last executing test programs: 2m9.002111656s ago: executing program 3 (id=4): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) write$dsp(r0, &(0x7f0000000040)="69497183229ad577cf7e", 0xa) fcntl$notify(0xffffffffffffffff, 0x402, 0x100000011) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x20) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x80000001, 0x400, 0x8000000000000000, 0x0, 0x9}, &(0x7f0000000100)={0x80, 0x7, 0x354, 0x7, 0x4181, 0xfdee, 0x5, 0x1}, &(0x7f0000000140)={0x4, 0xffffffff, 0xfffffffffffffffd, 0x7, 0x1, 0x81, 0x7, 0x2d}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0xc]}, 0x8}) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000240)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0) epoll_create(0x9) openat$autofs(0xffffffffffffff9c, &(0x7f00000017c0), 0x40000, 0x0) pselect6(0x40, &(0x7f0000001900)={0xff, 0x8979, 0x0, 0x5, 0x9, 0x7, 0x7aa2, 0x8}, &(0x7f0000001940)={0x8, 0x4, 0x8, 0x0, 0x6, 0x3, 0x8, 0x7}, &(0x7f0000001980)={0x5, 0xe6, 0x8, 0x7, 0x2, 0x1, 0xffffffffffffffff, 0x64c11754}, &(0x7f00000019c0)={0x77359400}, &(0x7f0000001a40)={&(0x7f0000001a00)={[0x1]}, 0x8}) 2m8.45136327s ago: executing program 3 (id=8): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000240)={[{@lazytime}, {}, {@filestreams}, {@uqnoenforce}, {@prjquota}]}, 0x4, 0x9606, &(0x7f0000009680)="$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") open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) 2m4.534897745s ago: executing program 3 (id=12): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@mblk_io_submit}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$eJzs3M9PHFUcAPDv7rJQ2iJY649iq2g1En9AoT/swUuNJh40MdFDjScE2mC3xRRMbEMUPeDRNPFuPJr4F3ixXox6MvGqd2NCDBerpzWzO0O3sAssLGx1P59k4L19b/Ped2be7ts3OxtAxxpK/uQiDkbErxHRX83eWWGo+u/WysLk3ysLk7kol9/4M1ep99fKwmRWNXvegWqmXN6g3aW3IyZKpemraX50/vJ7o3PXrj83c3ni4vTF6SvjZ8+eOnms+8z46ZbE2Zf0dfDD2aNHXnnrxmuT52+88+PXSX8PpuW1cbTKUHXv1vVkqxtrs76adK6rjR2hKYWISA5XsTL++6MQvatl/fHyJ23tHLCryuV8uadx8WIZ+B9LJupAJ8re6JPPv9m2R1OPu8LyuVhdx7iVbtWSrsindYrpZ6TdMBQR5xf/+SLZYpfWIQAAat08FxHP1pv/5eOBmnr3pNeGBiLi3og4FBH3RcThiLg/olL3wYh4qMn2114hWT//KfdvK7AtSuZ/L6TXtu6c/2WzvxgopLm+SvzF3IWZ0vSJdJ8MR7EnyY9t0MZ3L/3yWaOy2vlfsiXtZ3PBtB9/dK1ZoJuamJ/YScy1lj+OGOyqF39udc6bzI+PRMTgNtuYefqro43KNo9/Ay2YlJe/jHiqevwXY038mVzD65Njz58ZPz26L0rTJ0azs2K9n35eer1R+zuKvwWWb5Zjf93zfzX+gdy+iLlr1y9VrtfONd/G0m+fNvxMs93zvzv3ZiXdnT72wcT8/NWxiO7cq+sfH7/93Cyf1U/O/+Hj9cf/obi9Jx6OiOQkPhYRj0TEo2nfH4uIxyPi+Abx//DiE+82H/8Gq/ItlMQ/tdnxj9rj33yicOn7b5qPP5Mc/1OV1HD6yFZe/7bawZ3sOwAAAPivyFe+A5/Lj6ym8/mRkep3+A/H/nxpdm7+mQuz71+Zqn5XfiCK+Wylq79mPXQsXRvO8uNr8ifTdePPC72V/MjkbGmq3cFDhzvQYPwnfi+0u3fArnO/FnQu4x86l/EPncv4h85l/EPnqjf+P2pDP4C9t8n7f+9e9QPYe+b/0LmMf+hcxj90pIb3xud3dMu/RJsS33bv7Lcatp6I/F0S8q4neiNiL9oqRjXRExE1RV1b/jGLbSZ66ha1+5UJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNf4NAAD//xwt370=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x53) getdents(r1, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000480)={0x44, 0xffffffffffffffff, 0x4, 0x9}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000700)='./file2\x00', 0x100004e, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x53e, &(0x7f00000001c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) 2m1.134929528s ago: executing program 3 (id=17): r0 = openat$audio(0xffffff9c, &(0x7f0000000380), 0x147603, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2, 0x6}}, './debug\x00'}) read$FUSE(r1, &(0x7f0000000d80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r5, &(0x7f0000002dc0)='cpuset\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x2015c1a, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1], 0x1, 0x605, &(0x7f0000000680)="$eJzs3c9rVNsdAPDvnUkmmTyaN++9+J61hRdeoYiiJhOxLRSaFilZiAjduA3NaIKTKMlYRhdtWvxD7CJdueimCKULF6678B8IdFkodBlaypR7584Pm9+xyYz6+eCZc67n3u895+u9h5k7wgTw0Vq4G6OltL58q5lub2/N1be35lY77YgYi4hC9idG0ubfIorPIqajXeLbEZHk4ZL9zvOy+uLCm9vNi+2tQl6y/YsHHFc42iw28xLz+SDn99114tjxXh8Y7yiS7gzToDc7wYdB63D/PMXTF08xNseQ7PNvUWnfMeP5OtC5cI94Xw6vobkBAQAA4Nj2ffy2y6c7sRPNmDzV4QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAHJv/9/yQvhU57OpLO7/+X+n5gsDTg4b6zV4MeAAAAAAAAAACczL9bbdnG1zuxE82Y7HS2kuw7/2+yjans9ZN4HBtRi/W4Gs1YjEY0Yj1mI6LSF7XUXGw01mePcGR1zyOrZzF1AAAAAAAAAPhg/S4Wet//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAMEgiiu0qK1OddiUKIxExHhGldL/NiL902u+zV4MeAAAAAJyBT3diJ5ox2dluJdln/i+zz/3j8TjWohEr0Yh61GIpexbQ/tRf2N6aq29vza2mZXfcn/7jWMPIIkb72cPeZ57J9jiXdo+kLwvx8/hFXI7puBPrsRK/isVoRC2m42bWWowkKvnTi0pnnHuPd/6trTuHjfV8NpJy3IuVbGxX45fxMOqxFIVsDhHx5PzBZ/xtmp3kJ7kj5mgpr5OI5Dv5zIZDJcvIaDcjM3nu02x8dnAmDr1OCgeeaTYK3WdQU6eQ84m8TnM+PtQ5r/auvvjy4ExEXGn86evl+tqD5Xsbl4dnSif0v5mY68vEVx9VJkp5NtqraL5aZg5fLb/Jjp2MlbgdD2MpavGDuBHVrMxldX9ezx3hXiscfq+1+lL+vYt54/OIpNyuh0Sa18/68tq/0lWyvvRvxvO9e1n6/P+/Io1cyBvFiGSkO6Zh0MtEb23uZOKLgzPx+1b6ulFfe7C+vPjoiOf7fl6na/PYUK3Npfzqzd6ovJWTmazviz37ZrO+qW5fYVffuW7fYXdqKX8PtztSNev7as++9nHnO33/abVae7zLAWDoTVyaKJX/Xv5r+Xn5WXm5fGv8Z2M/HPtuKUZfj/y5+MfCHwo/Ti7F8/h17/M/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwchtPnj5YrNdr6xoag258cnYXZKvtN7u6xiNiOLIx4MagVybOwrXG6qNrG0+eXllZXbxfu19buz5Tnb1xffZH16/dW6nXZtqvgx4lp6V30w96JAAAAAAAAAAAABzHWfx30kHPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPfHwt0Y3YwkZmeuzqTb21tz9bR02r09CxExktb/iig+i5iOdolKX7hkv/O8rL648OZ282IvVqGzf7F73LdOOovNvMR8Psj5k0baI97rd46XdGeYBr3ZCQ6D9t8AAAD//yfDKrk=") mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000000), 0x200008, &(0x7f0000000d40)=ANY=[@ANYBLOB='acl=']) rename(0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="3cd1027304291f5e9de19f1a82ca5af7fb4bc978cc3936f5a2e54dad4d00be067eee3ffd00fea8fd"], 0x1, 0x16f, &(0x7f0000000240)="$eJxckr2OElEUx393GD7UxGjoaJxEo1ggw6CGUBF9BR8AAiMSBz8YEoUQGRMrs9VW25F9hy232CfYlmabbbbbggfYzObOnJlcoODHOeee//2fw/0S/gzLwN1uNaQHCijwmGulsIGqTgA3Vsr/wkvhOgVncq4r+ZWwFi6WXwdB4M+croPz8Ug5wIlDvcNTaP+1uE1at7vVUDTyzwgw64WDWs3WZuO8rg3r4BXQnE9/NMPFsjGZDsb+2P/mee337lvXfec1P08C302/lSEvltF8Dei9PDDqReP6hwdWM+t/7JRmXwnoS73+fL9P3xXHcYxBxUXeW5ZzevRPvKQC/IqUkXUSFZtknB6KggQt+8CbRSUpvBl+D0ZrFCpr22DnGq0txTzwzKD9iGqfU55d6b+uIevqRNks2VtwhD3hRrgVZm/qgyjYicI/ieoRlPg9mM9nLb259Fee8/Kc9yQyt/gCOLb2Jz6X+D4AAP//LyNn9Q==") r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0xe9) read$FUSE(r6, &(0x7f0000002e00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r2, &(0x7f0000004e40)={0x78, 0x0, r3, {0x6d7, 0x6, 0x0, {0x5, 0x4, 0x4, 0xf, 0x28931f87, 0x4, 0xffff, 0x10001, 0x10000, 0xc000, 0x1, r4, r8, 0x171, 0x2}}}, 0x78) getdents(r7, &(0x7f0000000080)=""/43, 0x2b) getdents(r7, 0xfffffffffffffffd, 0xbb) 2m0.178793601s ago: executing program 3 (id=19): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000080)={[{@acl}, {@nodatacow}, {@flushoncommit}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@nodatasum}, {@compress_algo={'compress', 0x3d, 'no'}}, {@rescue={'rescue', 0x3d, 'usebackuproot'}}, {@max_inline={'max_inline', 0x3d, [0x45, 0x38, 0x67, 0x74, 0x65, 0x65]}}]}, 0x3, 0x512d, &(0x7f000000f380)="$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") r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000002080), 0x800, 0x0) read(r0, &(0x7f00000020c0)=""/124, 0x7c) read(r0, &(0x7f0000000000)=""/241, 0xf1) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000140)={[{@lazytime}, {@usrquota}, {@auto_da_alloc}, {@nogrpid}, {@abort}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f00000009c0)="$eJzs3E1oHGUYAOB3Jkl/0tRNRYyK0KKlVaRpm616EloPHrz0UCj4UzDY7Q/dNtJEtLWgVSwFEfFQLBQkHsWDPXhQRBAvIujBg4JYLKgHqVSlePAW2Z3ZdGlnsW5+Zo3PA5P95tudeb+PCcP3wswbwP/WuojYHhF9ETEaEZW8P823eCnbGr87UT1/oLElMTOz6/ckkoioVc8faJ0ryT9X5YetiIibtyfxcP/1cSePHT80Xq/Xjub7m6cOP7N58tjxTQcPj++v7a8dqW57YGxs2/3VB+dvrhdGXo6xse0D729cd/qrT17/tjHeofy79nnMp6RD546FCFaigbZ2UnC96T1vnnnj47LHAAAsvjRf+/c31/+V6Its8XbxwpNXKvHiq2WPDwAAAJi7mZm+/BMAAABYuhK5PwAAACxxrecAatXzB1rbYj17sOreiMs7ImI4i996vzj7tr/5/nDk75YOzCFOp2PvujiHk86DyUfLjf/17nLjr3mv3PjT35cb/6kN5cb/+cdy469fW278MxMRn+7ICiBcf/9LmzUPWpZFxPK8psHKGzp73z/+Yu1nV+9/J667/6Wz97/GmQb/9eyuOj196VRR/8gjEZdPRtzRXxQ/mY2f5DUdurXpm5N7ivrXXI6YeSdiQxTHj7b4netDbN53sF7bkv0tjl994fFKUf/Oz7P5D3aIP5z/rq+tTkQ3zg7u+XB1Qf/u0Sz+PXcXX//b2uZ/U16bY7iL+Otur+8s6t/wWhZ/b4f5t1//NV3EbZn+dfKnov4Pts3hpABA19Lm2iZJR2fbaTo6mq33bonBtD4xOXXfvolnj+zN1kDDMZC2llrZemQgaexvzdcmrf2xa/ar+RridGVlc3/06Yn63rInDwAAAEvcUMQPT7zy0ciqa/L/XypZ/g8AAAD89zXy/zun3z7XaP9Z+HQkAAAA0CvqM90d18j/r5z67YuQ/wMAAMCSJf8HAACApa+V/w91qP+3uq1235a8/vCXlYHl+w6uiK1lDx4AAAC4IY38P/3usYuTx44fGq/Xa0c1NHqq8VD+n9or40l6bDwL3Sjx5gQAACyIq4v+skcCAAAALJz0UhIRjW1jZf3QrWvfHWn/dlnyV7M6wLKIeO7crreeH5+aOrq10f/HbP/U2bx/rKw5AAAAAO1aeXorjwcAAAAAAAAAAAAAAHrfYpQTL3uOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzJ+/AwAA//9a8ZMO") rmdir(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = fsopen(&(0x7f0000000000)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c 1 [ 152.376134][ T5610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.405928][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.408653][ T5610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.411183][ T5610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.415223][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.415901][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.594400][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.594430][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.784605][ T40] veth1_macvtap: left promiscuous mode [ 152.784917][ T40] veth0_macvtap: left promiscuous mode [ 152.785279][ T40] veth1_vlan: left promiscuous mode [ 152.785672][ T40] veth0_vlan: left promiscuous mode [ 152.800650][ T6153] loop2: detected capacity change from 0 to 256 [ 152.808439][ T6153] exfat: Deprecated parameter 'namecase' [ 152.845045][ T6153] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 153.182290][ T6161] loop2: detected capacity change from 0 to 2048 [ 153.211523][ T6161] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 153.212050][ T6161] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 153.212068][ T6161] UDF-fs: Scanning with blocksize 512 failed [ 153.334083][ T6161] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.567372][ T37] audit: type=1800 audit(1785224121.716:13): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.76" name="file1" dev="loop2" ino=838 res=0 errno=0 [ 154.120458][ T6165] loop2: detected capacity change from 0 to 512 [ 154.121562][ T6165] EXT4-fs: Ignoring removed i_version option [ 154.145488][ T6165] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 154.213988][ T6165] EXT4-fs (loop2): 1 truncate cleaned up [ 154.256021][ T6165] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.307188][ T6165] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 154.342626][ T5617] Bluetooth: hci1: command tx timeout [ 154.464238][ T5600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.592609][ T5617] Bluetooth: hci3: command tx timeout [ 154.774011][ T40] team0 (unregistering): Port device team_slave_1 removed [ 154.847896][ T40] team0 (unregistering): Port device team_slave_0 removed [ 154.999487][ T6172] loop2: detected capacity change from 0 to 32768 [ 155.095463][ T6172] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 156.451164][ T5617] Bluetooth: hci1: command tx timeout [ 156.531576][ T5600] ocfs2: Unmounting device (7,2) on (node local) [ 156.662699][ T5617] Bluetooth: hci3: command tx timeout [ 156.941644][ T6200] loop2: detected capacity change from 0 to 128 [ 157.168421][ T6200] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.168968][ T6200] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.239121][ T6200] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.79: No space for directory leaf checksum. Please run e2fsck -D. [ 157.239163][ T6200] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.79: checksumming directory block 0 [ 157.301398][ T6204] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.79: No space for directory leaf checksum. Please run e2fsck -D. [ 157.301424][ T6204] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.79: checksumming directory block 0 [ 157.337285][ T6200] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.79: No space for directory leaf checksum. Please run e2fsck -D. [ 157.337323][ T6200] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.79: checksumming directory block 0 [ 157.388413][ T5257] 8021q: adding VLAN 0 to HW filter on device eth2 [ 157.442742][ T6206] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.79: No space for directory leaf checksum. Please run e2fsck -D. [ 157.442778][ T6206] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.79: checksumming directory block 0 [ 157.481612][ T6206] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.79: No space for directory leaf checksum. Please run e2fsck -D. [ 157.481648][ T6206] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.79: checksumming directory block 0 [ 157.560262][ T6200] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.79: No space for directory leaf checksum. Please run e2fsck -D. [ 157.560299][ T6200] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.79: checksumming directory block 0 [ 157.663472][ T6204] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.79: No space for directory leaf checksum. Please run e2fsck -D. [ 157.663511][ T6204] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.79: checksumming directory block 0 [ 157.808907][ T6200] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.79: No space for directory leaf checksum. Please run e2fsck -D. [ 157.808945][ T6200] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.79: Directory block failed checksum [ 157.963861][ T6206] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.79: No space for directory leaf checksum. Please run e2fsck -D. [ 157.963899][ T6206] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.79: checksumming directory block 0 [ 158.012962][ T6207] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.79: No space for directory leaf checksum. Please run e2fsck -D. [ 158.013012][ T6207] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.79: checksumming directory block 0 [ 158.104188][ T5600] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.742663][ T5617] Bluetooth: hci3: command tx timeout [ 159.195904][ T6214] loop2: detected capacity change from 0 to 32768 [ 159.664540][ T68] read_mapping_page failed! [ 159.664557][ T68] ERROR: (device loop2): txCommit: [ 159.664557][ T68] [ 159.711406][ T68] jfs_write_inode: jfs_commit_inode failed! [ 159.838226][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.930284][ T6059] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.930508][ T6059] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.930720][ T6059] bridge_slave_0: entered allmulticast mode [ 159.934387][ T6059] bridge_slave_0: entered promiscuous mode [ 159.937312][ T5977] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 159.985883][ T5977] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 160.008528][ T5257] 8021q: adding VLAN 0 to HW filter on device eth3 [ 160.021210][ T6059] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.021348][ T6059] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.021574][ T6059] bridge_slave_1: entered allmulticast mode [ 160.024323][ T6059] bridge_slave_1: entered promiscuous mode [ 160.026097][ T5977] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 160.099726][ T5977] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 160.189107][ T5977] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 160.244188][ T5977] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 160.500637][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.658023][ T6238] loop2: detected capacity change from 0 to 32768 [ 160.664761][ T5977] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 160.750649][ T5977] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 160.779055][ T6238] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 160.840618][ T5610] Bluetooth: hci3: command tx timeout [ 160.902229][ T6059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.965092][ T6122] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.965241][ T6122] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.965497][ T6122] bridge_slave_0: entered allmulticast mode [ 160.995732][ T6122] bridge_slave_0: entered promiscuous mode [ 161.055922][ T6059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.277014][ T5600] ocfs2: Unmounting device (7,2) on (node local) [ 161.389747][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.597744][ T6122] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.599733][ T6122] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.600042][ T6122] bridge_slave_1: entered allmulticast mode [ 161.601713][ T6122] bridge_slave_1: entered promiscuous mode [ 161.861265][ T6248] loop2: detected capacity change from 0 to 32768 [ 161.902790][ T6248] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.83 (6248) [ 161.958476][ T6248] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.958515][ T6248] BTRFS info (device loop2): using sha256 checksum algorithm [ 162.118901][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.226665][ T6248] BTRFS info (device loop2): enabling ssd optimizations [ 162.226695][ T6248] BTRFS info (device loop2): turning on async discard [ 162.226712][ T6248] BTRFS info (device loop2): enabling free space tree [ 162.320651][ T6059] team0: Port device team_slave_0 added [ 162.381718][ T6122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.415721][ T6059] team0: Port device team_slave_1 added [ 162.468314][ T6122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.614734][ T5600] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.860928][ T6059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.860948][ T6059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.860976][ T6059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.918652][ T6122] team0: Port device team_slave_0 added [ 162.923610][ T6059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.923626][ T6059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.923650][ T6059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.931025][ T6122] team0: Port device team_slave_1 added [ 163.555317][ T6122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.555336][ T6122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.555362][ T6122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.753127][ T6122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.753146][ T6122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.753173][ T6122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.225037][ T6059] hsr_slave_0: entered promiscuous mode [ 164.226705][ T6059] hsr_slave_1: entered promiscuous mode [ 164.227855][ T6059] debugfs: 'hsr0' already exists in 'hsr' [ 164.227880][ T6059] Cannot create hsr debugfs directory [ 164.362946][ T6270] loop2: detected capacity change from 0 to 40427 [ 164.391891][ T6270] F2FS-fs (loop2): invalid crc value [ 164.664148][ T5257] 8021q: adding VLAN 0 to HW filter on device eth4 [ 164.846057][ T6270] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 164.856450][ T6148] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.856589][ T6148] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.856896][ T6148] bridge_slave_0: entered allmulticast mode [ 164.859779][ T6148] bridge_slave_0: entered promiscuous mode [ 164.918639][ T6122] hsr_slave_0: entered promiscuous mode [ 164.920104][ T6122] hsr_slave_1: entered promiscuous mode [ 164.920981][ T6122] debugfs: 'hsr0' already exists in 'hsr' [ 164.921014][ T6122] Cannot create hsr debugfs directory [ 164.929349][ T6270] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 164.995710][ T6148] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.995787][ T6148] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.995953][ T6148] bridge_slave_1: entered allmulticast mode [ 165.013440][ T6148] bridge_slave_1: entered promiscuous mode [ 165.335155][ T6270] syz.2.84: attempt to access beyond end of device [ 165.335155][ T6270] loop2: rw=2049, sector=45096, nr_sectors = 32 limit=40427 [ 165.373635][ T6270] CPU: 0 UID: 0 PID: 6270 Comm: syz.2.84 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 165.373669][ T6270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 165.373681][ T6270] Call Trace: [ 165.373690][ T6270] [ 165.373699][ T6270] dump_stack_lvl+0xe8/0x150 [ 165.373743][ T6270] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 165.373784][ T6270] f2fs_write_end_io+0x124b/0x1710 [ 165.373834][ T6270] __submit_merged_bio+0x258/0x6a0 [ 165.373865][ T6270] ? rcu_is_watching+0x15/0xb0 [ 165.373900][ T6270] __submit_merged_write_cond+0x3c9/0x4e0 [ 165.373943][ T6270] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 165.374003][ T6270] f2fs_write_data_pages+0x2a27/0x36f0 [ 165.374069][ T6270] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 165.374158][ T6270] ? __lock_acquire+0x683/0x2ce0 [ 165.374199][ T6270] ? do_raw_spin_lock+0x12b/0x2f0 [ 165.374250][ T6270] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 165.374276][ T6270] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 165.374312][ T6270] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 165.374328][ T6270] do_writepages+0x338/0x560 [ 165.374346][ T6270] ? rt_spin_unlock+0x157/0x200 [ 165.374379][ T6270] filemap_fdatawrite+0x1ec/0x2f0 [ 165.374397][ T6270] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 165.374411][ T6270] ? do_raw_spin_lock+0x12b/0x2f0 [ 165.374453][ T6270] ? rt_spin_unlock+0x157/0x200 [ 165.374475][ T6270] ? rt_spin_unlock+0x163/0x200 [ 165.374495][ T6270] f2fs_sync_dirty_inodes+0x30e/0x830 [ 165.374520][ T6270] f2fs_write_checkpoint+0xa3d/0x2710 [ 165.374556][ T6270] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 165.374601][ T6270] ? rcu_is_watching+0x15/0xb0 [ 165.374619][ T6270] f2fs_issue_checkpoint+0x424/0x6f0 [ 165.374653][ T6270] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 165.374676][ T6270] ? add_lock_to_list+0xc7/0x100 [ 165.374696][ T6270] ? lockdep_unlock+0x5d/0xd0 [ 165.374706][ T6270] ? __lock_acquire+0x13e8/0x2ce0 [ 165.374738][ T6270] ? f2fs_do_sync_file+0x301/0x1960 [ 165.374765][ T6270] ? f2fs_sync_fs+0x1f2/0x3c0 [ 165.374785][ T6270] f2fs_do_sync_file+0xcd6/0x1960 [ 165.374803][ T6270] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 165.374840][ T6270] ? sync_lazytime+0x19a/0x4c0 [ 165.374860][ T6270] ? vfs_fsync_range+0x143/0x150 [ 165.374879][ T6270] ? f2fs_sync_file+0xec/0x160 [ 165.374893][ T6270] f2fs_file_write_iter+0x72a/0x2900 [ 165.374921][ T6270] ? vfs_write+0x231/0xbb0 [ 165.374937][ T6270] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 165.374962][ T6270] vfs_write+0x61e/0xbb0 [ 165.374983][ T6270] ? __pfx_vfs_write+0x10/0x10 [ 165.375002][ T6270] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 165.375017][ T6270] ? lockdep_hardirqs_on+0x7a/0x110 [ 165.375033][ T6270] ? mutex_lock_nested+0x152/0x1d0 [ 165.375051][ T6270] ? fdget_pos+0x252/0x320 [ 165.375070][ T6270] ksys_write+0x156/0x270 [ 165.375087][ T6270] ? __pfx_ksys_write+0x10/0x10 [ 165.375109][ T6270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.375123][ T6270] do_syscall_64+0x174/0x580 [ 165.375137][ T6270] ? trace_irq_disable+0x3b/0x140 [ 165.375149][ T6270] ? clear_bhb_loop+0x40/0x90 [ 165.375165][ T6270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.375177][ T6270] RIP: 0033:0x7ff22c4fde99 [ 165.375191][ T6270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.375202][ T6270] RSP: 002b:00007ff22a756028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.375216][ T6270] RAX: ffffffffffffffda RBX: 00007ff22c785fa0 RCX: 00007ff22c4fde99 [ 165.375225][ T6270] RDX: 0000000000000010 RSI: 0000200000005900 RDI: 0000000000000005 [ 165.375233][ T6270] RBP: 00007ff22c593eaf R08: 0000000000000000 R09: 0000000000000000 [ 165.375240][ T6270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.375247][ T6270] R13: 00007ff22c786038 R14: 00007ff22c785fa0 R15: 00007ffee6138e98 [ 165.375268][ T6270] [ 165.391999][ T6270] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 165.426542][ T6270] CPU: 0 UID: 0 PID: 6270 Comm: syz.2.84 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 165.426572][ T6270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 165.426584][ T6270] Call Trace: [ 165.426593][ T6270] [ 165.426602][ T6270] dump_stack_lvl+0xe8/0x150 [ 165.426639][ T6270] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 165.426677][ T6270] f2fs_write_end_io+0x124b/0x1710 [ 165.426723][ T6270] __submit_merged_bio+0x258/0x6a0 [ 165.426752][ T6270] ? rcu_is_watching+0x15/0xb0 [ 165.426784][ T6270] __submit_merged_write_cond+0x3c9/0x4e0 [ 165.426824][ T6270] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 165.426878][ T6270] f2fs_write_data_pages+0x2a27/0x36f0 [ 165.426940][ T6270] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 165.427013][ T6270] ? __lock_acquire+0x683/0x2ce0 [ 165.427050][ T6270] ? do_raw_spin_lock+0x12b/0x2f0 [ 165.427096][ T6270] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 165.427121][ T6270] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 165.427156][ T6270] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 165.427180][ T6270] do_writepages+0x338/0x560 [ 165.427208][ T6270] ? rt_spin_unlock+0x157/0x200 [ 165.427247][ T6270] filemap_fdatawrite+0x1ec/0x2f0 [ 165.427275][ T6270] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 165.427297][ T6270] ? do_raw_spin_lock+0x12b/0x2f0 [ 165.427374][ T6270] ? rt_spin_unlock+0x157/0x200 [ 165.427409][ T6270] ? rt_spin_unlock+0x163/0x200 [ 165.427441][ T6270] f2fs_sync_dirty_inodes+0x30e/0x830 [ 165.427480][ T6270] f2fs_write_checkpoint+0xa3d/0x2710 [ 165.427539][ T6270] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 165.427610][ T6270] ? rcu_is_watching+0x15/0xb0 [ 165.427640][ T6270] f2fs_issue_checkpoint+0x424/0x6f0 [ 165.427675][ T6270] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 165.427697][ T6270] ? add_lock_to_list+0xc7/0x100 [ 165.427723][ T6270] ? lockdep_unlock+0x5d/0xd0 [ 165.427740][ T6270] ? __lock_acquire+0x13e8/0x2ce0 [ 165.427792][ T6270] ? f2fs_do_sync_file+0x301/0x1960 [ 165.427837][ T6270] ? f2fs_sync_fs+0x1f2/0x3c0 [ 165.427867][ T6270] f2fs_do_sync_file+0xcd6/0x1960 [ 165.427898][ T6270] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 165.427963][ T6270] ? sync_lazytime+0x19a/0x4c0 [ 165.427994][ T6270] ? vfs_fsync_range+0x143/0x150 [ 165.428018][ T6270] ? f2fs_sync_file+0xec/0x160 [ 165.428040][ T6270] f2fs_file_write_iter+0x72a/0x2900 [ 165.428085][ T6270] ? vfs_write+0x231/0xbb0 [ 165.428111][ T6270] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 165.428152][ T6270] vfs_write+0x61e/0xbb0 [ 165.428185][ T6270] ? __pfx_vfs_write+0x10/0x10 [ 165.428213][ T6270] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 165.428237][ T6270] ? lockdep_hardirqs_on+0x7a/0x110 [ 165.428262][ T6270] ? mutex_lock_nested+0x152/0x1d0 [ 165.428290][ T6270] ? fdget_pos+0x252/0x320 [ 165.428321][ T6270] ksys_write+0x156/0x270 [ 165.428349][ T6270] ? __pfx_ksys_write+0x10/0x10 [ 165.428390][ T6270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.428412][ T6270] do_syscall_64+0x174/0x580 [ 165.428434][ T6270] ? trace_irq_disable+0x3b/0x140 [ 165.428455][ T6270] ? clear_bhb_loop+0x40/0x90 [ 165.428480][ T6270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.428500][ T6270] RIP: 0033:0x7ff22c4fde99 [ 165.428519][ T6270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.428535][ T6270] RSP: 002b:00007ff22a756028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.428558][ T6270] RAX: ffffffffffffffda RBX: 00007ff22c785fa0 RCX: 00007ff22c4fde99 [ 165.428572][ T6270] RDX: 0000000000000010 RSI: 0000200000005900 RDI: 0000000000000005 [ 165.428585][ T6270] RBP: 00007ff22c593eaf R08: 0000000000000000 R09: 0000000000000000 [ 165.428598][ T6270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.428609][ T6270] R13: 00007ff22c786038 R14: 00007ff22c785fa0 R15: 00007ffee6138e98 [ 165.428643][ T6270] [ 165.428973][ T6270] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 165.429027][ T6270] CPU: 0 UID: 0 PID: 6270 Comm: syz.2.84 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 165.429052][ T6270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 165.429064][ T6270] Call Trace: [ 165.429072][ T6270] [ 165.429080][ T6270] dump_stack_lvl+0xe8/0x150 [ 165.429124][ T6270] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 165.429162][ T6270] f2fs_write_end_io+0x124b/0x1710 [ 165.429209][ T6270] __submit_merged_bio+0x258/0x6a0 [ 165.429242][ T6270] ? rcu_is_watching+0x15/0xb0 [ 165.429276][ T6270] __submit_merged_write_cond+0x3c9/0x4e0 [ 165.429321][ T6270] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 165.429389][ T6270] f2fs_write_data_pages+0x2a27/0x36f0 [ 165.429458][ T6270] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 165.429554][ T6270] ? __lock_acquire+0x683/0x2ce0 [ 165.429597][ T6270] ? do_raw_spin_lock+0x12b/0x2f0 [ 165.429652][ T6270] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 165.429679][ T6270] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 165.429720][ T6270] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 165.429747][ T6270] do_writepages+0x338/0x560 [ 165.429778][ T6270] ? rt_spin_unlock+0x157/0x200 [ 165.429825][ T6270] filemap_fdatawrite+0x1ec/0x2f0 [ 165.429857][ T6270] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 165.429881][ T6270] ? do_raw_spin_lock+0x12b/0x2f0 [ 165.429957][ T6270] ? rt_spin_unlock+0x157/0x200 [ 165.429997][ T6270] ? rt_spin_unlock+0x163/0x200 [ 165.430035][ T6270] f2fs_sync_dirty_inodes+0x30e/0x830 [ 165.430080][ T6270] f2fs_write_checkpoint+0xa3d/0x2710 [ 165.430151][ T6270] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 165.430234][ T6270] ? rcu_is_watching+0x15/0xb0 [ 165.430269][ T6270] f2fs_issue_checkpoint+0x424/0x6f0 [ 165.430305][ T6270] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 165.430332][ T6270] ? add_lock_to_list+0xc7/0x100 [ 165.430371][ T6270] ? lockdep_unlock+0x5d/0xd0 [ 165.430390][ T6270] ? __lock_acquire+0x13e8/0x2ce0 [ 165.430448][ T6270] ? f2fs_do_sync_file+0x301/0x1960 [ 165.430495][ T6270] ? f2fs_sync_fs+0x1f2/0x3c0 [ 165.430529][ T6270] f2fs_do_sync_file+0xcd6/0x1960 [ 165.430561][ T6270] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 165.430626][ T6270] ? sync_lazytime+0x19a/0x4c0 [ 165.430657][ T6270] ? vfs_fsync_range+0x143/0x150 [ 165.430682][ T6270] ? f2fs_sync_file+0xec/0x160 [ 165.430705][ T6270] f2fs_file_write_iter+0x72a/0x2900 [ 