last executing test programs: 31.860803825s ago: executing program 4 (id=4925): r0 = socket(0x1e, 0x1, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) 31.755387117s ago: executing program 4 (id=4930): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ppoll(&(0x7f0000000200)=[{r0, 0x8000}], 0x1, 0x0, 0x0, 0x0) 31.617292042s ago: executing program 4 (id=4937): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x200, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x22, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0xf12}, 0x94) 31.548103751s ago: executing program 4 (id=4940): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r0, &(0x7f0000000180)}, 0x20) 31.456616674s ago: executing program 4 (id=4942): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0x1, 0x590a, &(0x7f0000005d00)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 30.015175075s ago: executing program 4 (id=4967): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}) 13.845458911s ago: executing program 32 (id=4967): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}) 4.362397394s ago: executing program 3 (id=5583): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=@FILEID_UDF_WITH_PARENT={0x14}, &(0x7f0000000280), 0x1600) 4.230826466s ago: executing program 3 (id=5587): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a801400072cfe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x0) 4.105305422s ago: executing program 3 (id=5592): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f00000004c0)={[{@part={'part', 0x3d, 0x4}}, {@dir_umask={'dir_umask', 0x3d, 0x321}}, {@codepage={'codepage', 0x3d, 'cp1255'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@dir_umask={'dir_umask', 0x3d, 0x8}}]}, 0x11, 0x2bd, &(0x7f0000000200)="$eJzs3ctu00AUxvFvnLQJtCouLUJiWagEGwRlg9gEoTwEKwQ0QaqIioAiLquCWCEEe/a8Ag/BBsQLwIoVD1BWRjOeXO3YaZrUTfn/pEZO7OM5E19mTqTKAvDfulX/+fnab/tnpJJK0rsbUiCpKpUlndHZ6rPtna2dVrORtaOSi7B/RnGkSWyzud1MC7VxLsIL7buyFns/w3REUXTzV9FJoHDu6k8RSBV/dbr11UPPLNvrMeN2J5xHcRbGijJ72tMLLU08HQDATPHjf+DH+UU/fw8Cad0P+0dy/B/XXtEJTF2UubZn/HdVVmRU0tIpt6pb77kSzq4P2lXiKC3PDbyfV3xm9U0wTV5V6XIJTjzYajUvbz5qNQK9Uc3r2WzVvTbiU7ctJ9u1lNo0wwh9N+kzSjc3C+ZsHzbi/J9L6st/ZcwWx2a+mu/mjgn1SY3O/K8cGXuY3JEKB45UnP+V4Xt0vQztVvK3jVqtFvRtsuwaOedb8HJ6WU2vSNQ+o5bV/wNBmJenizo9EBX37mpO1Epq1Eb73ZCo1b4o25vO2Ty8vWkzH8xts6Y/+qJ6z/w/sPmtK/PK7F41Zj0eCtw3HvdnPr25sttnmBg5kpdL51usDEv9b/Y9DfvwXvd1XUtPX756WGq1mk/swr2UhceLnU/m3kqp2xS8oN3uJxVFTmLj9qB0gLYq+w2/NNGe2vtH7sb2KjsSB+VYL9S/HehEmomFgu9POBTdg150JiiInXcZV//11CvleLJnX8LUefqIPwT4PUZ2jt2p4LqxUTwjl3RyXxXcwvAKLllzJWpGV3OdvyhdGL3F0Od5TJi6fuguv/8DAAAAAAAAAAAAAAAAAADMmsP4d4Ki+wgAAAAAAAAAAAAAAAAAAAAAwKzrPP9X7ef/arTn/w4+imWSz//9uC2e/wtM378AAAD//0Lvezo=") mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0xc22, &(0x7f0000000340)='norecovery') 3.855237459s ago: executing program 3 (id=5596): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000040)) 3.674705731s ago: executing program 3 (id=5602): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.21173437s ago: executing program 3 (id=5612): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1, 0x1}, 0x8) 1.417346989s ago: executing program 2 (id=5639): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 1.327382215s ago: executing program 2 (id=5642): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x2, 0x1, 0x0, 0x0, 0xe, 0x0, 0x70bd2d, 0x0, [@sadb_address={0x5, 0x6, 0x2b, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x1}]}, 0x70}}, 0x0) 1.153820614s ago: executing program 2 (id=5645): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x13, 0x0, 0x0) 1.132480317s ago: executing program 0 (id=5646): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000180)={0x40, 0x6, 0xa5cf}) 1.075437149s ago: executing program 1 (id=5648): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x20000) 1.008394691s ago: executing program 2 (id=5649): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20) 1.008143687s ago: executing program 5 (id=5650): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x20, 0x36, 0x107, 0x0, 0x2, {0x1, 0x7c}, [@typed={0xc, 0xcc, 0x0, 0x0, @u64=0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0xc000) 931.377221ms ago: executing program 0 (id=5651): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) 928.770975ms ago: executing program 5 (id=5652): r0 = socket(0x1d, 0x2, 0x6) write$uinput_user_dev(r0, 0x0, 0x0) 881.448879ms ago: executing program 2 (id=5653): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000004c0)={0x2, @raw_data="d41e17b6409fa8be5f0b998a13e05ff1f1ef5212c937d1a0ea56d7672e9cc9ca192e7e6750b374e7c5adbfd2993db5ae5d31e9f312ad940b4dea2b01ee5c96edcf64ac31a2d6dd7272ce6435dcb50f6e1e9eba8c28fcb21448e01effeb135a1521154f6240aa26a0f9b27f0d79eb0db3249d597e15a4a3a21f2f60f2cfa21187729fa57988a228b111f207160205bc031ede874f9df81d753295dd6418e83b4e2b0af0b95262ba13173d797549c15e0eb6b2c01ff02118890df1a7d04ab3b58699a4d827b28507f3"}) 872.584924ms ago: executing program 0 (id=5654): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000500)={0x0}) 843.144424ms ago: executing program 5 (id=5655): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000000)) 764.065663ms ago: executing program 1 (id=5656): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newtaction={0x60, 0x30, 0x10b, 0x70bd28, 0x4, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x100000, 0x0, 0x3a773c6217fab0b, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 762.795743ms ago: executing program 2 (id=5657): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xd}, @typed={0x8, 0xc, 0x0, 0x0, @fd=r0}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 719.314911ms ago: executing program 0 (id=5658): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0xe697, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 712.334293ms ago: executing program 5 (id=5659): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) 603.030204ms ago: executing program 5 (id=5660): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e9"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 544.434209ms ago: executing program 1 (id=5661): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r0, &(0x7f00000008c0)}, 0x20) 408.188472ms ago: executing program 1 (id=5662): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00') openat$cgroup(r0, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) 313.251656ms ago: executing program 1 (id=5663): r0 = openat$smackfs_ambient(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000240)={'nl80211\x00'}, 0x9) 300.229964ms ago: executing program 0 (id=5664): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14) 11.688153ms ago: executing program 1 (id=5665): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0xe4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}}, 0x0) 11.308944ms ago: executing program 0 (id=5666): r0 = syz_io_uring_setup(0xef2, &(0x7f0000000000)={0x0, 0x70eb, 0x800, 0x0, 0x2cb}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000c80)={0xffffffff, 0x0, &(0x7f0000000b80)=[{0x0}], 0x0, 0x1}, 0x20) 0s ago: executing program 5 (id=5667): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0x1b, 0x4e20, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x38) kernel console output (not intermixed with test programs): ntered allmulticast mode [ 231.174461][T16670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4553'. [ 231.226742][T16672] xfrm0 speed is unknown, defaulting to 1000 [ 231.226936][T16672] xfrm0 speed is unknown, defaulting to 1000 [ 231.228759][T16672] xfrm0 speed is unknown, defaulting to 1000 [ 231.231653][T16672] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 231.237013][ T6893] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 231.280569][T16672] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 231.370482][T16672] xfrm0 speed is unknown, defaulting to 1000 [ 231.371432][T16672] xfrm0 speed is unknown, defaulting to 1000 [ 231.372111][T16672] xfrm0 speed is unknown, defaulting to 1000 [ 231.372786][T16672] xfrm0 speed is unknown, defaulting to 1000 [ 231.373462][T16672] xfrm0 speed is unknown, defaulting to 1000 [ 231.608512][T16692] loop4: detected capacity change from 0 to 2048 [ 231.672983][T16692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.730588][T16702] xt_TCPMSS: Only works on TCP SYN packets [ 231.753368][T16692] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.4563: corrupted xattr block 128: bad e_name length [ 231.761276][T16692] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.4563: corrupted xattr block 128: bad e_name length [ 231.765750][T16692] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.4563: corrupted xattr block 128: bad e_name length [ 231.766108][T16692] EXT4-fs error (device loop4): ext4_xattr_block_list:762: inode #15: comm syz.4.4563: corrupted xattr block 128: bad e_name length [ 231.825638][ T6904] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.998954][T16720] loop2: detected capacity change from 0 to 764 [ 232.131464][T16720] rock: directory entry would overflow storage [ 232.131523][T16720] rock: sig=0x4654, size=5, remaining=4 [ 232.151765][T16728] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 232.219963][T16731] loop2: detected capacity change from 0 to 512 [ 232.237768][T16732] loop3: detected capacity change from 0 to 512 [ 232.257682][T16731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.262208][T16732] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 232.262333][T16732] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 232.262365][T16732] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4580: Failed to acquire dquot type 1 [ 232.284234][T16732] EXT4-fs (loop3): 1 truncate cleaned up [ 232.285159][T16732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.313238][ T6900] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.333899][T16740] loop1: detected capacity change from 0 to 512 [ 232.391552][ T6899] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.432078][T16750] xt_hashlimit: overflow, rate too high: 0 [ 232.445841][T16740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 232.575703][ T6893] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 232.864727][T16777] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4601'. [ 232.868119][T16777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4601'. [ 233.088347][T16786] loop0: detected capacity change from 0 to 4096 [ 233.315196][T16810] netlink: 'syz.1.4617': attribute type 33 has an invalid length. [ 233.818215][T16843] loop2: detected capacity change from 0 to 8 [ 233.882912][T16817] loop1: detected capacity change from 0 to 32768 [ 233.894098][T16807] loop0: detected capacity change from 0 to 40427 [ 233.899028][T16807] F2FS-fs (loop0): heap/no_heap options were deprecated [ 233.901196][T16807] F2FS-fs (loop0): build fault injection rate: 19 [ 233.903110][T16807] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 233.910817][T16807] F2FS-fs (loop0): invalid crc value [ 233.941438][T16807] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4e8/0x7ac [ 234.004527][T16807] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1b0/0x3b0 [ 234.026310][T16807] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 234.085208][T16866] loop3: detected capacity change from 0 to 64 [ 234.116391][T16807] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x19c/0x9ac [ 234.116862][T16807] syz.0.4613: attempt to access beyond end of device [ 234.116862][T16807] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 234.157320][T16817] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 234.157381][T16817] allowing incompatible features above 0.0: (unknown version) [ 234.164730][T16817] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 234.164806][T16817] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 234.164918][T16817] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 234.165055][T16817] bcachefs (loop1): Version upgrade required: [ 234.165055][T16817] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 234.165055][T16817] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 234.165055][T16817] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 234.212840][T16817] bcachefs (loop1): dropping and reconstructing all alloc info [ 234.239190][T16874] __nla_validate_parse: 2 callbacks suppressed [ 234.242066][T16874] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4645'. [ 234.244700][T16874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4645'. [ 234.256563][T16817] bcachefs (loop1): accounting_read... [ 234.271160][ T6894] syz-executor: attempt to access beyond end of device [ 234.271160][ T6894] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 234.271259][ T6894] CPU: 1 UID: 0 PID: 6894 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-g25b50375179c #0 PREEMPT [ 234.271274][ T6894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.271282][ T6894] Call trace: [ 234.271286][ T6894] show_stack+0x2c/0x3c (C) [ 234.271306][ T6894] __dump_stack+0x30/0x40 [ 234.271320][ T6894] dump_stack_lvl+0xd8/0x12c [ 234.271334][ T6894] dump_stack+0x1c/0x28 [ 234.271346][ T6894] f2fs_handle_critical_error+0x34c/0x4b8 [ 234.271359][ T6894] f2fs_stop_checkpoint+0x5c/0x70 [ 234.271372][ T6894] f2fs_write_end_io+0x58c/0x818 [ 234.271384][ T6894] bio_endio+0x804/0x840 [ 234.271396][ T6894] submit_bio_noacct+0x158/0x176c [ 234.271409][ T6894] submit_bio+0x354/0x4d4 [ 234.271422][ T6894] f2fs_submit_write_bio+0x13c/0x324 [ 234.271433][ T6894] __submit_merged_bio+0x254/0x704 [ 234.271443][ T6894] __submit_merged_write_cond+0x23c/0x4ac [ 234.271455][ T6894] f2fs_write_data_pages+0x1d28/0x2634 [ 234.271466][ T6894] do_writepages+0x270/0x468 [ 234.271481][ T6894] filemap_fdatawrite+0x144/0x1e8 [ 234.271496][ T6894] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 234.271510][ T6894] f2fs_write_checkpoint+0x684/0x1694 [ 234.271523][ T6894] kill_f2fs_super+0x21c/0x584 [ 234.271535][ T6894] deactivate_locked_super+0xc4/0x12c [ 234.271546][ T6894] deactivate_super+0xe0/0x100 [ 234.271560][ T6894] cleanup_mnt+0x31c/0x3ac [ 234.271572][ T6894] __cleanup_mnt+0x20/0x30 [ 234.271582][ T6894] task_work_run+0x1dc/0x260 [ 234.271601][ T6894] do_notify_resume+0x174/0x1f4 [ 234.271613][ T6894] el0_svc+0xb8/0x180 [ 234.271626][ T6894] el0t_64_sync_handler+0x84/0x12c [ 234.271638][ T6894] el0t_64_sync+0x198/0x19c [ 234.271660][ T6894] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 234.354097][T16817] done [ 234.354159][T16817] bcachefs (loop1): alloc_read... done [ 234.358136][T16817] bcachefs (loop1): snapshots_read... done [ 234.358910][T16817] bcachefs (loop1): check_allocations... done [ 234.424543][T16817] bcachefs (loop1): going read-write [ 234.451659][T16817] bcachefs (loop1): done starting filesystem [ 234.495847][T16886] loop4: detected capacity change from 0 to 1024 [ 234.606651][T16817] bcachefs (loop1): inode 536870912 i_sectors underflow: 8 + -32 < 0 [ 234.608788][T16886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.663736][ T42] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 234.666346][ T42] u64s 5 type deleted 0:30:0 len 0 ver 0, , continuing [ 234.683907][T16817] bcachefs (loop1): inode 536870912 i_blocks underflow: 8 + -32 < 0 (ondisk 8) [ 234.688167][T16896] loop2: detected capacity change from 0 to 512 [ 234.693909][ T6904] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.729692][ T42] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 234.729764][ T42] u64s 5 type deleted 0:39:0 len 0 ver 0, , continuing [ 234.734390][ T42] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 234.734409][ T42] u64s 5 type deleted 0:44:0 len 0 ver 0, , continuing [ 234.741160][ T42] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 234.741218][ T42] u64s 5 type deleted 0:48:0 len 0 ver 0, , continuing [ 234.812924][T16896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.838041][T16896] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 234.877659][ T6893] bcachefs (loop1): shutting down [ 234.877717][ T6893] bcachefs (loop1): going read-only [ 234.877768][ T6893] bcachefs (loop1): finished waiting for writes to stop [ 234.904269][ T6900] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.911800][T16908] loop3: detected capacity change from 0 to 1024 [ 234.967586][ T6893] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11 [ 234.984070][ T531] bcachefs (loop1): bucket incorrectly unset in freespace btree [ 234.984110][ T531] u64s 5 type deleted 0:53:0 len 0 ver 0, , continuing [ 235.053112][ T6893] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 11 [ 235.084968][ T480] hfsplus: b-tree write err: -5, ino 4 [ 235.099723][ T6893] bcachefs (loop1): unclean shutdown complete, journal seq 12 [ 235.101088][ T6893] bcachefs (loop1): done going read-only, filesystem not clean [ 235.122092][T16917] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4661'. [ 235.171802][ T6893] bcachefs (loop1): shutdown complete [ 235.389980][T16929] loop4: detected capacity change from 0 to 4096 [ 235.399352][T16932] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.437334][T16934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4669'. [ 235.437494][T16934] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4669'. [ 235.446151][T16929] ntfs3(nullb0): Primary boot signature is not NTFS. [ 235.446330][T16929] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 235.540199][T16915] loop0: detected capacity change from 0 to 32768 [ 235.542952][T16915] XFS: attr2 mount option is deprecated. [ 235.598159][T16949] netlink: 'syz.4.4672': attribute type 12 has an invalid length. [ 235.600476][T16949] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.4672'. [ 235.610535][T16915] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 235.682865][T16954] loop3: detected capacity change from 0 to 2048 [ 235.691183][T16954] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 235.727457][T16954] syz.3.4675: attempt to access beyond end of device [ 235.727457][T16954] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 235.733611][T16956] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 235.742949][T16915] XFS (loop0): Ending clean mount [ 235.754078][T16915] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x50/0xf0, xfs_finobt block 0x20 [ 235.758316][T16915] XFS (loop0): Unmount and run xfs_repair [ 235.758377][T16915] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 235.758407][T16915] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 235.758434][T16915] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 235.758461][T16915] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 235.758488][T16915] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 235.758514][T16915] 00000040: ff ff ff ff ff ff 01 00 00 00 00 00 00 00 00 00 ................ [ 235.758541][T16915] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 235.758567][T16915] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 235.758603][T16915] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 235.758635][T16915] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x20 len 8 error 74 [ 235.758800][T16915] XFS (loop0): Failed to initialize disk quotas, err -117. [ 235.857581][T16915] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x50/0xf0, xfs_finobt block 0x20 [ 235.857805][T16915] XFS (loop0): Unmount and run xfs_repair [ 235.857830][T16915] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 235.857854][T16915] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 235.857876][T16915] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 235.857898][T16915] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 235.857919][T16915] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 235.857940][T16915] 00000040: ff ff ff ff ff ff 01 00 00 00 00 00 00 00 00 00 ................ [ 235.857961][T16915] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 235.857983][T16915] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 235.858004][T16915] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 235.858029][T16915] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x20 len 8 error 74 [ 235.957298][ T6894] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 235.957803][ T6894] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 236.002326][T16963] loop4: detected capacity change from 0 to 1024 [ 236.290788][T16981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4688'. [ 236.313035][T16983] openvswitch: netlink: EtherType 0 is less than min 600 [ 236.368539][T16986] netlink: 'syz.3.4691': attribute type 1 has an invalid length. [ 236.451811][T16994] loop0: detected capacity change from 0 to 256 [ 236.459515][T16994] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 236.459601][T16994] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 236.471487][T16994] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 236.599903][T17002] loop3: detected capacity change from 0 to 2048 [ 236.653051][T17002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.711457][T17002] fscrypt (loop3, inode 13): Error -61 getting encryption context [ 236.767095][ T6899] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.925672][T17030] cgroup: Invalid name [ 237.039063][T17037] loop4: detected capacity change from 0 to 1024 [ 237.273372][T17052] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 237.435132][T17065] netlink: 'syz.4.4728': attribute type 3 has an invalid length. [ 237.565312][T17076] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.4730' sets config #0 [ 237.671949][T17088] loop4: detected capacity change from 0 to 512 [ 237.701214][T17088] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.4736: bad orphan inode 4 [ 237.713207][T17088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.834042][ T6904] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.980559][T17097] loop0: detected capacity change from 0 to 32768 [ 238.180743][T17130] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.4759' sets config #147 [ 238.272258][T17143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4761'. [ 238.344307][T17097] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 238.344367][T17097] allowing incompatible features above 0.0: (unknown version) [ 238.344379][T17097] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 238.344434][T17097] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 238.344526][T17097] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 238.344669][T17097] bcachefs (loop0): Version upgrade required: [ 238.344669][T17097] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 238.344669][T17097] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 238.344669][T17097] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 238.369410][T17097] bcachefs (loop0): dropping and reconstructing all alloc info [ 238.408017][T17146] loop2: detected capacity change from 0 to 4096 [ 238.425391][T17097] bcachefs (loop0): invalid bkey in btree_node btree=dirents level=0: u64s 7 type dirent 4098:5675548428000973578:U32_MAX len 0 ver 0: -> 593924 type unknown [ 238.425454][T17097] dirent has stray data after name's NUL, deleting [ 238.446680][T17097] bcachefs (loop0): accounting_read... [ 238.467415][T17146] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 238.505541][T17146] ntfs3(loop2): ino=19, mi_enum_attr [ 238.505634][T17146] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 238.546501][T17097] done [ 238.546575][T17097] bcachefs (loop0): alloc_read... done [ 238.559163][T17097] bcachefs (loop0): snapshots_read... done [ 238.559843][T17097] bcachefs (loop0): check_allocations... [ 238.617984][T17146] ntfs3(loop2): failed to convert "c46c" to cp861 [ 238.624415][T17146] ntfs3(loop2): ino=20, mi_enum_attr [ 238.626230][T17097] done [ 238.651236][T17097] bcachefs (loop0): going read-write [ 238.656895][T17160] loop3: detected capacity change from 0 to 1024 [ 238.677535][T17132] loop1: detected capacity change from 0 to 32768 [ 238.692997][T17132] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4758 (17132) [ 238.704294][T17097] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 238.721040][T17097] bcachefs (loop0): done starting filesystem [ 238.745126][T17132] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 238.746170][T17132] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 238.746209][T17132] BTRFS info (device loop1): disk space caching is enabled [ 238.746233][T17132] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 238.816901][T16232] hfsplus: b-tree write err: -5, ino 4 [ 238.825196][T17132] BTRFS info (device loop1): rebuilding free space tree [ 238.862839][T17132] BTRFS info (device loop1): disabling free space tree [ 238.862928][T17132] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 238.862976][T17132] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 238.992186][T17132] BTRFS info (device loop1): balance: start -f -sprofiles=raid1c4,drange=1..7 [ 238.992353][T17132] BTRFS info (device loop1): balance: ended with status: 0 [ 239.026842][ T6894] bcachefs (loop0): shutting down [ 239.026914][ T6894] bcachefs (loop0): going read-only [ 239.026964][ T6894] bcachefs (loop0): finished waiting for writes to stop [ 239.066590][ T6893] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 239.087063][ T6894] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12 [ 239.212110][ T6894] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 12 [ 239.215585][ T6894] bcachefs (loop0): unclean shutdown complete, journal seq 13 [ 239.217149][ T6894] bcachefs (loop0): done going read-only, filesystem not clean [ 239.257099][T17210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.284727][ T6894] bcachefs (loop0): shutdown complete [ 239.362229][T17215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4789'. [ 239.772098][T17213] loop1: detected capacity change from 0 to 32768 [ 239.797527][T17213] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4788 (17213) [ 239.844776][T17213] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 239.844881][T17213] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 239.844918][T17213] BTRFS info (device loop1): disk space caching is enabled [ 239.844942][T17213] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 239.898414][T17217] loop4: detected capacity change from 0 to 32768 [ 239.933926][T17217] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 239.974207][T17213] BTRFS info (device loop1): rebuilding free space tree [ 239.988196][ T6904] ocfs2: Unmounting device (7,4) on (node local) [ 240.018795][T17213] BTRFS info (device loop1): disabling free space tree [ 240.018887][T17213] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 240.018916][T17213] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 240.072756][T17213] BTRFS info (device loop1): balance: start -ssoft,usage=172,vrange=0..18446744073709551615,limit=18446744065119617024,stripes=0..4294967295 [ 240.072930][T17213] BTRFS info (device loop1): balance: ended with status: 0 [ 240.220464][ T6893] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 240.274322][T17258] loop2: detected capacity change from 0 to 32768 [ 240.305197][T17258] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 240.422230][T17280] loop4: detected capacity change from 0 to 64 [ 240.425067][T17280] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop4 [ 240.438700][T17258] XFS (loop2): Ending clean mount [ 240.445740][T17282] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4810'. [ 240.450755][T17282] vxcan3: entered promiscuous mode [ 240.451152][T17282] vxcan3: entered allmulticast mode [ 240.465343][T17258] XFS (loop2): Quotacheck needed: Please wait. [ 240.480890][T17258] XFS (loop2): Quotacheck: Done. [ 240.659281][ T6900] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 240.728361][T17290] sp0: Synchronizing with TNC [ 240.907316][ T31] audit: type=1400 audit(2260.227:29): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=17303 comm="syz.2.4821" saddr=172.30.0.3 daddr=172.20.20.170 netif=wpan0 [ 240.962729][T17307] netlink: 'syz.1.4822': attribute type 1 has an invalid length. [ 240.962799][T17307] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4822'. [ 241.026029][T17314] @ÿ: renamed from bond_slave_0 (while UP) [ 241.577444][T17318] loop3: detected capacity change from 0 to 32768 [ 241.587656][T17318] (syz.3.4827,17318,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 241.587876][T17318] (syz.3.4827,17318,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 241.622722][T17318] JBD2: Ignoring recovery information on journal [ 241.636261][T17354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4846'. [ 241.638940][T17354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4846'. [ 241.713627][T17318] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 241.909045][T17374] loop0: detected capacity change from 0 to 2048 [ 241.945019][ T6899] ocfs2: Unmounting device (7,3) on (node local) [ 241.959451][T17374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.044774][T17382] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4857'. [ 242.077672][ T6894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.185837][T17394] loop2: detected capacity change