last executing test programs: 3m58.545186175s ago: executing program 0 (id=3615): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x80100) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) 3m58.294275366s ago: executing program 0 (id=3619): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f0000000080)={0x7e}) 3m58.141829103s ago: executing program 0 (id=3622): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x2}) 3m57.876026452s ago: executing program 0 (id=3627): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x10) 3m57.566471367s ago: executing program 0 (id=3631): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x0) 3m57.320768354s ago: executing program 0 (id=3636): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 3m42.225036201s ago: executing program 32 (id=3636): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 2m37.221465615s ago: executing program 3 (id=4726): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000805}, 0x800) 2m37.00379591s ago: executing program 3 (id=4730): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000004000)={0x1, 0x2}) 2m36.76145207s ago: executing program 3 (id=4735): r0 = socket$inet6(0x2d, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0x2d, 0x4e20, 0xfd9, @local, 0xb4d0}, 0x1c) 2m36.528181551s ago: executing program 3 (id=4738): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0xfffffffe}]}, 0x28}}, 0x0) 2m36.218271616s ago: executing program 3 (id=4743): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) 2m35.982288438s ago: executing program 3 (id=4747): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 2m20.87129718s ago: executing program 33 (id=4747): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 3.136372461s ago: executing program 5 (id=6704): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, 0x0, 0x0) 3.003169775s ago: executing program 5 (id=6705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="a40000000209050000000000000000000300000948000200060003400c000280050001"], 0xa4}}, 0x0) 2.673458614s ago: executing program 5 (id=6710): futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000240), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000100), 0x0) 1.610304804s ago: executing program 5 (id=6725): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x300) 1.370339378s ago: executing program 1 (id=6729): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)={0x2}) 1.339447577s ago: executing program 6 (id=6730): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0xa21b}) 1.319004974s ago: executing program 4 (id=6731): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300020c000000000000000000000003000600000000000200000000000000000000000000000002000100000000000000090077ffffff030005000000000002000000ac1414aa00000000000100c9020008000885"], 0x60}, 0x1, 0x7}, 0x0) 1.271867113s ago: executing program 2 (id=6732): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x60000, 0x3, 0x2, "1df3e2477eeacddf120be9f2cba8faf6e429a0bf054aaa211ce50b05e1d758cd", 0x41416770}) 1.134013235s ago: executing program 4 (id=6733): r0 = socket(0x29, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000001540)) 1.133858073s ago: executing program 1 (id=6734): r0 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x30, 0x0, 0x7, {[@rr={0x7, 0xb, 0x7, [@rand_addr, @rand_addr]}, @timestamp_addr={0x44, 0x14, 0x9, 0x1, 0x0, [{@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}], 0x30}, 0x0) 1.097667766s ago: executing program 2 (id=6735): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x800, &(0x7f0000000180)={[{@size={'size', 0x3d, [0x25, 0x74]}}]}) 1.049211124s ago: executing program 6 (id=6736): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x18, 0x0, 0x0) 999.85367ms ago: executing program 4 (id=6737): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) 938.187693ms ago: executing program 1 (id=6738): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c0fba3f0c67497c6e350f409efe4", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 872.658233ms ago: executing program 2 (id=6739): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24042841}, 0x20040040) 872.148499ms ago: executing program 6 (id=6740): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001a00010000000000feffffff8100800010"], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 753.271698ms ago: executing program 4 (id=6741): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x19, 0x0, 0xfcd8) 667.184948ms ago: executing program 2 (id=6742): r0 = socket(0x2, 0x400000000002, 0x0) setsockopt(r0, 0x0, 0x5, 0x0, 0x0) 600.584254ms ago: executing program 4 (id=6743): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f00000003c0)='./bus\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x23, 0x6ce, &(0x7f0000001040)="$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") creat(&(0x7f0000000180)='./file2\x00', 0x71283578ac7c5cd) 590.088531ms ago: executing program 6 (id=6744): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, 0x3d, 0x701, 0x10, 0x0, {0x3}, [@nested={0x4, 0x140}]}, 0x18}}, 0x880) 574.993339ms ago: executing program 5 (id=6745): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf250000", @ANYRES32, @ANYBLOB="001000008000000008000f002000"], 0xe8}}, 0x0) 474.27633ms ago: executing program 1 (id=6746): r0 = socket(0x11, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) 438.836374ms ago: executing program 2 (id=6747): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) 359.941891ms ago: executing program 6 (id=6748): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x8, 0x100075, 0xffefffff, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) 358.979687ms ago: executing program 5 (id=6749): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000006400)='./file0\x00', 0x221009c, &(0x7f0000000100)=ANY=[@ANYBLOB='errors=remount-ro,quota,nodiscard,iocharset=koi8-u,errors=continue,noquota,errors=remount-ro\x00resize=0x0000000000000000,uid=', @ANYRES8=0x0, @ANYBLOB="2c6e6ff1756f74612c6e6f646973636172642c6572726f72733d72656d6f756e742d726f2c6769643d", @ANYRESDEC, @ANYRESOCT=0x0], 0x1, 0x60d0, &(0x7f0000006440)="$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") symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 268.23004ms ago: executing program 4 (id=6750): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}}, 0x0) 242.55032ms ago: executing program 1 (id=6751): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000300)={0x1c, 0xa, 0x3, "ba2000fc0000000000ffff00", 0x20385655}) 214.61489ms ago: executing program 2 (id=6752): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0xfd, 0x4) 72.670431ms ago: executing program 6 (id=6753): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 0s ago: executing program 1 (id=6754): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) get_mempolicy(0x0, &(0x7f0000000040), 0x1ff, &(0x7f0000400000/0xc00000)=nil, 0x2) kernel console output (not intermixed with test programs): 4896][T18568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.174910][T18568] R13: 0000000000000000 R14: 00007f6a7c7b5fa0 R15: 00007ffcf8a65d58 [ 505.174947][T18568] [ 505.174958][T18568] NILFS (loop2): btree level mismatch (ino=16): 1 != 7 [ 505.700786][T18637] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 505.717841][T18630] loop1: detected capacity change from 0 to 32768 [ 505.768426][T18568] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 505.781602][T18568] CPU: 1 UID: 0 PID: 18568 Comm: syz.2.5599 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 505.781635][T18568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 505.781651][T18568] Call Trace: [ 505.781660][T18568] [ 505.781671][T18568] dump_stack_lvl+0x189/0x250 [ 505.781707][T18568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.781756][T18568] nilfs_btree_do_lookup+0x97b/0xaf0 [ 505.781815][T18568] ? __pfx_nilfs_btree_do_lookup+0x10/0x10 [ 505.781856][T18568] ? nilfs_btree_alloc_path+0x5e5/0x610 [ 505.781905][T18568] nilfs_btree_lookup_contig+0xfd/0xc20 [ 505.781950][T18568] ? __lock_acquire+0xab9/0xd20 [ 505.781998][T18568] ? nilfs_bmap_lookup_contig+0x37/0x160 [ 505.782039][T18568] ? __pfx_nilfs_btree_lookup_contig+0x10/0x10 [ 505.782082][T18568] ? down_read+0x1ad/0x2e0 [ 505.782109][T18568] nilfs_bmap_lookup_contig+0x8e/0x160 [ 505.782147][T18568] nilfs_get_block+0x1fb/0x8f0 [ 505.782190][T18568] ? __pfx_nilfs_get_block+0x10/0x10 [ 505.782217][T18568] ? folio_end_read+0x1a9/0x230 [ 505.782272][T18568] do_mpage_readpage+0x870/0x19a0 [ 505.782348][T18568] mpage_readahead+0x398/0x650 [ 505.782388][T18568] ? __pfx_mpage_readahead+0x10/0x10 [ 505.782442][T18568] ? __pfx_nilfs_get_block+0x10/0x10 [ 505.782484][T18568] ? blk_start_plug+0x6f/0x1b0 [ 505.782519][T18568] read_pages+0x17a/0x580 [ 505.782562][T18568] ? __pfx_read_pages+0x10/0x10 [ 505.782606][T18568] ? filemap_add_folio+0x1af/0x270 [ 505.782647][T18568] page_cache_ra_unbounded+0x6b0/0x7b0 [ 505.782707][T18568] filemap_get_pages+0x486/0x1da0 [ 505.782744][T18568] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 505.782817][T18568] ? __pfx_filemap_get_pages+0x10/0x10 [ 505.782857][T18568] ? __lock_acquire+0xab9/0xd20 [ 505.782894][T18568] ? __pfx___might_resched+0x10/0x10 [ 505.782952][T18568] filemap_read+0x3f6/0x11a0 [ 505.783001][T18568] ? kernel_text_address+0xa5/0xe0 [ 505.783034][T18568] ? __kernel_text_address+0xd/0x40 [ 505.783068][T18568] ? __pfx_filemap_read+0x10/0x10 [ 505.783132][T18568] ? kasan_save_track+0x3e/0x80 [ 505.783162][T18568] ? generic_file_read_iter+0x8f/0x510 [ 505.783185][T18568] ? __asan_memset+0x22/0x50 [ 505.783210][T18568] ? iov_iter_kvec+0xb8/0x180 [ 505.783250][T18568] __kernel_read+0x46c/0x8c0 [ 505.783292][T18568] ? __pfx___kernel_read+0x10/0x10 [ 505.783355][T18568] integrity_kernel_read+0x89/0xd0 [ 505.783391][T18568] ? __pfx_integrity_kernel_read+0x10/0x10 [ 505.783422][T18568] ? __kasan_kmalloc+0x93/0xb0 [ 505.783455][T18568] ? ima_calc_file_hash+0x820/0x16f0 [ 505.783486][T18568] ima_calc_file_hash+0x85e/0x16f0 [ 505.783508][T18568] ? __lock_acquire+0xab9/0xd20 [ 505.783558][T18568] ? __lock_acquire+0xab9/0xd20 [ 505.783595][T18568] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 505.783667][T18568] ? arch_stack_walk+0xfc/0x150 [ 505.783711][T18568] ? stack_trace_save+0x9c/0xe0 [ 505.783738][T18568] ? __pfx_stack_trace_save+0x10/0x10 [ 505.783766][T18568] ? make_vfsgid+0x49/0xa0 [ 505.783791][T18568] ? generic_fillattr+0x63d/0x9a0 [ 505.783846][T18568] ima_collect_measurement+0x428/0x8e0 [ 505.783885][T18568] ? __pfx_ima_collect_measurement+0x10/0x10 [ 505.783919][T18568] ? trace_contention_end+0x39/0x120 [ 505.783943][T18568] ? __mutex_lock+0x335/0x1360 [ 505.784014][T18568] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 505.784062][T18568] process_measurement+0x1121/0x1a40 [ 505.784107][T18568] ? __pfx_process_measurement+0x10/0x10 [ 505.784129][T18568] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 505.784159][T18568] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 505.784186][T18568] ? register_lock_class+0x51/0x320 [ 505.784259][T18568] ? __pfx_apparmor_file_open+0x10/0x10 [ 505.784299][T18568] ? tomoyo_file_open+0x165/0x220 [ 505.784346][T18568] ima_file_check+0xd7/0x120 [ 505.784389][T18568] ? __pfx_ima_file_check+0x10/0x10 [ 505.784437][T18568] security_file_post_open+0xbb/0x290 [ 505.784467][T18568] path_openat+0x2f26/0x3830 [ 505.784492][T18568] ? arch_stack_walk+0xfc/0x150 [ 505.784557][T18568] ? __pfx_path_openat+0x10/0x10 [ 505.784579][T18568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.784630][T18568] do_filp_open+0x1fa/0x410 [ 505.784654][T18568] ? __lock_acquire+0xab9/0xd20 [ 505.784688][T18568] ? __pfx_do_filp_open+0x10/0x10 [ 505.784743][T18568] ? _raw_spin_unlock+0x28/0x50 [ 505.784773][T18568] ? alloc_fd+0x64c/0x6c0 [ 505.784820][T18568] do_sys_openat2+0x121/0x1c0 [ 505.784843][T18568] ? __se_sys_futex+0x36f/0x400 [ 505.784880][T18568] ? __pfx_do_sys_openat2+0x10/0x10 [ 505.784910][T18568] ? rcu_is_watching+0x15/0xb0 [ 505.784958][T18568] __x64_sys_openat+0x138/0x170 [ 505.784984][T18568] do_syscall_64+0xfa/0x3b0 [ 505.785012][T18568] ? lockdep_hardirqs_on+0x9c/0x150 [ 505.785038][T18568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.785057][T18568] ? clear_bhb_loop+0x60/0xb0 [ 505.785079][T18568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.785097][T18568] RIP: 0033:0x7f6a7c58eb69 [ 505.785115][T18568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.785132][T18568] RSP: 002b:00007f6a7d4d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 505.785152][T18568] RAX: ffffffffffffffda RBX: 00007f6a7c7b5fa0 RCX: 00007f6a7c58eb69 [ 505.785166][T18568] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 505.785179][T18568] RBP: 00007f6a7c611df1 R08: 0000000000000000 R09: 0000000000000000 [ 505.785191][T18568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.785203][T18568] R13: 0000000000000000 R14: 00007f6a7c7b5fa0 R15: 00007ffcf8a65d58 [ 505.785232][T18568] [ 505.785663][T18568] NILFS (loop2): btree level mismatch (ino=16): 1 != 7 [ 505.795506][T18637] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002] [ 505.810800][T18568] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 505.839492][T18637] EXT4-fs (loop4): orphan cleanup on readonly fs [ 505.863082][T18568] CPU: 1 UID: 0 PID: 18568 Comm: syz.2.5599 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 505.863120][T18568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 505.863138][T18568] Call Trace: [ 505.863148][T18568] [ 505.863161][T18568] dump_stack_lvl+0x189/0x250 [ 505.863200][T18568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 505.863254][T18568] nilfs_btree_do_lookup+0x97b/0xaf0 [ 505.863328][T18568] ? __pfx_nilfs_btree_do_lookup+0x10/0x10 [ 505.863372][T18568] ? nilfs_btree_alloc_path+0x5e5/0x610 [ 505.863424][T18568] nilfs_btree_lookup_contig+0xfd/0xc20 [ 505.863473][T18568] ? __lock_acquire+0xab9/0xd20 [ 505.863523][T18568] ? nilfs_bmap_lookup_contig+0x37/0x160 [ 505.863568][T18568] ? __pfx_nilfs_btree_lookup_contig+0x10/0x10 [ 505.863614][T18568] ? down_read+0x1ad/0x2e0 [ 505.863644][T18568] nilfs_bmap_lookup_contig+0x8e/0x160 [ 505.863685][T18568] nilfs_get_block+0x1fb/0x8f0 [ 505.863740][T18568] ? __pfx_nilfs_get_block+0x10/0x10 [ 505.863773][T18568] ? do_raw_spin_unlock+0x122/0x240 [ 505.863807][T18568] ? _raw_spin_unlock+0x28/0x50 [ 505.863840][T18568] ? create_empty_buffers+0x465/0x530 [ 505.863875][T18568] block_read_full_folio+0x29c/0x830 [ 505.863911][T18568] ? __pfx_nilfs_get_block+0x10/0x10 [ 505.863948][T18568] do_mpage_readpage+0x175d/0x19a0 [ 505.864023][T18568] mpage_readahead+0x398/0x650 [ 505.864066][T18568] ? __pfx_mpage_readahead+0x10/0x10 [ 505.864125][T18568] ? __pfx_nilfs_get_block+0x10/0x10 [ 505.864172][T18568] ? blk_start_plug+0x6f/0x1b0 [ 505.864211][T18568] read_pages+0x17a/0x580 [ 505.864259][T18568] ? __pfx_read_pages+0x10/0x10 [ 505.864315][T18568] ? filemap_add_folio+0x1af/0x270 [ 505.864361][T18568] page_cache_ra_unbounded+0x6b0/0x7b0 [ 505.864427][T18568] filemap_get_pages+0x486/0x1da0 [ 505.864467][T18568] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 505.864547][T18568] ? __pfx_filemap_get_pages+0x10/0x10 [ 505.864590][T18568] ? __lock_acquire+0xab9/0xd20 [ 505.864630][T18568] ? __pfx___might_resched+0x10/0x10 [ 505.864694][T18568] filemap_read+0x3f6/0x11a0 [ 505.864747][T18568] ? kernel_text_address+0xa5/0xe0 [ 505.864784][T18568] ? __kernel_text_address+0xd/0x40 [ 505.864828][T18568] ? __pfx_filemap_read+0x10/0x10 [ 505.864902][T18568] ? kasan_save_track+0x3e/0x80 [ 505.864938][T18568] ? generic_file_read_iter+0x8f/0x510 [ 505.864963][T18568] ? __asan_memset+0x22/0x50 [ 505.864990][T18568] ? iov_iter_kvec+0xb8/0x180 [ 505.865033][T18568] __kernel_read+0x46c/0x8c0 [ 505.865074][T18568] ? __pfx___kernel_read+0x10/0x10 [ 505.865141][T18568] integrity_kernel_read+0x89/0xd0 [ 505.865179][T18568] ? __pfx_integrity_kernel_read+0x10/0x10 [ 505.865213][T18568] ? __kasan_kmalloc+0x93/0xb0 [ 505.865249][T18568] ? ima_calc_file_hash+0x820/0x16f0 [ 