165.430750][ T6270] ? vfs_write+0x231/0xbb0 [ 165.430777][ T6270] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 165.430817][ T6270] vfs_write+0x61e/0xbb0 [ 165.430852][ T6270] ? __pfx_vfs_write+0x10/0x10 [ 165.430880][ T6270] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 165.430903][ T6270] ? lockdep_hardirqs_on+0x7a/0x110 [ 165.430930][ T6270] ? mutex_lock_nested+0x152/0x1d0 [ 165.430957][ T6270] ? fdget_pos+0x252/0x320 [ 165.430988][ T6270] ksys_write+0x156/0x270 [ 165.431016][ T6270] ? __pfx_ksys_write+0x10/0x10 [ 165.431051][ T6270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.431073][ T6270] do_syscall_64+0x174/0x580 [ 165.431096][ T6270] ? trace_irq_disable+0x3b/0x140 [ 165.431116][ T6270] ? clear_bhb_loop+0x40/0x90 [ 165.431141][ T6270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.431160][ T6270] RIP: 0033:0x7ff22c4fde99 [ 165.431179][ T6270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.431194][ T6270] RSP: 002b:00007ff22a756028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.431214][ T6270] RAX: ffffffffffffffda RBX: 00007ff22c785fa0 RCX: 00007ff22c4fde99 [ 165.431228][ T6270] RDX: 0000000000000010 RSI: 0000200000005900 RDI: 0000000000000005 [ 165.431241][ T6270] RBP: 00007ff22c593eaf R08: 0000000000000000 R09: 0000000000000000 [ 165.431253][ T6270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.431265][ T6270] R13: 00007ff22c786038 R14: 00007ff22c785fa0 R15: 00007ffee6138e98 [ 165.431298][ T6270] [ 165.450639][ T6270] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 165.450705][ T6270] CPU: 0 UID: 0 PID: 6270 Comm: syz.2.84 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 165.450729][ T6270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 165.450740][ T6270] Call Trace: [ 165.450750][ T6270] [ 165.450759][ T6270] dump_stack_lvl+0xe8/0x150 [ 165.450796][ T6270] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 165.450834][ T6270] f2fs_write_end_io+0x124b/0x1710 [ 165.450878][ T6270] __submit_merged_bio+0x258/0x6a0 [ 165.450908][ T6270] ? rcu_is_watching+0x15/0xb0 [ 165.450940][ T6270] __submit_merged_write_cond+0x3c9/0x4e0 [ 165.450980][ T6270] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 165.451035][ T6270] f2fs_write_data_pages+0x2a27/0x36f0 [ 165.451097][ T6270] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 165.451172][ T6270] ? __lock_acquire+0x683/0x2ce0 [ 165.451210][ T6270] ? do_raw_spin_lock+0x12b/0x2f0 [ 165.451258][ T6270] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 165.451283][ T6270] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 165.451319][ T6270] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 165.451342][ T6270] do_writepages+0x338/0x560 [ 165.451379][ T6270] ? rt_spin_unlock+0x157/0x200 [ 165.451419][ T6270] filemap_fdatawrite+0x1ec/0x2f0 [ 165.451446][ T6270] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 165.451467][ T6270] ? do_raw_spin_lock+0x12b/0x2f0 [ 165.451542][ T6270] ? rt_spin_unlock+0x157/0x200 [ 165.451576][ T6270] ? rt_spin_unlock+0x163/0x200 [ 165.451608][ T6270] f2fs_sync_dirty_inodes+0x30e/0x830 [ 165.451648][ T6270] f2fs_write_checkpoint+0xa3d/0x2710 [ 165.451708][ T6270] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 165.451781][ T6270] ? rcu_is_watching+0x15/0xb0 [ 165.451811][ T6270] f2fs_issue_checkpoint+0x424/0x6f0 [ 165.451846][ T6270] ? __pfx_f2fs_issue_checkpoint+0x10/0x10 [ 165.451869][ T6270] ? add_lock_to_list+0xc7/0x100 [ 165.451896][ T6270] ? lockdep_unlock+0x5d/0xd0 [ 165.451913][ T6270] ? __lock_acquire+0x13e8/0x2ce0 [ 165.451964][ T6270] ? f2fs_do_sync_file+0x301/0x1960 [ 165.452008][ T6270] ? f2fs_sync_fs+0x1f2/0x3c0 [ 165.452039][ T6270] f2fs_do_sync_file+0xcd6/0x1960 [ 165.452069][ T6270] ? __pfx_f2fs_do_sync_file+0x10/0x10 [ 165.452130][ T6270] ? sync_lazytime+0x19a/0x4c0 [ 165.452161][ T6270] ? vfs_fsync_range+0x143/0x150 [ 165.452185][ T6270] ? f2fs_sync_file+0xec/0x160 [ 165.452208][ T6270] f2fs_file_write_iter+0x72a/0x2900 [ 165.452253][ T6270] ? vfs_write+0x231/0xbb0 [ 165.452280][ T6270] ? __pfx_f2fs_file_write_iter+0x10/0x10 [ 165.452321][ T6270] vfs_write+0x61e/0xbb0 [ 165.452355][ T6270] ? __pfx_vfs_write+0x10/0x10 [ 165.452389][ T6270] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 165.452416][ T6270] ? lockdep_hardirqs_on+0x7a/0x110 [ 165.452442][ T6270] ? mutex_lock_nested+0x152/0x1d0 [ 165.452473][ T6270] ? fdget_pos+0x252/0x320 [ 165.452505][ T6270] ksys_write+0x156/0x270 [ 165.452537][ T6270] ? __pfx_ksys_write+0x10/0x10 [ 165.452576][ T6270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.452600][ T6270] do_syscall_64+0x174/0x580 [ 165.452625][ T6270] ? trace_irq_disable+0x3b/0x140 [ 165.452647][ T6270] ? clear_bhb_loop+0x40/0x90 [ 165.452675][ T6270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.452695][ T6270] RIP: 0033:0x7ff22c4fde99 [ 165.452717][ T6270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.452733][ T6270] RSP: 002b:00007ff22a756028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.452755][ T6270] RAX: ffffffffffffffda RBX: 00007ff22c785fa0 RCX: 00007ff22c4fde99 [ 165.452770][ T6270] RDX: 0000000000000010 RSI: 0000200000005900 RDI: 0000000000000005 [ 165.452784][ T6270] RBP: 00007ff22c593eaf R08: 0000000000000000 R09: 0000000000000000 [ 165.452797][ T6270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.452809][ T6270] R13: 00007ff22c786038 R14: 00007ff22c785fa0 R15: 00007ffee6138e98 [ 165.452843][ T6270] [ 165.464546][ T6270] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 165.477965][ T6148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.912355][ T6148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.208808][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.327378][ T6296] loop2: detected capacity change from 0 to 128 [ 167.431353][ T6296] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.447706][ T6296] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.464955][ T6296] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.86: No space for directory leaf checksum. Please run e2fsck -D. [ 167.464991][ T6296] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.86: checksumming directory block 0 [ 167.465972][ T6296] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.86: No space for directory leaf checksum. Please run e2fsck -D. [ 167.466002][ T6296] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.86: checksumming directory block 0 [ 167.491846][ T6296] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.86: No space for directory leaf checksum. Please run e2fsck -D. [ 167.491879][ T6296] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.86: checksumming directory block 0 [ 167.493400][ T6296] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.86: No space for directory leaf checksum. Please run e2fsck -D. [ 167.493427][ T6296] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.86: checksumming directory block 0 [ 167.501069][ T6296] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.86: No space for directory leaf checksum. Please run e2fsck -D. [ 167.501101][ T6296] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.86: checksumming directory block 0 [ 167.501900][ T6296] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.86: No space for directory leaf checksum. Please run e2fsck -D. [ 167.501923][ T6296] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.86: checksumming directory block 0 [ 167.504039][ T6296] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.86: No space for directory leaf checksum. Please run e2fsck -D. [ 167.504066][ T6296] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.86: checksumming directory block 0 [ 167.504853][ T6296] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.86: No space for directory leaf checksum. Please run e2fsck -D. [ 167.504876][ T6296] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.86: checksumming directory block 0 [ 167.505635][ T6296] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.86: No space for directory leaf checksum. Please run e2fsck -D. [ 167.505658][ T6296] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.86: checksumming directory block 0 [ 167.506327][ T6296] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.86: No space for directory leaf checksum. Please run e2fsck -D. [ 167.506350][ T6296] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.86: Directory block failed checksum [ 167.737511][ T5600] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.940707][ T6148] team0: Port device team_slave_0 added [ 168.122333][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.157243][ T6300] loop2: detected capacity change from 0 to 32768 [ 168.203270][ T6300] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.87 (6300) [ 168.337902][ T6148] team0: Port device team_slave_1 added [ 168.375889][ T6300] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.375926][ T6300] BTRFS info (device loop2): using sha256 checksum algorithm [ 168.508093][ T6300] BTRFS info (device loop2): enabling ssd optimizations [ 168.508124][ T6300] BTRFS info (device loop2): turning on async discard [ 168.508141][ T6300] BTRFS info (device loop2): enabling free space tree [ 168.588828][ T6300] BTRFS warning (device loop2): get dev_stats failed, device not found [ 168.759014][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.240420][ T6148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.240439][ T6148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.240467][ T6148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.329522][ T6148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.329541][ T6148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.329570][ T6148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.587453][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.936691][ T5600] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 169.958150][ T6148] hsr_slave_0: entered promiscuous mode [ 169.959687][ T6148] hsr_slave_1: entered promiscuous mode [ 169.960691][ T6148] debugfs: 'hsr0' already exists in 'hsr' [ 169.960714][ T6148] Cannot create hsr debugfs directory [ 170.064893][ T5977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.444080][ T5977] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.948901][ T4160] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.949050][ T4160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.008264][ T6059] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 171.166765][ T6059] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 171.392728][ T6059] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 171.440688][ T6059] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 171.541092][ T6059] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 171.588153][ T6059] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 171.629108][ T4160] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.630862][ T4160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.710209][ T6059] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 171.756328][ T6059] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 171.760579][ T6327] loop2: detected capacity change from 0 to 32768 [ 171.985127][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 172.035620][ T166] read_mapping_page failed! [ 172.035636][ T166] ERROR: (device loop2): txCommit: [ 172.035636][ T166] [ 172.073288][ T166] jfs_write_inode: jfs_commit_inode failed! [ 173.089885][ T6341] loop2: detected capacity change from 0 to 32768 [ 173.282969][ T6341] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 173.632186][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.825388][ T6122] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 173.879144][ T6122] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.881010][ T5600] ocfs2: Unmounting device (7,2) on (node local) [ 173.926843][ T6122] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 174.041096][ T6122] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.234165][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.275790][ T6122] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 174.313231][ T6122] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.335822][ T6122] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 174.415160][ T6122] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.578831][ T6346] loop2: detected capacity change from 0 to 32768 [ 174.610511][ T6346] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.90 (6346) [ 174.941005][ T6346] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 174.941042][ T6346] BTRFS info (device loop2): using crc32c checksum algorithm [ 175.071068][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.174874][ T6346] BTRFS info (device loop2): enabling ssd optimizations [ 175.174893][ T6346] BTRFS info (device loop2): turning on flush-on-commit [ 175.174903][ T6346] BTRFS info (device loop2): enabling free space tree [ 175.174912][ T6346] BTRFS info (device loop2): enabling auto defrag [ 175.174922][ T6346] BTRFS info (device loop2): use lzo compression, level 1 [ 175.174935][ T6346] BTRFS info (device loop2): max_inline set to 4096 [ 175.665395][ T5600] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.672236][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.959621][ T5257] 8021q: adding VLAN 0 to HW filter on device eth6 [ 177.271254][ T6383] loop2: detected capacity change from 0 to 40427 [ 177.365873][ T6383] F2FS-fs (loop2): invalid crc value [ 177.615484][ T6148] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 177.748386][ T6148] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 177.771157][ T6148] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 177.951560][ T6148] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 177.986966][ T6059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.991090][ T6148] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 178.056048][ T6383] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 178.128520][ T6148] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 178.153597][ T6148] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 178.247767][ T6383] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 178.294959][ T6148] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 178.709493][ T5257] 8021q: adding VLAN 0 to HW filter on device eth7 [ 178.881035][ T6059] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.073895][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.074068][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.385930][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.386169][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.466658][ T37] audit: type=1800 audit(1785224147.616:14): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.91" name="file1" dev="loop2" ino=34 res=0 errno=0 [ 179.523021][ T40] bridge_slave_1: left allmulticast mode [ 179.523047][ T40] bridge_slave_1: left promiscuous mode [ 179.545191][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.663625][ T40] bridge_slave_0: left allmulticast mode [ 179.663652][ T40] bridge_slave_0: left promiscuous mode [ 179.663828][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.691995][ T5600] syz-executor: attempt to access beyond end of