 UID: 0 PID: 7049 Comm: syz.2.146 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 208.766416][ T7049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 208.766430][ T7049] Call Trace: [ 208.766440][ T7049] [ 208.766451][ T7049] dump_stack_lvl+0x189/0x250 [ 208.766486][ T7049] ? reacquire_held_locks+0x127/0x1d0 [ 208.766521][ T7049] ? rt_spin_lock+0x1c1/0x3e0 [ 208.766546][ T7049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.766578][ T7049] ? __pfx_queue_work_on+0x10/0x10 [ 208.766612][ T7049] ? rt_spin_unlock+0x150/0x200 [ 208.766642][ T7049] ? rt_spin_unlock+0x161/0x200 [ 208.766670][ T7049] f2fs_handle_critical_error+0x354/0x510 [ 208.766707][ T7049] f2fs_write_end_io+0x886/0xb60 [ 208.766763][ T7049] __submit_merged_bio+0x27a/0x6a0 [ 208.766800][ T7049] __submit_merged_write_cond+0x255/0x530 [ 208.766839][ T7049] f2fs_write_data_pages+0x261d/0x3000 [ 208.766870][ T7049] ? check_path+0x21/0x40 [ 208.766933][ T7049] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 208.767035][ T7049] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 208.767064][ T7049] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.767118][ T7049] ? rt_mutex_slowunlock+0x493/0x8a0 [ 208.767140][ T7049] ? reacquire_held_locks+0x127/0x1d0 [ 208.767181][ T7049] ? rt_spin_lock+0x1c1/0x3e0 [ 208.767218][ T7049] ? rt_spin_unlock+0x150/0x200 [ 208.767248][ T7049] ? rt_spin_unlock+0x161/0x200 [ 208.767270][ T7049] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 208.767302][ T7049] do_writepages+0x32e/0x550 [ 208.767329][ T7049] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 208.767357][ T7049] ? rt_spin_unlock+0x150/0x200 [ 208.767395][ T7049] filemap_fdatawrite+0x19c/0x240 [ 208.767422][ T7049] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 208.767501][ T7049] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 208.767537][ T7049] ? rt_spin_unlock+0x161/0x200 [ 208.767565][ T7049] f2fs_sync_dirty_inodes+0x31f/0x830 [ 208.767619][ T7049] f2fs_write_checkpoint+0x93e/0x2440 [ 208.767694][ T7049] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 208.767782][ T7049] ? rwbase_write_lock+0x56f/0x750 [ 208.767830][ T7049] f2fs_issue_checkpoint+0x3b8/0x610 [ 208.767868][ T7049] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 208.767899][ T7049] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 208.767928][ T7049] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.767959][ T7049] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 208.767988][ T7049] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 208.768020][ T7049] ? __lock_acquire+0xab9/0xd20 [ 208.768071][ T7049] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 208.768124][ T7049] ? f2fs_sync_fs+0x200/0x3d0 [ 208.768162][ T7049] f2fs_do_sync_file+0x86c/0x1860 [ 208.768208][ T7049] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 208.768295][ T7049] ? rwbase_write_lock+0x56f/0x750 [ 208.768330][ T7049] ? sb_start_write+0x114/0x1c0 [ 208.768362][ T7049] __f2fs_ioctl+0x48e7/0xb650 [ 208.768382][ T7049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.768428][ T7049] ? file_ioctl+0x233/0x780 [ 208.768457][ T7049] ? __pfx_file_ioctl+0x10/0x10 [ 208.768504][ T7049] ? kasan_quarantine_put+0xdd/0x220 [ 208.768532][ T7049] ? __pfx___f2fs_ioctl+0x10/0x10 [ 208.768563][ T7049] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 208.768605][ T7049] ? do_vfs_ioctl+0xb36/0x1440 [ 208.768628][ T7049] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 208.768663][ T7049] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 208.768722][ T7049] ? __asan_memset+0x22/0x50 [ 208.768746][ T7049] ? smack_file_ioctl+0x24d/0x340 [ 208.768781][ T7049] ? __pfx_smack_file_ioctl+0x10/0x10 [ 208.768828][ T7049] ? __fget_files+0x3a6/0x420 [ 208.768856][ T7049] ? __fget_files+0x2a/0x420 [ 208.768890][ T7049] ? f2fs_ioctl+0x138/0x250 [ 208.768910][ T7049] ? __pfx_f2fs_ioctl+0x10/0x10 [ 208.768931][ T7049] __se_sys_ioctl+0xff/0x170 [ 208.768959][ T7049] do_syscall_64+0xfa/0xfa0 [ 208.768987][ T7049] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.769014][ T7049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.769036][ T7049] ? clear_bhb_loop+0x60/0xb0 [ 208.769064][ T7049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.769085][ T7049] RIP: 0033:0x7f7ea16eefc9 [ 208.769106][ T7049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.769125][ T7049] RSP: 002b:00007f7e9f956038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.769149][ T7049] RAX: ffffffffffffffda RBX: 00007f7ea1945fa0 RCX: 00007f7ea16eefc9 [ 208.769171][ T7049] RDX: 0000000000000000 RSI: 000000000000f502 RDI: 0000000000000005 [ 208.769186][ T7049] RBP: 00007f7ea1771f91 R08: 0000000000000000 R09: 0000000000000000 [ 208.769200][ T7049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.769213][ T7049] R13: 00007f7ea1946038 R14: 00007f7ea1945fa0 R15: 00007ffe3f408498 [ 208.769256][ T7049] [ 208.769265][ T7049] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 209.570372][ T1202] team0 (unregistering): Port device team_slave_1 removed [ 209.906496][ T1202] team0 (unregistering): Port device team_slave_0 