last executing test programs: 1.463286412s ago: executing program 2 (id=3917): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) fcntl$dupfd(r0, 0x406, r0) 1.353405283s ago: executing program 2 (id=3921): prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 1.26628563s ago: executing program 2 (id=3925): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002400)={0x20, 0x140a, 0x1, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 1.17673369s ago: executing program 2 (id=3929): r0 = socket$qrtr(0x2a, 0x2, 0x0) bind(r0, &(0x7f0000002240)=@in={0x2, 0x4e20, @rand_addr=0x64010101}, 0x80) 1.078347156s ago: executing program 2 (id=3932): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@cgroup, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 968.559397ms ago: executing program 2 (id=3936): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000400)={[{@discard_async}, {@compress_force_algo={'compress-force', 0x3d, 'no'}}, {@discard_sync}, {@discard_sync}, {@clear_cache}, {@autodefrag}, {@acl}, {@nospace_cache}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") lsetxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x2) 919.542616ms ago: executing program 0 (id=3938): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x503, 0x900, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0) 900.574648ms ago: executing program 0 (id=3939): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) 851.629871ms ago: executing program 4 (id=3940): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x47, &(0x7f0000000040), &(0x7f0000000080)=0x8) 833.843157ms ago: executing program 0 (id=3942): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x6, 0x0, 0x6, 0x2, 0x0, 0x70bd27}, 0x10}}, 0x0) 742.615428ms ago: executing program 0 (id=3944): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf2508001e"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 691.21336ms ago: executing program 4 (id=3946): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 684.673885ms ago: executing program 3 (id=3947): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3e, 0x0, &(0x7f00007d0000)=0xfffffffffffffd42) 668.320655ms ago: executing program 0 (id=3948): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007b18e00212ba0d8105040a871100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000100000300014002000c0901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fba8cae8c9010000734d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 595.563654ms ago: executing program 1 (id=3950): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001a1401"], 0x20}}, 0x0) 584.40721ms ago: executing program 4 (id=3951): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89b1, &(0x7f0000000900)={'macvlan1\x00', @random}) 570.810316ms ago: executing program 0 (id=3952): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4447, &(0x7f000000cd00)="$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") symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 546.818599ms ago: executing program 3 (id=3953): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x6b35e9d94325c671, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 523.21692ms ago: executing program 1 (id=3954): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x385355180, 0x0, 0x0, 0x0, {}, 0x0, 0x3d, 0x0, 0x0, 0x0, {r0}}, 0x58) 486.028822ms ago: executing program 1 (id=3955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x1, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) 472.34905ms ago: executing program 4 (id=3956): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089}, 0x90) 462.369535ms ago: executing program 3 (id=3957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) 253.55887ms ago: executing program 4 (id=3958): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001a00010028bd7000fedb0524818080000042"], 0x1c}, 0x1, 0x0, 0x0, 0x4004880}, 0x884) 252.883219ms ago: executing program 1 (id=3959): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'wg1\x00', &(0x7f00000000c0)=@ethtool_rxfh_indir={0x39}}) 252.414649ms ago: executing program 3 (id=3960): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x14c}}, 0x4810) 212.765029ms ago: executing program 4 (id=3961): r0 = syz_usbip_server_init(0x1) write$usbip_server(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000003"], 0x35) 152.508023ms ago: executing program 1 (id=3962): r0 = syz_io_uring_setup(0xb32, &(0x7f0000000600)={0x0, 0x10086f3, 0x1, 0x2, 0x2de}, &(0x7f0000000080), &(0x7f0000000280)) io_uring_enter(r0, 0x0, 0xc6b6, 0x9, 0x0, 0x0) 81.561285ms ago: executing program 3 (id=3963): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_GET_NAME(0x10, &(0x7f00000003c0)=""/164) 36.445839ms ago: executing program 1 (id=3964): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'vlan0\x00', {'vxcan1\x00'}}) 0s ago: executing program 3 (id=3965): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0xf, &(0x7f0000000100)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 9] __nla_validate_parse: 1 callbacks suppressed [ 128.642309][T12529] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2516'. [ 128.642346][T12529] netlink: 'syz.4.2516': attribute type 1 has an invalid length. [ 128.642378][T12529] netlink: 'syz.4.2516': attribute type 2 has an invalid length. [ 128.642406][T12529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2516'. [ 128.869762][T12537] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2521'. [ 129.024657][T12472] loop2: detected capacity change from 0 to 131072 [ 129.034685][T12472] F2FS-fs (loop2): invalid crc value [ 129.117509][T12472] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 129.122879][T12472] F2FS-fs (loop2): Corrupted max_depth of 3: 16842753 [ 129.150930][T12472] fscrypt (loop2, inode 8): Error -61 getting encryption context [ 129.354114][T12549] loop1: detected capacity change from 0 to 32768 [ 129.383410][T12549] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 129.440195][T12549] OCFS2: ERROR (device loop1): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 263 in extent list [ 129.440389][T12549] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 129.440433][T12549] OCFS2: Returning error to the calling process. [ 129.440458][T12549] (syz.1.2524,12549,0):ocfs2_find_leaf:1948 ERROR: status = -30 [ 129.440492][T12549] (syz.1.2524,12549,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 129.440523][T12549] (syz.1.2524,12549,0):ocfs2_get_clusters:634 ERROR: status = -30 [ 129.440554][T12549] (syz.1.2524,12549,0):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 129.440585][T12549] (syz.1.2524,12549,0):ocfs2_read_virt_blocks:997 ERROR: status = -30 [ 129.440617][T12549] (syz.1.2524,12549,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 129.440660][T12549] (syz.1.2524,12549,0):ocfs2_find_dir_space_el:3503 ERROR: status = -5 [ 129.440692][T12549] (syz.1.2524,12549,0):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -5 [ 129.440722][T12549] (syz.1.2524,12549,0):ocfs2_mknod:298 ERROR: status = -5 [ 129.440755][T12549] (syz.1.2524,12549,0):ocfs2_mknod:502 ERROR: status = -5 [ 129.440784][T12549] (syz.1.2524,12549,0):ocfs2_create:675 ERROR: status = -5 [ 129.496015][T12541] loop4: detected capacity change from 0 to 40427 [ 129.535640][T12541] F2FS-fs (loop4): invalid crc value [ 129.560672][ T6534] ocfs2: Unmounting device (7,1) on (node local) [ 129.644734][T12541] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 129.926887][T12573] loop1: detected capacity change from 0 to 256 [ 129.944067][T12573] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 130.012373][T12573] exFAT-fs (loop1): start_clu is invalid cluster(0x400) [ 130.388446][T12568] loop2: detected capacity change from 0 to 32768 [ 130.396165][T12568] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2531 (12568) [ 130.428409][T12568] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 130.428511][T12568] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 130.428547][T12568] BTRFS info (device loop2): disk space caching is enabled [ 130.428571][T12568] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 130.486449][T12535] loop3: detected capacity change from 0 to 131072 [ 130.496379][T12535] F2FS-fs (loop3): Test dummy encryption mode enabled [ 130.538261][T12535] F2FS-fs (loop3): invalid crc value [ 130.574954][T12568] BTRFS info (device loop2): rebuilding free space tree [ 130.624466][T12568] BTRFS info (device loop2): disabling free space tree [ 130.624547][T12568] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 130.624595][T12568] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 130.669959][T12535] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 130.753113][T12568] BTRFS error (device loop2): balance: invalid convert system profile raid1c4 [ 130.872578][ T6537] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 131.290491][T12662] loop4: detected capacity change from 0 to 16 [ 131.296835][T12662] erofs (device loop4): mounted with root inode @ nid 36. [ 131.406018][T12668] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2571'. [ 131.690302][T12687] xt_nat: multiple ranges no longer supported [ 131.939284][T12700] loop3: detected capacity change from 0 to 512 [ 131.940184][T12700] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.970145][T12700] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 131.970209][T12700] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 131.970391][T12700] EXT4-fs (loop3): orphan cleanup on readonly fs [ 131.970468][T12700] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 131.970537][T12700] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 131.970572][T12700] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 131.983127][T12700] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2584: bg 0: block 40: padding at end of block bitmap is not set [ 131.984047][T12700] EXT4-fs (loop3): Remounting filesystem read-only [ 131.984139][T12700] EXT4-fs (loop3): 1 truncate cleaned up [ 131.985016][T12700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.087063][ T6528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.237211][T12679] loop0: detected capacity change from 0 to 32768 [ 132.288060][T12713] futex_wake_op: syz.1.2591 tries to shift op by -1; fix this program [ 132.289854][T12674] loop4: detected capacity change from 0 to 32768 [ 132.368618][T12674] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.452111][T12679] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 132.452257][T12679] allowing incompatible features above 0.0: (unknown version) [ 132.452270][T12679] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 132.452324][T12679] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 132.452428][T12679] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 132.452549][T12679] bcachefs (loop0): Version upgrade required: [ 132.452549][T12679] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 132.452549][T12679] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 132.452549][T12679] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 132.452739][T12679] bcachefs (loop0): dropping and reconstructing all alloc info [ 132.468579][T12679] bcachefs (loop0): accounting_read... done [ 132.546036][T12679] bcachefs (loop0): alloc_read... done [ 132.546207][T12679] bcachefs (loop0): snapshots_read... done [ 132.546663][T12679] bcachefs (loop0): done starting filesystem [ 132.561788][T12737] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2594'. [ 132.605891][T12674] XFS (loop4): Ending clean mount [ 132.716150][ T6527] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.783117][ T6532] bcachefs (loop0): shutting down [ 132.894796][ T6532] bcachefs (loop0): shutdown complete [ 132.939958][T12754] loop2: detected capacity change from 0 to 512 [ 132.961475][T12754] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 133.032914][T12754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.227360][ T6537] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.234166][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2614'. [ 133.541616][T12792] netlink: 'syz.4.2622': attribute type 1 has an invalid length. [ 133.684718][T12800] netlink: 'syz.4.2626': attribute type 1 has an invalid length. [ 133.686317][T12800] netlink: 'syz.4.2626': attribute type 101 has an invalid length. [ 133.686351][T12800] netlink: 564 bytes leftover after parsing attributes in process `syz.4.2626'. [ 133.948221][T12783] loop3: detected capacity change from 0 to 40427 [ 133.954801][T12783] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 133.954859][T12783] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 133.959240][T12783] F2FS-fs (loop3): build fault injection type: 0x0 [ 133.982890][T12783] F2FS-fs (loop3): invalid crc value [ 134.053341][T12783] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 134.053386][T12783] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 134.075201][T12783] F2FS-fs (loop3): build fault injection type: 0x0 [ 134.142511][T12817] loop4: detected capacity change from 0 to 16 [ 134.149478][T12817] erofs (device loop4): mounted with root inode @ nid 36. [ 134.158770][T12817] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 134.174771][T12817] erofs (device loop4): failed to decompress -23 in[64, 4032] out[1851] [ 134.174916][T12817] erofs (device loop4): read error -117 @ 43 of nid 36 [ 134.542047][T12827] loop4: detected capacity change from 0 to 4096 [ 134.675806][T12838] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2643'. [ 134.685837][T12819] loop1: detected capacity change from 0 to 32768 [ 134.715770][T12819] [ 134.715770][T12819] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.715770][T12819] [ 134.726762][T12819] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 134.726762][T12819] [ 134.795235][ T187] read_mapping_page failed! [ 134.795369][ T187] ERROR: (device loop1): txAbort: [ 134.795369][ T187] [ 134.795408][ T187] jfs_write_inode: jfs_commit_inode failed! [ 134.795490][ T6534] [ 134.795490][ T6534] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.795490][ T6534] [ 134.795832][ T6534] [ 134.795832][ T6534] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 134.795832][ T6534] [ 134.876763][T12838] hsr_slave_1 (unregistering): left promiscuous mode [ 135.159058][T12869] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2656'. [ 135.161034][T12865] loop0: detected capacity change from 0 to 1764 [ 135.497574][T12896] netlink: 'syz.0.2666': attribute type 5 has an invalid length. [ 135.638267][T12861] loop1: detected capacity change from 0 to 32768 [ 135.641654][T12904] No such timeout policy "syz1" [ 135.669505][T12861] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2653 (12861) [ 135.719200][T12861] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.725246][T12861] BTRFS info (device loop1): using sha256 (sha256-arm64) checksum algorithm [ 135.727838][T12861] BTRFS info (device loop1): using free-space-tree [ 135.810121][T12889] loop4: detected capacity change from 0 to 32768 [ 135.813312][T12889] BTRFS: device /dev/loop4 (7:4) using temp-fsid 4baf729e-d854-4493-bfb0-82997b6ca6cc [ 135.813555][T12889] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2665 (12889) [ 135.833439][T12889] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.833547][T12889] BTRFS info (device loop4): using sha256 (sha256-arm64) checksum algorithm [ 135.833588][T12889] BTRFS info (device loop4): using free-space-tree [ 135.972992][ T6534] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.051323][ T6527] BTRFS info (device loop4): last unmount of filesystem 4baf729e-d854-4493-bfb0-82997b6ca6cc [ 136.219130][T12902] loop2: detected capacity change from 0 to 40427 [ 136.226789][T12902] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 136.229048][T12902] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 136.363909][T12902] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 136.363977][T12902] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 136.624939][T12981] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2690'. [ 136.637952][T12953] loop3: detected capacity change from 0 to 32768 [ 136.695420][T12953] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 136.748272][T12953] XFS (loop3): Ending clean mount [ 136.751885][T12953] XFS (loop3): Quotacheck needed: Please wait. [ 136.854057][T12953] XFS (loop3): Quotacheck: Done. [ 137.050114][T13007] netlink: 'syz.0.2700': attribute type 11 has an invalid length. [ 137.084306][ T6528] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 137.300827][T13028] syz.4.2707 (13028): drop_caches: 0 [ 137.425063][T13040] netlink: 'syz.2.2714': attribute type 1 has an invalid length. [ 137.544933][T13049] [U] [ 137.738402][T13069] netlink: 'syz.2.2728': attribute type 3 has an invalid length. [ 138.139804][T13102] loop1: detected capacity change from 0 to 2048 [ 138.167106][T13108] loop2: detected capacity change from 0 to 64 [ 138.186783][ T6144] Alternate GPT is invalid, using primary GPT. [ 138.186985][ T6144] loop1: p1 p2 p3 [ 138.216332][T13102] Alternate GPT is invalid, using primary GPT. [ 138.216438][T13102] loop1: p1 p2 p3 [ 138.356325][T13116] bond0: (slave erspan0): Opening slave failed [ 138.514738][T13126] loop1: detected capacity change from 0 to 64 [ 138.671515][T13097] loop3: detected capacity change from 0 to 40427 [ 138.677144][T13097] F2FS-fs (loop3): Invalid log sectorsize (131081) [ 138.677223][T13097] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 138.683747][T13097] F2FS-fs (loop3): invalid crc value [ 138.782420][T13097] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 138.782484][T13097] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 139.008328][ T6769] udevd[6769]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 139.095464][ T7028] udevd[7028]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 139.129591][T13137] loop0: detected capacity change from 0 to 32768 [ 139.156293][T10468] udevd[10468]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 139.189978][T13153] loop3: detected capacity change from 0 to 4096 [ 139.193871][T13153] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 139.256920][T13153] ntfs3(loop3): ino=1a, mi_enum_attr [ 139.257001][T13153] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 139.257267][T13153] ntfs3(loop3): Failed to initialize $Extend/$ObjId. [ 139.281983][T13153] ntfs3(loop3): ino=5, "/" indx_read [ 139.363350][T13137] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256 [ 139.363410][T13137] allowing incompatible features above 0.0: (unknown version) [ 139.363439][T13137] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 139.363492][T13137] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 139.363530][T13137] bcachefs (loop0): initializing new filesystem [ 139.366874][T13137] bcachefs (loop0): going read-write [ 139.434000][T13155] loop1: detected capacity change from 0 to 32768 [ 139.448373][T13155] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 139.471422][T13137] bcachefs (loop0): marking superblocks [ 139.474864][T13137] bcachefs (loop0): initializing freespace [ 139.486332][T13137] bcachefs (loop0): done initializing freespace [ 139.498224][T13137] bcachefs (loop0): reading snapshots table [ 139.498309][T13137] bcachefs (loop0): reading snapshots done [ 139.522582][T13181] overlayfs: overlapping lowerdir path [ 139.539745][T13183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2774'. [ 139.542499][T13183] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2774'. [ 139.554101][T13137] bcachefs (loop0): done starting filesystem [ 139.616309][T13155] XFS (loop1): Ending clean mount [ 139.634032][T13155] XFS (loop1): Quotacheck needed: Please wait. [ 139.686410][T13155] XFS (loop1): Quotacheck: Done. [ 139.714410][ T6532] bcachefs (loop0): shutting down [ 139.714474][ T6532] bcachefs (loop0): going read-only [ 139.714525][ T6532] bcachefs (loop0): finished waiting for writes to stop [ 139.760928][ T6532] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3 [ 139.808030][ T6534] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 139.858114][ T6532] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 139.861448][ T6532] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 139.862221][ T6532] bcachefs (loop0): marking filesystem clean [ 139.919208][ T6532] bcachefs (loop0): shutdown complete [ 139.932956][T13197] 9pnet_fd: p9_fd_create_tcp (13197): problem binding to privport [ 140.044703][T13201] loop1: detected capacity change from 0 to 1024 [ 140.072261][T10470] udevd[10470]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 140.076720][ T6768] udevd[6768]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 140.082535][ T6651] udevd[6651]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 140.147921][T13191] loop3: detected capacity change from 0 to 32768 [ 140.241328][T13212] netlink: 'syz.2.2790': attribute type 1 has an invalid length. [ 140.440984][T13224] netlink: 'syz.2.2796': attribute type 10 has an invalid length. [ 140.441620][T13224] hsr0: entered promiscuous mode [ 140.454148][T13224] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 140.454359][T13224] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 140.460779][T13224] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 140.715354][T13237] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.2802' sets config #1 [ 140.814923][T13191] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 140.814984][T13191] allowing incompatible features above 0.0: (unknown version) [ 140.814996][T13191] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 140.815049][T13191] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 140.815138][T13191] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 140.815261][T13191] bcachefs (loop3): Version upgrade required: [ 140.815261][T13191] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 140.815261][T13191] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 140.815261][T13191] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 140.854851][T13191] bcachefs (loop3): dropping and reconstructing all alloc info [ 140.888856][T13191] bcachefs (loop3): invalid bkey in btree_node btree=dirents level=0: u64s 7 type dirent 4098:5675548428000973578:U32_MAX len 0 ver 0: -> 593924 type unknown [ 140.888912][T13191] dirent has stray data after name's NUL, deleting [ 140.900626][T13191] bcachefs (loop3): accounting_read... [ 140.907972][T13253] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2808'. [ 140.908056][T13253] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2808'. [ 140.908080][T13253] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2808'. [ 140.937507][T13191] done [ 140.937577][T13191] bcachefs (loop3): alloc_read... done [ 140.938354][T13191] bcachefs (loop3): snapshots_read... done [ 140.938995][T13191] bcachefs (loop3): check_allocations... done [ 140.999761][T13191] bcachefs (loop3): going read-write [ 141.039473][T13191] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean [ 141.044844][T13191] bcachefs (loop3): done starting filesystem [ 141.337911][T13280] afs: Bad value for 'source' [ 141.354438][ T6528] bcachefs (loop3): shutting down [ 141.356820][ T6528] bcachefs (loop3): going read-only [ 141.356882][ T6528] bcachefs (loop3): finished waiting for writes to stop [ 141.393749][ T6528] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12 [ 141.402448][T13278] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 141.484186][ T6528] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 12 [ 141.490553][ T6528] bcachefs (loop3): unclean shutdown complete, journal seq 13 [ 141.501452][ T6528] bcachefs (loop3): done going read-only, filesystem not clean [ 141.550325][T13291] loop1: detected capacity change from 0 to 256 [ 141.563236][T13292] loop2: detected capacity change from 0 to 8 [ 141.591191][ T6528] bcachefs (loop3): shutdown complete [ 142.214858][T13324] loop1: detected capacity change from 0 to 1024 [ 142.215455][T13324] EXT4-fs: Ignoring removed oldalloc option [ 142.215484][T13324] EXT4-fs: Ignoring removed orlov option [ 142.215506][T13324] EXT4-fs: Ignoring removed oldalloc option [ 142.215529][T13324] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.228163][T13294] loop0: detected capacity change from 0 to 40427 [ 142.239222][T13294] F2FS-fs (loop0): build fault injection rate: 16 [ 142.239781][T13294] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 142.245845][T13294] F2FS-fs (loop0): invalid crc value [ 142.248949][T13294] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4e8/0x7ac [ 142.251673][ C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of bio_endio+0x804/0x840 [ 142.268464][T13324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.330966][T13324] EXT4-fs error (device loop1): ext4_xattr_set_entry:1660: inode #13: comm syz.1.2842: corrupted xattr entries [ 142.338029][T13294] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 142.338736][T13324] EXT4-fs (loop1): Remounting filesystem read-only [ 142.338770][T13324] EXT4-fs warning (device loop1): ext4_xattr_ibody_set:2272: inode #18: comm syz.1.2842: dec ref error=-30 [ 142.465459][ T6534] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.468485][T13294] F2FS-fs (loop0): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x3e8/0xd78 [ 143.217416][T13353] loop1: detected capacity change from 0 to 32768 [ 143.345373][T13365] loop4: detected capacity change from 0 to 32768 [ 143.349968][T13365] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2859 (13365) [ 143.357791][T13365] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 143.357886][T13365] BTRFS info (device loop4): using sha256 (sha256-arm64) checksum algorithm [ 143.357948][T13365] BTRFS info (device loop4): using free-space-tree [ 143.576105][ T6527] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 143.676196][T13353] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,fsck,recovery_pass_last=scan_for_btree_nodes,nojournal_transaction_names,reconstruct_alloc [ 143.685540][T13353] allowing incompatible features above 0.0: (unknown version) [ 143.687861][T13353] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 143.687942][T13353] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 143.688059][T13353] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 143.688195][T13353] bcachefs (loop1): Version upgrade required: [ 143.688195][T13353] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 143.688195][T13353] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 143.688195][T13353] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 143.721513][T13353] bcachefs (loop1): dropping and reconstructing all alloc info [ 143.737553][T13353] bcachefs (loop1): btree node read error at btree extents level 0/0 [ 143.737593][T13353] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 65535 min_key R POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 143.737614][T13353] loop1 node offset 16/65535: btree node data missing: expected 65535 sectors, found 16 [ 143.737638][T13353] loop1 btree validate error [ 143.737654][T13353] flagging btree extents lost data [ 143.737674][T13353] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 143.737691][T13353] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 143.737708][T13353] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 143.737725][T13353] ret fsck_errors_not_fixed [ 143.737916][T13353] bcachefs (loop1): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 143.804404][T13353] bcachefs (loop1): btree node read error at btree dirents level 0/0 [ 143.804452][T13353] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 143.804483][T13353] loop1 node offset 8/24: btree node data missing: expected 24 sectors, found 8 [ 143.804496][T13353] loop1 btree validate error [ 143.804506][T13353] flagging btree dirents lost data [ 143.804515][T13353] ret fsck_errors_not_fixed [ 143.804678][T13353] bcachefs (loop1): error reading btree root btree=dirents level=0: btree_node_read_error, fixing [ 143.807956][T13353] bcachefs (loop1): btree node read error at btree xattrs level 0/0 [ 143.807974][T13353] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 143.807987][T13353] loop1 node offset 0/16: incorrect min_key: got 0:0:458752 should be POS_MIN [ 143.807998][T13353] loop1 btree validate error [ 143.808008][T13353] flagging btree xattrs lost data [ 143.808017][T13353] ret btree_node_read_err_bad_node [ 143.808157][T13353] bcachefs (loop1): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 143.820031][T13353] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 143.853748][T13353] bcachefs (loop1): scanning for old btree nodes: min_version 0.24: unwritten_extents [ 143.853811][T13353] bcachefs (loop1): going read-write [ 143.941153][ T4474] bcachefs (loop1): bucket 0:38 gen 0 data type btree sector count overflow: 0 + -256 > U32_MAX [ 143.941240][ T4474] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 143.961685][ T4474] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 143.966273][ T4474] u64s 5 type deleted 0:25:0 len 0 ver 0, , continuing [ 144.044795][ T4474] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 144.044861][ T4474] u64s 5 type deleted 0:26:0 len 0 ver 0, , continuing [ 144.056411][ T4474] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 144.058679][ T4474] u64s 5 type deleted 0:27:0 len 0 ver 0, , continuing [ 144.065615][ T4474] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 144.067810][ T4474] u64s 5 type deleted 0:28:0 len 0 ver 0, , continuing [ 144.072414][ T4474] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 144.074642][ T4474] u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing [ 144.077659][ T4474] bcachefs (loop1): bucket 0:35 gen 0 data type btree sector count overflow: 0 + -256 > U32_MAX [ 144.085076][ T4474] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0 [ 144.089613][ T4474] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 144.093161][ T4474] u64s 5 type deleted 0:30:0 len 0 ver 0, , continuing [ 144.108214][ T4474] bcachefs (loop1): bucket 0:32 gen 0 data type btree sector count overflow: 0 + -256 > U32_MAX [ 144.111565][ T4474] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 144.115986][ T4474] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 144.118199][ T4474] u64s 5 type deleted 0:31:0 len 0 