last executing test programs: 4.997849032s ago: executing program 3 (id=1345): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 4.883259187s ago: executing program 3 (id=1348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x18, r1, 0x431, 0x70bd28, 0x800, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c2}, 0x0) 4.800301121s ago: executing program 3 (id=1349): mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) 4.667273067s ago: executing program 3 (id=1351): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000406a05310300000000000109022400010000000009040000010300000009210000120122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 3.611983022s ago: executing program 1 (id=1361): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) getsockopt$MRT6(r0, 0x29, 0xce, 0x0, &(0x7f0000000080)) 3.491873717s ago: executing program 1 (id=1364): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6d", 0x17}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/21, 0x15}], 0x1}, 0x41fe) 3.393368372s ago: executing program 1 (id=1366): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0xfb) 3.291887587s ago: executing program 1 (id=1368): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x0) 3.196602171s ago: executing program 1 (id=1370): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="00000200000008000007db29623b3ec1ba688c3ff0100402", 0x18) 3.099834345s ago: executing program 1 (id=1373): io_setup(0x8, &(0x7f00000001c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000300)="87992d800d80", 0x6, 0x4}]) 2.330991628s ago: executing program 3 (id=1386): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e", 0x9f}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0dfd1ecda0fd0ed9", 0x1d}, {&(0x7f00000010c0)="e09c", 0x2}], 0x5, 0x0, 0x0, 0x900}}], 0x2, 0x0) 2.149972166s ago: executing program 3 (id=1389): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x5, 0x10f5, &(0x7f0000001180)="$eJzs2DGLE0EYBuB3dgNyVWSuXw+0sJDjjvgHrlBIY2FtF6zsTKXk5/hz5Cr743qvCNgrmxgSJGKRxUB4Hlh252Xm+2bKnQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBvlHwvyXmT1E3WJClJ191O75N0m/zx17ZJydv30/mrj5PX8/W09FmT0q9ajev101ondVKv68vzm2d1/unzh3anZUmXu+VidvbmYdCj9L3bQSsCAADAafh5sPGR+wMAAAD/MthFAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6uajSVKSrrud3ifpjrstAAAA4EAlTd6N9+Xra4CtF/k2LimPtsmP0s+5ypc96/+iLzk6aMMAAABwosrO//jznOXJTn6RUS4v1+PfrzzcJG2Sqz/q3C0Xs9VzsZiV/3kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAACYKgAA//87RdIO") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)=@known='user.incfs.id\x00') 1.654345858s ago: executing program 4 (id=1397): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x81, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x0, @private0}, @in={0x2, 0x4e21, @empty}]}, &(0x7f0000000240)=0x10) 1.533309183s ago: executing program 4 (id=1399): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', r1, 0x2000, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x2700, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) 1.454691677s ago: executing program 4 (id=1402): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000680)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 1.321831862s ago: executing program 4 (id=1406): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x4008af14, &(0x7f0000001a80)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 1.249408375s ago: executing program 4 (id=1409): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1010006, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@uid}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@discard_size={'discard', 0x3d, 0xc}}, {@grpquota}, {@discard_size={'discard', 0x3d, 0x8}}, {@usrquota}, {@nodiscard}, {@noquota}]}, 0x1, 0x6310, &(0x7f0000019f80)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 926.00302ms ago: executing program 0 (id=1413): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, r0, 0x1, 0x70bd27, 0x25dfd3fb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x3}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) 800.277085ms ago: executing program 0 (id=1415): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0500000001ea2f3352c9a24cfb0fe8f3", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64], 0x20000600}}, 0x0) 725.999829ms ago: executing program 2 (id=1416): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x1, 0x0, {0x2, 0x20, 0x20, 0x2}, [@RTA_SRC={0x8, 0x2, @rand_addr=0x64010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 694.32314ms ago: executing program 0 (id=1417): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_BYTEMODE={0x8}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 656.181661ms ago: executing program 2 (id=1418): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x4, 0x3, 0x2, 0x80000001, 0x0, 0x2, 0xbc}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) 605.050413ms ago: executing program 0 (id=1419): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x300, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nobh}, {@dioread_nolock}, {@test_dummy_encryption}, {@nodelalloc}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x3, 0xba6, &(0x7f0000000c00)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000030531bf72f07502149600000000", @ANYRES32=0x0, @ANYBLOB="0000000000800000280012800b0001006d616373656300001800028005000300100000000c0004"], 0x48}}, 0x0) 509.922378ms ago: executing program 2 (id=1420): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x50, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x50}}, 0x0) 456.7273ms ago: executing program 2 (id=1421): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="99742bbd7000fbdbdf25150000004c000180380004001400010002004e20ac14141d0000000000000000200002000a004e200000000400000000000000000000000000000000040000000d0001007564703a73797a3285"], 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) 182.239352ms ago: executing program 0 (id=1422): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'dt2801\x00', [0x4f27, 0x7, 0x1, 0x16, 0x5, 0x5, 0x8, 0x3, 0xa, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x7, 0xfffffffe, 0x7f, 0x3, 0x40000003, 0x89, 0xca9f, 0x3, 0x20001e58, 0xb, 0xe66, 0x3, 0x995d000, 0x4085, 0x0, 0xffffff53]}) 113.949195ms ago: executing program 2 (id=1423): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x6, 0x190, 0x0, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0x0, {0x3, 0x6fd8e84b}, 0x3, 0xed}}) 50.402967ms ago: executing program 4 (id=1424): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x3, [0x3, 0x1, 0x3]}, 0xa) 8.60774ms ago: executing program 2 (id=1425): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf25250000000500", @ANYRES8=r0], 0x2c}, 0x1, 0x0, 0x0, 0x200440c4}, 0x20004010) 0s ago: executing program 0 (id=1426): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6c, 0xeb, 0x85, 0x40, 0x249c, 0x9002, 0xdead, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x24, 0xdf, 0x6d}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) fchdir(0xffffffffffffffff) kernel console output (not intermixed with test programs): _sub_blocks+0xe0/0xe0 [ 105.148661][ T5481] ? memset+0x1e/0x40 [ 105.152785][ T5481] block_read_full_page+0x2e8/0xd10 [ 105.158231][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 105.163825][ T5481] ? block_is_partially_uptodate+0x2d0/0x2d0 [ 105.169862][ T5481] do_mpage_readpage+0x1932/0x1e30 [ 105.175048][ T5481] ? mpage_readahead+0x8a0/0x8a0 [ 105.180033][ T5481] ? xa_load+0x286/0x2a0 [ 105.182609][ T5535] netlink: 'syz.0.494': attribute type 2 has an invalid length. [ 105.184315][ T5481] mpage_readahead+0x3a6/0x8a0 [ 105.184357][ T5481] ? dio_await_one+0x390/0x390 [ 105.184396][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 105.192159][ T5535] netlink: 'syz.0.494': attribute type 2 has an invalid length. [ 105.196830][ T5481] ? local_lock_release+0x97/0x170 [ 105.196868][ T5481] read_pages+0x165/0x920 [ 105.196896][ T5481] ? page_cache_ra_unbounded+0x930/0x930 [ 105.196925][ T5481] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 105.196956][ T5481] page_cache_ra_unbounded+0x830/0x930 [ 105.196998][ T5481] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 105.197033][ T5481] filemap_read+0x589/0x2480 [ 105.197055][ T5481] ? rcu_lock_release+0x5/0x20 [ 105.197095][ T5481] ? 0xffffffffa002a000 [ 105.209000][ T5535] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.494'. [ 105.215091][ T5481] ? find_get_pages_range_tag+0x450/0x450 [ 105.215126][ T5481] ? __kernel_text_address+0x9a/0x100 [ 105.215153][ T5481] ? unwind_get_return_address+0x49/0x80 [ 105.215194][ T5481] ? generic_file_read_iter+0x96/0x490 [ 105.215210][ T5481] ? memset+0x1e/0x40 [ 105.215232][ T5481] ? iov_iter_kvec+0xb4/0x170 [ 105.215257][ T5481] __kernel_read+0x4eb/0x910 [ 105.215275][ T5481] ? __kasan_kmalloc+0xcc/0xf0 [ 105.215302][ T5481] ? rw_verify_area+0x1b0/0x1b0 [ 105.215348][ T5481] integrity_kernel_read+0x86/0xd0 [ 105.215371][ T5481] ? integrity_inode_free+0x170/0x170 [ 105.215402][ T5481] ima_calc_file_hash+0x1546/0x18e0 [ 105.215430][ T5481] ? __lock_acquire+0x13ad/0x7c60 [ 105.215460][ T5481] ? 0xffffffffa002a000 [ 105.215483][ T5481] ? ima_alloc_tfm+0x2f0/0x2f0 [ 105.215556][ T5481] ? __mutex_trylock_common+0x14f/0x250 [ 105.315290][ T5539] loop0: detected capacity change from 0 to 64 [ 105.317096][ T5481] ? rcu_lock_release+0x20/0x20 [ 105.363422][ T5481] ? process_measurement+0x65b/0x1a10 [ 105.368795][ T5481] ima_collect_measurement+0x2ef/0x760 [ 105.374347][ T5481] ? ima_get_action+0xa0/0xa0 [ 105.379027][ T5481] ? preempt_count_add+0x8d/0x190 [ 105.384188][ T5481] process_measurement+0xfb9/0x1a10 [ 105.389412][ T5481] ? ima_file_mmap+0x150/0x150 [ 105.394331][ T5481] ? tomoyo_check_path_number_acl+0x280/0x280 [ 105.400685][ T5481] ? aa_get_task_label+0x21c/0x2c0 [ 105.405923][ T5481] ima_file_check+0xc1/0x100 [ 105.410533][ T5481] ? ima_bprm_check+0x1f0/0x1f0 [ 105.415395][ T5481] path_openat+0x2735/0x2f30 [ 105.420007][ T5481] ? do_filp_open+0x3e0/0x3e0 [ 105.424688][ T5481] do_filp_open+0x1b3/0x3e0 [ 105.429189][ T5481] ? vfs_tmpfile+0x300/0x300 [ 105.433788][ T5481] ? _raw_spin_unlock+0x24/0x40 [ 105.438634][ T5481] ? alloc_fd+0x598/0x630 [ 105.442995][ T5481] do_sys_openat2+0x142/0x4a0 [ 105.447793][ T5481] ? __lock_acquire+0x7c60/0x7c60 [ 105.452820][ T5481] ? do_sys_open+0xe0/0xe0 [ 105.457232][ T5481] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 105.463218][ T5481] ? lock_chain_count+0x20/0x20 [ 105.468193][ T5481] ? vtime_user_exit+0x2dc/0x400 [ 105.473162][ T5481] __x64_sys_openat+0x135/0x160 [ 105.478019][ T5481] do_syscall_64+0x4c/0xa0 [ 105.482564][ T5481] ? clear_bhb_loop+0x30/0x80 [ 105.487235][ T5481] ? clear_bhb_loop+0x30/0x80 [ 105.491905][ T5481] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 105.497795][ T5481] RIP: 0033:0x7f5800380749 [ 105.502217][ T5481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.522020][ T5481] RSP: 002b:00007f57fe5e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 105.530524][ T5481] RAX: ffffffffffffffda RBX: 00007f58005d6fa0 RCX: 00007f5800380749 [ 105.538911][ T5481] RDX: 000000000014b442 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 105.546901][ T5481] RBP: 00007f5800404f91 R08: 0000000000000000 R09: 0000000000000000 [ 105.555092][ T5481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.563321][ T5481] R13: 00007f58005d7038 R14: 00007f58005d6fa0 R15: 00007ffe90e888d8 [ 105.571388][ T5481] [ 105.574525][ C0] vkms_vblank_simulate: vblank timer overrun [ 105.591067][ T5481] NILFS (loop2): btree level mismatch (ino=16): 1 != 3 [ 105.598470][ T5481] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 105.608539][ T5481] CPU: 1 PID: 5481 Comm: syz.2.470 Not tainted syzkaller #0 [ 105.615981][ T5481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.626155][ T5481] Call Trace: [ 105.629463][ T5481] [ 105.632422][ T5481] dump_stack_lvl+0x168/0x230 [ 105.637139][ T5481] ? show_regs_print_info+0x20/0x20 [ 105.642392][ T5481] nilfs_btree_do_lookup+0x96f/0xaf0 [ 105.647727][ T5481] ? nilfs_btree_alloc_path+0x4c/0x600 [ 105.653372][ T5481] ? nilfs_btree_alloc_path+0x600/0x600 [ 105.659058][ T5481] ? nilfs_btree_alloc_path+0x5e5/0x600 [ 105.664700][ T5481] nilfs_btree_lookup_contig+0xfa/0xc00 [ 105.670310][ T5481] ? __might_sleep+0xf0/0xf0 [ 105.675020][ T5481] ? read_lock_is_recursive+0x10/0x10 [ 105.680425][ T5481] ? __might_sleep+0xf0/0xf0 [ 105.685057][ T5481] ? nilfs_btree_lookup+0x70/0x70 [ 105.690120][ T5481] ? __up_read+0x27c/0x660 [ 105.694587][ T5481] ? down_read+0x1aa/0x2e0 [ 105.699049][ T5481] nilfs_bmap_lookup_contig+0x87/0x160 [ 105.704551][ T5481] nilfs_get_block+0x1f8/0x8f0 [ 105.709364][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 105.714873][ T5481] ? memset+0x1e/0x40 [ 105.718906][ T5481] block_read_full_page+0x2e8/0xd10 [ 105.724185][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 105.729593][ T5481] ? block_is_partially_uptodate+0x2d0/0x2d0 [ 105.735627][ T5481] do_mpage_readpage+0x1932/0x1e30 [ 105.740823][ T5481] ? mpage_readahead+0x8a0/0x8a0 [ 105.745808][ T5481] ? xa_load+0x286/0x2a0 [ 105.750092][ T5481] mpage_readahead+0x3a6/0x8a0 [ 105.754902][ T5481] ? dio_await_one+0x390/0x390 [ 105.759721][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 105.765138][ T5481] ? local_lock_release+0x97/0x170 [ 105.770302][ T5481] read_pages+0x165/0x920 [ 105.774911][ T5481] ? page_cache_ra_unbounded+0x930/0x930 [ 105.780613][ T5481] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 105.786210][ T5481] page_cache_ra_unbounded+0x830/0x930 [ 105.791731][ T5481] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 105.798285][ T5481] filemap_read+0x589/0x2480 [ 105.802925][ T5481] ? rcu_lock_release+0x5/0x20 [ 105.807746][ T5481] ? 0xffffffffa002a000 [ 105.811929][ T5481] ? find_get_pages_range_tag+0x450/0x450 [ 105.817716][ T5481] ? __kernel_text_address+0x9a/0x100 [ 105.823127][ T5481] ? unwind_get_return_address+0x49/0x80 [ 105.828813][ T5481] ? generic_file_read_iter+0x96/0x490 [ 105.834312][ T5481] ? memset+0x1e/0x40 [ 105.838412][ T5481] ? iov_iter_kvec+0xb4/0x170 [ 105.843107][ T5481] __kernel_read+0x4eb/0x910 [ 105.847722][ T5481] ? __kasan_kmalloc+0xcc/0xf0 [ 105.852490][ T5481] ? rw_verify_area+0x1b0/0x1b0 [ 105.857358][ T5481] integrity_kernel_read+0x86/0xd0 [ 105.862517][ T5481] ? integrity_inode_free+0x170/0x170 [ 105.867987][ T5481] ima_calc_file_hash+0x1546/0x18e0 [ 105.873200][ T5481] ? __lock_acquire+0x13ad/0x7c60 [ 105.878250][ T5481] ? 