last executing test programs: 1.177739164s ago: executing program 2 (id=1688): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10162, 0x0) 1.076590893s ago: executing program 2 (id=1692): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000180)={[{@dmode={'dmode', 0x3d, 0x1}}, {@overriderock}, {@map_normal}, {}, {@nocompress}, {@unhide}, {@block={'block', 0x3d, 0x200}}, {@nocompress}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@overriderock}]}, 0x1, 0xa0b, &(0x7f0000000dc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) 937.743566ms ago: executing program 4 (id=1695): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b000701000000000000000004"], 0x34}}, 0xc000) 931.174869ms ago: executing program 3 (id=1697): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) 866.686676ms ago: executing program 2 (id=1699): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x190) 832.660352ms ago: executing program 4 (id=1700): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r0, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x3, @broadcast}, 0x10) 810.858627ms ago: executing program 0 (id=1701): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x7, 0x0, 0x0) 772.864776ms ago: executing program 4 (id=1702): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4) 735.420838ms ago: executing program 2 (id=1703): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x9c}, {0x6}]}, 0x10) 703.337422ms ago: executing program 0 (id=1705): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc060, 0x2d68}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x15}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) 666.692132ms ago: executing program 3 (id=1706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x60}}, 0x0) 649.418582ms ago: executing program 2 (id=1707): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f00000002c0)={[{@quota}, {@nointegrity}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@noquota}, {}, {@nointegrity}, {@uid}, {@discard_size={'discard', 0x3d, 0x2}}]}, 0x1, 0x6255, &(0x7f0000001840)="$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") mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='exfat\x00', 0x401, 0x0) 609.337526ms ago: executing program 1 (id=1708): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000005900)={0x0, 0x0, &(0x7f00000058c0)={&(0x7f0000005840)={0x28, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x28}}, 0x0) 548.839148ms ago: executing program 0 (id=1709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x6}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x200000a4) 517.927155ms ago: executing program 3 (id=1710): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 493.257677ms ago: executing program 4 (id=1711): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101, 0x80}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}, 0x1, 0xba01}, 0x810) 439.344732ms ago: executing program 1 (id=1712): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x52, &(0x7f0000000680)={@local, @local, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@cipso={0x86, 0x11, 0x3, [{0x1, 0xb, "8395cdafe996c2384b"}]}]}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast=0xac1414bb}}}}}}, 0x0) 391.47793ms ago: executing program 0 (id=1713): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002c40)={0x2, 0x12, 0x6, 0x7, 0x3, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_x_nat_t_port={0x1, 0x1f, 0x4e21}]}, 0x18}}, 0x10) 368.824367ms ago: executing program 4 (id=1714): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x3b, 0x1, 0x0, "1f00e7dce5db37e50400000000d03f00"}) 352.845173ms ago: executing program 3 (id=1715): syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) 338.935581ms ago: executing program 4 (id=1716): syz_mount_image$ocfs2(&(0x7f0000000340), &(0x7f0000000040)='./file2\x00', 0xcc4, &(0x7f0000000100)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@err_cont}, {@heartbeat_none}, {@data_ordered}, {@data_ordered}, {@noacl}]}, 0x1, 0x4434, &(0x7f0000004480)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 326.111528ms ago: executing program 1 (id=1717): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0xa07b}, [@IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) 236.777676ms ago: executing program 1 (id=1718): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101a01) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)={0x8001, 0x9}) 184.380471ms ago: executing program 0 (id=1719): prlimit64(0x0, 0x7, &(0x7f0000000140)={0x1, 0x8b}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 171.082403ms ago: executing program 3 (id=1720): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0x800000000d, 0x0, 0x0) 106.07272ms ago: executing program 1 (id=1721): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000080)=0x9, 0x4) 69.920917ms ago: executing program 2 (id=1722): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x100d, 0x0, 0x0, 0x0, 0x10001, 0x1}) 11.61973ms ago: executing program 0 (id=1723): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x10, 0xfffff000}, {0x6}]}, 0x10) 684.523µs ago: executing program 3 (id=1724): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000200)={0x3, @bcast={0xa2, 0xa6, 0xa8, 0x2}}) 0s ago: executing program 1 (id=1725): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f0000004000)=0x3, 0xa, 0x1, 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): f40db4fee2): shutdown complete [ 60.653436][ T7440] bcachefs (loop1): done starting filesystem [ 60.706762][ T7509] loop3: detected capacity change from 0 to 2048 [ 60.736562][ T7469] bcachefs: bch2_fs_get_tree() error: EINVAL [ 60.823738][ T7509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.845526][ T6491] bcachefs (loop1): shutting down [ 60.845586][ T6491] bcachefs (loop1): going read-only [ 60.845613][ T6491] bcachefs (loop1): finished waiting for writes to stop [ 60.926698][ T6491] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 60.929131][ T7509] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.394: bg 0: block 345: padding at end of block bitmap is not set [ 61.011674][ T6499] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.022749][ T6491] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 61.027362][ T6491] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 61.052407][ T6491] bcachefs (loop1): marking filesystem clean [ 61.102205][ T7534] loop4: detected capacity change from 0 to 512 [ 61.169608][ T7534] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 61.169691][ T7534] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2842c018, mo2=0002] [ 61.169743][ T7534] System zones: 0-2, 18-18, 34-35 [ 61.171550][ T7534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.206179][ T7534] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.407: path /78/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 61.210211][ T6491] bcachefs (loop1): shutdown complete [ 61.223065][ T7534] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 12: comm syz.4.407: path /78/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 61.236071][ T7534] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.407: path /78/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 61.236451][ T7534] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 14: comm syz.4.407: path /78/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 61.236937][ T7534] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 15: comm syz.4.407: path /78/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 61.237259][ T7534] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 16: comm syz.4.407: path /78/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 61.244278][ T7534] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 17: comm syz.4.407: path /78/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 61.244605][ T7534] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #2: block 18: comm syz.4.407: lblock 23 mapped to illegal pblock 18 (length 1) [ 61.306416][ T6502] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.428484][ T7553] __nla_validate_parse: 2 callbacks suppressed [ 61.428556][ T7553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.413'. [ 61.550664][ T7561] loop3: detected capacity change from 0 to 128 [ 61.586094][ T7551] loop0: detected capacity change from 0 to 32768 [ 61.604128][ T7561] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 61.609364][ T7561] FAT-fs (loop3): Filesystem has been set read-only [ 61.613416][ T7551] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 61.737112][ T7551] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 61.767835][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 61.769314][ T7551] XFS (loop0): Starting recovery (logdev: internal) [ 61.785472][ T7579] loop4: detected capacity change from 0 to 1764 [ 61.789004][ T7551] XFS (loop0): Ending recovery (logdev: internal) [ 61.795018][ T7551] XFS (loop0): Quotacheck needed: Please wait. [ 61.816390][ T7551] XFS (loop0): Quotacheck: Done. [ 61.866062][ T7579] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 61.887358][ T6492] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 62.362521][ T6545] IPVS: starting estimator thread 0... [ 62.449948][ T7616] IPVS: using max 33 ests per chain, 79200 per kthread [ 62.703807][ T7637] warning: `syz.0.451' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.848902][ T7647] loop4: detected capacity change from 0 to 512 [ 62.875770][ T7650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.457'. [ 62.885100][ T7647] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.900667][ T7620] loop3: detected capacity change from 0 to 32768 [ 62.911901][ T7651] loop0: detected capacity change from 0 to 512 [ 62.964891][ T6502] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.967472][ T7651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.077364][ T6492] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.213935][ T7667] loop2: detected capacity change from 0 to 128 [ 63.225955][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.463'. [ 63.229226][ T7669] netlink: 'syz.0.463': attribute type 1 has an invalid length. [ 63.241215][ T7667] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 63.259555][ T7667] FAT-fs (loop2): FAT read failed (blocknr 234) [ 63.428773][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.468'. [ 63.571991][ T7689] netlink: 44 bytes leftover after parsing attributes in process `syz.2.473'. [ 63.613107][ T7691] netlink: set zone limit has 8 unknown bytes [ 63.742679][ T7702] netlink: 'syz.4.479': attribute type 2 has an invalid length. [ 63.742755][ T7702] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.479'. [ 63.766941][ T7703] loop1: detected capacity change from 0 to 256 [ 63.820150][ T7695] loop0: detected capacity change from 0 to 4096 [ 63.838016][ T7695] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 63.843969][ T7681] loop3: detected capacity change from 0 to 32768 [ 63.846979][ T7681] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.469 (7681) [ 63.858068][ T7681] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 63.861134][ T7681] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 63.863641][ T7681] BTRFS info (device loop3): using free-space-tree [ 63.873355][ T7708] loop4: detected capacity change from 0 to 256 [ 63.926519][ T7718] loop2: detected capacity change from 0 to 8 [ 63.993846][ T7724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 63.998123][ T7718] SQUASHFS error: Failed to read block 0x738: -5 [ 64.000757][ T7718] SQUASHFS error: Unable to read metadata cache entry [736] [ 64.002757][ T7718] SQUASHFS error: Unable to read metadata cache entry [736] [ 64.004743][ T7718] SQUASHFS error: Unable to read metadata cache entry [736] [ 64.007255][ T7718] SQUASHFS error: Unable to read metadata cache entry [736] [ 64.106978][ T7734] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 64.116422][ T6499] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 64.291012][ T7751] loop0: detected capacity change from 0 to 164 [ 64.355095][ T7751] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 64.580245][ T7774] ALSA: mixer_oss: invalid OSS volume '' [ 64.664501][ T7783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.508'. [ 64.740650][ T2392] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.763543][ T7791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.514'. [ 65.053521][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'. [ 65.136277][ T7815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.143848][ T7815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.215488][ T7771] loop4: detected capacity change from 0 to 32768 [ 65.444908][ T7835] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 65.461919][ T7835] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 65.578340][ T7845] netlink: 'syz.2.540': attribute type 4 has an invalid length. [ 65.607594][ T7850] delete_channel: no stack [ 65.723596][ T7855] loop0: detected capacity change from 0 to 256 [ 65.754607][ T7855] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 65.904855][ T7869] loop3: detected capacity change from 0 to 64 [ 65.964854][ T7875] loop2: detected capacity change from 0 to 1024 [ 65.988720][ T7875] hfsplus: Filesystem is marked locked, mounting read-only. [ 66.045713][ T7875] hfsplus: filesystem is marked locked, leaving read-only. [ 66.344673][ T7905] qrtr: Invalid version 0 [ 66.658845][ T7934] loop3: detected capacity change from 0 to 1024 [ 66.816822][ T388] hfsplus: b-tree write err: -5, ino 4 [ 66.982542][ T7961] xt_hashlimit: max too large, truncated to 1048576 [ 66.998346][ T7962] netlink: 'syz.2.598': attribute type 10 has an invalid length. [ 67.153095][ T7975] loop0: detected capacity change from 0 to 64 [ 67.215329][ T7980] netlink: 204 bytes leftover after parsing attributes in process `syz.1.607'. [ 67.229103][ T7980] vxcan3: entered promiscuous mode [ 67.230679][ T7980] vxcan3: entered allmulticast mode [ 67.327451][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.610'. [ 67.442075][ T8002] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 67.486406][ T7996] loop4: detected capacity change from 0 to 4096 [ 67.564321][ T7996] NILFS (loop4): invalid segment: Inconsistency found [ 67.564472][ T7996] NILFS (loop4): trying rollback from an earlier position [ 67.575915][ T7996] NILFS (loop4): recovery complete [ 67.585653][ T8009] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 68.040729][ T8034] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 68.195126][ T8050] netlink: 16 bytes leftover after parsing attributes in process `syz.1.641'. [ 68.937197][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.676'. [ 69.778383][ T8195] netlink: 'syz.3.713': attribute type 21 has an invalid length. [ 69.780794][ T8195] netlink: 'syz.3.713': attribute type 20 has an invalid length. [ 69.782956][ T8195] IPv6: NLM_F_CREATE should be specified when creating new route [ 69.862422][ T2277] cfg80211: failed to load regulatory.db [ 69.966360][ T8207] loop1: detected capacity change from 0 to 64 [ 70.118981][ T8213] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma? [ 70.343606][ T8187] loop0: detected capacity change from 0 to 32768 [ 70.377004][ T8187] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 70.457605][ T8187] XFS (loop0): Ending clean mount [ 70.480380][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.729'. [ 70.546757][ T8197] loop4: detected capacity change from 0 to 32768 [ 70.645016][ T6492] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 70.647708][ T8197] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 70.778383][ T8256] netlink: 'syz.1.735': attribute type 21 has an invalid length. [ 70.778504][ T8256] netlink: 132 bytes leftover after parsing attributes in process `syz.1.735'. [ 70.798052][ T8197] XFS (loop4): Ending clean mount [ 70.928326][ T8266] loop2: detected capacity change from 0 to 128 [ 70.932288][ T8263] loop1: detected capacity change from 0 to 1024 [ 70.945327][ T6502] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 70.961559][ T8266] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.965754][ T8263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.984887][ T8266] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 4097 (only 1 groups) [ 71.059883][ T6493] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.141204][ T6491] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.187325][ T8283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.744'. [ 71.685976][ T8316] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 71.865355][ T8329] capability: warning: `syz.4.768' uses 32-bit capabilities (legacy support in use) [ 72.009676][ T8335] loop3: detected capacity change from 0 to 1764 [ 72.222094][ T8352] loop0: detected capacity change from 0 to 2048 [ 72.230469][ T8352] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 72.248989][ T8352] syz.0.782: attempt to access beyond end of device [ 72.248989][ T8352] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 72.252305][ T8359] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.269698][ T8352] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1816, name_len=0 [ 72.275556][ T8360] loop2: detected capacity change from 0 to 256 [ 72.289332][ T8352] Remounting filesystem read-only [ 72.353761][ T8360] FAT-fs (loop2): Directory bread(block 64) failed [ 72.353842][ T8360] FAT-fs (loop2): Directory bread(block 65) failed [ 72.353906][ T8360] FAT-fs (loop2): Directory bread(block 66) failed [ 72.353943][ T8360] FAT-fs (loop2): Directory bread(block 67) failed [ 72.354005][ T8360] FAT-fs (loop2): Directory bread(block 68) failed [ 72.354041][ T8360] FAT-fs (loop2): Directory bread(block 69) failed [ 72.354102][ T8360] FAT-fs (loop2): Directory bread(block 70) failed [ 72.354138][ T8360] FAT-fs (loop2): Directory bread(block 71) failed [ 72.354198][ T8360] FAT-fs (loop2): Directory bread(block 72) failed [ 72.354234][ T8360] FAT-fs (loop2): Directory bread(block 73) failed [ 72.518588][ T8371] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.826362][ T8355] loop4: detected capacity change from 0 to 32768 [ 72.864577][ T8355] jfs_strtoUCS: char2uni returned -22. [ 72.864722][ T8355] charset = cp874, char = 0x8c [ 73.429830][ T8388] loop2: detected capacity change from 0 to 32768 [ 73.445511][ T8388] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.796 (8388) [ 73.503705][ T8388] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 73.503816][ T8388] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 73.503858][ T8388] BTRFS info (device loop2): using free-space-tree [ 73.524196][ T8407] loop4: detected capacity change from 0 to 32768 [ 73.532580][ T8407] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.803 (8407) [ 73.564335][ T8402] loop1: detected capacity change from 0 to 32768 [ 73.568984][ T8407] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 73.572149][ T8407] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 73.574900][ T8407] BTRFS info (device loop4): disk space caching is enabled [ 73.577852][ T8407] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 73.643586][ T8402] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 73.691108][ T6493] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 73.716597][ T8407] BTRFS info (device loop4): rebuilding free space tree [ 73.759267][ T8407] BTRFS info (device loop4): disabling free space tree [ 73.759349][ T8407] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 73.759383][ T8407] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 73.810592][ T6491] ocfs2: Unmounting device (7,1) on (node local) [ 73.950422][ T8407] BTRFS info (device loop4): balance: start -ssoft,usage=3917010174444,vrange=0..18446744073709551615,limit=0,stripes=0..0 [ 73.954341][ T8407] BTRFS info (device loop4): balance: ended with status: 0 [ 74.034277][ T6502] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 74.247310][ T8483] loop3: detected capacity change from 0 to 4096 [ 74.357897][ T8495] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.397483][ T8483] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=56, inode=144115188075855884, rec_len=0, name_len=0 [ 74.404660][ T8499] 9pnet_fd: p9_fd_create_tcp (8499): problem binding to privport [ 74.407747][ T8483] Remounting filesystem read-only [ 74.528384][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'. [ 74.819585][ T8520] loop2: detected capacity change from 0 to 1764 [ 75.026194][ T8503] loop1: detected capacity change from 0 to 32768 [ 75.331486][ T8503] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 75.331486][ T8503] allowing incompatible features above 0.0: (unknown version) [ 75.331642][ T8503] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 75.331712][ T8503] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.25: extent_flags [ 75.331712][ T8503] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 75.331884][ T8503] bcachefs (loop1): dropping and reconstructing all alloc info [ 75.352108][ T8503] bcachefs (loop1): accounting_read... done [ 75.399869][ T8503] bcachefs (loop1): alloc_read... done [ 75.399926][ T8503] bcachefs (loop1): snapshots_read... done [ 75.400172][ T8503] bcachefs (loop1): done starting filesystem [ 75.477445][ T8560] netlink: 'syz.3.858': attribute type 5 has an invalid length. [ 75.595455][ T6491] bcachefs (loop1): shutting down [ 75.644125][ T8573] netlink: 666 bytes leftover after parsing attributes in process `syz.0.863'. [ 75.749553][ T8580] netdevsim netdevsim3 ªªªªª»: renamed from netdevsim0 [ 75.797327][ T6491] bcachefs (loop1): shutdown complete [ 76.029458][ T8591] loop2: detected capacity change from 0 to 512 [ 76.047756][ T8591] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 76.047821][ T8591] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 76.047863][ T8591] System zones: 0-1, 15-15, 18-18, 34-34 [ 76.048072][ T8591] EXT4-fs (loop2): orphan cleanup on readonly fs [ 76.048148][ T8591] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 76.048375][ T8591] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 76.048429][ T8591] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 76.053212][ T8591] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.872: bad orphan inode 16 [ 76.054245][ T8591] ext4_test_bit(bit=15, block=18) = 1 [ 76.054277][ T8591] is_bad_inode(inode)=0 [ 76.054295][ T8591] NEXT_ORPHAN(inode)=0 [ 76.054313][ T8591] max_ino=32 [ 76.054331][ T8591] i_nlink=2 [ 76.055254][ T8591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.120341][ T6493] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.165899][ T8578] loop0: detected capacity change from 0 to 32768 [ 76.178593][ T8578] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.866 (8578) [ 76.186783][ T8578] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 76.186875][ T8578] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 76.321946][ T8578] BTRFS info (device loop0): rebuilding free space tree [ 76.355052][ T8578] BTRFS info (device loop0): disabling free space tree [ 76.355137][ T8578] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 76.355189][ T8578] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 76.435083][ T8578] BTRFS info (device loop0 state M): max_inline set to 0 [ 76.544892][ T6492] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 76.616737][ T8621] netlink: 'syz.0.878': attribute type 7 has an invalid length. [ 76.663188][ T8602] loop2: detected capacity change from 0 to 32768 [ 76.664270][ T8602] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.874 (8602) [ 76.711775][ T8602] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 76.711887][ T8602] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 76.711922][ T8602] BTRFS info (device loop2): disk space caching is enabled [ 76.711946][ T8602] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 76.742902][ T8487] loop4: detected capacity change from 0 to 131072 [ 76.761430][ T8487] F2FS-fs (loop4): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 76.764245][ T8487] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 76.776165][ T8487] F2FS-fs (loop4): invalid crc value [ 76.804512][ T8602] BTRFS info (device loop2): rebuilding free space tree [ 76.824047][ T8602] BTRFS info (device loop2): disabling free space tree [ 76.826236][ T8602] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 76.832755][ T8602] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 76.842523][ T8487] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 76.842656][ T8487] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 76.906686][ T8602] BTRFS info (device loop2): balance: start -sprofiles=NONE,usage=43..0,devid=0,drange=0..0,vrange=0..0,limit=0,limit=0..0,stripes=0..4294967293 [ 76.909944][ T8602] BTRFS info (device loop2): balance: ended with status: 0 [ 76.911055][ T8487] F2FS-fs (loop4): inconsistent node block, node_type:2, nid:8, node_footer[nid:8,ino:8,ofs:0,cpver:5013063228981249506,blkaddr:15366] [ 76.922644][ T8487] F2FS-fs (loop4): inconsistent node block, node_type:2, nid:8, node_footer[nid:8,ino:8,ofs:0,cpver:5013063228981249506,blkaddr:15366] [ 76.925828][ T8487] F2FS-fs (loop4): inconsistent node block, node_type:2, nid:8, node_footer[nid:8,ino:8,ofs:0,cpver:5013063228981249506,blkaddr:15366] [ 77.021306][ T6493] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 77.966545][ T8699] netlink: 20 bytes leftover after parsing attributes in process `syz.4.885'. [ 78.090830][ T8706] loop1: detected capacity change from 0 to 256 [ 78.094645][ T8706] exfat: Deprecated parameter 'namecase' [ 78.126942][ T8706] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 78.184149][ T8682] loop0: detected capacity change from 0 to 32768 [ 78.207527][ T8682] btrfs: Deprecated parameter 'usebackuproot' [ 78.209963][ T8682] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 78.215232][ T8682] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.899 (8682) [ 78.234507][ T8682] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 78.237527][ T8682] BTRFS info (device loop0): using crc32c (crc32c-arm64) checksum algorithm [ 78.242992][ T8682] BTRFS info (device loop0): using free-space-tree [ 78.321306][ T8682] BTRFS info (device loop0): rebuilding free space tree [ 78.415972][ T8740] netlink: 'syz.4.917': attribute type 32 has an invalid length. [ 78.416043][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.917'. [ 78.416184][ T8740] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 78.596016][ T6492] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 78.772743][ T8763] loop2: detected capacity change from 0 to 16 [ 78.792542][ T8763] erofs (device loop2): mounted with root inode @ nid 36. [ 78.884168][ T8769] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 79.063347][ T8789] netlink: 'syz.0.939': attribute type 1 has an invalid length. [ 79.152172][ T8796] ubi31: attaching mtd0 [ 79.161182][ T8796] ubi31: scanning is finished [ 79.168313][ T8796] ubi31: empty MTD device detected [ 79.171277][ T8798] loop0: detected capacity change from 0 to 256 [ 79.318410][ T8796] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 79.320786][ T8796] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 79.322867][ T8796] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 79.324834][ T8796] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 79.327152][ T8796] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 79.329796][ T8796] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 79.332154][ T8796] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2872886603 [ 79.334987][ T8796] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 79.338880][ T8805] ubi31: background thread "ubi_bgt31d" started, PID 8805 [ 79.591616][ T8823] loop0: detected capacity change from 0 to 256 [ 79.699671][ T8827] loop1: detected capacity change from 0 to 16 [ 79.702050][ T8827] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 79.743352][ T8831] loop4: detected capacity change from 0 to 512 [ 79.743962][ T8831] EXT4-fs: Ignoring removed bh option [ 79.743998][ T8831] EXT4-fs: Ignoring removed mblk_io_submit option [ 79.819094][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.961'. [ 79.837019][ T8831] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 79.840348][ T8831] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 79.840556][ T8831] EXT4-fs (loop4): orphan cleanup on readonly fs [ 79.842056][ T8831] Quota error (device loop4): do_insert_tree: Free block already used in tree: block 4 [ 79.842207][ T8831] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 79.842323][ T8831] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.960: Failed to acquire dquot type 1 [ 79.856388][ T8831] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.960: Invalid block bitmap block 0 in block_group 0 [ 79.868706][ T8831] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.960: Invalid block bitmap block 0 in block_group 0 [ 79.874575][ T8831] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.960: Invalid block bitmap block 0 in block_group 0 [ 79.881658][ T8831] Quota error (device loop4): write_blk: dquota write failed [ 79.881770][ T8831] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 79.881807][ T8831] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.960: Failed to acquire dquot type 1 [ 79.889042][ T8831] Quota error (device loop4): write_blk: dquota write failed [ 79.889204][ T8831] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 79.889240][ T8831] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.960: Failed to acquire dquot type 1 [ 79.905670][ T8831] EXT4-fs (loop4): 1 orphan inode deleted [ 79.935602][ T8831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.981499][ T8807] loop2: detected capacity change from 0 to 32768 [ 79.987450][ T8840] loop0: detected capacity change from 0 to 24 [ 79.988040][ T8840] romfs: Unknown parameter 'xœìÚ¿JûPð3úûutt [ 79.988040][ T8840] T¢ ù¯uÕQÜ|ƒÐæ¦ÁSAÚ'Áá:ø‚Oà#dtÓEЗˆ\›š6•v©Åïgé—œžÞ^n–£ÅQh±D#ÚéÝœ¼®ÅQ¨´œý6³˜KCGD¤ÈfÙ­NSž¿êiFú77ü¨Ú¼6Þ‡ŸÍ-__±€{öÚ' [ 80.007881][ T8840] kAFS: No cell specified [ 80.054498][ T8844] ubi31: detaching mtd0 [ 80.063909][ T8844] ubi31: mtd0 is detached [ 80.064826][ T6502] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.294371][ T8807] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 80.294371][ T8807] allowing incompatible features above 0.0: (unknown version) [ 80.294482][ T8807] bcachefs (loop2): initializing new filesystem [ 80.295137][ T8807] bcachefs (loop2): going read-write [ 80.324340][ T8874] netlink: 300 bytes leftover after parsing attributes in process `syz.4.974'. [ 80.328723][ T8807] bcachefs (loop2): marking superblocks [ 80.358905][ T8807] bcachefs (loop2): initializing freespace [ 80.359974][ T8807] bcachefs (loop2): done initializing freespace [ 80.369205][ T8807] bcachefs (loop2): reading snapshots table [ 