from 0 to 1764 [ 242.365800][T17409] ieee802154 phy0 wpan0: encryption failed: -22 [ 242.765885][T17440] loop0: detected capacity change from 0 to 256 [ 242.828174][T17445] loop3: detected capacity change from 0 to 2048 [ 242.926111][T17456] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.011776][T17463] netlink: 'syz.4.4892': attribute type 4 has an invalid length. [ 243.014159][T17463] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4892'. [ 243.049814][T17445] syz.3.4885: attempt to access beyond end of device [ 243.049814][T17445] loop3: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 243.050038][T17445] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 243.050177][T17445] syz.3.4885: attempt to access beyond end of device [ 243.050177][T17445] loop3: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 243.050371][T17445] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 243.050406][T17445] NILFS (loop3): error -5 truncating bmap (ino=16) [ 243.326869][T17483] loop2: detected capacity change from 0 to 64 [ 243.359994][T17486] openvswitch: netlink: Missing key (keys=40, expected=100) [ 243.402901][T17488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4908'. [ 243.508754][T17498] loop2: detected capacity change from 0 to 1024 [ 243.527375][T17498] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 243.533958][T17498] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 243.534177][T17498] EXT4-fs (loop2): orphan cleanup on readonly fs [ 243.534529][T17498] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 243.534563][T17498] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 243.534825][T17498] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.4910: Freeing blocks not in datazone - block = 0, count = 4096 [ 243.535035][T17498] EXT4-fs (loop2): Remounting filesystem read-only [ 243.535100][T17498] EXT4-fs (loop2): 1 orphan inode deleted [ 243.535963][T17498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 243.656024][ T6900] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.739055][T17513] macsec0: entered promiscuous mode [ 243.739233][T17513] macsec0: entered allmulticast mode [ 243.739256][T17513] veth1_macvtap: entered allmulticast mode [ 243.982307][T17535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4928'. [ 244.329481][T17566] loop2: detected capacity change from 0 to 128 [ 244.344944][T17566] FAT-fs (loop2): bogus logical sector size 256 [ 244.345014][T17566] FAT-fs (loop2): Can't find a valid FAT filesystem [ 244.556891][T17575] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4947'. [ 244.556970][T17575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4947'. [ 244.617674][T17564] loop4: detected capacity change from 0 to 32768 [ 244.619889][T17545] loop0: detected capacity change from 0 to 32768 [ 244.638134][T17579] netlink: 'syz.1.4949': attribute type 11 has an invalid length. [ 244.794463][T17564] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 244.794525][T17564] allowing incompatible features above 0.0: (unknown version) [ 244.807549][T17545] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 244.807614][T17545] allowing incompatible features above 0.0: (unknown version) [ 244.807643][T17545] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 244.807667][T17545] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 244.807753][T17545] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 244.807870][T17545] bcachefs (loop0): Version upgrade required: [ 244.807870][T17545] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 244.807870][T17545] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 244.807870][T17545] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 244.815722][T17545] bcachefs (loop0): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 244.815751][T17545] gen 0 oldest_gen 0 data_type btree [ 244.815761][T17545] journal_seq_nonempty 6 [ 244.815771][T17545] journal_seq_empty 0 [ 244.815780][T17545] need_discard 1 [ 244.815790][T17545] need_inc_gen 1 [ 244.815804][T17545] dirty_sectors 0 [ 244.815814][T17545] stripe_sectors 1769482 [ 244.815824][T17545] cached_sectors 0 [ 244.815833][T17545] stripe 0 [ 244.815842][T17545] stripe_redundancy 0 [ 244.815852][T17545] io_time[READ] 1 [ 244.815861][T17545] io_time[WRITE] 768 [ 244.815870][T17545] fragmentation 0 [ 244.815880][T17545] bp_start 7 [ 244.815889][T17545] [ 244.815898][T17545] invalid data type (got 3 should be 9), deleting [ 244.816374][T17564] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 244.816625][T17564] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 244.816733][T17564] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 244.816870][T17564] bcachefs (loop4): Version upgrade required: [ 244.816870][T17564] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 244.816870][T17564] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 244.816870][T17564] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 244.862132][T17545] bcachefs (loop0): accounting_read... [ 244.909622][T17564] bcachefs (loop4): accounting_read... [ 244.936094][T17545] done [ 244.936166][T17545] bcachefs (loop0): alloc_read... done [ 244.936897][T17545] bcachefs (loop0): snapshots_read... done [ 244.943010][T17545] bcachefs (loop0): check_allocations... [ 244.947023][T17564] done [ 244.947089][T17564] bcachefs (loop4): alloc_read... done [ 244.947748][T17564] bcachefs (loop4): snapshots_read... done [ 244.948346][T17564] bcachefs (loop4): check_allocations... [ 244.952367][T17545] bcachefs (loop0): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 244.952387][T17545] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 244.964946][T17564] bcachefs (loop4): bucket 0:26 data type btree ptr gen 0 missing in alloc btree [ 244.964991][T17564] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 244.966357][T17564] bcachefs (loop4): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 244.966373][T17564] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 244.967497][T17545] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 244.967512][T17545] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 244.980493][T17545] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 244.980514][T17545] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 244.981554][T17545] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 244.981569][T17545] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 244.983541][T17564] bcachefs (loop4): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 244.983557][T17564] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 244.995727][T17545] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 244.995747][T17545] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 244.996382][T17564] bcachefs (loop4): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 244.996397][T17564] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 244.997232][T17545] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 244.997247][T17545] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 244.997861][T17545] bcachefs (loop0): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 244.997956][T17545] bcachefs (loop0): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 244.998225][T17545] bcachefs (loop0): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 244.998294][T17545] bcachefs (loop0): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 244.998491][T17545] bcachefs (loop0): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 244.998552][T17545] bcachefs (loop0): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 244.998671][T17545] bcachefs (loop0): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 244.998732][T17545] bcachefs (loop0): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 244.998845][T17545] bcachefs (loop0): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 244.998907][T17545] bcachefs (loop0): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 244.999015][T17545] bcachefs (loop0): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 244.999076][T17545] bcachefs (loop0): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 244.999184][T17545] bcachefs (loop0): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 244.999245][T17545] bcachefs (loop0): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 244.999349][T17545] bcachefs (loop0): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 244.999418][T17545] bcachefs (loop0): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 244.999550][T17545] bcachefs (loop0): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 244.999620][T17545] bcachefs (loop0): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 244.999728][T17545] bcachefs (loop0): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 245.019024][T17564] bcachefs (loop4): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 245.019059][T17564] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 245.019639][T17564] bcachefs (loop4): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing [ 245.019695][T17564] bcachefs (loop4): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 245.019957][T17564] bcachefs (loop4): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing [ 245.020007][T17564] bcachefs (loop4): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 245.020182][T17564] bcachefs (loop4): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing [ 245.020238][T17564] bcachefs (loop4): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 245.020331][T17564] bcachefs (loop4): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing [ 245.020380][T17564] bcachefs (loop4): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 245.020474][T17564] bcachefs (loop4): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing [ 245.020540][T17564] bcachefs (loop4): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 245.020646][T17564] bcachefs (loop4): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing [ 245.020695][T17564] bcachefs (loop4): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 245.020791][T17564] bcachefs (loop4): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing [ 245.020851][T17564] bcachefs (loop4): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing [ 245.020950][T17564] bcachefs (loop4): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing [ 245.020999][T17564] bcachefs (loop4): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing [ 245.021095][T17564] bcachefs (loop4): bucket 0:9 gen 0 has wrong data_type: got free, should be journal, fixing [ 245.021144][T17564] bcachefs (loop4): bucket 0:9 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 245.021609][T17545] bcachefs (loop0): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 245.022011][T17545] bcachefs (loop0): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 245.022042][T17545] Ratelimiting new instances of previous error [ 245.022298][T17545] bcachefs (loop0): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 245.022312][T17545] Ratelimiting new instances of previous error [ 245.028086][T17545] done [ 245.028456][T17545] bcachefs (loop0): going read-write [ 245.043014][T17564] bcachefs (loop4): bucket 0:10 gen 0 has wrong data_type: got free, should be journal, fixing [ 245.043092][T17564] bcachefs (loop4): bucket 0:10 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 245.043237][T17564] bcachefs (loop4): bucket 0:11 gen 0 has wrong data_type: got free, should be journal, fixing [ 245.043250][T17564] Ratelimiting new instances of previous error [ 245.043329][T17564] bcachefs (loop4): bucket 0:11 gen 0 data type journal has wrong dirty_sectors: got 0, should be 256, fixing [ 245.043341][T17564] Ratelimiting new instances of previous error [ 245.074473][T17564] done [ 245.090280][T17564] bcachefs (loop4): going read-write [ 245.148534][T17564] bcachefs (loop4): journal_replay... [ 245.188697][T17545] bcachefs (loop0): journal_replay... [ 245.312141][T17564] done [ 245.315065][T17564] bcachefs (loop4): check_alloc_info... done [ 245.323721][T17564] bcachefs (loop4): check_lrus... done [ 245.323927][T17564] bcachefs (loop4): check_btree_backpointers... done [ 245.324159][T17564] bcachefs (loop4): check_backpointers_to_extents... done [ 245.327847][T17564] bcachefs (loop4): check_extents_to_backpointers... [ 245.328526][T17564] bcachefs (loop4): scanning for missing backpointers in 5/128 buckets [ 245.328911][T17564] done [ 245.332055][T17564] bcachefs (loop4): check_alloc_to_lru_refs... done [ 245.336701][T17564] bcachefs (loop4): bucket_gens_init... done [ 245.353002][T17564] bcachefs (loop4): check_snapshot_trees... done [ 245.360304][T17564] bcachefs (loop4): check_snapshots... [ 245.360668][T17564] bcachefs (loop4): snapshot points to missing/incorrect tree: [ 245.360716][T17564] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 245.376062][T17564] done [ 245.392760][T17564] bcachefs (loop4): check_subvols... done [ 245.393202][T17564] bcachefs (loop4): check_subvol_children... done [ 245.393250][T17564] bcachefs (loop4): delete_dead_snapshots... done [ 245.393281][T17564] bcachefs (loop4): check_inodes... done [ 245.393727][T17564] bcachefs (loop4): check_extents... done [ 245.394036][T17564] bcachefs (loop4): check_indirect_extents... done [ 245.394082][T17564] bcachefs (loop4): check_dirents... [ 245.398228][T17545] done [ 245.403066][T17564] done [ 245.403867][T17545] bcachefs (loop0): check_alloc_info... [ 245.404165][T17564] bcachefs (loop4): check_xattrs... done [ 245.404589][T17564] bcachefs (loop4): check_root... done [ 245.404774][T17564] bcachefs (loop4): check_unreachable_inodes... done [ 245.404924][T17564] bcachefs (loop4): check_subvolume_structure... done [ 245.404973][T17564] bcachefs (loop4): check_directory_structure... done [ 245.405017][T17564] bcachefs (loop4): check_nlinks... [ 245.405350][T17564] bcachefs (loop4): inode 536870914 type reg has wrong i_nlink (2780562353, should be 1), fixing [ 245.406156][T17564] done [ 245.409683][T17564] bcachefs (loop4): check_rebalance_work... done [ 245.409926][T17564] bcachefs (loop4): resume_logged_ops... done [ 245.409971][T17564] bcachefs (loop4): delete_dead_inodes... [ 245.433213][T17545] done [ 245.433285][T17545] bcachefs (loop0): check_lrus... done [ 245.433409][T17545] bcachefs (loop0): check_btree_backpointers... done [ 245.433637][T17545] bcachefs (loop0): check_backpointers_to_extents... done [ 245.439961][T17545] bcachefs (loop0): check_extents_to_backpointers... [ 245.440651][T17545] bcachefs (loop0): scanning for missing backpointers in 5/128 buckets [ 