removed [ 210.252276][ T7072] loop4: detected capacity change from 0 to 32768 [ 210.256030][ T7072] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.147 (7072) [ 210.295099][ T7072] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 210.295177][ T7072] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 210.602801][ T7072] BTRFS info (device loop4): enabling ssd optimizations [ 210.602827][ T7072] BTRFS info (device loop4): turning on async discard [ 210.602845][ T7072] BTRFS info (device loop4): enabling free space tree [ 210.602861][ T7072] BTRFS info (device loop4): enabling auto defrag [ 211.415573][ T5807] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 211.588977][ T7076] loop2: detected capacity change from 0 to 32768 [ 211.645090][ T7076] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 74e06bd0-7496-4b97-b7f1-404342e40692 [ 211.645161][ T7076] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.148 (7076) [ 211.675337][ T7076] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 211.675418][ T7076] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 211.783383][ T7073] Bluetooth: hci0: command 0x0406 tx timeout [ 211.786989][ T7073] Bluetooth: hci2: command 0x0406 tx timeout [ 211.787022][ T7073] Bluetooth: hci4: command 0x0406 tx timeout [ 211.977422][ T7110] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.002094][ T5804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.009133][ T5804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.013369][ T7076] BTRFS info (device loop2): enabling ssd optimizations [ 212.013394][ T7076] BTRFS info (device loop2): turning on async discard [ 212.013411][ T7076] BTRFS info (device loop2): enabling free space tree [ 212.013428][ T7076] BTRFS info (device loop2): enabling auto defrag [ 212.040336][ T5804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.041743][ T5804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 213.503293][ T7117] loop4: detected capacity change from 0 to 32768 [ 213.505434][ T7117] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.149 (7117) [ 213.563865][ T7117] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 213.564927][ T7117] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 213.583607][ T5815] BTRFS info (device loop2): last unmount of filesystem 74e06bd0-7496-4b97-b7f1-404342e40692 [ 214.081240][ T7117] BTRFS info (device loop4): enabling ssd optimizations [ 214.081266][ T7117] BTRFS info (device loop4): turning on async discard [ 214.081284][ T7117] BTRFS info (device loop4): enabling free space tree [ 214.081301][ T7117] BTRFS info (device loop4): enabling auto defrag [ 214.099918][ T5809] Bluetooth: hci5: command tx timeout [ 215.402212][ T7142] loop2: detected capacity change from 0 to 32768 [ 215.552495][ T7142] JBD2: Ignoring recovery information on journal [ 215.592598][ T5807] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 215.636452][ T7142] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 216.181856][ T5809] Bluetooth: hci5: command tx timeout [ 216.450933][ T7142] (syz.2.150,7142,0):ocfs2_dio_end_io:2401 ERROR: Direct IO failed, bytes = 0 [ 216.610716][ T5815] ocfs2: Unmounting device (7,2) on (node local) [ 217.250980][ T7108] chnl_net:caif_netlink_parms(): no params data found [ 217.377388][ T7164] loop4: detected capacity change from 0 to 32768 [ 217.557406][ T7164] JBD2: Ignoring recovery information on journal [ 217.686701][ T7164] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 218.104455][ T6769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.239054][ T7171] loop2: detected capacity change from 0 to 32768 [ 218.259989][ T5809] Bluetooth: hci5: command tx timeout [ 218.261688][ T5807] ocfs2: Unmounting device (7,4) on (node local) [ 218.417326][ T7171] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 218.436494][ T3886] (kworker/u8:11,3886,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 218.470132][ T37] audit: type=1800 audit(1762031440.408:28): pid=7171 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.152" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 218.574580][ T7171] (syz.2.152,7171,1):ocfs2_find_entry:1094 ERROR: status = -117 [ 218.574612][ T7171] (syz.2.152,7171,1):ocfs2_orphan_del:2396 ERROR: status = -117 [ 218.574636][ T7171] (syz.2.152,7171,1):ocfs2_orphan_del:2418 ERROR: status = -117 [ 218.574658][ T7171] (syz.2.152,7171,1):ocfs2_del_inode_from_orphan:2751 ERROR: status = -117 [ 218.574716][ T7171] (syz.2.152,7171,1):ocfs2_dio_end_io_write:2309 ERROR: status = -117 [ 218.638451][ T7171] (syz.2.152,7171,1):ocfs2_find_entry:1094 ERROR: status = -117 [ 218.638484][ T7171] (syz.2.152,7171,1):ocfs2_orphan_del:2396 ERROR: status = -117 [ 218.638507][ T7171] (syz.2.152,7171,1):ocfs2_orphan_del:2418 ERROR: status = -117 [ 218.662895][ T7171] (syz.2.152,7171,0):ocfs2_del_inode_from_orphan:2751 ERROR: status = -117 [ 218.662967][ T7171] (syz.2.152,7171,0):ocfs2_add_inode_to_orphan:2667 ERROR: status = -117 [ 218.662991][ T7171] (syz.2.152,7171,0):ocfs2_dio_wr_get_block:2188 ERROR: status = -117 [ 218.663023][ T7171] (syz.2.152,7171,0):ocfs2_dio_end_io:2401 