80.369303][ T8807] bcachefs (loop2): reading snapshots done [ 80.403138][ T8807] bcachefs (loop2): done starting filesystem [ 80.530216][ T6493] bcachefs (loop2): shutting down [ 80.530278][ T6493] bcachefs (loop2): going read-only [ 80.530312][ T6493] bcachefs (loop2): finished waiting for writes to stop [ 80.555581][ T8883] loop0: detected capacity change from 0 to 2048 [ 80.590539][ T6493] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3 [ 80.608253][ T8883] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 80.632643][ T8891] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.683714][ T6493] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 80.690146][ T6493] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 80.729516][ T6493] bcachefs (loop2): marking filesystem clean [ 80.824694][ T8895] loop3: detected capacity change from 0 to 256 [ 80.837129][ T6493] bcachefs (loop2): shutdown complete [ 80.873704][ T8895] FAT-fs (loop3): Directory bread(block 64) failed [ 80.873791][ T8895] FAT-fs (loop3): Directory bread(block 65) failed [ 80.873856][ T8895] FAT-fs (loop3): Directory bread(block 66) failed [ 80.873904][ T8895] FAT-fs (loop3): Directory bread(block 67) failed [ 80.873973][ T8895] FAT-fs (loop3): Directory bread(block 68) failed [ 80.874010][ T8895] FAT-fs (loop3): Directory bread(block 69) failed [ 80.874071][ T8895] FAT-fs (loop3): Directory bread(block 70) failed [ 80.874107][ T8895] FAT-fs (loop3): Directory bread(block 71) failed [ 80.874175][ T8895] FAT-fs (loop3): Directory bread(block 72) failed [ 80.874212][ T8895] FAT-fs (loop3): Directory bread(block 73) failed [ 80.938767][ T8897] netlink: 'syz.0.987': attribute type 6 has an invalid length. [ 80.948727][ T8886] loop1: detected capacity change from 0 to 40427 [ 80.955199][ T8886] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3fffff [ 80.982356][ T8886] F2FS-fs (loop1): invalid crc value [ 81.040139][ T8888] loop4: detected capacity change from 0 to 40427 [ 81.059829][ T8888] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 81.059886][ T8888] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 81.138757][ T8886] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 81.179621][ T8888] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 81.179689][ T8888] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 81.205921][ T8888] syz.4.983: attempt to access beyond end of device [ 81.205921][ T8888] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 81.545641][ T8920] loop0: detected capacity change from 0 to 512 [ 81.595662][ T8920] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 81.595752][ T8920] System zones: 0-2, 18-18, 34-34 [ 81.598713][ T8920] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.999: bg 0: block 248: padding at end of block bitmap is not set [ 81.629224][ T8920] Quota error (device loop0): write_blk: dquota write failed [ 81.629317][ T8920] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 81.629362][ T8920] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.999: Failed to acquire dquot type 1 [ 81.644549][ T8920] EXT4-fs (loop0): 1 truncate cleaned up [ 81.645439][ T8920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.703095][ T8912] loop3: detected capacity change from 0 to 40427 [ 81.718317][ T8912] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x1f10) [ 81.718379][ T8912] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 81.742894][ T8912] F2FS-fs (loop3): invalid crc value [ 81.780302][ T6492] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.875908][ T8912] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 81.875975][ T8912] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 82.606108][ T8989] loop1: detected capacity change from 0 to 4096 [ 82.618795][ T8989] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 82.728415][ T8989] ntfs3(loop1): ino=5, "/" indx_read [ 82.728593][ T8989] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 82.987109][ T9018] loop4: detected capacity change from 0 to 256 [ 83.067938][ T9018] FAT-fs (loop4): Directory bread(block 64) failed [ 83.078819][ T9018] FAT-fs (loop4): Directory bread(block 65) failed [ 83.080828][ T9018] FAT-fs (loop4): Directory bread(block 66) failed [ 83.082679][ T9018] FAT-fs (loop4): Directory bread(block 67) failed [ 83.084772][ T9018] FAT-fs (loop4): Directory bread(block 68) failed [ 83.086774][ T9018] FAT-fs (loop4): Directory bread(block 69) failed [ 83.088836][ T9018] FAT-fs (loop4): Directory bread(block 70) failed [ 83.090756][ T9018] FAT-fs (loop4): Directory bread(block 71) failed [ 83.092722][ T9018] FAT-fs (loop4): Directory bread(block 72) failed [ 83.094607][ T9018] FAT-fs (loop4): Directory bread(block 73) failed [ 83.394801][ T9013] loop2: detected capacity change from 0 to 32768 [ 83.405803][ T9013] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.984 (9013) [ 83.412467][ T9013] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 83.418256][ T9013] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 83.420879][ T9013] BTRFS info (device loop2): disk space caching is enabled [ 83.422886][ T9013] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 83.534066][ T9013] BTRFS info (device loop2): rebuilding free space tree [ 83.564010][ T9013] BTRFS info (device loop2): disabling free space tree [ 83.566070][ T9013] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 83.572287][ T9013] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 83.573775][ T9004] loop3: detected capacity change from 0 to 32768 [ 83.576955][ T9004] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1035 (9004) [ 83.588991][ T9054] netlink: 'syz.4.1049': attribute type 1 has an invalid length. [ 83.594468][ T9024] loop0: detected capacity change from 0 to 32768 [ 83.604535][ T9004] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 83.604633][ T9004] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 83.604673][ T9004] BTRFS info (device loop3): using free-space-tree [ 83.614013][ T9024] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 83.658663][ T9024] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 83.693337][ T9013] BTRFS info (device loop2): balance: start -sprofiles=system|metadata|single|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,usage=18446744073709549331,usage=4294965011..4294967295,devid=0 [ 83.693519][ T9013] BTRFS info (device loop2): balance: ended with status: 0 [ 83.709877][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1052'. [ 83.726835][ T6493] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 83.726950][ T9024] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid bg_blkno of 0 [ 83.727065][ T9024] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 83.727086][ T9024] OCFS2: File system is now read-only. [ 83.727108][ T9024] (syz.0.1042,9024,1):ocfs2_search_chain:1814 ERROR: status = -30 [ 83.727176][ T9024] (syz.0.1042,9024,1):ocfs2_search_chain:1926 ERROR: status = -30 [ 83.727203][ T9024] (syz.0.1042,9024,1):ocfs2_claim_suballoc_bits:1995 ERROR: status = -30 [ 83.727229][ T9024] (syz.0.1042,9024,1):ocfs2_claim_suballoc_bits:2038 ERROR: status = -30 [ 83.727254][ T9024] (syz.0.1042,9024,1):__ocfs2_claim_clusters:2412 ERROR: status = -30 [ 83.727279][ T9024] (syz.0.1042,9024,1):__ocfs2_claim_clusters:2420 ERROR: status = -30 [ 83.727305][ T9024] (syz.0.1042,9024,1):ocfs2_local_alloc_new_window:1199 ERROR: status = -30 [ 83.739895][ T9024] (syz.0.1042,9024,1):ocfs2_local_alloc_new_window:1224 ERROR: status = -30 [ 83.739936][ T9024] (syz.0.1042,9024,1):ocfs2_local_alloc_slide_window:1298 ERROR: status = -30 [ 83.740084][ T9024] (syz.0.1042,9024,1):ocfs2_local_alloc_slide_window:1317 ERROR: status = -30 [ 83.740192][ T9024] (syz.0.1042,9024,1):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30 [ 83.740222][ T9024] (syz.0.1042,9024,1):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30 [ 83.740277][ T9024] (syz.0.1042,9024,1):ocfs2_reserve_clusters_with_limit:1170 ERROR: status = -30 [ 83.740329][ T9024] (syz.0.1042,9024,1):ocfs2_reserve_clusters_with_limit:1219 ERROR: status = -30 [ 83.740357][ T9024] (syz.0.1042,9024,1):ocfs2_mknod:357 ERROR: status = -30 [ 83.740634][ T9024] (syz.0.1042,9024,1):ocfs2_mknod:502 ERROR: status = -30 [ 83.740716][ T9024] (syz.0.1042,9024,1):ocfs2_mkdir:658 ERROR: status = -30 [ 83.867056][ T6492] ocfs2: Unmounting device (7,0) on (node local) [ 83.914504][ T6499] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 84.401280][ T9124] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1075'. [ 84.405796][ T9124] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 84.607563][ T9139] loop0: detected capacity change from 0 to 1024 [ 84.733859][ T9147] loop1: detected capacity change from 0 to 764 [ 84.759729][ T388] hfsplus: b-tree write err: -5, ino 4 [ 84.782995][ T9147] Symlink component flag not implemented [ 84.784781][ T9147] Symlink component flag not implemented (101) [ 84.880517][ T9155] x_tables: duplicate underflow at hook 2 [ 84.940125][ T9161] loop4: detected capacity change from 0 to 1024 [ 84.971438][ T9161] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 84.975096][ T9161] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 84.975335][ T9161] EXT4-fs (loop4): orphan cleanup on readonly fs [ 84.975739][ T9161] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.1091: Freeing blocks not in datazone - block = 0, count = 4096 [ 84.981534][ T9161] EXT4-fs (loop4): 1 orphan inode deleted [ 85.024616][ T9165] loop1: detected capacity change from 0 to 256 [ 85.059304][ T9161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.151844][ T6502] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.195069][ T9140] loop3: detected capacity change from 0 to 32768 [ 85.197187][ T9140] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1083 (9140) [ 85.220639][ T9140] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 85.220751][ T9140] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 85.220809][ T9140] BTRFS info (device loop3): disk space caching is enabled [ 85.220840][ T9140] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 85.299929][ T9187] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1102'. [ 85.314788][ T9198] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1103'. [ 85.342938][ T9140] BTRFS info (device loop3): rebuilding free space tree [ 85.371921][ T9140] BTRFS info (device loop3): disabling free space tree [ 85.373930][ T9140] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 85.376641][ T9140] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 85.454321][ T9207] loop0: detected capacity change from 0 to 512 [ 85.481021][ T9209] netlink: 760 bytes leftover after parsing attributes in process `syz.4.1109'. [ 85.503097][ T9207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.541912][ T6499] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 85.725453][ T6492] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.994214][ T9248] netlink: 'syz.0.1127': attribute type 1 has an invalid length. [ 85.994283][ T9248] netlink: 'syz.0.1127': attribute type 3 has an invalid length. [ 85.994306][ T9248] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1127'. [ 85.994329][ T9248] NCSI netlink: No device for ifindex 0 [ 86.258960][ T9240] loop1: detected capacity change from 0 to 32768 [ 86.261977][ T9240] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1123 (9240) [ 86.264703][ T9261] Cannot find add_set index 0 as target [ 86.277256][ T9240] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 86.277351][ T9240] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 86.424216][ T9240] BTRFS info (device loop1): rebuilding free space tree [ 86.430333][ T9281] random: crng reseeded on system resumption [ 86.463539][ T9240] BTRFS info (device loop1): disabling free space tree [ 86.463624][ T9240] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 86.463652][ T9240] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 86.530804][ T9240] BTRFS info (device loop1 state M): max_inline set to 0 [ 86.629607][ T6491] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 86.796917][ T9255] loop0: detected capacity change from 0 to 32768 [ 86.844036][ T9255] JBD2: Ignoring recovery information on journal [ 86.896032][ T9255] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 87.009674][ T9255] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 87.009836][ T9255] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 87.009858][ T9255] OCFS2: File system is now read-only. [ 87.009879][ T9255] (syz.0.1130,9255,1):ocfs2_search_chain:1838 ERROR: status = -30 [ 87.009941][ T9255] (syz.0.1130,9255,1):ocfs2_search_chain:1926 ERROR: status = -30 [ 87.009967][ T9255] (syz.0.1130,9255,1):ocfs2_claim_suballoc_bits:1995 ERROR: status = -30 [ 87.009993][ T9255] (syz.0.1130,9255,1):ocfs2_claim_suballoc_bits:2038 ERROR: status = -30 [ 87.010019][ T9255] (syz.0.1130,9255,1):ocfs2_claim_new_inode:2273 ERROR: status = -30 [ 87.010044][ T9255] (syz.0.1130,9255,1):ocfs2_claim_new_inode:2288 ERROR: status = -30 [ 87.010069][ T9255] (syz.0.1130,9255,1):ocfs2_mknod_locked:638 ERROR: status = -30 [ 87.010095][ T9255] (syz.0.1130,9255,1):ocfs2_mknod:385 ERROR: status = -30 [ 87.010385][ T9255] (syz.0.1130,9255,1):ocfs2_mknod:502 ERROR: status = -30 [ 87.010466][ T9255] (syz.0.1130,9255,1):ocfs2_create:675 ERROR: status = -30 [ 87.192717][ T6492] ocfs2: Unmounting device (7,0) on (node local) [ 87.326512][ T9288] loop3: detected capacity change from 0 to 32768 [ 87.399153][ T9288] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 87.444814][ T9290] loop2: detected capacity change from 0 to 32768 [ 87.445724][ T9305] loop1: detected capacity change from 0 to 4096 [ 87.452160][ T9305] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 87.479018][ T9288] XFS (loop3): Ending clean mount [ 87.481941][ T9288] XFS (loop3): Quotacheck needed: Please wait. [ 87.489775][ T9305] ntfs3(loop1): ino=19, mi_enum_attr [ 87.489844][ T9305] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 87.532717][ T9288] XFS (loop3): Quotacheck: Done. [ 87.588012][ T9305] ntfs3(loop1): failed to convert "c46c" to cp850 [ 87.595031][ T9305] ntfs3(loop1): ino=20, mi_enum_attr [ 87.603225][ T9328] x_tables: ip_tables: ah match: only valid for protocol 51 [ 87.631715][ T9332] loop4: detected capacity change from 0 to 8 [ 87.651792][ T6499] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 87.693219][ T9332] SQUASHFS error: Failed to read block 0x738: -5 [ 87.695031][ T9332] SQUASHFS error: Unable to read metadata cache entry [736] [ 87.697431][ T9332] SQUASHFS error: Unable to read metadata cache entry [736] [ 87.699912][ T9332] SQUASHFS error: Unable to read metadata cache entry [736] [ 87.702611][ T9332] SQUASHFS error: Unable to read metadata cache entry [736] [ 87.713352][ T9290] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,nochanges,recovery_pass_last=trans_mark_dev_sbs,read_only,no_data_io [ 87.713352][ T9290] allowing incompatible features above 0.0: (unknown version) [ 87.713512][ T9290] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 87.714250][ T9290] bcachefs (loop2): Version upgrade from 1.20: directory_size to 1.7: mi_btree_bitmap incomplete [ 87.714250][ T9290] Doing compatible version upgrade from 1.20: directory_size to 1.25: extent_flags [ 87.714250][ T9290] running recovery passes: check_extents_to_backpointers [ 87.745767][ T9290] bcachefs (loop2): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870914:U32_MAX