245.441036][T17545] done [ 245.442889][T17564] done [ 245.442920][T17564] bcachefs (loop4): set_fs_needs_rebalance... [ 245.448698][T17545] bcachefs (loop0): check_alloc_to_lru_refs... done [ 245.449356][T17545] bcachefs (loop0): bucket_gens_init... [ 245.453964][T17615] bcachefs (loop4): Detected missing backpointers in bucket 34, now have 1/128 with missing [ 245.482779][T17564] done [ 245.483058][T17545] done [ 245.488755][T17545] bcachefs (loop0): check_snapshot_trees... done [ 245.488894][T17545] bcachefs (loop0): check_snapshots... [ 245.489125][T17545] bcachefs (loop0): snapshot points to missing/incorrect tree: [ 245.489139][T17545] u64s 8 type snapshot 0:4294967295:0 len 0 ver 0: subvol parent 0 children 0 0 subvol 1 tree 0, fixing [ 245.506476][T17607] loop3: detected capacity change from 0 to 32768 [ 245.510219][T17545] done [ 245.512862][T17545] bcachefs (loop0): check_subvols... done [ 245.544359][T17607] ERROR: (device loop3): dtSearch: stack overrun! [ 245.544359][T17607] [ 245.556966][T17564] bcachefs (loop4): done starting filesystem [ 245.566530][T17607] ERROR: (device loop3): remounting filesystem as read-only [ 245.566612][T17607] btstack dump: [ 245.566630][T17607] bn = 0, index = 4 [ 245.566648][T17607] bn = 0, index = 4 [ 245.566667][T17607] bn = 0, index = 4 [ 245.566685][T17607] bn = 0, index = 4 [ 245.566703][T17607] bn = 0, index = 4 [ 245.566720][T17607] bn = 0, index = 4 [ 245.566738][T17607] bn = 0, index = 4 [ 245.566756][T17607] bn = 0, index = 0 [ 245.566795][T17607] jfs_lookup: dtSearch returned -5 [ 245.613920][T17545] bcachefs (loop0): check_subvol_children... done [ 245.614042][T17545] bcachefs (loop0): delete_dead_snapshots... done [ 245.614085][T17545] bcachefs (loop0): check_inodes... done [ 245.615208][T17545] bcachefs (loop0): check_extents... done [ 245.615546][T17545] bcachefs (loop0): check_indirect_extents... done [ 245.615610][T17545] bcachefs (loop0): check_dirents... done [ 245.616357][T17545] bcachefs (loop0): check_xattrs... done [ 245.616604][T17545] bcachefs (loop0): check_root... done [ 245.616773][T17545] bcachefs (loop0): check_unreachable_inodes... done [ 245.618817][T17614] bcachefs (loop0): Detected missing backpointers in bucket 34, now have 1/128 with missing [ 245.640367][T17545] bcachefs (loop0): check_subvolume_structure... done [ 245.640516][T17545] bcachefs (loop0): check_directory_structure... done [ 245.640566][T17545] bcachefs (loop0): check_nlinks... done [ 245.640932][T17545] bcachefs (loop0): check_rebalance_work... done [ 245.641126][T17545] bcachefs (loop0): resume_logged_ops... done [ 245.641170][T17545] bcachefs (loop0): delete_dead_inodes... done [ 245.641226][T17545] bcachefs (loop0): set_fs_needs_rebalance... done [ 245.707418][ T6904] bcachefs (loop4): shutting down [ 245.707513][ T6904] bcachefs (loop4): going read-only [ 245.707545][ T6904] bcachefs (loop4): finished waiting for writes to stop [ 245.710129][T17545] bcachefs (loop0): done starting filesystem [ 245.818136][ T6894] bcachefs (loop0): shutting down [ 245.818198][ T6894] bcachefs (loop0): going read-only [ 245.818967][ T6894] bcachefs (loop0): finished waiting for writes to stop [ 245.933154][ T6894] bcachefs (loop0): flushing journal and stopping allocators, journal seq 26 [ 245.934541][ T6894] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 26 [ 245.938682][ T6894] bcachefs (loop0): clean shutdown complete, journal seq 27 [ 245.939895][ T6894] bcachefs (loop0): done going read-only, filesystem not clean [ 246.037013][ T6894] bcachefs (loop0): shutdown complete [ 246.206708][T17646] loop1: detected capacity change from 0 to 1024 [ 246.250569][T17637] loop2: detected capacity change from 0 to 32768 [ 246.303450][ T42] hfsplus: b-tree write err: -5, ino 8 [ 246.369548][T17644] loop3: detected capacity change from 0 to 32768 [ 246.386007][T17644] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4972 (17644) [ 246.429195][T17644] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 246.429300][T17644] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 246.429336][T17644] BTRFS info (device loop3): disk space caching is enabled [ 246.429360][T17644] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 246.542837][T17644] BTRFS info (device loop3): rebuilding free space tree [ 246.584694][T17644] BTRFS info (device loop3): disabling free space tree [ 246.584825][T17644] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 246.584854][T17644] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 246.626718][T17648] loop1: detected capacity change from 0 to 32768 [ 246.681433][T17644] BTRFS error (device loop3): balance: invalid convert metadata profile single [ 246.700846][T17675] loop0: detected capacity change from 0 to 2048 [ 246.718283][T17675] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 246.745450][ T6899] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 246.790676][T17648] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=4,compression=lz4,degraded=no,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow,no_data_io [ 246.829459][T17648] allowing incompatible features above 0.0: (unknown version) [ 246.829523][T17648] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 246.829588][T17648] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 246.829698][T17648] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 246.829840][T17648] bcachefs (loop1): Version upgrade required: [ 246.829840][T17648] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 246.829840][T17648] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 246.829840][T17648] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 246.830040][T17648] bcachefs (loop1): dropping and reconstructing all alloc info [ 246.889646][T17648] bcachefs (loop1): accounting_read... done [ 246.932442][T17648] bcachefs (loop1): alloc_read... done [ 246.932628][T17648] bcachefs (loop1): snapshots_read... done [ 246.932982][T17648] bcachefs (loop1): done starting filesystem [ 247.037184][ T6893] bcachefs (loop1): shutting down [ 247.126229][ T6893] bcachefs (loop1): shutdown complete [ 247.403526][T17706] loop3: detected capacity change from 0 to 512 [ 247.419843][T17706] EXT4-fs: journaled quota format not specified [ 247.540779][T17712] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4994'. [ 247.689568][T17724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4999'. [ 247.696621][T17724] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5) [ 247.803522][T17734] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 248.041699][T17732] loop1: detected capacity change from 0 to 32768 [ 248.044618][T17732] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5003 (17732) [ 248.052849][T17732] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 248.052953][T17732] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 248.052995][T17732] BTRFS info (device loop1): using free-space-tree [ 248.120128][T17732] BTRFS info (device loop1): rebuilding free space tree [ 248.160728][T17732] BTRFS info (device loop1): balance: start -f -sdrange=33235..8,limit=2..2415919104 [ 248.160909][T17732] BTRFS info (device loop1): balance: ended with status: 0 [ 248.237215][ T6893] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 248.596968][T17770] loop2: detected capacity change from 0 to 32768 [ 248.636301][T17783] No such timeout policy "syz1" [ 248.664381][T17787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5023'. [ 249.001095][T17807] loop1: detected capacity change from 0 to 4096 [ 249.002208][T17807] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 249.049414][T17807] ntfs3(loop1): ino=19, mi_enum_attr [ 249.049494][T17807] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 249.110085][T17807] ntfs3(loop1): failed to convert "c46c" to iso8859-2 [ 249.119275][T17807] ntfs3(loop1): ino=20, mi_enum_attr [ 249.123174][T17821] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5039'. [ 249.125869][T17821] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5039'. [ 249.128505][T17821] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5039'. [ 249.157184][T17823] netlink: 'syz.3.5041': attribute type 2 has an invalid length. [ 249.505833][T17855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5057'. [ 249.605938][T17864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.606185][T17864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.995734][T17900] loop2: detected capacity change from 0 to 256 [ 250.003041][T17899] netlink: 'syz.3.5077': attribute type 10 has an invalid length. [ 250.013254][T17899] team0: Device hsr_slave_0 failed to register rx_handler [ 250.040864][T17900] FAT-fs (loop2): Directory bread(block 64) failed [ 250.040948][T17900] FAT-fs (loop2): Directory bread(block 65) failed [ 250.041002][T17900] FAT-fs (loop2): Directory bread(block 66) failed [ 250.041034][T17900] FAT-fs (loop2): Directory bread(block 67) failed [ 250.041083][T17900] FAT-fs (loop2): Directory bread(block 68) failed [ 250.041114][T17900] FAT-fs (loop2): Directory bread(block 69) failed [ 250.041163][T17900] FAT-fs (loop2): Directory bread(block 70) failed [ 250.041195][T17900] FAT-fs (loop2): Directory bread(block 71) failed [ 250.041246][T17900] FAT-fs (loop2): Directory bread(block 72) failed [ 250.041277][T17900] FAT-fs (loop2): Directory bread(block 73) failed [ 250.166039][T17908] loop1: detected capacity change from 0 to 16 [ 250.187207][T17908] erofs (device loop1): mounted with root inode @ nid 36. [ 250.215287][T17908] erofs (device loop1): read error -22 @ 43 of nid 36 [ 250.249236][T17904] loop3: detected capacity change from 0 to 32768 [ 250.273505][T17904] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 250.401715][T17904] XFS (loop3): Ending clean mount [ 250.409259][T17904] XFS (loop3): Quotacheck needed: Please wait. [ 250.477936][T17904] XFS (loop3): Quotacheck: Done. [ 250.604015][T17938] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5093'. [ 250.604231][T17938] tc_dump_action: action bad kind [ 250.613386][T17940] openvswitch: netlink: IPv4 tunnel dst address is zero [ 250.673953][T17942] loop1: detected capacity change from 0 to 1024 [ 250.698538][ T6899] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 250.766336][T16232] hfsplus: b-tree write err: -5, ino 4 [ 250.838185][T17936] loop2: detected capacity change from 0 to 32768 [ 250.841616][T17936] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5092 (17936) [ 250.847206][T17936] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 250.847313][T17936] BTRFS info (device loop2): using sha256 (sha256-arm64) checksum algorithm [ 250.847353][T17936] BTRFS info (device loop2): using free-space-tree [ 251.024947][ T6900] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 251.098119][T17966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5099'. [ 251.511031][T17997] ip6t_srh: unknown srh match flags 5040 [ 251.678567][T18008] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5119'. [ 251.831398][T18004] loop3: detected capacity change from 0 to 32768 [ 251.884777][T18004] JBD2: Ignoring recovery information on journal [ 251.920909][T18004] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 252.014805][ T6899] ocfs2: Unmounting device (7,3) on (node local) [ 252.194516][ T6837] Bluetooth: hci2: unexpected event for opcode 0x2023 [ 252.300792][T18006] loop1: detected capacity change from 0 to 32768 [ 252.301838][T18006] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5118 (18006) [ 252.318728][T18006] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 252.318834][T18006] BTRFS info (device loop1): using sha256 (sha256-arm64) checksum algorithm [ 252.318875][T18006] BTRFS info (device loop1): using free-space-tree [ 252.430784][T18062] xt_TCPMSS: Only works on TCP SYN packets [ 252.472775][ T6893] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 253.331099][T18139] netlink: 'syz.1.5169': attribute type 2 has an invalid length. [ 253.416490][T18144] netlink: 9144 bytes leftover after parsing attributes in process `syz.3.5171'. [ 253.448471][T18146] loop0: detected capacity change from 0 to 64 [ 253.782332][T18169] loop1: detected capacity change from 0 to 1764 [ 253.854789][T18172] netlink: 'syz.3.5182': attribute type 13 has an invalid length. [ 253.862629][T18172] gretap0: refused to change device tx_queue_len [ 253.864853][T18172] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 253.982854][T18145] loop2: detected capacity change from 0 to 32768 [ 254.281819][T18158] loop0: detected capacity change from 0 to 32768 [ 254.285691][T18158] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5175 (18158) [ 254.300546][T18158] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 254.300656][T18158] BTRFS info (device loop0): using sha256 (sha256-arm64) checksum algorithm [ 254.300698][T18158] BTRFS info (device loop0): using free-space-tree [ 254.428573][T18185] loop3: detected capacity change from 0 to 32768 [ 254.451567][T18185] BTRFS: device /dev/loop3 (7:3) using temp-fsid 1198ec05-e9b4-449b-85a1-a5ccd4dfb06d [ 254.454913][T18185] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5188 (18185) [ 254.471449][ T6894] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 254.478385][T18185] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 254.478487][T18185] BTRFS info (device loop3): using sha256 (sha256-arm64) checksum algorithm [ 254.478527][T18185] BTRFS info (device loop3): using free-space-tree [ 254.746350][ T6899] BTRFS info (device loop3): last unmount of filesystem 1198ec05-e9b4-449b-85a1-a5ccd4dfb06d [ 254.886178][T18254] PKCS7: Unknown OID: [4] 0.0 [ 254.886238][T18254] PKCS7: Only support pkcs7_signedData type [ 254.926220][T18258] SET target dimension over the limit! [ 255.131018][T18274] loop2: detected capacity change from 0 to 64 [ 255.192176][T18274] Trying to free block not in datazone [ 255.206990][T18274] Trying to free block not in datazone [ 255.623332][T18307] sock: sock_timestamping_bind_phc: sock not bind to device [ 255.720452][ T31] audit: type=1400 audit(2274.028:30): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=18316 comm="syz.3.5228" path="/dev/v4l-subdev0" dev="devtmpfs" ino=829 [ 255.720543][ T31] audit: type=1400 audit(2274.028:31): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=18316 comm="syz.3.5228" path="/dev/v4l-subdev0" dev="devtmpfs" ino=829 [ 255.720622][ T31] audit: type=1400 audit(2274.037:32): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18313 comm="syz.1.5226" name="newroot" dev="tmpfs" ino=2 [ 255.720675][ T31] audit: type=1400 