last executing test programs: 12.455220227s ago: executing program 3 (id=1272): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) open_by_handle_at(r0, &(0x7f0000000000)=@reiserfs_5={0x14, 0x5, {0x2, 0x9, 0xde, 0x2, 0x81}}, 0x20080) 12.142507997s ago: executing program 3 (id=1276): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) 11.855726773s ago: executing program 3 (id=1279): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 11.50436875s ago: executing program 3 (id=1286): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f00000034c0)={[{@keep_last_dots}, {@keep_last_dots}, {@dmask={'dmask', 0x3d, 0x1}}, {@time_offset={'time_offset', 0x3d, 0x6}}, {@errors_remount}, {@discard}, {@umask={'umask', 0x3d, 0x1}}, {@errors_continue}, {@allow_utime={'allow_utime', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@utf8}, {@fmask={'fmask', 0x3d, 0x100000001}}, {@errors_continue}, {@sys_tz}, {@umask}], [{@hash}, {@uid_eq}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@hash}, {@dont_appraise}, {@pcr={'pcr', 0x3d, 0x12}}, {@smackfsfloor={'smackfsfloor', 0x3d, ')'}}, {@dont_appraise}]}, 0x1, 0x153b, &(0x7f0000001f80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 10.914741305s ago: executing program 3 (id=1292): setreuid(0xee01, 0xee01) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) 10.288274057s ago: executing program 3 (id=1299): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') lseek(r0, 0x8, 0x1) 9.237027698s ago: executing program 32 (id=1299): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') lseek(r0, 0x8, 0x1) 4.669810235s ago: executing program 0 (id=1348): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffc, 0x6, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00', 0xfffffffffffffffd, 0x4000, 0x14, 0x0, 0x0}) 4.359735264s ago: executing program 0 (id=1352): preadv(0xffffffffffffffff, 0x0, 0x0, 0xfffffff9, 0x8) syz_usb_connect(0x2, 0x24, &(0x7f00000026c0)={{0x12, 0x1, 0x250, 0x38, 0x62, 0xea, 0x40, 0x64b, 0x7825, 0x3fc6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc5, 0x9, 0xd0, 0x10, "", [{{0x9, 0x4, 0xd3, 0x6, 0x0, 0xaa, 0xaf, 0x64}}]}}]}}, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0}) 4.33754209s ago: executing program 2 (id=1353): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000180)={0x2, @capture={0x0, 0x1, {0x7, 0xb5}, 0x370f, 0x6}}) 4.026130493s ago: executing program 2 (id=1356): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@clear_cache}, {@metadata_ratio}, {@ssd_spread}]}, 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, 0x0) 2.484786143s ago: executing program 0 (id=1366): r0 = fsopen(&(0x7f0000000200)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2.321821749s ago: executing program 5 (id=1367): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 2.253785677s ago: executing program 1 (id=1368): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/sockstat6\x00') read$FUSE(r0, &(0x7f0000002540)={0x2020}, 0x2020) 2.100494888s ago: executing program 0 (id=1369): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003e00070100000000fcdbdf25047c000004000000140001800674405c57e0a99819f2ca"], 0x2c}}, 0x0) 1.98401862s ago: executing program 5 (id=1370): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x1419, 0x1}, 0x10}}, 0x0) 1.914816159s ago: executing program 1 (id=1371): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x4c, 0x1a, 0xc000486, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x10}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) 1.741724848s ago: executing program 0 (id=1372): r0 = socket$inet6(0xa, 0x802, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x6, 0xffffffff, 0x30, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x71c, 0x1, 0x3, 0x3}}) 1.627916018s ago: executing program 5 (id=1375): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r0, &(0x7f0000000180)=""/30, 0x1e, 0x400000000000003c) 1.567450485s ago: executing program 1 (id=1376): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000000000000100100000e000000180000000003"], 0x28}, 0xfc40) 1.484838298s ago: executing program 2 (id=1377): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="14010000200001000300000000000025020117800c0003ae08ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.273054069s ago: executing program 1 (id=1378): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) 1.268890608s ago: executing program 5 (id=1380): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f00000012c0), 0x4) 1.121304064s ago: executing program 2 (id=1381): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x148, 0x1170, 0x1170, 0x0, 0x1170, 0x218, 0x1398, 0x1398, 0x218, 0x1398, 0x3, 0x0, {[{{@ipv6={@local, @mcast2, [0x0, 0x322, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xffffffff], 'veth0_vlan\x00', 'veth1_macvtap\x00', {}, {}, 0x84}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x4e21, 0x40, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1], 0xfe}}, @common=@hl={{0x28}, {0x0, 0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x5, 0x2}, {0x0, 0x1, 0x5}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [0xff000000, 0x0, 0x0, 0xff000000], [], 'veth1_to_hsr\x00', 'vlan1\x00', {0xff}}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x8000}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 1.092671847s ago: executing program 1 (id=1382): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 1.024118217s ago: executing program 5 (id=1383): r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x898, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000280)={0x0, [[0x400007ff, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x2], [0x2004, 0x40000000, 0xfffffffd, 0x80000], [0x0, 0x20000232, 0x6, 0x0, 0x0, 0x0, 0x1]], '\x00', [{0x0, 