len 0 ver 0: [ 87.750516][ T9290] mode=100755 [ 87.751719][ T9290] flags=(15300000) [ 87.753109][ T9290] journal_seq=4 [ 87.754306][ T9290] hash_seed=d483206f1ed95abf [ 87.755770][ T9290] hash_type=siphash [ 87.756982][ T9290] bi_size=100 [ 87.758097][ T9290] bi_sectors=8 [ 87.764357][ T9290] bi_version=1126999418470400 [ 87.764410][ T9290] bi_atime=0 [ 87.764425][ T9290] bi_ctime=0 [ 87.764439][ T9290] bi_mtime=0 [ 87.764453][ T9290] bi_otime=2780562352 [ 87.764467][ T9290] bi_uid=2780562352 [ 87.764486][ T9290] bi_gid=0 [ 87.764500][ T9290] bi_nlink=2780562352 [ 87.764514][ T9290] bi_generation=0 [ 87.764528][ T9290] bi_dev=16 [ 87.764541][ T9290] bi_data_checksum=18 [ 87.764555][ T9290] bi_compression=0 [ 87.764569][ T9290] bi_project=0 [ 87.764583][ T9290] bi_background_compression=0 [ 87.764597][ T9290] bi_data_replicas=0 [ 87.764611][ T9290] bi_promote_target=0 [ 87.764625][ T9290] bi_foreground_target=0 [ 87.764639][ T9290] bi_background_target=0 [ 87.764653][ T9290] bi_erasure_code=0 [ 87.764667][ T9290] bi_fields_set=0 [ 87.764681][ T9290] bi_dir=0 [ 87.764695][ T9290] bi_dir_offset=0 [ 87.764708][ T9290] bi_subvol=0 [ 87.764722][ T9290] bi_parent_subvol=0 [ 87.764736][ T9290] bi_nocow=0 [ 87.764750][ T9290] bi_depth=0 [ 87.764764][ T9290] bi_inodes_32bit=0 [ 87.764777][ T9290] bi_casefold=0 [ 87.764791][ T9290] invalid data checksum type (18 >= 5, deleting [ 87.805331][ T9290] bcachefs (loop2): bcachefs (loop2): error validating btree node at btree alloc level 0/0 [ 87.805378][ T9290] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 87.805418][ T9290] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 87.805856][ T9290] bcachefs (loop2): btree_node_read_work: rewriting btree node at due to error [ 87.805856][ T9290] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 87.821796][ T9290] bcachefs (loop2): accounting_read... [ 87.838917][ T9338] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.839126][ T9338] IPv6: NLM_F_CREATE should be set when creating new route [ 87.899823][ T9290] done [ 87.900167][ T9290] bcachefs (loop2): alloc_read... done [ 87.900226][ T9290] bcachefs (loop2): snapshots_read... done [ 87.901332][ T9290] bcachefs (loop2): bucket incorrectly unset in freespace btree [ 87.901354][ T9290] u64s 5 type deleted 0:1:0 len 0 ver 0, , continuing [ 87.901840][ T9290] bcachefs (loop2): bucket incorrectly unset in freespace btree [ 87.901853][ T9290] u64s 5 type deleted 0:2:0 len 0 ver 0, , continuing [ 87.902071][ T9290] bcachefs (loop2): bucket incorrectly unset in freespace btree [ 87.902083][ T9290] u64s 5 type deleted 0:3:0 len 0 ver 0, , continuing [ 87.902282][ T9290] bcachefs (loop2): bucket incorrectly unset in freespace btree [ 87.902294][ T9290] u64s 5 type deleted 0:4:0 len 0 ver 0, , continuing [ 87.902497][ T9290] bcachefs (loop2): bucket incorrectly unset in freespace btree [ 87.902508][ T9290] u64s 5 type deleted 0:5:0 len 0 ver 0, , continuing [ 87.902755][ T9290] bcachefs (loop2): bucket incorrectly unset in freespace btree [ 87.902767][ T9290] u64s 5 type deleted 0:6:0 len 0 ver 0, , continuing [ 87.902959][ T9290] bcachefs (loop2): bucket incorrectly unset in freespace btree [ 87.902970][ T9290] u64s 5 type deleted 0:7:0 len 0 ver 0, , continuing [ 87.903170][ T9290] bcachefs (loop2): bucket incorrectly unset in freespace btree [ 87.903182][ T9290] u64s 5 type deleted 0:8:0 len 0 ver 0, , continuing [ 87.903395][ T9290] bcachefs (loop2): bucket incorrectly unset in freespace btree [ 87.903414][ T9290] u64s 5 type deleted 0:16:0 len 0 ver 0, , continuing [ 87.903605][ T9290] bcachefs (loop2): bucket incorrectly unset in freespace btree [ 87.903617][ T9290] u64s 5 type deleted 0:17:0 len 0 ver 0, , continuing [ 87.903819][ T9290] bcachefs (loop2): bucket incorrectly unset in freespace btree [ 87.903830][ T9290] u64s 5 type deleted 0:18:0 len 0 ver 0, , continuing [ 87.903840][ T9290] Ratelimiting new instances of previous error [ 87.953160][ T9290] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean [ 87.953598][ T9290] bcachefs (loop2): done starting filesystem [ 88.000073][ T9342] loop1: detected capacity change from 0 to 256 [ 88.048492][ T6493] bcachefs (loop2): shutting down [ 88.063062][ T9342] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 88.082858][ T9347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1152'. [ 88.082926][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1152'. [ 88.186719][ T6493] bcachefs (loop2): shutdown complete [ 88.287667][ T9363] ALSA: mixer_oss: invalid OSS volume '' [ 88.348806][ T9369] i2c i2c-0: Invalid block write size 254 [ 88.681959][ T9399] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1185'. [ 88.790140][ T9404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.160835][ T9429] dvmrp1: entered allmulticast mode [ 89.356172][ T9447] loop3: detected capacity change from 0 to 1764 [ 89.405855][ T9447] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 89.486567][ T9456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1212'. [ 89.486650][ T9456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1212'. [ 89.974276][ T9487] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1228'. [ 90.128719][ T9463] loop4: detected capacity change from 0 to 32768 [ 90.146862][ T9496] geneve2: entered promiscuous mode [ 90.146934][ T9496] geneve2: entered allmulticast mode [ 90.182859][ T9463] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 90.298364][ T9463] XFS (loop4): Ending clean mount [ 90.310922][ T9463] XFS (loop4): Quotacheck needed: Please wait. [ 90.383213][ T9517] netlink: 'syz.2.1238': attribute type 33 has an invalid length. [ 90.385811][ T9463] XFS (loop4): Quotacheck: Done. [ 90.419367][ T9521] loop1: detected capacity change from 0 to 512 [ 90.420006][ T9521] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.455423][ T9521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.507605][ T6502] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 90.559294][ T6491] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.603878][ T9535] loop2: detected capacity change from 0 to 512 [ 90.625361][ T9537] __nla_validate_parse: 2 callbacks suppressed [ 90.625782][ T9537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1250'. [ 90.629218][ T9535] EXT4-fs (loop2): Test dummy encryption mode enabled [ 90.629252][ T9535] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 90.629272][ T9535] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.648594][ T9535] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1247: bg 0: block 255: padding at end of block bitmap is not set [ 90.659594][ T9535] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 90.663892][ T9535] EXT4-fs (loop2): 1 truncate cleaned up [ 90.670352][ T9535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.682016][ T9544] (unnamed net_device) (uninitialized): option ad_select: invalid value (105) [ 90.734800][ T9535] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 90.736118][ T9546] xt_TCPMSS: Only works on TCP SYN packets [ 90.785304][ T9553] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1254'. [ 90.834790][ T6493] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.884806][ T9557] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.928708][ T9564] loop1: detected capacity change from 0 to 256 [ 90.937164][ T9566] loop4: detected capacity change from 0 to 512 [ 90.969736][ T9566] EXT4-fs (loop4): orphan cleanup on readonly fs [ 90.969802][ T9566] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 90.974956][ T9566] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 91.008070][ T9566] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.1259: attempt to clear invalid blocks 2 len 1 [ 91.008737][ T9566] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1259: invalid indirect mapped block 1819239214 (level 0) [ 91.009001][ T9566] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1259: invalid indirect mapped block 1819239214 (level 1) [ 91.010914][ T9566] EXT4-fs (loop4): 1 truncate cleaned up [ 91.011821][ T9566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.034966][ T9566] EXT4-fs error (device loop4): ext4_lookup:1786: inode #2: comm syz.4.1259: 'file1' linked to parent dir [ 91.137709][ T6502] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.277964][ T9593] netlink: 'syz.2.1272': attribute type 49 has an invalid length. [ 91.307743][ T9588] loop3: detected capacity change from 0 to 4096 [ 91.315782][ T9588] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 91.362995][ T9588] ntfs3(loop3): ino=19, mi_enum_attr [ 91.363075][ T9588] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 91.743140][ T9619] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 91.918585][ T9592] loop0: detected capacity change from 0 to 32768 [ 91.930607][ T9633] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1294'. [ 91.959525][ T9592] (syz.0.1273,9592,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 91.967004][ T9592] (syz.0.1273,9592,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 91.986061][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1295'. [ 92.046795][ T9592] JBD2: Ignoring recovery information on journal [ 92.103082][ T9592] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 92.188430][ T9645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1298'. [ 92.318436][ T9623] loop1: detected capacity change from 0 to 32768 [ 92.324090][ T6492] ocfs2: Unmounting device (7,0) on (node local) [ 92.461583][ T9671] loop2: detected capacity change from 0 to 512 [ 92.504735][ T9671] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1308: casefold flag without casefold feature [ 92.512994][ T9671] EXT4-fs (loop2): Remounting filesystem read-only [ 92.533260][ T9671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.565865][ T9680] loop4: detected capacity change from 0 to 256 [ 92.594231][ T9680] tmpfs: Bad value for 'mpol' [ 92.596122][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1312'. [ 92.599529][ T9623] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 92.599529][ T9623] allowing incompatible features above 0.0: (unknown version) [ 92.607412][ T9623] bcachefs (loop1): invalid journal entry, version=1.7: mi_btree_bitmap type=btree_root in superblock: invalid btree root journal entry: wrong number of keys, fixing [ 92.609568][ T9682] 8: entered promiscuous mode [ 92.613888][ T9623] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 92.616178][ T9623] bcachefs (loop1): superblock requires following recovery passes to be run: [ 92.616178][ T9623] recovery_pass_empty,accounting_read [ 92.620228][ T9623] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.25: extent_flags [ 92.620228][ T9623] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 92.627908][ T9623] bcachefs (loop1): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 92.628090][ T9623] bcachefs (loop1): bcachefs (loop1): error validating btree node on loop1 at btree extents level 0/0 [ 92.628118][ T9623] u64s 11 type btree_ptr_v2 U64_MAX:U64_MAX:4278190080 len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 92.628131][ T9623] node offset 0/16 bset u64s 0: incorrect max key SPOS_MAX, btree topology error: [ 92.628508][ T9623] bcachefs (loop1): flagging btree extents lost data [ 92.628593][ T9623] bcachefs (loop1): running explicit recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 92.628647][ T9623] bcachefs (loop1): running explicit recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 92.628679][ T9623] bcachefs (loop1): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 92.636848][ T9623] bcachefs (loop1): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 92.641532][ T9623] bcachefs (loop1): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4100:U32_MAX len 0 ver 0: (unpack error) [ 92.641552][ T9623] invalid variable length fields, deleting [ 92.645245][ T9623] bcachefs (loop1): invalid bkey in btree_node btree=xattrs level=0: u64s 7 type xattr 536870912:3798421620223919902:U32_MAX len 0 ver 0: user.:xattr2 [ 92.645265][ T9623] value too small (2 < 226), deleting [ 92.677892][ T9623] bcachefs (loop1): bcachefs (loop1): error validating btree node on loop1 at btree lru level 0/0 [ 92.677944][ T9623] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 92.677975][ T9623] node offset 8/16: btree node data missing: expected 16 sectors, found 8, fixing [ 92.678287][ T9623] bcachefs (loop1): btree_node_read_work: rewriting btree node at due to error [ 92.678287][ T9623] btree=lru level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 92.680390][ T9623] bcachefs (loop1): bcachefs (loop1): error validating btree node on loop1 at btree freespace level 0/0 [ 92.680425][ T9623] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 92.680438][ T9623] node offset 0/32: bad magic: want 59513f585d347cd2, got 59513f585d340000, btree topology error: [ 92.680497][ T9623] bcachefs (loop1): flagging btree freespace lost data [ 92.680533][ T9623] bcachefs (loop1): running explicit recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 92.681993][ T9623] bcachefs (loop1): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 92.683810][ T9623] bcachefs (loop1): bcachefs (loop1): error validating btree node on loop1 at btree deleted_inodes level 0/0 [ 92.683828][ T9623] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key 0:4278190080:0 durability: 1 ptr: 0:42:0 gen 0 [ 92.683840][ T9623] node offset 0/8: incorrect min_key: got POS_MIN should be 0:4278190080:0, btree topology error: [ 92.683909][ T9623] bcachefs (loop1): flagging btree deleted_inodes lost data [ 92.684549][ T9623] bcachefs (loop1): error reading btree root btree=deleted_inodes level=0: btree_node_read_error, fixing [ 92.686241][ T9623] bcachefs (loop1): scan_for_btree_nodes... [ 92.703581][ T9683] bcachefs (loop1): bcachefs (loop1): error validating btree node on loop1 at btree extents level 0/0 [ 92.703615][ T9683] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 0 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 92.703628][ T9683] node offset 0/0 bset u64s 0: invalid bkey format: field 1 too large: 18446744073709551615 + 38654705664 > 18446744073709551615 [ 92.703640][ T9683] u64s 3 fields 64:0, 64:38654705664, 32:0, 0:0, 0:0, 0:0, btree topology error: [ 92.708262][ T9623] bcachefs (loop1): btree node scan found 2 nodes after overwrites [ 92.708302][ T9623] done [ 92.729753][ T9623] bcachefs (loop1): check_topology... [ 92.752260][ T9623] bcachefs (loop1): btree root extents unreadable, must recover from scan [ 92.753254][ T6493] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.754748][ T9623] bcachefs (loop1): no nodes found for btree extents, continuing [ 92.764522][ T9623] bcachefs (loop1): btree root deleted_inodes unreadable, must recover from scan [ 92.767823][ T9623] bcachefs (loop1): bch2_get_scanned_nodes(): recovery btree=deleted_inodes level=0 POS_MIN - SPOS_MAX [ 92.773072][ T9623] bcachefs (loop1): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0 [ 92.784025][ T9623] done [ 92.785459][ T9623] bcachefs (loop1): accounting_read... done [ 92.838316][ T9623] bcachefs (loop1): alloc_read... done [ 92.840026][ T9623] bcachefs (loop1): snapshots_read... done [ 92.840191][ T9689] netlink: 'syz.4.1316': attribute type 32 has an invalid length. [ 92.843760][ T9623] bcachefs (loop1): check_allocations... [ 92.844613][ T9623] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap [ 92.849340][ T9623] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 8 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 92.858588][ T9623] bcachefs (loop1): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 92.861145][ T9623] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 8 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 92.866007][ T9623] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap [ 92.868669][ T9623] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 92.891235][ T9623] bcachefs (loop1): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 92.891281][ T9623] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 92.891635][ T9623] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap [ 92.891647][ T9623] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 92.892811][ T9623] bcachefs (loop1): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 92.892826][ T9623] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 92.893076][ T9623] bcachefs (loop1): bucket 0:31 data type btree ptr gen 0 missing in alloc btree [ 92.893089][ T9623] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing [ 92.893368][ T9623] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap [ 92.893380][ T9623] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 92.924970][ T9623] bcachefs (loop1): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 92.925016][ T9623] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 92.925337][ T9623] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap [ 92.925350][ T9623] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 92.929146][ T9623] bcachefs (loop1): bucket 0:32 data type btree ptr gen 0 missing in alloc btree [ 92.929164][ T9623] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 92.929416][ T9623] bcachefs (loop1): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 92.929429][ T9623] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 92.929790][ T9623] bcachefs (loop1): bucket 0:37 data type btree ptr gen 0 missing in alloc btree [ 92.929802][ T9623] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0, fixing [ 92.930108][ T9623] bcachefs (loop1): bucket 0:42 data type btree ptr gen 0 missing in alloc btree [ 92.930120][ T9623] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0, fixing [ 92.931281][ T9623] bcachefs (loop1): bucket 0:0 gen 0 has wrong data_type: got free, should be sb, fixing [ 92.931363][ T9623] bcachefs (loop1): bucket 0:0 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 92.931586][ T9623] bcachefs (loop1): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 92.931658][ T9623] bcachefs (loop1): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 92.931778][ T9623] bcachefs (loop1): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 92.931839][ T9623] bcachefs (loop1): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 92.931951][ T9623] bcachefs (loop1): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 92.932019][ T9623] bcachefs (loop1): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 92.932131][ T9623] bcachefs (loop1): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 92.932199][ T9623] bcachefs (loop1): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 92.932322][ T9623] bcachefs (loop1): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 92.932395][ T9623] bcachefs (loop1): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 92.932526][ T9623] bcachefs (loop1): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 92.932588][ T9623] bcachefs (loop1): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 92.932719][ T9623] bcachefs (loop1): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 92.932781][ T9623] bcachefs (loop1): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 92.932896][ T9623] bcachefs (loop1): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 92.932957][ T9623] bcachefs (loop1): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 92.933068][ T9623] bcachefs (loop1): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 92.957925][ T9623] bcachefs (loop1): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 92.958578][ T9623] bcachefs (loop1): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 92.958626][ T9623] Ratelimiting new instances of previous error [ 92.958848][ T9623] bcachefs (loop1): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 92.958863][ T9623] Ratelimiting new instances of previous error [ 92.965157][ T9623] done [ 93.040046][ T9623] bcachefs (loop1): going read-write [ 93.048672][ T9623] bcachefs (loop1): journal_replay... [ 93.097278][ T62] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 93.097344][ T62] u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing [ 93.116087][ T62] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 93.116139][ T62] u64s 5 type deleted 0:30:0 len 0 ver 0, , continuing [ 93.141416][ T9705] misc userio: No port type given on /dev/userio [ 93.177441][ T62] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 93.177486][ T62] u64s 5 type deleted 0:27:0 len 0 ver 0, , continuing [ 93.249338][ T45] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 93.249409][ T45] u64s 5 type deleted 0:34:0 len 0 ver 0, , continuing [ 93.252512][ T45] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 93.252529][ T45] u64s 5 type deleted 0:36:0 len 0 ver 0, , continuing [ 93.276873][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1323'. [ 93.306836][ T45] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 93.306879][ T45] u64s 5 type deleted 0:40:0 len 0 ver 0, , continuing [ 93.329747][ T9716] loop3: detected capacity change from 0 to 2048 [ 93.346102][ T9623] done [ 93.346112][ T9716] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.356538][ T9623] bcachefs (loop1): check_alloc_info... [ 93.357689][ T9623] bcachefs (loop1): hole in alloc btree missing in freespace btree [ 93.362143][ T9623] device 0 buckets 25-26, fixing [ 93.364366][ T9623] bcachefs (loop1): hole in alloc btree missing in freespace btree [ 93.368466][ T9623] device 0 buckets 33-34, fixing [ 93.368800][ T9623] bcachefs (loop1): hole in alloc btree missing in freespace btree [ 93.368813][ T9623] device 0 buckets 39-40, fixing [ 93.369098][ T9623] bcachefs (loop1): hole in alloc btree missing in freespace btree [ 93.369110][ T9623] device 0 buckets 43-120, fixing [ 93.371059][ T9623] done [ 93.391090][ T9623] bcachefs (loop1): check_lrus... done [ 93.392030][ T9623] bcachefs (loop1): check_backpointers_to_extents... done [ 93.427864][ T9679] loop0: detected capacity change from 0 to 32768 [ 93.431798][ T9623] bcachefs (loop1): check_extents_to_backpointers... [ 93.433778][ T9623] bcachefs (loop1): scanning for missing backpointers in 5/128 buckets [ 93.439037][ T9623] done [ 93.440686][ T9623] bcachefs (loop1): check_inodes... done [ 93.453974][ T9623] bcachefs (loop1): resume_logged_ops... done [ 93.454090][ T9623] bcachefs (loop1): delete_dead_inodes... done [ 93.460321][ T9623] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 93.460380][ T9623] bcachefs (loop1): check_alloc_info... done [ 93.463060][ T9623] bcachefs (loop1): check_lrus... done [ 93.463106][ T9623] bcachefs (loop1): check_backpointers_to_extents... done [ 93.463806][ T9623] bcachefs (loop1): check_extents_to_backpointers... done [ 93.464420][ T9623] bcachefs (loop1): check_inodes... done [ 93.464712][ T9623] bcachefs (loop1): resume_logged_ops... done [ 93.464757][ T9623] bcachefs (loop1): delete_dead_inodes... done [ 93.501708][ T9623] bcachefs (loop1): done starting filesystem [ 93.520255][ T9679] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 93.668519][ T9679] XFS (loop0): Ending clean mount [ 93.692957][ T9679] XFS (loop0): Quotacheck needed: Please wait. [ 93.734663][ T9679] XFS (loop0): Quotacheck: Done. [ 93.739910][ T9736] loop3: detected capacity change from 0 to 4096 [ 93.781060][ T9736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.833261][ T6491] bcachefs (loop1): shutting down [ 93.833320][ T6491] bcachefs (loop1): going read-only [ 93.833371][ T6491] bcachefs (loop1): finished waiting for writes to stop [ 93.861986][ T9718] loop4: detected capacity change from 0 to 32768 [ 93.875253][ T9718] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 93.903834][ T6491] bcachefs (loop1): flushing journal and stopping allocators, journal seq 21 [ 93.910049][ T6492] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 93.912259][ T6491] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 22 [ 93.914013][ T6491] bcachefs (loop1): clean shutdown complete, journal seq 23 [ 93.959859][ T6491] bcachefs (loop1): marking filesystem clean [ 94.043626][ T6491] bcachefs (loop1): shutdown complete [ 94.076843][ T9718] XFS (loop4): Ending clean mount [ 94.099130][ T9718] XFS (loop4): Quotacheck needed: Please wait. [ 94.132191][ T9718] XFS (loop4): Quotacheck: Done. [ 94.194761][ T9749] loop2: detected capacity change from 0 to 32768 [ 94.200678][ T6499] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.210652][ T6502] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 94.213947][ T9749] XFS: noikeep mount option is deprecated. [ 94.244892][ T9749] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 94.300166][ T9749] XFS (loop2): Ending clean mount [ 94.348968][ T9767] netlink: 'syz.0.1341': attribute type 1 has an invalid length. [ 94.500500][ T6493] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 94.673740][ T9784] ALSA: mixer_oss: invalid OSS volume 'u' [ 94.768790][ T9793] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1352'. [ 95.001459][ T9809] netlink: 'syz.3.1360': attribute type 10 has an invalid length. [ 95.051616][ T9809] geneve0: entered promiscuous mode [ 95.090299][ T9809] geneve0: entered allmulticast mode [ 95.090800][ T9809] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 95.261555][ T9824] loop2: detected capacity change from 0 to 4096 [ 95.498595][ T9841] netlink: 'syz.0.1376': attribute type 10 has an invalid length. [ 95.698044][ T9860] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6) [ 95.995897][ T9881] netlink: 'syz.4.1395': attribute type 10 has an invalid length. [ 96.130995][ T9889] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1398'. [ 96.296029][ T9899] loop4: detected capacity change from 0 to 2048 [ 96.430202][ T9899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.530275][ T6502] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.675547][ T9922] loop3: detected capacity change from 0 to 64 [ 96.696415][ T9902] loop0: detected capacity change from 0 to 32768 [ 96.746002][ T9918] loop4: detected capacity change from 0 to 4096 [ 96.759434][ T9926] netlink: 'syz.1.1415': attribute type 10 has an invalid length. [ 96.892801][ T9935] netlink: 'syz.3.1417': attribute type 21 has an invalid length. [ 96.895149][ T9935] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1417'. [ 96.905411][ T9902] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 96.905411][ T9902] allowing incompatible features above 0.0: (unknown version) [ 96.905605][ T9902] bcachefs (loop0): invalid journal entry, version=1.7: mi_btree_bitmap type=btree_root in superblock: invalid btree root journal entry: wrong number of keys, fixing [ 96.905690][ T9902] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 96.905726][ T9902] bcachefs (loop0): superblock requires following recovery passes to be run: [ 96.905726][ T9902] recovery_pass_empty,accounting_read [ 96.905798][ T9902] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.25: extent_flags [ 96.905798][ T9902] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 96.917888][ T9910] loop2: detected capacity change from 0 to 32768 [ 96.948490][ T9902] bcachefs (loop0): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 96.948565][ T9902] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree extents level 0/0 [ 96.948585][ T9902] u64s 11 type btree_ptr_v2 U64_MAX:U64_MAX:4278190080 len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 96.948599][ T9902] node offset 0/16 bset u64s 0: incorrect max key SPOS_MAX, btree topology error: [ 96.948666][ T9902] bcachefs (loop0): flagging btree extents lost data [ 96.948697][ T9902] bcachefs (loop0): running explicit recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 96.948717][ T9902] bcachefs (loop0): running explicit recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 96.948737][ T9902] bcachefs (loop0): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 96.954166][ T9902] bcachefs (loop0): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 96.960229][ T9902] bcachefs (loop0): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4100:U32_MAX len 0 ver 0: (unpack error) [ 96.960249][ T9902] invalid variable length fields, deleting [ 96.965103][ T9902] bcachefs (loop0): invalid bkey in btree_node btree=xattrs level=0: u64s 7 type xattr 536870912:3798421620223919902:U32_MAX len 0 ver 0: user.:xattr2 [ 96.965121][ T9902] value too small (2 < 226), deleting [ 96.992385][ T9902] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree lru level 0/0 [ 96.992440][ T9902] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 96.992471][ T9902] node offset 8/16: btree node data missing: expected 16 sectors, found 8, fixing [ 96.992725][ T9902] bcachefs (loop0): btree_node_read_work: rewriting btree node at due to error [ 96.992725][ T9902] btree=lru level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 96.998718][ T9902] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree freespace level 0/0 [ 96.998736][ T9902] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 96.998748][ T9902] node offset 0/32: bad magic: want 59513f585d347cd2, got 59513f585d340000, btree topology error: [ 96.998840][ T9902] bcachefs (loop0): flagging btree freespace lost data [ 96.998876][ T9902] bcachefs (loop0): running explicit recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 97.003398][ T9902] bcachefs (loop0): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 97.012038][ T9902] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree deleted_inodes level 0/0 [ 97.012055][ T9902] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key 0:4278190080:0 durability: 1 ptr: 0:42:0 gen 0 [ 97.012068][ T9902] node offset 0/8: incorrect min_key: got POS_MIN should be 0:4278190080:0, btree topology error: [ 97.012133][ T9902] bcachefs (loop0): flagging btree deleted_inodes lost data [ 97.012818][ T9902] bcachefs (loop0): error reading btree root btree=deleted_inodes level=0: btree_node_read_error, fixing [ 97.020536][ T9910] jfs_mkdir: dtInsert returned -EIO [ 97.020677][ T9910] ERROR: (device loop2): txAbort: [ 97.020677][ T9910] [ 97.027300][ T9910] ERROR: (device loop2): remounting filesystem as read-only [ 97.030633][ T9902] bcachefs (loop0): scan_for_btree_nodes... [ 97.064795][ T9938] bcachefs (loop0): bcachefs (loop0): error validating btree node on loop0 at btree extents level 0/0 [ 97.064849][ T9938] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 0 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 97.064862][ T9938] node offset 0/0 bset u64s 0: invalid bkey format: field 1 too large: 18446744073709551615 + 38654705664 > 18446744073709551615 [ 97.064875][ T9938] u64s 3 fields 64:0, 64:38654705664, 32:0, 0:0, 0:0, 0:0, btree topology error: [ 97.066944][ T9902] bcachefs (loop0): btree node scan found 2 nodes after overwrites [ 97.066980][ T9902] done [ 97.068859][ T9902] bcachefs (loop0): check_topology... [ 