audit(2274.037:33): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18313 comm="syz.1.5226" name="/" dev="devtmpfs" ino=1 [ 255.720720][ T31] audit: type=1400 audit(2274.037:34): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=18313 comm="syz.1.5226" name="video8" dev="devtmpfs" ino=840 [ 255.720764][ T31] audit: type=1400 audit(2274.037:35): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=18313 comm="syz.1.5226" path="/dev/video8" dev="devtmpfs" ino=840 [ 255.726405][ T31] audit: type=1400 audit(2274.037:36): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=18313 comm="syz.1.5226" path="/dev/video8" dev="devtmpfs" ino=840 [ 255.726461][ T31] audit: type=1400 audit(2274.037:37): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=18313 comm="syz.1.5226" path="/dev/video8" dev="devtmpfs" ino=840 [ 255.731500][ T31] audit: type=1400 audit(2274.046:38): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6900 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 255.731630][ T31] audit: type=1400 audit(2274.046:39): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6900 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 255.794337][T18320] loop0: detected capacity change from 0 to 512 [ 255.839974][T18320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.844050][T18325] netlink: 'syz.3.5232': attribute type 32 has an invalid length. [ 255.974968][ T6894] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.288384][T18353] loop3: detected capacity change from 0 to 64 [ 256.306955][T18353] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 256.326511][T18356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5241'. [ 256.326582][T18356] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5241'. [ 256.618652][T18374] kAFS: No cell specified [ 256.739702][T18384] loop0: detected capacity change from 0 to 512 [ 256.749848][T18384] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 256.749917][T18384] EXT4-fs (loop0): group descriptors corrupted! [ 256.942889][T18399] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5263'. [ 256.951643][T18399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 257.008296][T18406] loop2: detected capacity change from 0 to 128 [ 257.025781][T18406] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 257.032681][T18406] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 257.172722][T18410] loop0: detected capacity change from 0 to 128 [ 257.204170][T18415] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5269'. [ 257.215314][T18410] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 257.315383][ T6894] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 257.335692][T18417] netlink: 'syz.3.5271': attribute type 1 has an invalid length. [ 257.335761][T18417] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5271'. [ 257.370540][T18419] loop2: detected capacity change from 0 to 256 [ 257.522388][T18426] loop0: detected capacity change from 0 to 128 [ 257.593642][ T2407] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.599478][ T2407] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.654647][T18433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5279'. [ 257.654899][T18433] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5279'. [ 258.971097][T18401] loop1: detected capacity change from 0 to 131072 [ 259.008754][T18495] loop3: detected capacity change from 0 to 8 [ 259.102888][T18401] F2FS-fs (loop1): Mounted with checkpoint version = 753bd00b [ 259.198750][T18505] loop0: detected capacity change from 0 to 1024 [ 259.268803][T18511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5314'. [ 259.271397][T18511] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5314'. [ 259.280367][ T13] hfsplus: b-tree write err: -5, ino 4 [ 259.319269][T18513] loop3: detected capacity change from 0 to 4096 [ 259.363225][T18515] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 259.458150][T18513] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 259.487856][T18513] Remounting filesystem read-only [ 259.536463][T18522] netlink: 'syz.3.5322': attribute type 10 has an invalid length. [ 259.541839][T18522] hsr0: entered promiscuous mode [ 259.545869][T18522] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 259.548887][T18522] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 259.552819][T18522] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 259.841060][T18540] netlink: 'syz.3.5330': attribute type 3 has an invalid length. [ 260.131210][T18537] loop2: detected capacity change from 0 to 32768 [ 260.232112][T18561] (unnamed net_device) (uninitialized): option mode: invalid value (81) [ 260.394832][T18573] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5346'. [ 260.594307][T18584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5351'. [ 260.607895][T18580] loop0: detected capacity change from 0 to 8192 [ 260.788533][T18562] loop1: detected capacity change from 0 to 32768 [ 260.792166][T18562] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5340 (18562) [ 260.803499][T18562] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 260.803956][T18562] BTRFS info (device loop1): using sha256 (sha256-arm64) checksum algorithm [ 260.803997][T18562] BTRFS info (device loop1): disk space caching is enabled [ 260.804022][T18562] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 260.960505][T18562] BTRFS info (device loop1): rebuilding free space tree [ 261.006988][T18562] BTRFS info (device loop1): disabling free space tree [ 261.007077][T18562] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 261.007132][T18562] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 261.098121][ T31] kauditd_printk_skb: 81918 callbacks suppressed [ 261.098196][ T31] audit: type=1400 audit(2279.056:32407): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6900 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 261.098239][ T31] audit: type=1400 audit(2279.056:32408): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6900 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 261.098279][ T31] audit: type=1400 audit(2279.056:32409): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6900 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 261.098317][ T31] audit: type=1400 audit(2279.056:32410): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6900 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 261.098355][ T31] audit: type=1400 audit(2279.056:32411): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=6900 comm="syz-executor" name="1068" dev="tmpfs" ino=5519 [ 261.098394][ T31] audit: type=1400 audit(2279.056:32412): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=6900 comm="syz-executor" path="/1068" dev="tmpfs" ino=5519 [ 261.098432][ T31] audit: type=1400 audit(2279.056:32413): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=6900 comm="syz-executor" path="/1068" dev="tmpfs" ino=5519 [ 261.098469][ T31] audit: type=1400 audit(2279.056:32414): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6900 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 261.098507][ T31] audit: type=1400 audit(2279.056:32415): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6900 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 261.098545][ T31] audit: type=1400 audit(2279.056:32416): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6900 comm="syz-executor" name="1068" dev="tmpfs" ino=5519 [ 261.143544][T18562] BTRFS info (device loop1 state M): max_inline set to 0 [ 261.177699][ T6893] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 261.487066][T18636] loop2: detected capacity change from 0 to 1024 [ 261.530067][ T13] hfsplus: b-tree write err: -5, ino 4 [ 261.583959][T18639] loop1: detected capacity change from 0 to 4096 [ 261.597684][T18639] ntfs3(loop1): It is recommened to use chkdsk. [ 261.601819][T18639] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 261.604077][T18639] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 261.606295][T18639] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 261.608792][T18639] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 261.611170][T18639] ntfs3(loop1): try to read out of volume at offset 0x3fffffc1c00 [ 261.613579][T18639] ntfs3(loop1): try to read out of volume at offset 0x3fffffc2c00 [ 261.615856][T18639] ntfs3(loop1): try to read out of volume at offset 0x3fffffc4c00 [ 261.618258][T18639] ntfs3(loop1): try to read out of volume at offset 0x3fffffc8c00 [ 261.618336][T18639] ntfs3(loop1): try to read out of volume at offset 0x3fffffd0c00 [ 262.059046][T18665] C: renamed from team_slave_0 (while UP) [ 262.094697][T18665] netlink: 'syz.1.5383': attribute type 3 has an invalid length. [ 262.094783][T18665] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5383'. [ 262.095221][T18665] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 262.227709][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 262.235636][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 262.237351][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 262.245279][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 262.248534][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 262.470835][T18691] tmpfs: Bad value for 'mpol' [ 262.590020][T18669] xfrm0 speed is unknown, defaulting to 1000 [ 262.747778][T18709] xt_addrtype: ipv6 does not support BROADCAST matching [ 262.900392][ T6837] Bluetooth: hci2: unexpected event for opcode 0x0c05 [ 263.053685][T18730] loop0: detected capacity change from 0 to 16 [ 263.055540][T18730] erofs (device loop0): mounted with root inode @ nid 36. [ 263.068911][T18669] chnl_net:caif_netlink_parms(): no params data found [ 263.334523][T18669] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.334643][T18669] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.334800][T18669] bridge_slave_0: entered allmulticast mode [ 263.335686][T18669] bridge_slave_0: entered promiscuous mode [ 263.357071][T18669] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.357166][T18669] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.357290][T18669] bridge_slave_1: entered allmulticast mode [ 263.358165][T18669] bridge_slave_1: entered promiscuous mode [ 263.467311][T18725] loop2: detected capacity change from 0 to 32768 [ 263.481236][T18725] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5410 (18725) [ 263.499773][T18725] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 263.502879][T18725] BTRFS info (device loop2): using sha256 (sha256-arm64) checksum algorithm [ 263.505918][T18725] BTRFS info (device loop2): using free-space-tree [ 263.512798][T18669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.514698][T18669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.730359][T18669] team0: Port device team_slave_0 added [ 263.744745][ T6900] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 263.754231][T18669] team0: Port device team_slave_1 added [ 263.909938][T18669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.910010][T18669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.910088][T18669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.929583][T18669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.929654][T18669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.929728][T18669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.176015][T18787] loop0: detected capacity change from 0 to 4096 [ 264.186035][T18787] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 264.285527][T18787] ntfs3(loop0): ino=1a, mi_enum_attr [ 264.285619][T18787] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 264.348982][T18787] ntfs3(loop0): ino=1e, "file1" ntfs_sync_inode failed, -22. [ 264.449148][ T480] ntfs3(loop0): ino=1e, ntfs3_write_inode failed, -22. [ 264.459110][ T6837] Bluetooth: hci5: command tx timeout [ 264.494745][T18669] hsr_slave_0: entered promiscuous mode [ 264.497193][T18669] hsr_slave_1: entered promiscuous mode [ 264.499361][T18669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.501704][T18669] Cannot create hsr debugfs directory [ 264.875481][T18790] loop1: detected capacity change from 0 to 32768 [ 264.879746][T18790] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5433 (18790) [ 264.907089][T18814] loop3: detected capacity change from 0 to 164 [ 264.915435][T18790] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 264.915550][T18790] BTRFS info (device loop1): using sha256 (sha256-arm64) checksum algorithm [ 264.915593][T18790] BTRFS info (device loop1): disk space caching is enabled [ 264.915631][T18790] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 264.989519][T18790] BTRFS info (device loop1): rebuilding free space tree [ 265.006130][T18790] BTRFS info (device loop1): disabling free space tree [ 265.006208][T18790] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 265.006236][T18790] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 265.107432][T18836] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5447'. [ 265.219244][ T6893] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 265.387488][T18669] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 265.410777][T18669] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 265.437022][T18669] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 265.511812][T18669] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 265.586217][T18859] futex_wake_op: syz.0.5459 tries to shift op by -1; fix this program [ 265.658925][T18870] loop0: detected capacity change from 0 to 256 [ 265.760700][T18669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.766715][T18669] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.827276][ T531] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.827367][ T531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.828862][ T531] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.828910][ T531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.847790][T18669] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 265.850871][T18669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.154864][T18898] loop3: detected capacity change from 0 to 64 [ 266.193868][T18669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.463998][ T31] kauditd_printk_skb: 75664 callbacks suppressed [ 266.464069][ T31] audit: type=1400 audit(2284.066:62520): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=6131 comm="udevd" path="/sys/devices/virtual/block/loop1/mq/0/cpu0" dev="sysfs" ino=18689 [ 266.471617][ T31] audit: type=1400 audit(2284.066:62521): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6131 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 266.471701][ T31] audit: type=1400 audit(2284.066:62522): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6131 comm="udevd" name="/" dev="sysfs" ino=1 [ 266.471764][ T31] audit: type=1400 audit(2284.066:62523): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6131 comm="udevd" name="devices" dev="sysfs" ino=7 [ 266.471809][ T31] audit: type=1400 audit(2284.066:62524): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6131 comm="udevd" name="virtual" dev="sysfs" ino=1327 [ 266.471862][ T31] audit: type=1400 audit(2284.066:62525): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6131 comm="udevd" name="block" dev="sysfs" ino=16821 [ 266.471905][ T31] audit: type=1400 audit(2284.066:62526): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6131 comm="udevd" name="loop1" dev="sysfs" ino=18597 [ 266.471948][ T31] audit: type=1400 audit(2284.066:62527): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6131 comm="udevd" name="/" dev="nvme0n1p2" ino=2 [ 266.471991][ T31] audit: type=1400 audit(2284.066:62528): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6131 comm="udevd" name="/" dev="sysfs" ino=1 [ 266.472035][ T31] audit: type=1400 audit(2284.066:62529): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6131 comm="udevd" name="devices" dev="sysfs" ino=7 [ 266.663553][T18669] veth0_vlan: entered promiscuous mode [ 266.679671][ T6837] Bluetooth: hci5: command tx timeout [ 266.722387][T18669] veth1_vlan: entered promiscuous mode [ 266.763963][T18669] veth0_macvtap: entered promiscuous mode [ 266.767810][T18669] veth1_macvtap: entered promiscuous mode [ 266.784918][T18669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.790846][T18669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.795250][T18669] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.805127][T18669] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.805199][T18669] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.805237][T18669] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.995507][ T480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.997910][ T480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.029418][T18942] loop2: detected capacity change from 0 to 4096 [ 267.046874][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.046938][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.055920][T18948] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.114897][T18942] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 267.118628][T18942] ntfs3(loop2): Failed to load $Extend (-22). [ 267.118684][T18942] ntfs3(loop2): Failed to initialize $Extend. [ 267.222848][T18952] nbd: must specify an index to disconnect [ 267.437059][T18963] loop1: detected capacity change from 0 to 512 [ 267.453490][T18963] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 267.456101][T18963] EXT4-fs (loop1): orphan cleanup on readonly fs [ 267.460259][T18963] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.5501: Failed to acquire dquot type 1 [ 267.466965][T18963] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5501: bg 0: block 40: padding at end of block bitmap is not set [ 267.472205][T18963] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 267.479891][T18963] EXT4-fs (loop1): 1 truncate cleaned up [ 267.493022][T18963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 267.543443][T18944] loop0: detected capacity change from 0 to 32768 [ 267.601338][T18963] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #16: comm syz.1.5501: corrupted xattr block 31: invalid header [ 267.605759][T18963] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #16: comm syz.1.5501: corrupted xattr block 31: invalid header [ 267.610832][T18963] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #16: comm syz.1.5501: corrupted xattr block 31: invalid header [ 267.615058][T18963] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.5501: bad symlink. [ 267.674884][T18944] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 267.674932][T18944] allowing incompatible features above 0.0: (unknown version) [ 267.674961][T18944] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 267.675023][T18944] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 267.675123][T18944] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 267.675195][T18944] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 267.675195][T18944] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 267.721548][ T6893] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.769942][T18983] openvswitch: netlink: IP tunnel TTL not specified. [ 267.773861][T18944] bcachefs (loop0): btree node read error at btree alloc level 0/0 [ 267.773945][T18944] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 75277f57b0c8c24 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 267.773960][T18944] loop0 node offset 8/32 bset u64s 375: checksum error, type crc32c_nonzero: got 2f0947d7 should be 1bdb8771 [ 267.773972][T18944] flagging btree alloc lost data [ 267.773982][T18944] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 267.773993][T18944] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 267.774005][T18944] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 267.774016][T18944] running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 267.774028][T18944] ret fsck_errors_not_fixed [ 267.775342][T18944] bcachefs (loop0): error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 267.815292][T18944] bcachefs (loop0): btree node read error at btree backpointers level 0/0 [ 267.815336][T18944] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 29c4a2706086d15a written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 267.815367][T18944] loop0 node offset 0/24 bset u64s 0: checksum error, type crc32c_nonzero: got 40d8142c should be f5d8559b [ 267.815380][T18944] flagging btree backpointers lost data [ 267.815390][T18944] running recovery pass check_btree_backpointers (15), currently at recovery_pass_empty (0) [ 267.815402][T18944] ret fsck_errors_not_fixed [ 267.815555][T18944] bcachefs (loop0): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing [ 267.817083][T18944] bcachefs (loop0): check_topology... done [ 267.832638][T18944] bcachefs (loop0): accounting_read... done [ 267.859521][T18944] bcachefs (loop0): alloc_read... done [ 267.860129][T18944] bcachefs (loop0): snapshots_read... done [ 267.860732][T18944] bcachefs (loop0): check_allocations... [ 267.861387][T18944] bcachefs (loop0): bucket 0:36 data type user ptr gen 0 missing in alloc btree [ 267.861403][T18944] while marking u64s 7 type extent 4098:24:U32_MAX len 24 ver 0: durability: 1 crc: c_size 8 size 24 offset 0 nonce 0 csum crc32c 0:4925b703 compress lz4 ptr: 0:36:0 gen 0, fixing [ 267.861712][T18944] bcachefs (loop0): bucket 0:34 data type user ptr gen 0 missing in alloc btree [ 267.861726][T18944] while marking u64s 7 type extent 536870913:8:U32_MAX len 8 ver 0: durability: 1 crc: c_size 8 size 8 offset 0 nonce 0 csum crc32c 0:cec3872e compress incompressible ptr: 0:34:0 gen 0, fixing [ 267.861942][T18944] bcachefs (loop0): bucket 0:27 data type btree ptr gen 0 missing in alloc btree [ 267.861954][T18944] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq b77ad9ee5a61c7f0 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0, fixing [ 267.862333][T18944] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 267.862346][T18944] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 267.906063][T18989] netlink: 'syz.3.5510': attribute type 5 has an invalid length. [ 267.911055][T18944] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree [ 267.911099][T18944] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 267.911540][T18944] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 267.911554][T18944] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 267.912304][T18944] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree [ 267.912320][T18944] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 267.912567][T18944] bcachefs (loop0): bucket 0:31 data type btree ptr gen 0 missing in alloc btree [ 267.912579][T18944] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1477538288e6fe55 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing [ 267.912879][T18944] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 267.912892][T18944] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 267.957606][T18944] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree [ 267.957648][T18944] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 267.957935][T18944] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 267.957949][T18944] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 267.958820][T18944] bcachefs (loop0): bucket 0:32 data type btree ptr gen 0 missing in alloc btree [ 267.958836][T18944] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 267.959093][T18944] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree [ 267.959106][T18944] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq d19419031ca39bdb written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing [ 267.959349][T18944] bcachefs (loop0): btree ptr not marked in member info btree allocated bitmap [ 267.959362][T18944] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9a831b4a3f983356 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 267.960743][T18944] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree [ 267.960759][T18944] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9a831b4a3f983356 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 267.961188][T18944] bcachefs (loop0): bucket 0:42 data type btree ptr gen 0 missing in alloc btree [ 267.961201][T18944] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq a34c10fbe2d33ffa written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0, fixing [ 267.961215][T18944] Ratelimiting new instances of previous error [ 267.991885][T18944] done [ 267.992190][T18944] bcachefs (loop0): going read-write [ 268.028893][T18944] bcachefs (loop0): journal_replay... [ 268.111037][T18996] netlink: 'syz.3.5512': attribute type 2 has an invalid length. [ 268.255514][T18988] loop5: detected capacity change from 0 to 32768 [ 268.297836][T19002] loop3: detected capacity change from 0 to 512 [ 268.298660][T19002] EXT4-fs: Ignoring removed i_version option [ 268.298704][T19002] EXT4-fs: Ignoring removed mblk_io_submit option [ 268.356684][T19002] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.5514: inode #13: comm syz.3.5514: iget: illegal inode # [ 268.360234][T19002] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.5514: couldn't read orphan inode 13 (err -117) [ 268.361521][T19002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.361865][T18944] done [ 268.369875][T18944] bcachefs (loop0): check_alloc_info... [ 268.370763][T18944] bcachefs (loop0): hole in alloc btree missing in freespace btree [ 268.370809][T18944] device 0 buckets 26-27, fixing [ 268.379064][T18944] bcachefs (loop0): hole in alloc btree missing in freespace btree [ 268.379115][T18944] device 0 buckets 37-38, fixing [ 268.380691][T18944] done [ 268.437350][T18944] bcachefs (loop0): check_lrus... done [ 268.437603][T18944] bcachefs (loop0): check_btree_backpointers... done [ 268.437766][T18944] bcachefs (loop0): check_backpointers_to_extents... done [ 268.438124][T18944] bcachefs (loop0): check_extents_to_backpointers... [ 268.438647][T18944] bcachefs (loop0): scanning for missing backpointers in 11/128 buckets [ 268.439038][T18944] done [ 268.461089][T18988] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 268.461145][T18988] allowing incompatible features above 0.0: (unknown version) [ 268.463624][T18944] bcachefs (loop0): check_inodes... done [ 268.464065][T18944] bcachefs (loop0): resume_logged_ops... done [ 268.464101][T18944] bcachefs (loop0): delete_dead_inodes... done [ 268.479428][T18944] bcachefs (loop0): done starting filesystem [ 268.492025][T18988] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 268.492158][T18988] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0 [ 268.492263][T18988] bcachefs (loop5): recovering from clean shutdown, journal seq 7 [ 268.492341][T18988] bcachefs (loop5): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 268.492341][T18988] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 268.518853][ T6899] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.571481][T19013] loop3: detected capacity change from 0 to 16 [ 268.585173][T19013] erofs (device loop3): mounted with root inode @ nid 36. [ 268.599872][T18988] bcachefs (loop5): accounting_read... done [ 268.642326][T18988] bcachefs (loop5): alloc_read... [ 268.649935][ T6853] udevd[6853]: incorrect bcachefs checksum on /dev/loop0 [ 268.661101][T18988] done [ 268.661977][T18988] bcachefs (loop5): snapshots_read... done [ 268.666954][T18988] bcachefs (loop5): check_allocations... [ 268.668074][T18988] bcachefs (loop5): btree ptr not marked in member info btree allocated bitmap [ 268.673589][T18988] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 75277f57b0c8c24 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing [ 268.688293][T19015] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5517'. [ 268.692472][T18988] bcachefs (loop5): btree ptr not marked in member info btree allocated bitmap [ 268.695527][T18988] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing [ 268.715319][T18988] bcachefs (loop5): btree ptr not marked in member info btree allocated bitmap [ 268.715543][ T6894] bcachefs (loop0): shutting down [ 268.715570][ T6894] bcachefs (loop0): going read-only [ 268.715604][ T6894] bcachefs (loop0): finished waiting for writes to stop [ 268.724322][T18988] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing [ 268.729415][T18985] loop2: detected capacity change from 0 to 32768 [ 268.738380][T18988] bcachefs (loop5): btree ptr not marked in member info btree allocated bitmap [ 268.741298][T18988] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing [ 268.747170][T18988] bcachefs (loop5): btree ptr not marked in member info btree allocated bitmap [ 268.747212][T18988] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing [ 268.755159][T18988] bcachefs (loop5): btree ptr not marked in member info btree allocated bitmap [ 268.758096][T18988] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9a831b4a3f983356 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing [ 268.766367][T18988] done [ 268.770572][ T6894] bcachefs (loop0): flushing journal and stopping allocators, journal seq 18 [ 268.780105][T18988] bcachefs (loop5): going read-write [ 268.780423][ T6894] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 