505.865288][T18568] ima_calc_file_hash+0x85e/0x16f0 [ 505.865313][T18568] ? __lock_acquire+0xab9/0xd20 [ 505.865367][T18568] ? __lock_acquire+0xab9/0xd20 [ 505.865406][T18568] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 505.865486][T18568] ? arch_stack_walk+0xfc/0x150 [ 505.865535][T18568] ? stack_trace_save+0x9c/0xe0 [ 505.865563][T18568] ? __pfx_stack_trace_save+0x10/0x10 [ 505.865593][T18568] ? make_vfsgid+0x49/0xa0 [ 505.865621][T18568] ? generic_fillattr+0x63d/0x9a0 [ 505.865679][T18568] ima_collect_measurement+0x428/0x8e0 [ 505.865722][T18568] ? __pfx_ima_collect_measurement+0x10/0x10 [ 505.865762][T18568] ? trace_contention_end+0x39/0x120 [ 505.865788][T18568] ? __mutex_lock+0x335/0x1360 [ 505.865868][T18568] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 505.865921][T18568] process_measurement+0x1121/0x1a40 [ 505.865972][T18568] ? __pfx_process_measurement+0x10/0x10 [ 505.865995][T18568] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 505.866027][T18568] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 505.866056][T18568] ? register_lock_class+0x51/0x320 [ 505.866140][T18568] ? __pfx_apparmor_file_open+0x10/0x10 [ 505.866186][T18568] ? tomoyo_file_open+0x165/0x220 [ 505.866237][T18568] ima_file_check+0xd7/0x120 [ 505.866291][T18568] ? __pfx_ima_file_check+0x10/0x10 [ 505.866344][T18568] security_file_post_open+0xbb/0x290 [ 505.866377][T18568] path_openat+0x2f26/0x3830 [ 505.866403][T18568] ? arch_stack_walk+0xfc/0x150 [ 505.866477][T18568] ? __pfx_path_openat+0x10/0x10 [ 505.866502][T18568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.866574][T18568] do_filp_open+0x1fa/0x410 [ 505.866601][T18568] ? __lock_acquire+0xab9/0xd20 [ 505.866639][T18568] ? __pfx_do_filp_open+0x10/0x10 [ 505.866700][T18568] ? _raw_spin_unlock+0x28/0x50 [ 505.866731][T18568] ? alloc_fd+0x64c/0x6c0 [ 505.866783][T18568] do_sys_openat2+0x121/0x1c0 [ 505.866808][T18568] ? __se_sys_futex+0x36f/0x400 [ 505.866839][T18568] ? __pfx_do_sys_openat2+0x10/0x10 [ 505.866875][T18568] ? rcu_is_watching+0x15/0xb0 [ 505.866920][T18568] __x64_sys_openat+0x138/0x170 [ 505.866954][T18568] do_syscall_64+0xfa/0x3b0 [ 505.866992][T18568] ? lockdep_hardirqs_on+0x9c/0x150 [ 505.867047][T18568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.867074][T18568] ? clear_bhb_loop+0x60/0xb0 [ 505.867107][T18568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.867133][T18568] RIP: 0033:0x7f6a7c58eb69 [ 505.867156][T18568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.867180][T18568] RSP: 002b:00007f6a7d4d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 505.867207][T18568] RAX: ffffffffffffffda RBX: 00007f6a7c7b5fa0 RCX: 00007f6a7c58eb69 [ 505.867227][T18568] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 505.867247][T18568] RBP: 00007f6a7c611df1 R08: 0000000000000000 R09: 0000000000000000 [ 505.867263][T18568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.867285][T18568] R13: 0000000000000000 R14: 00007f6a7c7b5fa0 R15: 00007ffcf8a65d58 [ 505.867328][T18568] [ 505.867339][T18568] NILFS (loop2): btree level mismatch (ino=16): 1 != 7 [ 505.874153][T18637] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 505.979368][T18568] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 506.179651][T18637] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 506.252108][T18640] loop5: detected capacity change from 0 to 32768 [ 506.271641][T18568] CPU: 0 UID: 0 PID: 18568 Comm: syz.2.5599 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 506.271675][T18568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 506.271691][T18568] Call Trace: [ 506.271700][T18568] [ 506.271710][T18568] dump_stack_lvl+0x189/0x250 [ 506.271746][T18568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.271802][T18568] nilfs_btree_do_lookup+0x97b/0xaf0 [ 506.271869][T18568] ? __pfx_nilfs_btree_do_lookup+0x10/0x10 [ 506.271913][T18568] ? nilfs_btree_alloc_path+0x5e5/0x610 [ 506.271976][T18568] nilfs_btree_lookup_contig+0xfd/0xc20 [ 506.272025][T18568] ? __lock_acquire+0xab9/0xd20 [ 506.272078][T18568] ? nilfs_bmap_lookup_contig+0x37/0x160 [ 506.272122][T18568] ? __pfx_nilfs_btree_lookup_contig+0x10/0x10 [ 506.272169][T18568] ? down_read+0x1ad/0x2e0 [ 506.272197][T18568] nilfs_bmap_lookup_contig+0x8e/0x160 [ 506.272238][T18568] nilfs_get_block+0x1fb/0x8f0 [ 506.272285][T18568] ? __pfx_nilfs_get_block+0x10/0x10 [ 506.272342][T18568] block_read_full_folio+0x29c/0x830 [ 506.272378][T18568] ? __pfx_nilfs_get_block+0x10/0x10 [ 506.272415][T18568] do_mpage_readpage+0x175d/0x19a0 [ 506.272447][T18568] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 506.272514][T18568] ? __pfx_nilfs_get_block+0x10/0x10 [ 506.272550][T18568] mpage_read_folio+0x14a/0x220 [ 506.272582][T18568] ? __pfx_mpage_read_folio+0x10/0x10 [ 506.272640][T18568] ? __pfx_nilfs_get_block+0x10/0x10 [ 506.272693][T18568] filemap_read_folio+0x114/0x380 [ 506.272719][T18568] ? __pfx_nilfs_read_folio+0x10/0x10 [ 506.272754][T18568] ? __pfx_filemap_read_folio+0x10/0x10 [ 506.272782][T18568] ? block_is_partially_uptodate+0x2cc/0x420 [ 506.272820][T18568] filemap_get_pages+0x1628/0x1da0 [ 506.272903][T18568] ? __pfx_filemap_get_pages+0x10/0x10 [ 506.272960][T18568] ? __pfx___might_resched+0x10/0x10 [ 506.273033][T18568] filemap_read+0x3f6/0x11a0 [ 506.273084][T18568] ? kernel_text_address+0xa5/0xe0 [ 506.273120][T18568] ? __kernel_text_address+0xd/0x40 [ 506.273164][T18568] ? __pfx_filemap_read+0x10/0x10 [ 506.273246][T18568] ? kasan_save_track+0x3e/0x80 [ 506.273279][T18568] ? generic_file_read_iter+0x8f/0x510 [ 506.273306][T18568] ? __asan_memset+0x22/0x50 [ 506.273333][T18568] ? iov_iter_kvec+0xb8/0x180 [ 506.273376][T18568] __kernel_read+0x46c/0x8c0 [ 506.273414][T18568] ? __pfx___kernel_read+0x10/0x10 [ 506.273483][T18568] integrity_kernel_read+0x89/0xd0 [ 506.273521][T18568] ? __pfx_integrity_kernel_read+0x10/0x10 [ 506.273557][T18568] ? __kasan_kmalloc+0x93/0xb0 [ 506.273593][T18568] ? ima_calc_file_hash+0x820/0x16f0 [ 506.273627][T18568] ima_calc_file_hash+0x85e/0x16f0 [ 506.273650][T18568] ? __lock_acquire+0xab9/0xd20 [ 506.273704][T18568] ? __lock_acquire+0xab9/0xd20 [ 506.273742][T18568] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 506.273822][T18568] ? arch_stack_walk+0xfc/0x150 [ 506.273868][T18568] ? stack_trace_save+0x9c/0xe0 [ 506.273898][T18568] ? __pfx_stack_trace_save+0x10/0x10 [ 506.273929][T18568] ? make_vfsgid+0x49/0xa0 [ 506.273963][T18568] ? generic_fillattr+0x63d/0x9a0 [ 506.274027][T18568] ima_collect_measurement+0x428/0x8e0 [ 506.274069][T18568] ? __pfx_ima_collect_measurement+0x10/0x10 [ 506.274111][T18568] ? trace_contention_end+0x39/0x120 [ 506.274138][T18568] ? __mutex_lock+0x335/0x1360 [ 506.274215][T18568] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 506.274270][T18568] process_measurement+0x1121/0x1a40 [ 506.274318][T18568] ? __pfx_process_measurement+0x10/0x10 [ 506.274342][T18568] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 506.274374][T18568] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 506.274404][T18568] ? register_lock_class+0x51/0x320 [ 506.274484][T18568] ? __pfx_apparmor_file_open+0x10/0x10 [ 506.274519][T18568] ? tomoyo_file_open+0x165/0x220 [ 506.274572][T18568] ima_file_check+0xd7/0x120 [ 506.274617][T18568] ? __pfx_ima_file_check+0x10/0x10 [ 506.274676][T18568] security_file_post_open+0xbb/0x290 [ 506.274710][T18568] path_openat+0x2f26/0x3830 [ 506.274737][T18568] ? arch_stack_walk+0xfc/0x150 [ 506.274813][T18568] ? __pfx_path_openat+0x10/0x10 [ 506.274839][T18568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.274895][T18568] do_filp_open+0x1fa/0x410 [ 506.274921][T18568] ? __lock_acquire+0xab9/0xd20 [ 506.274967][T18568] ? __pfx_do_filp_open+0x10/0x10 [ 506.275029][T18568] ? _raw_spin_unlock+0x28/0x50 [ 506.275059][T18568] ? alloc_fd+0x64c/0x6c0 [ 506.275112][T18568] do_sys_openat2+0x121/0x1c0 [ 506.275137][T18568] ? __se_sys_futex+0x36f/0x400 [ 506.275171][T18568] ? __pfx_do_sys_openat2+0x10/0x10 [ 506.275205][T18568] ? rcu_is_watching+0x15/0xb0 [ 506.275251][T18568] __x64_sys_openat+0x138/0x170 [ 506.275285][T18568] do_syscall_64+0xfa/0x3b0 [ 506.275323][T18568] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.275358][T18568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.275385][T18568] ? clear_bhb_loop+0x60/0xb0 [ 506.275417][T18568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.275443][T18568] RIP: 0033:0x7f6a7c58eb69 [ 506.275468][T18568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.275490][T18568] RSP: 002b:00007f6a7d4d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 506.275517][T18568] RAX: ffffffffffffffda RBX: 00007f6a7c7b5fa0 RCX: 00007f6a7c58eb69 [ 506.275538][T18568] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 506.275556][T18568] RBP: 00007f6a7c611df1 R08: 0000000000000000 R09: 0000000000000000 [ 506.275573][T18568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.275589][T18568] R13: 0000000000000000 R14: 00007f6a7c7b5fa0 R15: 00007ffcf8a65d58 [ 506.275632][T18568] [ 506.275643][T18568] NILFS (loop2): btree level mismatch (ino=16): 1 != 7 [ 506.313752][T18637] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 506.621553][T18568] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 506.807332][T18568] CPU: 0 UID: 0 PID: 18568 Comm: syz.2.5599 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 506.807369][T18568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 506.807384][T18568] Call Trace: [ 506.807396][T18568] [ 506.807405][T18568] dump_stack_lvl+0x189/0x250 [ 506.807446][T18568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.807500][T18568] nilfs_btree_do_lookup+0x97b/0xaf0 [ 506.807566][T18568] ? __pfx_nilfs_btree_do_lookup+0x10/0x10 [ 506.807610][T18568] ? nilfs_btree_alloc_path+0x5e5/0x610 [ 506.807662][T18568] nilfs_btree_lookup_contig+0xfd/0xc20 [ 506.807712][T18568] ? __lock_acquire+0xab9/0xd20 [ 506.807764][T18568] ? nilfs_bmap_lookup_contig+0x37/0x160 [ 506.807808][T18568] ? __pfx_nilfs_btree_lookup_contig+0x10/0x10 [ 506.807863][T18568] ? down_read+0x1ad/0x2e0 [ 506.807892][T18568] nilfs_bmap_lookup_contig+0x8e/0x160 [ 506.807930][T18568] nilfs_get_block+0x1fb/0x8f0 [ 506.807977][T18568] ? __pfx_nilfs_get_block+0x10/0x10 [ 506.808033][T18568] block_read_full_folio+0x29c/0x830 [ 506.808069][T18568] ? __pfx_nilfs_get_block+0x10/0x10 [ 506.808106][T18568] do_mpage_readpage+0x175d/0x19a0 [ 506.808138][T18568] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 506.808217][T18568] ? __pfx_nilfs_get_block+0x10/0x10 [ 506.808253][T18568] mpage_read_folio+0x14a/0x220 [ 506.808283][T18568] ? __pfx_mpage_read_folio+0x10/0x10 [ 506.808340][T18568] ? __pfx_nilfs_get_block+0x10/0x10 [ 506.808393][T18568] filemap_read_folio+0x114/0x380 [ 506.808420][T18568] ? __pfx_nilfs_read_folio+0x10/0x10 [ 506.808453][T18568] ? __pfx_filemap_read_folio+0x10/0x10 [ 506.808481][T18568] ? block_is_partially_uptodate+0x2cc/0x420 [ 506.808521][T18568] filemap_get_pages+0x1628/0x1da0 [ 506.808606][T18568] ? __pfx_filemap_get_pages+0x10/0x10 [ 506.808658][T18568] ? __pfx___might_resched+0x10/0x10 [ 506.808722][T18568] filemap_read+0x3f6/0x11a0 [ 506.808776][T18568] ? kernel_text_address+0xa5/0xe0 [ 506.808812][T18568] ? __kernel_text_address+0xd/0x40 [ 506.808855][T18568] ? __pfx_filemap_read+0x10/0x10 [ 506.808929][T18568] ? kasan_save_track+0x3e/0x80 [ 506.808960][T18568] ? generic_file_read_iter+0x8f/0x510 [ 506.808985][T18568] ? __asan_memset+0x22/0x50 [ 506.809012][T18568] ? iov_iter_kvec+0xb8/0x180 [ 506.809055][T18568] __kernel_read+0x46c/0x8c0 [ 506.809096][T18568] ? __pfx___kernel_read+0x10/0x10 [ 506.809172][T18568] integrity_kernel_read+0x89/0xd0 [ 506.809209][T18568] ? __pfx_integrity_kernel_read+0x10/0x10 [ 506.809244][T18568] ? __kasan_kmalloc+0x93/0xb0 [ 506.809280][T18568] ? ima_calc_file_hash+0x820/0x16f0 [ 506.809312][T18568] ima_calc_file_hash+0x85e/0x16f0 [ 506.809338][T18568] ? __lock_acquire+0xab9/0xd20 [ 506.809391][T18568] ? __lock_acquire+0xab9/0xd20 [ 506.809430][T18568] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 506.809507][T18568] ? arch_stack_walk+0xfc/0x150 [ 506.809554][T18568] ? stack_trace_save+0x9c/0xe0 [ 506.809585][T18568] ? __pfx_stack_trace_save+0x10/0x10 [ 506.809614][T18568] ? make_vfsgid+0x49/0xa0 [ 506.809642][T18568] ? generic_fillattr+0x63d/0x9a0 [ 506.809698][T18568] ima_collect_measurement+0x428/0x8e0 [ 506.809742][T18568] ? __pfx_ima_collect_measurement+0x10/0x10 [ 506.809781][T18568] ? trace_contention_end+0x39/0x120 [ 506.809808][T18568] ? __mutex_lock+0x335/0x1360 [ 506.809909][T18568] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 506.809964][T18568] process_measurement+0x1121/0x1a40 [ 506.810015][T18568] ? __pfx_process_measurement+0x10/0x10 [ 506.810040][T18568] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 506.810073][T18568] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 506.810104][T18568] ? register_lock_class+0x51/0x320 [ 506.810190][T18568] ? __pfx_apparmor_file_open+0x10/0x10 [ 506.810226][T18568] ? tomoyo_file_open+0x165/0x220 [ 506.810279][T18568] ima_file_check+0xd7/0x120 [ 506.810325][T18568] ? __pfx_ima_file_check+0x10/0x10 [ 506.810379][T18568] security_file_post_open+0xbb/0x290 [ 506.810412][T18568] path_openat+0x2f26/0x3830 [ 506.810439][T18568] ? arch_stack_walk+0xfc/0x150 [ 506.810514][T18568] ? __pfx_path_openat+0x10/0x10 [ 506.810540][T18568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.810595][T18568] do_filp_open+0x1fa/0x410 [ 506.810621][T18568] ? __lock_acquire+0xab9/0xd20 [ 506.810659][T18568] ? __pfx_do_filp_open+0x10/0x10 [ 506.810719][T18568] ? _raw_spin_unlock+0x28/0x50 [ 506.810751][T18568] ? alloc_fd+0x64c/0x6c0 [ 506.810801][T18568] do_sys_openat2+0x121/0x1c0 [ 506.810827][T18568] ? __se_sys_futex+0x36f/0x400 [ 506.810859][T18568] ? __pfx_do_sys_openat2+0x10/0x10 [ 506.810896][T18568] ? rcu_is_watching+0x15/0xb0 [ 506.810940][T18568] __x64_sys_openat+0x138/0x170 [ 506.810972][T18568] do_syscall_64+0xfa/0x3b0 [ 506.811010][T18568] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.811045][T18568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.811071][T18568] ? clear_bhb_loop+0x60/0xb0 [ 506.811105][T18568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.811130][T18568] RIP: 0033:0x7f6a7c58eb69 [ 506.811162][T18568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.811183][T18568] RSP: 002b:00007f6a7d4d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 506.811211][T18568] RAX: ffffffffffffffda RBX: 00007f6a7c7b5fa0 RCX: 00007f6a7c58eb69 [ 506.811231][T18568] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 506.811249][T18568] RBP: 00007f6a7c611df1 R08: 0000000000000000 R09: 0000000000000000 [ 506.811266][T18568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.811282][T18568] R13: 0000000000000000 R14: 00007f6a7c7b5fa0 R15: 00007ffcf8a65d58 [ 506.811325][T18568] [ 506.838436][T18568] NILFS (loop2): btree level mismatch (ino=16): 1 != 7 [ 506.938476][T18651] loop6: detected capacity change from 0 to 4096 [ 506.942208][T18637] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5630: bg 0: block 40: padding at end of block bitmap is not set [ 506.959019][T18568] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 506.973011][T18651] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 506.981138][T18568] CPU: 1 UID: 0 PID: 18568 Comm: syz.2.5599 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 506.981174][T18568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 506.981191][T18568] Call Trace: [ 506.981220][T18568] [ 506.981231][T18568] dump_stack_lvl+0x189/0x250 [ 506.981272][T18568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.981327][T18568] nilfs_btree_do_lookup+0x97b/0xaf0 [ 506.981391][T18568] ? __pfx_nilfs_btree_do_lookup+0x10/0x10 [ 506.981434][T18568] ? nilfs_btree_alloc_path+0x5e5/0x610 [ 506.981488][T18568] nilfs_btree_lookup_contig+0xfd/0xc20 [ 506.981537][T18568] ? __lock_acquire+0xab9/0xd20 [ 506.981598][T18568] ? nilfs_bmap_lookup_contig+0x37/0x160 [ 506.981642][T18568] ? __pfx_nilfs_btree_lookup_contig+0x10/0x10 [ 506.981689][T18568] ? down_read+0x1ad/0x2e0 [ 506.981719][T18568] nilfs_bmap_lookup_contig+0x8e/0x160 [ 506.981763][T18568] nilfs_get_block+0x1fb/0x8f0 [ 506.981811][T18568] ? __pfx_nilfs_get_block+0x10/0x10 [ 506.981867][T18568] block_read_full_folio+0x29c/0x830 [ 506.981903][T18568] ? __pfx_nilfs_get_block+0x10/0x10 [ 506.981948][T18568] do_mpage_readpage+0x175d/0x19a0 [ 506.981991][T18568] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 506.982055][T18568] ? __pfx_nilfs_get_block+0x10/0x10 [ 506.982090][T18568] mpage_read_folio+0x14a/0x220 [ 506.982120][T18568] ? __pfx_mpage_read_folio+0x10/0x10 [ 506.982176][T18568] ? __pfx_nilfs_get_block+0x10/0x10 [ 506.982245][T18568] filemap_read_folio+0x114/0x380 [ 506.982272][T18568] ? __pfx_nilfs_read_folio+0x10/0x10 [ 506.982306][T18568] ? __pfx_filemap_read_folio+0x10/0x10 [ 506.982334][T18568] ? block_is_partially_uptodate+0x2cc/0x420 [ 506.982373][T18568] filemap_get_pages+0x1628/0x1da0 [ 506.982466][T18568] ? __pfx_filemap_get_pages+0x10/0x10 [ 506.982514][T18568] ? __pfx___might_resched+0x10/0x10 [ 506.982596][T18568] filemap_read+0x3f6/0x11a0 [ 506.982665][T18568] ? kernel_text_address+0xa5/0xe0 [ 506.982701][T18568] ? __kernel_text_address+0xd/0x40 [ 506.982747][T18568] ? __pfx_filemap_read+0x10/0x10 [ 506.982821][T18568] ? kasan_save_track+0x3e/0x80 [ 506.982852][T18568] ? generic_file_read_iter+0x8f/0x510 [ 506.982877][T18568] ? __asan_memset+0x22/0x50 [ 506.982905][T18568] ? iov_iter_kvec+0xb8/0x180 [ 506.982956][T18568] __kernel_read+0x46c/0x8c0 [ 506.982996][T18568] ? __pfx___kernel_read+0x10/0x10 [ 506.983063][T18568] integrity_kernel_read+0x89/0xd0 [ 506.983103][T18568] ? __pfx_integrity_kernel_read+0x10/0x10 [ 506.983139][T18568] ? __kasan_kmalloc+0x93/0xb0 [ 506.983175][T18568] ? ima_calc_file_hash+0x820/0x16f0 [ 506.983209][T18568] ima_calc_file_hash+0x85e/0x16f0 [ 506.983233][T18568] ? __lock_acquire+0xab9/0xd20 [ 506.983286][T18568] ? __lock_acquire+0xab9/0xd20 [ 506.983326][T18568] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 506.983404][T18568] ? arch_stack_walk+0xfc/0x150 [ 506.983451][T18568] ? stack_trace_save+0x9c/0xe0 [ 506.983480][T18568] ? __pfx_stack_trace_save+0x10/0x10 [ 506.983511][T18568] ? make_vfsgid+0x49/0xa0 [ 506.983539][T18568] ? generic_fillattr+0x63d/0x9a0 [ 506.983597][T18568] ima_collect_measurement+0x428/0x8e0 [ 506.983639][T18568] ? __pfx_ima_collect_measurement+0x10/0x10 [ 506.983679][T18568] ? trace_contention_end+0x39/0x120 [ 506.983706][T18568] ? __mutex_lock+0x335/0x1360 [ 506.983785][T18568] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 506.983839][T18568] process_measurement+0x1121/0x1a40 [ 506.983888][T18568] ? __pfx_process_measurement+0x10/0x10 [ 506.983913][T18568] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 506.983951][T18568] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 506.983981][T18568] ? register_lock_class+0x51/0x320 [ 506.984062][T18568] ? __pfx_apparmor_file_open+0x10/0x10 [ 506.984098][T18568] ? tomoyo_file_open+0x165/0x220 [ 506.984150][T18568] ima_file_check+0xd7/0x120 [ 506.984195][T18568] ? __pfx_ima_file_check+0x10/0x10 [ 506.984251][T18568] security_file_post_open+0xbb/0x290 [ 506.984284][T18568] path_openat+0x2f26/0x3830 [ 506.984311][T18568] ? arch_stack_walk+0xfc/0x150 [ 506.984387][T18568] ? __pfx_path_openat+0x10/0x10 [ 506.984413][T18568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.984471][T18568] do_filp_open+0x1fa/0x410 [ 506.984498][T18568] ? __lock_acquire+0xab9/0xd20 [ 506.984537][T18568] ? __pfx_do_filp_open+0x10/0x10 [ 506.984601][T18568] ? _raw_spin_unlock+0x28/0x50 [ 506.984631][T18568] ? alloc_fd+0x64c/0x6c0 [ 506.984681][T18568] do_sys_openat2+0x121/0x1c0 [ 506.984707][T18568] ? __se_sys_futex+0x36f/0x400 [ 506.984740][T18568] ? __pfx_do_sys_openat2+0x10/0x10 [ 506.984776][T18568] ? rcu_is_watching+0x15/0xb0 [ 506.984820][T18568] __x64_sys_openat+0x138/0x170 [ 506.984854][T18568] do_syscall_64+0xfa/0x3b0 [ 506.984891][T18568] ? lockdep_hardirqs_on+0x9c/0x150 [ 506.984937][T18568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.984963][T18568] ? clear_bhb_loop+0x60/0xb0 [ 506.984995][T18568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.985021][T18568] RIP: 0033:0x7f6a7c58eb69 [ 506.985046][T18568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.985068][T18568] RSP: 002b:00007f6a7d4d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 506.985096][T18568] RAX: ffffffffffffffda RBX: 00007f6a7c7b5fa0 RCX: 00007f6a7c58eb69 [ 506.985116][T18568] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 506.985134][T18568] RBP: 00007f6a7c611df1 R08: 0000000000000000 R09: 0000000000000000 [ 506.985151][T18568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.985165][T18568] R13: 0000000000000000 R14: 00007f6a7c7b5fa0 R15: 00007ffcf8a65d58 [ 506.985204][T18568] [ 506.985215][T18568] NILFS (loop2): btree level mismatch (ino=16): 1 != 7 [ 507.033829][T18630] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop1": -EINTR [ 507.036714][T18637] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 507.056862][T18568] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 507.117220][T18651] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 507.120481][T18637] EXT4-fs (loop4): 1 truncate cleaned up [ 507.143537][T18568] CPU: 1 UID: 0 PID: 18568 Comm: syz.2.5599 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 507.143577][T18568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 507.143595][T18568] Call Trace: [ 507.143610][T18568] [ 507.143622][T18568] dump_stack_lvl+0x189/0x250 [ 507.143663][T18568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.143717][T18568] nilfs_btree_do_lookup+0x97b/0xaf0 [ 507.143782][T18568] ? __pfx_nilfs_btree_do_lookup+0x10/0x10 [ 507.143826][T18568] ? nilfs_btree_alloc_path+0x5e5/0x610 [ 507.143881][T18568] nilfs_btree_lookup_contig+0xfd/0xc20 [ 507.143941][T18568] ? __lock_acquire+0xab9/0xd20 [ 507.143994][T18568] ? nilfs_bmap_lookup_contig+0x37/0x160 [ 507.144037][T18568] ? __pfx_nilfs_btree_lookup_contig+0x10/0x10 [ 507.144086][T18568] ? down_read+0x1ad/0x2e0 [ 507.144115][T18568] nilfs_bmap_lookup_contig+0x8e/0x160 [ 507.144156][T18568] nilfs_get_block+0x1fb/0x8f0 [ 507.144203][T18568] ? __pfx_nilfs_get_block+0x10/0x10 [ 507.144259][T18568] block_read_full_folio+0x29c/0x830 [ 507.144295][T18568] ? __pfx_nilfs_get_block+0x10/0x10 [ 507.144332][T18568] do_mpage_readpage+0x175d/0x19a0 [ 507.144364][T18568] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 507.144431][T18568] ? __pfx_nilfs_get_block+0x10/0x10 [ 507.144467][T18568] mpage_read_folio+0x14a/0x220 [ 507.144498][T18568] ? __pfx_mpage_read_folio+0x10/0x10 [ 507.144557][T18568] ? __pfx_nilfs_get_block+0x10/0x10 [ 507.144610][T18568] filemap_read_folio+0x114/0x380 [ 507.144637][T18568] ? __pfx_nilfs_read_folio+0x10/0x10 [ 507.144670][T18568] ? __pfx_filemap_read_folio+0x10/0x10 [ 507.144697][T18568] ? block_is_partially_uptodate+0x2cc/0x420 [ 507.144738][T18568] filemap_get_pages+0x1628/0x1da0 [ 507.144820][T18568] ? __pfx_filemap_get_pages+0x10/0x10 [ 507.144869][T18568] ? __pfx___might_resched+0x10/0x10 [ 507.144945][T18568] filemap_read+0x3f6/0x11a0 [ 507.145001][T18568] ? kernel_text_address+0xa5/0xe0 [ 507.145038][T18568] ? __kernel_text_address+0xd/0x40 [ 507.145082][T18568] ? __pfx_filemap_read+0x10/0x10 [ 507.145156][T18568] ? kasan_save_track+0x3e/0x80 [ 507.145187][T18568] ? generic_file_read_iter+0x8f/0x510 [ 507.145212][T18568] ? __asan_memset+0x22/0x50 [ 507.145239][T18568] ? iov_iter_kvec+0xb8/0x180 [ 507.145284][T18568] __kernel_read+0x46c/0x8c0 [ 507.145323][T18568] ? __pfx___kernel_read+0x10/0x10 [ 507.145390][T18568] integrity_kernel_read+0x89/0xd0 [ 507.145427][T18568] ? __pfx_integrity_kernel_read+0x10/0x10 [ 507.145462][T18568] ? __kasan_kmalloc+0x93/0xb0 [ 507.145496][T18568] ? ima_calc_file_hash+0x820/0x16f0 [ 507.145530][T18568] ima_calc_file_hash+0x85e/0x16f0 [ 507.145554][T18568] ? __lock_acquire+0xab9/0xd20 [ 507.145606][T18568] ? __lock_acquire+0xab9/0xd20 [ 507.145645][T18568] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 507.145723][T18568] ? arch_stack_walk+0xfc/0x150 [ 507.145771][T18568] ? stack_trace_save+0x9c/0xe0 [ 507.145799][T18568] ? __pfx_stack_trace_save+0x10/0x10 [ 507.145830][T18568] ? make_vfsgid+0x49/0xa0 [ 507.145857][T18568] ? generic_fillattr+0x63d/0x9a0 [ 507.145921][T18568] ima_collect_measurement+0x428/0x8e0 [ 507.145962][T18568] ? __pfx_ima_collect_measurement+0x10/0x10 [ 507.146002][T18568] ? trace_contention_end+0x39/0x120 [ 507.146029][T18568] ? __mutex_lock+0x335/0x1360 [ 507.146107][T18568] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 507.146159][T18568] process_measurement+0x1121/0x1a40 [ 507.146208][T18568] ? __pfx_process_measurement+0x10/0x10 [ 507.146232][T18568] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 507.146265][T18568] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 507.146294][T18568] ? register_lock_class+0x51/0x320 [ 507.146375][T18568] ? __pfx_apparmor_file_open+0x10/0x10 [ 507.146412][T18568] ? tomoyo_file_open+0x165/0x220 [ 507.146466][T18568] ima_file_check+0xd7/0x120 [ 507.146513][T18568] ? __pfx_ima_file_check+0x10/0x10 [ 507.146567][T18568] security_file_post_open+0xbb/0x290 [ 507.146600][T18568] path_openat+0x2f26/0x3830 [ 507.146627][T18568] ? arch_stack_walk+0xfc/0x150 [ 507.146705][T18568] ? __pfx_path_openat+0x10/0x10 [ 507.146730][T18568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.146786][T18568] do_filp_open+0x1fa/0x410 [ 507.146812][T18568] ? __lock_acquire+0xab9/0xd20 [ 507.146851][T18568] ? __pfx_do_filp_open+0x10/0x10 [ 507.146917][T18568] ? _raw_spin_unlock+0x28/0x50 [ 507.146949][T18568] ? alloc_fd+0x64c/0x6c0 [ 507.146999][T18568] do_sys_openat2+0x121/0x1c0 [ 507.147024][T18568] ? __se_sys_futex+0x36f/0x400 [ 507.147055][T18568] ? __pfx_do_sys_openat2+0x10/0x10 [ 507.147091][T18568] ? rcu_is_watching+0x15/0xb0 [ 507.147137][T18568] __x64_sys_openat+0x138/0x170 [ 507.147169][T18568] do_syscall_64+0xfa/0x3b0 [ 507.147206][T18568] ? lockdep_hardirqs_on+0x9c/0x150 [ 507.147242][T18568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.147268][T18568] ? clear_bhb_loop+0x60/0xb0 [ 507.147301][T18568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.147327][T18568] RIP: 0033:0x7f6a7c58eb69 [ 507.147351][T18568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.147373][T18568] RSP: 002b:00007f6a7d4d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 507.147400][T18568] RAX: ffffffffffffffda RBX: 00007f6a7c7b5fa0 RCX: 00007f6a7c58eb69 [ 507.147420][T18568] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 507.147438][T18568] RBP: 00007f6a7c611df1 R08: 0000000000000000 R09: 0000000000000000 [ 507.147456][T18568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.147472][T18568] R13: 0000000000000000 R14: 00007f6a7c7b5fa0 R15: 00007ffcf8a65d58 [ 507.147513][T18568] [ 507.147722][T18568] NILFS (loop2): btree level mismatch (ino=16): 1 != 7 [ 507.153044][T18637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 507.168316][T18651] ntfs3(loop6): ino=5, "/" indx_read [ 507.224115][T18568] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 507.265040][T18640] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 507.269062][ T30] audit: type=1800 audit(507.229:1923): pid=18568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5599" name="file3" dev="loop2" ino=16 res=0 errno=0 [ 507.588138][T18640] XFS (loop5): Ending clean mount [ 509.001289][T18668] loop1: detected capacity change from 0 to 32768 [ 509.008913][ T5855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.081630][T18640] XFS (loop5): Quotacheck needed: Please wait. [ 509.632135][T18668] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 509.699765][T18640] XFS (loop5): Quotacheck: Done. [ 509.767085][T18668] XFS (loop1): Ending clean mount [ 509.788911][T18668] XFS (loop1): Quotacheck needed: Please wait. [ 509.860395][T14600] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 509.943376][T18668] XFS (loop1): Quotacheck: Done. [ 509.989560][T18693] netlink: 'syz.2.5648': attribute type 1 has an invalid length. [ 509.997426][T18693] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5648'. [ 510.118351][ T5857] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 510.171535][T18697] loop4: detected capacity change from 0 to 256 [ 510.517091][T18703] netlink: 'syz.6.5654': attribute type 1 has an invalid length. [ 510.578422][T18703] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5654'. [ 510.789517][T18712] tmpfs: Bad value for 'mpol' [ 511.258335][T18478] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 511.439235][T18478] usb 3-1: Using ep0 maxpacket: 8 [ 511.450049][T18478] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 511.488749][T18478] usb 3-1: config 179 has no interface number 0 [ 511.495145][T18478] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 511.525166][T18478] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 511.578283][T18478] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 511.629132][T18478] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 511.658541][T18478] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 511.678413][T18478] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 511.697814][T18478] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.734999][T18721] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 511.912831][T18714] loop4: detected capacity change from 0 to 32768 [ 511.934090][T18747] loop6: detected capacity change from 0 to 16 [ 512.008693][T18747] erofs (device loop6): mounted with root inode @ nid 36. [ 512.012319][T18714] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 512.269543][T18714] XFS (loop4): Ending clean mount [ 512.283984][ T980] usb 3-1: USB disconnect, device number 27 [ 512.284051][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 512.298418][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 512.376701][T18714] XFS (loop4): Quotacheck needed: Please wait. [ 512.465288][T18765] netlink: 'syz.5.5678': attribute type 21 has an invalid length. [ 512.514356][T18714] XFS (loop4): Quotacheck: Done. [ 512.559568][T18765] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5678'. [ 512.613437][T18768] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5679'. [ 512.752481][ T5855] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 512.804322][T18772] program syz.6.5680 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 513.594786][T18799] loop1: detected capacity change from 0 to 64 [ 513.637795][T18796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 513.821572][T18804] loop4: detected capacity change from 0 to 512 [ 513.916116][T18804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.953170][T18806] sctp: [Deprecated]: syz.2.5698 (pid 18806) Use of int in maxseg socket option. [ 513.953170][T18806] Use struct sctp_assoc_value instead [ 514.098979][T18804] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5697: bg 0: block 255: padding at end of block bitmap is not set [ 514.256783][T18825] loop1: detected capacity change from 0 to 256 [ 514.262679][T18824] loop2: detected capacity change from 0 to 128 [ 514.286274][ T5855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.328787][T18824] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 514.359184][T18824] FAT-fs (loop2): Filesystem has been set read-only [ 514.477694][T18827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5707'. [ 514.507800][ T5847] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 515.209403][T18847] netlink: 208 bytes leftover after parsing attributes in process `syz.2.5717'. [ 515.275982][T18819] loop5: detected capacity change from 0 to 32768 [ 515.324059][T18849] loop1: detected capacity change from 0 to 2048 [ 515.342314][T18821] loop6: detected capacity change from 0 to 32768 [ 515.359589][T18849] udf: Unknown parameter 'ÿÿÿÿ00000000000000000000' [ 515.404562][T18819] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 515.474919][T18856] netlink: 'syz.2.5720': attribute type 39 has an invalid length. [ 