program: syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0040ce91bae94d6591ac6d0100000000000000b5384050da"], 0x1, 0xd9b, &(0x7f0000001c40)="$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") open$dir(&(0x7f0000000fc0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4040, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x22400) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0xf348, 0x9, 0x1f, 0x14, "9e959f16b6787b08aa26e66c4056a51695284854c282ec6bcfeef4fb0efcc1d8a6078ebe8e033fd5f0643902dd8f6fac274de9d940bba5e592bbd4ce85450d00", "f625c10e6e4c36c800dee96015e0fb7e904dc8df62a3a893ec00347f41be5a08", [0x2, 0x9]}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000040), 0x1, 0x76a, &(0x7f0000000fc0)="$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") r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x1670e68) mount(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x10f4c2a, 0x0) (fail_nth: 9) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) [ 71.017139][ T4535] Bluetooth: hci0: command tx timeout [ 71.120075][ T5109] loop0: detected capacity change from 0 to 4096 [ 71.176420][ T5112] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.192437][ T24] audit: type=1800 audit(1729759620.176:2): pid=5109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 res=0 errno=0 [ 71.237538][ T5109] loop0: detected capacity change from 4096 to 3974 [ 71.328686][ T5110] FAULT_INJECTION: forcing a failure. [ 71.328686][ T5110] name failslab, interval 1, probability 0, space 0, times 1 [ 71.334491][ T5110] CPU: 0 UID: 0 PID: 5110 Comm: syz.0.0 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 71.338520][ T5110] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.342539][ T5110] Call Trace: [ 71.344030][ T5110] [ 71.345222][ T5110] dump_stack_lvl+0x241/0x360 [ 71.347183][ T5110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.349088][ T5110] ? __pfx__printk+0x10/0x10 [ 71.350675][ T5110] ? __pfx_lock_acquire+0x10/0x10 [ 71.352660][ T5110] should_fail_ex+0x3b0/0x4e0 [ 71.354541][ T5110] should_failslab+0xac/0x100 [ 71.356403][ T5110] ? bdi_split_work_to_wbs+0x54e/0x9a0 [ 71.358479][ T5110] __kmalloc_cache_noprof+0x6c/0x2c0 [ 71.360524][ T5110] bdi_split_work_to_wbs+0x54e/0x9a0 [ 71.362463][ T5110] ? bdi_split_work_to_wbs+0xf9/0x9a0 [ 71.364515][ T5110] ? __pfx_bdi_split_work_to_wbs+0x10/0x10 [ 71.366666][ T5110] ? __pfx_xa_find+0x10/0x10 [ 71.368405][ T5110] ? __list_lru_walk_one+0x5ff/0x660 [ 71.370350][ T5110] ? do_raw_spin_unlock+0x58/0x8b0 [ 71.372104][ T5110] __writeback_inodes_sb_nr+0x2ca/0x380 [ 71.373936][ T5110] ? __pfx___writeback_inodes_sb_nr+0x10/0x10 [ 71.376060][ T5110] ? __pfx_list_lru_walk_node+0x10/0x10 [ 71.378026][ T5110] ? list_lru_count_node+0x1c/0x70 [ 71.380004][ T5110] sync_filesystem+0xa4/0x230 [ 71.381864][ T5110] nilfs_reconfigure+0xb2/0x410 [ 71.383834][ T5110] ? security_sb_remount+0x13/0x280 [ 71.385918][ T5110] reconfigure_super+0x445/0x880 [ 71.387863][ T5110] path_mount+0xc22/0xfa0 [ 71.389515][ T5110] __se_sys_mount+0x2d6/0x3c0 [ 71.391332][ T5110] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 71.393523][ T5110] ? __pfx___se_sys_mount+0x10/0x10 [ 71.395480][ T5110] ? do_syscall_64+0x100/0x230 [ 71.397360][ T5110] ? __x64_sys_mount+0x20/0xc0 [ 71.399280][ T5110] do_syscall_64+0xf3/0x230 [ 71.401065][ T5110] ? clear_bhb_loop+0x35/0x90 [ 71.403014][ T5110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.405266][ T5110] RIP: 0033:0x7fa3b7f7dff9 [ 71.407006][ T5110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.414403][ T5110] RSP: 002b:00007fa3b8cac038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 71.417651][ T5110] RAX: ffffffffffffffda RBX: 00007fa3b8136058 RCX: 00007fa3b7f7dff9 [ 71.420658][ T5110] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000000 [ 71.423681][ T5110] RBP: 00007fa3b8cac090 R08: 0000000000000000 R09: 0000000000000000 [ 71.426563][ T5110] R10: 00000000010f4c2a R11: 0000000000000246 R12: 0000000000000001 [ 71.429529][ T5110] R13: 0000000000000001 R14: 00007fa3b8136058 R15: 00007ffc2b0f01e8 [ 71.432419][ T5110] [ 71.518181][ T5113] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 71.525788][ T5113] syz.0.0: attempt to access beyond end of device [ 71.525788][ T5113] loop0: rw=2049, sector=4088, nr_sectors = 2 limit=3974 [ 71.532430][ T5113] Buffer I/O error on dev loop0, logical block 2044, lost sync page write [ 71.535396][ T5113] Remounting filesystem read-only [ 71.540764][ T5113] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 71.552808][ T5113] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 71.560972][ T24] audit: type=1800 audit(1729759620.536:3): pid=5113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.0" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 71.585182][ T5110] NILFS (loop0): mounting fs with errors [ 71.588930][ T5112] NILFS (loop0): I/O error reading meta-data file (ino=3, block-offset=65807) [ 71.593454][ T5110] syz.0.0: attempt to access beyond end of device [ 71.593454][ T5110] loop0: rw=2049, sector=4088, nr_sectors = 2 limit=3974 [ 71.601400][ T5112] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=5) [ 71.605086][ T5110] Buffer I/O error on dev loop0, logical block 2044, lost sync page write [ 71.610264][ T5112] Remounting filesystem read-only [ 71.612976][ T5112] ------------[ cut here ]------------ [ 71.615023][ T5112] WARNING: CPU: 0 PID: 5112 at fs/nilfs2/segment.c:1500 nilfs_segctor_abort_construction+0xe51/0xec0 [ 71.619237][ T5112] Modules linked in: [ 71.620802][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: segctord Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 71.624764][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.628930][ T5112] RIP: 0010:nilfs_segctor_abort_construction+0xe51/0xec0 [ 71.631529][ T5112] Code: 8b 04 25 28 00 00 00 48 3b 84 24 a0 00 00 00 75 74 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 00 e0 19 fe 90 <0f> 0b 90 e9 ea f9 ff ff e8 f2 df 19 fe 90 0f 0b 90 e9 93 fb ff ff [ 71.638265][ T5112] RSP: 0018:ffffc9000ae6f680 EFLAGS: 00010293 [ 71.640521][ T5112] RAX: ffffffff837af7e0 RBX: 00000000fffffffb RCX: ffff8880009c0000 [ 71.643310][ T5112] RDX: 0000000000000000 RSI: 00000000fffffffb RDI: 0000000000000000 [ 71.646370][ T5112] RBP: ffffc9000ae6f770 R08: ffffffff837af1c6 R09: 1ffff110080da3c0 [ 71.649618][ T5112] R10: dffffc0000000000 R11: ffffed10080da3c1 R12: 0000000000000000 [ 71.652610][ T5112] R13: 0000000000000006 R14: ffff8880416e7848 R15: ffff8880416c6138 [ 71.655843][ T5112] FS: 0000000000000000(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 71.659522][ T5112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.661991][ T5112] CR2: 0000000020141000 CR3: 0000000035c70000 CR4: 0000000000352ef0 [ 71.665317][ T5112] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.668387][ T5112] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.671205][ T5112] Call Trace: [ 71.672431][ T5112] [ 71.673550][ T5112] ? __warn+0x168/0x4e0 [ 71.675102][ T5112] ? nilfs_segctor_abort_construction+0xe51/0xec0 [ 71.677500][ T5112] ? report_bug+0x2b3/0x500 [ 71.679179][ T5112] ? nilfs_segctor_abort_construction+0xe51/0xec0 [ 71.681507][ T5112] ? handle_bug+0x60/0x90 [ 71.682949][ T5112] ? exc_invalid_op+0x1a/0x50 [ 71.684596][ T5112] ? asm_exc_invalid_op+0x1a/0x20 [ 71.686564][ T5112] ? nilfs_segctor_abort_construction+0x836/0xec0 [ 71.689029][ T5112] ? nilfs_segctor_abort_construction+0xe50/0xec0 [ 71.691473][ T5112] ? nilfs_segctor_abort_construction+0xe51/0xec0 [ 71.693892][ T5112] ? __pfx_nilfs_segctor_abort_construction+0x10/0x10 [ 71.696472][ T5112] nilfs_segctor_do_construct+0x6335/0x6b90 [ 71.698862][ T5112] ? __pfx_nilfs_segctor_do_construct+0x10/0x10 [ 71.701082][ T5112] ? __pfx_lock_acquire+0x10/0x10 [ 71.702892][ T5112] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 71.704836][ T5112] ? __pfx_lock_release+0x10/0x10 [ 71.706714][ T5112] ? do_raw_spin_lock+0x14f/0x370 [ 71.708778][ T5112] ? _raw_spin_unlock+0x28/0x50 [ 71.710633][ T5112] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 71.712644][ T5112] nilfs_segctor_construct+0x181/0x6b0 [ 71.714949][ T5112] nilfs_segctor_thread+0x69e/0xe80 [ 71.716977][ T5112] ? lockdep_hardirqs_on+0x99/0x150 [ 71.719239][ T5112] ? __pfx_nilfs_segctor_thread+0x10/0x10 [ 71.721234][ T5112] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 71.723467][ T5112] ? __pfx_autoremove_wake_function+0x10/0x10 [ 71.725797][ T5112] ? __kthread_parkme+0x169/0x1d0 [ 71.727810][ T5112] ? __pfx_nilfs_segctor_thread+0x10/0x10 [ 71.729984][ T5112] kthread+0x2f0/0x390 [ 71.731524][ T5112] ? __pfx_nilfs_segctor_thread+0x10/0x10 [ 71.733644][ T5112] ? __pfx_kthread+0x10/0x10 [ 71.735350][ T5112] ret_from_fork+0x4b/0x80 [ 71.737026][ T5112] ? __pfx_kthread+0x10/0x10 [ 71.738791][ T5112] ret_from_fork_asm+0x1a/0x30 [ 71.740631][ T5112] [ 71.741805][ T5112] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 71.744291][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: segctord Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 71.748215][ T5112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.751984][ T5112] Call Trace: [ 71.753191][ T5112] [ 71.754302][ T5112] dump_stack_lvl+0x241/0x360 [ 71.756083][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.758000][ T5112] ? __pfx__printk+0x10/0x10 [ 71.759793][ T5112] ? vscnprintf+0x5d/0x90 [ 71.761383][ T5112] panic+0x349/0x880 [ 71.762901][ T5112] ? __warn+0x177/0x4e0 [ 71.764513][ T5112] ? __pfx_panic+0x10/0x10 [ 71.766107][ T5112] ? ret_from_fork_asm+0x1a/0x30 [ 71.767981][ T5112] __warn+0x34b/0x4e0 [ 71.769544][ T5112] ? nilfs_segctor_abort_construction+0xe51/0xec0 [ 71.772044][ T5112] report_bug+0x2b3/0x500 [ 71.773713][ T5112] ? nilfs_segctor_abort_construction+0xe51/0xec0 [ 71.776026][ T5112] handle_bug+0x60/0x90 [ 71.777602][ T5112] exc_invalid_op+0x1a/0x50 [ 71.779288][ T5112] asm_exc_invalid_op+0x1a/0x20 [ 71.781095][ T5112] RIP: 0010:nilfs_segctor_abort_construction+0xe51/0xec0 [ 71.783594][ T5112] Code: 8b 04 25 28 00 00 00 48 3b 84 24 a0 00 00 00 75 74 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 00 e0 19 fe 90 <0f> 0b 90 e9 ea f9 ff ff e8 f2 df 19 fe 90 0f 0b 90 e9 93 fb ff ff [ 71.790564][ T5112] RSP: 0018:ffffc9000ae6f680 EFLAGS: 00010293 [ 71.792866][ T5112] RAX: ffffffff837af7e0 RBX: 00000000fffffffb RCX: ffff8880009c0000 [ 71.795646][ T5112] RDX: 0000000000000000 RSI: 00000000fffffffb RDI: 0000000000000000 [ 71.798448][ T5112] RBP: ffffc9000ae6f770 R08: ffffffff837af1c6 R09: 1ffff110080da3c0 [ 71.801260][ T5112] R10: dffffc0000000000 R11: ffffed10080da3c1 R12: 0000000000000000 [ 71.804109][ T5112] R13: 0000000000000006 R14: ffff8880416e7848 R15: ffff8880416c6138 [ 71.806968][ T5112] ? nilfs_segctor_abort_construction+0x836/0xec0 [ 71.809296][ T5112] ? nilfs_segctor_abort_construction+0xe50/0xec0 [ 71.811721][ T5112] ? __pfx_nilfs_segctor_abort_construction+0x10/0x10 [ 71.814114][ T5112] nilfs_segctor_do_construct+0x6335/0x6b90 [ 71.816267][ T5112] ? __pfx_nilfs_segctor_do_construct+0x10/0x10 [ 71.818589][ T5112] ? __pfx_lock_acquire+0x10/0x10 [ 71.820351][ T5112] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 71.822535][ T5112] ? __pfx_lock_release+0x10/0x10 [ 71.824442][ T5112] ? do_raw_spin_lock+0x14f/0x370 [ 71.826292][ T5112] ? _raw_spin_unlock+0x28/0x50 [ 71.828119][ T5112] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 71.830152][ T5112] nilfs_segctor_construct+0x181/0x6b0 [ 71.832136][ T5112] nilfs_segctor_thread+0x69e/0xe80 [ 71.834157][ T5112] ? lockdep_hardirqs_on+0x99/0x150 [ 71.836090][ T5112] ? __pfx_nilfs_segctor_thread+0x10/0x10 [ 71.838131][ T5112] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 71.840306][ T5112] ? __pfx_autoremove_wake_function+0x10/0x10 [ 71.842561][ T5112] ? __kthread_parkme+0x169/0x1d0 [ 71.844589][ T5112] ? __pfx_nilfs_segctor_thread+0x10/0x10 [ 71.846606][ T5112] kthread+0x2f0/0x390 [ 71.848154][ T5112] ? __pfx_nilfs_segctor_thread+0x10/0x10 [ 71.850242][ T5112] ? __pfx_kthread+0x10/0x10 [ 71.851848][ T5112] ret_from_fork+0x4b/0x80 [ 71.853333][ T5112] ? __pfx_kthread+0x10/0x10 [ 71.854938][ T5112] ret_from_fork_asm+0x1a/0x30 [ 71.856730][ T5112] [ 71.858016][ T5112] Kernel Offset: disabled [ 71.859563][ T5112] Rebooting in 86400 seconds..