ERROR: Direct IO failed, bytes = -117 [ 218.808844][ T7183] loop4: detected capacity change from 0 to 4096 [ 218.834064][ T5815] (syz-executor,5815,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 70 [ 218.834540][ T5815] (syz-executor,5815,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72 [ 218.835757][ T7183] EXT4-fs: Ignoring removed mblk_io_submit option [ 218.875106][ T7183] EXT4-fs (loop4): Test dummy encryption mode enabled [ 218.895855][ T5815] ocfs2: Unmounting device (7,2) on (node local) [ 218.940000][ T7183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.230533][ T7187] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 219.331970][ T5807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.720345][ T7108] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.720499][ T7108] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.720748][ T7108] bridge_slave_0: entered allmulticast mode [ 219.730377][ T7108] bridge_slave_0: entered promiscuous mode [ 219.823009][ T7108] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.823148][ T7108] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.823382][ T7108] bridge_slave_1: entered allmulticast mode [ 219.826670][ T7108] bridge_slave_1: entered promiscuous mode [ 219.880045][ T6769] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.986779][ T7189] loop2: detected capacity change from 0 to 32768 [ 220.021395][ T7189] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.154 (7189) [ 220.051126][ T7189] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.051202][ T7189] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 220.051277][ T7189] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 220.279222][ T7189] BTRFS info (device loop2): rebuilding free space tree [ 220.312590][ T7189] BTRFS info (device loop2): disabling free space tree [ 220.312684][ T7189] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 220.312711][ T7189] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 220.349572][ T5809] Bluetooth: hci5: command tx timeout [ 220.366957][ T7189] BTRFS info (device loop2): enabling ssd optimizations [ 220.366982][ T7189] BTRFS info (device loop2): enabling disk space caching [ 220.366998][ T7189] BTRFS info (device loop2): force clearing of disk cache [ 220.367015][ T7189] BTRFS info (device loop2): enabling auto defrag [ 220.367033][ T7189] BTRFS info (device loop2): max_inline set to 0 [ 220.449024][ T7108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.472786][ T6864] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 220.736056][ T87] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.750881][ T87] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.758525][ T7108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.770347][ T6864] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 220.777792][ T7191] loop4: detected capacity change from 0 to 32768 [ 220.882735][ T7191] BTRFS info: device /dev/loop4 (7:4) using temp-fsid b86404c3-e997-48fa-9252-10d230084d94 [ 220.882807][ T7191] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.155 (7191) [ 220.932731][ T12] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 220.994050][ T7191] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.994130][ T7191] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 220.994203][ T7191] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 221.121152][ T6864] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 221.219450][ T7191] BTRFS info (device loop4): rebuilding free space tree [ 221.255091][ T7191] BTRFS info (device loop4): disabling free space tree [ 221.255175][ T7191] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 221.255202][ T7191] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 221.300905][ T7191] BTRFS info (device loop4): enabling ssd optimizations [ 221.300931][ T7191] BTRFS info (device loop4): enabling disk space caching [ 221.300947][ T7191] BTRFS info (device loop4): force clearing of disk cache [ 221.300962][ T7191] BTRFS info (device loop4): enabling auto defrag [ 221.300979][ T7191] BTRFS info (device loop4): max_inline set to 0 [ 221.639076][ T6864] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 221.751909][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.752678][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.758831][ T174] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 221.781470][ T7108] team0: Port device team_slave_0 added [ 221.915191][ T7108] team0: Port device team_slave_1 added [ 222.019379][ T5815] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 222.481200][ T7108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.481218][ T7108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.481244][ T7108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.572530][ T7108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.572547][ T7108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.572573][ T7108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.634159][ T1202] bridge_slave_1: left allmulticast mode [ 222.634186][ T1202] bridge_slave_1: left promiscuous