ver 0, , continuing [ 144.126434][ T4474] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 144.126474][ T4474] u64s 13 type alloc_v4 0:32:0 len 0 ver 0: [ 144.126491][ T4474] gen 0 oldest_gen 0 data_type free [ 144.126507][ T4474] journal_seq_nonempty 0 [ 144.126522][ T4474] journal_seq_empty 0 [ 144.126536][ T4474] need_discard 0 [ 144.126551][ T4474] need_inc_gen 0 [ 144.126565][ T4474] dirty_sectors 0 [ 144.126580][ T4474] stripe_sectors 0 [ 144.126594][ T4474] cached_sectors 0 [ 144.126608][ T4474] stripe 0 [ 144.126623][ T4474] stripe_redundancy 0 [ 144.126647][ T4474] io_time[READ] 0 [ 144.126662][ T4474] io_time[WRITE] 0 [ 144.126676][ T4474] fragmentation 0 [ 144.126691][ T4474] bp_start 8 [ 144.126705][ T4474] , , continuing [ 144.180041][ T4474] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 144.180091][ T4474] u64s 5 type deleted 0:33:0 len 0 ver 0, , continuing [ 144.191401][ T4474] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 144.191454][ T4474] u64s 5 type deleted 0:34:0 len 0 ver 0, , continuing [ 144.192532][ T4474] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 144.192549][ T4474] u64s 13 type alloc_v4 0:35:0 len 0 ver 0: [ 144.192559][ T4474] gen 0 oldest_gen 0 data_type free [ 144.192569][ T4474] journal_seq_nonempty 0 [ 144.192579][ T4474] journal_seq_empty 0 [ 144.192588][ T4474] need_discard 0 [ 144.192597][ T4474] need_inc_gen 0 [ 144.192607][ T4474] dirty_sectors 0 [ 144.192616][ T4474] stripe_sectors 0 [ 144.192625][ T4474] cached_sectors 0 [ 144.192646][ T4474] stripe 0 [ 144.192656][ T4474] stripe_redundancy 0 [ 144.192665][ T4474] io_time[READ] 0 [ 144.192675][ T4474] io_time[WRITE] 0 [ 144.192684][ T4474] fragmentation 0 [ 144.192693][ T4474] bp_start 8 [ 144.192703][ T4474] , , continuing [ 144.192712][ T4474] Ratelimiting new instances of previous error [ 144.210832][ T4474] bcachefs (loop1): bucket 0:42 gen 0 data type btree sector count overflow: 0 + -256 > U32_MAX [ 144.210852][ T4474] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0 [ 144.235523][T13353] bcachefs (loop1): scanning for old btree nodes done [ 144.235642][T13353] bcachefs (loop1): done starting filesystem [ 144.280319][T13353] bcachefs (loop1): going read-only [ 144.282113][T13353] bcachefs (loop1): finished waiting for writes to stop [ 144.340054][T13353] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11 [ 144.351321][T13353] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 11 [ 144.360530][T13353] bcachefs (loop1): unclean shutdown complete, journal seq 12 [ 144.364109][T13353] bcachefs (loop1): done going read-only, filesystem not clean [ 144.443285][T13455] netlink: 'syz.4.2888': attribute type 21 has an invalid length. [ 144.511909][ T6534] bcachefs (loop1): shutting down [ 144.574935][ T6534] bcachefs (loop1): shutdown complete [ 144.656242][T13467] xt_l2tp: invalid flags combination: 0 [ 144.698344][T13470] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 144.768498][T13433] loop0: detected capacity change from 0 to 40427 [ 144.855724][T13433] F2FS-fs (loop0): invalid crc value [ 144.916347][T13486] autofs4:pid:13486:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 144.928312][T13433] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 145.209025][T13500] netlink: 'syz.4.2904': attribute type 13 has an invalid length. [ 145.209099][T13500] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2904'. [ 145.271905][T13502] cgroup: No subsys list or none specified [ 145.368690][T13514] loop0: detected capacity change from 0 to 2048 [ 145.384990][T13515] delete_channel: no stack [ 145.387216][T13514] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 145.536935][T13520] loop3: detected capacity change from 0 to 1024 [ 145.698843][T13530] netlink: 'syz.2.2917': attribute type 5 has an invalid length. [ 145.698914][T13530] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2917'. [ 145.701440][T13531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2918'. [ 145.996719][T13546] loop0: detected capacity change from 0 to 2048 [ 146.022234][T13546] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=67108896, location=67108896 [ 146.022308][T13546] UDF-fs: warning (device loop0): udf_fill_super: No fileset found [ 146.102753][T13549] loop2: detected capacity change from 0 to 64 [ 146.106693][T13508] loop4: detected capacity change from 0 to 40427 [ 146.110126][T13508] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 146.110185][T13508] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 146.110460][T13508] F2FS-fs (loop4): build fault injection rate: 17008 [ 146.110499][T13508] F2FS-fs (loop4): build fault injection type: 0x6 [ 146.112200][T13508] F2FS-fs (loop4): invalid crc value [ 146.182527][T13508] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 146.182596][T13508] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 146.203551][T13539] loop3: detected capacity change from 0 to 32768 [ 146.527760][T13539] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 146.554672][T13539] allowing incompatible features above 0.0: (unknown version) [ 146.556920][T13539] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 146.557023][T13539] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 146.557127][T13539] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 146.557265][T13539] bcachefs (loop3): Version upgrade required: [ 146.557265][T13539] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 146.557265][T13539] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 146.557265][T13539] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 146.557476][T13539] bcachefs (loop3): dropping and reconstructing all alloc info [ 146.619135][T13563] loop0: detected capacity change from 0 to 32768 [ 146.632690][T13539] bcachefs (loop3): accounting_read... [ 146.634569][T13563] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2932 (13563) [ 146.660249][T13539] done [ 146.660316][T13539] bcachefs (loop3): alloc_read... done [ 146.660485][T13539] bcachefs (loop3): snapshots_read... done [ 146.660951][T13539] bcachefs (loop3): done starting filesystem [ 146.672896][T13563] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 146.673001][T13563] BTRFS info (device loop0): using sha256 (sha256-arm64) checksum algorithm [ 146.673041][T13563] BTRFS info (device loop0): disk space caching is enabled [ 146.673065][T13563] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 146.802362][T13563] BTRFS info (device loop0): rebuilding free space tree [ 146.842450][T13563] BTRFS info (device loop0): disabling free space tree [ 146.842537][T13563] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 146.842583][T13563] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 146.848585][T13603] netlink: 'syz.2.2941': attribute type 15 has an invalid length. [ 146.857996][ T6528] bcachefs (loop3): shutting down [ 146.904772][T13605] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2940'. [ 146.904850][T13605] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2940'. [ 146.935916][ T6528] bcachefs (loop3): shutdown complete [ 146.981080][T13582] loop4: detected capacity change from 0 to 32768 [ 147.078954][T13582] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2931 (13582) [ 147.113970][ T6532] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 147.115202][T13582] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 147.115271][T13582] BTRFS info (device loop4): using sha256 (sha256-arm64) checksum algorithm [ 147.115310][T13582] BTRFS info (device loop4): disk space caching is enabled [ 147.115334][T13582] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 147.174547][T13582] BTRFS info (device loop4): rebuilding free space tree [ 147.206311][T13582] BTRFS info (device loop4): disabling free space tree [ 147.206402][T13582] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 147.206431][T13582] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 147.372286][T13582] BTRFS info (device loop4 state M): max_inline set to 0 [ 147.438842][ T6527] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 147.662374][T13665] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2964'. [ 148.034420][T13691] loop0: detected capacity change from 0 to 512 [ 148.102771][T13691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.119035][T13691] Quota error (device loop0): do_check_range: Getting block 3997698 out of range 1-5 [ 148.123864][T13691] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 148.127048][T13691] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2975: Failed to acquire dquot type 0 [ 148.171652][ T6532] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.202187][T13677] loop2: detected capacity change from 0 to 32768 [ 148.210072][T13677] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2968 (13677) [ 148.216261][T13677] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.219314][T13677] BTRFS info (device loop2): using sha256 (sha256-arm64) checksum algorithm [ 148.222086][T13677] BTRFS info (device loop2): using free-space-tree [ 148.336361][ T6537] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.441783][T13727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2983'. [ 148.772340][ T6533] Bluetooth: hci3: Malformed LE Event: 0x02 [ 148.806052][T13725] loop4: detected capacity change from 0 to 32768 [ 148.832061][T13725] ERROR: (device loop4): diAllocAG: nfreeinos = 0, but iag on freelist [ 148.832061][T13725] [ 148.834502][T13725] ialloc: diAlloc returned -5! [ 148.942472][T13718] loop0: detected capacity change from 0 to 32768 [ 149.081701][T13718] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_delay=2013266920,journal_reclaim_delay=10,nojournal_transaction_names [ 149.081762][T13718] allowing incompatible features above 0.0: (unknown version) [ 149.081773][T13718] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 149.081787][T13718] with devices loop0 [ 149.081842][T13718] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 149.081883][T13718] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing new filesystem [ 149.085250][T13718] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-write [ 149.125604][T13758] libceph: resolve '. [ 149.125604][T13758] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)Hyo=U邋#ǤYMhE$ [ 149.125604][T13758] ' (ret=-3): failed [ 149.171989][T13767] loop3: detected capacity change from 0 to 1024 [ 149.172610][T13767] EXT4-fs: Ignoring removed bh option [ 149.178070][T13767] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 149.178130][T13767] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 149.178223][T13767] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 149.184348][T13718] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking superblocks [ 149.188852][T13718] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing freespace [ 149.242359][T13718] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done initializing freespace [ 149.243514][T13718] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots table [ 149.243574][T13718] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots done [ 149.320592][T13718] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done starting filesystem [ 149.337672][T13767] EXT4-fs (loop3): failed to open journal device unknown-block(0,5) -6 [ 149.396652][T13780] loop4: detected capacity change from 0 to 64 [ 149.457490][ T6532] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutting down [ 149.457557][ T6532] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-only [ 149.457588][ T6532] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): finished waiting for writes to stop [ 149.561909][ T6532] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators, journal seq 3 [ 149.651834][T13795] openvswitch: netlink: IPv4 tunnel dst address is zero [ 149.686905][T13797] loop2: detected capacity change from 0 to 512 [ 149.689642][T13797] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 149.717832][T13797] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.3011: invalid indirect mapped block 4294967295 (level 0) [ 149.734858][ T6532] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators complete, journal seq 3 [ 149.750120][ T6532] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): clean shutdown complete, journal seq 4 [ 149.751069][ T6532] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking filesystem clean [ 149.780157][T13797] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.3011: invalid indirect mapped block 4294967295 (level 1) [ 149.785984][ T6532] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 149.788702][T13797] EXT4-fs (loop2): 1 orphan inode deleted [ 149.800082][T13797] EXT4-fs (loop2): 1 truncate cleaned up [ 149.800957][T13797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.919267][ T6537] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.048542][T13813] loop2: detected capacity change from 0 to 2048 [ 150.063294][T13813] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 150.096560][T13817] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.133497][T13786] loop3: detected capacity change from 0 to 32768 [ 150.139224][T13819] tmpfs: Group quota block hardlimit too large. [ 150.151884][T13813] NILFS (loop2): failed to count free inodes: err=-34 [ 150.172807][T13786] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 150.330610][T13786] XFS (loop3): Ending clean mount [ 150.334217][T13786] XFS (loop3): Quotacheck needed: Please wait. [ 150.380161][T13827] loop4: detected capacity change from 0 to 32768 [ 150.385486][T13827] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3022 (13827) [ 150.392240][T13827] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 150.395270][T13827] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 150.395392][T13786] XFS (loop3): Quotacheck: Done. [ 150.399506][T13827] BTRFS info (device loop4): disk space caching is enabled [ 150.401794][T13827] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 150.463244][ T6528] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 150.500013][T13827] BTRFS info (device loop4): rebuilding free space tree [ 150.536610][T13827] BTRFS info (device loop4): disabling free space tree [ 150.536711][T13827] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 150.536758][T13827] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 150.633081][ T6527] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 150.814144][T13863] netlink: 'syz.4.3032': attribute type 11 has an invalid length. [ 151.048773][T13816] loop1: detected capacity change from 0 to 65536 [ 151.119130][T13816] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 151.157075][T13882] loop2: detected capacity change from 0 to 764 [ 151.182338][T13882] Symlink component flag not implemented [ 151.182373][T13882] Symlink component flag not implemented [ 151.182446][T13882] Symlink component flag not implemented (128) [ 151.182477][T13882] Symlink component flag not implemented (122) [ 151.210285][T13816] XFS (loop1): Ending clean mount [ 151.263519][T13866] loop3: detected capacity change from 0 to 32768 [ 151.302527][T13866] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 151.317025][ T6534] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 151.431598][T13866] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2048 but claims that 39166 are free [ 151.437668][T13866] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 151.444967][T13866] OCFS2: File system is now read-only. [ 151.446672][T13866] (syz.3.3033,13866,0):ocfs2_search_chain:1817 ERROR: status = -30 [ 151.450115][T13866] (syz.3.3033,13866,1):ocfs2_search_chain:1940 ERROR: status = -30 [ 151.450177][T13866] (syz.3.3033,13866,1):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30 [ 151.450204][T13866] (syz.3.3033,13866,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30 [ 151.450230][T13866] (syz.3.3033,13866,1):ocfs2_claim_new_inode:2298 ERROR: status = -30 [ 151.450255][T13866] (syz.3.3033,13866,1):ocfs2_claim_new_inode:2313 ERROR: status = -30 [ 151.450280][T13866] (syz.3.3033,13866,1):ocfs2_mknod_locked:638 ERROR: status = -30 [ 151.450306][T13866] (syz.3.3033,13866,1):ocfs2_mknod:385 ERROR: status = -30 [ 151.450663][T13866] (syz.3.3033,13866,1):ocfs2_mknod:502 ERROR: status = -30 [ 151.450700][T13866] (syz.3.3033,13866,1):ocfs2_create:675 ERROR: status = -30 [ 151.598432][ T6528] ocfs2: Unmounting device (7,3) on (node local) [ 151.746284][T13902] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3046'. [ 151.749277][T13902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3046'. [ 151.753004][T13902] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3046'. [ 152.245979][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3062'. [ 152.246049][T13938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3062'. [ 152.315377][T13940] netlink: 'syz.1.3063': attribute type 11 has an invalid length. [ 152.315452][T13940] netlink: 'syz.1.3063': attribute type 11 has an invalid length. [ 152.315476][T13940] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3063'. [ 152.360788][T13908] loop2: detected capacity change from 0 to 32768 [ 152.363459][T13908] XFS: ikeep mount option is deprecated. [ 152.416546][T13908] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 152.589352][T13908] XFS (loop2): Ending clean mount [ 152.615988][T13908] XFS (loop2): Quotacheck needed: Please wait. [ 152.675287][T13908] XFS (loop2): Quotacheck: Done. [ 152.845612][ T6537] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 152.847185][T13985] loop4: detected capacity change from 0 to 512 [ 152.867687][T13985] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 152.872096][T13985] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec028, mo2=0102] [ 152.872196][T13985] System zones: 1-12 [ 152.878070][T13985] EXT4-fs (loop4): 1 truncate cleaned up [ 152.925044][T13985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.987288][T13985] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 13: comm syz.4.3081: bad entry in directory: inode out of bounds - offset=44, inode=32780, rec_len=16, size=1024 fake=0 [ 152.994685][T13985] EXT4-fs (loop4): Remounting filesystem read-only [ 153.087878][ T6527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.173569][T14001] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 153.181646][T14006] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 153.309351][T14015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3094'. [ 153.320581][T14011] loop2: detected capacity change from 0 to 2048 [ 153.321775][T13989] loop1: detected capacity change from 0 to 32768 [ 153.338370][T14011] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.486818][T13989] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 153.486884][T13989] allowing incompatible features above 0.0: (unknown version) [ 153.486896][T13989] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 153.486950][T13989] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 153.487040][T13989] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 153.487163][T13989] bcachefs (loop1): Version upgrade required: [ 153.487163][T13989] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 153.487163][T13989] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 153.487163][T13989] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 153.511475][T13989] bcachefs (loop1): dropping and reconstructing all alloc info [ 153.556840][T13989] bcachefs (loop1): accounting_read... [ 153.577840][T14013] loop3: detected capacity change from 0 to 32768 [ 153.591563][T13989] done [ 153.591629][T13989] bcachefs (loop1): alloc_read... done [ 153.591821][T13989] bcachefs (loop1): snapshots_read... done [ 153.592256][T13989] bcachefs (loop1): done starting filesystem [ 153.608581][T14013] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 153.703560][ T6534] bcachefs (loop1): shutting down [ 153.835435][T14013] XFS (loop3): Ending clean mount [ 153.847459][T14013] XFS (loop3): Quotacheck needed: Please wait. [ 153.858921][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3108'. [ 153.929771][T14013] XFS (loop3): Quotacheck: Done. [ 153.935426][T14061] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 153.987666][ T6534] bcachefs (loop1): shutdown complete [ 154.051243][ T6528] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 154.060193][T14071] x_tables: ip_tables: ah match: only valid for protocol 51 [ 154.190111][T14077] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 154.190291][T14077] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 154.205447][T14077] vhci_hcd vhci_hcd.0: Device attached [ 154.211874][T14080] vhci_hcd: connection closed [ 154.214811][ T755] vhci_hcd: stop threads [ 154.215518][ T755] vhci_hcd: release socket [ 154.215572][ T755] vhci_hcd: disconnect device [ 154.268410][T14084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 154.438011][T14097] xt_CT: You must specify a L4 protocol and not use inversions on it [ 154.464501][T14100] loop2: detected capacity change from 0 to 1024 [ 154.467724][T14100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 154.561695][ T6537] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.585146][T14104] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 154.647897][T14109] loop0: detected capacity change from 0 to 1024 [ 154.659070][T14109] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 154.662187][T14109] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 154.667666][T14109] EXT4-fs (loop0): invalid journal inode [ 154.669674][T14109] EXT4-fs (loop0): can't get journal size [ 154.688819][T14109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 154.697874][T14109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.786024][T14116] netlink: 'syz.0.3137': attribute type 1 has an invalid length. [ 154.865691][T14122] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 154.865807][T14122] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 155.312691][T14130] loop4: detected capacity change from 0 to 32768 [ 155.323320][T14130] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 155.399531][T14150] loop2: detected capacity change from 0 to 4096 [ 155.433355][T14160] loop3: detected capacity change from 0 to 1024 [ 155.434342][T14150] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 155.440688][ T6527] ocfs2: Unmounting device (7,4) on (node local) [ 155.495136][T14150] ntfs3(loop2): ino=19, mi_enum_attr [ 155.495216][T14150] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 155.503872][T14160] hfsplus: bad catalog entry type [ 155.559463][ T4449] hfsplus: b-tree write err: -5, ino 4 [ 155.580164][T14150] ntfs3(loop2): failed to convert "c46c" to iso8859-15 [ 155.582818][T14150] ntfs3(loop2): ino=20, mi_enum_attr [ 155.583103][T14150] ntfs3(loop2): ino=1b, mi_enum_attr [ 155.861484][T14164] loop0: detected capacity change from 0 to 32768 [ 155.938207][T14164] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 155.979610][T14186] netlink: 'syz.4.3167': attribute type 1 has an invalid length. [ 155.979688][T14186] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3167'. [ 156.038892][T14164] XFS (loop0): Ending clean mount [ 156.069167][T14164] XFS (loop0): Quotacheck needed: Please wait. [ 156.086148][T14164] XFS (loop0): Quotacheck: Done. [ 156.167759][ T6532] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 156.363584][T14210] loop3: detected capacity change from 0 to 256 [ 156.394454][T14210] FAT-fs (loop3): Directory bread(block 64) failed [ 156.394534][T14210] FAT-fs (loop3): Directory bread(block 65) failed [ 156.394586][T14210] FAT-fs (loop3): Directory bread(block 66) failed [ 156.394618][T14210] FAT-fs (loop3): Directory bread(block 67) failed [ 156.394682][T14210] FAT-fs (loop3): Directory bread(block 68) failed [ 156.394726][T14210] FAT-fs (loop3): Directory bread(block 69) failed [ 156.394798][T14210] FAT-fs (loop3): Directory bread(block 70) failed [ 156.394830][T14210] FAT-fs (loop3): Directory bread(block 71) failed [ 156.394878][T14210] FAT-fs (loop3): Directory bread(block 72) failed [ 156.394909][T14210] FAT-fs (loop3): Directory bread(block 73) failed [ 156.409184][T14218] dummy0: mtu less than device minimum [ 156.483975][T14197] loop4: detected capacity change from 0 to 32768 [ 156.622047][T14197] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=4,compression=lz4,degraded=no,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow,no_data_io [ 156.622111][T14197] allowing incompatible features above 0.0: (unknown version) [ 156.627862][T14197] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 156.627927][T14197] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 156.628020][T14197] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 156.628143][T14197] bcachefs (loop4): Version upgrade required: [ 156.628143][T14197] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 156.628143][T14197] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 156.628143][T14197] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 156.628334][T14197] bcachefs (loop4): dropping and reconstructing all alloc info [ 156.653213][T14234] loop0: detected capacity change from 0 to 64 [ 156.660798][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.673558][T14235] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3186'. [ 156.691871][T14234] syz.0.3185: attempt to access beyond end of device [ 156.691871][T14234] loop0: rw=0, sector=65534, nr_sectors = 2 limit=64 [ 156.697116][T14234] Buffer I/O error on dev loop0, logical block 32767, async page read [ 156.714861][T14197] bcachefs (loop4): accounting_read... done [ 156.722983][T14197] bcachefs (loop4): alloc_read... done [ 156.723175][T14197] bcachefs (loop4): snapshots_read... done [ 156.723508][T14197] bcachefs (loop4): done starting filesystem [ 156.847913][ T6527] bcachefs (loop4): shutting down [ 156.960298][T14251] veth0_to_bond: entered allmulticast mode [ 157.012105][ T6527] bcachefs (loop4): shutdown complete [ 157.050055][T14255] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3198'. [ 157.068528][T14248] loop2: detected capacity change from 0 to 764 [ 157.135158][T14261] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3199'. [ 157.200110][T14263] tmpfs: Bad value for 'mpol' [ 157.707129][T14278] loop1: detected capacity change from 0 to 32768 [ 157.739384][T14274] loop0: detected capacity change from 0 to 32768 [ 157.765981][T14274] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 157.820151][T14302] loop3: detected capacity change from 0 to 2048 [ 157.822333][T14302] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 157.839523][T14303] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.845782][T14274] XFS (loop0): Ending clean mount [ 157.919936][ T6532] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 157.963080][ T6769] udevd[6769]: incorrect nilfs2 checksum on /dev/loop3 [ 157.977771][T14307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3220'. [ 158.055118][T14313] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744071562067970) [ 158.055207][T14313] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 158.232148][T14321] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 158.369062][T14278] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 158.369123][T14278] allowing incompatible features above 0.0: (unknown version) [ 158.387866][T14333] netlink: 14212 bytes leftover after parsing attributes in process `syz.2.3228'. [ 158.389986][T14278] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 158.390055][T14278] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 158.390154][T14278] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 158.390276][T14278] bcachefs (loop1): Version upgrade required: [ 158.390276][T14278] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 158.390276][T14278] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 158.390276][T14278] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 158.390460][T14278] bcachefs (loop1): dropping and reconstructing all alloc info [ 158.446113][T14278] bcachefs (loop1): accounting_read... [ 158.501311][T14310] loop3: detected capacity change from 0 to 40427 [ 158.505088][T14278] done [ 158.505178][T14278] bcachefs (loop1): alloc_read... done [ 158.505381][T14278] bcachefs (loop1): snapshots_read... done [ 158.505834][T14278] bcachefs (loop1): done starting filesystem [ 158.534685][T14310] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 158.534749][T14310] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 158.560328][T14310] F2FS-fs (loop3): invalid crc value [ 158.595557][ T6534] bcachefs (loop1): shutting down [ 158.653295][ T6534] bcachefs (loop1): shutdown complete [ 158.833537][T14310] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 158.833606][T14310] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 158.874078][T14355] loop4: detected capacity change from 0 to 4096 [ 158.890438][T14355] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 158.934160][T14310] fscrypt (loop3, inode 3): Error -61 getting encryption context [ 158.936994][T14355] ntfs3(loop4): ino=19, mi_enum_attr [ 158.937074][T14355] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 159.001628][T14355] ntfs3(loop4): failed to convert "c46c" to iso8859-14 [ 159.001926][T14355] ntfs3(loop4): ino=20, mi_enum_attr [ 159.335315][T14380] binder: 14379:14380 ioctl c018620c 20000380 returned -1 [ 159.430368][T14387] kAFS: unable to lookup cell '/z1' [ 159.543199][T14396] vhci_hcd: invalid port number 117 [ 159.721416][T14412] loop3: detected capacity change from 0 to 512 [ 159.789575][T14412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.912441][ T6528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.037708][T14440] loop4: detected capacity change from 0 to 1024 [ 160.124337][ T618] hfsplus: b-tree write err: -5, ino 4 [ 160.626878][T14484] netlink: 'syz.3.3299': attribute type 11 has an invalid length. [ 160.629412][T14484] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3299'. [ 161.259620][T14545] loop0: detected capacity change from 0 to 16 [ 161.269588][T14543] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3327'. [ 161.277582][T14545] erofs (device loop0): mounted with root inode @ nid 36. [ 161.283751][T14545] erofs (device loop0): readahead error at folio 2 @ nid 89 [ 161.286493][T14545] erofs (device