0xffffffffa002a000 [ 105.882397][ T5481] ? ima_alloc_tfm+0x2f0/0x2f0 [ 105.887228][ T5481] ? __mutex_trylock_common+0x14f/0x250 [ 105.893022][ T5481] ? rcu_lock_release+0x20/0x20 [ 105.897905][ T5481] ? process_measurement+0x65b/0x1a10 [ 105.903291][ T5481] ima_collect_measurement+0x2ef/0x760 [ 105.908867][ T5481] ? ima_get_action+0xa0/0xa0 [ 105.913571][ T5481] ? preempt_count_add+0x8d/0x190 [ 105.918652][ T5481] process_measurement+0xfb9/0x1a10 [ 105.923899][ T5481] ? ima_file_mmap+0x150/0x150 [ 105.928681][ T5481] ? tomoyo_check_path_number_acl+0x280/0x280 [ 105.934798][ T5481] ? aa_get_task_label+0x21c/0x2c0 [ 105.939935][ T5481] ima_file_check+0xc1/0x100 [ 105.944531][ T5481] ? ima_bprm_check+0x1f0/0x1f0 [ 105.949416][ T5481] path_openat+0x2735/0x2f30 [ 105.954047][ T5481] ? do_filp_open+0x3e0/0x3e0 [ 105.958751][ T5481] do_filp_open+0x1b3/0x3e0 [ 105.963270][ T5481] ? vfs_tmpfile+0x300/0x300 [ 105.967886][ T5481] ? _raw_spin_unlock+0x24/0x40 [ 105.972730][ T5481] ? alloc_fd+0x598/0x630 [ 105.977078][ T5481] do_sys_openat2+0x142/0x4a0 [ 105.981762][ T5481] ? __lock_acquire+0x7c60/0x7c60 [ 105.986804][ T5481] ? do_sys_open+0xe0/0xe0 [ 105.991225][ T5481] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 105.997248][ T5481] ? lock_chain_count+0x20/0x20 [ 106.002328][ T5481] ? vtime_user_exit+0x2dc/0x400 [ 106.007267][ T5481] __x64_sys_openat+0x135/0x160 [ 106.012207][ T5481] do_syscall_64+0x4c/0xa0 [ 106.016705][ T5481] ? clear_bhb_loop+0x30/0x80 [ 106.021375][ T5481] ? clear_bhb_loop+0x30/0x80 [ 106.026058][ T5481] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.031982][ T5481] RIP: 0033:0x7f5800380749 [ 106.036418][ T5481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.056036][ T5481] RSP: 002b:00007f57fe5e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 106.064456][ T5481] RAX: ffffffffffffffda RBX: 00007f58005d6fa0 RCX: 00007f5800380749 [ 106.072447][ T5481] RDX: 000000000014b442 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 106.080457][ T5481] RBP: 00007f5800404f91 R08: 0000000000000000 R09: 0000000000000000 [ 106.088434][ T5481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.096424][ T5481] R13: 00007f58005d7038 R14: 00007f58005d6fa0 R15: 00007ffe90e888d8 [ 106.104419][ T5481] [ 106.151491][ T5529] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 106.174149][ T5481] NILFS (loop2): btree level mismatch (ino=16): 1 != 3 [ 106.188007][ T5539] netlink: 52 bytes leftover after parsing attributes in process `syz.0.496'. [ 106.213175][ T5481] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 106.218335][ T5539] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 106.227841][ T5481] CPU: 1 PID: 5481 Comm: syz.2.470 Not tainted syzkaller #0 [ 106.246290][ T5481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 106.256460][ T5481] Call Trace: [ 106.259782][ T5481] [ 106.262741][ T5481] dump_stack_lvl+0x168/0x230 [ 106.267456][ T5481] ? show_regs_print_info+0x20/0x20 [ 106.272720][ T5481] nilfs_btree_do_lookup+0x96f/0xaf0 [ 106.278136][ T5481] ? nilfs_btree_alloc_path+0x4c/0x600 [ 106.283648][ T5481] ? nilfs_btree_alloc_path+0x600/0x600 [ 106.289232][ T5481] ? nilfs_btree_alloc_path+0x5e5/0x600 [ 106.294803][ T5481] nilfs_btree_lookup_contig+0xfa/0xc00 [ 106.300743][ T5481] ? __might_sleep+0xf0/0xf0 [ 106.305362][ T5481] ? read_lock_is_recursive+0x10/0x10 [ 106.310767][ T5481] ? __might_sleep+0xf0/0xf0 [ 106.315462][ T5481] ? __lock_acquire+0x12d9/0x7c60 [ 106.320590][ T5481] ? nilfs_btree_lookup+0x70/0x70 [ 106.325626][ T5481] ? down_read+0x1aa/0x2e0 [ 106.330197][ T5481] nilfs_bmap_lookup_contig+0x87/0x160 [ 106.335698][ T5481] nilfs_get_block+0x1f8/0x8f0 [ 106.340576][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 106.345981][ T5481] do_mpage_readpage+0x820/0x1e30 [ 106.351058][ T5481] ? mpage_readahead+0x8a0/0x8a0 [ 106.356016][ T5481] ? xa_load+0x286/0x2a0 [ 106.360271][ T5481] mpage_readahead+0x3a6/0x8a0 [ 106.365049][ T5481] ? dio_await_one+0x390/0x390 [ 106.369833][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 106.375211][ T5481] ? local_lock_release+0x97/0x170 [ 106.380331][ T5481] read_pages+0x165/0x920 [ 106.384667][ T5481] ? page_cache_ra_unbounded+0x930/0x930 [ 106.390341][ T5481] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 106.395987][ T5481] page_cache_ra_unbounded+0x830/0x930 [ 106.405196][ T5481] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 106.411711][ T5481] filemap_read+0x589/0x2480 [ 106.416304][ T5481] ? rcu_lock_release+0x5/0x20 [ 106.421085][ T5481] ? 0xffffffffa002a000 [ 106.425240][ T5481] ? find_get_pages_range_tag+0x450/0x450 [ 106.430962][ T5481] ? __kernel_text_address+0x9a/0x100 [ 106.436338][ T5481] ? unwind_get_return_address+0x49/0x80 [ 106.441993][ T5481] ? generic_file_read_iter+0x96/0x490 [ 106.447455][ T5481] ? memset+0x1e/0x40 [ 106.451579][ T5481] ? iov_iter_kvec+0xb4/0x170 [ 106.456291][ T5481] __kernel_read+0x4eb/0x910 [ 106.460882][ T5481] ? __kasan_kmalloc+0xcc/0xf0 [ 106.465656][ T5481] ? rw_verify_area+0x1b0/0x1b0 [ 106.470738][ T5481] integrity_kernel_read+0x86/0xd0 [ 106.475858][ T5481] ? integrity_inode_free+0x170/0x170 [ 106.481340][ T5481] ima_calc_file_hash+0x1546/0x18e0 [ 106.486558][ T5481] ? __lock_acquire+0x13ad/0x7c60 [ 106.491731][ T5481] ? 0xffffffffa002a000 [ 106.495938][ T5481] ? ima_alloc_tfm+0x2f0/0x2f0 [ 106.500771][ T5481] ? __mutex_trylock_common+0x14f/0x250 [ 106.506340][ T5481] ? rcu_lock_release+0x20/0x20 [ 106.511225][ T5481] ? process_measurement+0x65b/0x1a10 [ 106.516621][ T5481] ima_collect_measurement+0x2ef/0x760 [ 106.522105][ T5481] ? ima_get_action+0xa0/0xa0 [ 106.526807][ T5481] ? preempt_count_add+0x8d/0x190 [ 106.531843][ T5481] process_measurement+0xfb9/0x1a10 [ 106.537058][ T5481] ? ima_file_mmap+0x150/0x150 [ 106.541825][ T5481] ? tomoyo_check_path_number_acl+0x280/0x280 [ 106.548021][ T5481] ? aa_get_task_label+0x21c/0x2c0 [ 106.553154][ T5481] ima_file_check+0xc1/0x100 [ 106.557751][ T5481] ? ima_bprm_check+0x1f0/0x1f0 [ 106.562626][ T5481] path_openat+0x2735/0x2f30 [ 106.567246][ T5481] ? do_filp_open+0x3e0/0x3e0 [ 106.571952][ T5481] do_filp_open+0x1b3/0x3e0 [ 106.576479][ T5481] ? vfs_tmpfile+0x300/0x300 [ 106.581179][ T5481] ? _raw_spin_unlock+0x24/0x40 [ 106.586207][ T5481] ? alloc_fd+0x598/0x630 [ 106.590728][ T5481] do_sys_openat2+0x142/0x4a0 [ 106.595408][ T5481] ? __lock_acquire+0x7c60/0x7c60 [ 106.600536][ T5481] ? do_sys_open+0xe0/0xe0 [ 106.604957][ T5481] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 106.610944][ T5481] ? lock_chain_count+0x20/0x20 [ 106.615802][ T5481] ? vtime_user_exit+0x2dc/0x400 [ 106.620759][ T5481] __x64_sys_openat+0x135/0x160 [ 106.625807][ T5481] do_syscall_64+0x4c/0xa0 [ 106.630230][ T5481] ? clear_bhb_loop+0x30/0x80 [ 106.634909][ T5481] ? clear_bhb_loop+0x30/0x80 [ 106.639589][ T5481] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.645492][ T5481] RIP: 0033:0x7f5800380749 [ 106.649914][ T5481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.669526][ T5481] RSP: 002b:00007f57fe5e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 106.677949][ T5481] RAX: ffffffffffffffda RBX: 00007f58005d6fa0 RCX: 00007f5800380749 [ 106.686194][ T5481] RDX: 000000000014b442 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 106.694176][ T5481] RBP: 00007f5800404f91 R08: 0000000000000000 R09: 0000000000000000 [ 106.702241][ T5481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.710215][ T5481] R13: 00007f58005d7038 R14: 00007f58005d6fa0 R15: 00007ffe90e888d8 [ 106.718211][ T5481] [ 106.753111][ T5554] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.968332][ T5560] loop3: detected capacity change from 0 to 128 [ 107.058849][ T5564] loop4: detected capacity change from 0 to 256 [ 107.119090][ T5481] NILFS (loop2): btree level mismatch (ino=16): 1 != 3 [ 107.127132][ T5481] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 107.141372][ T5481] CPU: 0 PID: 5481 Comm: syz.2.470 Not tainted syzkaller #0 [ 107.148718][ T5481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.158902][ T5481] Call Trace: [ 107.162217][ T5481] [ 107.165191][ T5481] dump_stack_lvl+0x168/0x230 [ 107.170006][ T5481] ? show_regs_print_info+0x20/0x20 [ 107.175263][ T5481] nilfs_btree_do_lookup+0x96f/0xaf0 [ 107.180608][ T5481] ? nilfs_btree_alloc_path+0x4c/0x600 [ 107.186113][ T5481] ? nilfs_btree_alloc_path+0x600/0x600 [ 107.191741][ T5481] ? nilfs_btree_alloc_path+0x5e5/0x600 [ 107.197425][ T5481] nilfs_btree_lookup_contig+0xfa/0xc00 [ 107.203196][ T5481] ? __might_sleep+0xf0/0xf0 [ 107.207802][ T5481] ? read_lock_is_recursive+0x10/0x10 [ 107.213191][ T5481] ? memset+0x1e/0x40 [ 107.217265][ T5481] ? __might_sleep+0xf0/0xf0 [ 107.221853][ T5481] ? lockdep_init_map_type+0x9d/0x850 [ 107.227326][ T5481] ? nilfs_btree_lookup+0x70/0x70 [ 107.232357][ T5481] ? down_read+0x1aa/0x2e0 [ 107.236815][ T5481] nilfs_bmap_lookup_contig+0x87/0x160 [ 107.242285][ T5481] nilfs_get_block+0x1f8/0x8f0 [ 107.247057][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 107.252530][ T5481] ? do_raw_spin_unlock+0x11d/0x230 [ 107.257733][ T5481] ? create_page_buffers+0x238/0x320 [ 107.263030][ T5481] block_read_full_page+0x2e8/0xd10 [ 107.268240][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 107.273612][ T5481] ? block_is_partially_uptodate+0x2d0/0x2d0 [ 107.279790][ T5481] do_mpage_readpage+0x1932/0x1e30 [ 107.284924][ T5481] ? mpage_readahead+0x8a0/0x8a0 [ 107.289866][ T5481] ? xa_load+0x286/0x2a0 [ 107.294118][ T5481] mpage_readahead+0x3a6/0x8a0 [ 107.299065][ T5481] ? dio_await_one+0x390/0x390 [ 107.303857][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 107.309235][ T5481] ? local_lock_release+0x97/0x170 [ 107.314358][ T5481] read_pages+0x165/0x920 [ 107.318697][ T5481] ? page_cache_ra_unbounded+0x930/0x930 [ 107.324350][ T5481] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 107.329931][ T5481] page_cache_ra_unbounded+0x830/0x930 [ 107.335426][ T5481] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 107.342294][ T5481] filemap_read+0x589/0x2480 [ 107.346891][ T5481] ? rcu_lock_release+0x5/0x20 [ 107.351769][ T5481] ? 0xffffffffa002a000 [ 107.355931][ T5481] ? find_get_pages_range_tag+0x450/0x450 [ 107.361669][ T5481] ? __kernel_text_address+0x9a/0x100 [ 107.367071][ T5481] ? unwind_get_return_address+0x49/0x80 [ 107.372920][ T5481] ? generic_file_read_iter+0x96/0x490 [ 107.378494][ T5481] ? memset+0x1e/0x40 [ 107.382525][ T5481] ? iov_iter_kvec+0xb4/0x170 [ 107.387206][ T5481] __kernel_read+0x4eb/0x910 [ 107.391886][ T5481] ? __kasan_kmalloc+0xcc/0xf0 [ 107.396664][ T5481] ? rw_verify_area+0x1b0/0x1b0 [ 107.401535][ T5481] integrity_kernel_read+0x86/0xd0 [ 107.406652][ T5481] ? integrity_inode_free+0x170/0x170 [ 107.412035][ T5481] ima_calc_file_hash+0x1546/0x18e0 [ 107.417241][ T5481] ? __lock_acquire+0x13ad/0x7c60 [ 107.422274][ T5481] ? 0xffffffffa002a000 [ 107.426434][ T5481] ? ima_alloc_tfm+0x2f0/0x2f0 [ 107.431249][ T5481] ? __mutex_trylock_common+0x14f/0x250 [ 107.436798][ T5481] ? rcu_lock_release+0x20/0x20 [ 107.441746][ T5481] ? process_measurement+0x65b/0x1a10 [ 107.447272][ T5481] ima_collect_measurement+0x2ef/0x760 [ 107.452780][ T5481] ? ima_get_action+0xa0/0xa0 [ 107.457584][ T5481] ? preempt_count_add+0x8d/0x190 [ 107.462623][ T5481] process_measurement+0xfb9/0x1a10 [ 107.467837][ T5481] ? ima_file_mmap+0x150/0x150 [ 107.472605][ T5481] ? tomoyo_check_path_number_acl+0x280/0x280 [ 107.478757][ T5481] ? aa_get_task_label+0x21c/0x2c0 [ 107.484012][ T5481] ima_file_check+0xc1/0x100 [ 107.488808][ T5481] ? ima_bprm_check+0x1f0/0x1f0 [ 107.493773][ T5481] path_openat+0x2735/0x2f30 [ 107.498401][ T5481] ? do_filp_open+0x3e0/0x3e0 [ 107.503094][ T5481] do_filp_open+0x1b3/0x3e0 [ 107.507602][ T5481] ? vfs_tmpfile+0x300/0x300 [ 107.512395][ T5481] ? _raw_spin_unlock+0x24/0x40 [ 107.517361][ T5481] ? alloc_fd+0x598/0x630 [ 107.521720][ T5481] do_sys_openat2+0x142/0x4a0 [ 107.526425][ T5481] ? __lock_acquire+0x7c60/0x7c60 [ 107.531555][ T5481] ? do_sys_open+0xe0/0xe0 [ 107.535975][ T5481] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 107.541967][ T5481] ? lock_chain_count+0x20/0x20 [ 107.546828][ T5481] ? vtime_user_exit+0x2dc/0x400 [ 107.551865][ T5481] __x64_sys_openat+0x135/0x160 [ 107.556728][ T5481] do_syscall_64+0x4c/0xa0 [ 107.561166][ T5481] ? clear_bhb_loop+0x30/0x80 [ 107.565843][ T5481] ? clear_bhb_loop+0x30/0x80 [ 107.570521][ T5481] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.576504][ T5481] RIP: 0033:0x7f5800380749 [ 107.580937][ T5481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.601010][ T5481] RSP: 002b:00007f57fe5e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 107.609430][ T5481] RAX: ffffffffffffffda RBX: 00007f58005d6fa0 RCX: 00007f5800380749 [ 107.617411][ T5481] RDX: 000000000014b442 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 107.625386][ T5481] RBP: 00007f5800404f91 R08: 0000000000000000 R09: 0000000000000000 [ 107.633357][ T5481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.641329][ T5481] R13: 00007f58005d7038 R14: 00007f58005d6fa0 R15: 00007ffe90e888d8 [ 107.649415][ T5481] [ 107.652534][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.671009][ T5481] NILFS (loop2): btree level mismatch (ino=16): 1 != 3 [ 107.744997][ T5481] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 107.775491][ T5481] CPU: 0 PID: 5481 Comm: syz.2.470 Not tainted syzkaller #0 [ 107.782850][ T5481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 107.792942][ T5481] Call Trace: [ 107.796274][ T5481] [ 107.799251][ T5481] dump_stack_lvl+0x168/0x230 [ 107.804202][ T5481] ? show_regs_print_info+0x20/0x20 [ 107.809473][ T5481] nilfs_btree_do_lookup+0x96f/0xaf0 [ 107.814826][ T5481] ? nilfs_btree_alloc_path+0x4c/0x600 [ 107.820335][ T5481] ? nilfs_btree_alloc_path+0x600/0x600 [ 107.825921][ T5481] ? nilfs_btree_alloc_path+0x5e5/0x600 [ 107.831614][ T5481] nilfs_btree_lookup_contig+0xfa/0xc00 [ 107.831799][ T5573] loop1: detected capacity change from 0 to 4096 [ 107.837219][ T5481] ? __might_sleep+0xf0/0xf0 [ 107.837247][ T5481] ? read_lock_is_recursive+0x10/0x10 [ 107.837271][ T5481] ? __might_sleep+0xf0/0xf0 [ 107.837292][ T5481] ? nilfs_btree_lookup+0x70/0x70 [ 107.837314][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 107.837338][ T5481] ? down_read+0x1aa/0x2e0 [ 107.837366][ T5481] nilfs_bmap_lookup_contig+0x87/0x160 [ 107.837395][ T5481] nilfs_get_block+0x1f8/0x8f0 [ 107.837425][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 107.837450][ T5481] ? mark_lock+0x94/0x320 [ 107.837475][ T5481] ? create_page_buffers+0x238/0x320 [ 107.837498][ T5481] block_read_full_page+0x2e8/0xd10 [ 107.904317][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 107.909740][ T5481] ? block_is_partially_uptodate+0x2d0/0x2d0 [ 107.915897][ T5481] ? mark_lock+0x94/0x320 [ 107.920280][ T5481] do_mpage_readpage+0x1932/0x1e30 [ 107.925481][ T5481] ? mpage_readahead+0x8a0/0x8a0 [ 107.930541][ T5481] ? page_cache_ra_unbounded+0x83a/0x930 [ 107.936218][ T5481] ? preempt_count_add+0x8d/0x190 [ 107.941279][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 107.946698][ T5481] mpage_readpage+0xae/0x180 [ 107.951767][ T5481] ? do_mpage_readpage+0x1e30/0x1e30 [ 107.957111][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 107.962716][ T5481] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 107.969272][ T5481] filemap_read_page+0x17b/0x4c0 [ 107.974253][ T5481] filemap_read+0x13d5/0x2480 [ 107.979012][ T5481] ? find_get_pages_range_tag+0x450/0x450 [ 107.984778][ T5481] ? unwind_get_return_address+0x49/0x80 [ 107.990452][ T5481] ? generic_file_read_iter+0x96/0x490 [ 107.995932][ T5481] ? memset+0x1e/0x40 [ 107.999932][ T5481] ? iov_iter_kvec+0xb4/0x170 [ 108.004627][ T5481] __kernel_read+0x4eb/0x910 [ 108.009227][ T5481] ? __kasan_kmalloc+0xcc/0xf0 [ 108.014002][ T5481] ? rw_verify_area+0x1b0/0x1b0 [ 108.018878][ T5481] integrity_kernel_read+0x86/0xd0 [ 108.023998][ T5481] ? integrity_inode_free+0x170/0x170 [ 108.029379][ T5481] ima_calc_file_hash+0x1546/0x18e0 [ 108.034585][ T5481] ? __lock_acquire+0x13ad/0x7c60 [ 108.039720][ T5481] ? 