mode [ 222.634421][ T1202] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.771146][ T1202] bridge_slave_0: left allmulticast mode [ 222.771174][ T1202] bridge_slave_0: left promiscuous mode [ 222.771430][ T1202] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.836281][ T5807] BTRFS info (device loop4): last unmount of filesystem b86404c3-e997-48fa-9252-10d230084d94 [ 223.972186][ T7236] loop2: detected capacity change from 0 to 32768 [ 224.009927][ T7236] (syz.2.156,7236,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 224.010969][ T7236] (syz.2.156,7236,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 224.153704][ T7236] JBD2: Ignoring recovery information on journal [ 224.214377][ T7238] loop4: detected capacity change from 0 to 32768 [ 224.226201][ T7238] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.157 (7238) [ 224.329980][ T7238] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 224.330059][ T7238] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 224.352145][ T7236] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 224.536490][ T7238] BTRFS info (device loop4): rebuilding free space tree [ 224.621421][ T7238] BTRFS info (device loop4): disabling free space tree [ 224.621508][ T7238] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 224.621535][ T7238] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 224.698191][ T7238] BTRFS info (device loop4): enabling ssd optimizations [ 224.698217][ T7238] BTRFS info (device loop4): turning on async discard [ 224.698235][ T7238] BTRFS info (device loop4): force clearing of disk cache [ 224.698251][ T7238] BTRFS info (device loop4): enabling auto defrag [ 224.698269][ T7238] BTRFS info (device loop4): max_inline set to 4096 [ 224.879781][ T7236] (syz.2.156,7236,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 225.053288][ T5807] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 225.097221][ T7236] (syz.2.156,7236,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 225.517945][ T5815] ocfs2: Unmounting device (7,2) on (node local) [ 226.162022][ T7262] loop2: detected capacity change from 0 to 64 [ 226.219849][ T7262] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 226.575417][ T7260] loop4: detected capacity change from 0 to 40427 [ 226.670561][ T7260] F2FS-fs (loop4): invalid crc value [ 226.950410][ T1202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.008148][ T7260] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 227.009000][ T7260] F2FS-fs (loop4): Start checkpoint disabled! [ 227.015694][ T7260] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 227.016446][ T7260] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 227.100435][ T1202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.120865][ T37] audit: type=1800 audit(1762031449.068:29): pid=7260 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.158" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 227.163864][ T7260] syz.4.158: attempt to access beyond end of device [ 227.163864][ T7260] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 227.168288][ T7260] syz.4.158: attempt to access beyond end of device [ 227.168288][ T7260] loop4: rw=2049, sector=45224, nr_sectors = 128 limit=40427 [ 227.182914][ T7260] syz.4.158: attempt to access beyond end of device [ 227.182914][ T7260] loop4: rw=2049, sector=45352, nr_sectors = 128 limit=40427 [ 227.185488][ T7260] syz.4.158: attempt to access beyond end of device [ 227.185488][ T7260] loop4: rw=2049, sector=45480, nr_sectors = 128 limit=40427 [ 227.200622][ T1202] bond0 (unregistering): Released all slaves [ 227.210957][ T7260] syz.4.158: attempt to access beyond end of device [ 227.210957][ T7260] loop4: rw=2049, sector=45608, nr_sectors = 128 limit=40427 [ 227.215065][ T7260] syz.4.158: attempt to access beyond end of device [ 227.215065][ T7260] loop4: rw=2049, sector=45736, nr_sectors = 128 limit=40427 [ 227.219243][ T7260] syz.4.158: attempt to access beyond end of device [ 227.219243][ T7260] loop4: rw=2049, sector=45864, nr_sectors = 128 limit=40427 [ 227.275821][ T7260] syz.4.158: attempt to access beyond end of device [ 227.275821][ T7260] loop4: rw=2049, sector=45992, nr_sectors = 128 limit=40427 [ 227.294679][ T7260] syz.4.158: attempt to access beyond end of device [ 227.294679][ T7260] loop4: rw=2049, sector=46120, nr_sectors = 128 limit=40427 [ 227.297433][ T7260] syz.4.158: attempt to access beyond end of device [ 227.297433][ T7260] loop4: rw=2049, sector=46248, nr_sectors = 128 limit=40427 [ 227.818860][ T7266] loop2: detected capacity change from 0 to 32768 [ 227.840247][ T7266] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.160 (7266) [ 227.868462][ T7266] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 227.868539][ T7266] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 227.868597][ T7266] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 227.900680][ T7268] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 227.932789][ T7108] hsr_slave_0: entered promiscuous mode [ 227.934031][ T7108] hsr_slave_1: entered promiscuous mode [ 227.934913][ T7108] debugfs: 'hsr0' already