loop0): readahead error at folio 0 @ nid 89 [ 161.288932][T14545] erofs (device loop0): read error -117 @ 0 of nid 89 [ 161.464730][T14560] PKCS7: Unknown OID: [4] 0.0 [ 161.464795][T14560] PKCS7: Only support pkcs7_signedData type [ 161.696604][T14579] ip6t_srh: unknown srh invflags 7D00 [ 161.838144][T14596] loop0: detected capacity change from 0 to 128 [ 161.916337][T14596] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 161.921126][T14596] FAT-fs (loop0): Filesystem has been set read-only [ 161.924735][T14601] bridge_slave_0: left allmulticast mode [ 161.924938][T14601] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.098259][T14612] loop3: detected capacity change from 0 to 256 [ 162.171791][T14612] FAT-fs (loop3): Directory bread(block 64) failed [ 162.174796][T14612] FAT-fs (loop3): Directory bread(block 65) failed [ 162.176808][T14612] FAT-fs (loop3): Directory bread(block 66) failed [ 162.178775][T14612] FAT-fs (loop3): Directory bread(block 67) failed [ 162.181044][T14612] FAT-fs (loop3): Directory bread(block 68) failed [ 162.183064][T14612] FAT-fs (loop3): Directory bread(block 69) failed [ 162.185063][T14612] FAT-fs (loop3): Directory bread(block 70) failed [ 162.187021][T14612] FAT-fs (loop3): Directory bread(block 71) failed [ 162.189027][T14612] FAT-fs (loop3): Directory bread(block 72) failed [ 162.191349][T14612] FAT-fs (loop3): Directory bread(block 73) failed [ 162.348935][T14603] loop2: detected capacity change from 0 to 40427 [ 162.358847][T14603] F2FS-fs (loop2): invalid crc value [ 162.434357][T14603] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 162.526221][ T6540] Bluetooth: hci4: unexpected cc 0x0402 length: 4 > 1 [ 162.526325][ T6540] Bluetooth: hci4: unexpected event for opcode 0x0402 [ 162.670065][T14650] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3374'. [ 162.935910][T14648] loop3: detected capacity change from 0 to 32768 [ 163.066702][T14639] loop1: detected capacity change from 0 to 32768 [ 163.101751][T14639] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 163.190083][T14639] XFS (loop1): Ending clean mount [ 163.208063][T14648] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 163.239007][T14648] allowing incompatible features above 0.0: (unknown version) [ 163.239060][T14648] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 163.239125][T14648] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 163.239223][T14648] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 163.239311][T14648] bcachefs (loop3): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 163.239311][T14648] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 163.277564][T14648] bcachefs (loop3): invalid bkey in btree_node btree=alloc level=0: u64s 11 type alloc_v4 POS_MIN len 0 ver 0: [ 163.277620][T14648] gen 0 oldest_gen 0 data_type sb [ 163.277659][T14648] journal_seq_nonempty 1 [ 163.277677][T14648] journal_seq_empty 1769482 [ 163.277687][T14648] need_discard 1 [ 163.277696][T14648] need_inc_gen 1 [ 163.277705][T14648] dirty_sectors 256 [ 163.277715][T14648] stripe_sectors 27 [ 163.277724][T14648] cached_sectors 0 [ 163.277733][T14648] stripe 1073741824 [ 163.277743][T14648] stripe_redundancy 0 [ 163.277752][T14648] io_time[READ] 1 [ 163.277762][T14648] io_time[WRITE] 1 [ 163.277771][T14648] fragmentation 0 [ 163.277781][T14648] bp_start 6 [ 163.277790][T14648] [ 163.277798][T14648] invalid data type (got 1 should be 7), deleting [ 163.291058][T14648] bcachefs (loop3): accounting_read... [ 163.309717][ T6534] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 163.315827][T14699] loop4: detected capacity change from 0 to 2048 [ 163.337196][T14648] done [ 163.337262][T14648] bcachefs (loop3): alloc_read... done [ 163.354618][T14648] bcachefs (loop3): snapshots_read... done [ 163.360545][T14648] bcachefs (loop3): check_allocations... [ 163.361272][T14648] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 163.361288][T14648] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 163.366153][T14648] bcachefs (loop3): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 163.366171][T14648] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 163.368618][T14702] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.377167][T14648] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 163.377185][T14648] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 163.381359][T14648] bcachefs (loop3): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 163.381376][T14648] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 163.381677][T14648] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 163.381690][T14648] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 163.382727][T14648] bcachefs (loop3): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 163.382742][T14648] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 163.383111][T14648] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 163.383124][T14648] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 163.383798][T14648] bcachefs (loop3): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 163.383813][T14648] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 163.384047][T14648] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 163.384060][T14648] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 163.386069][T14648] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 163.386086][T14648] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 163.392451][T14648] bcachefs (loop3): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 163.392469][T14648] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 163.393097][T14648] bcachefs (loop3): bucket 0:0 gen 0 has wrong data_type: got free, should be sb, fixing [ 163.393171][T14648] bcachefs (loop3): bucket 0:0 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 163.393432][T14648] bcachefs (loop3): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 163.393495][T14648] bcachefs (loop3): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 163.393706][T14648] bcachefs (loop3): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 163.393767][T14648] bcachefs (loop3): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 163.393871][T14648] bcachefs (loop3): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 163.393932][T14648] bcachefs (loop3): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 163.394038][T14648] bcachefs (loop3): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 163.394102][T14648] bcachefs (loop3): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 163.394211][T14648] bcachefs (loop3): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 163.394273][T14648] bcachefs (loop3): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 163.394376][T14648] bcachefs (loop3): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 163.394437][T14648] bcachefs (loop3): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 163.394542][T14648] bcachefs (loop3): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 163.394603][T14648] bcachefs (loop3): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 163.394725][T14648] bcachefs (loop3): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 163.394785][T14648] bcachefs (loop3): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 163.394897][T14648] bcachefs (loop3): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 163.394966][T14648] bcachefs (loop3): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 163.395090][T14648] bcachefs (loop3): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 163.395103][T14648] Ratelimiting new instances of previous error [ 163.395184][T14648] bcachefs (loop3): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 163.395196][T14648] Ratelimiting new instances of previous error [ 163.440009][T14699] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 163.457909][T14699] Remounting filesystem read-only [ 163.464411][T14648] done [ 163.466060][T14648] bcachefs (loop3): going read-write [ 163.491137][T14704] loop0: detected capacity change from 0 to 16 [ 163.500327][T14704] erofs (device loop0): mounted with root inode @ nid 36. [ 163.533519][T14648] bcachefs (loop3): journal_replay... done [ 163.722814][T14648] bcachefs (loop3): check_extents_to_backpointers... [ 163.723664][T14648] bcachefs (loop3): scanning for missing backpointers in 4/128 buckets [ 163.726828][T14713] loop2: detected capacity change from 0 to 512 [ 163.728059][T14713] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.733597][T14713] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 163.734094][T14648] done [ 163.761943][T14713] EXT4-fs (loop2): 1 truncate cleaned up [ 163.762835][T14713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.778109][T14648] bcachefs (loop3): check_inodes... done [ 163.779534][T14648] bcachefs (loop3): resume_logged_ops... done [ 163.780382][T14648] bcachefs (loop3): delete_dead_inodes... done [ 163.795597][T14648] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean [ 163.795678][T14648] bcachefs (loop3): check_extents_to_backpointers... done [ 163.797346][T14648] bcachefs (loop3): check_inodes... done [ 163.798502][T14648] bcachefs (loop3): resume_logged_ops... done [ 163.799076][T14648] bcachefs (loop3): delete_dead_inodes... done [ 163.807509][T14648] bcachefs (loop3): done starting filesystem [ 163.831308][T14713] /dev/loop2: Can't open blockdev [ 163.884676][ T6537] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.996587][T14732] netlink: 'syz.2.3402': attribute type 1 has an invalid length. [ 163.998953][T14732] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3402'. [ 164.050176][ T6528] bcachefs (loop3): shutting down [ 164.050236][ T6528] bcachefs (loop3): going read-only [ 164.050287][ T6528] bcachefs (loop3): finished waiting for writes to stop [ 164.089125][ T6528] bcachefs (loop3): flushing journal and stopping allocators, journal seq 18 [ 164.089318][ T6528] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 18 [ 164.096265][ T6528] bcachefs (loop3): clean shutdown complete, journal seq 19 [ 164.097068][ T6528] bcachefs (loop3): marking filesystem clean [ 164.191439][ T6540] Bluetooth: hci3: command 0x0406 tx timeout [ 164.193426][ T6540] Bluetooth: hci2: command 0x0406 tx timeout [ 164.193517][ T6540] Bluetooth: hci1: command 0x0406 tx timeout [ 164.262342][T14752] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3413'. [ 164.262419][T14752] netlink: 'syz.1.3413': attribute type 5 has an invalid length. [ 164.294293][ T6528] bcachefs (loop3): shutdown complete [ 164.621242][T14774] loop2: detected capacity change from 0 to 1024 [ 164.621905][T14774] EXT4-fs: Ignoring removed bh option [ 164.647087][T14774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.828377][T14792] netlink: 'syz.1.3433': attribute type 1 has an invalid length. [ 164.886892][ T6537] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.928247][T14798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3437'. [ 164.928313][T14798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3437'. [ 164.945418][T14802] loop0: detected capacity change from 0 to 256 [ 164.991101][T14802] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbbba8adb, utbl_chksum : 0xe619d30d) [ 165.004218][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3438'. [ 165.397178][T14823] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.413008][T14814] loop2: detected capacity change from 0 to 32768 [ 165.476716][T14814] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 165.604660][T14814] XFS (loop2): Ending clean mount [ 165.690126][ T6537] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 165.872857][T14865] random: crng reseeded on system resumption [ 166.265942][T14894] loop4: detected capacity change from 0 to 512 [ 166.288755][T14894] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 166.296836][T14894] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 166.313159][T14894] EXT4-fs (loop4): 1 truncate cleaned up [ 166.315746][T14894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.370916][T14903] netlink: 'syz.0.3484': attribute type 3 has an invalid length. [ 166.374201][T14894] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 166.442044][ T6527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.479590][T14911] mmap: syz.0.3488 (14911): VmData 41684992 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 166.701771][T14928] loop0: detected capacity change from 0 to 128 [ 166.710319][T14928] FAT-fs (loop0): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 166.777409][ T618] FAT-fs (loop0): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 166.938270][T14948] loop2: detected capacity change from 0 to 1024 [ 166.971591][T14945] loop3: detected capacity change from 0 to 4096 [ 166.995420][T14948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.063324][T14948] EXT4-fs error (device loop2): ext4_empty_dir:3105: inode #11: block 448: comm syz.2.3504: Attempting to read directory block (448) that is past i_size (458760) [ 167.064779][T14945] ntfs3(loop3): ino=b, Correct links count -> 1. [ 167.065255][T14945] ntfs3(loop3): ino=18, mi_enum_attr [ 167.065294][T14945] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 167.180937][ T6537] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.285850][T14964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3511'. [ 167.301824][T14942] loop0: detected capacity change from 0 to 32768 [ 167.307585][T14942] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3501 (14942) [ 167.333384][T14942] BTRFS info (device loop0 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 167.336616][T14942] BTRFS info (device loop0 state S): using crc32c (crc32c-arm64) checksum algorithm [ 167.458932][ T4449] BTRFS warning (device loop0 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored [ 167.468675][ T618] BTRFS warning (device loop0 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored [ 167.473905][ T287] BTRFS warning (device loop0 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored [ 167.484796][ T4449] BTRFS warning (device loop0 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x0bc7de37 level 0, ignored [ 167.487110][T14942] BTRFS error (device loop0 state S): logical 6881280 len 1638400 found bg but no related chunk [ 167.628398][ T6532] BTRFS info (device loop0 state S): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 167.957140][T15028] netlink: 'syz.2.3536': attribute type 1 has an invalid length. [ 167.957220][T15028] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3536'. [ 168.258607][T15037] loop3: detected capacity change from 0 to 4096 [ 168.262057][T15040] loop1: detected capacity change from 0 to 4096 [ 168.269197][T15037] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 168.329642][T15049] loop4: detected capacity change from 0 to 4096 [ 168.336431][T15049] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 168.384821][T15037] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 168.417350][T15054] netlink: 'syz.0.3546': attribute type 10 has an invalid length. [ 168.420299][T15054] bridge0: port 1(bond0) entered blocking state [ 168.420451][T15054] bridge0: port 1(bond0) entered