515.488573][T18821] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 515.552107][T18821] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 515.655953][T18821] (syz.6.5705,18821,1):ocfs2_symlink:2080 ERROR: status = -2 [ 515.663524][T18478] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 515.786395][T18861] loop4: detected capacity change from 0 to 1024 [ 515.789039][T14600] ocfs2: Unmounting device (7,5) on (node local) [ 515.824305][T17133] (syz-executor,17133,1):ocfs2_inode_is_valid_to_delete:928 ERROR: Skipping delete of root inode. [ 515.828436][T18478] usb 2-1: Using ep0 maxpacket: 8 [ 515.866280][T18861] EXT4-fs: Ignoring removed orlov option [ 515.893517][T18478] usb 2-1: config 0 has an invalid interface number: 151 but max is 1 [ 515.921312][T18478] usb 2-1: config 0 has no interface number 1 [ 515.935832][T17133] ocfs2: Unmounting device (7,6) on (node local) [ 515.938802][T18861] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 515.960826][T18478] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 516.018406][T18478] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 516.046983][T18478] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 516.080224][T18861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.198301][T18478] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 516.255614][T18478] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 516.312690][T18478] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4A, changing to 0xA [ 516.351386][T18478] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 58792, setting to 1024 [ 516.377773][ T5855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.395627][T18478] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 516.450892][T18478] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 516.478538][T18478] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.486654][T18478] usb 2-1: Product: syz [ 516.498392][T18478] usb 2-1: Manufacturer: syz [ 516.513528][T18478] usb 2-1: SerialNumber: syz [ 516.547922][T18478] usb 2-1: config 0 descriptor?? [ 516.595559][T18849] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 516.624728][T18478] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 516.657999][T18478] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 516.696202][T18478] usb 2-1: invalid MIDI in EP 0 [ 516.733800][T18885] ieee802154 phy0 wpan0: encryption failed: -22 [ 516.837045][T18478] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 516.898340][T18478] usb 2-1: USB disconnect, device number 28 [ 516.929132][ T5846] Bluetooth: hci3: unexpected event for opcode 0x1001 [ 517.205201][ T6071] udevd[6071]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 517.781927][T18916] netlink: 'syz.2.5745': attribute type 11 has an invalid length. [ 517.838481][T18916] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5745'. [ 518.091207][T18928] netlink: 'syz.6.5749': attribute type 6 has an invalid length. [ 518.934029][T18964] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5767'. [ 518.982865][T18964] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5767'. [ 519.236666][T18975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5773'. [ 520.555933][T19026] loop2: detected capacity change from 0 to 128 [ 520.582073][T19026] EXT4-fs: Ignoring removed mblk_io_submit option [ 520.594342][T19030] program syz.4.5800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 520.607893][T19024] loop1: detected capacity change from 0 to 4096 [ 520.643728][T19030] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 520.669824][T19026] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 520.818952][T19024] ntfs3(loop1): ino=1e, mi_enum_attr [ 520.825513][T19024] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 520.844919][T19026] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.5798: No space for directory leaf checksum. Please run e2fsck -D. [ 520.935301][T19026] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.5798: checksumming directory block 0 [ 521.024280][T19040] usb usb8: usbfs: process 19040 (syz.4.5804) did not claim interface 0 before use [ 521.135978][ T5847] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 521.231877][T19047] loop1: detected capacity change from 0 to 256 [ 521.259288][T19047] exfat: Deprecated parameter 'namecase' [ 521.296751][T19047] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 521.407074][T19052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5807'. [ 521.509309][ T5160] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 521.688309][ T5160] usb 5-1: Using ep0 maxpacket: 32 [ 521.700617][ T5160] usb 5-1: config 0 interface 0 has no altsetting 0 [ 521.749297][ T5160] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 521.778274][ T5160] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.786350][ T5160] usb 5-1: Product: syz [ 521.819359][ T5160] usb 5-1: Manufacturer: syz [ 521.824038][ T5160] usb 5-1: SerialNumber: syz [ 521.863535][ T5160] usb 5-1: config 0 descriptor?? [ 522.101864][T19070] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5819'. [ 522.116749][T19038] loop6: detected capacity change from 0 to 32768 [ 522.148784][T19038] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5803 (19038) [ 522.228999][T19038] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 522.256355][T19038] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 522.287438][T19038] BTRFS info (device loop6): disk space caching is enabled [ 522.317542][T19038] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 522.340621][ T5160] gs_usb 5-1:0.0: Couldn't get device config: (err=-71) [ 522.366444][ T5160] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 522.413540][ T5160] usb 5-1: USB disconnect, device number 25 [ 522.573750][T19038] BTRFS info (device loop6): rebuilding free space tree [ 522.684080][T19038] BTRFS info (device loop6): disabling free space tree [ 522.701479][T19038] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 522.744021][T19038] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 522.897804][T19100] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 523.140923][T17133] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 523.250007][T19112] netlink: 'syz.5.5827': attribute type 2 has an invalid length. [ 523.257812][T19112] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5827'. [ 523.456916][T19064] loop1: detected capacity change from 0 to 40427 [ 525.209269][T19166] loop4: detected capacity change from 0 to 1764 [ 525.270592][T19166] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 526.098476][T19204] netlink: 'syz.5.5863': attribute type 15 has an invalid length. [ 526.125395][T19204] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5863'. [ 526.302059][T19210] loop2: detected capacity change from 0 to 2048 [ 526.375781][T19210] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 526.456221][T19210] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 527.173517][T19205] syz.4.5862 (19205): drop_caches: 2 [ 527.199432][T19227] loop2: detected capacity change from 0 to 4096 [ 527.243878][T19227] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 527.295309][ T30] audit: type=1400 audit(527.239:1924): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A950D02494F07333A pid=19232 comm="syz.5.5875" [ 527.337884][T19227] ntfs3(loop2): ino=19, mi_enum_attr [ 527.386283][T19227] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 527.518149][T19240] loop1: detected capacity change from 0 to 512 [ 527.534935][T19227] ntfs3(loop2): failed to convert "c46c" to cp860 [ 527.561520][T19227] ntfs3(loop2): ino=20, mi_enum_attr [ 527.663208][T19240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.953122][T19249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5881'. [ 527.971803][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.206916][T19213] loop6: detected capacity change from 0 to 40427 [ 528.264930][T19213] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 528.288050][T19213] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 528.331447][T19213] F2FS-fs (loop6): invalid crc_offset: 33558524 [ 528.440570][T19258] loop2: detected capacity change from 0 to 4096 [ 528.731675][T19213] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 528.851320][T19213] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 528.918416][T19213] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 529.011600][T19275] program syz.5.5891 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 529.067793][ T30] audit: type=1800 audit(529.019:1925): pid=19213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5866" name="file2" dev="loop6" ino=10 res=0 errno=0 [ 529.073971][T19279] overlayfs: conflicting options: nfs_export=on,index=off [ 529.588521][T19296] QAT: failed to copy from user cfg_data. [ 529.663836][T19299] netlink: 'syz.5.5903': attribute type 21 has an invalid length. [ 529.725513][T19299] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5903'. [ 529.805542][ T30] audit: type=1326 audit(529.759:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.2.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7c58eb69 code=0x7ffc0000 [ 529.898026][ T30] audit: type=1326 audit(529.759:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.2.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7c58eb69 code=0x7ffc0000 [ 529.998788][ T30] audit: type=1326 audit(529.789:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.2.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f6a7c58eb69 code=0x7ffc0000 [ 530.020856][T19311] loop5: detected capacity change from 0 to 64 [ 530.082559][T19311] Trying to free block not in datazone [ 530.106411][T19311] Trying to free block not in datazone [ 530.112393][ T30] audit: type=1326 audit(529.789:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.2.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7c58eb69 code=0x7ffc0000 [ 530.207764][ T30] audit: type=1326 audit(529.789:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19303 comm="syz.2.5905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7c58eb69 code=0x7ffc0000 [ 530.604023][T19330] loop1: detected capacity change from 0 to 256 [ 530.623200][T19330] exfat: Deprecated parameter 'namecase' [ 530.667870][T19330] exfat: Deprecated parameter 'utf8' [ 530.690020][T19330] exfat: Deprecated parameter 'namecase' [ 530.771174][T19330] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdf1ac56c, utbl_chksum : 0xe619d30d) [ 531.094787][T19346] loop5: detected capacity change from 0 to 512 [ 531.124674][T19346] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 531.196595][T19346] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.507203][T19359] loop6: detected capacity change from 0 to 1024 [ 531.654313][T19359] syz.6.5930: attempt to access beyond end of device [ 531.654313][T19359] loop6: rw=0, sector=393308, nr_sectors = 2 limit=1024 [ 531.720184][T14600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.852889][T19367] loop1: detected capacity change from 0 to 128 [ 531.876276][T19369] IPv6: NLM_F_REPLACE set, but no existing node found! [ 531.905204][T19367] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 531.999084][ T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 532.199819][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 532.209818][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 532.230976][ T24] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 532.244940][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.281255][ T24] usb 3-1: Product: syz [ 532.285501][ T24] usb 3-1: Manufacturer: syz [ 532.321065][T19381] veth4: entered allmulticast mode [ 532.328372][ T24] usb 3-1: SerialNumber: syz [ 532.356314][ T24] usb 3-1: config 0 descriptor?? [ 532.374611][ T24] hub 3-1:0.0: bad descriptor, ignoring hub [ 532.401581][ T24] hub 3-1:0.0: probe with driver hub failed with error -5 [ 532.454735][ T24] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input20 [ 533.180152][T19378] loop1: detected capacity change from 0 to 32768 [ 533.237580][T19378] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 533.535861][T19378] XFS (loop1): Ending clean mount [ 533.567477][T19378] XFS (loop1): Quotacheck needed: Please wait. [ 533.720726][T19429] netlink: 'syz.6.5959': attribute type 3 has an invalid length. [ 533.737743][T19378] XFS (loop1): Quotacheck: Done. [ 533.758386][T19429] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5959'. [ 533.826850][ T30] audit: type=1326 audit(533.779:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.4.5962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86978eb69 code=0x7ffc0000 [ 533.928417][ T30] audit: type=1326 audit(533.779:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.4.5962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86978eb69 code=0x7ffc0000 [ 534.017887][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5964'. [ 534.020106][ T30] audit: type=1326 audit(533.779:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.4.5962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fe86978eb69 code=0x7ffc0000 [ 534.068849][ T5857] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 534.170185][ T30] audit: type=1326 audit(533.779:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.4.5962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86978eb69 code=0x7ffc0000 [ 534.242335][T19444] loop5: detected capacity change from 0 to 2048 [ 534.303121][T19444] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 535.198275][ T5160] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 535.228073][T19475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5982'. [ 535.391130][ T5160] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.413481][ T5160] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 535.425724][T19451] loop2: detected capacity change from 0 to 32768 [ 535.447690][T19451] (syz.2.5971,19451,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 535.461358][ T5160] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 535.473247][ T5160] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 535.487753][T19451] (syz.2.5971,19451,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 535.491074][ T5160] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 535.515824][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 535.528254][ T5160] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.546556][ T5160] usb 6-1: Product: syz [ 535.556689][ T5160] usb 6-1: Manufacturer: syz [ 535.562523][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20001 - 0 [ 535.578379][ T5160] usb 6-1: SerialNumber: syz [ 535.595073][T19451] JBD2: Ignoring recovery information on journal [ 535.614349][ T5160] usb 6-1: config 0 descriptor?? [ 535.656427][ T5160] garmin_gps 6-1:0.0: Garmin GPS usb/tty converter detected [ 535.702716][ T5160] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 535.752961][T19451] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 535.771492][ T5160] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 535.907443][ T5160] usb 6-1: USB disconnect, device number 11 [ 535.921638][ T5160] garmin_gps 6-1:0.0: device disconnected [ 536.073101][T19493] loop6: detected capacity change from 0 to 256 [ 536.120276][ T5972] usb 3-1: USB disconnect, device number 28 [ 536.133847][ T5847] ocfs2: Unmounting device (7,2) on (node local) [ 536.202660][T19493] FAT-fs (loop6): Directory bread(block 64) failed [ 536.213952][T19495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5991'. [ 536.228890][T19493] FAT-fs (loop6): Directory bread(block 65) failed [ 536.249561][T19493] FAT-fs (loop6): Directory bread(block 66) failed [ 536.262254][T19495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5991'. [ 536.268699][T19493] FAT-fs (loop6): Directory bread(block 67) failed [ 536.307423][T19493] FAT-fs (loop6): Directory bread(block 68) failed [ 536.326765][T19493] FAT-fs (loop6): Directory bread(block 69) failed [ 536.382699][T19493] FAT-fs (loop6): Directory bread(block 70) failed [ 536.405936][T19493] FAT-fs (loop6): Directory bread(block 71) failed [ 536.429036][T19493] FAT-fs (loop6): Directory bread(block 72) failed [ 536.445836][T19493] FAT-fs (loop6): Directory bread(block 73) failed [ 536.726180][T19486] loop1: detected capacity change from 0 to 32768 [ 536.766207][T19486] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5986 (19486) [ 536.838312][T19486] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 536.905436][T19486] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 536.936811][T19486] BTRFS info (device loop1): using free-space-tree [ 537.361252][ T5857] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 537.803112][T19557] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6014'. [ 537.852745][T19557] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6014'. [ 538.400920][T19572] netlink: 'syz.2.6021': attribute type 1 has an invalid length. [ 538.450073][T19572] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6021'. [ 538.818033][T19592] netlink: 172 bytes leftover after parsing attributes in process `syz.2.6029'. [ 538.952135][T19598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.337980][T19607] bond1: entered allmulticast mode [ 539.357314][T19607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 539.468355][ T5972] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 539.650785][T19624] loop5: detected capacity change from 0 to 1024 [ 539.651587][ T5972] usb 3-1: Using ep0 maxpacket: 16 [ 539.713756][ T5972] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 539.726834][T19624] fuse: Bad value for 'fd' [ 539.741061][ T5972] usb 3-1: config 0 has no interface number 0 [ 539.747231][ T5972] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 539.825027][ T5972] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 539.855662][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.881220][ T12] hfsplus: b-tree write err: -5, ino 4 [ 539.907312][ T5972] usb 3-1: Product: syz [ 539.931767][ T5972] usb 3-1: Manufacturer: syz [ 539.950107][ T5972] usb 3-1: SerialNumber: syz [ 539.980418][ T5972] usb 3-1: config 0 descriptor?? [ 539.997199][T19630] loop6: detected capacity change from 0 to 2048 [ 540.061618][T19630] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 540.121283][T19636] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 540.216402][T19599] loop1: detected capacity change from 0 to 32768 [ 540.266150][T19599] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6031 (19599) [ 540.387819][T19638] loop4: detected capacity change from 0 to 512 [ 540.387876][T19599] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 540.438660][ T5972] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 540.439225][T19599] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 540.488051][ T5972] usb 3-1: USB disconnect, device number 29 [ 540.496295][T19638] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 540.514059][T19599] BTRFS info (device loop1): disk space caching is enabled [ 540.525122][T19638] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 540.547871][T19638] System zones: 0-1, 15-15, 18-18, 34-34 [ 540.555186][T19599] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 540.587257][T19638] EXT4-fs (loop4): orphan cleanup on readonly fs [ 540.595338][T19638] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 540.606651][T19638] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 540.648299][T19638] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 540.659039][T19638] EXT4-fs (loop4): 1 truncate cleaned up [ 540.676958][T19638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 540.773403][T19638] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 540.834973][T19599] BTRFS info (device loop1): rebuilding free space tree [ 540.889916][T19599] BTRFS info (device loop1): disabling free space tree [ 540.903971][T19599] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 540.954906][T19599] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 540.960278][ T5855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.284566][ T5857] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 541.739349][T19651] loop5: detected capacity change from 0 to 32768 [ 541.772898][T19651] ERROR: (device loop5): xtTruncate: xt_getpage: xtree page corrupt [ 541.772898][T19651] [ 541.876201][T19651] ERROR: (device loop5): remounting filesystem as read-only [ 541.943096][T19688] ip6gretap2: entered promiscuous mode [ 542.149104][T19694] netlink: 'syz.4.6065': attribute type 3 has an invalid length. [ 542.156995][T19694] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6065'. [ 542.246652][ T30] audit: type=1326 audit(542.199:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19697 comm="syz.2.6068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7c58eb69 code=0x7ffc0000 [ 542.381555][ T30] audit: type=1326 audit(542.199:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19697 comm="syz.2.6068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7c58eb69 code=0x7ffc0000 [ 542.505009][ T30] audit: type=1326 audit(542.269:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19697 comm="syz.2.6068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f6a7c58eb69 code=0x7ffc0000 [ 542.553279][T19706] loop4: detected capacity change from 0 to 2048 [ 542.605011][T19706] udf: Bad value for 'mode' [ 542.649052][ T30] audit: type=1326 audit(542.269:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19697 comm="syz.2.6068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7c58eb69 code=0x7ffc0000 [ 542.670951][ C0] vkms_vblank_simulate: vblank timer overrun [ 542.733796][ T30] audit: type=1326 audit(542.269:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19697 comm="syz.2.6068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a7c58eb69 code=0x7ffc0000 [ 542.755662][ C0] vkms_vblank_simulate: vblank timer overrun [ 542.758479][ T5160] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 542.947370][T19720] kernel read not supported for file / òœ7³ÏøÃ¢W)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 19720 comm: syz.2.6078) [ 542.959379][ T5160] usb 7-1: config 201 has an invalid interface number: 249 but max is 0 [ 542.989917][ T30] audit: type=1800 audit(542.939:1940): pid=19720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6078" name=A0F29C1437B3CFF8C3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=51636 res=0 errno=0 [ 543.021662][ T5160] usb 7-1: config 201 has no interface number 0 [ 543.027997][ T5160] usb 7-1: config 201 interface 249 has no altsetting 0 [ 543.069561][ T5160] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 543.085637][ T5160] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.105600][ T5160] usb 7-1: Product: syz [ 543.114222][ T5160] usb 7-1: Manufacturer: syz [ 543.124351][ T5160] usb 7-1: SerialNumber: syz [ 543.427226][ T5160] ath6kl: Failed to submit usb control message: -71 [ 543.454548][ T5160] ath6kl: unable to send the bmi data to the device: -71 [ 543.477241][T19737] netlink: 'syz.1.6087': attribute type 46 has an invalid length. [ 543.518286][ T5160] ath6kl: Unable to send get target info: -71 [ 543.565340][ T5160] ath6kl: Failed to init ath6kl core: -71 [ 543.615916][ T5160] ath6kl_usb 7-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 543.702612][ T5160] usb 7-1: USB disconnect, device number 3 [ 543.788471][T19747] netlink: 'syz.5.6091': attribute type 8 has an invalid length. [ 544.195252][T19741] loop1: detected capacity change from 0 to 32768 [ 544.239115][T19741] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6088 (19741) [ 544.255512][T19760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.326243][T19741] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 544.367358][T19741] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 544.408476][T19741] BTRFS info (device loop1): disk space caching is enabled [ 544.441443][T19741] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 544.499749][T19764] loop5: detected capacity change from 0 to 2048 [ 544.635426][T19782] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 544.739755][T19741] BTRFS info (device loop1): rebuilding free space tree [ 544.761427][T19764] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 544.820718][T19741] BTRFS info (device loop1): disabling free space tree [ 544.857172][T19741] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 544.878607][T19764] Remounting filesystem read-only [ 544.884701][T19764] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 544.914830][T19741] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 545.185421][ T5857] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 545.644503][T19751] loop2: detected capacity change from 0 to 40427 [ 545.738851][T19751] F2FS-fs (loop2): Image doesn't support compression [ 545.770168][T19751] F2FS-fs (loop2): build fault injection rate: 690 [ 545.812838][T19751] F2FS-fs (loop2): invalid crc value [ 546.090265][T19816] loop6: detected capacity change from 0 to 1764 [ 546.172504][T19816] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 546.200252][T19751] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 546.251932][T19751] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 546.360034][T19751] F2FS-fs (loop2): Image doesn't support compression [ 546.398301][T19751] F2FS-fs (loop2): build fault injection rate: 690 [ 546.958461][ T5972] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 547.171274][ T5972] usb 7-1: Using ep0 maxpacket: 32 [ 547.183254][ T5972] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 547.201355][ T5972] usb 7-1: config 0 has no interface number 0 [ 547.207521][ T5972] usb 7-1: config 0 interface 2 has no altsetting 0 [ 547.238752][ T5972] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 547.258287][ T5972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.288474][ T5972] usb 7-1: Product: syz [ 547.292718][ T5972] usb 7-1: Manufacturer: syz [ 547.318471][ T5972] usb 7-1: SerialNumber: syz [ 547.348899][ T5972] usb 7-1: config 0 descriptor?? [ 547.463224][T19859] openvswitch: netlink: Unknown key attributes 2 [ 547.581545][ T5972] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 547.678840][ T5972] snd-usb-audio 7-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 547.790937][ T5972] usb 7-1: USB disconnect, device number 4 [ 547.831700][T19871] loop4: detected capacity change from 0 to 1764 [ 547.891934][T18900] udevd[18900]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 548.080567][T19881] netlink: 'syz.5.6148': attribute type 1 has an invalid length. [ 548.193803][T19883] ipip0: entered promiscuous mode [ 548.495171][T19896] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6155'. [ 548.766313][T19909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6161'. [ 548.792841][T19909] netlink: 'syz.1.6161': attribute type 1 has an invalid length. [ 548.970575][T19915] loop6: detected capacity change from 0 to 512 [ 549.019665][T19915] EXT4-fs: inline encryption not supported [ 549.086838][T19915] EXT4-fs: Ignoring removed mblk_io_submit option [ 549.136130][T19915] EXT4-fs (loop6): Test dummy encryption mode enabled [ 549.175046][T19915] EXT4-fs (loop6): orphan cleanup on readonly fs [ 549.185861][T19915] EXT4-fs error (device loop6): ext4_orphan_get:1392: comm syz.6.6163: inode #13: comm syz.6.6163: iget: illegal inode # [ 549.203697][T19915] EXT4-fs (loop6): Remounting filesystem read-only [ 549.217762][T19915] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 549.238614][T19915] EXT4-fs: inline encryption not supported [ 549.244745][T19915] EXT4-fs: Ignoring removed mblk_io_submit option [ 549.439188][T17133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.725277][T19897] loop2: detected capacity change from 0 to 32768 [ 549.798387][T19897] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6154 (19897) [ 549.883489][T19897] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 549.925217][T19897] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 549.976278][T19897] BTRFS info (device loop2): using free-space-tree [ 550.082279][T19959] loop4: detected capacity change from 0 to 256 [ 550.418618][ T5847] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 550.628329][ T5160] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 550.730322][T19981] syz_tun: refused to change device tx_queue_len [ 550.841319][ T5160] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 550.882106][ T5160] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 550.948361][ T5160] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 550.999956][ T5160] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.048765][T19974] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 551.125879][ T5160] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 551.127634][T19967] loop6: detected capacity change from 0 to 32768 [ 551.149820][T19967] btrfs: Deprecated parameter 'usebackuproot' [ 551.155968][T19967] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 551.275424][T19967] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6183 (19967) [ 551.450648][T19967] BTRFS info (device loop6 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 551.497495][T19967] BTRFS info (device loop6 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 551.557911][ T5929] usb 6-1: USB disconnect, device number 12 [ 551.566897][T19967] BTRFS info (device loop6 state S): disk space caching is enabled [ 551.576501][T19967] BTRFS warning (device loop6 state S): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 551.591575][T19967] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 2048 [ 551.604460][T19967] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 2048 [ 551.654213][T19967] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 551.703708][T19967] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 551.743091][T19967] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 2048 [ 551.747871][T19997] veth5: entered promiscuous mode [ 551.759458][T19997] veth5: entered allmulticast mode [ 551.811873][T19967] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 2048 [ 551.874630][T19967] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048 [ 552.038783][T19967] btrfs: Deprecated parameter 'usebackuproot' [ 552.044938][T19967] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 552.058601][T19967] BTRFS warning (device loop6 state MCS): remount supports changing free space tree only from RO to RW [ 552.138682][T19967] BTRFS info (device loop6 state MCS): enabling free space tree [ 552.146394][T19967] BTRFS info (device loop6 state MCS): force clearing of disk cache [ 552.181238][T19967] BTRFS info (device loop6 state MCS): trying to use backup root at mount time [ 552.204797][T19967] BTRFS info (device loop6 state MCS): disabling disk space caching [ 552.358654][T17133] BTRFS info (device loop6 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 552.519743][T20028] loop5: detected capacity change from 0 to 4096 [ 552.688986][T20039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 552.752319][T20028] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 552.829829][T20028] ntfs3(loop5): ino=9, ntfs_sync_fs failed, -22. [ 552.998625][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 553.190169][ T24] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 553.198751][T18478] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 553.211271][ T24] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 553.242341][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 553.293670][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 553.344813][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 553.390696][ T24] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 553.409099][T18478] usb 5-1: too many configurations: 89, using maximum allowed: 8 [ 553.428349][ T24] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 553.439260][ T24] usb 7-1: Product: syz [ 553.443477][ T24] usb 7-1: Manufacturer: syz [ 553.457482][T20056] netlink: 