exists in 'hsr' [ 227.934938][ T7108] Cannot create hsr debugfs directory [ 228.080777][ T7266] BTRFS info (device loop2): rebuilding free space tree [ 228.147013][ T7266] BTRFS info (device loop2): disabling free space tree [ 228.147625][ T7266] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 228.147655][ T7266] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 228.193846][ T7266] BTRFS info (device loop2): enabling ssd optimizations [ 228.193873][ T7266] BTRFS info (device loop2): enabling disk space caching [ 228.193890][ T7266] BTRFS info (device loop2): force clearing of disk cache [ 228.193906][ T7266] BTRFS info (device loop2): enabling auto defrag [ 228.193922][ T7266] BTRFS info (device loop2): max_inline set to 0 [ 228.249694][ T1202] hsr_slave_0: left promiscuous mode [ 228.300392][ T1202] hsr_slave_1: left promiscuous mode [ 228.301372][ T1202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.340571][ T1202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.584042][ T1310] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 228.608632][ T5815] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 229.777298][ T7286] loop2: detected capacity change from 0 to 32768 [ 229.913709][ T7286] JBD2: Ignoring recovery information on journal [ 230.001504][ T7286] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 230.031855][ T1202] team0 (unregistering): Port device team_slave_1 removed [ 230.271454][ T7288] loop4: detected capacity change from 0 to 32768 [ 230.320924][ T1202] team0 (unregistering): Port device team_slave_0 removed [ 230.397434][ T7288] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 230.601375][ T7288] XFS (loop4): Ending clean mount [ 230.633322][ T7288] XFS (loop4): Quotacheck needed: Please wait. [ 230.756841][ T5815] ocfs2: Unmounting device (7,2) on (node local) [ 230.818119][ T7288] XFS (loop4): Quotacheck: Done. [ 231.241879][ T5807] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 231.922364][ T7303] loop2: detected capacity change from 0 to 32768 [ 231.952159][ T7303] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.163 (7303) [ 231.983448][ T7303] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 231.984676][ T7303] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 232.315550][ T7303] BTRFS info (device loop2): enabling ssd optimizations [ 232.315577][ T7303] BTRFS info (device loop2): turning on async discard [ 232.315595][ T7303] BTRFS info (device loop2): enabling free space tree [ 232.315611][ T7303] BTRFS info (device loop2): enabling auto defrag [ 232.473625][ T7305] loop4: detected capacity change from 0 to 32768 [ 232.521599][ T7305] (syz.4.164,7305,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 232.522848][ T7305] (syz.4.164,7305,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 232.763346][ T7305] JBD2: Ignoring recovery information on journal [ 232.934835][ T7305] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 233.078229][ T7305] (syz.4.164,7305,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 233.274309][ T7305] (syz.4.164,7305,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options [ 233.451822][ T5815] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 234.243743][ T5807] ocfs2: Unmounting device (7,4) on (node local) [ 234.864461][ T6864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.943724][ T6769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.232715][ T6864] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.257196][ T1179] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.257449][ T1179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.367044][ T7332] loop2: detected capacity change from 0 to 32768 [ 235.478929][ T7332] JBD2: Ignoring recovery information on journal [ 235.587420][ T7332] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 235.622202][ T7227] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.624262][ T7227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.480333][ T7344] loop4: detected capacity change from 0 to 32768 [ 236.567174][ T7344] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 236.571730][ T5815] ocfs2: Unmounting device (7,2) on (node local) [ 236.642027][ T7344] JBD2: Ignoring recovery information on journal [ 236.972414][ T7344] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 237.066441][ T7108] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 237.249676][ T7108] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 237.346210][ T7108] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 237.452702][ T7108] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 237.729865][ T5807] ocfs2: Unmounting device (7,4) on (node local) [ 237.783978][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.830602][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.840138][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.869868][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.928121][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.433517][ T6864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.539363][ T7376] loop2: detected capacity change