18 [ 268.799956][ T6894] bcachefs (loop0): clean shutdown complete, journal seq 19 [ 268.806823][ T6894] bcachefs (loop0): done going read-only, filesystem not clean [ 268.836378][T18988] bcachefs (loop5): journal_replay... done [ 268.891508][T18988] bcachefs (loop5): check_extents_to_backpointers... [ 268.892339][T18988] bcachefs (loop5): scanning for missing backpointers in 6/128 buckets [ 268.907527][ T52] Bluetooth: hci5: command tx timeout [ 268.924848][T18985] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256 [ 268.924906][T18985] allowing incompatible features above 0.0: (unknown version) [ 268.924939][T18985] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 268.924998][T18985] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 268.925045][T18985] bcachefs (loop2): initializing new filesystem [ 268.927233][ T6853] udevd[6853]: incorrect bcachefs checksum on /dev/loop0 [ 268.953984][T18985] bcachefs (loop2): going read-write [ 268.960986][ T6894] bcachefs (loop0): shutdown complete [ 268.961267][T18988] done [ 268.982808][T18988] bcachefs (loop5): check_inodes... done [ 268.985627][T18988] bcachefs (loop5): resume_logged_ops... done [ 268.986385][T18988] bcachefs (loop5): delete_dead_inodes... done [ 269.006585][T18988] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean [ 269.009419][T18988] bcachefs (loop5): check_extents_to_backpointers... done [ 269.016685][T18985] bcachefs (loop2): marking superblocks [ 269.031018][T18988] bcachefs (loop5): check_inodes... done [ 269.033924][T18988] bcachefs (loop5): resume_logged_ops... done [ 269.039730][T18985] bcachefs (loop2): initializing freespace [ 269.041692][T18988] bcachefs (loop5): delete_dead_inodes... done [ 269.060165][T18985] bcachefs (loop2): done initializing freespace [ 269.067238][T18988] bcachefs (loop5): done starting filesystem [ 269.070167][T18985] bcachefs (loop2): reading snapshots table [ 269.070262][T18985] bcachefs (loop2): reading snapshots done [ 269.095038][ T6853] udevd[6853]: incorrect bcachefs checksum on /dev/loop0 [ 269.171206][T18669] bcachefs (loop5): shutting down [ 269.172782][T18669] bcachefs (loop5): going read-only [ 269.174421][T18669] bcachefs (loop5): finished waiting for writes to stop [ 269.217791][T18985] bcachefs (loop2): done starting filesystem [ 269.254117][T18669] bcachefs (loop5): flushing journal and stopping allocators, journal seq 15 [ 269.254297][T18669] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 15 [ 269.254835][T19000] loop1: detected capacity change from 0 to 32768 [ 269.267476][T19000] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5515 (19000) [ 269.282337][T18669] bcachefs (loop5): clean shutdown complete, journal seq 16 [ 269.283144][T18669] bcachefs (loop5): marking filesystem clean [ 269.364169][T18669] bcachefs (loop5): shutdown complete [ 269.364810][T19000] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 269.364891][T19000] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 269.364940][T19000] BTRFS info (device loop1): disk space caching is enabled [ 269.364966][T19000] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 269.374972][ T6900] bcachefs (loop2): shutting down [ 269.375006][ T6900] bcachefs (loop2): going read-only [ 269.375036][ T6900] bcachefs (loop2): finished waiting for writes to stop [ 269.409559][ T8399] udevd[8399]: incorrect bcachefs checksum on /dev/loop5 [ 269.427845][ T6900] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2 [ 269.517175][T19057] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5527'. [ 269.521481][T19000] BTRFS info (device loop1): rebuilding free space tree [ 269.541987][T19000] BTRFS info (device loop1): disabling free space tree [ 269.542235][T19000] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 269.542264][T19000] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 269.597354][ T6900] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3 [ 269.604053][ T6900] bcachefs (loop2): clean shutdown complete, journal seq 4 [ 269.604851][ T6900] bcachefs (loop2): marking filesystem clean [ 269.671089][ T6893] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 269.762812][ T6900] bcachefs (loop2): shutdown complete [ 269.848301][T19071] loop0: detected capacity change from 0 to 256 [ 270.289113][T19099] openvswitch: netlink: IPv4 tunnel dst address is zero [ 270.406716][T19107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5546'. [ 270.417810][T19109] loop2: detected capacity change from 0 to 256 [ 270.804403][T19131] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 270.883179][T19137] loop0: detected capacity change from 0 to 1764 [ 270.987006][T19151] ieee802154 phy0 wpan0: encryption failed: -22 [ 271.148896][ T52] Bluetooth: hci5: command tx timeout [ 271.582247][T19190] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5588'. [ 271.660731][T19199] loop3: detected capacity change from 0 to 64 [ 271.798459][T19202] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 271.832777][ T31] kauditd_printk_skb: 74626 callbacks suppressed [ 271.832852][ T31] audit: type=1400 audit(2289.067:89267): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=19201 comm="syz-executor" opid=19201 ocomm="syz-executor" [ 271.832893][ T31] audit: type=1400 audit(2289.067:89268): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19201 comm="syz-executor" name="1113" dev="tmpfs" ino=5751 [ 271.832932][ T31] audit: type=1400 audit(2289.067:89269): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19201 comm="syz-executor" name="1113" dev="tmpfs" ino=5751 [ 271.832971][ T31] audit: type=1400 audit(2289.067:89270): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=19201 comm="syz-executor" name="1113" dev="tmpfs" ino=5751 [ 271.833009][ T31] audit: type=1400 audit(2289.067:89271): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19201 comm="syz-executor" name="1113" dev="tmpfs" ino=5751 [ 271.833048][ T31] audit: type=1400 audit(2289.067:89272): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19201 comm="syz-executor" name="1113" dev="tmpfs" ino=5751 [ 271.833085][ T31] audit: type=1400 audit(2289.067:89273): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=19201 comm="syz-executor" name="1113" dev="tmpfs" ino=5751 [ 271.833123][ T31] audit: type=1400 audit(2289.067:89274): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19201 comm="syz-executor" name="1113" dev="tmpfs" ino=5751 [ 271.833160][ T31] audit: type=1400 audit(2289.067:89275): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19201 comm="syz-executor" name="1113" dev="tmpfs" ino=5751 [ 271.833198][ T31] audit: type=1400 audit(2289.067:89276): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=19201 comm="syz-executor" name="1113" dev="tmpfs" ino=5751 [ 272.021493][T19214] vivid-000: ================= START STATUS ================= [ 272.025489][T19214] vivid-000: Test Pattern: 75% Colorbar [ 272.028871][T19214] vivid-000: Fill Percentage of Frame: 100 [ 272.030669][T19214] vivid-000: Horizontal Movement: No Movement [ 272.032548][T19214] vivid-000: Vertical Movement: Move Down [ 272.034392][T19214] vivid-000: OSD Text Mode: All [ 272.039113][T19214] vivid-000: Show Border: false [ 272.041025][T19214] vivid-000: Show Square: false [ 272.042487][T19214] vivid-000: Sensor Flipped Horizontally: false [ 272.044483][T19214] vivid-000: Sensor Flipped Vertically: false [ 272.046289][T19214] vivid-000: Insert SAV Code in Image: false [ 272.050700][T19214] vivid-000: Insert EAV Code in Image: false [ 272.052463][T19214] vivid-000: Insert Video Guard Band: false [ 272.054256][T19214] vivid-000: Reduced Framerate: false [ 272.055928][T19214] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 272.060611][T19214] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 272.060697][T19214] vivid-000: Enable Capture Cropping: true [ 272.060750][T19214] vivid-000: Enable Capture Composing: false [ 272.060803][T19214] vivid-000: Enable Capture Scaler: true [ 272.060869][T19214] vivid-000: Timestamp Source: End of Frame [ 272.060921][T19214] vivid-000: Colorspace: sRGB [ 272.060973][T19214] vivid-000: Transfer Function: Default [ 272.061025][T19214] vivid-000: Y'CbCr Encoding: Default [ 272.061076][T19214] vivid-000: HSV Encoding: Hue 0-179 [ 272.061128][T19214] vivid-000: Quantization: Default [ 272.061179][T19214] vivid-000: Apply Alpha To Red Only: false [ 272.061241][T19214] vivid-000: Standard Aspect Ratio: 4x3 [ 272.061294][T19214] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 272.061360][T19214] vivid-000: DV Timings: 640x480p59 inactive [ 272.086690][T19214] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 272.086811][T19214] vivid-000: Maximum EDID Blocks: 4 [ 272.086850][T19214] vivid-000: Limited RGB Range (16-235): false [ 272.086887][T19214] vivid-000: Rx RGB Quantization Range: Automatic [ 272.086924][T19214] vivid-000: Power Present: 0x00000001 [ 272.086962][T19214] tpg source WxH: 320x180 (R'G'B) [ 272.086982][T19214] tpg field: 1 [ 272.086999][T19214] tpg crop: (0,0)/320x180 [ 272.087019][T19214] tpg compose: (0,0)/320x180 [ 272.087040][T19214] tpg colorspace: 8 [ 272.087056][T19214] tpg transfer function: 0/2 [ 272.087075][T19214] tpg quantization: 0/1 [ 272.087093][T19214] tpg RGB range: 0/2 [ 272.087111][T19214] vivid-000: ================== END STATUS ================== [ 272.226368][T19221] netlink: 'syz.0.5603': attribute type 30 has an invalid length. [ 272.226550][T19221] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 272.226580][T19221] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 273.015373][T19227] loop1: detected capacity change from 0 to 32768 [ 273.041469][T19227] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 273.081069][T19227] XFS (loop1): Ending clean mount [ 273.088238][T19227] XFS (loop1): Quotacheck needed: Please wait. [ 273.156543][T19227] XFS (loop1): Quotacheck: Done. [ 273.226961][ T6893] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 273.354903][T19280] x_tables: duplicate underflow at hook 2 [ 273.509006][T19242] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 273.509249][T19242] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 273.510056][T19242] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 273.510098][T19242] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 273.522277][T19242] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 273.525114][T19242] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 273.529077][T19242] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 273.537801][T19242] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 273.570654][T19254] loop2: detected capacity change from 0 to 40427 [ 273.587408][T19254] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 273.587485][T19254] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 273.604397][T19254] F2FS-fs (loop2): invalid crc value [ 273.775834][T19254] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30 [ 273.775903][T19254] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 274.289604][T19318] loop5: detected capacity change from 0 to 64 [ 274.321574][T19318] syz.5.5638: attempt to access beyond end of device [ 274.321574][T19318] loop5: rw=0, sector=548, nr_sectors = 2 limit=64 [ 274.322020][T19318] Trying to free block not in datazone [ 274.322087][T19318] Trying to free block not in datazone [ 274.322111][T19318] Trying to free block not in datazone [ 274.322135][T19318] Trying to free block not in datazone [ 274.322158][T19318] minix_free_block (loop5:6): bit already cleared [ 274.322338][T19318] Trying to free block not in datazone [ 274.322369][T19318] Trying to free block not in datazone [ 274.552881][T19327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5641'. [ 275.428448][T19242] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 275.428514][T19242] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 276.282543][T19410] loop0: detected capacity change from 0 to 32768 [ 276.284804][T19410] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5668 (19410) [ 276.297348][T19410] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 276.297453][T19410] BTRFS info (device loop0): using sha256 (sha256-arm64) checksum algorithm [ 276.297493][T19410] BTRFS info (device loop0): using free-space-tree [ 276.505829][ T6894] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 277.208357][ T31] kauditd_printk_skb: 77732 callbacks suppressed [ 277.213578][ T31] audit: type=1400 audit(2294.088:125604): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19480 comm="dhcpcd-run-hook" name="/" dev="nvme0n1p2" ino=2 [ 277.213679][ T31] audit: type=1400 audit(2294.088:125605): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19480 comm="dhcpcd-run-hook" name="bin" dev="nvme0n1p2" ino=13 [ 277.213741][ T31] audit: type=1400 audit(2294.088:125606): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19480 comm="dhcpcd-run-hook" name="rm" dev="nvme0n1p2" ino=67 [ 277.213791][ T31] audit: type=1400 audit(2294.088:125607): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=19480 comm="dhcpcd-run-hook" path="/bin/rm" dev="nvme0n1p2" ino=67 [ 277.213838][ T31] audit: type=1400 audit(2294.088:125608): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19480 comm="dhcpcd-run-hook" name="/" dev="nvme0n1p2" ino=2 [ 277.213886][ T31] audit: type=1400 audit(2294.088:125609): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19480 comm="dhcpcd-run-hook" name="bin" dev="nvme0n1p2" ino=13 [ 277.213933][ T31] audit: type=1400 audit(2294.088:125610): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19480 comm="dhcpcd-run-hook" name="/" dev="nvme0n1p2" ino=2 [ 277.213981][ T31] audit: type=1400 audit(2294.088:125611): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19480 comm="dhcpcd-run-hook" name="lib" dev="nvme0n1p2" ino=219 [ 277.214028][ T31] audit: type=1400 audit(2294.088:125612): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19480 comm="dhcpcd-run-hook" name="ld-linux-aarch64.so.1" dev="nvme0n1p2" ino=403 [ 277.214076][ T31] audit: type=1400 audit(2294.088:125613): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=19480 comm="dhcpcd-run-hook" path="/lib/ld-linux-aarch64.so.1" dev="nvme0n1p2" ino=403 [ 278.190520][T17615] Allocator stuck? Waited for 30 seconds [ 278.190569][T17615] Allocator debug: [ 278.190798][T17615] capacity1536 [ 278.190809][T17615] reserved 31232 [ 278.190819][T17615] hidden 0 [ 278.190828][T17615] btree 3840 [ 278.190837][T17615] data 16 [ 278.190846][T17615] cached 0 [ 278.190855][T17615] reserved 0 [ 278.190864][T17615] online_reserved 0 [ 