97.069461][ T9902] bcachefs (loop0): btree root extents unreadable, must recover from scan [ 97.069549][ T9902] bcachefs (loop0): no nodes found for btree extents, continuing [ 97.114232][ T9902] bcachefs (loop0): btree root deleted_inodes unreadable, must recover from scan [ 97.114351][ T9902] bcachefs (loop0): bch2_get_scanned_nodes(): recovery btree=deleted_inodes level=0 POS_MIN - SPOS_MAX [ 97.114435][ T9902] bcachefs (loop0): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0 [ 97.116818][ T9902] done [ 97.122612][ T9902] bcachefs (loop0): accounting_read... done [ 97.233456][ T9902] bcachefs (loop0): alloc_read... done [ 97.233601][ T9902] bcachefs (loop0): snapshots_read... done [ 97.233677][ T9902] bcachefs (loop0): check_allocations... [ 97.234234][ T9902] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 97.234248][ T9902] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 8 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 97.234981][ T9902] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 97.234997][ T9902] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 8 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 97.235476][ T9902] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 97.235495][ T9902] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 97.236153][ T9902] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 97.236167][ T9902] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 97.236911][ T9902] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 97.236928][ T9902] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 97.240798][ T9902] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 97.240815][ T9902] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 97.241076][ T9902] bcachefs (loop0): bucket 0:31 data type btree ptr gen 0 missing in alloc btree [ 97.241089][ T9902] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing [ 97.241368][ T9902] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 97.241381][ T9902] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 97.244335][ T9902] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 97.244352][ T9902] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 97.244628][ T9902] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 97.244641][ T9902] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 97.258802][ T9902] bcachefs (loop0): bucket 0:32 data type btree ptr gen 0 missing in alloc btree [ 97.258819][ T9902] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 97.259053][ T9902] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 97.259066][ T9902] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 97.259408][ T9902] bcachefs (loop0): bucket 0:37 data type btree ptr gen 0 missing in alloc btree [ 97.259422][ T9902] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0, fixing [ 97.259715][ T9902] bcachefs (loop0): bucket 0:42 data type btree ptr gen 0 missing in alloc btree [ 97.259727][ T9902] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0, fixing [ 97.260048][ T9902] bcachefs (loop0): bucket 0:0 gen 0 has wrong data_type: got free, should be sb, fixing [ 97.260109][ T9902] bcachefs (loop0): bucket 0:0 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 97.260326][ T9902] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 97.260389][ T9902] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 97.260519][ T9902] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 97.260581][ T9902] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 97.260694][ T9902] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 97.260755][ T9902] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 97.260870][ T9902] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 97.260942][ T9902] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 97.261062][ T9902] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 97.261122][ T9902] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 97.261233][ T9902] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 97.261294][ T9902] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 97.261413][ T9902] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 97.261475][ T9902] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 97.261599][ T9902] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 97.261670][ T9902] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 97.261782][ T9902] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 97.261843][ T9902] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 97.261968][ T9902] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 97.261980][ T9902] Ratelimiting new instances of previous error [ 97.262056][ T9902] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 97.262069][ T9902] Ratelimiting new instances of previous error [ 97.267302][ T9902] done [ 97.329104][ T9902] bcachefs (loop0): going read-write [ 97.371563][ T9902] bcachefs (loop0): journal_replay... [ 97.431300][ T293] bcachefs (loop0): bucket incorrectly unset in freespace btree [ 97.431368][ T293] u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing [ 97.440310][ T9961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1428'. [ 97.495655][ T293] bcachefs (loop0): bucket incorrectly unset in freespace btree [ 97.495697][ T293] u64s 5 type deleted 0:30:0 len 0 ver 0, , continuing [ 97.527188][ T293] bcachefs (loop0): bucket incorrectly unset in freespace btree [ 97.527247][ T293] u64s 5 type deleted 0:33:0 len 0 ver 0, , continuing [ 97.541313][ T293] bcachefs (loop0): bucket incorrectly unset in freespace btree [ 97.541359][ T293] u64s 5 type deleted 0:34:0 len 0 ver 0, , continuing [ 97.558924][ T293] bcachefs (loop0): bucket incorrectly unset in freespace btree [ 97.558970][ T293] u64s 5 type deleted 0:39:0 len 0 ver 0, , continuing [ 97.597972][ T9968] /dev/nullb0: Can't open blockdev [ 97.604824][ T293] bcachefs (loop0): bucket incorrectly unset in freespace btree [ 97.604873][ T293] u64s 5 type deleted 0:36:0 len 0 ver 0, , continuing [ 97.608160][ T9969] netdevsim netdevsim3 ªªªªª»: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.611183][ T9969] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.611218][ T9969] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.611249][ T9969] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 97.611498][ T9969] geneve2: entered promiscuous mode [ 97.611527][ T9969] geneve2: entered allmulticast mode [ 97.621900][ T9902] done [ 97.623761][ T9902] bcachefs (loop0): check_alloc_info... [ 97.624810][ T9902] bcachefs (loop0): hole in alloc btree missing in freespace btree [ 97.624844][ T9902] device 0 buckets 25-26, fixing [ 97.625537][ T9902] bcachefs (loop0): hole in alloc btree missing in freespace btree [ 97.625551][ T9902] device 0 buckets 27-28, fixing [ 97.625900][ T9902] bcachefs (loop0): hole in alloc btree missing in freespace btree [ 97.625912][ T9902] device 0 buckets 40-41, fixing [ 97.626060][ T9902] bcachefs (loop0): hole in alloc btree missing in freespace btree [ 97.626072][ T9902] device 0 buckets 43-120, fixing [ 97.627879][ T9902] done [ 97.645511][ T9902] bcachefs (loop0): check_lrus... done [ 97.646511][ T9902] bcachefs (loop0): check_backpointers_to_extents... done [ 97.648904][ T9902] bcachefs (loop0): check_extents_to_backpointers... [ 97.649677][ T9902] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 97.650129][ T9902] done [ 97.654338][ T9902] bcachefs (loop0): check_inodes... done [ 97.666397][ T9902] bcachefs (loop0): resume_logged_ops... done [ 97.666545][ T9902] bcachefs (loop0): delete_dead_inodes... done [ 97.677208][ T9902] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 97.677268][ T9902] bcachefs (loop0): check_alloc_info... done [ 97.688104][ T9902] bcachefs (loop0): check_lrus... done [ 97.692476][ T9902] bcachefs (loop0): check_backpointers_to_extents... done [ 97.695917][ T9902] bcachefs (loop0): check_extents_to_backpointers... done [ 97.699392][ T9902] bcachefs (loop0): check_inodes... done [ 97.699688][ T9902] bcachefs (loop0): resume_logged_ops... done [ 97.699734][ T9902] bcachefs (loop0): delete_dead_inodes... done [ 97.703468][ T9902] bcachefs (loop0): done starting filesystem [ 97.708650][ T9969] netdevsim netdevsim3 ªªªªª»: unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.708720][ T9969] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.708760][ T9969] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.708791][ T9969] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 97.719030][ T9964] loop4: detected capacity change from 0 to 8192 [ 97.791634][ T6492] bcachefs (loop0): shutting down [ 97.791704][ T6492] bcachefs (loop0): going read-only [ 97.791733][ T6492] bcachefs (loop0): finished waiting for writes to stop [ 97.835411][ T6492] bcachefs (loop0): flushing journal and stopping allocators, journal seq 21 [ 97.864812][ T6492] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 22 [ 97.865773][ T6492] bcachefs (loop0): clean shutdown complete, journal seq 23 [ 97.921582][ T6492] bcachefs (loop0): marking filesystem clean [ 97.956616][ T9982] loop2: detected capacity change from 0 to 256 [ 97.970502][ T9983] loop4: detected capacity change from 0 to 128 [ 97.981024][ T9983] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 98.012016][ T6492] bcachefs (loop0): shutdown complete [ 98.066235][ T62] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 98.370743][T10014] netlink: 'syz.2.1452': attribute type 1 has an invalid length. [ 98.370813][T10014] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1452'. [ 98.504838][T10020] ieee802154 phy1 wpan1: encryption failed: -90 [ 98.632905][T10031] loop1: detected capacity change from 0 to 512 [ 98.667103][T10031] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 98.709888][T10031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.838637][ T6491] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.901985][T10050] mmap: syz.2.1472 (10050) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 98.966374][T10053] loop3: detected capacity change from 0 to 2048 [ 99.018132][T10053] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.287351][T10079] netlink: 'syz.2.1483': attribute type 21 has an invalid length. [ 99.293483][T10079] IPv6: NLM_F_CREATE should be specified when creating new route [ 99.296236][T10079] IPv6: Can't replace route, no match found [ 99.318395][T10080] netlink: 'syz.4.1482': attribute type 1 has an invalid length. [ 99.318466][T10080] netlink: 'syz.4.1482': attribute type 11 has an invalid length. [ 99.318506][T10080] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1482'. [ 99.373138][T10084] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 99.376419][T10084] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 99.399051][T10084] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 99.401739][T10084] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 99.409966][T10084] geneve2: entered promiscuous mode [ 99.410045][T10084] geneve2: entered allmulticast mode [ 99.432141][T10084] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 99.432225][T10084] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 99.432286][T10084] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 99.432317][T10084] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 99.527169][T10096] loop3: detected capacity change from 0 to 1024 [ 99.618709][T10096] hfsplus: can't free extent [ 99.717540][T10100] loop2: detected capacity change from 0 to 2048 [ 99.718024][T10100] EXT4-fs: Ignoring removed mblk_io_submit option [ 99.750260][T10100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.762776][T10100] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.891129][T10118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1435'. [ 100.348860][T10136] loop0: detected capacity change from 0 to 256 [ 100.654654][T10136] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0xb81e6d3a, utbl_chksum : 0xe619d30d) [ 100.670648][T10136] exFAT-fs (loop0): valid_size(150994954) is greater than size(0) [ 101.149746][T10157] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1519'. [ 101.331181][T10143] loop1: detected capacity change from 0 to 32768 [ 101.351969][T10151] loop3: detected capacity change from 0 to 32768 [ 101.401621][T10143] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 101.401763][T10169] loop0: detected capacity change from 0 to 1024 [ 101.420326][T10173] loop2: detected capacity change from 0 to 512 [ 101.472019][T10173] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.486772][T10169] hfsplus: can't free extent [ 101.512383][T10143] XFS (loop1): Ending clean mount [ 101.563669][T10151] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 101.563669][T10151] allowing incompatible features above 0.0: (unknown version) [ 101.563900][T10151] bcachefs (loop3): invalid journal entry, version=1.7: mi_btree_bitmap type=btree_root in superblock: invalid btree root journal entry: wrong number of keys, fixing [ 101.564010][T10151] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 101.564056][T10151] bcachefs (loop3): superblock requires following recovery passes to be run: [ 101.564056][T10151] recovery_pass_empty,accounting_read [ 101.564138][T10151] bcachefs (loop3): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.25: extent_flags [ 101.564138][T10151] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 101.591881][T10151] bcachefs (loop3): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 101.591953][T10151] bcachefs (loop3): bcachefs (loop3): error validating btree node on loop3 at btree extents level 0/0 [ 101.591967][T10151] u64s 11 type btree_ptr_v2 U64_MAX:U64_MAX:4278190080 len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 101.591980][T10151] node offset 0/16 bset u64s 0: incorrect max key SPOS_MAX, btree topology error: [ 101.592046][T10151] bcachefs (loop3): flagging btree extents lost data [ 101.592076][T10151] bcachefs (loop3): running explicit recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 101.592097][T10151] bcachefs (loop3): running explicit recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 101.592118][T10151] bcachefs (loop3): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 101.599720][ T1631] hfsplus: b-tree write err: -5, ino 8 [ 101.600934][T10151] bcachefs (loop3): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 101.607548][T10151] bcachefs (loop3): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4100:U32_MAX len 0 ver 0: (unpack error) [ 101.607567][T10151] invalid variable length fields, deleting [ 101.618588][T10151] bcachefs (loop3): invalid bkey in btree_node btree=xattrs level=0: u64s 7 type xattr 536870912:3798421620223919902:U32_MAX len 0 ver 0: user.:xattr2 [ 101.618608][T10151] value too small (2 < 226), deleting [ 101.644137][T10151] bcachefs (loop3): bcachefs (loop3): error validating btree node on loop3 at btree lru level 0/0 [ 101.644180][T10151] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 101.644211][T10151] node offset 8/16: btree node data missing: expected 16 sectors, found 8, fixing [ 101.644488][T10151] bcachefs (loop3): btree_node_read_work: rewriting btree node at due to error [ 101.644488][T10151] btree=lru level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 101.652478][T10151] bcachefs (loop3): bcachefs (loop3): error validating btree node on loop3 at btree freespace level 0/0 [ 101.652495][T10151] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 