device [ 179.691995][ T5600] loop2: rw=2049, sector=45096, nr_sectors = 48 limit=40427 [ 179.701366][ T5600] CPU: 0 UID: 0 PID: 5600 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 179.701395][ T5600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 179.701406][ T5600] Call Trace: [ 179.701414][ T5600] [ 179.701422][ T5600] dump_stack_lvl+0xe8/0x150 [ 179.701458][ T5600] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 179.701492][ T5600] f2fs_write_end_io+0x124b/0x1710 [ 179.701535][ T5600] __submit_merged_bio+0x258/0x6a0 [ 179.701563][ T5600] ? rcu_is_watching+0x15/0xb0 [ 179.701593][ T5600] __submit_merged_write_cond+0x3c9/0x4e0 [ 179.701631][ T5600] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 179.701682][ T5600] f2fs_write_data_pages+0x2a27/0x36f0 [ 179.701703][ T5600] ? __bfs+0x153/0x290 [ 179.701722][ T5600] ? __pfx_hlock_conflict+0x10/0x10 [ 179.701779][ T5600] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 179.701851][ T5600] ? __lock_acquire+0x683/0x2ce0 [ 179.701887][ T5600] ? do_raw_spin_lock+0x12b/0x2f0 [ 179.701937][ T5600] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 179.701961][ T5600] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 179.701994][ T5600] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 179.702017][ T5600] do_writepages+0x338/0x560 [ 179.702045][ T5600] ? rt_spin_unlock+0x157/0x200 [ 179.702083][ T5600] filemap_fdatawrite+0x1ec/0x2f0 [ 179.702111][ T5600] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 179.702205][ T5600] f2fs_sync_dirty_inodes+0x30e/0x830 [ 179.702243][ T5600] f2fs_write_checkpoint+0xa3d/0x2710 [ 179.702265][ T5600] ? __lock_acquire+0x683/0x2ce0 [ 179.702324][ T5600] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 179.702401][ T5600] kill_f2fs_super+0x2f6/0x700 [ 179.702433][ T5600] ? __pfx_kill_f2fs_super+0x10/0x10 [ 179.702472][ T5600] ? call_rcu+0x64b/0x8b0 [ 179.702496][ T5600] ? lockdep_hardirqs_on+0x7a/0x110 [ 179.702532][ T5600] deactivate_locked_super+0xbc/0x130 [ 179.702558][ T5600] cleanup_mnt+0x3d3/0x460 [ 179.702587][ T5600] task_work_run+0x1d9/0x270 [ 179.702610][ T5600] ? __pfx_task_work_run+0x10/0x10 [ 179.702640][ T5600] exit_to_user_mode_loop+0x1fa/0x730 [ 179.702660][ T5600] ? rcu_is_watching+0x15/0xb0 [ 179.702684][ T5600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.702705][ T5600] do_syscall_64+0x353/0x580 [ 179.702728][ T5600] ? trace_irq_disable+0x3b/0x140 [ 179.702748][ T5600] ? clear_bhb_loop+0x40/0x90 [ 179.702772][ T5600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.702792][ T5600] RIP: 0033:0x7ff22c4ff0d7 [ 179.702810][ T5600] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 179.702826][ T5600] RSP: 002b:00007ffee6138108 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 179.702847][ T5600] RAX: 0000000000000000 RBX: 00007ff22c59330a RCX: 00007ff22c4ff0d7 [ 179.702860][ T5600] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee61381c0 [ 179.702872][ T5600] RBP: 00007ffee61381c0 R08: 00007ffee61391c0 R09: 00000000ffffffff [ 179.702884][ T5600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee6139250 [ 179.702896][ T5600] R13: 00007ff22c59330a R14: 000000000002bc4d R15: 00007ffee6139290 [ 179.702927][ T5600] [ 179.719501][ T5600] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 179.719746][ T5600] CPU: 0 UID: 0 PID: 5600 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 179.719770][ T5600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 179.719781][ T5600] Call Trace: [ 179.719789][ T5600] [ 179.719797][ T5600] dump_stack_lvl+0xe8/0x150 [ 179.719833][ T5600] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 179.719868][ T5600] f2fs_write_end_io+0x124b/0x1710 [ 179.719914][ T5600] __submit_merged_bio+0x258/0x6a0 [ 179.719943][ T5600] ? rcu_is_watching+0x15/0xb0 [ 179.719973][ T5600] __submit_merged_write_cond+0x3c9/0x4e0 [ 179.720013][ T5600] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 179.720068][ T5600] f2fs_write_data_pages+0x2a27/0x36f0 [ 179.720089][ T5600] ? __bfs+0x153/0x290 [ 179.720108][ T5600] ? __pfx_hlock_conflict+0x10/0x10 [ 179.720170][ T5600] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 179.720247][ T5600] ? __lock_acquire+0x683/0x2ce0 [ 179.720292][ T5600] ? do_raw_spin_lock+0x12b/0x2f0 [ 179.720340][ T5600] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 179.720364][ T5600] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 179.720398][ T5600] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 179.720421][ T5600] do_writepages+0x338/0x560 [ 179.720450][ T5600] ? rt_spin_unlock+0x157/0x200 [ 179.720489][ T5600] filemap_fdatawrite+0x1ec/0x2f0 [ 179.720517][ T5600] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 179.720599][ T5600] f2fs_sync_dirty_inodes+0x30e/0x830 [ 179.720639][ T5600] f2fs_write_checkpoint+0xa3d/0x2710 [ 179.720661][ T5600] ? __lock_acquire+0x683/0x2ce0 [ 179.720716][ T5600] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 179.720800][ T5600] kill_f2fs_super+0x2f6/0x700 [ 179.720830][ T5600] ? __pfx_kill_f2fs_super+0x10/0x10 [ 179.720871][ T5600] ? call_rcu+0x64b/0x8b0 [ 179.720894][ T5600] ? lockdep_hardirqs_on+0x7a/0x110 [ 179.720932][ T5600] deactivate_locked_super+0xbc/0x130 [ 179.720959][ T5600] cleanup_mnt+0x3d3/0x460 [ 179.720989][ T5600] task_work_run+0x1d9/0x270 [ 179.721014][ T5600] ? __pfx_task_work_run+0x10/0x10 [ 179.721046][ T5600] exit_to_user_mode_loop+0x1fa/0x730 [ 179.721066][ T5600] ? rcu_is_watching+0x15/0xb0 [ 179.721091][ T5600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.721113][ T5600] do_syscall_64+0x353/0x580 [ 179.721135][ T5600] ? trace_irq_disable+0x3b/0x140 [ 179.721156][ T5600] ? clear_bhb_loop+0x40/0x90 [ 179.721180][ T5600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.721200][ T5600] RIP: 0033:0x7ff22c4ff0d7 [ 179.721219][ T5600] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 179.721235][ T5600] RSP: 002b:00007ffee6138108 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 179.721257][ T5600] RAX: 0000000000000000 RBX: 00007ff22c59330a RCX: 00007ff22c4ff0d7 [ 179.721271][ T5600] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee61381c0 [ 179.721290][ T5600] RBP: 00007ffee61381c0 R08: 00007ffee61391c0 R09: 00000000ffffffff [ 179.721303][ T5600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee6139250 [ 179.721315][ T5600] R13: 00007ff22c59330a R14: 000000000002bc4d R15: 00007ffee6139290 [ 179.721350][ T5600] [ 179.731053][ T5600] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 179.731122][ T5600] CPU: 0 UID: 0 PID: 5600 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 179.731145][ T5600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 179.731156][ T5600] Call Trace: [ 179.731163][ T5600] [ 179.731171][ T5600] dump_stack_lvl+0xe8/0x150 [ 179.731207][ T5600] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 179.731243][ T5600] f2fs_write_end_io+0x124b/0x1710 [ 179.731296][ T5600] __submit_merged_bio+0x258/0x6a0 [ 179.731325][ T5600] ? rcu_is_watching+0x15/0xb0 [ 179.731356][ T5600] __submit_merged_write_cond+0x3c9/0x4e0 [ 179.731396][ T5600] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 179.731451][ T5600] f2fs_write_data_pages+0x2a27/0x36f0 [ 179.731472][ T5600] ? __bfs+0x153/0x290 [ 179.731491][ T5600] ? __pfx_hlock_conflict+0x10/0x10 [ 179.731554][ T5600] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 179.731631][ T5600] ? __lock_acquire+0x683/0x2ce0 [ 179.731667][ T5600] ? do_raw_spin_lock+0x12b/0x2f0 [ 179.731716][ T5600] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 179.731740][ T5600] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 179.731774][ T5600] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 179.731797][ T5600] do_writepages+0x338/0x560 [ 179.731826][ T5600] ? rt_spin_unlock+0x157/0x200 [ 179.731865][ T5600] filemap_fdatawrite+0x1ec/0x2f0 [ 179.731893][ T5600] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 179.731974][ T5600] f2fs_sync_dirty_inodes+0x30e/0x830 [ 179.732013][ T5600] f2fs_write_checkpoint+0xa3d/0x2710 [ 179.732035][ T5600] ? __lock_acquire+0x683/0x2ce0 [ 179.732090][ T5600] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 179.732177][ T5600] kill_f2fs_super+0x2f6/0x700 [ 179.732207][ T5600] ? __pfx_kill_f2fs_super+0x10/0x10 [ 179.732239][ T5600] ? call_rcu+0x64b/0x8b0 [ 179.732262][ T5600] ? lockdep_hardirqs_on+0x7a/0x110 [ 179.732308][ T5600] deactivate_locked_super+0xbc/0x130 [ 179.732336][ T5600] cleanup_mnt+0x3d3/0x460 [ 179.732365][ T5600] task_work_run+0x1d9/0x270 [ 179.732391][ T5600] ? __pfx_task_work_run+0x10/0x10 [ 179.732424][ T5600] exit_to_user_mode_loop+0x1fa/0x730 [ 179.732444][ T5600] ? rcu_is_watching+0x15/0xb0 [ 179.732470][ T5600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.732491][ T5600] do_syscall_64+0x353/0x580 [ 179.732513][ T5600] ? trace_irq_disable+0x3b/0x140 [ 179.732533][ T5600] ? clear_bhb_loop+0x40/0x90 [ 179.732558][ T5600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.732578][ T5600] RIP: 0033:0x7ff22c4ff0d7 [ 179.732598][ T5600] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 179.732613][ T5600] RSP: 002b:00007ffee6138108 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 179.732635][ T5600] RAX: 0000000000000000 RBX: 00007ff22c59330a RCX: 00007ff22c4ff0d7 [ 179.732648][ T5600] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee61381c0 [ 179.732660][ T5600] RBP: 00007ffee61381c0 R08: 00007ffee61391c0 R09: 00000000ffffffff [ 179.732673][ T5600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee6139250 [ 179.732685][ T5600] R13: 00007ff22c59330a R14: 000000000002bc4d R15: 00007ffee6139290 [ 179.732720][ T5600] [ 179.749846][ T5600] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 179.749915][ T5600] CPU: 0 UID: 0 PID: 5600 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 179.749940][ T5600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 179.749952][ T5600] Call Trace: [ 179.749961][ T5600] [ 179.749969][ T5600] dump_stack_lvl+0xe8/0x150 [ 179.750011][ T5600] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 179.750053][ T5600] f2fs_write_end_io+0x124b/0x1710 [ 179.750106][ T5600] __submit_merged_bio+0x258/0x6a0 [ 179.750139][ T5600] ? rcu_is_watching+0x15/0xb0 [ 179.750175][ T5600] __submit_merged_write_cond+0x3c9/0x4e0 [ 179.750222][ T5600] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 179.750295][ T5600] f2fs_write_data_pages+0x2a27/0x36f0 [ 179.750319][ T5600] ? __bfs+0x153/0x290 [ 179.750341][ T5600] ? __pfx_hlock_conflict+0x10/0x10 [ 179.750414][ T5600] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 179.750503][ T5600] ? __lock_acquire+0x683/0x2ce0 [ 179.750546][ T5600] ? do_raw_spin_lock+0x12b/0x2f0 [ 179.750601][ T5600] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 179.750630][ T5600] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 179.750670][ T5600] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 179.750697][ T5600] do_writepages+0x338/0x560 [ 179.750730][ T5600] ? rt_spin_unlock+0x157/0x200 [ 179.750776][ T5600] filemap_fdatawrite+0x1ec/0x2f0 [ 179.750812][ T5600] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 179.750918][ T5600] f2fs_sync_dirty_inodes+0x30e/0x830 [ 179.750964][ T5600] f2fs_write_checkpoint+0xa3d/0x2710 [ 179.750990][ T5600] ? __lock_acquire+0x683/0x2ce0 [ 179.751054][ T5600] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 179.751150][ T5600] kill_f2fs_super+0x2f6/0x700 [ 179.751184][ T5600] ? __pfx_kill_f2fs_super+0x10/0x10 [ 179.751226][ T5600] ? call_rcu+0x64b/0x8b0 [ 179.751254][ T5600] ? lockdep_hardirqs_on+0x7a/0x110 [ 179.751302][ T5600] deactivate_locked_super+0xbc/0x130 [ 179.751329][ T5600] cleanup_mnt+0x3d3/0x460 [ 179.751359][ T5600] task_work_run+0x1d9/0x270 [ 179.751384][ T5600] ? __pfx_task_work_run+0x10/0x10 [ 179.751414][ T5600] exit_to_user_mode_loop+0x1fa/0x730 [ 179.751434][ T5600] ? rcu_is_watching+0x15/0xb0 [ 179.751459][ T5600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.751481][ T5600] do_syscall_64+0x353/0x580 [ 179.751503][ T5600] ? trace_irq_disable+0x3b/0x140 [ 179.751523][ T5600] ? clear_bhb_loop+0x40/0x90 [ 179.751547][ T5600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.751566][ T5600] RIP: 0033:0x7ff22c4ff0d7 [ 179.751586][ T5600] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 179.751601][ T5600] RSP: 002b:00007ffee6138108 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 179.751622][ T5600] RAX: 0000000000000000 RBX: 00007ff22c59330a RCX: 00007ff22c4ff0d7 [ 179.751635][ T5600] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee61381c0 [ 179.751646][ T5600] RBP: 00007ffee61381c0 R08: 00007ffee61391c0 R09: 00000000ffffffff [ 179.751658][ T5600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee6139250 [ 179.751670][ T5600] R13: 00007ff22c59330a R14: 000000000002bc4d R15: 00007ffee6139290 [ 179.751704][ T5600] [ 179.770802][ T5600] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 179.770867][ T5600] CPU: 0 UID: 0 PID: 5600 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 179.770889][ T5600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 179.770899][ T5600] Call Trace: [ 179.770907][ T5600] [ 179.770914][ T5600] dump_stack_lvl+0xe8/0x150 [ 179.770949][ T5600] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 179.770983][ T5600] f2fs_write_end_io+0x124b/0x1710 [ 179.771026][ T5600] __submit_merged_bio+0x258/0x6a0 [ 179.771054][ T5600] ? rcu_is_watching+0x15/0xb0 [ 179.771083][ T5600] __submit_merged_write_cond+0x3c9/0x4e0 [ 179.771120][ T5600] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 179.771172][ T5600] f2fs_write_data_pages+0x2a27/0x36f0 [ 179.771192][ T5600] ? __bfs+0x153/0x290 [ 179.771211][ T5600] ? __pfx_hlock_conflict+0x10/0x10 [ 179.771268][ T5600] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 179.771347][ T5600] ? __lock_acquire+0x683/0x2ce0 [ 179.771381][ T5600] ? do_raw_spin_lock+0x12b/0x2f0 [ 179.771426][ T5600] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 179.771454][ T5600] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 179.771487][ T5600] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 179.771510][ T5600] do_writepages+0x338/0x560 [ 179.771537][ T5600] ? rt_spin_unlock+0x157/0x200 [ 179.771574][ T5600] filemap_fdatawrite+0x1ec/0x2f0 [ 179.771601][ T5600] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 179.771676][ T5600] f2fs_sync_dirty_inodes+0x30e/0x830 [ 179.771714][ T5600] f2fs_write_checkpoint+0xa3d/0x2710 [ 179.771736][ T5600] ? __lock_acquire+0x683/0x2ce0 [ 179.771786][ T5600] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 179.771861][ T5600] kill_f2fs_super+0x2f6/0x700 [ 179.771890][ T5600] ? __pfx_kill_f2fs_super+0x10/0x10 [ 179.771923][ T5600] ? call_rcu+0x64b/0x8b0 [ 179.771946][ T5600] ? lockdep_hardirqs_on+0x7a/0x110 [ 179.771982][ T5600] deactivate_locked_super+0xbc/0x130 [ 179.772007][ T5600] cleanup_mnt+0x3d3/0x460 [ 179.772035][ T5600] task_work_run+0x1d9/0x270 [ 179.772059][ T5600] ? __pfx_task_work_run+0x10/0x10 [ 179.772089][ T5600] exit_to_user_mode_loop+0x1fa/0x730 [ 179.772108][ T5600] ? rcu_is_watching+0x15/0xb0 [ 179.772132][ T5600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.772153][ T5600] do_syscall_64+0x353/0x580 [ 179.772175][ T5600] ? trace_irq_disable+0x3b/0x140 [ 