278.190873][T17615] nr_inodes 0 [ 278.190882][T17615] [ 278.190890][T17615] freelist_wait waiting [ 278.190900][T17615] open buckets allocated1 [ 278.190909][T17615] open buckets total 1024 [ 278.190918][T17615] open_buckets_wait empty [ 278.190927][T17615] open_buckets_btree 0 [ 278.190936][T17615] open_buckets_user 0 [ 278.190945][T17615] btree reserve cache 0 [ 278.190954][T17615] [ 278.190962][T17615] Dev 0: [ 278.190971][T17615] buckets sectors fragmented [ 278.190981][T17615] free 79 0 0 [ 278.190991][T17615] sb 25 6152 248 [ 278.191001][T17615] journal 8 2048 0 [ 278.191012][T17615] btree 15 3840 0 [ 278.191022][T17615] user 1 16 240 [ 278.191032][T17615] cached 0 0 0 [ 278.191042][T17615] parity 0 0 0 [ 278.191052][T17615] stripe 0 0 0 [ 278.191063][T17615] need_gc_gens 0 0 0 [ 278.191073][T17615] need_discard 0 0 0 [ 278.191083][T17615] unstriped 0 0 0 [ 278.191093][T17615] capacity 128 [ 278.191102][T17615] [ 278.191110][T17615] reserves: [ 278.191119][T17615] stripe 60 [ 278.191128][T17615] normal 58 [ 278.191136][T17615] copygc 56 [ 278.191146][T17615] btree 28 [ 278.191155][T17615] btree_copygc 0 [ 278.191164][T17615] reclaim 0 [ 278.191173][T17615] interior_updates 0 [ 278.191182][T17615] [ 278.191190][T17615] open buckets 0 [ 278.191199][T17615] buckets to invalidate 0 [ 278.191208][T17615] [ 278.191217][T17615] Copygc debug: [ 278.191225][T17615] running: 1 [ 278.191234][T17615] copygc_wait:0 [ 278.191242][T17615] copygc_wait_at:0 [ 278.191251][T17615] Currently waiting for:0 B [ 278.191260][T17615] Currently waiting since:1.25 MiB [ 278.191269][T17615] Currently calculated wait: [ 278.191278][T17615] loop4: 2.14 KiB [ 278.191287][T17615] [<0>] bch2_copygc_wait_to_text+0x69c/0x7ec [ 278.191297][T17615] [<0>] bch2_print_allocator_stuck+0x4d8/0x5b4 [ 278.191307][T17615] [<0>] __bch2_wait_on_allocator+0x158/0x214 [ 278.191316][T17615] [<0>] __bch2_write+0x2874/0x2e78 [ 278.191325][T17615] [<0>] bch2_write+0x73c/0x106c [ 278.191334][T17615] [<0>] bch2_data_update_read_done+0x25c/0x374 [ 278.191344][T17615] [<0>] bch2_moving_ctxt_do_pending_writes+0x4a0/0xd24 [ 278.191354][T17615] [<0>] bch2_move_ratelimit+0x698/0xf08 [ 278.191363][T17615] [<0>] __bch2_move_data_phys+0xaac/0x144c [ 278.191373][T17615] [<0>] bch2_evacuate_bucket+0x220/0x34c [ 278.191382][T17615] [<0>] bch2_copygc+0x2c68/0x3460 [ 278.191392][T17615] [<0>] bch2_copygc_thread+0x898/0xd8c [ 278.191401][T17615] [<0>] kthread+0x5fc/0x75c [ 278.191410][T17615] [<0>] ret_from_fork+0x10/0x20 [ 278.191427][T17615] [ 278.191436][T17615] Journal debug: [ 278.191444][T17615] flags: replay_done,running,may_skip_flush [ 278.191454][T17615] dirty journal entries: 0/32768 [ 278.191463][T17615] seq: 25 [ 278.191472][T17615] seq_ondisk: 25 [ 278.191481][T17615] last_seq: 26 [ 278.191490][T17615] last_seq_ondisk: 25 [ 278.191499][T17615] flushed_seq_ondisk: 25 [ 278.191509][T17615] watermark: stripe [ 278.191518][T17615] each entry reserved: 321 [ 278.191527][T17615] nr flush writes: 11 [ 278.191536][T17615] nr noflush writes: 4 [ 278.191545][T17615] average write size: 2.06 KiB [ 278.191554][T17615] free buf: 65536 [ 278.191563][T17615] nr direct reclaim: 0 [ 278.191572][T17615] nr background reclaim: 1 [ 278.191581][T17615] reclaim kicked: 0 [ 278.191591][T17615] reclaim runs in: 0 ms [ 278.191635][T17615] blocked: 0 [ 278.191645][T17615] current entry sectors: 256 [ 278.191654][T17615] current entry error: (No error) [ 278.191663][T17615] current entry: closed [ 278.191672][T17615] unwritten entries: [ 278.191681][T17615] last buf closed [ 278.191690][T17615] space: [ 278.191698][T17615] discarded 256:1536 [ 278.191708][T17615] clean ondisk 256:1536 [ 278.191717][T17615] clean 256:1536 [ 278.191726][T17615] total 256:2048 [ 278.191735][T17615] dev 0: [ 278.191744][T17615] durability 1: [ 278.191752][T17615] nr 8 [ 278.191762][T17615] bucket size 256 [ 278.191771][T17615] available 6:120 [ 278.191780][T17615] discard_idx 0 [ 278.191789][T17615] dirty_ondisk 0 (seq 25) [ 278.191798][T17615] dirty_idx 0 (seq 25) [ 278.191807][T17615] cur_idx 0 (seq 25) [ 278.191817][T17615] replicas want 1 need 1 [ 282.709016][ T31] kauditd_printk_skb: 2158 callbacks suppressed [ 282.709083][ T31] audit: type=1400 audit(2299.222:126644): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="nl80211" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.255 dest=49728 netif=enp0s0 [ 282.826118][ T31] audit: type=1400 audit(2299.334:126645): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="nl80211" object="_" requested=w pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.255 dest=49728 netif=enp0s0 [ 289.994358][ T31] audit: type=1400 audit(2306.027:126646): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="nl80211" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.255 dest=49728 netif=enp0s0 [ 290.510376][ T31] audit: type=1400 audit(2306.503:126647): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="nl80211" object="_" requested=w pid=9 comm="kworker/0:0" saddr=10.128.0.169 src=30028 daddr=10.128.1.255 dest=49728 netif=enp0s0 [ 304.330495][ T31] audit: type=1400 audit(2319.407:126648): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="nl80211" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.255 dest=49728 netif=enp0s0 [ 305.588958][ T31] audit: type=1400 audit(2320.584:126649): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="nl80211" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.255 dest=49728 netif=enp0s0 [ 323.409052][ T2407] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.409148][ T2407] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.618471][ T31] audit: type=1400 audit(2340.226:126650): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6260 comm="crond" name="/" dev="nvme0n1p2" ino=2 [ 326.623568][ T31] audit: type=1400 audit(2340.226:126651): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6260 comm="crond" name="etc" dev="nvme0n1p2" ino=96 [ 326.628859][ T31] audit: type=1400 audit(2340.226:126652): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6260 comm="crond" name="cron" dev="nvme0n1p2" ino=97 [ 326.633969][ T31] audit: type=1400 audit(2340.226:126653): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=6260 comm="crond" path="/etc/cron/crontabs" dev="nvme0n1p2" ino=98 [ 326.641929][ T31] audit: type=1400 audit(2340.226:126654): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6260 comm="crond" name="crontabs" dev="nvme0n1p2" ino=98 [ 326.642002][ T31] audit: type=1400 audit(2340.235:126655): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6260 comm="crond" name="/" dev="nvme0n1p2" ino=2 [ 326.642041][ T31] audit: type=1400 audit(2340.235:126656): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6260 comm="crond" name="etc" dev="nvme0n1p2" ino=96 [ 334.282323][ T31] audit: type=1400 audit(2347.382:126657): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="nl80211" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.255 dest=49728 netif=enp0s0 [ 335.050255][ T31] audit: type=1400 audit(2348.101:126658): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="nl80211" object="_" requested=w pid=4454 comm="kworker/u8:11" saddr=10.128.0.169 src=30028 daddr=10.128.1.255 dest=49728 netif=enp0s0 [ 337.702151][ T31] audit: type=1400 audit(2350.577:126659): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="nl80211" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=34282 daddr=10.128.1.255 dest=22 netif=enp0s0 [ 337.918083][ T31] audit: type=1400 audit(2350.783:126660): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="nl80211" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=34282 daddr=10.128.1.255 dest=22 netif=enp0s0 [ 338.134010][ T31] audit: type=1400 audit(2350.988:126661): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="nl80211" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=34282 daddr=10.128.1.255 dest=22 netif=enp0s0 [ 338.570109][ T31] audit: type=1400 audit(2351.380:126662): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="nl80211" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=34282 daddr=10.128.1.255 dest=22 netif=enp0s0 [ 339.434000][ T31] audit: type=1400 audit(2352.193:126663): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="nl80211" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=34282 daddr=10.128.1.255 dest=22 netif=enp0s0 [ 341.161965][ T31] audit: type=1400 audit(2353.819:126664): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="nl80211" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=34282 daddr=10.128.1.255 dest=22 netif=enp0s0 [ 344.778133][ T31] audit: type=1400 audit(2357.192:126665): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="nl80211" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=34282 daddr=10.128.1.255 dest=22 netif=enp0s0 [ 351.694223][ T31] audit: type=1400 audit(2363.657:126666): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="nl80211" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=34282 daddr=10.128.1.255 dest=22 netif=enp0s0 [ 365.514740][ T31] audit: type=1400 audit(2376.562:126667): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="nl80211" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=34282 daddr=10.128.1.255 dest=22 netif=enp0s0 [ 389.156870][ T2407] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.156956][ T2407] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.841637][ T31] audit: type=1400 audit(2400.234:126668): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6260 comm="crond" name="/" dev="nvme0n1p2" ino=2 [ 390.847054][ T31] audit: type=1400 audit(2400.234:126669): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6260 comm="crond" name="etc" dev="nvme0n1p2" ino=96 [ 390.853070][ T31] audit: type=1400 audit(2400.234:126670): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6260 comm="crond" name="cron" dev="nvme0n1p2" ino=97 [ 390.853139][ T31] audit: type=1400 audit(2400.234:126671): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=6260 comm="crond" path="/etc/cron/crontabs" dev="nvme0n1p2" ino=98 [ 390.853186][ T31] audit: type=1400 audit(2400.243:126672): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6260 comm="crond" name="crontabs" dev="nvme0n1p2" ino=98 [ 390.853230][ T31] audit: type=1400 audit(2400.243:126673): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6260 comm="crond" name="/" dev="nvme0n1p2" ino=2 [ 390.853274][ T31] audit: type=1400 audit(2400.243:126674): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=6260 comm="crond" name="etc" dev="nvme0n1p2" ino=96 [ 391.630551][ T31] audit: type=1400 audit(2400.972:126675): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="nl80211" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.255 dest=49728 netif=enp0s0 [ 393.674193][ T31] audit: type=1400 audit(2402.888:126676): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="nl80211" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=34282 daddr=10.128.1.255 dest=22 netif=enp0s0 [ 394.635974][ T31] audit: type=1400 audit(2403.785:126677): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="nl80211" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30028 daddr=10.128.1.255 dest=49728 netif=enp0s0 [ 403.536264][ T32] INFO: task syz-executor:69 ** replaying previous printk message ** [ 403.536264][ T32] INFO: task syz-executor:6904 blocked for more than 143 seconds. [ 403.542813][ T32] Not tainted 6.16.0-rc4-syzkaller-g25b50375179c #0 [ 403.542879][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 403.542904][ T32] task:syz-executor state:D stack:0 pid:6904 tgid:6904 ppid:1 task_flags:0x400140 flags:0x00000019 [ 403.542943][ T32] Call trace: [ 403.542960][ T32] __switch_to+0x414/0x834 (T) [ 403.542989][ T32] __schedule+0x1414/0x2a28 [ 403.543013][ T32] schedule+0xb4/0x230 [ 403.543036][ T32] schedule_timeout+0xac/0x270 [ 403.543061][ T32] do_wait_for_common+0x288/0x3f8 [ 403.543085][ T32] wait_for_completion+0x44/0x5c [ 403.543109][ T32] kthread_stop+0x1bc/0x68c [ 403.543134][ T32] bch2_copygc_stop+0x54/0xa4 [ 403.543161][ T32] __bch2_fs_read_only+0x64/0x4dc [ 403.543189][ T32] bch2_fs_read_only+0x344/0x960 [ 403.543215][ T32] __bch2_fs_stop+0x104/0x800 [ 403.543240][ T32] bch2_put_super+0x40/0x50 [ 403.543266][ T32] generic_shutdown_super+0x12c/0x2b8 [ 403.543290][ T32] bch2_kill_sb+0x40/0x58 [ 403.543314][ T32] deactivate_locked_super+0xc4/0x12c [ 403.543337][ T32] deactivate_super+0xe0/0x100 [ 403.543360][ T32] cleanup_mnt+0x31c/0x3ac [ 403.543385][ T32] __cleanup_mnt+0x20/0x30 [ 403.543409][ T32] task_work_run+0x1dc/0x260 [ 403.543432][ T32] do_notify_resume+0x174/0x1f4 [ 403.543457][ T32] el0_svc+0xb8/0x180 [ 403.543482][ T32] el0t_64_sync_handler+0x84/0x12c [ 403.543507][ T32] el0t_64_sync+0x198/0x19c [ 403.543573][ T32] [ 403.543573][ T32] Showing all locks held in the system: [ 403.543596][ T32] 1 lock held by khungtaskd/32: [ 403.543624][ T32] #0: ffff80008f839a00 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire+0x4/0x48 [ 403.543698][ T32] 2 locks held by pr/ttyAMA0/43: [ 403.543736][ T32] 3 locks held by kworker/u8:11/4454: [ 403.543758][ T32] 2 locks held by getty/6288: [ 403.543777][ T32] #0: ffff0000cc7a40a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 403.543853][ T32] #1: ffff80009b9ce2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x34c/0xfa4 [ 403.543928][ T32] 2 locks held by syz-executor/6904: [ 403.543947][ T32] #0: ffff0001081ca0e0 (&type->s_umount_key#73){++++}-{4:4}, at: deactivate_super+0xd8/0x100 [ 403.544025][ T32] #1: ffff00011c800278 (&c->state_lock){++++}-{4:4}, at: __bch2_fs_stop+0xfc/0x800 [ 403.544104][ T32] [ 403.544120][ T32] ============================================= [ 403.544120][ T32] [ 403.544139][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 403.608590][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-g25b50375179c #0 PREEMPT [ 403.611330][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 403.613966][ T32] Call trace: [ 403.614819][ T32] show_stack+0x2c/0x3c (C) [ 403.616000][ T32] __dump_stack+0x30/0x40 [ 403.617110][ T32] dump_stack_lvl+0x30/0x12c [ 403.618249][ T32] dump_stack+0x1c/0x28 [ 403.619325][ T32] panic+0x2bc/0x7ac [ 403.620324][ T32] hung_task_panic+0x0/0x2c [ 403.621472][ T32] kthread+0x5fc/0x75c [ 403.622506][ T32] ret_from_fork+0x10/0x20 [ 403.623648][ T32] SMP: stopping secondary CPUs [ 404.705593][ T32] SMP: failed to stop secondary CPUs 0 [ 404.707161][ T32] Kernel Offset: disabled [ 404.708307][ T32] CPU features: 0x10000,00040e00,040008a1,04017203 [ 404.710056][ T32] Memory Limit: none [ 405.033183][ T32] Rebooting in 86400 seconds..