forwarding state [ 168.443876][T15049] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 168.446347][T15054] team0: Port device bridge0 added [ 168.519592][T15037] ntfs3(loop3): ino=1e, mi_enum_attr [ 168.535911][T15037] ntfs3(loop3): ino=1e, mi_enum_attr [ 168.619157][T15061] loop2: detected capacity change from 0 to 128 [ 168.661025][T15061] FAT-fs (loop2): bogus number of FAT structure [ 168.661092][T15061] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 168.661132][T15061] FAT-fs (loop2): Can't find a valid FAT filesystem [ 168.706849][T15063] ip6tnl1: entered promiscuous mode [ 168.706924][T15063] ip6tnl1: entered allmulticast mode [ 168.868264][T15075] binder: 15074:15075 ioctl c00c6211 0 returned -14 [ 168.965378][T15085] loop1: detected capacity change from 0 to 16 [ 169.000393][T15085] erofs (device loop1): mounted with root inode @ nid 36. [ 169.056060][T15089] loop0: detected capacity change from 0 to 256 [ 169.090764][T15094] overlayfs: option "workdir=./file2" is useless in a non-upper mount, ignore [ 169.093505][T15094] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 169.096073][T15094] overlayfs: missing 'lowerdir' [ 169.145268][T15089] FAT-fs (loop0): Directory bread(block 64) failed [ 169.145359][T15089] FAT-fs (loop0): Directory bread(block 65) failed [ 169.145436][T15089] FAT-fs (loop0): Directory bread(block 66) failed [ 169.145469][T15089] FAT-fs (loop0): Directory bread(block 67) failed [ 169.145518][T15089] FAT-fs (loop0): Directory bread(block 68) failed [ 169.145549][T15089] FAT-fs (loop0): Directory bread(block 69) failed [ 169.145598][T15089] FAT-fs (loop0): Directory bread(block 70) failed [ 169.145628][T15089] FAT-fs (loop0): Directory bread(block 71) failed [ 169.145689][T15089] FAT-fs (loop0): Directory bread(block 72) failed [ 169.145721][T15089] FAT-fs (loop0): Directory bread(block 73) failed [ 169.211800][T15099] netlink: 'syz.3.3569': attribute type 1 has an invalid length. [ 169.212056][T15099] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3569'. [ 169.212081][T15099] NCSI netlink: No device for ifindex 0 [ 169.327924][T15106] netlink: 'syz.1.3572': attribute type 1 has an invalid length. [ 169.347972][T15109] loop3: detected capacity change from 0 to 512 [ 169.443239][T15117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3578'. [ 169.443314][T15117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3578'. [ 169.930210][T15140] loop4: detected capacity change from 0 to 4096 [ 169.930861][T15140] ntfs3: Unknown parameter 'LJb\R˿io' [ 169.995904][T15116] loop0: detected capacity change from 0 to 32768 [ 170.006239][T15116] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.3577 (15116) [ 170.036044][T15116] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 170.036155][T15116] BTRFS info (device loop0): using sha256 (sha256-arm64) checksum algorithm [ 170.036197][T15116] BTRFS info (device loop0): using free-space-tree [ 170.253747][T15148] loop2: detected capacity change from 0 to 32768 [ 170.260775][T15148] BTRFS: device /dev/loop2 (7:2) using temp-fsid 1a99fadd-cab4-4dda-95c3-649007951493 [ 170.263725][T15148] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3594 (15148) [ 170.278308][T15148] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 170.278403][T15148] BTRFS info (device loop2): using sha256 (sha256-arm64) checksum algorithm [ 170.278463][T15148] BTRFS info (device loop2): using free-space-tree [ 170.317740][ T6532] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 170.362041][T15129] loop1: detected capacity change from 0 to 32768 [ 170.377960][T15129] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 170.457330][T15129] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature [ 170.457553][T15129] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 170.457605][T15129] OCFS2: File system is now read-only. [ 170.457642][T15129] (syz.1.3583,15129,1):ocfs2_search_chain:1852 ERROR: status = -30 [ 170.457755][T15129] (syz.1.3583,15129,1):ocfs2_search_chain:1940 ERROR: status = -30 [ 170.457789][T15129] (syz.1.3583,15129,1):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30 [ 170.457821][T15129] (syz.1.3583,15129,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30 [ 170.457852][T15129] (syz.1.3583,15129,1):__ocfs2_claim_clusters:2438 ERROR: status = -30 [ 170.457884][T15129] (syz.1.3583,15129,1):__ocfs2_claim_clusters:2446 ERROR: status = -30 [ 170.457915][T15129] (syz.1.3583,15129,1):ocfs2_local_alloc_new_window:1199 ERROR: status = -30 [ 170.457946][T15129] (syz.1.3583,15129,1):ocfs2_local_alloc_new_window:1224 ERROR: status = -30 [ 170.457977][T15129] (syz.1.3583,15129,1):ocfs2_local_alloc_slide_window:1298 ERROR: status = -30 [ 170.458139][T15129] (syz.1.3583,15129,1):ocfs2_local_alloc_slide_window:1317 ERROR: status = -30 [ 170.458227][T15129] (syz.1.3583,15129,1):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30 [ 170.458262][T15129] (syz.1.3583,15129,1):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30 [ 170.458293][T15129] (syz.1.3583,15129,1):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -30 [ 170.458334][T15129] (syz.1.3583,15129,1):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -30 [ 170.458365][T15129] (syz.1.3583,15129,1):ocfs2_symlink:1923 ERROR: status = -30 [ 170.458577][T15129] (syz.1.3583,15129,1):ocfs2_symlink:2077 ERROR: status = -30 [ 170.543301][T15192] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 170.543385][T15192] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 170.593951][ T6537] BTRFS info (device loop2): last unmount of filesystem 1a99fadd-cab4-4dda-95c3-649007951493 [ 170.604196][ T6534] (syz-executor,6534,0):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72 [ 170.627722][ T6534] ocfs2: Unmounting device (7,1) on (node local) [ 170.685277][T15199] usb usb1: usbfs: process 15199 (syz.0.3603) did not claim interface 7 before use [ 170.716845][T15168] loop3: detected capacity change from 0 to 32768 [ 170.722722][T15202] xt_l2tp: v2 tid > 0xffff: 262144 [ 170.758971][T15205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3607'. [ 171.027982][T15224] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3614'. [ 171.113830][T15228] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3616'. [ 171.113911][T15228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3616'. [ 171.270029][T15217] loop0: detected capacity change from 0 to 32768 [ 171.321805][T15217] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 171.325199][T15238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3620'. [ 171.326705][T15244] ieee802154 phy0 wpan0: encryption failed: -22 [ 171.382127][T15251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3623'. [ 171.482244][T15217] XFS (loop0): Ending clean mount [ 171.485052][T15217] XFS (loop0): Quotacheck needed: Please wait. [ 171.543984][T15217] XFS (loop0): Quotacheck: Done. [ 171.628575][ T6532] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 171.670918][T15218] loop1: detected capacity change from 0 to 32768 [ 171.862241][T15218] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,nojournal_transaction_names,version_upgrade=none [ 171.862312][T15218] allowing incompatible features above 0.0: (unknown version) [ 171.862343][T15218] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 171.862398][T15218] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 171.862518][T15218] bcachefs (loop1): invalid journal entry, version=1.7: mi_btree_bitmap type=data_usage in superblock: invalid journal entry usage: bad size, fixing [ 171.862686][T15218] bcachefs (loop1): invalid bkey in superblock btree=snapshots level=0: u64s 11 type btree_ptr_v2 18446742987082825727:U64_MAX:U32_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 171.862703][T15218] invalid key type for btree snapshots (btree_ptr_v2), deleting [ 171.862775][T15218] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 171.918545][T15218] bcachefs (loop1): btree node read error at btree xattrs level 0/0 [ 171.918591][T15218] u64s 11 type btree_ptr_v2 481036337152:U64_MAX:U32_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 171.918623][T15218] loop1 node offset 0/16 bset u64s 0: incorrect max key SPOS_MAX [ 171.918642][T15218] loop1 btree validate error [ 171.918652][T15218] flagging btree xattrs lost data [ 171.918662][T15218] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 171.918673][T15218] running recovery pass check_allocations (8), currently at recovery_pass_empty (0) [ 171.918685][T15218] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 171.918696][T15218] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 171.918707][T15218] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 171.918719][T15218] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 171.918730][T15218] ret btree_node_read_err_bad_node [ 171.918944][T15218] bcachefs (loop1): error reading btree root btree=xattrs level=0: btree_node_read_error, fixing [ 171.927909][T15218] bcachefs (loop1): check_topology... [ 171.927984][T15218] bcachefs (loop1): btree root xattrs unreadable, must recover from scan [ 171.928040][T15218] bcachefs (loop1): running recovery pass scan_for_btree_nodes (1), currently at check_topology (2) - rewinding [ 171.928077][T15218] bcachefs (loop1): bch2_check_root(): error restart_recovery [ 171.928100][T15218] bcachefs (loop1): scan_for_btree_nodes... [ 171.935793][T15218] bcachefs (loop1): btree node scan found 1 nodes after overwrites [ 171.960209][T15218] done [ 171.960246][T15218] bcachefs (loop1): check_topology... [ 171.960332][T15218] bcachefs (loop1): btree root xattrs unreadable, must recover from scan [ 171.960403][T15218] bcachefs (loop1): no nodes found for btree xattrs, continuing [ 171.962968][T15218] done [ 171.962996][T15218] bcachefs (loop1): accounting_read... done [ 172.028226][T15218] bcachefs (loop1): alloc_read... done [ 172.028897][T15218] bcachefs (loop1): snapshots_read... done [ 172.029458][T15218] bcachefs (loop1): check_allocations... [ 172.030675][T15218] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap [ 172.030691][T15218] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 172.037369][T15218] bcachefs (loop1): bucket 0:26 gen 0 different types of data in same bucket: journal, btree [ 172.037390][T15218] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 172.043077][T15218] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap [ 172.043095][T15218] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 172.045124][T15218] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap [ 172.045141][T15218] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 172.046002][T15218] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap [ 172.046017][T15218] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 172.062973][T15259] loop3: detected capacity change from 0 to 32768 [ 172.064545][T15218] bcachefs (loop1): btree ptr not marked in member info btree allocated bitmap [ 172.064562][T15218] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 172.081689][T15285] loop4: detected capacity change from 0 to 128 [ 172.084357][T15218] bcachefs (loop1): bucket 0:25 gen 0 has wrong data_type: got free, should be journal, fixing [ 172.084467][T15218] bcachefs (loop1): bucket 0:25 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 172.084904][T15218] bcachefs (loop1): bucket 0:31 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 172.084973][T15218] bcachefs (loop1): bucket 0:31 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing [ 172.085163][T15218] bcachefs (loop1): bucket 0:32 gen 0 has wrong data_type: got btree, should be need_discard, fixing [ 172.085225][T15218] bcachefs (loop1): bucket 0:32 gen 0 data type need_discard has wrong dirty_sectors: got 256, should be 0, fixing [ 172.086981][T15259] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3627 (15259) [ 172.098683][T15218] done [ 172.102137][T15259] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 172.102240][T15259] BTRFS info (device loop3): using sha256 (sha256-arm64) checksum algorithm [ 172.102282][T15259] BTRFS info (device loop3): using free-space-tree [ 172.104460][T15218] bcachefs (loop1): going read-write [ 172.116454][T15285] FAT-fs (loop4): Directory bread(block 32) failed [ 172.116500][T15285] FAT-fs (loop4): Directory bread(block 33) failed [ 172.116554][T15285] FAT-fs (loop4): Directory bread(block 34) failed [ 172.116586][T15285] FAT-fs (loop4): Directory bread(block 35) failed [ 172.116681][T15285] FAT-fs (loop4): Directory bread(block 36) failed [ 172.116714][T15285] FAT-fs (loop4): Directory bread(block 37) failed [ 172.116763][T15285] FAT-fs (loop4): Directory bread(block 38) failed [ 172.116794][T15285] FAT-fs (loop4): Directory bread(block 39) failed [ 172.116845][T15285] FAT-fs (loop4): Directory bread(block 40) failed [ 172.116876][T15285] FAT-fs (loop4): Directory bread(block 41) failed [ 172.125227][T15218] bcachefs (loop1): journal_replay... [ 172.144256][T15218] bcachefs (loop1): u64s 13 type alloc_v4 0:25:0 len 0 ver 0: [ 172.144316][T15218] gen 0 oldest_gen 0 data_type journal [ 172.144624][T15218] journal_seq_nonempty 0 [ 172.144646][T15218] journal_seq_empty 0 [ 172.144655][T15218] need_discard 0 [ 172.144666][T15218] need_inc_gen 0 [ 172.144675][T15218] dirty_sectors 256 [ 172.144685][T15218] stripe_sectors 0 [ 172.144694][T15218] cached_sectors 0 [ 172.144704][T15218] stripe 0 [ 172.144713][T15218] stripe_redundancy 0 [ 172.144723][T15218] io_time[READ] 0 [ 172.144733][T15218] io_time[WRITE] 0 [ 172.144742][T15218] fragmentation 0 [ 172.144752][T15218] bp_start 8 [ 172.144761][T15218] [ 172.144770][T15218] incorrectly set at freespace:0:25:0 (free 0, genbits 0 should be 0), fixing [ 172.215455][T15218] done [ 172.216777][T15218] bcachefs (loop1): check_lrus... done [ 172.217747][T15218] bcachefs (loop1): check_backpointers_to_extents... [ 172.218185][T15218] bcachefs (loop1): backpointer doesn't match btree node it points to: [ 172.218199][T15218] u64s 9 type backpointer 0:8126464:0 len 0 ver 0: bucket=0:31:0 btree=xattrs level=1 data_type=btree suboffset=0 len=256 gen=0 pos=SPOS_MAX [ 172.218212][T15218] u64s 5 type btree_ptr SPOS_MAX len 0 ver 0, fixing [ 172.218687][T15218] bcachefs (loop1): backpointer doesn't match extent it points to: [ 172.218701][T15218] u64s 9 type backpointer 0:8912896:0 len 0 ver 0: bucket=0:34:0 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=4099:8:U32_MAX [ 172.218715][T15218] u64s 5 type deleted 4099:8:U32_MAX len 0 ver 0, fixing [ 172.218957][T15218] bcachefs (loop1): backpointer doesn't match extent it points to: [ 172.218969][T15218] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=536870913:24:U32_MAX [ 172.218983][T15218] u64s 7 type extent 536870913:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum none 0:0 compress lz4 ptr: 0:34:8 gen 0 [ 172.218997][T15218] u64s 9 type backpointer 0:8921088:0 len 0 ver 0: bucket=0:34:8 btree=extents level=0 data_type=user suboffset=0 len=8 gen=0 pos=536870913:24:U32_MAX, fixing [ 172.229215][T15218] done [ 172.232819][T15218] bcachefs (loop1): resume_logged_ops... done [ 172.233402][T15218] bcachefs (loop1): delete_dead_inodes... done [ 