179.772194][ T5600] ? clear_bhb_loop+0x40/0x90 [ 179.772218][ T5600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.772237][ T5600] RIP: 0033:0x7ff22c4ff0d7 [ 179.772256][ T5600] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 179.772279][ T5600] RSP: 002b:00007ffee6138108 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 179.772302][ T5600] RAX: 0000000000000000 RBX: 00007ff22c59330a RCX: 00007ff22c4ff0d7 [ 179.772316][ T5600] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee61381c0 [ 179.772328][ T5600] RBP: 00007ffee61381c0 R08: 00007ffee61391c0 R09: 00000000ffffffff [ 179.772340][ T5600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee6139250 [ 179.772353][ T5600] R13: 00007ff22c59330a R14: 000000000002bc4d R15: 00007ffee6139290 [ 179.772385][ T5600] [ 179.775580][ T5600] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 179.804534][ T5600] CPU: 0 UID: 0 PID: 5600 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 179.804565][ T5600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 179.804577][ T5600] Call Trace: [ 179.804586][ T5600] [ 179.804594][ T5600] dump_stack_lvl+0xe8/0x150 [ 179.804630][ T5600] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 179.804666][ T5600] f2fs_write_end_io+0x124b/0x1710 [ 179.804712][ T5600] __submit_merged_bio+0x258/0x6a0 [ 179.804740][ T5600] ? rcu_is_watching+0x15/0xb0 [ 179.804771][ T5600] __submit_merged_write_cond+0x3c9/0x4e0 [ 179.804811][ T5600] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 179.804866][ T5600] f2fs_write_data_pages+0x2a27/0x36f0 [ 179.804888][ T5600] ? __bfs+0x153/0x290 [ 179.804907][ T5600] ? __pfx_hlock_conflict+0x10/0x10 [ 179.804969][ T5600] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 179.805046][ T5600] ? __lock_acquire+0x683/0x2ce0 [ 179.805083][ T5600] ? do_raw_spin_lock+0x12b/0x2f0 [ 179.805130][ T5600] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 179.805155][ T5600] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 179.805189][ T5600] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 179.805212][ T5600] do_writepages+0x338/0x560 [ 179.805240][ T5600] ? rt_spin_unlock+0x157/0x200 [ 179.805289][ T5600] filemap_fdatawrite+0x1ec/0x2f0 [ 179.805316][ T5600] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 179.805398][ T5600] f2fs_sync_dirty_inodes+0x30e/0x830 [ 179.805438][ T5600] f2fs_write_checkpoint+0xa3d/0x2710 [ 179.805459][ T5600] ? __lock_acquire+0x683/0x2ce0 [ 179.805515][ T5600] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 179.805598][ T5600] kill_f2fs_super+0x2f6/0x700 [ 179.805628][ T5600] ? __pfx_kill_f2fs_super+0x10/0x10 [ 179.805665][ T5600] ? call_rcu+0x64b/0x8b0 [ 179.805688][ T5600] ? lockdep_hardirqs_on+0x7a/0x110 [ 179.805727][ T5600] deactivate_locked_super+0xbc/0x130 [ 179.805753][ T5600] cleanup_mnt+0x3d3/0x460 [ 179.805783][ T5600] task_work_run+0x1d9/0x270 [ 179.805808][ T5600] ? __pfx_task_work_run+0x10/0x10 [ 179.805844][ T5600] exit_to_user_mode_loop+0x1fa/0x730 [ 179.805864][ T5600] ? rcu_is_watching+0x15/0xb0 [ 179.805891][ T5600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.805914][ T5600] do_syscall_64+0x353/0x580 [ 179.805939][ T5600] ? trace_irq_disable+0x3b/0x140 [ 179.805960][ T5600] ? clear_bhb_loop+0x40/0x90 [ 179.805986][ T5600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.806006][ T5600] RIP: 0033:0x7ff22c4ff0d7 [ 179.806027][ T5600] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 179.806042][ T5600] RSP: 002b:00007ffee6138108 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 179.806063][ T5600] RAX: 0000000000000000 RBX: 00007ff22c59330a RCX: 00007ff22c4ff0d7 [ 179.806076][ T5600] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee61381c0 [ 179.806088][ T5600] RBP: 00007ffee61381c0 R08: 00007ffee61391c0 R09: 00000000ffffffff [ 179.806101][ T5600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffee6139250 [ 179.806112][ T5600] R13: 00007ff22c59330a R14: 000000000002bc4d R15: 00007ffee6139290 [ 179.806146][ T5600] [ 179.807534][ T5600] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 180.325400][ T40] bridge_slave_1: left allmulticast mode [ 180.325436][ T40] bridge_slave_1: left promiscuous mode [ 180.325685][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.970364][ T40] bridge_slave_0: left allmulticast mode [ 180.970400][ T40] bridge_slave_0: left promiscuous mode [ 181.014590][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.287994][ T6422] loop2: detected capacity change from 0 to 128 [ 181.454054][ T6422] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 181.457652][ T6422] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.485235][ T6422] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.93: No space for directory leaf checksum. Please run e2fsck -D. [ 181.485267][ T6422] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.93: checksumming directory block 0 [ 181.497131][ T6422] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.93: No space for directory leaf checksum. Please run e2fsck -D. [ 181.497162][ T6422] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.93: checksumming directory block 0 [ 181.518235][ T6422] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.93: No space for directory leaf checksum. Please run e2fsck -D. [ 181.518269][ T6422] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.93: checksumming directory block 0 [ 181.523143][ T6422] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.93: No space for directory leaf checksum. Please run e2fsck -D. [ 181.523170][ T6422] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.93: checksumming directory block 0 [ 181.609263][ T40] bridge_slave_1: left allmulticast mode [ 181.609299][ T40] bridge_slave_1: left promiscuous mode [ 181.609528][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.626778][ T6422] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.93: No space for directory leaf checksum. Please run e2fsck -D. [ 181.626813][ T6422] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.93: checksumming directory block 0 [ 181.634183][ T6425] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.93: No space for directory leaf checksum. Please run e2fsck -D. [ 181.634217][ T6425] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.93: checksumming directory block 0 [ 181.647295][ T6422] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.93: No space for directory leaf checksum. Please run e2fsck -D. [ 181.647330][ T6422] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.93: checksumming directory block 0 [ 181.684488][ T6422] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.93: No space for directory leaf checksum. Please run e2fsck -D. [ 181.684521][ T6422] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.93: checksumming directory block 0 [ 181.698567][ T6422] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.93: No space for directory leaf checksum. Please run e2fsck -D. [ 181.698599][ T6422] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.93: checksumming directory block 0 [ 181.736854][ T6422] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.93: No space for directory leaf checksum. Please run e2fsck -D. [ 181.736890][ T6422] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.93: Directory block failed checksum [ 181.800732][ T5600] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.859974][ T40] bridge_slave_0: left allmulticast mode [ 181.860011][ T40] bridge_slave_0: left promiscuous mode [ 181.860352][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.968045][ T6427] loop2: detected capacity change from 0 to 256 [ 182.015428][ T6427] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 182.015449][ T6427] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 182.048581][ T6427] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 182.049525][ T6427] exFAT-fs (loop2): failed to load alloc-bitmap [ 182.049539][ T6427] exFAT-fs (loop2): failed to recognize exfat type [ 182.141811][ T6427] loop2: detected capacity change from 0 to 1024 [ 183.126721][ T6429] loop2: detected capacity change from 0 to 32768 [ 183.347020][ T4160] read_mapping_page failed! [ 183.347032][ T4160] ERROR: (device loop2): txCommit: [ 183.347032][ T4160] [ 183.351563][ T4160] jfs_write_inode: jfs_commit_inode failed! [ 183.834493][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.915624][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.936426][ T40] bond0 (unregistering): Released all slaves [ 183.995093][ T6431] loop2: detected capacity change from 0 to 32768 [ 184.157498][ T6431] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 184.685656][ T5600] ocfs2: Unmounting device (7,2) on (node local) [ 184.933351][ T6436] loop2: detected capacity change from 0 to 128 [ 184.977983][ T6436] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.978525][ T6436] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 185.085491][ T6436] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.2.97: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 185.108926][ T6436] EXT4-fs error (device loop2): dx_make_map:1296: inode #2: block 33: comm syz.2.97: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 185.110702][ T6436] EXT4-fs error (device loop2) in do_split:2027: Corrupt filesystem [ 185.155376][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.176802][ T5600] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 185.264433][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.284546][ T6440] loop2: detected capacity change from 0 to 512 [ 185.331622][ T6440] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.98: bg 0: block 127: padding at end of block bitmap is not set [ 185.331663][ T6440] loop2: lost filesystem error report for type 5 error -117 [ 185.340359][ C0] EXT4-fs (loop2): initial error at time 1785224153: ext4_validate_block_bitmap:441 [ 185.340394][ C0] EXT4-fs (loop2): last error at time 1785224153: ext4_validate_block_bitmap:441 [ 185.368634][ T6440] EXT4-fs (loop2): Remounting filesystem read-only [ 185.377139][ T6440] EXT4-fs warning (device loop2): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.2.98: cleanup dec ref error -28 [ 185.380614][ T6440] EXT4-fs warning (device loop2): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 185.380707][ T6440] EXT4-fs (loop2): 1 orphan inode deleted [ 185.393173][ T6440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.497136][ T40] bond0 (unregistering): Released all slaves [ 186.143483][ T6440] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 186.146267][ T6440] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 186.199278][ T5600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.340591][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.415305][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.474139][ T6445] loop2: detected capacity change from 0 to 128 [ 186.484798][ T40] bond0 (unregistering): Released all slaves [ 186.552694][ T6445] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.553500][ T6445] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.596559][ T6445] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.100: No space for directory leaf checksum. Please run e2fsck -D. [ 186.596595][ T6445] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.100: checksumming directory block 0 [ 186.599133][ T6445] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.100: No space for directory leaf checksum. Please run e2fsck -D. [ 186.599165][ T6445] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.100: checksumming directory block 0 [ 186.600049][ T6445] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.100: No space for directory leaf checksum. Please run e2fsck -D. [ 186.600082][ T6445] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.100: checksumming directory block 0 [ 186.603298][ T6445] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.100: No space for directory leaf checksum. Please run e2fsck -D. [ 186.603332][ T6445] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.100: checksumming directory block 0 [ 186.634706][ T6445] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.100: No space for directory leaf checksum. Please run e2fsck -D. [ 186.634740][ T6445] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.100: checksumming directory block 0 [ 186.635706][ T6445] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.100: No space for directory leaf checksum. Please run e2fsck -D. [ 186.635732][ T6445] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.100: checksumming directory block 0 [ 186.642226][ T6445] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.100: No space for directory leaf checksum. Please run e2fsck -D. [ 186.642259][ T6445] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.100: checksumming directory block 0 [ 186.648113][ T6445] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.100: No space for directory leaf checksum. Please run e2fsck -D. [ 186.648146][ T6445] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.100: checksumming directory block 0 [ 186.655199][ T6445] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.100: No space for directory leaf checksum. Please run e2fsck -D. [ 186.655231][ T6445] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.100: checksumming directory block 0 [ 186.656035][ T6445] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.100: No space for directory leaf checksum. Please run e2fsck -D. [ 186.656062][ T6445] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.100: Directory block failed checksum [ 186.736937][ T6122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.862897][ T5600] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.209925][ T5977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.334574][ T6122] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.546788][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.551062][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.786094][ T1490] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.786248][ T1490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.361575][ T6457] loop2: detected capacity change from 0 to 32768 [ 188.876878][ T68] read_mapping_page failed! [ 188.876894][ T68] ERROR: (device loop2): txCommit: [ 188.876894][ T68] [ 188.905818][ T68] jfs_write_inode: jfs_commit_inode failed! [ 189.011433][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 189.042641][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 189.060296][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 189.084762][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 189.110322][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 189.519035][ T5257] 8021q: adding VLAN 0 to HW filter on device eth8 [ 189.791380][ T6148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.454546][ T6494] loop2: detected capacity change from 0 to 32768 [ 190.526637][ T6494] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 190.944899][ T5600] ocfs2: Unmounting device (7,2) on (node local) [ 191.222953][ T5610] Bluetooth: hci4: command tx timeout [ 191.344710][ T6148] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.394808][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.396642][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.821233][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.831710][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.011667][ T6508] loop2: detected capacity change from 0 to 32768 [ 192.024292][ T6508] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.104 (6508) [ 192.154254][ T6508] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 192.154289][ T6508] BTRFS info (device loop2): using crc32c checksum algorithm [ 192.414660][ T4160] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 192.468143][ T6508] BTRFS warning (device loop2): couldn't read tree root [ 192.468174][ T6508] BTRFS warning (device loop2): try to load backup roots slot 1 [ 192.492649][ T4160] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 192.494142][ T6508] BTRFS warning (device loop2): couldn't read tree root [ 192.494168][ T6508] BTRFS warning (device loop2): try to load backup roots slot 2 [ 192.500018][ T4160] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 192.501207][ T6508] BTRFS warning (device loop2): couldn't read tree root [ 192.501232][ T6508] BTRFS warning (device loop2): try to load backup roots slot 3 [ 192.825512][ T6508] BTRFS info (device loop2): checking UUID tree [ 192.827587][ T6508] BTRFS info (device loop2): setting nodatasum [ 192.827622][ T6508] BTRFS info (device loop2): enabling ssd optimizations [ 192.827642][ T6508] BTRFS info (device loop2): turning on flush-on-commit [ 192.827659][ T6508] BTRFS info (device loop2): turning on async discard [ 192.827676][ T6508] BTRFS info (device loop2): enabling free space tree [ 192.827694][ T6508] BTRFS info (device loop2): trying to use backup root at mount time [ 192.827712][ T6508] BTRFS info (device loop2): max_inline set to 0 [ 193.305872][ T5610] Bluetooth: hci4: command tx timeout [ 193.631569][ T6059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.718356][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 194.516634][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.516714][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.679508][ T5600] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 195.382598][ T5610] Bluetooth: hci4: command tx timeout [ 195.425516][ T6566] loop2: detected capacity change from 0 to 1024 [ 195.498077][ T6122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.492657][ T40] hsr_slave_0: left promiscuous mode [ 196.554519][ T40] hsr_slave_1: left promiscuous mode [ 196.555503][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.555521][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.597836][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.597864][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.812943][ T40] hsr_slave_0: left promiscuous mode [ 196.836239][ T40] hsr_slave_1: left promiscuous mode [ 196.837337][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.837363][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.887665][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.887697][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.996999][ T6596] loop2: detected capacity change from 0 to 128 [ 197.141664][ T6596] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 197.174153][ T6596] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.180183][ T6596] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.107: No space for directory leaf checksum. Please run e2fsck -D. [ 197.180220][ T6596] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.107: checksumming directory block 0 [ 197.220652][ T40] hsr_slave_0: left promiscuous mode [ 197.221796][ T6596] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.107: No space for directory leaf checksum. Please run e2fsck -D. [ 197.221817][ T6596] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.107: checksumming directory block 0 [ 197.257578][ T40] hsr_slave_1: left promiscuous mode [ 197.258333][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.258351][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.258585][ T6596] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.107: No space for directory leaf checksum. Please run e2fsck -D. [ 197.258607][ T6596] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.107: checksumming directory block 0 [ 197.259530][ T6596] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.107: No space for directory leaf checksum. Please run e2fsck -D. [ 197.259550][ T6596] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.107: checksumming directory block 0 [ 197.276779][ T6596] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.107: No space for directory leaf checksum. Please run e2fsck -D. [ 197.276816][ T6596] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.107: checksumming directory block 0 [ 197.278563][ T6596] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.107: No space for directory leaf checksum. Please run e2fsck -D. [ 197.278593][ T6596] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.107: checksumming directory block 0 [ 197.290989][ T6596] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.107: No space for directory leaf checksum. Please run e2fsck -D. [ 197.291020][ T6596] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.107: checksumming directory block 0 [ 197.291832][ T6596] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.107: No space for directory leaf checksum. Please run e2fsck -D. [ 197.291857][ T6596] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.107: checksumming directory block 0 [ 197.294078][ T6596] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.107: No space for directory leaf checksum. Please run e2fsck -D. [ 197.294105][ T6596] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.107: checksumming directory block 0 [ 197.297495][ T6596] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.107: No space for directory leaf checksum. Please run e2fsck -D. [ 197.297535][ T6596] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.107: Directory block failed checksum [ 197.462511][ T5610] Bluetooth: hci4: command tx timeout [ 197.513408][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.513437][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.550602][ T5600] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 197.696555][ T40] veth1_macvtap: left promiscuous mode [ 197.696672][ T40] veth0_macvtap: left promiscuous mode [ 197.696961][ T40] veth1_vlan: left promiscuous mode [ 197.697174][ T40] veth0_vlan: left promiscuous mode [ 197.697196][ T6600] loop2: detected capacity change from 0 to 1024 [ 197.698520][ T6600] EXT4-fs: Ignoring removed orlov option [ 197.714888][ T6600] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 197.738657][ T6600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.867614][ T5600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.901576][ T40] veth1_macvtap: left promiscuous mode [ 197.901680][ T40] veth0_macvtap: left promiscuous mode [ 197.941788][ T40] veth1_vlan: left promiscuous mode [ 197.942054][ T40] veth0_vlan: left promiscuous mode [ 197.991277][ T6603] loop2: detected capacity change from 0 to 512 [ 198.005791][ T6603] EXT4-fs (loop2): Test dummy encryption mode enabled [ 198.011598][ T6603] EXT4-fs (loop2): 1 truncate cleaned up [ 198.038701][ T6603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.083153][ T6603] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.109: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 198.143061][ T40] veth1_macvtap: left promiscuous mode [ 198.143181][ T40] veth0_macvtap: left promiscuous mode [ 198.143469][ T40] veth1_vlan: left promiscuous mode [ 198.143678][ T40] veth0_vlan: left promiscuous mode [ 198.688905][ T6603] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.109: bg 0: block 465: padding at end of block bitmap is not set [ 198.860181][ T6603] ext4: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 198.861390][ T6603] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 13: comm syz.2.109: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 198.945819][ T5600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.413495][ T6606] loop2: detected capacity change from 0 to 32768 [ 199.489729][ T1308] read_mapping_page failed! [ 199.489745][ T1308] ERROR: (device loop2): txCommit: [ 199.489745][ T1308] [ 199.520284][ T1308] jfs_write_inode: jfs_commit_inode failed! [ 199.886589][ T40] team0 (unregistering): Port device team_slave_1 removed [ 199.943731][ T6608] loop2: detected capacity change from 0 to 4096 [ 199.985555][ T40] team0 (unregistering): Port device team_slave_0 removed [ 200.270241][ T6608] ntfs3(loop2): Failed to load $Extend (-22). [ 200.270270][ T6608] ntfs3(loop2): Failed to initialize $Extend. [ 200.355911][ T6609] FAULT_INJECTION: forcing a failure. [ 200.355911][ T6609] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 200.355948][ T6609] CPU: 0 UID: 0 PID: 6609 Comm: syz.2.111 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 200.355973][ T6609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 200.355986][ T6609] Call Trace: [ 200.355994][ T6609] [ 200.356004][ T6609] dump_stack_lvl+0xe8/0x150 [ 200.356044][ T6609] should_fail_ex+0x467/0x600 [ 200.356085][ T6609] _copy_from_user+0x2d/0xb0 [ 200.356112][ T6609] kstrtouint_from_user+0xd6/0x180 [ 200.356151][ T6609] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 200.356184][ T6609] ? __lock_acquire+0x683/0x2ce0 [ 200.356227][ T6609] proc_fail_nth_write+0x8e/0x210 [ 200.356252][ T6609] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 200.356286][ T6609] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 200.356311][ T6609] vfs_write+0x29f/0xbb0 [ 200.356349][ T6609] ? __pfx_vfs_write+0x10/0x10 [ 200.356381][ T6609] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 200.356409][ T6609] ? lockdep_hardirqs_on+0x7a/0x110 [ 200.356435][ T6609] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 200.356461][ T6609] ? mutex_lock_nested+0x152/0x1d0 [ 200.356502][ T6609] ? fdget_pos+0x252/0x320 [ 200.356537][ T6609] ksys_write+0x156/0x270 [ 200.356569][ T6609] ? __pfx_ksys_write+0x10/0x10 [ 200.356607][ T6609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.356632][ T6609] do_syscall_64+0x174/0x580 [ 200.356657][ T6609] ? trace_irq_disable+0x3b/0x140 [ 200.356679][ T6609] ? clear_bhb_loop+0x40/0x90 [ 200.356707][ T6609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.356728][ T6609] RIP: 0033:0x7ff22c4be6ce [ 200.356748][ T6609] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 200.356767][ T6609] RSP: 002b:00007ff22a734fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 200.356790][ T6609] RAX: ffffffffffffffda RBX: 00007ff22a7356c0 RCX: 00007ff22c4be6ce [ 200.356806][ T6609] RDX: 0000000000000001 RSI: 00007ff22a7350a0 RDI: 0000000000000005 [ 200.356820][ T6609] RBP: 00007ff22a735090 R08: 0000000000000000 R09: 0000000000000000 [ 200.356834][ T6609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.356848][ T6609] R13: 00007ff22c786128 R14: 00007ff22c786090 R15: 00007ffee6138e98 [ 200.356883][ T6609] [ 200.394377][ T37] audit: type=1800 audit(1785224168.546:15): pid=6608 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.111" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 200.882278][ T6612] loop2: detected capacity change from 0 to 1024 [ 200.964692][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 201.054586][ T5617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 201.071882][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 201.082108][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 201.099492][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 201.374033][ T6612] hfsplus: request for non-existent node 33423360 in B*Tree [ 201.374058][ T6612] hfsplus: request for non-existent node 33423360 in B*Tree [ 201.456736][ T6612] hfsplus: request for non-existent node 33423360 in B*Tree [ 201.456761][ T6612] hfsplus: request for non-existent node 33423360 in B*Tree [ 201.481591][ T6612] hfsplus: request for non-existent node 33423360 in B*Tree [ 201.481616][ T6612] hfsplus: request for non-existent node 33423360 in B*Tree [ 201.525864][ T6612] hfsplus: request for non-existent node 33423360 in B*Tree [ 201.525889][ T6612] hfsplus: request for non-existent node 33423360 in B*Tree [ 201.529837][ T6612] hfsplus: request for non-existent node 33423360 in B*Tree [ 201.529863][ T6612] hfsplus: request for non-existent node 33423360 in B*Tree [ 201.746466][ T40] team0 (unregistering): Port device team_slave_1 removed [ 201.803786][ T40] team0 (unregistering): Port device team_slave_0 removed [ 201.896779][ T6620] loop2: detected capacity change from 0 to 128 [ 201.951398][ T6620] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 201.951932][ T6620] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.991153][ T6620] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.114: No space for directory leaf checksum. Please run e2fsck -D. [ 201.991189][ T6620] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.114: checksumming directory block 0 [ 201.992321][ T6620] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.114: No space for directory leaf checksum. Please run e2fsck -D. [ 201.992470][ T6620] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.114: checksumming directory block 0 [ 201.995124][ T6620] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.114: No space for directory leaf checksum. Please run e2fsck -D. [ 201.995154][ T6620] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.114: checksumming directory block 0 [ 202.002128][ T6620] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.114: No space for directory leaf checksum. Please run e2fsck -D. [ 202.002160][ T6620] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.114: checksumming directory block 0 [ 202.005459][ T6620] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.114: No space for directory leaf checksum. Please run e2fsck -D. [ 202.005488][ T6620] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.114: checksumming directory block 0 [ 202.007815][ T6620] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.114: No space for directory leaf checksum. Please run e2fsck -D. [ 202.007842][ T6620] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.114: checksumming directory block 0 [ 202.008577][ T6620] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.114: No space for directory leaf checksum. Please run e2fsck -D. [ 202.008601][ T6620] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.114: checksumming directory block 0 [ 202.017807][ T6620] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.114: No space for directory leaf checksum. Please run e2fsck -D. [ 202.017840][ T6620] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.114: checksumming directory block 0 [ 202.020300][ T6620] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.114: No space for directory leaf checksum. Please run e2fsck -D. [ 202.020330][ T6620] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.114: checksumming directory block 0 [ 202.061979][ T6620] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.114: No space for directory leaf checksum. Please run e2fsck -D. [ 202.062014][ T6620] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.114: Directory block failed checksum [ 202.200247][ T5600] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 202.617019][ T6626] loop2: detected capacity change from 0 to 64 [ 203.158040][ T6630] loop2: detected capacity change from 0 to 32768 [ 203.233394][ T40] team0 (unregistering): Port device team_slave_1 removed [ 203.294200][ T40] team0 (unregistering): Port device team_slave_0 removed [ 203.295808][ T1308] read_mapping_page failed! [ 203.295822][ T1308] ERROR: (device loop2): txCommit: [ 203.295822][ T1308] [ 203.297084][ T1308] jfs_write_inode: jfs_commit_inode failed! [ 203.307850][ T5617] Bluetooth: hci5: command tx timeout [ 203.602130][ T5257] 8021q: adding VLAN 0 to HW filter on device eth10 [ 204.168354][ T6476] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.168502][ T6476] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.168709][ T6476] bridge_slave_0: entered allmulticast mode [ 204.178763][ T6476] bridge_slave_0: entered promiscuous mode [ 204.411335][ T6476] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.411575][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.411827][ T6476] bridge_slave_1: entered allmulticast mode [ 204.465699][ T6476] bridge_slave_1: entered promiscuous mode [ 204.597251][ T6476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.647047][ T6476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.095089][ T6646] loop2: detected capacity change from 0 to 32768 [ 205.175336][ T6646] JBD2: Ignoring recovery information on journal [ 205.385009][ T5617] Bluetooth: hci5: command tx timeout [ 205.425445][ T6646] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 205.578658][ T6476] team0: Port device team_slave_0 added [ 205.589688][ T6148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.646910][ T6476] team0: Port device team_slave_1 added [ 205.819993][ T5600] ocfs2: Unmounting device (7,2) on (node local) [ 206.089902][ T6122] veth0_vlan: entered promiscuous mode [ 206.101796][ T6476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.101815][ T6476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.101845][ T6476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.263452][ T6476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.263471][ T6476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.263501][ T6476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.554386][ T6665] loop2: detected capacity change from 0 to 256 [ 206.900460][ T6122] veth1_vlan: entered promiscuous mode [ 206.975949][ T6476] hsr_slave_0: entered promiscuous mode [ 206.977563][ T6476] hsr_slave_1: entered promiscuous mode [ 207.349584][ T5257] 8021q: adding VLAN 0 to HW filter on device eth11 [ 207.463701][ T5610] Bluetooth: hci5: command tx timeout [ 208.751861][ T6148] veth0_vlan: entered promiscuous mode [ 208.875666][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.917115][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.959907][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.989900][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.011849][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.065781][ T6148] veth1_vlan: entered promiscuous mode [ 209.493922][ T6701] loop2: detected capacity change from 0 to 128 [ 209.542516][ T5610] Bluetooth: hci5: command tx timeout [ 209.713547][ T6701] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 209.714964][ T6701] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.722015][ T6701] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.121: No space for directory leaf checksum. Please run e2fsck -D. [ 209.722038][ T6701] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.121: checksumming directory block 0 [ 209.727129][ T6701] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.121: No space for directory leaf checksum. Please run e2fsck -D. [ 209.727164][ T6701] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.121: checksumming directory block 0 [ 209.729232][ T6701] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.121: No space for directory leaf checksum. Please run e2fsck -D. [ 209.729261][ T6701] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.121: checksumming directory block 0 [ 209.730181][ T6701] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.121: No space for directory leaf checksum. Please run e2fsck -D. [ 209.730207][ T6701] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.121: checksumming directory block 0 [ 209.771701][ T6701] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.121: No space for directory leaf checksum. Please run e2fsck -D. [ 209.771735][ T6701] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.121: checksumming directory block 0 [ 209.773361][ T6701] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.121: No space for directory leaf checksum. Please run e2fsck -D. [ 209.773390][ T6701] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.121: checksumming directory block 0 [ 209.809501][ T6701] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.121: No space for directory leaf checksum. Please run e2fsck -D. [ 209.809536][ T6701] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.121: checksumming directory block 0 [ 209.837127][ T6701] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.121: No space for directory leaf checksum. Please run e2fsck -D. [ 209.837163][ T6701] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.121: checksumming directory block 0 [ 209.838069][ T6701] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.121: No space for directory leaf checksum. Please run e2fsck -D. [ 209.838110][ T6701] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.121: checksumming directory block 0 [ 209.839159][ T6701] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.121: No space for directory leaf checksum. Please run e2fsck -D. [ 209.839186][ T6701] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.121: Directory block failed checksum [ 210.069300][ T5600] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.793470][ T6710] loop2: detected capacity change from 0 to 32768 [ 210.871330][ T6710] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 211.041150][ T6710] XFS (loop2): Ending clean mount [ 211.146598][ T5610] Bluetooth: hci0: command tx timeout [ 211.259336][ T6613] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.261052][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.261333][ T6613] bridge_slave_0: entered allmulticast mode [ 211.289552][ T6613] bridge_slave_0: entered promiscuous mode [ 211.664011][ T6613] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.664173][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.664406][ T6613] bridge_slave_1: entered allmulticast mode [ 211.707096][ T6613] bridge_slave_1: entered promiscuous mode [ 211.943863][ T5610] Bluetooth: hci2: command 0x0406 tx timeout [ 212.065509][ T5600] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 213.009851][ T6613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.075398][ T6613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.222699][ T5617] Bluetooth: hci0: command tx timeout [ 213.290030][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.338072][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.340880][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.377870][ T5610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.378741][ T5610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.635104][ T6730] loop2: detected capacity change from 0 to 32768 [ 213.912246][ T1034] read_mapping_page failed! [ 213.912262][ T1034] ERROR: (device loop2): txCommit: [ 213.912262][ T1034] [ 213.925057][ T1034] jfs_write_inode: jfs_commit_inode failed! [ 214.834866][ T6613] team0: Port device team_slave_0 added [ 214.862141][ T6753] loop2: detected capacity change from 0 to 1024 [ 214.864970][ T6753] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.865001][ T6753] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.865019][ T6753] EXT4-fs: inline encryption not supported [ 214.865039][ T6753] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.909972][ T6753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.910133][ T6753] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.941453][ T6753] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.125: bg 0: block 112: padding at end of block bitmap is not set [ 214.978923][ T6753] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.125: lblock 0 mapped to illegal pblock 0 (length 1) [ 215.067274][ T6753] EXT4-fs error (device loop2): ext4_ext_remove_space:2969: inode #15: comm syz.2.125: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 215.157510][ T5600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 215.312555][ T5610] Bluetooth: hci0: command tx timeout [ 215.429199][ T6761] loop2: detected capacity change from 0 to 4096 [ 215.554839][ T5610] Bluetooth: hci1: command tx timeout [ 215.650118][ T6613] team0: Port device team_slave_1 added [ 215.657895][ T5257] 8021q: adding VLAN 0 to HW filter on device eth12 [ 215.937839][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.937858][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.937889][ T6613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.035912][ T6613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.035930][ T6613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.035956][ T6613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.095481][ T6613] hsr_slave_0: entered promiscuous mode [ 217.096371][ T6613] hsr_slave_1: entered promiscuous mode [ 217.098483][ T6613] debugfs: 'hsr0' already exists in 'hsr' [ 217.098501][ T6613] Cannot create hsr debugfs directory [ 217.382594][ T5610] Bluetooth: hci0: command tx timeout [ 217.506843][ T37] audit: type=1800 audit(1785224185.646:16): pid=6761 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.126" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 217.622952][ T5610] Bluetooth: hci1: command tx timeout [ 217.678595][ T6476] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 217.700503][ T37] audit: type=1804 audit(1785224185.836:17): pid=6761 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.126" name=2F6E6577726F6F742F36362F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop2" ino=33 res=1 errno=0 [ 217.732532][ T6476] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 218.085706][ T6476] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 218.126299][ T6476] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 218.187720][ T6785] loop2: detected capacity change from 0 to 128 [ 218.240779][ T6785] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.271579][ T6785] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.327847][ T6785] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.128: No space for directory leaf checksum. Please run e2fsck -D. [ 218.327888][ T6785] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.128: checksumming directory block 0 [ 218.328913][ T6785] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.128: No space for directory leaf checksum. Please run e2fsck -D. [ 218.328946][ T6785] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.128: checksumming directory block 0 [ 218.329884][ T6785] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.128: No space for directory leaf checksum. Please run e2fsck -D. [ 218.329914][ T6785] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.128: checksumming directory block 0 [ 218.333821][ T6785] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.128: No space for directory leaf checksum. Please run e2fsck -D. [ 218.333853][ T6785] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.128: checksumming directory block 0 [ 218.336126][ T6785] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.128: No space for directory leaf checksum. Please run e2fsck -D. [ 218.336156][ T6785] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.128: checksumming directory block 0 [ 218.336952][ T6785] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.128: No space for directory leaf checksum. Please run e2fsck -D. [ 218.336980][ T6785] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.128: checksumming directory block 0 [ 218.337890][ T6785] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.128: No space for directory leaf checksum. Please run e2fsck -D. [ 218.337914][ T6785] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.128: checksumming directory block 0 [ 218.338677][ T6785] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.128: No space for directory leaf checksum. Please run e2fsck -D. [ 218.338702][ T6785] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.128: checksumming directory block 0 [ 218.339434][ T6785] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.128: No space for directory leaf checksum. Please run e2fsck -D. [ 218.339459][ T6785] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.128: checksumming directory block 0 [ 218.340192][ T6785] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.128: No space for directory leaf checksum. Please run e2fsck -D. [ 218.340217][ T6785] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.128: Directory block failed checksum [ 218.637267][ T6476] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 218.659424][ T5600] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.701444][ T6476] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 218.916086][ T6476] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 219.012708][ T6476] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 219.691129][ T6794] loop2: detected capacity change from 0 to 32768 [ 219.702767][ T5610] Bluetooth: hci1: command tx timeout [ 219.787881][ T6794] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 219.920852][ T6794] XFS (loop2): Ending clean mount [ 220.441372][ T6691] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.441584][ T6691] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.441832][ T6691] bridge_slave_0: entered allmulticast mode [ 220.448809][ T6691] bridge_slave_0: entered promiscuous mode [ 220.511897][ T6691] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.512041][ T6691] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.512302][ T6691] bridge_slave_1: entered allmulticast mode [ 220.537786][ T6691] bridge_slave_1: entered promiscuous mode [ 220.891981][ T5600] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 221.078843][ T6691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.158476][ T6691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.782704][ T5610] Bluetooth: hci1: command tx timeout [ 221.911972][ T6691] team0: Port device team_slave_0 added [ 221.945386][ T6691] team0: Port device team_slave_1 added [ 222.044208][ T6817] loop2: detected capacity change from 0 to 32768 [ 222.230539][ T156] read_mapping_page failed! [ 222.230555][ T156] ERROR: (device loop2): txCommit: [ 222.230555][ T156] [ 222.232187][ T156] jfs_write_inode: jfs_commit_inode failed! [ 222.528191][ T6732] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.528419][ T6732] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.528640][ T6732] bridge_slave_0: entered allmulticast