0xffffffffa002a000 [ 108.043885][ T5481] ? ima_alloc_tfm+0x2f0/0x2f0 [ 108.048697][ T5481] ? __mutex_trylock_common+0x14f/0x250 [ 108.054273][ T5481] ? rcu_lock_release+0x20/0x20 [ 108.059132][ T5481] ? process_measurement+0x65b/0x1a10 [ 108.064596][ T5481] ima_collect_measurement+0x2ef/0x760 [ 108.070067][ T5481] ? ima_get_action+0xa0/0xa0 [ 108.074788][ T5481] ? preempt_count_add+0x8d/0x190 [ 108.079855][ T5481] process_measurement+0xfb9/0x1a10 [ 108.085069][ T5481] ? ima_file_mmap+0x150/0x150 [ 108.089837][ T5481] ? tomoyo_check_path_number_acl+0x280/0x280 [ 108.096060][ T5481] ? aa_get_task_label+0x21c/0x2c0 [ 108.101180][ T5481] ima_file_check+0xc1/0x100 [ 108.105778][ T5481] ? ima_bprm_check+0x1f0/0x1f0 [ 108.110659][ T5481] path_openat+0x2735/0x2f30 [ 108.115277][ T5481] ? do_filp_open+0x3e0/0x3e0 [ 108.119973][ T5481] do_filp_open+0x1b3/0x3e0 [ 108.124511][ T5481] ? vfs_tmpfile+0x300/0x300 [ 108.129127][ T5481] ? _raw_spin_unlock+0x24/0x40 [ 108.134075][ T5481] ? alloc_fd+0x598/0x630 [ 108.138433][ T5481] do_sys_openat2+0x142/0x4a0 [ 108.143116][ T5481] ? __lock_acquire+0x7c60/0x7c60 [ 108.148246][ T5481] ? do_sys_open+0xe0/0xe0 [ 108.152665][ T5481] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 108.158658][ T5481] ? lock_chain_count+0x20/0x20 [ 108.163518][ T5481] ? vtime_user_exit+0x2dc/0x400 [ 108.168635][ T5481] __x64_sys_openat+0x135/0x160 [ 108.173495][ T5481] do_syscall_64+0x4c/0xa0 [ 108.177912][ T5481] ? clear_bhb_loop+0x30/0x80 [ 108.182599][ T5481] ? clear_bhb_loop+0x30/0x80 [ 108.187279][ T5481] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.193266][ T5481] RIP: 0033:0x7f5800380749 [ 108.197687][ T5481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.217299][ T5481] RSP: 002b:00007f57fe5e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 108.225811][ T5481] RAX: ffffffffffffffda RBX: 00007f58005d6fa0 RCX: 00007f5800380749 [ 108.236824][ T5481] RDX: 000000000014b442 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 108.244800][ T5481] RBP: 00007f5800404f91 R08: 0000000000000000 R09: 0000000000000000 [ 108.252767][ T5481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.260744][ T5481] R13: 00007f58005d7038 R14: 00007f58005d6fa0 R15: 00007ffe90e888d8 [ 108.268820][ T5481] [ 108.271996][ C0] vkms_vblank_simulate: vblank timer overrun [ 108.292836][ T5481] NILFS (loop2): btree level mismatch (ino=16): 1 != 3 [ 108.299824][ T5481] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.323896][ T5481] CPU: 1 PID: 5481 Comm: syz.2.470 Not tainted syzkaller #0 [ 108.331246][ T5481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.341321][ T5481] Call Trace: [ 108.344641][ T5481] [ 108.347600][ T5481] dump_stack_lvl+0x168/0x230 [ 108.352404][ T5481] ? show_regs_print_info+0x20/0x20 [ 108.357649][ T5481] nilfs_btree_do_lookup+0x96f/0xaf0 [ 108.363173][ T5481] ? nilfs_btree_alloc_path+0x4c/0x600 [ 108.368754][ T5481] ? nilfs_btree_alloc_path+0x600/0x600 [ 108.374313][ T5481] ? nilfs_btree_alloc_path+0x5e5/0x600 [ 108.379902][ T5481] nilfs_btree_lookup_contig+0xfa/0xc00 [ 108.385593][ T5481] ? __might_sleep+0xf0/0xf0 [ 108.390371][ T5481] ? read_lock_is_recursive+0x10/0x10 [ 108.395838][ T5481] ? __might_sleep+0xf0/0xf0 [ 108.400712][ T5481] ? nilfs_btree_lookup+0x70/0x70 [ 108.405753][ T5481] ? __up_read+0x27c/0x660 [ 108.410270][ T5481] ? down_read+0x1aa/0x2e0 [ 108.414790][ T5481] nilfs_bmap_lookup_contig+0x87/0x160 [ 108.420271][ T5481] nilfs_get_block+0x1f8/0x8f0 [ 108.425047][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 108.430427][ T5481] ? memset+0x1e/0x40 [ 108.434422][ T5481] block_read_full_page+0x2e8/0xd10 [ 108.439633][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 108.445012][ T5481] ? block_is_partially_uptodate+0x2d0/0x2d0 [ 108.451002][ T5481] ? mark_lock+0x94/0x320 [ 108.455341][ T5481] do_mpage_readpage+0x1932/0x1e30 [ 108.460563][ T5481] ? mpage_readahead+0x8a0/0x8a0 [ 108.465509][ T5481] ? page_cache_ra_unbounded+0x83a/0x930 [ 108.471171][ T5481] ? preempt_count_add+0x8d/0x190 [ 108.476319][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 108.481978][ T5481] mpage_readpage+0xae/0x180 [ 108.486677][ T5481] ? do_mpage_readpage+0x1e30/0x1e30 [ 108.491991][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 108.497458][ T5481] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 108.503979][ T5481] filemap_read_page+0x17b/0x4c0 [ 108.508926][ T5481] filemap_read+0x13d5/0x2480 [ 108.513803][ T5481] ? find_get_pages_range_tag+0x450/0x450 [ 108.519811][ T5481] ? unwind_get_return_address+0x49/0x80 [ 108.525490][ T5481] ? generic_file_read_iter+0x96/0x490 [ 108.530949][ T5481] ? memset+0x1e/0x40 [ 108.535070][ T5481] ? iov_iter_kvec+0xb4/0x170 [ 108.539870][ T5481] __kernel_read+0x4eb/0x910 [ 108.544585][ T5481] ? __kasan_kmalloc+0xcc/0xf0 [ 108.549485][ T5481] ? rw_verify_area+0x1b0/0x1b0 [ 108.554365][ T5481] integrity_kernel_read+0x86/0xd0 [ 108.559484][ T5481] ? integrity_inode_free+0x170/0x170 [ 108.564884][ T5481] ima_calc_file_hash+0x1546/0x18e0 [ 108.570119][ T5481] ? __lock_acquire+0x13ad/0x7c60 [ 108.575335][ T5481] ? 0xffffffffa002a000 [ 108.579500][ T5481] ? ima_alloc_tfm+0x2f0/0x2f0 [ 108.584993][ T5481] ? __mutex_trylock_common+0x14f/0x250 [ 108.590692][ T5481] ? rcu_lock_release+0x20/0x20 [ 108.595582][ T5481] ? process_measurement+0x65b/0x1a10 [ 108.600971][ T5481] ima_collect_measurement+0x2ef/0x760 [ 108.606447][ T5481] ? ima_get_action+0xa0/0xa0 [ 108.611248][ T5481] ? preempt_count_add+0x8d/0x190 [ 108.616286][ T5481] process_measurement+0xfb9/0x1a10 [ 108.621515][ T5481] ? ima_file_mmap+0x150/0x150 [ 108.626310][ T5481] ? tomoyo_check_path_number_acl+0x280/0x280 [ 108.632425][ T5481] ? aa_get_task_label+0x21c/0x2c0 [ 108.637561][ T5481] ima_file_check+0xc1/0x100 [ 108.642299][ T5481] ? ima_bprm_check+0x1f0/0x1f0 [ 108.647193][ T5481] path_openat+0x2735/0x2f30 [ 108.652013][ T5481] ? do_filp_open+0x3e0/0x3e0 [ 108.656716][ T5481] do_filp_open+0x1b3/0x3e0 [ 108.661235][ T5481] ? vfs_tmpfile+0x300/0x300 [ 108.665847][ T5481] ? _raw_spin_unlock+0x24/0x40 [ 108.670714][ T5481] ? alloc_fd+0x598/0x630 [ 108.675063][ T5481] do_sys_openat2+0x142/0x4a0 [ 108.679952][ T5481] ? __lock_acquire+0x7c60/0x7c60 [ 108.685041][ T5481] ? do_sys_open+0xe0/0xe0 [ 108.689481][ T5481] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 108.695586][ T5481] ? lock_chain_count+0x20/0x20 [ 108.700450][ T5481] ? vtime_user_exit+0x2dc/0x400 [ 108.705567][ T5481] __x64_sys_openat+0x135/0x160 [ 108.710457][ T5481] do_syscall_64+0x4c/0xa0 [ 108.714891][ T5481] ? clear_bhb_loop+0x30/0x80 [ 108.719582][ T5481] ? clear_bhb_loop+0x30/0x80 [ 108.724272][ T5481] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.730169][ T5481] RIP: 0033:0x7f5800380749 [ 108.734586][ T5481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.754369][ T5481] RSP: 002b:00007f57fe5e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 108.762887][ T5481] RAX: ffffffffffffffda RBX: 00007f58005d6fa0 RCX: 00007f5800380749 [ 108.771038][ T5481] RDX: 000000000014b442 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 108.779015][ T5481] RBP: 00007f5800404f91 R08: 0000000000000000 R09: 0000000000000000 [ 108.787075][ T5481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.795046][ T5481] R13: 00007f58005d7038 R14: 00007f58005d6fa0 R15: 00007ffe90e888d8 [ 108.803031][ T5481] [ 108.810597][ T5481] NILFS (loop2): btree level mismatch (ino=16): 1 != 3 [ 108.819131][ T5481] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 108.829377][ T5481] CPU: 0 PID: 5481 Comm: syz.2.470 Not tainted syzkaller #0 [ 108.836820][ T5481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.846980][ T5481] Call Trace: [ 108.850273][ T5481] [ 108.853305][ T5481] dump_stack_lvl+0x168/0x230 [ 108.857996][ T5481] ? show_regs_print_info+0x20/0x20 [ 108.863213][ T5481] nilfs_btree_do_lookup+0x96f/0xaf0 [ 108.868519][ T5481] ? nilfs_btree_alloc_path+0x4c/0x600 [ 108.874084][ T5481] ? nilfs_btree_alloc_path+0x600/0x600 [ 108.879633][ T5481] ? nilfs_btree_alloc_path+0x5e5/0x600 [ 108.885189][ T5481] nilfs_btree_lookup_contig+0xfa/0xc00 [ 108.890754][ T5481] ? __might_sleep+0xf0/0xf0 [ 108.895349][ T5481] ? read_lock_is_recursive+0x10/0x10 [ 108.900728][ T5481] ? __might_sleep+0xf0/0xf0 [ 108.905321][ T5481] ? nilfs_btree_lookup+0x70/0x70 [ 108.910374][ T5481] ? __up_read+0x27c/0x660 [ 108.914810][ T5481] ? down_read+0x1aa/0x2e0 [ 108.919341][ T5481] nilfs_bmap_lookup_contig+0x87/0x160 [ 108.924844][ T5481] nilfs_get_block+0x1f8/0x8f0 [ 108.929627][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 108.935008][ T5481] ? memset+0x1e/0x40 [ 108.939006][ T5481] block_read_full_page+0x2e8/0xd10 [ 108.944218][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 108.949593][ T5481] ? block_is_partially_uptodate+0x2d0/0x2d0 [ 108.955582][ T5481] ? mark_lock+0x94/0x320 [ 108.959928][ T5481] do_mpage_readpage+0x1932/0x1e30 [ 108.965073][ T5481] ? mpage_readahead+0x8a0/0x8a0 [ 108.970021][ T5481] ? page_cache_ra_unbounded+0x83a/0x930 [ 108.975836][ T5481] ? preempt_count_add+0x8d/0x190 [ 108.981440][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 108.986830][ T5481] mpage_readpage+0xae/0x180 [ 108.991453][ T5481] ? do_mpage_readpage+0x1e30/0x1e30 [ 108.996788][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 109.002173][ T5481] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 109.008686][ T5481] filemap_read_page+0x17b/0x4c0 [ 109.013744][ T5481] filemap_read+0x13d5/0x2480 [ 109.018450][ T5481] ? find_get_pages_range_tag+0x450/0x450 [ 109.024188][ T5481] ? unwind_get_return_address+0x49/0x80 [ 109.029935][ T5481] ? generic_file_read_iter+0x96/0x490 [ 109.035393][ T5481] ? memset+0x1e/0x40 [ 109.039376][ T5481] ? iov_iter_kvec+0xb4/0x170 [ 109.044079][ T5481] __kernel_read+0x4eb/0x910 [ 109.048688][ T5481] ? __kasan_kmalloc+0xcc/0xf0 [ 109.053489][ T5481] ? rw_verify_area+0x1b0/0x1b0 [ 109.058419][ T5481] integrity_kernel_read+0x86/0xd0 [ 109.063541][ T5481] ? integrity_inode_free+0x170/0x170 [ 109.069106][ T5481] ima_calc_file_hash+0x1546/0x18e0 [ 109.074487][ T5481] ? __lock_acquire+0x13ad/0x7c60 [ 109.079708][ T5481] ? 0xffffffffa002a000 [ 109.083955][ T5481] ? ima_alloc_tfm+0x2f0/0x2f0 [ 109.088769][ T5481] ? __mutex_trylock_common+0x14f/0x250 [ 109.094345][ T5481] ? rcu_lock_release+0x20/0x20 [ 109.099207][ T5481] ? process_measurement+0x65b/0x1a10 [ 109.104599][ T5481] ima_collect_measurement+0x2ef/0x760 [ 109.110084][ T5481] ? ima_get_action+0xa0/0xa0 [ 109.114804][ T5481] ? preempt_count_add+0x8d/0x190 [ 109.119845][ T5481] process_measurement+0xfb9/0x1a10 [ 109.125062][ T5481] ? ima_file_mmap+0x150/0x150 [ 109.129826][ T5481] ? tomoyo_check_path_number_acl+0x280/0x280 [ 109.135933][ T5481] ? aa_get_task_label+0x21c/0x2c0 [ 109.141142][ T5481] ima_file_check+0xc1/0x100 [ 109.145825][ T5481] ? ima_bprm_check+0x1f0/0x1f0 [ 109.150687][ T5481] path_openat+0x2735/0x2f30 [ 109.155418][ T5481] ? do_filp_open+0x3e0/0x3e0 [ 109.160204][ T5481] do_filp_open+0x1b3/0x3e0 [ 109.164841][ T5481] ? vfs_tmpfile+0x300/0x300 [ 109.169453][ T5481] ? _raw_spin_unlock+0x24/0x40 [ 109.174309][ T5481] ? alloc_fd+0x598/0x630 [ 109.178688][ T5481] do_sys_openat2+0x142/0x4a0 [ 109.183395][ T5481] ? __lock_acquire+0x7c60/0x7c60 [ 109.188566][ T5481] ? do_sys_open+0xe0/0xe0 [ 109.192990][ T5481] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 109.198984][ T5481] ? lock_chain_count+0x20/0x20 [ 109.203838][ T5481] ? vtime_user_exit+0x2dc/0x400 [ 109.209140][ T5481] __x64_sys_openat+0x135/0x160 [ 109.214003][ T5481] do_syscall_64+0x4c/0xa0 [ 109.218457][ T5481] ? clear_bhb_loop+0x30/0x80 [ 109.223195][ T5481] ? clear_bhb_loop+0x30/0x80 [ 109.227971][ T5481] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.233880][ T5481] RIP: 0033:0x7f5800380749 [ 109.238318][ T5481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.258103][ T5481] RSP: 002b:00007f57fe5e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 109.266544][ T5481] RAX: ffffffffffffffda RBX: 00007f58005d6fa0 RCX: 00007f5800380749 [ 109.274527][ T5481] RDX: 000000000014b442 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 109.282607][ T5481] RBP: 00007f5800404f91 R08: 0000000000000000 R09: 0000000000000000 [ 109.290731][ T5481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.298723][ T5481] R13: 00007f58005d7038 R14: 00007f58005d6fa0 R15: 00007ffe90e888d8 [ 109.306721][ T5481] [ 109.313535][ T5481] NILFS (loop2): btree level mismatch (ino=16): 1 != 3 [ 109.320610][ T5481] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 109.372531][ T5573] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 109.445218][ T5481] CPU: 1 PID: 5481 Comm: syz.2.470 Not tainted syzkaller #0 [ 109.452586][ T5481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 109.458273][ T5573] ntfs3: loop1: Failed to load $Extend. [ 109.462746][ T5481] Call Trace: [ 109.462760][ T5481] [ 109.474557][ T5481] dump_stack_lvl+0x168/0x230 [ 109.479471][ T5481] ? show_regs_print_info+0x20/0x20 [ 109.484730][ T5481] nilfs_btree_do_lookup+0x96f/0xaf0 [ 109.490055][ T5481] ? nilfs_btree_alloc_path+0x4c/0x600 [ 109.495637][ T5481] ? nilfs_btree_alloc_path+0x600/0x600 [ 109.501239][ T5481] ? nilfs_btree_alloc_path+0x5e5/0x600 [ 109.506839][ T5481] nilfs_btree_lookup_contig+0xfa/0xc00 [ 109.512450][ T5481] ? __might_sleep+0xf0/0xf0 [ 109.517071][ T5481] ? read_lock_is_recursive+0x10/0x10 [ 109.522494][ T5481] ? __might_sleep+0xf0/0xf0 [ 109.527123][ T5481] ? nilfs_btree_lookup+0x70/0x70 [ 109.532180][ T5481] ? __up_read+0x27c/0x660 [ 109.536643][ T5481] ? down_read+0x1aa/0x2e0 [ 109.541098][ T5481] nilfs_bmap_lookup_contig+0x87/0x160 [ 109.546610][ T5481] nilfs_get_block+0x1f8/0x8f0 [ 109.551433][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 109.556953][ T5481] ? memset+0x1e/0x40 [ 109.560993][ T5481] block_read_full_page+0x2e8/0xd10 [ 109.566247][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 109.571766][ T5481] ? block_is_partially_uptodate+0x2d0/0x2d0 [ 109.577919][ T5481] ? mark_lock+0x94/0x320 [ 109.582297][ T5481] do_mpage_readpage+0x1932/0x1e30 [ 109.587558][ T5481] ? mpage_readahead+0x8a0/0x8a0 [ 109.592526][ T5481] ? page_cache_ra_unbounded+0x83a/0x930 [ 109.598182][ T5481] ? preempt_count_add+0x8d/0x190 [ 109.603243][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 109.608655][ T5481] mpage_readpage+0xae/0x180 [ 109.613284][ T5481] ? do_mpage_readpage+0x1e30/0x1e30 [ 109.618623][ T5481] ? nilfs_inode_sub_blocks+0xe0/0xe0 [ 109.624046][ T5481] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 109.630591][ T5481] filemap_read_page+0x17b/0x4c0 [ 109.635570][ T5481] filemap_read+0x13d5/0x2480 [ 109.640315][ T5481] ? find_get_pages_range_tag+0x450/0x450 [ 109.646077][ T5481] ? unwind_get_return_address+0x49/0x80 [ 109.651783][ T5481] ? generic_file_read_iter+0x96/0x490 [ 109.657284][ T5481] ? memset+0x1e/0x40 [ 109.661500][ T5481] ? iov_iter_kvec+0xb4/0x170 [ 109.666219][ T5481] __kernel_read+0x4eb/0x910 [ 109.670848][ T5481] ? __kasan_kmalloc+0xcc/0xf0 [ 109.675690][ T5481] ? rw_verify_area+0x1b0/0x1b0 [ 109.680609][ T5481] integrity_kernel_read+0x86/0xd0 [ 109.685774][ T5481] ? integrity_inode_free+0x170/0x170 [ 109.691199][ T5481] ima_calc_file_hash+0x1546/0x18e0 [ 109.696542][ T5481] ? __lock_acquire+0x13ad/0x7c60 [ 109.701623][ T5481] ? 