from 0 to 32768 [ 238.580970][ T7376] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.167 (7376) [ 238.602527][ T7376] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 238.602605][ T7376] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 238.823708][ T7376] BTRFS info (device loop2): rebuilding free space tree [ 238.955910][ T7376] BTRFS info (device loop2): disabling free space tree [ 238.955997][ T7376] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 238.956024][ T7376] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 239.008048][ T7376] BTRFS info (device loop2): enabling ssd optimizations [ 239.008076][ T7376] BTRFS info (device loop2): turning on async discard [ 239.008093][ T7376] BTRFS info (device loop2): force clearing of disk cache [ 239.008109][ T7376] BTRFS info (device loop2): enabling auto defrag [ 239.008126][ T7376] BTRFS info (device loop2): max_inline set to 4096 [ 239.659447][ T7394] loop4: detected capacity change from 0 to 40427 [ 239.720416][ T7394] F2FS-fs (loop4): invalid crc value [ 239.803469][ T5815] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 240.039055][ T5804] Bluetooth: hci1: command tx timeout [ 240.273642][ T7394] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 240.274376][ T7394] F2FS-fs (loop4): Start checkpoint disabled! [ 240.276022][ T7394] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 240.276569][ T7394] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 240.441792][ T37] audit: type=1800 audit(1762031462.378:30): pid=7394 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.168" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 240.456042][ T7394] bio_check_eod: 26 callbacks suppressed [ 240.456063][ T7394] syz.4.168: attempt to access beyond end of device [ 240.456063][ T7394] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 240.494932][ T7394] syz.4.168: attempt to access beyond end of device [ 240.494932][ T7394] loop4: rw=2049, sector=45224, nr_sectors = 128 limit=40427 [ 240.528930][ T7394] syz.4.168: attempt to access beyond end of device [ 240.528930][ T7394] loop4: rw=2049, sector=45352, nr_sectors = 128 limit=40427 [ 240.562261][ T7394] syz.4.168: attempt to access beyond end of device [ 240.562261][ T7394] loop4: rw=2049, sector=45480, nr_sectors = 128 limit=40427 [ 240.566712][ T7394] syz.4.168: attempt to access beyond end of device [ 240.566712][ T7394] loop4: rw=2049, sector=45608, nr_sectors = 128 limit=40427 [ 240.609738][ T7394] syz.4.168: attempt to access beyond end of device [ 240.609738][ T7394] loop4: rw=2049, sector=45736, nr_sectors = 128 limit=40427 [ 240.618019][ T7394] syz.4.168: attempt to access beyond end of device [ 240.618019][ T7394] loop4: rw=2049, sector=45864, nr_sectors = 128 limit=40427 [ 240.657318][ T7394] syz.4.168: attempt to access beyond end of device [ 240.657318][ T7394] loop4: rw=2049, sector=45992, nr_sectors = 128 limit=40427 [ 240.718019][ T7394] syz.4.168: attempt to access beyond end of device [ 240.718019][ T7394] loop4: rw=2049, sector=46120, nr_sectors = 128 limit=40427 [ 240.724365][ T7394] syz.4.168: attempt to access beyond end of device [ 240.724365][ T7394] loop4: rw=2049, sector=46248, nr_sectors = 128 limit=40427 [ 241.020077][ T7423] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 241.367537][ T7421] loop2: detected capacity change from 0 to 32768 [ 241.428990][ T7421] JBD2: Ignoring recovery information on journal [ 241.572246][ T7421] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 241.898168][ T7421] [ 241.898180][ T7421] ====================================================== [ 241.898190][ T7421] WARNING: possible circular locking dependency detected [ 241.898204][ T7421] syzkaller #0 Not tainted [ 241.898216][ T7421] ------------------------------------------------------ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 241.898225][ T7421] syz.2.169/7421 is trying to acquire lock: [ 241.898238][ T7421] ffff88805d168b80 (&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_del_inode_from_orphan+0x134/0x740 [ 241.898305][ T7421] [ 241.898305][ T7421] but task is already holding lock: [ 241.898312][ T7421] ffff888032604ad0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_dio_end_io+0x38b/0x1100 [ 241.898359][ T7421] [ 241.898359][ T7421] which lock already depends on the new lock. [ 241.898359][ T7421] [ 241.898367][ T7421] [ 241.898367][ T7421] the existing dependency chain (in reverse order) is: [ 241.898379][ T7421] [ 241.898379][ T7421] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}: [ 241.898409][ T7421] lock_acquire+0x120/0x360 [ 241.898436][ T7421] down_write+0x3a/0x50 [ 241.898463][ T7421] ocfs2_create_local_dquot+0x19d/0x1a40 [ 241.898493][ T7421] ocfs2_acquire_dquot+0x80f/0xb30 [ 241.898513][ T7421] dqget+0x7c1/0xf20 [ 241.898529][ T7421] __dquot_initialize+0x3b3/0xcb0 [ 241.898547][ T7421] ocfs2_get_init_inode+0x13b/0x1b0 [ 241.898574][ T7421] ocfs2_mknod+0x863/0x2050 [ 241.898601][ T7421] ocfs2_mkdir+0x191/0x440 [ 241.898626][ T7421] vfs_mkdir+0x306/0x510 [ 241.898648][ T7421] do_mkdirat+0x247/0x590 [ 241.898668][ T7421] __x64_sys_mkdirat+0x87/0xa0 [ 241.898690][ T7421] do_syscall_64+0xfa/0xfa0 [ 241.898715][ T7421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.898734][ T7421] [ 241.898734][ T7421] -> #2 (&dquot->dq_lock){+.