101.652508][T10151] node offset 0/32: bad magic: want 59513f585d347cd2, got 59513f585d340000, btree topology error: [ 101.652563][T10151] bcachefs (loop3): flagging btree freespace lost data [ 101.652598][T10151] bcachefs (loop3): running explicit recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 101.676218][T10151] bcachefs (loop3): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 101.680019][T10151] bcachefs (loop3): bcachefs (loop3): error validating btree node on loop3 at btree deleted_inodes level 0/0 [ 101.680061][T10151] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key 0:4278190080:0 durability: 1 ptr: 0:42:0 gen 0 [ 101.680080][T10151] node offset 0/8: incorrect min_key: got POS_MIN should be 0:4278190080:0, btree topology error: [ 101.680146][T10151] bcachefs (loop3): flagging btree deleted_inodes lost data [ 101.682596][ T6493] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.684963][T10151] bcachefs (loop3): error reading btree root btree=deleted_inodes level=0: btree_node_read_error, fixing [ 101.686670][T10151] bcachefs (loop3): scan_for_btree_nodes... [ 101.695283][T10186] bcachefs (loop3): bcachefs (loop3): error validating btree node on loop3 at btree extents level 0/0 [ 101.695300][T10186] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 0 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 101.695313][T10186] node offset 0/0 bset u64s 0: invalid bkey format: field 1 too large: 18446744073709551615 + 38654705664 > 18446744073709551615 [ 101.695325][T10186] u64s 3 fields 64:0, 64:38654705664, 32:0, 0:0, 0:0, 0:0, btree topology error: [ 101.704490][T10151] bcachefs (loop3): btree node scan found 2 nodes after overwrites [ 101.704528][T10151] done [ 101.708591][T10151] bcachefs (loop3): check_topology... [ 101.713861][T10151] bcachefs (loop3): btree root extents unreadable, must recover from scan [ 101.713944][T10151] bcachefs (loop3): no nodes found for btree extents, continuing [ 101.715041][T10151] bcachefs (loop3): btree root deleted_inodes unreadable, must recover from scan [ 101.715121][T10151] bcachefs (loop3): bch2_get_scanned_nodes(): recovery btree=deleted_inodes level=0 POS_MIN - SPOS_MAX [ 101.715194][T10151] bcachefs (loop3): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0 [ 101.717445][T10151] done [ 101.727027][T10151] bcachefs (loop3): accounting_read... done [ 101.744557][ T6491] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 101.745126][T10151] bcachefs (loop3): alloc_read... done [ 101.745203][T10151] bcachefs (loop3): snapshots_read... done [ 101.745276][T10151] bcachefs (loop3): check_allocations... [ 101.745877][T10151] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 101.745893][T10151] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 8 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 101.748220][T10151] bcachefs (loop3): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 101.748236][T10151] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 8 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 101.748867][T10151] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 101.748880][T10151] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 101.770512][T10151] bcachefs (loop3): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 101.770531][T10151] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 101.770844][T10151] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 101.770856][T10151] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 101.772744][T10151] bcachefs (loop3): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 101.772761][T10151] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 101.773026][T10151] bcachefs (loop3): bucket 0:31 data type btree ptr gen 0 missing in alloc btree [ 101.773039][T10151] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing [ 101.773321][T10151] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 101.773334][T10151] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 101.779996][T10151] bcachefs (loop3): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 101.780012][T10151] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 101.780276][T10151] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 101.780289][T10151] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 101.787740][T10151] bcachefs (loop3): bucket 0:32 data type btree ptr gen 0 missing in alloc btree [ 101.787757][T10151] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 101.788008][T10151] bcachefs (loop3): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 101.788022][T10151] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 101.788808][T10151] bcachefs (loop3): bucket 0:37 data type btree ptr gen 0 missing in alloc btree [ 101.788824][T10151] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0, fixing [ 101.789126][T10151] bcachefs (loop3): bucket 0:42 data type btree ptr gen 0 missing in alloc btree [ 101.789139][T10151] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0, fixing [ 101.789475][T10151] bcachefs (loop3): bucket 0:0 gen 0 has wrong data_type: got free, should be sb, fixing [ 101.789547][T10151] bcachefs (loop3): bucket 0:0 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 101.789765][T10151] bcachefs (loop3): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 101.789831][T10151] bcachefs (loop3): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 101.789957][T10151] bcachefs (loop3): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 101.790023][T10151] bcachefs (loop3): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 101.790141][T10151] bcachefs (loop3): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 101.790202][T10151] bcachefs (loop3): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 101.790313][T10151] bcachefs (loop3): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 101.790374][T10151] bcachefs (loop3): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 101.790500][T10151] bcachefs (loop3): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 101.790561][T10151] bcachefs (loop3): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 101.790685][T10151] bcachefs (loop3): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 101.790754][T10151] bcachefs (loop3): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 101.790867][T10151] bcachefs (loop3): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 101.790928][T10151] bcachefs (loop3): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 101.791039][T10151] bcachefs (loop3): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 101.791100][T10151] bcachefs (loop3): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 101.791222][T10151] bcachefs (loop3): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 101.791284][T10151] bcachefs (loop3): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 101.791492][T10151] bcachefs (loop3): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 101.791505][T10151] Ratelimiting new instances of previous error [ 101.791583][T10151] bcachefs (loop3): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 101.791595][T10151] Ratelimiting new instances of previous error [ 101.796842][T10151] done [ 101.869292][T10151] bcachefs (loop3): going read-write [ 101.881230][T10151] bcachefs (loop3): journal_replay... [ 101.994177][ T388] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 101.994242][ T388] u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing [ 102.041309][ T388] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 102.041357][ T388] u64s 5 type deleted 0:30:0 len 0 ver 0, , continuing [ 102.047900][ T388] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 102.047918][ T388] u64s 5 type deleted 0:33:0 len 0 ver 0, , continuing [ 102.049882][ T388] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 102.049899][ T388] u64s 5 type deleted 0:34:0 len 0 ver 0, , continuing [ 102.054062][ T388] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 102.054078][ T388] u64s 5 type deleted 0:39:0 len 0 ver 0, , continuing [ 102.114362][ T388] bcachefs (loop3): bucket incorrectly unset in freespace btree [ 102.114443][ T388] u64s 5 type deleted 0:36:0 len 0 ver 0, , continuing [ 102.136784][T10151] done [ 102.144240][T10151] bcachefs (loop3): check_alloc_info... [ 102.145297][T10151] bcachefs (loop3): hole in alloc btree missing in freespace btree [ 102.145742][T10151] device 0 buckets 25-26, fixing [ 102.146288][T10151] bcachefs (loop3): hole in alloc btree missing in freespace btree [ 102.146301][T10151] device 0 buckets 27-28, fixing [ 102.146676][T10151] bcachefs (loop3): hole in alloc btree missing in freespace btree [ 102.146689][T10151] device 0 buckets 40-41, fixing [ 102.146839][T10151] bcachefs (loop3): hole in alloc btree missing in freespace btree [ 102.146851][T10151] device 0 buckets 43-120, fixing [ 102.173802][T10151] done [ 102.188482][T10151] bcachefs (loop3): check_lrus... done [ 102.214488][T10151] bcachefs (loop3): check_backpointers_to_extents... done [ 102.232861][T10151] bcachefs (loop3): check_extents_to_backpointers... [ 102.233856][T10151] bcachefs (loop3): scanning for missing backpointers in 5/128 buckets [ 102.234289][T10151] done [ 102.263175][T10151] bcachefs (loop3): check_inodes... done [ 102.264235][T10151] bcachefs (loop3): resume_logged_ops... done [ 102.264309][T10151] bcachefs (loop3): delete_dead_inodes... done [ 102.269738][T10151] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean [ 102.269771][T10151] bcachefs (loop3): check_alloc_info... done [ 102.283914][T10151] bcachefs (loop3): check_lrus... done [ 102.284230][T10151] bcachefs (loop3): check_backpointers_to_extents... done [ 102.284954][T10151] bcachefs (loop3): check_extents_to_backpointers... done [ 102.285568][T10151] bcachefs (loop3): check_inodes... done [ 102.285835][T10151] bcachefs (loop3): resume_logged_ops... done [ 102.285880][T10151] bcachefs (loop3): delete_dead_inodes... done [ 102.295378][T10151] bcachefs (loop3): done starting filesystem [ 102.371381][T10216] netlink: 'syz.0.1536': attribute type 2 has an invalid length. [ 102.398332][T10214] netlink: 'syz.2.1538': attribute type 21 has an invalid length. [ 102.398421][T10214] IPv6: NLM_F_CREATE should be specified when creating new route [ 102.405056][T10129] loop4: detected capacity change from 0 to 131072 [ 102.460787][ T6499] bcachefs (loop3): shutting down [ 102.460850][ T6499] bcachefs (loop3): going read-only [ 102.460895][ T6499] bcachefs (loop3): finished waiting for writes to stop [ 102.511654][ T6499] bcachefs (loop3): flushing journal and stopping allocators, journal seq 21 [ 102.530041][ T6499] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 22 [ 102.534799][ T6499] bcachefs (loop3): clean shutdown complete, journal seq 23 [ 102.543097][T10129] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 102.568879][T10129] F2FS-fs (loop4): access invalid blkaddr:3075201482 [ 102.569589][ T6499] bcachefs (loop3): marking filesystem clean [ 102.573013][T10129] CPU: 1 UID: 0 PID: 10129 Comm: syz.4.1506 Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 PREEMPT [ 102.573038][T10129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 102.573047][T10129] Call trace: [ 102.573051][T10129] show_stack+0x2c/0x3c (C) [ 102.573069][T10129] __dump_stack+0x30/0x40 [ 102.573080][T10129] dump_stack_lvl+0xd8/0x12c [ 102.573091][T10129] dump_stack+0x1c/0x28 [ 102.573101][T10129] __f2fs_is_valid_blkaddr+0xae0/0x107c [ 102.573114][T10129] f2fs_is_valid_blkaddr+0x12c/0x258 [ 102.573126][T10129] f2fs_get_read_data_folio+0x214/0x598 [ 102.573140][T10129] f2fs_find_data_folio+0x84/0x390 [ 102.573153][T10129] __f2fs_find_entry+0x504/0xb90 [ 102.573168][T10129] f2fs_lookup+0x22c/0x91c [ 102.573180][T10129] path_openat+0xcc0/0x2c40 [ 102.573193][T10129] do_filp_open+0x18c/0x36c [ 102.573205][T10129] do_sys_openat2+0x11c/0x1b4 [ 102.573219][T10129] __arm64_sys_openat+0x120/0x158 [ 102.573233][T10129] invoke_syscall+0x98/0x2b8 [ 102.573244][T10129] el0_svc_common+0x130/0x23c [ 102.573254][T10129] do_el0_svc+0x48/0x58 [ 102.573265][T10129] el0_svc+0x58/0x150 [ 102.573282][T10129] el0t_64_sync_handler+0x78/0x108 [ 102.573295][T10129] el0t_64_sync+0x198/0x19c [ 102.677824][ T6499] bcachefs (loop3): shutdown complete [ 102.697465][T10236] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1547'. [ 103.274591][T10240] loop0: detected capacity change from 0 to 32768 [ 103.284765][T10240] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1550 (10240) [ 103.337985][T10240] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.338117][T10240] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 103.338215][T10240] BTRFS info (device loop0): using free-space-tree [ 103.456731][T10282] loop4: detected capacity change from 0 to 256 [ 103.536632][T10258] loop2: detected capacity change from 0 to 32768 [ 103.567650][T10282] FAT-fs (loop4): Directory bread(block 64) failed [ 103.567733][T10282] FAT-fs (loop4): Directory bread(block 65) failed [ 103.567798][T10282] FAT-fs (loop4): Directory bread(block 66) failed [ 103.567836][T10282] FAT-fs (loop4): Directory bread(block 67) failed [ 103.567909][T10282] FAT-fs (loop4): Directory bread(block 68) failed [ 103.567947][T10282] FAT-fs (loop4): Directory bread(block 69) failed [ 103.568110][T10282] FAT-fs (loop4): Directory bread(block 70) failed [ 103.568151][T10282] FAT-fs (loop4): Directory bread(block 71) failed [ 103.568265][T10282] FAT-fs (loop4): Directory bread(block 72) failed [ 103.568303][T10282] FAT-fs (loop4): Directory bread(block 73) failed [ 103.581272][ T6492] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.613605][T10258] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 103.695305][T10258] XFS (loop2): Ending clean mount [ 103.765145][ T6493] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 104.154801][T10325] ieee802154 phy1 wpan1: encryption failed: -22 [ 104.307258][T10337] xt_hashlimit: max too large, truncated to 1048576 [ 104.307708][T10337] Timeout policy `syz1' can only be used by L3 protocol number 0 [ 104.317623][T10332] loop1: detected capacity change from 0 to 256 [ 104.398833][T10332] FAT-fs (loop1): Directory bread(block 64) failed [ 104.398921][T10332] FAT-fs (loop1): Directory bread(block 65) failed [ 104.398988][T10332] FAT-fs (loop1): Directory bread(block 66) failed [ 104.399025][T10332] FAT-fs (loop1): Directory bread(block 67) failed [ 104.399087][T10332] FAT-fs (loop1): Directory bread(block 68) failed [ 104.399123][T10332] FAT-fs (loop1): Directory bread(block 69) failed [ 104.399191][T10332] FAT-fs (loop1): Directory bread(block 70) failed [ 104.399227][T10332] FAT-fs (loop1): Directory bread(block 71) failed [ 104.399288][T10332] FAT-fs (loop1): Directory bread(block 72) failed [ 104.399324][T10332] FAT-fs (loop1): Directory bread(block 73) failed [ 104.447659][T10347] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.447725][T10347] IPv6: NLM_F_CREATE should be set when creating new route [ 104.447809][T10347] IPv6: NLM_F_CREATE should be set when creating new route [ 104.653233][T10359] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1597'. [ 104.901159][T10374] loop1: detected capacity change from 0 to 4096 [ 104.910874][T10384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1608'. [ 104.912519][T10374] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 104.916781][T10384] netlink: 'syz.4.1608': attribute type 1 has an invalid length. [ 