mode [ 222.536939][ T6732] bridge_slave_0: entered promiscuous mode [ 222.559760][ T6691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.559779][ T6691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.559808][ T6691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.564692][ T6732] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.564819][ T6732] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.565069][ T6732] bridge_slave_1: entered allmulticast mode [ 222.585640][ T6732] bridge_slave_1: entered promiscuous mode [ 222.628127][ T6691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.628146][ T6691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.628174][ T6691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.834857][ T6732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.864282][ T6732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.383293][ T6691] hsr_slave_0: entered promiscuous mode [ 223.422980][ T6691] hsr_slave_1: entered promiscuous mode [ 223.431101][ T6691] debugfs: 'hsr0' already exists in 'hsr' [ 223.431132][ T6691] Cannot create hsr debugfs directory [ 223.435323][ T6732] team0: Port device team_slave_0 added [ 223.452775][ T6732] team0: Port device team_slave_1 added [ 223.553967][ T5257] 8021q: adding VLAN 0 to HW filter on device eth13 [ 223.710580][ T6824] loop2: detected capacity change from 0 to 32768 [ 223.820775][ T6824] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 224.063804][ T6732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.063824][ T6732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.063853][ T6732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.384331][ T6732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.384349][ T6732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.384366][ T6732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.444363][ T5600] ocfs2: Unmounting device (7,2) on (node local) [ 224.834599][ T6476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.894909][ T6732] hsr_slave_0: entered promiscuous mode [ 224.898021][ T6732] hsr_slave_1: entered promiscuous mode [ 224.900598][ T6732] debugfs: 'hsr0' already exists in 'hsr' [ 224.900624][ T6732] Cannot create hsr debugfs directory [ 224.920133][ T6842] loop2: detected capacity change from 0 to 4096 [ 225.043294][ T6842] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 225.105938][ T40] bridge_slave_1: left allmulticast mode [ 225.105979][ T40] bridge_slave_1: left promiscuous mode [ 225.106303][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.313868][ T40] bridge_slave_0: left allmulticast mode [ 225.313897][ T40] bridge_slave_0: left promiscuous mode [ 225.314095][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.421627][ T6846] loop2: detected capacity change from 0 to 128 [ 225.459486][ T6846] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 225.475953][ T6846] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.488508][ T6846] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.135: No space for directory leaf checksum. Please run e2fsck -D. [ 225.488543][ T6846] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.135: checksumming directory block 0 [ 225.522306][ T6846] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.135: No space for directory leaf checksum. Please run e2fsck -D. [ 225.522332][ T6846] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.135: checksumming directory block 0 [ 225.559765][ T6846] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.135: No space for directory leaf checksum. Please run e2fsck -D. [ 225.559805][ T6846] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.135: checksumming directory block 0 [ 225.563741][ T6846] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.135: No space for directory leaf checksum. Please run e2fsck -D. [ 225.563771][ T6846] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.135: checksumming directory block 0 [ 225.569604][ T6846] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.135: No space for directory leaf checksum. Please run e2fsck -D. [ 225.569638][ T6846] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.135: checksumming directory block 0 [ 225.572175][ T6846] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.135: No space for directory leaf checksum. Please run e2fsck -D. [ 225.572202][ T6846] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.135: checksumming directory block 0 [ 225.574295][ T6846] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.135: No space for directory leaf checksum. Please run e2fsck -D. [ 225.574323][ T6846] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.135: checksumming directory block 0 [ 225.586664][ T6846] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.135: No space for directory leaf checksum. Please run e2fsck -D. [ 225.586706][ T6846] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.135: checksumming directory block 0 [ 225.589217][ T6846] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.135: No space for directory leaf checksum. Please run e2fsck -D. [ 225.589245][ T6846] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.135: checksumming directory block 0 [ 225.592742][ T6846] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.135: No space for directory leaf checksum. Please run e2fsck -D. [ 225.592771][ T6846] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.135: Directory block failed checksum [ 225.816615][ T5600] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 225.887796][ T40] bridge_slave_1: left allmulticast mode [ 225.887835][ T40] bridge_slave_1: left promiscuous mode [ 225.888101][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.058317][ T40] bridge_slave_0: left allmulticast mode [ 226.058355][ T40] bridge_slave_0: left promiscuous mode [ 226.058613][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.097108][ T6852] loop2: detected capacity change from 0 to 2048 [ 226.195364][ T6853] loop2: detected capacity change from 0 to 512 [ 226.353748][ T40] bridge_slave_1: left allmulticast mode [ 226.353776][ T40] bridge_slave_1: left promiscuous mode [ 226.354001][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.464466][ T40] bridge_slave_0: left allmulticast mode [ 226.464496][ T40] bridge_slave_0: left promiscuous mode [ 226.464712][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.323314][ T6855] loop2: detected capacity change from 0 to 32768 [ 227.485888][ T56] read_mapping_page failed! [ 227.485902][ T56] ERROR: (device loop2): txCommit: [ 227.485902][ T56] [ 227.490926][ T56] jfs_write_inode: jfs_commit_inode failed! [ 227.745792][ T6857] loop2: detected capacity change from 0 to 64 [ 227.773404][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.884977][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.937513][ T40] bond0 (unregistering): Released all slaves [ 228.337819][ T6860] loop2: detected capacity change from 0 to 32768 [ 228.358507][ T6860] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.140 (6860) [ 228.444975][ T6860] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 228.445036][ T6860] BTRFS info (device loop2): using crc32c checksum algorithm [ 228.689956][ T6860] BTRFS info (device loop2): enabling ssd optimizations [ 228.689986][ T6860] BTRFS info (device loop2): turning on flush-on-commit [ 228.690004][ T6860] BTRFS info (device loop2): enabling free space tree [ 228.690021][ T6860] BTRFS info (device loop2): enabling auto defrag [ 228.690040][ T6860] BTRFS info (device loop2): use lzo compression, level 1 [ 228.690059][ T6860] BTRFS info (device loop2): max_inline set to 4096 [ 228.860070][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.965816][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.017466][ T40] bond0 (unregistering): Released all slaves [ 229.218317][ T5600] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 230.017721][ T6880] loop2: detected capacity change from 0 to 128 [ 230.083166][ T6880] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 230.105151][ T6880] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.130169][ T6880] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.142: No space for directory leaf checksum. Please run e2fsck -D. [ 230.130211][ T6880] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.142: checksumming directory block 0 [ 230.133418][ T6880] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.142: No space for directory leaf checksum. Please run e2fsck -D. [ 230.133457][ T6880] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.142: checksumming directory block 0 [ 230.180326][ T6880] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.142: No space for directory leaf checksum. Please run e2fsck -D. [ 230.180360][ T6880] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.142: checksumming directory block 0 [ 230.185063][ T6880] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.142: No space for directory leaf checksum. Please run e2fsck -D. [ 230.185094][ T6880] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.142: checksumming directory block 0 [ 230.185926][ T6880] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.142: No space for directory leaf checksum. Please run e2fsck -D. [ 230.185953][ T6880] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.142: checksumming directory block 0 [ 230.186701][ T6880] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.142: No space for directory leaf checksum. Please run e2fsck -D. [ 230.186725][ T6880] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.142: checksumming directory block 0 [ 230.187480][ T6880] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.142: No space for directory leaf checksum. Please run e2fsck -D. [ 230.187506][ T6880] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.142: checksumming directory block 0 [ 230.188262][ T6880] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.142: No space for directory leaf checksum. Please run e2fsck -D. [ 230.188286][ T6880] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.142: checksumming directory block 0 [ 230.190584][ T6880] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.142: No space for directory leaf checksum. Please run e2fsck -D. [ 230.190610][ T6880] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.142: checksumming directory block 0 [ 230.191284][ T6880] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.142: No space for directory leaf checksum. Please run e2fsck -D. [ 230.191308][ T6880] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.142: Directory block failed checksum [ 230.472823][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.479667][ T5600] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 230.574986][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.629119][ T40] bond0 (unregistering): Released all slaves [ 231.426933][ T6889] loop2: detected capacity change from 0 to 32768 [ 231.707735][ T166] read_mapping_page failed! [ 231.707758][ T166] ERROR: (device loop2): txCommit: [ 231.707758][ T166] [ 231.710885][ T166] jfs_write_inode: jfs_commit_inode failed! [ 231.864147][ T56] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000014: 0000 [#1] SMP KASAN PTI [ 231.864176][ T56] KASAN: null-ptr-deref in range [0x00000000000000a0-0x00000000000000a7] [ 231.864198][ T56] CPU: 1 UID: 0 PID: 56 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 231.864222][ T56] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 231.864235][ T56] Workqueue: loop2 loop_workfn [ 231.864272][ T56] RIP: 0010:lo_rw_aio+0xa9f/0xf30 [ 231.864305][ T56] Code: 89 33 31 ff 8b 5c 24 34 89 de e8 fc 9e 1c fc 85 db 0f 84 cb 00 00 00 48 8b 44 24 58 48 8d 98 a0 00 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 f2 0c 86 fc 4c 89 7c 24 20 48 8b [ 231.864324][ T56] RSP: 0018:ffffc9000122f640 EFLAGS: 00010206 [ 231.864342][ T56] RAX: 0000000000000014 RBX: 00000000000000a0 RCX: ffff88801af95d00 [ 231.864356][ T56] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 231.864369][ T56] RBP: ffffc9000122f7b0 R08: 0000000000000000 R09: 0000000000000000 [ 231.864383][ T56] R10: dffffc0000000000 R11: ffffed1004c3c4d5 R12: dffffc0000000000 [ 231.864398][ T56] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880261e26b0 [ 231.864412][ T56] FS: 0000000000000000(0000) GS:ffff888125d41000(0000) knlGS:0000000000000000 [ 231.864429][ T56] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.864443][ T56] CR2: 000055558a360a68 CR3: 0000000043cdc000 CR4: 00000000003526f0 [ 231.864503][ T56] Call Trace: [ 231.864511][ T56] [ 231.864526][ T56] ? __pfx_lo_rw_aio+0x10/0x10 [ 231.864559][ T56] ? kthread_associate_blkcg+0x490/0x600 [ 231.864593][ T56] ? rt_spin_unlock+0x163/0x200 [ 231.864625][ T56] loop_process_work+0x638/0x11d0 [ 231.864664][ T56] ? __pfx_loop_process_work+0x10/0x10 [ 231.864696][ T56] ? look_up_lock_class+0x57/0x110 [ 231.864721][ T56] ? register_lock_class+0x31/0x2e0 [ 231.864745][ T56] ? __lock_acquire+0x683/0x2ce0 [ 231.864765][ T56] ? rcu_is_watching+0x15/0xb0 [ 231.864791][ T56] ? trace_hrtimer_start+0x82/0x200 [ 231.864825][ T56] ? do_raw_spin_lock+0x12b/0x2f0 [ 231.864857][ T56] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 231.864888][ T56] ? process_scheduled_works+0xa20/0x14e0 [ 231.864915][ T56] ? process_scheduled_works+0xa20/0x14e0 [ 231.864942][ T56] ? rcu_is_watching+0x15/0xb0 [ 231.865015][ T56] ? process_scheduled_works+0xa20/0x14e0 [ 231.865052][ T56] process_scheduled_works+0xa8e/0x14e0 [ 231.865088][ T56] ? __pfx_process_scheduled_works+0x10/0x10 [ 231.865115][ T56] ? assign_work+0x3cf/0x5d0 [ 231.865139][ T56] worker_thread+0xa47/0xfb0 [ 231.865174][ T56] kthread+0x388/0x470 [ 231.865210][ T56] ? __pfx_worker_thread+0x10/0x10 [ 231.865235][ T56] ? __pfx_kthread+0x10/0x10 [ 231.865266][ T56] ret_from_fork+0x514/0xb70 [ 231.865298][ T56] ? __pfx_ret_from_fork+0x10/0x10 [ 231.865329][ T56] ? __switch_to+0xc89/0x1420 [ 231.865358][ T56] ? __pfx_kthread+0x10/0x10 [ 231.865457][ T56] ret_from_fork_asm+0x1a/0x30 [ 231.865496][ T56] [ 231.865510][ T56] Modules linked in: [ 231.865556][ T56] ---[ end trace 0000000000000000 ]--- [ 231.865576][ T56] RIP: 0010:lo_rw_aio+0xa9f/0xf30 [ 231.865613][ T56] Code: 89 33 31 ff 8b 5c 24 34 89 de e8 fc 9e 1c fc 85 db 0f 84 cb 00 00 00 48 8b 44 24 58 48 8d 98 a0 00 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 f2 0c 86 fc 4c 89 7c 24 20 48 8b [ 231.865632][ T56] RSP: 0018:ffffc9000122f640 EFLAGS: 00010206 [ 231.865650][ T56] RAX: 0000000000000014 RBX: 00000000000000a0 RCX: ffff88801af95d00 [ 231.865666][ T56] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 231.865679][ T56] RBP: ffffc9000122f7b0 R08: 0000000000000000 R09: 0000000000000000 [ 231.865693][ T56] R10: dffffc0000000000 R11: ffffed1004c3c4d5 R12: dffffc0000000000 [ 231.865710][ T56] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880261e26b0 [ 231.865725][ T56] FS: 0000000000000000(0000) GS:ffff888125d41000(0000) knlGS:0000000000000000 [ 231.865752][ T56] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.865768][ T56] CR2: 000055558a360a68 CR3: 0000000043cdc000 CR4: 00000000003526f0 [ 231.865791][ T56] Kernel panic - not syncing: Fatal exception [ 231.866157][ T56] Kernel Offset: disabled