172.242537][T15218] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 172.243160][T15218] bcachefs (loop1): resume_logged_ops... done [ 172.243733][T15218] bcachefs (loop1): delete_dead_inodes... done [ 172.245865][T15218] bcachefs (loop1): done starting filesystem [ 172.402853][T15218] bcachefs (loop1): u64s 13 type alloc_v4 0:25:0 len 0 ver 0: [ 172.402912][T15218] gen 0 oldest_gen 0 data_type journal [ 172.402923][T15218] journal_seq_nonempty 0 [ 172.402934][T15218] journal_seq_empty 0 [ 172.402944][T15218] need_discard 0 [ 172.402953][T15218] need_inc_gen 0 [ 172.402963][T15218] dirty_sectors 256 [ 172.402973][T15218] stripe_sectors 0 [ 172.402983][T15218] cached_sectors 0 [ 172.402992][T15218] stripe 0 [ 172.403002][T15218] stripe_redundancy 0 [ 172.403017][T15218] io_time[READ] 0 [ 172.403027][T15218] io_time[WRITE] 0 [ 172.403037][T15218] fragmentation 0 [ 172.403047][T15218] bp_start 8 [ 172.403056][T15218] [ 172.403065][T15218] incorrectly set at freespace:0:25:0 (free 0, genbits 0 should be 0), fixing [ 172.450213][ T6528] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 172.514961][T15309] syz_tun: entered allmulticast mode [ 172.616390][ T6534] bcachefs (loop1): shutting down [ 172.616563][ T6534] bcachefs (loop1): going read-only [ 172.616627][ T6534] bcachefs (loop1): finished waiting for writes to stop [ 172.629084][T15311] netlink: 'syz.3.3639': attribute type 1 has an invalid length. [ 172.659254][ T6534] bcachefs (loop1): flushing journal and stopping allocators, journal seq 20 [ 172.683035][ T6534] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 20 [ 172.700137][ T6534] bcachefs (loop1): clean shutdown complete, journal seq 21 [ 172.700953][ T6534] bcachefs (loop1): marking filesystem clean [ 172.806841][ T6534] bcachefs (loop1): shutdown complete [ 172.916339][T15331] netlink: 'syz.0.3650': attribute type 1 has an invalid length. [ 172.916414][T15331] netlink: 'syz.0.3650': attribute type 1 has an invalid length. [ 173.091354][T15341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.273698][T15351] mmap: syz.2.3644 (15351) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 173.572891][T15368] __nla_validate_parse: 4 callbacks suppressed [ 173.574792][T15368] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3667'. [ 173.577519][T15368] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 173.587660][T15370] loop4: detected capacity change from 0 to 64 [ 173.589790][T15369] netlink: 'syz.2.3669': attribute type 41 has an invalid length. [ 173.659077][ T6533] Bluetooth: hci1: unexpected event for opcode 0x204e [ 173.766825][T15377] netlink: 'syz.4.3672': attribute type 1 has an invalid length. [ 174.065015][T15396] ieee802154 phy0 wpan0: encryption failed: -22 [ 174.133481][T15404] trusted_key: encrypted_key: keylen parameter is missing [ 174.194323][T15408] loop2: detected capacity change from 0 to 512 [ 174.210471][T15408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.325571][ T6537] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.530762][T15433] netlink: 'syz.3.3699': attribute type 2 has an invalid length. [ 174.530833][T15433] netlink: 'syz.3.3699': attribute type 3 has an invalid length. [ 174.635146][T15445] loop4: detected capacity change from 0 to 16 [ 174.680348][T15445] erofs (device loop4): mounted with root inode @ nid 36. [ 174.739570][T15451] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 174.986295][T15468] netlink: 264 bytes leftover after parsing attributes in process `syz.0.3715'. [ 174.999988][T15469] loop4: detected capacity change from 0 to 256 [ 175.015282][T15469] exfat: Deprecated parameter 'utf8' [ 175.088455][T15469] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 175.198351][T15458] loop3: detected capacity change from 0 to 32768 [ 175.245724][T15481] C: renamed from team_slave_0 [ 175.249149][T15481] netlink: 'syz.0.3722': attribute type 1 has an invalid length. [ 175.249226][T15481] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3722'. [ 175.249253][T15481] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 175.283909][T15479] loop2: detected capacity change from 0 to 1764 [ 175.369149][T15458] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 175.390020][T15458] allowing incompatible features above 0.0: (unknown version) [ 175.391162][T15458] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 175.391597][T15458] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 175.391701][T15458] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 175.391780][T15458] bcachefs (loop3): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 175.391780][T15458] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 175.456082][T15458] bcachefs (loop3): accounting_read... done [ 175.481149][T15458] bcachefs (loop3): alloc_read... done [ 175.486598][T15458] bcachefs (loop3): snapshots_read... done [ 175.487340][T15458] bcachefs (loop3): check_allocations... [ 175.488419][T15458] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 175.488435][T15458] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 75277f57b0c8c24 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 175.495202][T15458] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 175.495221][T15458] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 175.515146][T15458] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 175.515189][T15458] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 175.516269][T15458] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 175.516284][T15458] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 175.517133][T15458] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 175.517148][T15458] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 175.518058][T15458] bcachefs (loop3): btree ptr not marked in member info btree allocated bitmap [ 175.518072][T15458] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9a831b4a3f983356 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 175.527358][T15458] done [ 175.536484][T15458] bcachefs (loop3): going read-write [ 175.554516][T15458] bcachefs (loop3): journal_replay... done [ 175.672769][T15458] bcachefs (loop3): check_extents_to_backpointers... [ 175.673553][T15458] bcachefs (loop3): scanning for missing backpointers in 6/128 buckets [ 175.685338][T15458] done [ 175.689014][T15458] bcachefs (loop3): check_inodes... done [ 175.693757][T15458] bcachefs (loop3): resume_logged_ops... done [ 175.700431][T15458] bcachefs (loop3): delete_dead_inodes... done [ 175.714771][T15458] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean [ 175.714819][T15458] bcachefs (loop3): check_extents_to_backpointers... done [ 175.726440][T15458] bcachefs (loop3): check_inodes... done [ 175.732590][T15458] bcachefs (loop3): resume_logged_ops... done [ 175.739231][T15458] bcachefs (loop3): delete_dead_inodes... done [ 175.746917][T15458] bcachefs (loop3): done starting filesystem [ 175.827179][ T6528] bcachefs (loop3): shutting down [ 175.827235][ T6528] bcachefs (loop3): going read-only [ 175.827260][ T6528] bcachefs (loop3): finished waiting for writes to stop [ 175.841821][ T6528] bcachefs (loop3): flushing journal and stopping allocators, journal seq 15 [ 175.842006][ T6528] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 15 [ 175.845504][ T6528] bcachefs (loop3): clean shutdown complete, journal seq 16 [ 175.846314][ T6528] bcachefs (loop3): marking filesystem clean [ 175.879058][ T6528] bcachefs (loop3): shutdown complete [ 175.905131][T15522] ptrace attach of "./syz-executor exec"[6527] was attempted by ""[15522] [ 175.976674][T15526] loop2: detected capacity change from 0 to 512 [ 175.978975][T15526] EXT4-fs: Ignoring removed nobh option [ 175.995562][T15528] netlink: 'syz.0.3740': attribute type 11 has an invalid length. [ 176.038972][T15526] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.3739: corrupted inode contents [ 176.060995][T15526] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #3: comm syz.2.3739: mark_inode_dirty error [ 176.067771][T15526] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.3739: corrupted inode contents [ 176.075868][T15526] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.3739: mark_inode_dirty error [ 176.091656][T15526] Quota error (device loop2): write_blk: dquota write failed [ 176.091919][T15526] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 176.091993][T15526] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3739: Failed to acquire dquot type 0 [ 176.111394][T15526] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3739: corrupted inode contents [ 176.111742][T15526] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.3739: mark_inode_dirty error [ 176.112029][T15526] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3739: corrupted inode contents [ 176.112290][T15526] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.3739: mark_inode_dirty error [ 176.112556][T15526] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3739: corrupted inode contents [ 176.112971][T15526] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 176.121147][T15526] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3739: corrupted inode contents [ 176.142325][T15526] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.3739: mark_inode_dirty error [ 176.142794][T15526] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 176.145784][T15526] EXT4-fs (loop2): 1 truncate cleaned up [ 176.147838][T15526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.321968][ T6537] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.333119][ T521] Quota error (device loop2): do_check_range: Getting block 3925999616 out of range 1-5 [ 176.333453][ T521] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 176.348133][ T521] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 176.348230][ T521] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 177.059088][T15564] loop2: detected capacity change from 0 to 32768 [ 177.107989][T15564] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 177.240803][T15564] XFS (loop2): Ending clean mount [ 177.355045][ T6537] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 177.389466][T15536] loop0: detected capacity change from 0 to 131072 [ 177.392594][T15536] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 177.392685][T15536] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 177.397378][T15536] F2FS-fs (loop0): invalid crc value [ 177.436336][T15536] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 177.436403][T15536] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 177.570840][T15572] loop1: detected capacity change from 0 to 32768 [ 177.585334][T15572] (syz.1.3761,15572,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 177.589307][T15572] (syz.1.3761,15572,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 177.618250][T15572] (syz.1.3761,15572,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xecaf217e, computed 0x51d812ae. Applying ECC. [ 177.620997][T15572] JBD2: Ignoring recovery information on journal [ 177.665588][T15572] (syz.1.3761,15572,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xecaf217e, computed 0x51d812ae. Applying ECC. [ 177.674660][T15572] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 177.794321][T15572] (syz.1.3761,15572,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc9ee627, computed 0xfd3b0969. Applying ECC. [ 177.806430][T15572] (syz.1.3761,15572,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xdb95abda. Applying ECC. [ 177.810502][T15572] (syz.1.3761,15572,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0xc3573cd1 [ 177.814591][T15572] (syz.1.3761,15572,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 177.818553][T15572] (syz.1.3761,15572,0):ocfs2_quota_read:201 ERROR: status = -5 [ 177.822308][T15572] Quota error (device loop1): find_block_dqentry: Can't read quota tree block 6 [ 177.825177][T15572] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 177.828119][T15572] (syz.1.3761,15572,0):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 177.834250][T15572] (syz.1.3761,15572,0):ocfs2_mknod:314 ERROR: status = -5 [ 177.849749][T15572] (syz.1.3761,15572,1):ocfs2_mknod:502 ERROR: status = -5 [ 177.849954][T15572] (syz.1.3761,15572,1):ocfs2_mkdir:658 ERROR: status = -5 [ 178.074576][T15624] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3781'. [ 178.131067][ T6534] ocfs2: Unmounting device (7,1) on (node local) [ 178.483252][T15652] netdevsim netdevsim1: Firmware load for './cgroup/../file0/file0' refused, path contains '..' component [ 178.535065][T15626] loop2: detected capacity change from 0 to 32768 [ 178.539048][T15654] netlink: 'syz.3.3794': attribute type 9 has an invalid length. [ 178.545453][T15654] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3794'. [ 178.607647][T15626] JBD2: Ignoring recovery information on journal [ 178.676775][T15626] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 178.856204][ T6537] ocfs2: Unmounting device (7,2) on (node local) [ 179.026003][T15679] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3805'. [ 179.040499][T15640] loop0: detected capacity change from 0 to 32768 [ 179.063867][T15640] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 179.104577][T15640] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2304 but max bitmap bits of 2048 [ 179.104816][T15640] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 179.104839][T15640] OCFS2: File system is now read-only. [ 179.104859][T15640] (syz.0.3788,15640,1):ocfs2_search_chain:1817 ERROR: status = -30 [ 179.104948][T15640] (syz.0.3788,15640,1):ocfs2_search_chain:1940 ERROR: status = -30 [ 179.104975][T15640] (syz.0.3788,15640,1):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30 [ 179.105000][T15640] (syz.0.3788,15640,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30 [ 179.105026][T15640] (syz.0.3788,15640,1):ocfs2_claim_new_inode:2298 ERROR: status = -30 [ 179.105051][T15640] (syz.0.3788,15640,1):ocfs2_claim_new_inode:2313 ERROR: status = -30 [ 179.105076][T15640] (syz.0.3788,15640,1):ocfs2_mknod_locked:638 ERROR: status = -30 [ 179.105102][T15640] (syz.0.3788,15640,1):ocfs2_symlink:1953 ERROR: status = -30 [ 179.105301][T15640] (syz.0.3788,15640,1):ocfs2_symlink:2077 ERROR: status = -30 [ 179.198918][ T6532] ocfs2: Unmounting device (7,0) on (node local) [ 179.426267][T15710] kAFS: unable to lookup cell ' [ 179.426267][T15710] $)-.