0xffffffffa002a000 [ 109.705827][ T5481] ? ima_alloc_tfm+0x2f0/0x2f0 [ 109.710778][ T5481] ? __mutex_trylock_common+0x14f/0x250 [ 109.716548][ T5481] ? rcu_lock_release+0x20/0x20 [ 109.721721][ T5481] ? process_measurement+0x65b/0x1a10 [ 109.727138][ T5481] ima_collect_measurement+0x2ef/0x760 [ 109.732654][ T5481] ? ima_get_action+0xa0/0xa0 [ 109.737393][ T5481] ? preempt_count_add+0x8d/0x190 [ 109.742462][ T5481] process_measurement+0xfb9/0x1a10 [ 109.747719][ T5481] ? ima_file_mmap+0x150/0x150 [ 109.752518][ T5481] ? tomoyo_check_path_number_acl+0x280/0x280 [ 109.758688][ T5481] ? aa_get_task_label+0x21c/0x2c0 [ 109.763967][ T5481] ima_file_check+0xc1/0x100 [ 109.769052][ T5481] ? ima_bprm_check+0x1f0/0x1f0 [ 109.773961][ T5481] path_openat+0x2735/0x2f30 [ 109.778636][ T5481] ? do_filp_open+0x3e0/0x3e0 [ 109.783372][ T5481] do_filp_open+0x1b3/0x3e0 [ 109.788028][ T5481] ? vfs_tmpfile+0x300/0x300 [ 109.792792][ T5481] ? _raw_spin_unlock+0x24/0x40 [ 109.797671][ T5481] ? alloc_fd+0x598/0x630 [ 109.802146][ T5481] do_sys_openat2+0x142/0x4a0 [ 109.806855][ T5481] ? __lock_acquire+0x7c60/0x7c60 [ 109.811928][ T5481] ? do_sys_open+0xe0/0xe0 [ 109.816467][ T5481] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 109.822483][ T5481] ? lock_chain_count+0x20/0x20 [ 109.827373][ T5481] ? vtime_user_exit+0x2dc/0x400 [ 109.832579][ T5481] __x64_sys_openat+0x135/0x160 [ 109.837494][ T5481] do_syscall_64+0x4c/0xa0 [ 109.842061][ T5481] ? clear_bhb_loop+0x30/0x80 [ 109.846772][ T5481] ? clear_bhb_loop+0x30/0x80 [ 109.851487][ T5481] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.857421][ T5481] RIP: 0033:0x7f5800380749 [ 109.861872][ T5481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.881698][ T5481] RSP: 002b:00007f57fe5e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 109.890156][ T5481] RAX: ffffffffffffffda RBX: 00007f58005d6fa0 RCX: 00007f5800380749 [ 109.898242][ T5481] RDX: 000000000014b442 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 109.906241][ T5481] RBP: 00007f5800404f91 R08: 0000000000000000 R09: 0000000000000000 [ 109.914247][ T5481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.922251][ T5481] R13: 00007f58005d7038 R14: 00007f58005d6fa0 R15: 00007ffe90e888d8 [ 109.930279][ T5481] [ 109.981016][ T5481] NILFS (loop2): btree level mismatch (ino=16): 1 != 3 [ 109.988870][ T5481] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 110.000321][ T26] audit: type=1800 audit(1763713002.542:29): pid=5481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.470" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 110.239167][ T5598] netlink: 16 bytes leftover after parsing attributes in process `syz.1.518'. [ 110.278567][ T5601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.525'. [ 110.505866][ T5611] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.515736][ T5611] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.525097][ T5611] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.533864][ T5611] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.579500][ T5611] Zero length message leads to an empty skb [ 110.606649][ T5616] openvswitch: netlink: Actions may not be safe on all matching packets [ 110.965276][ T5626] loop0: detected capacity change from 0 to 1024 [ 111.002280][ T5593] loop4: detected capacity change from 0 to 32768 [ 111.061647][ T5626] hfsplus: bad catalog entry type [ 111.104730][ T5593] ERROR: (device loop4): dbAlloc: unable to allocate blocks [ 111.104730][ T5593] [ 111.110362][ T5599] loop3: detected capacity change from 0 to 32768 [ 111.139601][ T5593] ERROR: (device loop4): remounting filesystem as read-only [ 111.156975][ T4226] hfsplus: b-tree write err: -5, ino 4 [ 111.203541][ T5629] overlayfs: missing 'lowerdir' [ 111.359063][ T5599] XFS (loop3): Mounting V5 Filesystem [ 111.481830][ T5599] XFS (loop3): Ending clean mount [ 111.506460][ T5599] XFS (loop3): Quotacheck needed: Please wait. [ 111.647537][ T5599] XFS (loop3): Quotacheck: Done. [ 111.731278][ T5620] loop1: detected capacity change from 0 to 32768 [ 111.738049][ T4738] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 111.815596][ T5651] loop4: detected capacity change from 0 to 64 [ 111.870996][ T5651] hfs: bad catalog entry type 0 [ 111.909520][ T5620] XFS (loop1): Mounting V5 Filesystem [ 111.955638][ T4183] XFS (loop3): Unmounting Filesystem [ 112.011355][ T5620] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 112.041196][ T5663] netlink: 'syz.0.547': attribute type 1 has an invalid length. [ 112.050696][ T5620] XFS (loop1): Starting recovery (logdev: internal) [ 112.051756][ T5663] netlink: 224 bytes leftover after parsing attributes in process `syz.0.547'. [ 112.058299][ T4738] usb 3-1: Using ep0 maxpacket: 32 [ 112.109931][ T5620] XFS (loop1): Ending recovery (logdev: internal) [ 112.213107][ T4738] usb 3-1: config 211 has an invalid interface number: 98 but max is 0 [ 112.229384][ T4738] usb 3-1: config 211 has no interface number 0 [ 112.257219][ T4738] usb 3-1: config 211 interface 98 has no altsetting 0 [ 112.303067][ T4188] XFS (loop1): Unmounting Filesystem [ 112.505296][ T4738] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 112.532934][ T4738] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.540989][ T4738] usb 3-1: Product: syz [ 112.562491][ T4738] usb 3-1: Manufacturer: syz [ 112.570192][ T5676] loop4: detected capacity change from 0 to 8 [ 112.592904][ T4738] usb 3-1: SerialNumber: syz [ 112.681905][ T5676] SQUASHFS error: zlib decompression failed, data probably corrupt [ 112.691895][ T5676] SQUASHFS error: Failed to read block 0x9b: -5 [ 112.698287][ T5676] SQUASHFS error: Unable to read metadata cache entry [99] [ 112.708256][ T5676] SQUASHFS error: Unable to read inode 0x127 [ 112.946167][ T4738] mct_u232 3-1:211.98: MCT U232 converter detected [ 112.961858][ T4738] mct_u232 ttyUSB0: expected endpoint missing [ 112.967243][ T5687] loop1: detected capacity change from 0 to 1024 [ 112.973111][ T4738] usb 3-1: USB disconnect, device number 5 [ 112.988258][ T4738] mct_u232 3-1:211.98: device disconnected [ 113.060576][ T5687] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 2: comm syz.1.551: lblock 2 mapped to illegal pblock 2 (length 1) [ 113.081514][ T5687] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 113.090366][ T5687] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 48: comm syz.1.551: lblock 0 mapped to illegal pblock 48 (length 1) [ 113.110089][ T5687] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 113.132553][ T5687] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.551: Failed to acquire dquot type 0 [ 113.149650][ T5687] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 113.166042][ T5687] EXT4-fs error (device loop1): ext4_evict_inode:282: inode #11: comm syz.1.551: mark_inode_dirty error [ 113.187607][ T5687] EXT4-fs warning (device loop1): ext4_evict_inode:285: couldn't mark inode dirty (err -117) [ 113.207196][ T5687] EXT4-fs (loop1): 1 orphan inode deleted [ 113.211446][ T5693] loop4: detected capacity change from 0 to 1024 [ 113.214842][ T5687] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 113.252087][ T362] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 113.289619][ T5693] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (37758!=35945) [ 113.320265][ T5693] EXT4-fs (loop4): group descriptors corrupted! [ 113.326275][ T362] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 113.339538][ T5687] EXT4-fs (loop1): Ignoring removed orlov option [ 113.346084][ T5687] EXT4-fs (loop1): can't enable nombcache during remount [ 113.353127][ T362] EXT4-fs error (device loop1): ext4_release_dquot:6245: comm kworker/u4:3: Failed to release dquot type 0 [ 113.389199][ T4188] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 113.405281][ T4188] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 113.416160][ T4188] EXT4-fs error (device loop1): ext4_quota_off:6515: inode #3: comm syz-executor: mark_inode_dirty error [ 113.579442][ T5699] loop1: detected capacity change from 0 to 8 [ 113.937160][ T5715] netlink: 'syz.4.570': attribute type 9 has an invalid length. [ 113.966827][ T5715] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.570'. [ 114.042142][ T5717] netlink: 'syz.4.570': attribute type 9 has an invalid length. [ 114.057160][ T5717] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.570'. [ 114.386469][ T5706] loop2: detected capacity change from 0 to 32768 [ 114.499153][ T1108] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 114.582341][ T5726] infiniband syz0: set down [ 114.587627][ T5726] infiniband syz0: added ipvlan1 [ 114.742906][ T1108] usb 2-1: Using ep0 maxpacket: 8 [ 114.795782][ T5726] RDS/IB: syz0: added [ 114.804957][ T5726] smc: adding ib device syz0 with port count 1 [ 114.813578][ T5726] smc: ib device syz0 port 1 has pnetid [ 114.866544][ T1108] usb 2-1: config 140 has an invalid interface number: 41 but max is 0 [ 114.893284][ T1108] usb 2-1: config 140 has no interface number 0 [ 114.915124][ T1108] usb 2-1: config 140 interface 41 altsetting 0 endpoint 0x6 has invalid maxpacket 926, setting to 64 [ 115.093206][ T1108] usb 2-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=77.86 [ 115.102572][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.142292][ T1108] usb 2-1: Product: syz [ 115.157268][ T1108] usb 2-1: Manufacturer: syz [ 115.173123][ T1108] usb 2-1: SerialNumber: syz [ 115.241461][ T5754] loop2: detected capacity change from 0 to 512 [ 115.269375][ T5756] loop4: detected capacity change from 0 to 2048 [ 115.376031][ T5754] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 115.393404][ T5754] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.407435][ T5756] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,journal_ioprio=0x0000000000000001,grpquota,errors=remount-ro,block_validity,noload,bsddf,errors=remount-ro,. Quota mode: writeback. [ 115.492753][ T5756] EXT4-fs error (device loop4): ext4_find_extent:929: inode #2: comm syz.4.588: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 115.507634][ T5754] EXT4-fs error (device loop2): ext4_get_first_dir_block:3619: inode #12: comm syz.2.587: directory missing '..' [ 115.531252][ T5756] EXT4-fs (loop4): Remounting filesystem read-only [ 115.540252][ T1108] rndis_wlan 2-1:140.41: invalid descriptor buffer length [ 115.547781][ T1108] usb 2-1: bad CDC descriptors [ 115.567471][ T1108] rndis_host 2-1:140.41: invalid descriptor buffer length [ 115.583433][ T1108] usb 2-1: bad CDC descriptors [ 115.589102][ T1108] cdc_acm 2-1:140.41: invalid descriptor buffer length [ 115.611867][ T1108] usb 2-1: USB disconnect, device number 6 [ 115.820434][ T5765] netlink: 'syz.2.590': attribute type 3 has an invalid length. [ 116.082391][ T5776] loop4: detected capacity change from 0 to 64 [ 116.933632][ T5805] loop0: detected capacity change from 0 to 512 [ 116.957854][ T5805] EXT4-fs (loop0): Ignoring removed nobh option [ 116.984895][ T5805] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.083610][ T5805] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.610: iget: bad i_size value: 38620345925642 [ 117.120096][ T5814] loop4: detected capacity change from 0 to 8 [ 117.137163][ T5805] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.610: couldn't read orphan inode 15 (err -117) [ 117.168902][ T5779] loop1: detected capacity change from 0 to 40427 [ 117.183264][ T5805] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback. [ 117.232991][ T13] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 117.257719][ T5779] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 117.276638][ T5779] F2FS-fs (loop1): invalid crc value [ 117.356971][ T5779] F2FS-fs (loop1): Found nat_bits in checkpoint [ 117.453385][ T5824] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 117.489273][ T5826] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 117.559533][ T5779] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 117.603240][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.629060][ T13] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 117.684327][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.715243][ T13] usb 3-1: config 0 descriptor?? [ 117.764567][ T4188] attempt to access beyond end of device [ 117.764567][ T4188] loop1: rw=2049, want=45104, limit=40427 [ 118.143322][ T5837] loop0: detected capacity change from 0 to 4096 [ 118.182928][ T5837] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 118.193633][ T5839] loop4: detected capacity change from 0 to 1024 [ 118.196438][ T13] zeroplus 0003:0C12:0005.0008: unknown main item tag 0x5 [ 118.236792][ T13] zeroplus 0003:0C12:0005.0008: hidraw0: USB HID v0.02 Device [HID 0c12:0005] on usb-dummy_hcd.2-1/input0 [ 118.252933][ T13] zeroplus 0003:0C12:0005.0008: no inputs found [ 118.259735][ T5831] loop3: detected capacity change from 0 to 32768 [ 118.396448][ T4270] hfsplus: b-tree write err: -5, ino 4 [ 118.430963][ T1108] usb 3-1: USB disconnect, device number 6 [ 118.518937][ T5840] fido_id[5840]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 118.520606][ T5831] XFS (loop3): Mounting V5 Filesystem [ 118.707604][ T5831] XFS (loop3): Ending clean mount [ 118.823303][ T4183] XFS (loop3): Unmounting Filesystem [ 118.886115][ T5858] loop1: detected capacity change from 0 to 2048 [ 118.929542][ T5858] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 118.952962][ T13] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 118.974269][ T5859] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.252492][ T5865] loop3: detected capacity change from 0 to 512 [ 119.330787][ T5865] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.630: iget: bad i_size value: 38620345925642 [ 119.418978][ T5865] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.630: couldn't read orphan inode 15 (err -117) [ 119.482494][ T5865] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 119.494497][ T13] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 119.515918][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.549195][ T13] usb 5-1: Product: syz [ 119.553626][ T13] usb 5-1: Manufacturer: syz [ 119.580031][ T5863] loop1: detected capacity change from 0 to 32768 [ 119.582141][ T5861] loop2: detected capacity change from 0 to 32768 [ 119.590183][ T5865] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.630: bg 0: block 5: invalid block bitmap [ 119.593448][ T13] usb 5-1: SerialNumber: syz [ 119.625743][ T5863] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.633 (5863) [ 119.639816][ T13] usb 5-1: config 0 descriptor?? [ 119.644160][ T5865] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 119.667679][ T5865] EXT4-fs (loop3): This should not happen!! Data will be lost [ 119.667679][ T5865] [ 119.682862][ T5863] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 119.692605][ T5865] EXT4-fs (loop3): Total free blocks count 0 [ 119.698070][ T13] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 119.712179][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 119.713406][ T5863] BTRFS info (device loop1): enabling disk space caching [ 119.725896][ T5865] EXT4-fs (loop3): Free/Dirty block details [ 119.730224][ T5863] BTRFS info (device loop1): force clearing of disk cache [ 119.743600][ T5861] XFS (loop2): Mounting V5 Filesystem [ 119.756493][ T5863] BTRFS info (device loop1): turning off barriers [ 119.763452][ T5863] BTRFS info (device loop1): setting nodatasum [ 119.770215][ T5863] BTRFS info (device loop1): enabling ssd optimizations [ 119.777142][ T13] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 119.779313][ T5863] BTRFS info (device loop1): using spread ssd allocation scheme [ 119.794732][ T5863] BTRFS info (device loop1): disk space caching is enabled [ 119.801964][ T5863] BTRFS info (device loop1): has skinny extents [ 119.810140][ T5865] EXT4-fs (loop3): free_blocks=0 [ 119.819188][ T13] usb 5-1: media controller created [ 119.839621][ T5865] EXT4-fs (loop3): dirty_blocks=2 [ 119.854885][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.875098][ T5865] EXT4-fs (loop3): Block reservation details [ 119.898796][ T5856] dvb-usb: bulk message failed: -22 (7/0) [ 119.902460][ T5865] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 119.928997][ T5861] XFS (loop2): Ending clean mount [ 119.962105][ T13] DVB: Unable to find symbol mt352_attach() [ 120.040501][ T4186] XFS (loop2): Unmounting Filesystem [ 120.047388][ T5863] BTRFS info (device loop1): clearing free space tree [ 120.068793][ T5863] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 120.078999][ T13] DVB: Unable to find symbol nxt6000_attach() [ 120.079015][ T13] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 120.096379][ T5863] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 120.115369][ T13] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 120.152698][ T13] dvb-usb: schedule remote query interval to 1000 msecs. [ 120.178942][ T13] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 120.209845][ T13] dvb-usb: bulk message failed: -22 (7/0) [ 120.222069][ T13] dvb-usb: bulk message failed: -22 (7/0) [ 120.256063][ T5898] loop3: detected capacity change from 0 to 4096 [ 120.283125][ T5898] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 120.290621][ T13] usb 5-1: USB disconnect, device number 5 [ 120.422098][ T13] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 120.468268][ T26] audit: type=1800 audit(1763713013.012:30): pid=5863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.633" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 121.000353][ T5905] loop4: detected capacity change from 0 to 2048 [ 121.106006][ T5905] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.129273][ T5913] loop1: detected capacity change from 0 to 64 [ 121.222953][ T13] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 121.593080][ T13] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.602744][ T5924] loop4: detected capacity change from 0 to 2048 [ 121.620304][ T13] usb 4-1: config 0 has no interface number 0 [ 121.642996][ T13] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 121.656933][ T5932] loop1: detected capacity change from 0 to 256 [ 121.670422][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.687530][ T13] usb 4-1: config 0 descriptor?? [ 121.699253][ T5932] exfat: Deprecated parameter 'utf8' [ 121.736885][ T13] usb 4-1: selecting invalid altsetting 1 [ 121.740502][ T5924] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.775355][ T5937] loop2: detected capacity change from 0 to 64 [ 121.779364][ T13] dvb_ttusb_budget: ttusb_init_controller: error [ 121.808899][ T13] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 121.826929][ T5932] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 121.930672][ T13] DVB: Unable to find symbol cx22700_attach() [ 122.006497][ T5940] loop0: detected capacity change from 0 to 1024 [ 122.083707][ T13] DVB: Unable to find symbol tda10046_attach() [ 122.089940][ T13] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 122.105724][ T5940] EXT4-fs (loop0): Ignoring removed nobh option [ 122.112133][ T5940] EXT4-fs (loop0): Ignoring removed bh option [ 122.131090][ T5940] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.147302][ T13] usb 4-1: USB disconnect, device number 5 [ 122.277974][ T5948] netlink: 'syz.1.656': attribute type 4 has an invalid length. [ 122.318011][ T5948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.656'. [ 122.393946][ T5940] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,nombcache,barrier,dioread_lock,stripe=0x0000000000000008,resgid=0x0000000000000000,data_err=ignore,jqfmt=vfsv0,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none. [ 122.452647][ T5959] loop4: detected capacity change from 0 to 64 [ 122.465037][ T5961] netlink: 20 bytes leftover after parsing attributes in process `syz.1.661'. [ 122.466396][ T5958] loop2: detected capacity change from 0 to 2048 [ 122.482425][ T5961] netlink: 16 bytes leftover after parsing attributes in process `syz.1.661'. [ 122.498319][ T4679] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.515675][ T4679] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.542608][ T4256] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.549277][ T5958] FAT-fs (loop2): bogus sectors per cluster 248 [ 122.558620][ T5958] FAT-fs (loop2): Can't find a valid FAT filesystem [ 122.598664][ T5959] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 122.783244][ T4674] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.870307][ T5967] loop3: detected capacity change from 0 to 4096 [ 122.892127][ T5963] loop1: detected capacity change from 0 to 4096 [ 122.905609][ T5971] loop4: detected capacity change from 0 to 1024 [ 122.941758][ T4674] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.963402][ T5963] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 123.014137][ T5967] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,usrquota,grpquota,errors=remount-ro,quota,debug_want_extra_isize=0x0000000000000008,resgid=0x0000000000000000,barrier,. Quota mode: writeback. [ 123.109757][ T5978] loop2: detected capacity change from 0 to 4096 [ 123.294925][ T5984] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.314521][ T5967] EXT4-fs error (device loop3): ext4_get_first_dir_block:3617: inode #12: block 80: comm syz.3.664: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 123.432553][ T5967] EXT4-fs (loop3): Remounting filesystem read-only [ 123.499814][ T5967] EXT4-fs error (device loop3): ext4_get_first_dir_block:3619: inode #12: comm syz.3.664: directory missing '..' [ 123.629530][ T5967] EXT4-fs (loop3): Remounting filesystem read-only [ 123.832171][ T5996] loop4: detected capacity change from 0 to 4096 [ 123.941472][ T150] block nbd3: Attempted send on invalid socket [ 123.949814][ T150] blk_update_request: I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 123.963584][ T6006] EXT4-fs (nbd3): unable to read superblock [ 124.073065][ T13] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 124.312980][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 124.371280][ T5991] loop1: detected capacity change from 0 to 32768 [ 124.379002][ T4233] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 124.433256][ T13] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 157, changing to 11 [ 124.450598][ T13] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.482994][ T13] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 124.496750][ T13] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.504161][ T13] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 124.514384][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.524830][ T13] usb 3-1: config 0 descriptor?? [ 124.631389][ T6025] loop0: detected capacity change from 0 to 764 [ 124.743242][ T4233] usb 4-1: config 0 interface 0 has no altsetting 0 [ 124.749962][ T4233] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 124.764117][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.795146][ T4233] usb 4-1: config 0 descriptor?? [ 124.986491][ T6033] loop0: detected capacity change from 0 to 256 [ 125.006205][ T13] kye 0003:0458:501A.0009: unknown main item tag 0x0 [ 125.017490][ T6033] exfat: Deprecated parameter 'namecase' [ 125.024316][ T13] kye 0003:0458:501A.0009: unknown main item tag 0x0 [ 125.032133][ T13] kye 0003:0458:501A.0009: unknown main item tag 0x0 [ 125.039773][ T13] kye 0003:0458:501A.0009: unknown main item tag 0x0 [ 125.059128][ T6033] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 125.071790][ T13] kye 0003:0458:501A.0009: unknown main item tag 0x0 [ 125.097475][ T13] kye 0003:0458:501A.0009: hidraw0: USB HID v0.03 Device [HID 0458:501a] on usb-dummy_hcd.2-1/input0 [ 125.126152][ T13] kye 0003:0458:501A.0009: tablet-enabling feature report not found [ 125.136522][ T13] kye 0003:0458:501A.0009: tablet enabling failed [ 125.217674][ T6023] loop4: detected capacity change from 0 to 32768 [ 125.273293][ T13] usb 3-1: USB disconnect, device number 7 [ 125.288074][ T4233] acrux 0003:1A34:0802.000A: hidraw0: USB HID v0.04 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0 [ 125.326392][ T4233] acrux 0003:1A34:0802.000A: no inputs found [ 125.333374][ T4233] acrux 0003:1A34:0802.000A: Failed to enable force feedback support, error: -19 [ 125.363450][ T6034] fido_id[6034]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 125.444036][ T6023] XFS (loop4): Mounting V5 Filesystem [ 125.563083][ T13] usb 4-1: USB disconnect, device number 6 [ 125.589529][ T6023] XFS (loop4): Ending clean mount [ 125.601908][ T6023] XFS (loop4): Quotacheck needed: Please wait. [ 125.694148][ T6023] XFS (loop4): Quotacheck: Done. [ 125.820384][ T4195] XFS (loop4): Unmounting Filesystem [ 125.907039][ T6059] sp0: Synchronizing with TNC [ 125.949742][ T6064] netlink: 11 bytes leftover after parsing attributes in process `syz.2.706'. [ 125.970783][ T6058] [U] è [ 126.059539][ T6066] loop2: detected capacity change from 0 to 256 [ 126.474606][ T4233] Bluetooth: hci4: command 0x0405 tx timeout [ 126.632945][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.732562][ T6095] netlink: 'syz.0.721': attribute type 9 has an invalid length. [ 127.353080][ T4672] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.398045][ T6123] loop2: detected capacity change from 0 to 256 [ 127.483609][ T6123] exfat: Deprecated parameter 'utf8' [ 127.487395][ T6082] loop3: detected capacity change from 0 to 32768 [ 127.489438][ T6123] exfat: Deprecated parameter 'utf8' [ 127.523028][ T6123] exfat: Deprecated parameter 'utf8' [ 127.566992][ T6123] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 127.602980][ T4672] usb 5-1: Using ep0 maxpacket: 16 [ 127.660855][ T6082] XFS (loop3): Mounting V5 Filesystem [ 127.697346][ T26] audit: type=1800 audit(1763713020.242:31): pid=6123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.734" name="file1" dev="loop2" ino=1048605 res=0 errno=0 [ 127.719003][ T6082] XFS (loop3): Ending clean mount [ 127.730576][ T6082] XFS (loop3): Quotacheck needed: Please wait. [ 127.743153][ T4672] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.799369][ T4672] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.803403][ T6117] loop1: detected capacity change from 0 to 32768 [ 127.831509][ T6109] loop0: detected capacity change from 0 to 32768 [ 127.850300][ T4672] usb 5-1: config 0 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 127.869411][ T4672] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.884341][ T6117] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.731 (6117) [ 127.903000][ T4672] usb 5-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 127.912181][ T4672] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.915310][ T6109] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 127.993198][ T6109] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 128.004635][ T6117] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 128.033254][ T4672] usb 5-1: config 0 descriptor?? [ 128.087728][ T6117] BTRFS info (device loop1): force zlib compression, level 3 [ 128.114459][ T6082] XFS (loop3): Quotacheck: Done. [ 128.156724][ T6117] BTRFS info (device loop1): force clearing of disk cache [ 128.183122][ T6117] BTRFS info (device loop1): setting nodatasum [ 128.190850][ T6109] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 128.221497][ T6117] BTRFS info (device loop1): allowing degraded mounts [ 128.250889][ T4233] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 128.261344][ T4233] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 128.269949][ T6117] BTRFS info (device loop1): enabling disk space caching [ 128.282867][ T6117] BTRFS info (device loop1): disk space caching is enabled [ 128.290128][ T6117] BTRFS info (device loop1): has skinny extents [ 128.340298][ T4183] XFS (loop3): Unmounting Filesystem [ 128.377852][ T4233] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 116ms [ 128.404541][ T4233] gfs2: fsid=syz:syz.0: jid=0: Done [ 128.411262][ T6109] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 128.539412][ T4672] kye 0003:0458:0153.000B: hidraw0: USB HID v0.0a Device [HID 0458:0153] on usb-dummy_hcd.4-1/input0 [ 128.799541][ T4672] usb 5-1: USB disconnect, device number 6 [ 128.821163][ T6136] loop2: detected capacity change from 0 to 32768 [ 128.845631][ T6117] BTRFS info (device loop1): clearing free space tree [ 128.852728][ T6117] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 128.899392][ T6117] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 129.000935][ T6160] loop3: detected capacity change from 0 to 128 [ 129.055273][ T6156] fido_id[6156]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 129.208111][ T6117] BTRFS info (device loop1): balance: start -sconvert=raid0,soft,usage=1,stripes=4294967279..64 [ 129.308371][ T6166] netlink: 44 bytes leftover after parsing attributes in process `syz.0.738'. [ 129.318516][ T6117] BTRFS info (device loop1): balance: ended with status: 0 [ 129.523338][ T4233] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 129.602596][ T6170] loop0: detected capacity change from 0 to 4096 [ 129.814343][ T6170] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,usrquota,grpquota,errors=remount-ro,quota,debug_want_extra_isize=0x0000000000000008,resgid=0x0000000000000000,barrier,. Quota mode: writeback. [ 129.903182][ T4233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.949154][ T4233] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 129.978962][ T6170] EXT4-fs error (device loop0): ext4_get_first_dir_block:3617: inode #12: block 80: comm syz.0.743: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 129.981483][ T6193] loop4: detected capacity change from 0 to 4096 [ 130.002978][ T4233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.021123][ T6170] EXT4-fs (loop0): Remounting filesystem read-only [ 130.036031][ T6170] EXT4-fs error (device loop0): ext4_get_first_dir_block:3619: inode #12: comm syz.0.743: directory missing '..' [ 130.043922][ T6194] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.061937][ T4233] usb 3-1: config 0 descriptor?? [ 130.081999][ T6170] EXT4-fs (loop0): Remounting filesystem read-only [ 130.575599][ T4233] logitech-djreceiver 0003:046D:C71F.000C: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.2-1/input0 [ 130.834299][ T4672] usb 3-1: USB disconnect, device number 8 [ 130.943259][ T6196] loop3: detected capacity change from 0 to 40427 [ 130.977413][ T6218] comedi comedi3: multiq3: I/O port conflict (0x20048001,16) [ 131.018705][ T6196] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 131.046274][ T6209] loop1: detected capacity change from 0 to 32768 [ 131.072231][ T6196] F2FS-fs (loop3): invalid crc value [ 131.158191][ T6196] F2FS-fs (loop3): Found nat_bits in checkpoint [ 131.332992][ T6196] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 131.395231][ T6226] loop4: detected capacity change from 0 to 4096 [ 131.428101][ T6233] loop2: detected capacity change from 0 to 128 [ 131.507315][ T6226] ntfs: volume version 3.1. [ 131.553775][ T6236] netlink: 'syz.0.765': attribute type 1 has an invalid length. [ 131.592417][ T6236] netlink: 144 bytes leftover after parsing attributes in process `syz.0.765'. [ 131.623024][ T6236] netlink: 96 bytes leftover after parsing attributes in process `syz.0.765'. [ 131.956967][ T6245] netlink: 'syz.0.770': attribute type 4 has an invalid length. [ 131.992968][ T6245] netlink: 3649 bytes leftover after parsing attributes in process `syz.0.770'. [ 132.157852][ T6252] netlink: 'syz.2.773': attribute type 32 has an invalid length. [ 132.172846][ T6253] netlink: 'syz.0.774': attribute type 3 has an invalid length. [ 132.209274][ T6253] netlink: 'syz.0.774': attribute type 1 has an invalid length. [ 132.218694][ T6253] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.774'. [ 132.428262][ T6258] loop4: detected capacity change from 0 to 4096 [ 132.443894][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 132.533331][ T6258] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,usrquota,grpquota,errors=remount-ro,quota,debug_want_extra_isize=0x0000000000000008,resgid=0x0000000000000000,barrier,. Quota mode: writeback. [ 132.657040][ T6244] loop1: detected capacity change from 0 to 32768 [ 132.702988][ T6244] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.771 (6244) [ 132.761491][ T6258] EXT4-fs error (device loop4): ext4_get_first_dir_block:3617: inode #12: block 80: comm syz.4.776: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 132.819038][ T6258] EXT4-fs (loop4): Remounting filesystem read-only [ 132.831836][ T6244] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 132.856508][ T6244] BTRFS info (device loop1): using free space tree [ 132.865033][ T6258] EXT4-fs error (device loop4): ext4_get_first_dir_block:3619: inode #12: comm syz.4.776: directory missing '..' [ 132.878245][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.884620][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.886408][ T6244] BTRFS info (device loop1): has skinny extents [ 132.913342][ T6258] EXT4-fs (loop4): Remounting filesystem read-only [ 133.100579][ T6291] loop3: detected capacity change from 0 to 128 [ 133.250661][ T6291] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 133.294707][ T6244] BTRFS info (device loop1): enabling ssd optimizations [ 133.333166][ T6291] ext4 filesystem being mounted at /134/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 134.142929][ T6302] loop4: detected capacity change from 0 to 32768 [ 134.173954][ T6295] loop2: detected capacity change from 0 to 40427 [ 134.227184][ T6302] non-latin1 character 0xffff found in JFS file name [ 134.259303][ T6302] mount with iocharset=utf8 to access [ 134.288185][ T6295] F2FS-fs (loop2): invalid crc value [ 134.359095][ T6295] F2FS-fs (loop2): Found nat_bits in checkpoint [ 134.370401][ T6322] loop1: detected capacity change from 0 to 1024 [ 134.439498][ T6322] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 134.522931][ T6322] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 134.570631][ T6322] EXT4-fs error (device loop1): ext4_get_journal_inode:5160: inode #5: comm syz.1.795: unexpected bad inode w/o EXT4_IGET_BAD [ 134.658038][ T6322] EXT4-fs (loop1): no journal found [ 134.663628][ T6295] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 134.679291][ T6322] EXT4-fs (loop1): can't get journal size [ 134.703140][ T6322] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8800e11c, mo2=0102] [ 134.727151][ T6322] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,debug,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 134.802904][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 134.830337][ T6295] F2FS-fs (loop2): Corrupted max_depth of 3: 4294967295 [ 134.853030][ T4256] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 135.263167][ T4256] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 135.274463][ T4256] usb 4-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 135.310714][ T4256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.360617][ T4256] usb 4-1: config 0 descriptor?? [ 135.484422][ T6339] loop4: detected capacity change from 0 to 32768 [ 135.555227][ T6339] find_entry called with index >= next_index [ 135.845708][ T4256] elecom 0003:056E:00E6.000D: item fetching failed at offset 5/7 [ 135.874417][ T4256] elecom: probe of 0003:056E:00E6.000D failed with error -22 [ 135.877059][ T6370] loop2: detected capacity change from 0 to 764 [ 135.890931][ T6371] netlink: 9 bytes leftover after parsing attributes in process `syz.1.819'. [ 135.926903][ T6371] device gretap0 entered promiscuous mode [ 135.943255][ T6370] rock: directory entry would overflow storage [ 135.970245][ T6372] netlink: 5 bytes leftover after parsing attributes in process `syz.1.819'. [ 135.979468][ T6370] rock: sig=0x4654, size=5, remaining=4 [ 136.039043][ T6372] 0ªX¹¦D: renamed from gretap0 [ 136.051684][ T4256] usb 4-1: USB disconnect, device number 7 [ 136.074580][ T6372] device 30ªX¹¦D left promiscuous mode [ 136.088390][ T6372] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 136.195522][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.820'. [ 136.210630][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'. [ 136.221865][ T6378] netlink: 'syz.2.820': attribute type 15 has an invalid length. [ 136.223803][ T6380] loop1: detected capacity change from 0 to 512 [ 136.319861][ T6380] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,inode_readahead_blks=0x0000000000080000,quota,,errors=continue. Quota mode: writeback. [ 136.361553][ T6380] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.439651][ T6390] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 136.439651][ T6390] The task syz.4.825 (6390) triggered the difference, watch for misbehavior. [ 136.520972][ T6394] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 136.546604][ T6394] comedi comedi3: 8255: I/O port conflict (0x8001022,4) [ 136.557281][ T6394] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 136.577045][ T6394] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 136.708801][ T6402] loop2: detected capacity change from 0 to 8 [ 136.753722][ T6402] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 136.776113][ T4664] udevd[4664]: incorrect cramfs checksum on /dev/loop2 [ 136.806904][ T6402] cramfs: Error -3 while decompressing! [ 136.819431][ T6408] loop3: detected capacity change from 0 to 64 [ 136.835922][ T6402] cramfs: ffffffff961ed0a8(26)->ffff888057670000(4096) [ 136.843826][ T6402] cramfs: Error -3 while decompressing! [ 136.849486][ T6402] cramfs: ffffffff961ed0c2(26)->ffff888056f28000(4096) [ 136.856796][ T6402] cramfs: Error -3 while decompressing! [ 136.862486][ T6402] cramfs: ffffffff961ed0dc(16)->ffff888056f29000(4096) [ 136.887546][ T6402] cramfs: Error -3 while decompressing! [ 136.890360][ T6408] hfs: small file entry [ 136.926599][ T6402] cramfs: ffffffff961ed0a8(26)->ffff888057670000(4096) [ 136.951468][ T26] audit: type=1800 audit(1763713029.492:32): pid=6402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.830" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 136.962673][ T4200] udevd[4200]: incorrect cramfs checksum on /dev/loop2 [ 136.992144][ T6412] netlink: 'syz.1.836': attribute type 10 has an invalid length. [ 137.052435][ T6412] team0: Port device syz_tun added [ 137.880136][ T6459] tmpfs: Bad value for 'nr_inodes' [ 138.283248][ T6464] loop1: detected capacity change from 0 to 8192 [ 138.300914][ T6477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.867'. [ 138.329982][ T6479] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 138.346790][ T6479] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 138.418749][ T6464] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 138.476035][ T6464] REISERFS (device loop1): using ordered data mode [ 138.482602][ T6464] reiserfs: using flush barriers [ 138.602964][ T6464] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 138.678257][ T6464] REISERFS (device loop1): checking transaction log (loop1) [ 138.722682][ T6455] loop4: detected capacity change from 0 to 32768 [ 138.737062][ T6464] REISERFS (device loop1): Using rupasov hash to sort names [ 138.753681][ T6464] REISERFS (device loop1): using 3.5.x disk format [ 138.797558][ T6455] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.856 (6455) [ 138.803192][ T6464] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 138.876856][ T6464] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 138.927997][ T6464] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 138.981266][ T6455] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 139.000264][ T6464] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 139.013071][ T6455] BTRFS info (device loop4): using free space tree [ 139.021835][ T6455] BTRFS info (device loop4): has skinny extents [ 139.065683][ T6464] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 139.298481][ T6464] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 139.395664][ T6464] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 139.444991][ T6511] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 139.572923][ T6455] BTRFS info (device loop4): enabling ssd optimizations [ 139.618797][ T6487] loop3: detected capacity change from 0 to 32768 [ 139.757293][ T6487] attempt to access beyond end of device [ 139.757293][ T6487] loop3: rw=1, want=4680040, limit=32768 [ 139.844827][ T6487] metapage_write_end_io: I/O error [ 139.893227][ T6487] blkno = 8ed2c, nblocks = 1 [ 139.897947][ T6487] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 139.897947][ T6487] [ 139.973636][ T6487] ERROR: (device loop3): remounting filesystem as read-only [ 140.024868][ T6487] UFO tlock:0xffffc900029321b0 [ 140.113878][ T6487] ERROR: (device loop3): dtSearch: DT_GETPAGE: dtree page corrupt [ 140.113878][ T6487] [ 140.131426][ T6487] jfs_lookup: dtSearch returned -5 [ 140.223818][ T13] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 140.236976][ T276] blkno = 8ed2c, nblocks = 4 [ 140.241633][ T276] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 140.241633][ T276] [ 140.261807][ T4183] attempt to access beyond end of device [ 140.261807][ T4183] loop3: rw=1, want=4680040, limit=32768 [ 140.319344][ T4183] metapage_write_end_io: I/O error [ 140.334439][ T4183] JFS: metapage_get_blocks failed [ 140.339547][ T4183] JFS: metapage_get_blocks failed [ 140.357189][ T4183] JFS: metapage_get_blocks failed [ 140.362486][ T4183] JFS: metapage_get_blocks failed [ 140.607893][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.624133][ T13] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 140.652909][ T13] usb 3-1: config 1 has no interface number 0 [ 140.660597][ T13] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.882994][ T13] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.892104][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.943884][ T13] usb 3-1: Product: syz [ 140.948134][ T13] usb 3-1: Manufacturer: syz [ 140.972844][ T13] usb 3-1: SerialNumber: syz [ 141.034074][ T13] usb 3-1: selecting invalid altsetting 1 [ 141.693084][ T13] cdc_ncm 3-1:1.1: SET_NTB_FORMAT failed [ 141.717100][ T13] usb 3-1: selecting invalid altsetting 1 [ 141.732632][ T13] cdc_ncm 3-1:1.1: bind() failure [ 141.767266][ T13] usb 3-1: USB disconnect, device number 9 [ 141.892480][ T6599] loop4: detected capacity change from 0 to 64 [ 142.660033][ T6624] loop1: detected capacity change from 0 to 64 [ 142.949301][ T6602] loop3: detected capacity change from 0 to 32768 [ 143.491390][ T6622] loop2: detected capacity change from 0 to 131072 [ 143.688908][ T6640] sp0: Synchronizing with TNC [ 143.781509][ T6622] F2FS-fs (loop2): Test dummy encryption mode enabled [ 143.791872][ T6622] F2FS-fs (loop2): invalid crc value [ 143.894371][ T6622] F2FS-fs (loop2): Current segment's next free block offset is inconsistent with bitmap, logtype:1, segno:1, type:0, next_blkoff:0, blkofs:1 [ 143.909028][ T6622] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 144.530222][ T6675] loop4: detected capacity change from 0 to 512 [ 144.596305][ T6675] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 144.684964][ T6675] EXT4-fs (loop4): 1 truncate cleaned up [ 144.695117][ T6675] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000000007,init_itable,max_batch_time=0x0000000000000007,,errors=continue. Quota mode: none. [ 144.905506][ T6675] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2229: inode #15: comm syz.4.949: corrupted in-inode xattr [ 144.914212][ T6689] sock: sock_set_timeout: `syz.2.955' (pid 6689) tries to set negative timeout [ 145.013917][ T6675] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1761: inode #15: comm syz.4.949: unable to update i_inline_off [ 145.085409][ T6690] EXT4-fs error (device loop4): ext4_xattr_ibody_list:748: inode #15: comm syz.4.949: corrupted in-inode xattr [ 145.221368][ T6657] loop1: detected capacity change from 0 to 32768 [ 145.382102][ T6657] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 145.410185][ T6672] loop3: detected capacity change from 0 to 32768 [ 145.442651][ T6709] delete_channel: no stack [ 145.518589][ T4188] ocfs2: Unmounting device (7,1) on (node local) [ 145.527284][ T6711] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 145.540020][ T6672] XFS (loop3): Mounting V5 Filesystem [ 145.815959][ T6672] XFS (loop3): Ending clean mount [ 145.931232][ T6723] loop2: detected capacity change from 0 to 8192 [ 145.970441][ T6734] device veth1_macvtap left promiscuous mode [ 146.018648][ T4183] XFS (loop3): Unmounting Filesystem [ 146.065179][ T6738] device veth1_macvtap entered promiscuous mode [ 146.076887][ T6723] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 146.096986][ T6723] REISERFS (device loop2): using ordered data mode [ 146.103621][ T6723] reiserfs: using flush barriers [ 146.132911][ T6723] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 146.160805][ T6723] REISERFS (device loop2): checking transaction log (loop2) [ 146.194874][ T6723] REISERFS (device loop2): Using r5 hash to sort names [ 146.202330][ T6723] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 146.454790][ T4257] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 146.716660][ T6736] loop4: detected capacity change from 0 to 32768 [ 146.751247][ T6736] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.971 (6736) [ 146.802401][ T6736] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 146.833094][ T6736] BTRFS info (device loop4): using free space tree [ 146.847635][ T6736] BTRFS info (device loop4): has skinny extents [ 146.854595][ T4257] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 146.873292][ T4257] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 146.905357][ T4257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.931334][ T4257] usb 2-1: config 0 descriptor?? [ 147.341823][ T6736] BTRFS info (device loop4): enabling ssd optimizations [ 147.397262][ T6783] loop2: detected capacity change from 0 to 4096 [ 147.480828][ T4257] asus 0003:0B05:17E0.000E: item fetching failed at offset 2/5 [ 147.510796][ T4257] asus 0003:0B05:17E0.000E: Asus hid parse failed: -22 [ 147.540967][ T4257] asus: probe of 0003:0B05:17E0.000E failed with error -22 [ 147.709794][ T4667] usb 2-1: USB disconnect, device number 7 [ 147.952792][ C0] sched: RT throttling activated [ 148.044604][ T6783] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 148.119508][ T6783] ntfs3: loop2: Failed to load $Extend. [ 148.293013][ T4233] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 148.411349][ T6798] netlink: 'syz.2.992': attribute type 16 has an invalid length. [ 148.446280][ T6799] loop4: detected capacity change from 0 to 1024 [ 148.533979][ T6804] loop1: detected capacity change from 0 to 24 [ 148.614758][ T6804] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 148.660469][ T6804] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 148.663295][ T4233] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.717464][ T4233] usb 4-1: config 0 has no interface number 0 [ 148.732462][ T4233] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.773594][ T4233] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.793802][ T6812] loop4: detected capacity change from 0 to 1024 [ 148.810281][ T4233] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 148.842210][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.868620][ T6814] netdevsim netdevsim1: Firmware load for '/../file0' refused, path contains '..' component [ 148.913800][ T4233] usb 4-1: config 0 descriptor?? [ 149.177855][ T6820] loop4: detected capacity change from 0 to 4096 [ 149.198193][ T6824] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1005'. [ 149.345557][ T6820] ntfs3: loop4: ino=5, "/" directory corrupted [ 149.410666][ T4233] uclogic 0003:256C:006D.000F: unknown main item tag 0x0 [ 149.421056][ T4233] uclogic 0003:256C:006D.000F: unknown main item tag 0x0 [ 149.432540][ T4233] uclogic 0003:256C:006D.000F: unknown main item tag 0x0 [ 149.440279][ T4233] uclogic 0003:256C:006D.000F: unknown main item tag 0x0 [ 149.461197][ T4233] uclogic 0003:256C:006D.000F: unknown main item tag 0x0 [ 149.483355][ T4233] uclogic 0003:256C:006D.000F: No inputs registered, leaving [ 149.496243][ T4233] uclogic 0003:256C:006D.000F: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input1 [ 149.593382][ T4672] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 149.676393][ T4233] usb 4-1: USB disconnect, device number 8 [ 149.689703][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1011'. [ 