'syz.5.6217': attribute type 11 has an invalid length. [ 553.480782][T18478] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 553.499068][T18478] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.518353][T18478] usb 5-1: Product: syz [ 553.519125][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 553.528006][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 553.529114][T18478] usb 5-1: Manufacturer: syz [ 553.547836][T18478] usb 5-1: SerialNumber: syz [ 553.591244][T18478] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 553.615638][ T24] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 553.647949][ T5929] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 553.658731][ T24] cdc_wdm 7-1:1.0: Unknown control protocol [ 553.800553][T18478] usb 7-1: USB disconnect, device number 5 [ 553.835354][T20061] loop2: detected capacity change from 0 to 1024 [ 553.867504][T20061] hfsplus: bad catalog entry type [ 553.901489][T20067] netlink: 'syz.1.6222': attribute type 1 has an invalid length. [ 553.921734][T20067] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6222'. [ 554.070470][ T2951] hfsplus: b-tree write err: -5, ino 4 [ 554.124801][ T24] usb 5-1: USB disconnect, device number 26 [ 554.318259][T20073] netlink: 'syz.2.6226': attribute type 13 has an invalid length. [ 554.412075][T20073] gretap0: refused to change device tx_queue_len [ 554.451926][T20073] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 554.718250][ T5929] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 554.725361][ T5929] ath9k_htc: Failed to initialize the device [ 554.768406][ T24] usb 5-1: ath9k_htc: USB layer deinitialized [ 555.068794][T20096] loop4: detected capacity change from 0 to 512 [ 555.099518][T20096] EXT4-fs: Ignoring removed oldalloc option [ 555.146067][T20096] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 555.208730][T20096] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 555.281108][T20096] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6237: Failed to acquire dquot type 1 [ 555.373086][T20096] EXT4-fs (loop4): 1 truncate cleaned up [ 555.395727][T20096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.433575][T20100] loop5: detected capacity change from 0 to 4096 [ 555.457546][T20100] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 555.480576][T20096] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 555.535421][T20096] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 555.535506][T20096] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6237: Failed to acquire dquot type 1 [ 555.619558][T20100] ntfs3(loop5): ino=19, mi_enum_attr [ 555.619600][T20100] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 555.659342][T20100] ntfs3(loop5): failed to convert "c46c" to iso8859-9 [ 555.714800][T20100] ntfs3(loop5): ino=20, mi_enum_attr [ 555.723365][T20100] ntfs3(loop5): ino=1e, mi_enum_attr [ 555.753191][ T5855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.255935][T20118] netlink: 'syz.1.6246': attribute type 2 has an invalid length. [ 556.259892][T20119] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6247'. [ 556.308382][T20118] netlink: 'syz.1.6246': attribute type 1 has an invalid length. [ 556.770239][T20129] loop1: detected capacity change from 0 to 4096 [ 556.773313][T20135] libceph: resolve '+ælc' (ret=-3): failed [ 556.807177][T20129] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 556.825423][T20131] loop5: detected capacity change from 0 to 4096 [ 557.096909][T20140] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6257'. [ 558.086281][T20168] loop5: detected capacity change from 0 to 512 [ 558.113016][ T30] audit: type=1326 audit(558.069:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20167 comm="syz.2.6270" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a7c58eb69 code=0x0 [ 558.142683][T20159] "syz.1.6266" (20159) uses obsolete ecb(arc4) skcipher [ 558.171826][T20168] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.6269: casefold flag without casefold feature [ 558.252437][T20168] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.6269: couldn't read orphan inode 15 (err -117) [ 558.357627][T20168] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.512433][T14600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.560843][T20146] loop4: detected capacity change from 0 to 32768 [ 558.625467][T20146] ERROR: (device loop4): xtTruncate_pmap: xt_getpage: xtree page corrupt [ 558.625467][T20146] [ 558.726682][T20146] ERROR: (device loop4): remounting filesystem as read-only [ 558.748489][T20146] ERROR: (device loop4): jfs_rename: [ 558.748489][T20146] [ 558.858445][ T5855] ERROR: (device loop4): xtTruncate: xt_getpage: xtree page corrupt [ 558.858445][ T5855] [ 558.881010][T20178] loop5: detected capacity change from 0 to 256 [ 558.900246][T20178] exfat: Deprecated parameter 'namecase' [ 558.965233][T20178] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 559.198374][T20174] loop1: detected capacity change from 0 to 32768 [ 559.304239][T20174] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 559.539840][T20188] loop5: detected capacity change from 0 to 8192 [ 559.591342][T20188] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 559.647299][T20174] XFS (loop1): Ending clean mount [ 559.766335][T20203] loop2: detected capacity change from 0 to 256 [ 559.829101][T20203] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x24500465, utbl_chksum : 0xe619d30d) [ 559.873652][ T5857] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 560.058921][T20205] loop5: detected capacity change from 0 to 512 [ 560.212464][T20205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.409844][ T5929] IPVS: starting estimator thread 0... [ 560.528362][T20216] IPVS: using max 24 ests per chain, 57600 per kthread [ 560.593825][T14600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.689001][ T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 560.878283][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 560.894218][T20234] netlink: 'syz.2.6294': attribute type 10 has an invalid length. [ 560.904494][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 560.926545][T20234] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6294'. [ 560.950517][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 561.013171][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 561.028387][T20238] loop6: detected capacity change from 0 to 512 [ 561.059953][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 561.070950][T20238] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 561.082938][T20238] EXT4-fs (loop6): orphan cleanup on readonly fs [ 561.103415][T20238] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 561.130006][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 561.140859][T20238] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 561.194620][T20238] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 561.212263][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 561.238451][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.246509][ T24] usb 5-1: Product: syz [ 561.269700][T20238] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.6296: bg 0: block 40: padding at end of block bitmap is not set [ 561.298706][ T24] usb 5-1: Manufacturer: syz [ 561.303369][ T24] usb 5-1: SerialNumber: syz [ 561.332084][ T24] usb 5-1: config 0 descriptor?? [ 561.344780][T20238] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 561.379409][T20238] EXT4-fs (loop6): 1 truncate cleaned up [ 561.397930][T20238] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 561.551032][T19450] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 561.561703][ T24] appledisplay 5-1:0.0: Error while getting initial brightness: -71 [ 561.629720][ T24] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -71 [ 561.656705][T20238] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 561.682242][ T24] usb 5-1: USB disconnect, device number 27 [ 561.812389][T17133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.877181][T20261] loop1: detected capacity change from 0 to 256 [ 561.895189][T20262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6306'. [ 561.909778][T20261] exfat: Deprecated parameter 'utf8' [ 561.915238][T20261] exfat: Deprecated parameter 'namecase' [ 561.927243][T20261] exfat: Deprecated parameter 'namecase' [ 561.967210][T20261] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 562.052737][T20261] ./file0: Can't lookup blockdev [ 562.218140][T20270] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6311'. [ 562.236921][T20270] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6311'. [ 562.296616][T20270] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6311'. [ 562.341817][T20270] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6311'. [ 562.588651][T20283] dlm: no locking on control device [ 562.786422][T20293] loop5: detected capacity change from 0 to 512 [ 562.823558][T20293] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 562.893657][T20293] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6323: bg 0: block 384: padding at end of block bitmap is not set [ 562.952723][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.998440][T20293] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 563.024111][T20293] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.6323: attempt to clear invalid blocks 983260 len 1 [ 563.061508][T20293] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz.5.6323: Invalid inode table block 0 in block_group 0 [ 563.105693][T20296] loop1: detected capacity change from 0 to 4096 [ 563.126508][T20293] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 563.178091][T20296] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 563.216808][T20293] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 563.278156][T20296] ntfs3(loop1): ino=1a, mi_enum_attr [ 563.283665][T20296] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 563.291307][T20293] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz.5.6323: Invalid inode table block 0 in block_group 0 [ 563.367926][T20293] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 563.398801][T20293] EXT4-fs error (device loop5): ext4_truncate:4666: inode #11: comm syz.5.6323: mark_inode_dirty error [ 563.555367][T20293] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 563.564808][ T12] ntfs3(loop1): ino=1e, ntfs3_write_inode failed, -22. [ 563.609022][T20293] EXT4-fs (loop5): 1 truncate cleaned up [ 563.637866][T20293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.781441][T20293] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.6323: Invalid inode bitmap blk 0 in block_group 0 [ 563.934512][T14600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.960249][T20329] loop6: detected capacity change from 0 to 2048 [ 563.986301][T20329] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 564.149201][T20336] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 564.179768][T20336] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 564.230007][T20336] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 564.328383][ T980] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 564.539468][ T980] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 44, changing to 9 [ 564.561093][ T980] usb 3-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.00 [ 564.577636][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.603258][ T980] usb 3-1: config 0 descriptor?? [ 564.832041][T20360] loop6: detected capacity change from 0 to 256 [ 564.858560][ T980] usbhid 3-1:0.0: can't add hid device: -71 [ 564.864654][ T980] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 564.891621][ T980] usb 3-1: USB disconnect, device number 30 [ 564.982772][T20360] FAT-fs (loop6): Directory bread(block 64) failed [ 565.033906][T20360] FAT-fs (loop6): Directory bread(block 65) failed [ 565.078448][T20360] FAT-fs (loop6): Directory bread(block 66) failed [ 565.085235][T20360] FAT-fs (loop6): Directory bread(block 67) failed [ 565.109866][T20360] FAT-fs (loop6): Directory bread(block 68) failed [ 565.138021][T20360] FAT-fs (loop6): Directory bread(block 69) failed [ 565.173956][T20360] FAT-fs (loop6): Directory bread(block 70) failed [ 565.188404][T20360] FAT-fs (loop6): Directory bread(block 71) failed [ 565.202355][T20360] FAT-fs (loop6): Directory bread(block 72) failed [ 565.216450][T20360] FAT-fs (loop6): Directory bread(block 73) failed [ 565.879184][ T24] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 565.907669][T20398] loop5: detected capacity change from 0 to 8 [ 565.915649][ T5929] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 566.065929][ T24] usb 7-1: config 0 has an invalid interface number: 20 but max is 0 [ 566.074818][T20400] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 566.088763][ T24] usb 7-1: config 0 has no interface number 0 [ 566.091103][ T5929] usb 5-1: Using ep0 maxpacket: 8 [ 566.094918][ T24] usb 7-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 566.122761][ T5929] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 566.138132][ T24] usb 7-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 566.147468][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.148507][ T5929] usb 5-1: config 179 has no interface number 0 [ 566.185548][ T24] usb 7-1: Product: syz [ 566.195664][ T24] usb 7-1: Manufacturer: syz [ 566.200748][ T24] usb 7-1: SerialNumber: syz [ 566.226575][ T24] usb 7-1: config 0 descriptor?? [ 566.232715][T20387] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 566.246153][ T5929] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 566.251020][ T24] usb-storage 7-1:0.20: USB Mass Storage device detected [ 566.300817][ T5929] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 566.311213][ T24] usb-storage 7-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 566.365548][ T5929] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 566.384040][T20409] loop1: detected capacity change from 0 to 4096 [ 566.392840][ T5929] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 566.402629][T20409] EXT4-fs: Ignoring removed mblk_io_submit option [ 566.413638][T20409] EXT4-fs (loop1): Test dummy encryption mode enabled [ 566.439456][ T5929] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 566.457470][T20409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.470184][ T5929] usb 5-1: config 179 interface 65 has no altsetting 0 [ 566.470238][ T5929] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 566.470266][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.495030][ T5160] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 566.521118][ T5929] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input22 [ 566.543721][ T24] scsi host1: usb-storage 7-1:0.20 [ 566.679430][ T5160] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 566.690476][ T5160] usb 6-1: config 0 has no interface number 0 [ 566.720199][ T5160] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 566.742050][ T5160] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.744479][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.762358][ T24] usb 7-1: USB disconnect, device number 6 [ 566.775138][ T5160] usb 6-1: Product: syz [ 566.795118][ T5160] usb 6-1: Manufacturer: syz [ 566.800073][ T5160] usb 6-1: SerialNumber: syz [ 566.813906][ T5929] usb 5-1: USB disconnect, device number 28 [ 566.866890][ T5160] usb 6-1: config 0 descriptor?? [ 567.096267][ T5160] usb 6-1: Found UVC 0.08 device syz (046d:0823) [ 567.118533][ T5160] usb 6-1: No valid video chain found. [ 567.153737][ T5160] usb 6-1: USB disconnect, device number 13 [ 567.407486][T20433] trusted_key: encrypted_key: keylen parameter is missing [ 567.798469][T20447] loop5: detected capacity change from 0 to 64 [ 567.920038][T20453] netlink: 'syz.2.6398': attribute type 1 has an invalid length. [ 568.338726][T20469] netlink: 'syz.5.6406': attribute type 8 has an invalid length. [ 568.549208][ T5160] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 568.718252][ T5160] usb 7-1: Using ep0 