104.950172][T10374] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 104.957513][T10374] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 105.232341][T10415] loop2: detected capacity change from 0 to 8 [ 105.323753][T10421] loop0: detected capacity change from 0 to 64 [ 105.590663][T10435] loop2: detected capacity change from 0 to 4096 [ 105.619271][T10446] loop4: detected capacity change from 0 to 1024 [ 105.621452][T10435] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 105.673394][T10435] ntfs3(loop2): ino=19, mi_enum_attr [ 105.673485][T10435] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 105.753070][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1642'. [ 105.755711][T10454] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 105.798255][T10435] ntfs3(loop2): failed to convert "c46c" to macgreek [ 105.800085][T10435] ntfs3(loop2): ino=20, mi_enum_attr [ 105.916180][T10464] dvmrp0: entered allmulticast mode [ 106.201601][T10481] loop1: detected capacity change from 0 to 128 [ 106.211830][T10481] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 106.224685][T10481] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.270758][T10484] geneve2: entered promiscuous mode [ 106.272532][T10484] geneve2: entered allmulticast mode [ 106.402948][T10494] dvmrp0: entered allmulticast mode [ 106.520360][T10458] loop3: detected capacity change from 0 to 32768 [ 106.522552][T10458] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1643 (10458) [ 106.565048][T10458] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 106.565162][T10458] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 106.565204][T10458] BTRFS info (device loop3): using free-space-tree [ 106.788673][ T6499] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 107.024719][T10496] loop1: detected capacity change from 0 to 32768 [ 107.036193][T10496] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 107.036842][T10496] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 107.175373][T10496] XFS (loop1): Ending clean mount [ 107.181806][T10496] XFS (loop1): Quotacheck needed: Please wait. [ 107.227355][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1687'. [ 107.230553][T10496] XFS (loop1): Quotacheck: Done. [ 107.234532][T10567] netlink: 'syz.2.1687': attribute type 5 has an invalid length. [ 107.236873][T10567] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1687'. [ 107.243263][T10567] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 107.245976][T10567] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 107.248595][T10567] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 107.251024][T10567] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 107.253396][T10567] geneve2: entered promiscuous mode [ 107.254860][T10567] geneve2: entered allmulticast mode [ 107.417636][T10577] loop2: detected capacity change from 0 to 1764 [ 107.444666][ T6491] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 107.598514][T10590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1695'. [ 107.772378][T10600] loop4: detected capacity change from 0 to 512 [ 107.788514][T10600] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 107.805155][T10600] EXT4-fs (loop4): 1 truncate cleaned up [ 107.815323][T10600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.979897][ T6502] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.056636][ T31] audit: type=1400 audit(107.790:3): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=10621 comm="syz.1.1712" saddr=172.30.0.2 daddr=172.20.20.170 [ 108.290923][T10611] loop2: detected capacity change from 0 to 32768 [ 108.312458][T10611] /dev/loop2: Can't open blockdev [ 108.470738][T10627] loop4: detected capacity change from 0 to 32768 [ 108.526480][T10627] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 108.566562][T10627] [ 108.567302][T10627] ====================================================== [ 108.569177][T10627] WARNING: possible circular locking dependency detected [ 108.571018][T10627] 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 Not tainted [ 108.572768][T10627] ------------------------------------------------------ [ 108.574662][T10627] syz.4.1716/10627 is trying to acquire lock: [ 108.576303][T10627] ffff0000f0d9dc78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set_handle+0x2a8/0x5e4 [ 108.579047][T10627] [ 108.579047][T10627] but task is already holding lock: [ 108.581017][T10627] ffff0000d895e950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe4c/0x10dc [ 108.583534][T10627] [ 108.583534][T10627] which lock already depends on the new lock. [ 108.583534][T10627] [ 108.586372][T10627] [ 108.586372][T10627] the existing dependency chain (in reverse order) is: [ 108.588860][T10627] [ 108.588860][T10627] -> #5 (jbd2_handle){++++}-{0:0}: [ 108.590855][T10627] start_this_handle+0xe74/0x10dc [ 108.592334][T10627] jbd2__journal_start+0x288/0x51c [ 108.593845][T10627] jbd2_journal_start+0x3c/0x4c [ 108.595326][T10627] ocfs2_start_trans+0x368/0x6ac [ 108.596816][T10627] ocfs2_reserve_suballoc_bits+0x630/0x3b60 [ 108.598604][T10627] ocfs2_reserve_new_metadata_blocks+0x368/0x810 [ 108.600487][T10627] ocfs2_init_xattr_set_ctxt+0x318/0x774 [ 108.602165][T10627] ocfs2_xattr_set+0x920/0xe9c [ 108.603619][T10627] ocfs2_set_acl+0x574/0x628 [ 108.604977][T10627] ocfs2_iop_set_acl+0x190/0x25c [ 108.606464][T10627] vfs_set_acl+0x70c/0x974 [ 108.607829][T10627] do_set_acl+0xe0/0x1a8 [ 108.609229][T10627] filename_setxattr+0x268/0x4f8 [ 108.610774][T10627] path_setxattrat+0x2e8/0x320 [ 108.612214][T10627] __arm64_sys_setxattr+0xc0/0xdc [ 108.613815][T10627] invoke_syscall+0x98/0x2b8 [ 108.615209][T10627] el0_svc_common+0x130/0x23c [ 108.616670][T10627] do_el0_svc+0x48/0x58 [ 108.617920][T10627] el0_svc+0x58/0x150 [ 108.619164][T10627] el0t_64_sync_handler+0x78/0x108 [ 108.620919][T10627] el0t_64_sync+0x198/0x19c [ 108.622395][T10627] [ 108.622395][T10627] -> #4 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 108.624812][T10627] down_read+0x58/0x2f8 [ 108.626169][T10627] ocfs2_start_trans+0x35c/0x6ac [ 108.627712][T10627] ocfs2_reserve_suballoc_bits+0x630/0x3b60 [ 108.629510][T10627] ocfs2_reserve_new_metadata_blocks+0x368/0x810 [ 108.631462][T10627] ocfs2_init_xattr_set_ctxt+0x318/0x774 [ 108.633198][T10627] ocfs2_xattr_set+0x920/0xe9c [ 108.634713][T10627] ocfs2_set_acl+0x574/0x628 [ 108.636108][T10627] ocfs2_iop_set_acl+0x190/0x25c [ 108.637673][T10627] vfs_set_acl+0x70c/0x974 [ 108.639040][T10627] do_set_acl+0xe0/0x1a8 [ 108.640417][T10627] filename_setxattr+0x268/0x4f8 [ 108.641938][T10627] path_setxattrat+0x2e8/0x320 [ 108.643503][T10627] __arm64_sys_setxattr+0xc0/0xdc [ 108.645015][T10627] invoke_syscall+0x98/0x2b8 [ 108.646422][T10627] el0_svc_common+0x130/0x23c [ 108.647940][T10627] do_el0_svc+0x48/0x58 [ 108.649244][T10627] el0_svc+0x58/0x150 [ 108.650481][T10627] el0t_64_sync_handler+0x78/0x108 [ 108.652107][T10627] el0t_64_sync+0x198/0x19c [ 108.653515][T10627] [ 108.653515][T10627] -> #3 (sb_internal#4){.+.+}-{0:0}: [ 108.655688][T10627] ocfs2_start_trans+0x1f4/0x6ac [ 108.657203][T10627] ocfs2_reserve_suballoc_bits+0x630/0x3b60 [ 108.659083][T10627] ocfs2_reserve_new_metadata_blocks+0x368/0x810 [ 108.661049][T10627] ocfs2_init_xattr_set_ctxt+0x318/0x774 [ 108.662771][T10627] ocfs2_xattr_set+0x920/0xe9c [ 108.664307][T10627] ocfs2_set_acl+0x574/0x628 [ 108.665738][T10627] ocfs2_iop_set_acl+0x190/0x25c [ 108.667256][T10627] vfs_set_acl+0x70c/0x974 [ 108.668659][T10627] do_set_acl+0xe0/0x1a8 [ 108.670012][T10627] filename_setxattr+0x268/0x4f8 [ 108.671584][T10627] path_setxattrat+0x2e8/0x320 [ 108.673076][T10627] __arm64_sys_setxattr+0xc0/0xdc [ 108.674654][T10627] invoke_syscall+0x98/0x2b8 [ 108.676117][T10627] el0_svc_common+0x130/0x23c [ 108.677588][T10627] do_el0_svc+0x48/0x58 [ 108.678989][T10627] el0_svc+0x58/0x150 [ 108.680261][T10627] el0t_64_sync_handler+0x78/0x108 [ 108.681878][T10627] el0t_64_sync+0x198/0x19c [ 108.683184][T10627] [ 108.683184][T10627] -> #2 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{4:4}: [ 108.686514][T10627] down_write+0x50/0xc0 [ 108.687759][T10627] ocfs2_reserve_suballoc_bits+0x12c/0x3b60 [ 108.689599][T10627] ocfs2_reserve_clusters_with_limit+0x290/0x9e0 [ 108.691491][T10627] ocfs2_reserve_suballoc_bits+0x610/0x3b60 [ 108.693322][T10627] ocfs2_reserve_new_metadata_blocks+0x368/0x810 [ 108.695214][T10627] ocfs2_init_xattr_set_ctxt+0x318/0x774 [ 108.696997][T10627] ocfs2_xattr_set+0x920/0xe9c [ 108.698516][T10627] ocfs2_set_acl+0x574/0x628 [ 108.699902][T10627] ocfs2_iop_set_acl+0x190/0x25c [ 108.701452][T10627] vfs_set_acl+0x70c/0x974 [ 108.702818][T10627] do_set_acl+0xe0/0x1a8 [ 108.704081][T10627] filename_setxattr+0x268/0x4f8 [ 108.705691][T10627] path_setxattrat+0x2e8/0x320 [ 108.707212][T10627] __arm64_sys_setxattr+0xc0/0xdc [ 108.708776][T10627] invoke_syscall+0x98/0x2b8 [ 108.710179][T10627] el0_svc_common+0x130/0x23c [ 108.711633][T10627] do_el0_svc+0x48/0x58 [ 108.712902][T10627] el0_svc+0x58/0x150 [ 108.714159][T10627] el0t_64_sync_handler+0x78/0x108 [ 108.715773][T10627] el0t_64_sync+0x198/0x19c [ 108.717152][T10627] [ 108.717152][T10627] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{4:4}: [ 108.720128][T10627] down_write+0x50/0xc0 [ 108.721454][T10627] ocfs2_reserve_suballoc_bits+0x12c/0x3b60 [ 108.723279][T10627] ocfs2_reserve_new_metadata_blocks+0x368/0x810 [ 108.725178][T10627] ocfs2_init_xattr_set_ctxt+0x318/0x774 [ 108.726872][T10627] ocfs2_xattr_set+0x920/0xe9c [ 108.728372][T10627] ocfs2_set_acl+0x574/0x628 [ 108.729802][T10627] ocfs2_iop_set_acl+0x190/0x25c [ 108.731294][T10627] vfs_set_acl+0x70c/0x974 [ 108.732665][T10627] do_set_acl+0xe0/0x1a8 [ 108.733992][T10627] filename_setxattr+0x268/0x4f8 [ 108.735530][T10627] path_setxattrat+0x2e8/0x320 [ 108.737039][T10627] __arm64_sys_setxattr+0xc0/0xdc [ 108.738574][T10627] invoke_syscall+0x98/0x2b8 [ 108.740016][T10627] el0_svc_common+0x130/0x23c [ 108.741470][T10627] do_el0_svc+0x48/0x58 [ 108.742780][T10627] el0_svc+0x58/0x150 [ 108.744062][T10627] el0t_64_sync_handler+0x78/0x108 [ 108.745756][T10627] el0t_64_sync+0x198/0x19c [ 108.747170][T10627] [ 108.747170][T10627] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}: [ 108.749618][T10627] __lock_acquire+0x1728/0x3058 [ 108.751126][T10627] lock_acquire+0x14c/0x2e0 [ 108.752537][T10627] down_write+0x50/0xc0 [ 108.753801][T10627] ocfs2_xattr_set_handle+0x2a8/0x5e4 [ 108.755536][T10627] ocfs2_init_security_set+0xb4/0xd8 [ 108.757303][T10627] ocfs2_mknod+0x106c/0x1cf0 [ 108.758670][T10627] ocfs2_create+0x190/0x474 [ 108.760093][T10627] path_openat+0x12d8/0x2c40 [ 108.761568][T10627] do_filp_open+0x18c/0x36c [ 108.762962][T10627] do_sys_openat2+0x11c/0x1b4 [ 108.764444][T10627] __arm64_sys_openat+0x120/0x158 [ 108.766032][T10627] invoke_syscall+0x98/0x2b8 [ 108.767483][T10627] el0_svc_common+0x130/0x23c [ 108.769014][T10627] do_el0_svc+0x48/0x58 [ 108.770376][T10627] el0_svc+0x58/0x150 [ 108.771637][T10627] el0t_64_sync_handler+0x78/0x108 [ 108.773202][T10627] el0t_64_sync+0x198/0x19c [ 108.774598][T10627] [ 108.774598][T10627] other info that might help us debug this: [ 108.774598][T10627] [ 108.777437][T10627] Chain exists of: [ 108.777437][T10627] &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle [ 108.777437][T10627] [ 108.781306][T10627] Possible unsafe locking scenario: [ 108.781306][T10627] [ 108.783425][T10627] CPU0 CPU1 [ 108.784991][T10627] ---- ---- [ 108.786515][T10627] rlock(jbd2_handle); [ 108.787760][T10627] lock(&journal->j_trans_barrier); [ 108.789901][T10627] lock(jbd2_handle); [ 108.791763][T10627] lock(&oi->ip_xattr_sem); [ 108.793034][T10627] [ 108.793034][T10627] *** DEADLOCK *** [ 108.793034][T10627] [ 108.795286][T10627] 8 locks held by syz.4.1716/10627: [ 108.796770][T10627] #0: ffff0000f3060420 (sb_writers#26){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 108.799421][T10627] #1: ffff0000f28f89c0 (&type->i_mutex_dir_key#19){+.+.}-{4:4}, at: path_openat+0x638/0x2c40 [ 108.802424][T10627] #2: ffff0000f0f26d80 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x12c/0x3b60 [ 108.806261][T10627] #3: ffff0000f28fed80 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x12c/0x3b60 [ 108.810179][T10627] #4: ffff0000f0f25100 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x104/0x26a0 [ 108.814303][T10627] #5: ffff0000f3060610 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_mknod+0xc50/0x1cf0 [ 108.816928][T10627] #6: ffff0000d1b03ce8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x35c/0x6ac [ 108.820125][T10627] #7: ffff0000d895e950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe4c/0x10dc [ 108.822892][T10627] [ 108.822892][T10627] stack backtrace: [ 108.824536][T10627] CPU: 0 UID: 0 PID: 10627 Comm: syz.4.1716 Not tainted 6.15.0-rc4-syzkaller-ge0f4c8dd9d2d #0 PREEMPT [ 108.827530][T10627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 108.830462][T10627] Call trace: [ 108.831387][T10627] show_stack+0x2c/0x3c (C) [ 108.832595][T10627] __dump_stack+0x30/0x40 [ 108.833799][T10627] dump_stack_lvl+0xd8/0x12c [ 108.835097][T10627] dump_stack+0x1c/0x28 [ 108.836313][T10627] print_circular_bug+0x324/0x32c [ 108.837710][T10627] check_noncircular+0x154/0x174 [ 108.839117][T10627] __lock_acquire+0x1728/0x3058 [ 108.840499][T10627] lock_acquire+0x14c/0x2e0 [ 108.841740][T10627] down_write+0x50/0xc0 [ 108.842897][T10627] ocfs2_xattr_set_handle+0x2a8/0x5e4 [ 108.844439][T10627] ocfs2_init_security_set+0xb4/0xd8 [ 108.845947][T10627] ocfs2_mknod+0x106c/0x1cf0 [ 108.847247][T10627] ocfs2_create+0x190/0x474 [ 108.848624][T10627] path_openat+0x12d8/0x2c40 [ 108.849937][T10627] do_filp_open+0x18c/0x36c [ 108.851174][T10627] do_sys_openat2+0x11c/0x1b4 [ 108.852487][T10627] __arm64_sys_openat+0x120/0x158 [ 108.853927][T10627] invoke_syscall+0x98/0x2b8 [ 108.855191][T10627] el0_svc_common+0x130/0x23c [ 108.856477][T10627] do_el0_svc+0x48/0x58 [ 108.857634][T10627] el0_svc+0x58/0x150 [ 108.858780][T10627] el0t_64_sync_handler+0x78/0x108 [ 108.860259][T10627] el0t_64_sync+0x198/0x19c [ 108.861715][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.966141][ T6502] ocfs2: Unmounting device (7,4) on (node local) [ 109.042027][T10655] loop1: detected capacity change from 0 to 32768 [ 109.045173][T10655] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section members_v1: device 0: bucket size 0 smaller than block size 8 [ 109.045173][T10655] members_v1 (size 64): [ 109.045173][T10655] Device: 0 [ 109.045173][T10655] Label: (none) [ 109.045173][T10655] UUID: 7af6772b-00de-4159-84cd-1faead05aceb [ 109.045173][T10655] Size: 0 [ 109.045173][T10655] read errors: 0 [ 109.045173][T10655] write errors: 0 [ 109.045173][T10655] checksum errors: 0 [ 109.045173][T10655] seqread iops: 0 [ 109.045173][T10655] seqwrite iops: 0 [ 109.045173][T10655] randread iops: 0 [ 109.045173][T10655] randwrite iops: 0 [ 109.045173][T10655] Bucket size: 0 [ 109.045173][T10655] First bucket: 0 [ 109.045173][T10655] Buckets: 128 [ 109.045173][T10655] Last mount: 1714681267 [ 109.045173][T10655] Last superblock write: 0 [ 109.045173][T10655] State: rw [ 109.045173][T10655] Data allowed: journal,btree,user [ 109.045173][T10655] Has data: journal,btree [ 109.045173][T10655] Btree allocated bitmap blocksize:256 [ 109.045173][T10655] Btree allocated bitmap: 0000000000000000000000000000000000000000000000000000000000000000 [ 109.045173][T10655] Durability: [ 109.045312][T10655] bcachefs: bch2_fs_get_tree() error: invalid_sb_members [ 109.084843][ C0] vkms_vblank_simulate: vblank timer overrun