149.699855][ T6837] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 149.716054][ T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 149.850150][ T4672] usb 2-1: Using ep0 maxpacket: 32 [ 149.989137][ T4672] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 149.998380][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 150.010126][ T4672] usb 2-1: config 0 has no interface number 0 [ 150.080492][ T6853] loop4: detected capacity change from 0 to 8192 [ 150.133766][ T23] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 150.142163][ T23] usb 3-1: config 0 has no interface number 0 [ 150.149284][ T23] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.157937][ T6853] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 150.160648][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 150.178019][ T23] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.188634][ T23] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.202148][ T4672] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 150.212535][ T23] usb 3-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 150.222900][ T4672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.231903][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.235862][ T6853] REISERFS (device loop4): using ordered data mode [ 150.241167][ T4672] usb 2-1: Product: syz [ 150.251843][ T4672] usb 2-1: Manufacturer: syz [ 150.257143][ T4672] usb 2-1: SerialNumber: syz [ 150.267324][ T23] usb 3-1: config 0 descriptor?? [ 150.273886][ T4672] usb 2-1: config 0 descriptor?? [ 150.280487][ T6853] reiserfs: using flush barriers [ 150.295869][ T6853] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 11, max trans age 11 [ 150.316679][ T4672] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 150.326428][ T6853] REISERFS (device loop4): checking transaction log (loop4) [ 150.334341][ T4672] usb 2-1: selecting invalid altsetting 1 [ 150.340421][ T4672] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 150.353342][ T4672] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 150.370918][ T4672] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 150.379825][ T4672] usb 2-1: media controller created [ 150.387505][ T6853] REISERFS (device loop4): Using r5 hash to sort names [ 150.404607][ T6853] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 150.425604][ T4672] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 150.434796][ T6853] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 150.439405][ T6858] loop3: detected capacity change from 0 to 256 [ 150.752641][ T23] holtek_mouse 0003:04D9:A072.0010: unknown main item tag 0x0 [ 150.768679][ T23] holtek_mouse 0003:04D9:A072.0010: unknown main item tag 0x0 [ 150.770066][ T6864] loop4: detected capacity change from 0 to 1024 [ 150.777158][ T23] holtek_mouse 0003:04D9:A072.0010: unknown main item tag 0x0 [ 150.807442][ T6864] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 150.832938][ T6864] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 150.833263][ T23] holtek_mouse 0003:04D9:A072.0010: unknown main item tag 0x0 [ 150.858120][ T6864] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,bsdgroups,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 150.877327][ T6868] loop3: detected capacity change from 0 to 512 [ 150.916119][ T6864] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 150.922066][ T23] holtek_mouse 0003:04D9:A072.0010: hidraw0: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.2-1/input1 [ 150.957345][ T23] usb 3-1: USB disconnect, device number 10 [ 150.973215][ T6868] EXT4-fs (loop3): inline encryption not supported [ 151.073612][ T6868] EXT4-fs (loop3): mounted filesystem without journal. Opts: inlinecrypt,grpquota,,errors=continue. Quota mode: writeback. [ 151.103461][ T6868] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.149521][ T6870] fido_id[6870]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 151.229480][ T6874] netlink: 'syz.4.1026': attribute type 21 has an invalid length. [ 151.537488][ T6886] loop3: detected capacity change from 0 to 4096 [ 151.544755][ T4672] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 151.562349][ T4672] zl10353_read_register: readreg error (reg=127, ret==-110) [ 151.605518][ T4672] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 151.662546][ T6890] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.759889][ T4672] usb 2-1: USB disconnect, device number 8 [ 151.841923][ T6886] NILFS (loop3): nilfs_palloc_commit_free_entry (ino=6): entry number 14 already freed [ 152.112623][ T6882] loop4: detected capacity change from 0 to 32768 [ 152.335313][ T6882] XFS (loop4): Mounting V5 Filesystem [ 152.464821][ T6937] loop1: detected capacity change from 0 to 256 [ 152.562340][ T6937] exfat: Deprecated parameter 'utf8' [ 152.595454][ T6882] XFS (loop4): Ending clean mount [ 152.618000][ T6937] exfat: Deprecated parameter 'namecase' [ 152.637417][ T6882] XFS (loop4): Quotacheck needed: Please wait. [ 152.695839][ T6937] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001015b, chksum : 0xeba6baed, utbl_chksum : 0xe619d30d) [ 152.738202][ T6946] netlink: 'syz.2.1056': attribute type 1 has an invalid length. [ 152.803601][ T6882] XFS (loop4): Quotacheck: Done. [ 152.863523][ T6949] netlink: 'syz.2.1059': attribute type 1 has an invalid length. [ 152.977118][ T4195] XFS (loop4): Unmounting Filesystem [ 153.119507][ T6963] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1065'. [ 153.150711][ T6963] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 153.293037][ T4256] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 153.329956][ T6970] loop1: detected capacity change from 0 to 2048 [ 153.420134][ T6970] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.703365][ T4256] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 153.711502][ T4256] usb 4-1: config 0 has no interface number 0 [ 153.742898][ T4256] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 153.752025][ T4256] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.802690][ T4256] usb 4-1: config 0 descriptor?? [ 153.865072][ T4256] usb 4-1: selecting invalid altsetting 1 [ 153.871010][ T4256] dvb_ttusb_budget: ttusb_init_controller: error [ 153.887829][ T4256] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 153.937487][ T6993] netlink: 'syz.1.1079': attribute type 6 has an invalid length. [ 153.974514][ T4256] DVB: Unable to find symbol cx22700_attach() [ 154.001876][ T6995] netlink: 'syz.1.1079': attribute type 6 has an invalid length. [ 154.011698][ T6978] loop2: detected capacity change from 0 to 32768 [ 154.027117][ T4256] DVB: Unable to find symbol tda10046_attach() [ 154.033686][ T4256] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 154.116738][ T7] usb 4-1: USB disconnect, device number 9 [ 154.436228][ T7000] loop1: detected capacity change from 0 to 32768 [ 154.459041][ T7000] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1081 (7000) [ 154.492959][ T7000] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 154.504609][ T7000] BTRFS info (device loop1): using free space tree [ 154.511249][ T7000] BTRFS info (device loop1): has skinny extents [ 154.527252][ T4256] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 154.555726][ T7000] BTRFS info (device loop1): enabling ssd optimizations [ 154.802953][ T4256] usb 3-1: Using ep0 maxpacket: 16 [ 154.915199][ T4664] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 10 /dev/loop1 scanned by udevd (4664) [ 154.974013][ T4256] usb 3-1: config 0 has an invalid interface number: 71 but max is 1 [ 154.982154][ T4256] usb 3-1: config 0 has an invalid interface number: 220 but max is 1 [ 155.036130][ T4256] usb 3-1: config 0 has no interface number 0 [ 155.042261][ T4256] usb 3-1: config 0 has no interface number 1 [ 155.063739][ T4256] usb 3-1: config 0 interface 71 has no altsetting 0 [ 155.070490][ T4256] usb 3-1: config 0 interface 220 has no altsetting 0 [ 155.279344][ T4256] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=1b.69 [ 155.295666][ T4256] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.332989][ T4256] usb 3-1: Product: syz [ 155.337218][ T4256] usb 3-1: Manufacturer: syz [ 155.352951][ T4256] usb 3-1: SerialNumber: syz [ 155.377982][ T4256] usb 3-1: config 0 descriptor?? [ 155.788861][ T4256] usb 3-1: USB disconnect, device number 11 [ 155.977549][ T7044] loop4: detected capacity change from 0 to 40427 [ 156.002219][ T7045] loop3: detected capacity change from 0 to 32768 [ 156.034096][ T7044] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 156.042630][ T7044] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 156.055496][ T4664] udevd[4664]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.71/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.063793][ T7044] F2FS-fs (loop4): invalid crc value [ 156.086240][ T7045] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 156.119697][ T7045] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 156.138185][ T7044] F2FS-fs (loop4): Found nat_bits in checkpoint [ 156.162038][ T7045] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 156.190558][ T6181] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 156.207322][ T6181] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 156.289510][ T6181] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 82ms [ 156.298849][ T7044] F2FS-fs (loop4): Start checkpoint disabled! [ 156.310532][ T6181] gfs2: fsid=syz:syz.0: jid=0: Done [ 156.320355][ T7045] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 156.342420][ T7044] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 156.580685][ T7071] lo speed is unknown, defaulting to 1000 [ 156.590440][ T7071] lo speed is unknown, defaulting to 1000 [ 156.633750][ C0] vkms_vblank_simulate: vblank timer overrun [ 156.657654][ T7071] lo speed is unknown, defaulting to 1000 [ 156.705885][ T7071] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 156.726566][ T7076] device gtp0 entered promiscuous mode [ 156.731078][ T7071] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 156.822665][ T7071] lo speed is unknown, defaulting to 1000 [ 156.840365][ T7071] lo speed is unknown, defaulting to 1000 [ 156.891318][ T7071] lo speed is unknown, defaulting to 1000 [ 156.925728][ T7071] lo speed is unknown, defaulting to 1000 [ 156.932545][ T7071] lo speed is unknown, defaulting to 1000 [ 156.978747][ T7080] loop1: detected capacity change from 0 to 2048 [ 157.091327][ T7087] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.203273][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1115'. [ 157.511478][ T7105] loop4: detected capacity change from 0 to 2048 [ 157.653878][ T7105] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.760046][ T7090] loop3: detected capacity change from 0 to 32768 [ 158.146726][ T7097] loop1: detected capacity change from 0 to 32768 [ 158.243833][ T7129] loop3: detected capacity change from 0 to 1024 [ 158.266974][ T7130] loop2: detected capacity change from 0 to 1024 [ 158.349614][ T7129] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.411848][ T7129] EXT4-fs warning (device loop3): ext4_empty_dir:3156: inode #11: comm syz.3.1132: directory missing '..' [ 158.426292][ T9] hfsplus: b-tree write err: -5, ino 4 [ 158.529406][ T7138] loop4: detected capacity change from 0 to 4096 [ 158.537276][ T7140] overlayfs: unrecognized mount option "\loc" or missing value [ 159.232701][ T7161] loop2: detected capacity change from 0 to 1024 [ 159.343828][ T7161] hfsplus: trying to free free bnode 0(1) [ 159.461394][ T9] hfsplus: b-tree write err: -5, ino 4 [ 159.701645][ T7148] loop3: detected capacity change from 0 to 40427 [ 159.747437][ T7148] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 159.775932][ T7148] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 159.796348][ T7148] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 159.832414][ T7148] F2FS-fs (loop3): invalid crc value [ 159.862060][ T7148] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 160.068043][ T7177] loop2: detected capacity change from 0 to 4096 [ 160.080083][ T7148] F2FS-fs (loop3): Start checkpoint disabled! [ 160.100366][ T7177] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 160.121860][ T7148] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 160.121894][ T7148] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 160.192242][ T7167] loop4: detected capacity change from 0 to 32768 [ 160.203553][ T7177] ntfs3: loop2: Failed to load root. [ 160.231468][ T7167] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1149 (7167) [ 160.261077][ T7167] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 160.261152][ T7167] BTRFS info (device loop4): using free space tree [ 160.261169][ T7167] BTRFS info (device loop4): has skinny extents [ 160.524044][ T7201] loop2: detected capacity change from 0 to 1764 [ 160.630529][ T7167] BTRFS info (device loop4): enabling ssd optimizations [ 160.764715][ T7201] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 161.042713][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1167'. [ 161.062952][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1167'. [ 161.071876][ T7228] netlink: 'syz.1.1167': attribute type 7 has an invalid length. [ 161.202107][ T7230] loop1: detected capacity change from 0 to 256 [ 161.335054][ T7230] exFAT-fs (loop1): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 161.463079][ T7230] exFAT-fs (loop1): error, found bogus dentry(11) beyond unused empty group(10) (start_clu : 5, cur_clu : 5) [ 161.509429][ T7230] exFAT-fs (loop1): Filesystem has been set read-only [ 161.847269][ T7263] sp0: Synchronizing with TNC [ 161.982941][ T6187] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 162.187252][ T7284] loop1: detected capacity change from 0 to 2048 [ 162.233060][ T6187] usb 5-1: Using ep0 maxpacket: 32 [ 162.243717][ T7289] tipc: Started in network mode [ 162.248728][ T7289] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 162.256536][ T7289] tipc: Enabled bearer , priority 10 [ 162.364442][ T6187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.377208][ T7284] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 162.400227][ T7284] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.415360][ T6187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.428659][ T6187] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 162.473346][ T6187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.491521][ T4672] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 162.502440][ T6187] usb 5-1: config 0 descriptor?? [ 162.592235][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1194'. [ 162.624778][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1194'. [ 162.640975][ T7302] netlink: 'syz.2.1194': attribute type 7 has an invalid length. [ 162.753024][ T4672] usb 4-1: Using ep0 maxpacket: 8 [ 162.851232][ T7314] loop2: detected capacity change from 0 to 1024 [ 162.893092][ T4672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.904248][ T4672] usb 4-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 162.914476][ T4672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.937580][ T4672] usb 4-1: config 0 descriptor?? [ 162.994787][ T6187] greenasia 0003:0E8F:0012.0011: item fetching failed at offset 0/3 [ 163.007297][ T6187] greenasia 0003:0E8F:0012.0011: parse failed [ 163.015618][ T6187] greenasia: probe of 0003:0E8F:0012.0011 failed with error -22 [ 163.220397][ T6187] usb 5-1: USB disconnect, device number 7 [ 163.375201][ T6180] tipc: Node number set to 10005162 [ 163.417711][ T4672] wacom 0003:056A:00B8.0012: unbalanced collection at end of report description [ 163.427393][ T4672] wacom 0003:056A:00B8.0012: parse failed [ 163.433622][ T4672] wacom: probe of 0003:056A:00B8.0012 failed with error -22 [ 163.622620][ T4256] usb 4-1: USB disconnect, device number 10 [ 163.699443][ T7335] rdma_op ffff88807e9c51f0 conn xmit_rdma 0000000000000000 [ 163.702696][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1207'. [ 163.724295][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1207'. [ 163.752715][ T7337] netlink: 'syz.0.1207': attribute type 7 has an invalid length. [ 163.836945][ T7341] netlink: 'syz.1.1211': attribute type 25 has an invalid length. [ 163.888018][ T7341] netlink: 'syz.1.1211': attribute type 25 has an invalid length. [ 164.311515][ T7367] overlayfs: unrecognized mount option "\" or missing value [ 164.928658][ T7387] loop2: detected capacity change from 0 to 8192 [ 165.033500][ T4256] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 165.246545][ T7353] loop1: detected capacity change from 0 to 40427 [ 165.311448][ T7353] F2FS-fs (loop1): Invalid log blocks per segment (4278190089) [ 165.330774][ T7353] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 165.350338][ T7353] F2FS-fs (loop1): invalid crc value [ 165.368157][ T7353] F2FS-fs (loop1): Found nat_bits in checkpoint [ 165.417260][ T7353] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 165.425708][ T7353] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 165.507752][ T4188] attempt to access beyond end of device [ 165.507752][ T4188] loop1: rw=2049, want=45104, limit=40427 [ 165.520931][ T4256] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 165.556268][ T4256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.569271][ T4256] usb 5-1: config 0 descriptor?? [ 165.631839][ T4256] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 166.318181][ T4256] gspca_cpia1: usb_control_msg 01, error -71 [ 166.331739][ T7427] loop1: detected capacity change from 0 to 64 [ 166.337868][ T4256] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 166.398413][ T4256] usb 5-1: USB disconnect, device number 8 [ 166.602681][ T7429] loop3: detected capacity change from 0 to 32768 [ 166.700215][ T7429] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 166.778112][ T4256] XFS (loop3): Metadata CRC error detected at xfs_agf_read_verify+0x18d/0x250, xfs_agf block 0x1 [ 166.834496][ T4256] XFS (loop3): Unmount and run xfs_repair [ 166.840383][ T4256] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 166.896869][ T4256] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 10 00 XAGF............ [ 166.955350][ T4256] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 10 00 ................ [ 167.020042][ T4256] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 167.044515][ T4256] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00 ................ [ 167.069718][ T4256] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 167.088056][ T4256] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01 ................ [ 167.126466][ T4256] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 167.146553][ T4256] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 167.180233][ T7429] XFS (loop3): metadata I/O error in "xfs_read_agf+0x23c/0x500" at daddr 0x1 len 1 error 74 [ 167.531244][ T4672] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 167.933077][ T4672] usb 2-1: Using ep0 maxpacket: 16 [ 168.055297][ T7472] loop2: detected capacity change from 0 to 512 [ 168.123772][ T4672] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 168.142141][ T4672] usb 2-1: config 0 has no interface number 0 [ 168.148738][ T4672] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.172303][ T7475] loop4: detected capacity change from 0 to 256 [ 168.199124][ T4672] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.225722][ T4672] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 168.245516][ T4672] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.259098][ T4672] usb 2-1: config 0 descriptor?? [ 168.269548][ T7472] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 168.310714][ T7475] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.342069][ T7475] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 168.409695][ T7472] EXT4-fs (loop2): 1 truncate cleaned up [ 168.432513][ T7472] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 168.470802][ T7475] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 168.608973][ T7472] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.1268: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 168.680010][ T7472] EXT4-fs (loop2): Remounting filesystem read-only [ 168.775302][ T4672] holtek_mouse 0003:04D9:A081.0013: hidraw0: USB HID v0.00 Device [HID 04d9:a081] on usb-dummy_hcd.1-1/input1 [ 168.995479][ T6180] usb 2-1: USB disconnect, device number 9 [ 169.502443][ T7494] loop4: detected capacity change from 0 to 1024 [ 169.634369][ T7500] loop3: detected capacity change from 0 to 256 [ 169.816668][ T7500] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 169.850346][ T7499] loop2: detected capacity change from 0 to 4096 [ 169.993078][ T4674] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 170.406648][ T4674] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.428216][ T4674] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.461807][ T7530] loop3: detected capacity change from 0 to 512 [ 170.462898][ T4674] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 170.497090][ T4674] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.510517][ T4674] usb 2-1: config 0 descriptor?? [ 170.608163][ T7537] loop4: detected capacity change from 0 to 1024 [ 170.647221][ T7530] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1293: inode has both inline data and extents flags [ 170.714238][ T7530] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1293: couldn't read orphan inode 15 (err -117) [ 170.767732][ T7530] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 170.919520][ T9] hfsplus: b-tree write err: -5, ino 4 [ 170.961083][ T7549] loop2: detected capacity change from 0 to 128 [ 171.024343][ T7549] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.091530][ T4674] wacom 0003:056A:0331.0014: unknown main item tag 0x0 [ 171.101129][ T7549] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 171.129942][ T4674] wacom 0003:056A:0331.0014: unknown main item tag 0x0 [ 171.147421][ T4674] wacom 0003:056A:0331.0014: unknown main item tag 0x0 [ 171.166097][ T7549] overlayfs: filesystem on './file0' not supported [ 171.178166][ T4674] wacom 0003:056A:0331.0014: unknown main item tag 0x0 [ 171.186178][ T4674] wacom 0003:056A:0331.0014: unknown main item tag 0x0 [ 171.218230][ T4674] wacom 0003:056A:0331.0014: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0 [ 171.338007][ T4674] usb 2-1: USB disconnect, device number 10 [ 171.520547][ T7560] fido_id[7560]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 172.974387][ T7582] loop1: detected capacity change from 0 to 40427 [ 173.077088][ T7582] F2FS-fs (loop1): invalid crc value [ 173.082467][ T7582] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 173.152372][ T7582] F2FS-fs (loop1): Found nat_bits in checkpoint [ 173.192227][ T7605] hfs: can't find a HFS filesystem on dev nullb0 [ 173.343961][ T7582] F2FS-fs (loop1): recover fsync data on readonly fs [ 173.399029][ T7582] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 173.408204][ T7582] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 173.735495][ T6180] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 174.043732][ T6180] usb 5-1: Using ep0 maxpacket: 16 [ 174.195297][ T4672] kernel write not supported for file /audio (pid: 4672 comm: kworker/1:12) [ 174.206702][ T6180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.217813][ T6180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.261847][ T6180] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 174.322822][ T6180] usb 5-1: New USB device found, idVendor=045e, idProduct=00da, bcdDevice= 0.90 [ 174.348996][ T7639] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1344'. [ 174.354841][ T6180] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.402735][ T6180] usb 5-1: config 0 descriptor?? [ 174.600378][ T7647] program syz.2.1347 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.844774][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1352'. [ 174.860560][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1352'. [ 174.871308][ T7657] netlink: 'syz.2.1352': attribute type 11 has an invalid length. [ 174.911338][ T6180] hid (null): invalid report_count -717908406 [ 174.919941][ T6180] hid-generic 0003:045E:00DA.0015: invalid report_count -717908406 [ 174.944863][ T6180] hid-generic 0003:045E:00DA.0015: item 0 4 1 9 parsing failed [ 174.962377][ T7659] netlink: 'syz.2.1353': attribute type 1 has an invalid length. [ 174.974304][ T6180] hid-generic: probe of 0003:045E:00DA.0015 failed with error -22 [ 175.155716][ T4674] usb 5-1: USB disconnect, device number 9 [ 175.206885][ T6181] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 175.400761][ T7665] loop1: detected capacity change from 0 to 1024 [ 175.445810][ T7665] overlayfs: unrecognized mount option "\fsplus" or missing value [ 175.662713][ T6181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.701182][ T6181] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.728805][ T6181] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 175.756129][ T6181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.803434][ T6181] usb 4-1: config 0 descriptor?? [ 175.925726][ T7680] loop4: detected capacity change from 0 to 1024 [ 176.033661][ T7680] hfsplus: bad catalog entry type [ 176.109065][ T144] hfsplus: b-tree write err: -5, ino 4 [ 176.334472][ T6181] wacom 0003:056A:0331.0016: unknown main item tag 0x0 [ 176.341418][ T6181] wacom 0003:056A:0331.0016: unknown main item tag 0x0 [ 176.392861][ T6181] wacom 0003:056A:0331.0016: unknown main item tag 0x0 [ 176.400006][ T6181] wacom 0003:056A:0331.0016: unknown main item tag 0x0 [ 176.442820][ T6181] wacom 0003:056A:0331.0016: unknown main item tag 0x0 [ 176.469310][ T6181] wacom 0003:056A:0331.0016: hidraw0: USB HID v0.00 Device [HID 056a:0331] on usb-dummy_hcd.3-1/input0 [ 176.594419][ T6181] usb 4-1: USB disconnect, device number 11 [ 176.730253][ T7711] fido_id[7711]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 176.767468][ T7715] loop4: detected capacity change from 0 to 256 [ 176.823397][ T7715] exfat: Deprecated parameter 'namecase' [ 176.829393][ T7715] exfat: Deprecated parameter 'utf8' [ 176.879525][ T7715] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 177.026608][ T7723] loop2: detected capacity change from 0 to 128 [ 177.046666][ T7715] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 177.160526][ T7723] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 177.280032][ T4186] sysv_free_block: trying to free block not in datazone [ 177.397822][ T4186] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 177.647171][ T7733] loop3: detected capacity change from 0 to 8192 [ 177.681621][ T7743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1393'. [ 177.859220][ T7753] tipc: Enabled bearer , priority 10 [ 178.291860][ T7778] binder: 7777:7778 ioctl c018620c 200000000240 returned -22 [ 178.539951][ T7784] smc: net device wlan1 applied user defined pnetid SYZ1 [ 178.582925][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1414'. [ 178.862336][ T7775] loop4: detected capacity change from 0 to 32768 [ 178.889595][ T4672] tipc: Node number set to 11552 [ 179.064184][ T7733] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 179.073484][ T7733] REISERFS (device loop3): using ordered data mode [ 179.080055][ T7733] reiserfs: using flush barriers [ 179.101750][ T7733] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 179.107597][ T7775] read_mapping_page failed! [ 179.124378][ T7733] REISERFS (device loop3): checking transaction log (loop3) [ 179.247910][ T7775] ERROR: (device loop4): txCommit: [ 179.247910][ T7775] [ 179.292830][ T7775] ERROR: (device loop4): remounting filesystem as read-only [ 179.390638][ T275] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0) [ 179.411748][ T275] ------------[ cut here ]------------ [ 179.443067][ T275] kernel BUG at fs/jfs/jfs_txnmgr.c:931! [ 179.462637][ T275] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 179.468767][ T275] CPU: 1 PID: 275 Comm: jfsCommit Not tainted syzkaller #0 [ 179.475989][ T275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 179.486264][ T275] RIP: 0010:txUnlock+0xc87/0xcb0 [ 179.488909][ T7733] REISERFS (device loop3): Using tea hash to sort names [ 179.491443][ T275] Code: ef 03 d1 06 0f 0b e8 f8 e0 a9 fe 48 c7 c7 c0 5f 42 8a 48 c7 c6 b9 5b 42 8a ba a3 03 00 00 48 c7 c1 80 6a 42 8a e8 c9 03 d1 06 <0f> 0b e8 d2 e0 a9 fe 48 c7 c7 c0 5f 42 8a 48 c7 c6 b9 5b 42 8a ba [ 179.518405][ T275] RSP: 0018:ffffc900026efd28 EFLAGS: 00010246 [ 179.524513][ T275] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 86bbfc21c6011a00 [ 179.532517][ T275] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 179.540681][ T275] RBP: ffffc900029321b0 R08: dffffc0000000000 R09: ffffed10172267b0 [ 179.548745][ T275] R10: ffffed10172267b0 R11: 1ffff110172267af R12: ffff88802aa25e88 [ 179.556805][ T275] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90002711220 [ 179.564791][ T275] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 179.573826][ T275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.580515][ T275] CR2: 00007f417d0af000 CR3: 0000000063649000 CR4: 00000000003506e0 [ 179.588509][ T275] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 179.596488][ T275] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 179.604461][ T275] Call Trace: [ 179.607742][ T275] [ 179.610677][ T275] jfs_lazycommit+0x583/0xb20 [ 179.615359][ T275] ? txFreelock+0x5a0/0x5a0 [ 179.619888][ T275] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 179.625884][ T275] ? sched_dynamic_update+0x210/0x210 [ 179.631349][ T275] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 179.637239][ T275] ? __kthread_parkme+0x157/0x1b0 [ 179.642361][ T275] kthread+0x436/0x520 [ 179.646517][ T275] ? txFreelock+0x5a0/0x5a0 [ 179.651023][ T275] ? kthread_blkcg+0xd0/0xd0 [ 179.655620][ T275] ret_from_fork+0x1f/0x30 [ 179.660051][ T275] [ 179.663066][ T275] Modules linked in: [ 179.674613][ T7733] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 179.826035][ T275] ---[ end trace dbce34fd7470fec4 ]--- [ 179.832071][ T275] RIP: 0010:txUnlock+0xc87/0xcb0 [ 179.841142][ T275] Code: ef 03 d1 06 0f 0b e8 f8 e0 a9 fe 48 c7 c7 c0 5f 42 8a 48 c7 c6 b9 5b 42 8a ba a3 03 00 00 48 c7 c1 80 6a 42 8a e8 c9 03 d1 06 <0f> 0b e8 d2 e0 a9 fe 48 c7 c7 c0 5f 42 8a 48 c7 c6 b9 5b 42 8a ba [ 179.864239][ T275] RSP: 0018:ffffc900026efd28 EFLAGS: 00010246 [ 179.871030][ T275] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 86bbfc21c6011a00 [ 179.881669][ T275] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 179.891085][ T275] RBP: ffffc900029321b0 R08: dffffc0000000000 R09: ffffed10172267b0 [ 179.910400][ T275] R10: ffffed10172267b0 R11: 1ffff110172267af R12: ffff88802aa25e88 [ 179.923412][ T275] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90002711220 [ 179.933295][ T275] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 179.944060][ T275] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.951699][ T275] CR2: 000055558bf395c8 CR3: 000000007297b000 CR4: 00000000003506e0 [ 179.966448][ T275] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 179.975787][ T275] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 180.006218][ T275] Kernel panic - not syncing: Fatal exception [ 180.012578][ T275] Kernel Offset: disabled [ 180.016914][ T275] Rebooting in 86400 seconds..