ײfYǝa2s [ 179.426267][T15710] ' [ 179.524186][T15712] loop1: detected capacity change from 0 to 4096 [ 179.526398][T15712] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 179.576773][T15717] netlink: 'syz.0.3823': attribute type 1 has an invalid length. [ 179.576842][T15717] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3823'. [ 179.576867][T15717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3823'. [ 180.075539][T15719] loop2: detected capacity change from 0 to 32768 [ 180.099930][T15719] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 180.124712][T15719] XFS (loop2): Ending clean mount [ 180.126511][T15719] XFS (loop2): Quotacheck needed: Please wait. [ 180.203493][T15719] XFS (loop2): Quotacheck: Done. [ 180.313392][T15719] /dev/loop2: Can't open blockdev [ 180.416554][ T6537] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 180.467523][T15759] dvmrp0: entered allmulticast mode [ 180.470146][T15762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3843'. [ 180.470211][T15762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3843'. [ 180.860393][T15796] netlink: 'syz.1.3857': attribute type 18 has an invalid length. [ 180.874920][T15796] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.875162][T15796] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.875195][T15796] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.875224][T15796] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.071083][T15811] loop1: detected capacity change from 0 to 1764 [ 181.151447][T15814] loop0: detected capacity change from 0 to 4096 [ 181.167607][T15814] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 181.236398][T15814] ntfs3(loop0): ino=1a, mi_enum_attr [ 181.236480][T15814] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 181.300135][T15814] ntfs3(loop0): ino=1e, "file1" ntfs_sync_inode failed, -22. [ 181.372404][ T187] ntfs3(loop0): ino=1e, ntfs3_write_inode failed, -22. [ 181.389723][T15822] loop4: detected capacity change from 0 to 32768 [ 181.399494][T15822] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3871 (15822) [ 181.419220][T15822] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 181.419327][T15822] BTRFS info (device loop4): using sha256 (sha256-arm64) checksum algorithm [ 181.419367][T15822] BTRFS info (device loop4): using free-space-tree [ 181.668364][T15865] loop1: detected capacity change from 0 to 256 [ 181.719219][ T6527] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 181.752174][T15865] FAT-fs (loop1): Directory bread(block 64) failed [ 181.752252][T15865] FAT-fs (loop1): Directory bread(block 65) failed [ 181.752306][T15865] FAT-fs (loop1): Directory bread(block 66) failed [ 181.752338][T15865] FAT-fs (loop1): Directory bread(block 67) failed [ 181.752387][T15865] FAT-fs (loop1): Directory bread(block 68) failed [ 181.752418][T15865] FAT-fs (loop1): Directory bread(block 69) failed [ 181.752466][T15865] FAT-fs (loop1): Directory bread(block 70) failed [ 181.752497][T15865] FAT-fs (loop1): Directory bread(block 71) failed [ 181.752544][T15865] FAT-fs (loop1): Directory bread(block 72) failed [ 181.752575][T15865] FAT-fs (loop1): Directory bread(block 73) failed [ 181.991112][T15883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3893'. [ 182.121854][T15889] gre1: entered promiscuous mode [ 182.300328][T15861] loop3: detected capacity change from 0 to 32768 [ 182.304412][T15909] binder: binder_mmap: 15906 20002000-20005000 bad vm_flags failed -1 [ 182.345511][T15861] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 182.352516][T15861] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 182.415694][T15861] (syz.3.3883,15861,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 182.415773][T15861] (syz.3.3883,15861,0):ocfs2_xattr_block_find:2831 ERROR: status = -12 [ 182.552471][ T6528] ocfs2: Unmounting device (7,3) on (node local) [ 182.676936][T15934] loop0: detected capacity change from 0 to 1764 [ 182.983745][T15963] loop4: detected capacity change from 0 to 512 [ 183.048620][T15963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.215021][ T6527] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.386108][T15995] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 183.511752][T16006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3950'. [ 183.828960][T15979] loop2: detected capacity change from 0 to 32768 [ 183.851793][T15979] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3936 (15979) [ 183.879734][T15979] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 183.881643][T15979] BTRFS info (device loop2): using crc32c (crc32c-arm64) checksum algorithm [ 183.918735][T16028] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 183.918777][T16028] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 183.918870][T16028] vhci_hcd vhci_hcd.0: Device attached [ 183.952752][T16033] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 183.958119][ T521] vhci_hcd: stop threads [ 183.958178][ T521] vhci_hcd: release socket [ 183.958233][ T521] vhci_hcd: disconnect device [ 183.985232][T15979] BTRFS info (device loop2): rebuilding free space tree [ 183.994192][T16013] loop0: detected capacity change from 0 to 32768 [ 184.028023][T15979] BTRFS info (device loop2): disabling free space tree [ 184.028113][T15979] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 184.028159][T15979] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 184.055425][T16013] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 184.064945][T16013] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 184.129620][T16013] [ 184.130392][T16013] ====================================================== [ 184.132373][T16013] WARNING: possible circular locking dependency detected [ 184.134319][T16013] 6.16.0-rc6-syzkaller-gaaef6f251176 #0 Not tainted [ 184.136159][T16013] ------------------------------------------------------ [ 184.138169][T16013] syz.0.3952/16013 is trying to acquire lock: [ 184.139856][T16013] ffff0000f3bfa378 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_get+0xe8/0x220 [ 184.142486][T16013] [ 184.142486][T16013] but task is already holding lock: [ 184.144667][T16013] ffff0000c8704950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe4c/0x10dc [ 184.147330][T16013] [ 184.147330][T16013] which lock already depends on the new lock. [ 184.147330][T16013] [ 184.150278][T16013] [ 184.150278][T16013] the existing dependency chain (in reverse order) is: [ 184.152813][T16013] [ 184.152813][T16013] -> #5 (jbd2_handle){++++}-{0:0}: [ 184.154856][T16013] start_this_handle+0xe74/0x10dc [ 184.156391][T16013] jbd2__journal_start+0x288/0x51c [ 184.158055][T16013] jbd2_journal_start+0x3c/0x4c [ 184.159626][T16013] ocfs2_start_trans+0x368/0x6b0 [ 184.161215][T16013] ocfs2_modify_bh+0xe4/0x43c [ 184.162676][T16013] ocfs2_local_read_info+0x104c/0x1364 [ 184.164441][T16013] dquot_load_quota_sb+0x6bc/0xa90 [ 184.166022][T16013] dquot_load_quota_inode+0x274/0x4e4 [ 184.167767][T16013] ocfs2_enable_quotas+0x17c/0x3b4 [ 184.169370][T16013] ocfs2_fill_super+0x4018/0x5340 [ 184.171016][T16013] get_tree_bdev_flags+0x360/0x414 [ 184.172561][T16013] get_tree_bdev+0x2c/0x3c [ 184.173969][T16013] ocfs2_get_tree+0x28/0x38 [ 184.175379][T16013] vfs_get_tree+0x90/0x28c [ 184.176796][T16013] do_new_mount+0x228/0x814 [ 184.178213][T16013] path_mount+0x5b4/0xde0 [ 184.179763][T16013] __arm64_sys_mount+0x3e8/0x468 [ 184.181414][T16013] invoke_syscall+0x98/0x2b8 [ 184.182869][T16013] el0_svc_common+0x130/0x23c [ 184.184388][T16013] do_el0_svc+0x48/0x58 [ 184.185727][T16013] el0_svc+0x58/0x180 [ 184.187018][T16013] el0t_64_sync_handler+0x84/0x12c [ 184.188690][T16013] el0t_64_sync+0x198/0x19c [ 184.190133][T16013] [ 184.190133][T16013] -> #4 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 184.192626][T16013] down_read+0x58/0x2f8 [ 184.193971][T16013] ocfs2_start_trans+0x35c/0x6b0 [ 184.195540][T16013] ocfs2_modify_bh+0xe4/0x43c [ 184.197099][T16013] ocfs2_local_read_info+0x104c/0x1364 [ 184.198853][T16013] dquot_load_quota_sb+0x6bc/0xa90 [ 184.200455][T16013] dquot_load_quota_inode+0x274/0x4e4 [ 184.202148][T16013] ocfs2_enable_quotas+0x17c/0x3b4 [ 184.203832][T16013] ocfs2_fill_super+0x4018/0x5340 [ 184.205437][T16013] get_tree_bdev_flags+0x360/0x414 [ 184.207011][T16013] get_tree_bdev+0x2c/0x3c [ 184.208422][T16013] ocfs2_get_tree+0x28/0x38 [ 184.209868][T16013] vfs_get_tree+0x90/0x28c [ 184.211261][T16013] do_new_mount+0x228/0x814 [ 184.212721][T16013] path_mount+0x5b4/0xde0 [ 184.214209][T16013] __arm64_sys_mount+0x3e8/0x468 [ 184.215728][T16013] invoke_syscall+0x98/0x2b8 [ 184.217204][T16013] el0_svc_common+0x130/0x23c [ 184.218733][T16013] do_el0_svc+0x48/0x58 [ 184.220102][T16013] el0_svc+0x58/0x180 [ 184.221348][T16013] el0t_64_sync_handler+0x84/0x12c [ 184.222908][T16013] el0t_64_sync+0x198/0x19c [ 184.224315][T16013] [ 184.224315][T16013] -> #3 (sb_internal#2){.+.+}-{0:0}: [ 184.226486][T16013] ocfs2_start_trans+0x1f4/0x6b0 [ 184.228105][T16013] ocfs2_extend_allocation+0x5d4/0x14cc [ 184.229836][T16013] ocfs2_extend_no_holes+0x1a8/0x424 [ 184.231490][T16013] ocfs2_acquire_dquot+0x530/0xa10 [ 184.233073][T16013] dqget+0x654/0xccc [ 184.234316][T16013] ocfs2_setattr+0xb30/0x17a0 [ 184.235802][T16013] notify_change+0x9a4/0xc50 [ 184.237285][T16013] chown_common+0x374/0x4dc [ 184.238670][T16013] ksys_fchown+0xe0/0x158 [ 184.240088][T16013] __arm64_sys_fchown+0x7c/0x94 [ 184.241573][T16013] invoke_syscall+0x98/0x2b8 [ 184.243016][T16013] el0_svc_common+0x130/0x23c [ 184.244511][T16013] do_el0_svc+0x48/0x58 [ 184.245817][T16013] el0_svc+0x58/0x180 [ 184.247146][T16013] el0t_64_sync_handler+0x84/0x12c [ 184.248755][T16013] el0t_64_sync+0x198/0x19c [ 184.250187][T16013] [ 184.250187][T16013] -> #2 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{4:4}: [ 184.253160][T16013] down_write+0x50/0xc0 [ 184.254522][T16013] ocfs2_reserve_local_alloc_bits+0x104/0x26a0 [ 184.256444][T16013] ocfs2_reserve_clusters_with_limit+0x198/0x9e0 [ 184.258359][T16013] ocfs2_reserve_clusters+0x3c/0x50 [ 184.259999][T16013] ocfs2_extend_dir+0x510/0x3964 [ 184.261544][T16013] ocfs2_prepare_dir_for_insert+0x281c/0x4664 [ 184.263405][T16013] ocfs2_mknod+0x6ec/0x1cf0 [ 184.264866][T16013] ocfs2_mkdir+0x190/0x474 [ 184.266349][T16013] vfs_mkdir+0x284/0x424 [ 184.267742][T16013] do_mkdirat+0x1f8/0x4c8 [ 184.269134][T16013] __arm64_sys_mkdirat+0x8c/0xa4 [ 184.270685][T16013] invoke_syscall+0x98/0x2b8 [ 184.272130][T16013] el0_svc_common+0x130/0x23c [ 184.273593][T16013] do_el0_svc+0x48/0x58 [ 184.274921][T16013] el0_svc+0x58/0x180 [ 184.276097][T16013] el0t_64_sync_handler+0x84/0x12c [ 184.277462][T16013] el0t_64_sync+0x198/0x19c [ 184.278680][T16013] [ 184.278680][T16013] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}: [ 184.280983][T16013] down_write+0x50/0xc0 [ 184.282325][T16013] ocfs2_try_remove_refcount_tree+0xb4/0x2d8 [ 184.284133][T16013] ocfs2_xattr_set+0x460/0xe9c [ 184.285604][T16013] ocfs2_set_acl+0x574/0x628 [ 184.287090][T16013] ocfs2_iop_set_acl+0x190/0x25c [ 184.288654][T16013] vfs_set_acl+0x70c/0x974 [ 184.290028][T16013] do_set_acl+0xc8/0x1a8 [ 184.291364][T16013] filename_setxattr+0x268/0x4f8 [ 184.292896][T16013] path_setxattrat+0x2e8/0x320 [ 184.294373][T16013] __arm64_sys_setxattr+0xc0/0xdc [ 184.295997][T16013] invoke_syscall+0x98/0x2b8 [ 184.297498][T16013] el0_svc_common+0x130/0x23c [ 184.298929][T16013] do_el0_svc+0x48/0x58 [ 184.300317][T16013] el0_svc+0x58/0x180 [ 184.301603][T16013] el0t_64_sync_handler+0x84/0x12c [ 184.303217][T16013] el0t_64_sync+0x198/0x19c [ 184.304612][T16013] [ 184.304612][T16013] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}: [ 184.306851][T16013] __lock_acquire+0x1774/0x30a4 [ 184.308357][T16013] lock_acquire+0x14c/0x2e0 [ 184.309760][T16013] down_read+0x58/0x2f8 [ 184.311071][T16013] ocfs2_xattr_get+0xe8/0x220 [ 184.312527][T16013] ocfs2_xattr_security_get+0x40/0x54 [ 184.314144][T16013] __vfs_getxattr+0x394/0x3c0 [ 184.315586][T16013] smk_fetch+0xc4/0x150 [ 184.316920][T16013] smack_d_instantiate+0x53c/0x7a4 [ 184.318460][T16013] security_d_instantiate+0x100/0x204 [ 184.320093][T16013] d_instantiate+0x5c/0x9c [ 184.321480][T16013] ocfs2_symlink+0x19c4/0x1ff8 [ 184.322967][T16013] vfs_symlink+0x138/0x288 [ 184.324420][T16013] do_symlinkat+0x17c/0x360 [ 184.325845][T16013] __arm64_sys_symlinkat+0x9c/0xb4 [ 184.327490][T16013] invoke_syscall+0x98/0x2b8 [ 184.328982][T16013] el0_svc_common+0x130/0x23c [ 184.330425][T16013] do_el0_svc+0x48/0x58 [ 184.331708][T16013] el0_svc+0x58/0x180 [ 184.332984][T16013] el0t_64_sync_handler+0x84/0x12c [ 184.334542][T16013] el0t_64_sync+0x198/0x19c [ 184.335941][T16013] [ 184.335941][T16013] other info that might help us debug this: [ 184.335941][T16013] [ 184.338900][T16013] Chain exists of: [ 184.338900][T16013] &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle [ 184.338900][T16013] [ 184.342792][T16013] Possible unsafe locking scenario: [ 184.342792][T16013] [ 184.344861][T16013] CPU0 CPU1 [ 184.346359][T16013] ---- ---- [ 184.347822][T16013] rlock(jbd2_handle); [ 184.349020][T16013] lock(&journal->j_trans_barrier); [ 184.351251][T16013] lock(jbd2_handle); [ 184.353115][T16013] rlock(&oi->ip_xattr_sem); [ 184.354389][T16013] [ 184.354389][T16013] *** DEADLOCK *** [ 184.354389][T16013] [ 184.356658][T16013] 7 locks held by syz.0.3952/16013: [ 184.358082][T16013] #0: ffff0000fe794428 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 184.360754][T16013] #1: ffff0000df645f40 (&type->i_mutex_dir_key#19/1){+.+.}-{4:4}, at: filename_create+0x1ac/0x3b4 [ 184.363841][T16013] #2: ffff0000f3885f40 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x12c/0x3b9c [ 184.367728][T16013] #3: ffff0000f38809c0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x12c/0x3b9c [ 184.371600][T16013] #4: ffff0000fe794618 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_symlink+0xa68/0x1ff8 [ 184.374273][T16013] #5: ffff0000f3f220e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x35c/0x6b0 [ 184.377443][T16013] #6: ffff0000c8704950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe4c/0x10dc [ 184.380174][T16013] [ 184.380174][T16013] stack backtrace: [ 184.381837][T16013] CPU: 0 UID: 0 PID: 16013 Comm: syz.0.3952 Not tainted 6.16.0-rc6-syzkaller-gaaef6f251176 #0 PREEMPT [ 184.384889][T16013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.387785][T16013] Call trace: [ 184.388715][T16013] show_stack+0x2c/0x3c (C) [ 184.390090][T16013] __dump_stack+0x30/0x40 [ 184.391298][T16013] dump_stack_lvl+0xd8/0x12c [ 184.392679][T16013] dump_stack+0x1c/0x28 [ 184.393844][T16013] print_circular_bug+0x324/0x32c [ 184.395207][T16013] check_noncircular+0x154/0x174 [ 184.396539][T16013] __lock_acquire+0x1774/0x30a4 [ 184.397907][T16013] lock_acquire+0x14c/0x2e0 [ 184.399236][T16013] down_read+0x58/0x2f8 [ 184.400481][T16013] ocfs2_xattr_get+0xe8/0x220 [ 184.401850][T16013] ocfs2_xattr_security_get+0x40/0x54 [ 184.403350][T16013] __vfs_getxattr+0x394/0x3c0 [ 184.404655][T16013] smk_fetch+0xc4/0x150 [ 184.405845][T16013] smack_d_instantiate+0x53c/0x7a4 [ 184.407352][T16013] security_d_instantiate+0x100/0x204 [ 184.408897][T16013] d_instantiate+0x5c/0x9c [ 184.410114][T16013] ocfs2_symlink+0x19c4/0x1ff8 [ 184.411494][T16013] vfs_symlink+0x138/0x288 [ 184.412801][T16013] do_symlinkat+0x17c/0x360 [ 184.414025][T16013] __arm64_sys_symlinkat+0x9c/0xb4 [ 184.415505][T16013] invoke_syscall+0x98/0x2b8 [ 184.416828][T16013] el0_svc_common+0x130/0x23c [ 184.418133][T16013] do_el0_svc+0x48/0x58 [ 184.419527][T16013] el0_svc+0x58/0x180 ** replaying previous printk message ** [ 184.420162][T16066] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3970'. [ 184.424199][T16013] el0t_64_sync_handler+0x84/0x12c [ 184.425697][T16013] el0t_64_sync+0x198/0x19c [ 184.471163][ T6537] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 184.535945][ T6532] ocfs2: Unmounting device (7,0) on (node local) [ 187.720412][ T2408] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.720482][ T2408] ieee802154 phy1 wpan1: encryption failed: -22