+.}-{4:4}: [ 241.898762][ T7421] lock_acquire+0x120/0x360 [ 241.898787][ T7421] mutex_lock_nested+0x5a/0x1d0 [ 241.898805][ T7421] dqget+0x73a/0xf20 [ 241.898821][ T7421] __dquot_initialize+0x3b3/0xcb0 [ 241.898838][ T7421] ocfs2_get_init_inode+0x13b/0x1b0 [ 241.898865][ T7421] ocfs2_mknod+0x863/0x2050 [ 241.898891][ T7421] ocfs2_mkdir+0x191/0x440 [ 241.898917][ T7421] vfs_mkdir+0x306/0x510 [ 241.898937][ T7421] do_mkdirat+0x247/0x590 [ 241.898966][ T7421] __x64_sys_mkdirat+0x87/0xa0 [ 241.898988][ T7421] do_syscall_64+0xfa/0xfa0 [ 241.899013][ T7421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.899032][ T7421] [ 241.899032][ T7421] -> #1 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}: [ 241.899063][ T7421] lock_acquire+0x120/0x360 [ 241.899088][ T7421] down_write+0x3a/0x50 [ 241.899114][ T7421] ocfs2_evict_inode+0x153d/0x40d0 [ 241.899143][ T7421] evict+0x504/0x9c0 [ 241.899162][ T7421] do_unlinkat+0x39f/0x570 [ 241.899184][ T7421] __x64_sys_unlink+0x47/0x50 [ 241.899207][ T7421] do_syscall_64+0xfa/0xfa0 [ 241.899232][ T7421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.899251][ T7421] [ 241.899251][ T7421] -> #0 (&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]){+.+.}-{4:4}: [ 241.899281][ T7421] validate_chain+0xb9b/0x2140 [ 241.899298][ T7421] __lock_acquire+0xab9/0xd20 [ 241.899322][ T7421] lock_acquire+0x120/0x360 [ 241.899346][ T7421] down_write+0x3a/0x50 [ 241.899372][ T7421] ocfs2_del_inode_from_orphan+0x134/0x740 [ 241.899399][ T7421] ocfs2_dio_end_io+0x47b/0x1100 [ 241.899417][ T7421] dio_complete+0x25e/0x790 [ 241.899441][ T7421] __blockdev_direct_IO+0x2bc0/0x31f0 [ 241.899467][ T7421] ocfs2_direct_IO+0x260/0x2d0 [ 241.899496][ T7421] generic_file_direct_write+0x1dc/0x3e0 [ 241.899521][ T7421] __generic_file_write_iter+0x120/0x240 [ 241.899535][ T7421] ocfs2_file_write_iter+0x157d/0x1d20 [ 241.899558][ T7421] iter_file_splice_write+0x97a/0x10f0 [ 241.899579][ T7421] direct_splice_actor+0x104/0x160 [ 241.899602][ T7421] splice_direct_to_actor+0x5b3/0xcd0 [ 241.899626][ T7421] do_splice_direct+0x187/0x270 [ 241.899650][ T7421] do_sendfile+0x4ec/0x7f0 [ 241.899677][ T7421] __se_sys_sendfile64+0x13e/0x190 [ 241.899703][ T7421] do_syscall_64+0xfa/0xfa0 [ 241.899727][ T7421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.899746][ T7421] [ 241.899746][ T7421] other info that might help us debug this: [ 241.899746][ T7421] [ 241.899754][ T7421] Chain exists of: [ 241.899754][ T7421] &ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE] --> &dquot->dq_lock --> &ocfs2_quota_ip_alloc_sem_key [ 241.899754][ T7421] [ 241.899790][ T7421] Possible unsafe locking scenario: [ 241.899790][ T7421] [ 241.899796][ T7421] CPU0 CPU1 [ 241.899803][ T7421] ---- ---- [ 241.899809][ T7421] lock(&ocfs2_quota_ip_alloc_sem_key); [ 241.899824][ T7421] lock(&dquot->dq_lock); [ 241.899840][ T7421] lock(&ocfs2_quota_ip_alloc_sem_key); [ 241.899856][ T7421] lock(&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]); [ 241.899872][ T7421] [ 241.899872][ T7421] *** DEADLOCK *** [ 241.899872][ T7421] [ 241.899878][ T7421] 3 locks held by syz.2.169/7421: [ 241.899890][ T7421] #0: ffff888061e2c480 (sb_writers#17){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x160 [ 241.899957][ T7421] #1: ffff888032604e80 (&sb->s_type->i_mutex_key#23){++++}-{4:4}, at: ocfs2_file_write_iter+0x42c/0x1d20 [ 241.900020][ T7421] #2: ffff888032604ad0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_dio_end_io+0x38b/0x1100 [ 241.900069][ T7421] [ 241.900069][ T7421] stack backtrace: [ 241.900081][ T7421] CPU: 1 UID: 0 PID: 7421 Comm: syz.2.169 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 241.900106][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 241.900127][ T7421] Call Trace: [ 241.900137][ T7421] [ 241.900146][ T7421] dump_stack_lvl+0x189/0x250 [ 241.900179][ T7421] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.900208][ T7421] ? __pfx__printk+0x10/0x10 [ 241.900234][ T7421] ? print_lock_name+0xde/0x100 [ 241.900260][ T7421] print_circular_bug+0x2ee/0x310 [ 241.900282][ T7421] check_noncircular+0x134/0x160 [ 241.900305][ T7421] validate_chain+0xb9b/0x2140 [ 241.900323][ T7421] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 241.900355][ T7421] __lock_acquire+0xab9/0xd20 [ 241.900384][ T7421] ? ocfs2_del_inode_from_orphan+0x134/0x740 [ 241.900413][ T7421] lock_acquire+0x120/0x360 [ 241.900439][ T7421] ? ocfs2_del_inode_from_orphan+0x134/0x740 [ 241.900474][ T7421] down_write+0x3a/0x50 [ 241.900502][ T7421] ? ocfs2_del_inode_from_orphan+0x134/0x740 [ 241.900531][ T7421] ocfs2_del_inode_from_orphan+0x134/0x740 [ 241.900564][ T7421] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.900590][ T7421] ? __pfx_ocfs2_del_inode_from_orphan+0x10/0x10 [ 241.900620][ T7421] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 241.900647][ T7421] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 241.900679][ T7421] ? rwbase_write_lock+0x56f/0x750 [ 241.900711][ T7421] ? try_to_take_rt_mutex+0x840/0xb00 [ 241.900737][ T7421] ocfs2_dio_end_io+0x47b/0x1100 [ 241.900761][ T7421] ? __pfx_ocfs2_dio_end_io+0x10/0x10 [ 241.900789][ T7421] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 241.900817][ T7421] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.900843][ T7421] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 241.900872][ T7421] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 241.900899][ T7421] ? __lock_acquire+0xab9/0xd20 [ 241.900929][ T7421] ? rt_mutex_slowunlock+0x493/0x8a0 [ 241.900958][ T7421] ? rt_spin_lock+0x1c1/0x3e0 [ 241.900981][ T7421] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 241.901005][ T7421] ? __pfx_ocfs2_dio_end_io+0x10/0x10 [ 241.901024][ T7421] dio_complete+0x25e/0x790 [ 241.901054][ T7421] __blockdev_direct_IO+0x2bc0/0x31f0 [ 241.901100][ T7421] ? __pfx___blockdev_direct_IO+0x10/0x10 [ 241.901131][ T7421] ? __pfx_ocfs2_dio_wr_get_block+0x10/0x10 [ 241.901176][ T7421] ? __pfx_ocfs2_dio_wr_get_block+0x10/0x10 [ 241.901195][ T7421] ocfs2_direct_IO+0x260/0x2d0 [ 241.901229][ T7421] generic_file_direct_write+0x1dc/0x3e0 [ 241.901262][ T7421] ? file_update_time+0x41c/0x490 [ 241.901285][ T7421] __generic_file_write_iter+0x120/0x240 [ 241.901304][ T7421] ? ocfs2_file_write_iter+0x1554/0x1d20 [ 241.901333][ T7421] ocfs2_file_write_iter+0x157d/0x1d20 [ 241.901361][ T7421] ? __kmalloc_noprof+0x233/0x7d0 [ 241.901386][ T7421] ? iter_file_splice_write+0x1c9/0x10f0 [ 241.901413][ T7421] ? direct_splice_actor+0x104/0x160 [ 241.901447][ T7421] ? __pfx_ocfs2_file_write_iter+0x10/0x10 [ 241.901486][ T7421] ? splice_from_pipe_next+0x61d/0x670 [ 241.901517][ T7421] ? __asan_memset+0x22/0x50 [ 241.901542][ T7421] iter_file_splice_write+0x97a/0x10f0 [ 241.901580][ T7421] ? __pfx_iter_file_splice_write+0x10/0x10 [ 241.901609][ T7421] ? rcu_read_lock_any_held+0xb3/0x120 [ 241.901634][ T7421] ? direct_splice_actor+0x10f/0x160 [ 241.901664][ T7421] ? __pfx_iter_file_splice_write+0x10/0x10 [ 241.901692][ T7421] direct_splice_actor+0x104/0x160 [ 241.901721][ T7421] splice_direct_to_actor+0x5b3/0xcd0 [ 241.901757][ T7421] ? __pfx_direct_splice_actor+0x10/0x10 [ 241.901785][ T7421] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 241.901817][ T7421] do_splice_direct+0x187/0x270 [ 241.901845][ T7421] ? __pfx_do_splice_direct+0x10/0x10 [ 241.901873][ T7421] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 241.901905][ T7421] ? rw_verify_area+0x25b/0x4e0 [ 241.901930][ T7421] do_sendfile+0x4ec/0x7f0 [ 241.901970][ T7421] ? __pfx_do_sendfile+0x10/0x10 [ 241.902003][ T7421] ? __se_sys_futex+0x36f/0x400 [ 241.902029][ T7421] __se_sys_sendfile64+0x13e/0x190 [ 241.902060][ T7421] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 241.902092][ T7421] ? do_syscall_64+0xbe/0xfa0 [ 241.902120][ T7421] do_syscall_64+0xfa/0xfa0 [ 241.902146][ T7421] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.902173][ T7421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.902193][ T7421] ? clear_bhb_loop+0x60/0xb0 [ 241.902216][ T7421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.902236][ T7421] RIP: 0033:0x7f7ea16eefc9 [ 241.902255][ T7421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.902274][ T7421] RSP: 002b:00007f7e9f956038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 241.902296][ T7421] RAX: ffffffffffffffda RBX: 00007f7ea1945fa0 RCX: 00007f7ea16eefc9 [ 241.902313][ T7421] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 241.902327][ T7421] RBP: 00007f7ea1771f91 R08: 0000000000000000 R09: 0000000000000000 [ 241.902341][ T7421] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000000 [ 241.902356][ T7421] R13: 00007f7ea1946038 R14: 00007f7ea1945fa0 R15: 00007ffe3f408498 [ 241.902379][ T7421] [ 242.101730][ T5804] Bluetooth: hci1: command tx timeout [ 242.212391][ T5815] ocfs2: Unmounting device (7,2) on (node local) [ 242.442041][ T7108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.790604][ T1202] bridge_slave_1: left allmulticast mode [ 242.790628][ T1202] bridge_slave_1: left promiscuous mode [ 242.790776][ T1202] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.060614][ T1202] bridge_slave_0: left allmulticast mode [ 243.060636][ T1202] bridge_slave_0: left promiscuous mode [ 243.060778][ T1202] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.390122][ T1202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.450827][ T1202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.471166][ T1202] bond0 (unregistering): Released all slaves [ 245.749648][ T1202] hsr_slave_0: left promiscuous mode [ 245.769680][ T1202] hsr_slave_1: left promiscuous mode [ 245.770261][ T1202] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.820785][ T1202] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.710046][ T1202] team0 (unregistering): Port device team_slave_1 removed [ 246.886340][ T1202] team0 (unregistering): Port device team_slave_0 removed [ 251.441899][ T1202] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.661113][ T1202] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0