maxpacket: 32 [ 568.731276][ T5160] usb 7-1: config 0 has an invalid interface number: 183 but max is 0 [ 568.750923][ T5160] usb 7-1: config 0 has no interface number 0 [ 568.770807][ T5160] usb 7-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 568.801195][ T5160] usb 7-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 568.828425][ T5160] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.858483][ T5160] usb 7-1: Product: syz [ 568.870066][ T5160] usb 7-1: Manufacturer: syz [ 568.895067][ T5160] usb 7-1: SerialNumber: syz [ 568.929435][ T5160] usb 7-1: config 0 descriptor?? [ 568.966466][T20467] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 569.134853][T20460] loop4: detected capacity change from 0 to 32768 [ 569.165749][T20460] (syz.4.6402,20460,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 569.214666][ T5929] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 569.221491][T20467] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 569.259083][T20460] (syz.4.6402,20460,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 569.313795][T20460] JBD2: Ignoring recovery information on journal [ 569.368566][ T5929] usb 3-1: Using ep0 maxpacket: 32 [ 569.371583][ T5160] net1080 7-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.6-1, NetChip TurboCONNECT, 7a:e5:29:11:d5:b2 [ 569.387214][ T5929] usb 3-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 569.406839][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.428359][ T5929] usb 3-1: config 0 descriptor?? [ 569.458656][ T5929] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 569.509384][T20460] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 569.535436][ T5972] usb 7-1: USB disconnect, device number 7 [ 569.544375][ T5972] net1080 7-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.6-1, NetChip TurboCONNECT [ 569.577141][T20460] (syz.4.6402,20460,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 569.622175][T20507] netlink: zone id is out of range [ 569.645005][T20507] netlink: zone id is out of range [ 569.655207][T20507] netlink: zone id is out of range [ 569.678847][T20507] netlink: zone id is out of range [ 569.684533][T20507] netlink: zone id is out of range [ 569.701284][T20507] netlink: zone id is out of range [ 569.718124][T20460] (syz.4.6402,20460,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 569.741855][T20507] netlink: zone id is out of range [ 569.743308][T20460] (syz.4.6402,20460,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 569.750637][T20507] netlink: zone id is out of range [ 569.774195][T20460] (syz.4.6402,20460,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 569.781728][T20507] netlink: zone id is out of range [ 569.786530][T20460] (syz.4.6402,20460,0):ocfs2_quota_read:201 ERROR: status = -5 [ 569.796201][T20460] Quota error (device loop4): find_block_dqentry: Can't read quota tree block 6 [ 569.807908][T20460] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 569.818751][T20507] netlink: zone id is out of range [ 569.824053][T20460] (syz.4.6402,20460,0):ocfs2_acquire_dquot:890 ERROR: status = -5 [ 569.873650][ T5929] gspca_sunplus: reg_w_riv err -71 [ 569.894110][ T5929] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 569.896656][T20509] loop5: detected capacity change from 0 to 4096 [ 569.930980][ T5929] usb 3-1: USB disconnect, device number 31 [ 569.995908][ T5855] ocfs2: Unmounting device (7,4) on (node local) [ 570.698897][T20530] netlink: 260 bytes leftover after parsing attributes in process `syz.5.6433'. [ 570.795725][T20533] loop6: detected capacity change from 0 to 1764 [ 570.940191][T20540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6440'. [ 571.366731][T20558] netlink: 'syz.6.6447': attribute type 2 has an invalid length. [ 571.737989][T20574] loop5: detected capacity change from 0 to 16 [ 571.797702][T20574] cramfs: Error -3 while decompressing! [ 571.838347][T20574] cramfs: ffffffff99bc8628(27)->ffff88806cee9000(4096) [ 571.863713][T20574] cramfs: Error -3 while decompressing! [ 571.887096][T20579] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6457'. [ 571.914751][T20574] cramfs: ffffffff99bc8643(16)->ffff88806a5d0000(4096) [ 571.931970][T20579] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6457'. [ 571.948833][T20574] cramfs: Error -3 while decompressing! [ 571.958409][T20574] cramfs: ffffffff99bc8628(27)->ffff88806cee9000(4096) [ 571.974523][T20579] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6457'. [ 571.997023][ T30] audit: type=1800 audit(571.939:1942): pid=20574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6455" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 572.188028][T20589] netlink: 41 bytes leftover after parsing attributes in process `syz.2.6462'. [ 572.242963][T20589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6462'. [ 572.457687][T20598] netlink: 'syz.5.6467': attribute type 11 has an invalid length. [ 572.469494][T20598] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6467'. [ 572.498521][ T5972] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 572.509614][T20601] loop2: detected capacity change from 0 to 128 [ 572.591127][T20601] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 572.656546][T20601] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 5 (only 1 groups) [ 572.688882][ T5972] usb 7-1: Using ep0 maxpacket: 32 [ 572.763151][ T5972] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 572.780786][ T5972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.811619][ T5972] usb 7-1: Product: syz [ 572.815861][ T5972] usb 7-1: Manufacturer: syz [ 572.821267][ T5972] usb 7-1: SerialNumber: syz [ 572.829521][ T5847] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 572.839559][ T5972] usb 7-1: config 0 descriptor?? [ 573.124065][T20587] loop4: detected capacity change from 0 to 32768 [ 573.158773][T20587] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6461 (20587) [ 573.237892][T20619] dlm: no local IP address has been set [ 573.252761][ T5972] peak_usb 7-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 573.267314][T20619] dlm: cannot start dlm midcomms -107 [ 573.269519][T20587] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 573.273676][ T5972] peak_usb 7-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 573.338773][T20587] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 573.348062][T20587] BTRFS info (device loop4): disk space caching is enabled [ 573.401463][T20587] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 573.509671][ T5972] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -71 [ 573.596233][ T5972] usb 7-1: USB disconnect, device number 8 [ 573.682372][T20587] BTRFS info (device loop4): rebuilding free space tree [ 573.822945][T20587] BTRFS info (device loop4): disabling free space tree [ 573.866096][T20587] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 573.928358][T20587] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 574.024603][T20655] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6486'. [ 574.087827][T20655] netlink: 'syz.2.6486': attribute type 1 has an invalid length. [ 574.135408][T20655] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6486'. [ 574.230713][T20659] loop5: detected capacity change from 0 to 256 [ 574.295884][T20662] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 574.309069][ T5855] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 574.393166][T20659] FAT-fs (loop5): Directory bread(block 64) failed [ 574.415822][T20659] FAT-fs (loop5): Directory bread(block 65) failed [ 574.438402][T20659] FAT-fs (loop5): Directory bread(block 66) failed [ 574.478392][T20659] FAT-fs (loop5): Directory bread(block 67) failed [ 574.508660][T20659] FAT-fs (loop5): Directory bread(block 68) failed [ 574.546953][T20659] FAT-fs (loop5): Directory bread(block 69) failed [ 574.568967][T20659] FAT-fs (loop5): Directory bread(block 70) failed [ 574.575594][T20659] FAT-fs (loop5): Directory bread(block 71) failed [ 574.632240][T20659] FAT-fs (loop5): Directory bread(block 72) failed [ 574.668667][ T5972] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 574.676481][T20659] FAT-fs (loop5): Directory bread(block 73) failed [ 574.800914][T20659] syz.5.6488: attempt to access beyond end of device [ 574.800914][T20659] loop5: rw=2051, sector=1192, nr_sectors = 32 limit=256 [ 574.888932][ T5972] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 574.898043][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.930979][ T5972] usb 3-1: Product: syz [ 574.935218][ T5972] usb 3-1: Manufacturer: syz [ 574.968375][ T5972] usb 3-1: SerialNumber: syz [ 574.989363][ T5972] usb 3-1: config 0 descriptor?? [ 575.048855][T20678] loop6: detected capacity change from 0 to 64 [ 575.211740][ T5972] hso 3-1:0.0: Failed to find INT IN ep [ 575.243059][ T5972] usb-storage 3-1:0.0: USB Mass Storage device detected [ 575.463423][ T5972] usb 3-1: USB disconnect, device number 32 [ 575.549640][T20694] tc_dump_action: action bad kind [ 575.860453][T20706] loop4: detected capacity change from 0 to 16 [ 575.888944][T20706] erofs (device loop4): mounted with root inode @ nid 36. [ 576.182324][T20718] loop4: detected capacity change from 0 to 16 [ 576.189039][T20715] loop1: detected capacity change from 0 to 512 [ 576.216015][T20715] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 576.269470][T20718] erofs (device loop4): mounted with root inode @ nid 36. [ 576.276701][T20715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.432750][T20715] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.6514: corrupted xattr block 19: overlapping e_value [ 576.467107][T20715] EXT4-fs error (device loop1): ext4_get_inode_usage:884: inode #15: comm syz.1.6514: corrupted xattr block 19: overlapping e_value [ 576.755000][T20738] loop5: detected capacity change from 0 to 256 [ 576.764148][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.810352][T20738] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 576.844836][T20741] loop4: detected capacity change from 0 to 1024 [ 577.123715][T20749] bond0: (slave erspan0): Opening slave failed [ 577.218835][T20753] netlink: 'syz.6.6533': attribute type 21 has an invalid length. [ 577.238827][T20753] __nla_validate_parse: 5 callbacks suppressed [ 577.238848][T20753] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6533'. [ 577.318620][T20753] netlink: 'syz.6.6533': attribute type 4 has an invalid length. [ 577.326432][T20753] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6533'. [ 578.313076][ T30] audit: type=1326 audit(578.269:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20791 comm="syz.4.6552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86978eb69 code=0x7ffc0000 [ 578.323414][T20795] loop2: detected capacity change from 0 to 8 [ 578.418897][ T30] audit: type=1326 audit(578.269:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20791 comm="syz.4.6552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86978eb69 code=0x7ffc0000 [ 578.453955][T20795] SQUASHFS error: Failed to read block 0x63a: -5 [ 578.499839][T20795] SQUASHFS error: Unable to read metadata cache entry [638] [ 578.524402][ T30] audit: type=1326 audit(578.309:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20791 comm="syz.4.6552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fe86978eb69 code=0x7ffc0000 [ 578.528271][T20795] SQUASHFS error: Unable to read directory block [26067d:0] [ 578.617642][T20757] loop1: detected capacity change from 0 to 32768 [ 578.654228][ T30] audit: type=1326 audit(578.309:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20791 comm="syz.4.6552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86978eb69 code=0x7ffc0000 [ 578.742970][ T30] audit: type=1326 audit(578.309:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20791 comm="syz.4.6552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86978eb69 code=0x7ffc0000 [ 578.776034][T20757] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 578.858496][ T5972] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 579.011299][ T5972] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 579.031584][ T5972] usb 7-1: config 0 has no interface number 0 [ 579.037781][ T5972] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 579.069148][T20757] XFS (loop1): Starting recovery (logdev: internal) [ 579.137411][ T5972] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 579.147632][T20817] loop4: detected capacity change from 0 to 1024 [ 579.163440][ T5972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.192344][ T5972] usb 7-1: Product: syz [ 579.196576][ T5972] usb 7-1: Manufacturer: syz [ 579.240710][ T5972] usb 7-1: SerialNumber: syz [ 579.266897][ T5972] usb 7-1: config 0 descriptor?? [ 579.342258][ T5972] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 579.384984][T20757] XFS (loop1): Ending recovery (logdev: internal) [ 579.475013][ T13] hfsplus: b-tree write err: -5, ino 4 [ 579.647197][ T5857] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 579.727141][ T5972] usb 7-1: USB disconnect, device number 9 [ 579.764834][ T5972] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 580.114256][T20827] netlink: 'syz.4.6566': attribute type 4 has an invalid length. [ 580.190773][T20815] loop2: detected capacity change from 0 to 32768 [ 580.482631][T20821] loop5: detected capacity change from 0 to 32768 [ 580.553555][T20821] JBD2: Ignoring recovery information on journal [ 580.750355][T20821] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 581.034526][T14600] ocfs2: Unmounting device (7,5) on (node local) [ 581.090122][T20853] dlm: plock device version mismatch: kernel (1.2.0), user (1.33554432.0) [ 581.313672][T20859] netlink: 'syz.1.6582': attribute type 11 has an invalid length. [ 581.348986][T20861] netlink: 'syz.6.6583': attribute type 1 has an invalid length. [ 581.364320][T20859] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6582'. [ 581.383847][T20861] net_ratelimit: 19 callbacks suppressed [ 581.383869][T20861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.820970][T20878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6589'. [ 581.854401][T20881] cgroup: release_agent respecified [ 582.076354][T20892] loop6: detected capacity change from 0 to 64 [ 582.132393][T20892] syz.6.6594: attempt to access beyond end of device [ 582.132393][T20892] loop6: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 582.166185][T20892] Buffer I/O error on dev loop6, logical block 134217734, async page read [ 582.287819][T20892] syz.6.6594: attempt to access beyond end of device [ 582.287819][T20892] loop6: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 582.310985][T20892] Buffer I/O error on dev loop6, logical block 134217734, async page read [ 582.494517][T20902] netlink: 'syz.2.6599': attribute type 21 has an invalid length. [ 582.536690][T20902] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6599'. [ 582.566083][T20902] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6599'. [ 582.874824][T20914] ptrace attach of "./syz-executor exec"[5855] was attempted by " Œ Ðÿ ð¥ Àÿ Àÿ Ðÿ À• ðÿ °ÿ Àÿ ÿÿÿÿ"[20914] [ 583.206313][T20921] loop4: detected capacity change from 0 to 512 [ 583.234393][T20921] EXT4-fs: Ignoring removed orlov option [ 583.238134][T20886] loop5: detected capacity change from 0 to 40427 [ 583.272175][T20886] F2FS-fs (loop5): Invalid log sectors per block(0) log sectorsize(9) [ 583.309523][T20886] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 583.349021][T20921] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 583.375363][T20886] F2FS-fs (loop5): invalid crc value [ 583.411714][T20921] EXT4-fs (loop4): orphan cleanup on readonly fs [ 583.496820][T20933] loop1: detected capacity change from 0 to 256 [ 583.497479][T20921] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6608: bg 0: block 248: padding at end of block bitmap is not set [ 583.600779][T20921] Quota error (device loop4): write_blk: dquota write failed [ 583.628424][T20921] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 583.718635][T20921] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.6608: Failed to acquire dquot type 1 [ 583.744206][T20933] FAT-fs (loop1): Directory bread(block 64) failed [ 583.754246][T20933] FAT-fs (loop1): Directory bread(block 65) failed [ 583.798634][T20933] FAT-fs (loop1): Directory bread(block 66) failed [ 583.805533][T20933] FAT-fs (loop1): Directory bread(block 67) failed [ 583.834389][T20921] EXT4-fs (loop4): 1 truncate cleaned up [ 583.850649][T20933] FAT-fs (loop1): Directory bread(block 68) failed [ 583.857300][T20933] FAT-fs (loop1): Directory bread(block 69) failed [ 583.871264][T20886] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 583.878437][T20933] FAT-fs (loop1): Directory bread(block 70) failed [ 583.894489][T20921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 583.913461][T20933] FAT-fs (loop1): Directory bread(block 71) failed [ 583.919148][T20886] F2FS-fs (loop5): Start checkpoint disabled! [ 583.933929][T20933] FAT-fs (loop1): Directory bread(block 72) failed [ 583.949743][T20933] FAT-fs (loop1): Directory bread(block 73) failed [ 583.991741][T20886] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 584.026308][T20921] EXT4-fs: Ignoring removed orlov option [ 584.030949][T20886] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 584.067590][T20921] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 584.096255][T20921] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 584.176096][T20921] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.6608: Abort forced by user [ 584.210263][T20921] EXT4-fs (loop4): Remounting filesystem read-only [ 584.237755][T20921] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 584.393368][ T5855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.623555][T20963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6626'. [ 585.498622][T19450] Bluetooth: hci6: command 0x0406 tx timeout [ 585.694268][T21005] loop4: detected capacity change from 0 to 16 [ 585.751179][T21005] erofs (device loop4): mounted with root inode @ nid 36. [ 585.776855][T21005] erofs (device loop4): invalid logical cluster 0 at nid 89 [ 585.836088][T21005] erofs (device loop4): readahead error at folio 0 @ nid 89 [ 585.863964][ T30] audit: type=1400 audit(585.809:1948): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=21010 comm="syz.2.6649" [ 585.886490][T21005] syz.4.6645: attempt to access beyond end of device [ 585.886490][T21005] loop4: rw=524288, sector=7864328, nr_sectors = 8 limit=16 [ 585.958578][T21005] erofs (device loop4): invalid logical cluster 0 at nid 89 [ 585.989030][T21005] syz.4.6645: attempt to access beyond end of device [ 585.989030][T21005] loop4: rw=0, sector=7864328, nr_sectors = 8 limit=16 [ 586.078480][T21005] erofs (device loop4): read error -5 @ 0 of nid 89 [ 586.838375][T21047] netlink: 'syz.4.6667': attribute type 31 has an invalid length. [ 586.846242][T21047] netlink: 35 bytes leftover after parsing attributes in process `syz.4.6667'. [ 587.160454][T21060] loop4: detected capacity change from 0 to 512 [ 587.168570][T21059] loop2: detected capacity change from 0 to 256 [ 587.230051][T21059] exfat: Deprecated parameter 'namecase' [ 587.235824][T21059] exfat: Deprecated parameter 'namecase' [ 587.274007][T21060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.437356][T21059] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 587.519709][T21032] loop6: detected capacity change from 0 to 40427 [ 587.527175][ T5855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.706890][T21076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6677'. [ 587.743902][T21076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6677'. [ 587.778392][T21076] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6677'. [ 587.858585][T21078] netlink: 'syz.2.6679': attribute type 4 has an invalid length. [ 587.866384][T21078] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6679'. [ 587.879343][T21080] tmpfs: Bad value for 'size' [ 587.920077][T21078] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 587.961800][T21032] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 588.001719][T21084] loop4: detected capacity change from 0 to 2048 [ 588.011761][T21032] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 588.038789][T21084] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 588.096975][T21086] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 588.227515][ T5972] IPVS: starting estimator thread 0... [ 588.349018][T21092] IPVS: using max 24 ests per chain, 57600 per kthread [ 588.380443][T21095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.406159][T21096] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 588.650505][T21106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6692'. [ 588.901542][T21112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6696'. [ 588.936838][T21112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.237287][T21125] netlink: 'syz.2.6702': attribute type 28 has an invalid length. [ 589.305405][T21125] netlink: 'syz.2.6702': attribute type 29 has an invalid length. [ 589.373538][T21125] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6702'. [ 589.566677][T21136] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6705'. [ 589.596287][T21136] netlink: 'syz.5.6705': attribute type 1 has an invalid length. [ 589.998029][T21148] netlink: 'syz.2.6712': attribute type 21 has an invalid length. [ 590.246998][T21156] loop2: detected capacity change from 0 to 128 [ 590.272142][T21155] loop1: detected capacity change from 0 to 512 [ 590.273997][T21156] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 590.355077][T21156] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 590.384878][T21155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.500408][T21155] EXT4-fs error (device loop1): ext4_empty_dir:3081: inode #12: comm syz.1.6717: invalid size [ 590.537724][T21167] loop4: detected capacity change from 0 to 1024 [ 590.681208][ T5857] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.235506][T21189] program syz.6.6730 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 591.451954][T21197] tmpfs: Bad value for 'size' [ 591.672865][T21205] bond5: entered allmulticast mode [ 591.681548][T21205] 8021q: adding VLAN 0 to HW filter on device bond5 [ 591.947692][T21217] netlink: 'syz.5.6745': attribute type 32 has an invalid length. [ 591.975629][T21215] loop4: detected capacity change from 0 to 1024 [ 592.137920][T21222] usb usb1: check_ctrlrecip: process 21222 (syz.2.6747) requesting ep 01 but needs 81 [ 592.157403][T21222] usb usb1: usbfs: process 21222 (syz.2.6747) did not claim interface 0 before use [ 592.378711][ T31] INFO: task syz-executor:5851 blocked for more than 143 seconds. [ 592.406979][ T31] Not tainted 6.16.0-next-20250731-syzkaller #0 [ 592.437443][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 592.479960][ T31] task:syz-executor state:D stack:21336 pid:5851 tgid:5851 ppid:1 task_flags:0x400140 flags:0x00004004 [ 592.506433][ T31] Call Trace: [ 592.511944][ T31] [ 592.515025][ T31] __schedule+0x1798/0x4cc0 [ 592.523768][ T31] ? __lock_acquire+0xab9/0xd20 [ 592.542808][ T31] ? __lock_acquire+0xab9/0xd20 [ 592.547742][ T31] ? __pfx___schedule+0x10/0x10 [ 592.563089][ T31] ? schedule+0x91/0x360 [ 592.568588][ T31] schedule+0x165/0x360 [ 592.572801][ T31] schedule_preempt_disabled+0x13/0x30 [ 592.586467][ T31] __mutex_lock+0x7e6/0x1360 [ 592.591700][ T31] ? __mutex_lock+0x5b6/0x1360 [ 592.596598][ T31] ? nfsd_shutdown_threads+0x4e/0xd0 [ 592.602464][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 592.607613][ T31] ? net_generic+0x1e/0x240 [ 592.612612][ T31] ? net_generic+0x1e/0x240 [ 592.617159][ T31] ? net_generic+0x1e/0x240 [ 592.636098][ T31] ? net_generic+0x1e/0x240 [ 592.645414][ T31] nfsd_shutdown_threads+0x4e/0xd0 [ 592.653508][ T31] nfsd_umount+0x42/0xd0 [ 592.657819][ T31] deactivate_locked_super+0xbc/0x130 [ 592.672116][ T31] cleanup_mnt+0x425/0x4c0 [ 592.676746][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 592.686315][ T31] task_work_run+0x1d4/0x260 [ 592.694304][ T31] ? __pfx_task_work_run+0x10/0x10 [ 592.703738][ T31] ? __x64_sys_umount+0x122/0x160 [ 592.711670][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 592.717206][ T31] exit_to_user_mode_loop+0xec/0x110 [ 592.724227][ T31] do_syscall_64+0x2bd/0x3b0 [ 592.729435][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 592.734815][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.741375][ T31] ? clear_bhb_loop+0x60/0xb0 [ 592.746245][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.752755][ T31] RIP: 0033:0x7f02fdf8fe97 [ 592.757411][ T31] RSP: 002b:00007ffd98830c18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 592.766318][ T31] RAX: 0000000000000000 RBX: 00007f02fe011bdd RCX: 00007f02fdf8fe97 [ 592.774733][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd98830cd0 [ 592.783463][ T31] RBP: 00007ffd98830cd0 R08: 0000000000000000 R09: 0000000000000000 [ 592.791922][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd98831d60 [ 592.800521][ T31] R13: 00007f02fe011bdd R14: 000000000006a880 R15: 00007ffd98831da0 [ 592.809254][ T31] [ 592.812462][ T31] [ 592.812462][ T31] Showing all locks held in the system: [ 592.821795][ T31] 2 locks held by ksoftirqd/0/15: [ 592.827301][ T31] 1 lock held by khungtaskd/31: [ 592.868334][ T31] #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 592.892090][ T31] 2 locks held by getty/5607: [ 592.908276][ T31] #0: ffff8880342160a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 592.918137][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 592.983092][ T31] 2 locks held by syz-executor/5851: [ 592.989149][ T31] #0: ffff88806f5900e0 (&type->s_umount_key#119){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 593.000327][ T31] #1: ffffffff8e4181e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 593.010312][ T31] 2 locks held by syz.0.3636/14154: [ 593.015550][ T31] #0: ffffffff8f587330 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 593.024457][ T31] #1: ffffffff8e4181e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690 [ 593.029874][T21226] loop5: detected capacity change from 0 to 32768 [ 593.042269][ T31] 1 lock held by syz.5.6749/21226: [ 593.047459][ T31] [ 593.074009][ T31] ============================================= [ 593.074009][ T31] [ 593.083862][ T31] NMI backtrace for cpu 1 [ 593.083882][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 593.083926][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 593.083939][ T31] Call Trace: [ 593.083949][ T31] [ 593.083958][ T31] dump_stack_lvl+0x189/0x250 [ 593.083992][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 593.084018][ T31] ? __pfx__printk+0x10/0x10 [ 593.084083][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 593.084114][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 593.084143][ T31] ? __pfx__printk+0x10/0x10 [ 593.084177][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 593.084213][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 593.084244][ T31] watchdog+0xf93/0xfe0 [ 593.084279][ T31] ? watchdog+0x1de/0xfe0 [ 593.084314][ T31] kthread+0x70e/0x8a0 [ 593.084343][ T31] ? __pfx_watchdog+0x10/0x10 [ 593.084371][ T31] ? __pfx_kthread+0x10/0x10 [ 593.084398][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 593.084428][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 593.084464][ T31] ? __pfx_kthread+0x10/0x10 [ 593.084491][ T31] ret_from_fork+0x3fc/0x770 [ 593.084529][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 593.084571][ T31] ? __switch_to_asm+0x39/0x70 [ 593.084597][ T31] ? __switch_to_asm+0x33/0x70 [ 593.084623][ T31] ? __pfx_kthread+0x10/0x10 [ 593.084649][ T31] ret_from_fork_asm+0x1a/0x30 [ 593.084695][ T31] [ 593.084704][ T31] Sending NMI from CPU 1 to CPUs 0: [ 593.232716][ C0] NMI backtrace for cpu 0 [ 593.232733][ C0] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 593.232756][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 593.232769][ C0] Workqueue: bat_events batadv_nc_worker [ 593.232797][ C0] RIP: 0010:kasan_byte_accessible+0x8/0x30 [ 593.232825][ C0] Code: ff ff 34 01 e9 1c ff ff ff 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 <48> b8 00 00 00 00 00 fc ff df 0f b6 04 07 3c 08 0f 92 c0 e9 00 10 [ 593.232841][ C0] RSP: 0018:ffffc90000ac78f0 EFLAGS: 00000a06 [ 593.232857][ C0] RAX: 0000000000000001 RBX: ffffffff8b45220b RCX: d2cc36feaf11fa00 [ 593.232870][ C0] RDX: 0000000000000000 RSI: ffffffff8b45220b RDI: 1ffffffff1c273e4 [ 593.232884][ C0] RBP: ffffffff8b4521ea R08: 0000000000000000 R09: 0000000000000000 [ 593.232896][ C0] R10: dffffc0000000000 R11: fffffbfff1f44307 R12: 0000000000000002 [ 593.232909][ C0] R13: ffffffff8e139f20 R14: ffffffff8e139f20 R15: 0000000000000000 [ 593.232922][ C0] FS: 0000000000000000(0000) GS:ffff888125c43000(0000) knlGS:0000000000000000 [ 593.232938][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 593.232950][ C0] CR2: 00007f5716fa3000 CR3: 0000000077600000 CR4: 00000000003526f0 [ 593.232967][ C0] Call Trace: [ 593.232974][ C0] [ 593.232982][ C0] __kasan_check_byte+0x12/0x40 [ 593.233006][ C0] lock_acquire+0x8d/0x360 [ 593.233035][ C0] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 593.233059][ C0] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 593.233085][ C0] batadv_nc_process_nc_paths+0xdb/0x3a0 [ 593.233108][ C0] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 593.233134][ C0] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 593.233160][ C0] batadv_nc_worker+0x429/0x610 [ 593.233190][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 593.233220][ C0] process_scheduled_works+0xade/0x17b0 [ 593.233264][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 593.233301][ C0] worker_thread+0x8a0/0xda0 [ 593.233332][ C0] kthread+0x70e/0x8a0 [ 593.233354][ C0] ? __pfx_worker_thread+0x10/0x10 [ 593.233370][ C0] ? __pfx_kthread+0x10/0x10 [ 593.233398][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 593.233424][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 593.233451][ C0] ? __pfx_kthread+0x10/0x10 [ 593.233474][ C0] ret_from_fork+0x3fc/0x770 [ 593.233508][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 593.233545][ C0] ? __switch_to_asm+0x39/0x70 [ 593.233568][ C0] ? __switch_to_asm+0x33/0x70 [ 593.233590][ C0] ? __pfx_kthread+0x10/0x10 [ 593.233611][ C0] ret_from_fork_asm+0x1a/0x30 [ 593.233643][ C0] [ 593.237231][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 593.501193][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 593.512136][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 593.522212][ T31] Call Trace: [ 593.525497][ T31] [ 593.528434][ T31] dump_stack_lvl+0x99/0x250 [ 593.533056][ T31] ? __asan_memcpy+0x40/0x70 [ 593.537678][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 593.542884][ T31] ? __pfx__printk+0x10/0x10 [ 593.547507][ T31] vpanic+0x281/0x750 [ 593.551530][ T31] ? __pfx_vpanic+0x10/0x10 [ 593.556054][ T31] ? preempt_schedule+0xae/0xc0 [ 593.560939][ T31] ? preempt_schedule_common+0x83/0xd0 [ 593.566414][ T31] panic+0xb9/0xc0 [ 593.570144][ T31] ? __pfx_panic+0x10/0x10 [ 593.574610][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 593.580016][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 593.586181][ T31] watchdog+0xfd2/0xfe0 [ 593.590358][ T31] ? watchdog+0x1de/0xfe0 [ 593.594752][ T31] kthread+0x70e/0x8a0 [ 593.598848][ T31] ? __pfx_watchdog+0x10/0x10 [ 593.603531][ T31] ? __pfx_kthread+0x10/0x10 [ 593.608127][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 593.613351][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 593.618591][ T31] ? __pfx_kthread+0x10/0x10 [ 593.623196][ T31] ret_from_fork+0x3fc/0x770 [ 593.627795][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 593.632928][ T31] ? __switch_to_asm+0x39/0x70 [ 593.637713][ T31] ? __switch_to_asm+0x33/0x70 [ 593.642483][ T31] ? __pfx_kthread+0x10/0x10 [ 593.647092][ T31] ret_from_fork_asm+0x1a/0x30 [ 593.651917][ T31] [ 593.655235][ T31] Kernel Offset: disabled [ 593.659565][ T31] Rebooting in 86400 seconds..