0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x400000, 0x3}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x80}, {0x7, 0x40004000}]}) 863.245926ms ago: executing program 1 (id=1385): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90647, 0x180}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0xfe}, @IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 858.855013ms ago: executing program 2 (id=1386): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcm3724\x00', [0x100, 0x80000000, 0x3, 0xc, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x0, 0x2, 0x1, 0x7, 0x1, 0x2, 0xfd, 0x0, 0x9, 0x40003, 0x80000000, 0x8, 0x2, 0x0, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0xffffffff, 0xa6b5, 0x24a05ffd, 0xffffffff]}) 774.822244ms ago: executing program 5 (id=1387): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x28, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x14}, [@NDA_DST_MAC={0xa, 0x1, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 656.545876ms ago: executing program 2 (id=1389): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x60, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4a, 0x11, 0x0, 0x1, [@generic="31f9e05e2f826cfc31dc2af824704f63dac994ce05dc7224e5479795b50d9015743a8b755e02f990bdfc3da898257de5b8996dbc932b5009df63b75f105c53ead0d50435cb16"]}]}, 0x60}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 578.822229ms ago: executing program 4 (id=1390): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) 494.054275ms ago: executing program 4 (id=1391): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) signalfd4(r0, &(0x7f00000000c0)={[0xe]}, 0x8, 0x80800) 401.643175ms ago: executing program 4 (id=1392): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 294.87315ms ago: executing program 4 (id=1393): r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000600)={0x0, 0x0, 0x6, &(0x7f00000005c0)={0x22, "50e1c0340af66e0dffda611f117e9df8b20630faa67cf4f18bda15c85613a37043"}}) 133.810494ms ago: executing program 4 (id=1394): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x3, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000bf0000000002000000850000005300000085000000d000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0xf8, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 101.545148ms ago: executing program 0 (id=1395): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x40000) 0s ago: executing program 4 (id=1396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) kernel console output (not intermixed with test programs): bread(block 72) failed [ 120.937659][ T6420] FAT-fs (loop0): Directory bread(block 73) failed [ 121.058180][ T6433] netlink: 76 bytes leftover after parsing attributes in process `syz.3.241'. [ 121.521562][ T5772] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 121.642557][ T6414] loop4: detected capacity change from 0 to 32768 [ 121.680381][ T6449] loop0: detected capacity change from 0 to 512 [ 121.715339][ T5772] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.768098][ T5772] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 121.792559][ T5772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.830467][ T6449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.832376][ T5772] usb 2-1: config 0 descriptor?? [ 121.857520][ T6449] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.284992][ T5772] ath6kl: Failed to read usb control message: -71 [ 122.319741][ T5772] ath6kl: Unable to read the bmi data from the device: -71 [ 122.324800][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.363976][ T5772] ath6kl: Unable to recv target info: -71 [ 122.397957][ T5772] ath6kl: Failed to init ath6kl core: -71 [ 122.464168][ T5772] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 122.486388][ T6473] usb usb7: usbfs: process 6473 (syz.2.255) did not claim interface 0 before use [ 122.511436][ T6474] warning: `syz.4.256' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.538075][ T5772] usb 2-1: USB disconnect, device number 4 [ 123.202786][ T5789] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 123.383127][ T5789] usb 6-1: Using ep0 maxpacket: 8 [ 123.397173][ T5789] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 123.416396][ T5789] usb 6-1: config 179 has no interface number 0 [ 123.435440][ T6501] loop4: detected capacity change from 0 to 512 [ 123.446620][ T5789] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 123.472703][ T6501] EXT4-fs: Ignoring removed nobh option [ 123.504880][ T5789] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 123.553756][ T5789] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 123.618997][ T5789] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 123.620872][ T6501] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #3: comm syz.4.266: corrupted inode contents [ 123.649475][ T5789] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 123.663904][ T5789] usb 6-1: config 179 interface 65 has no altsetting 0 [ 123.672413][ T5789] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 123.681783][ T5789] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.693537][ T6501] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 123.705631][ T6501] EXT4-fs (loop4): Remounting filesystem read-only [ 123.714750][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 123.714783][ C1] EXT4-fs (loop4): initial error at time 1777625696: ext4_do_update_inode:5690: inode 3 [ 123.714836][ C1] EXT4-fs (loop4): last error at time 1777625696: ext4_do_update_inode:5690: inode 3 [ 123.795515][ T5789] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input10 [ 123.818808][ T6501] Quota error (device loop4): write_blk: dquota write failed [ 123.843841][ T6501] Quota error (device loop4): qtree_write_dquot: Error -30 occurred while creating quota [ 123.889914][ T6501] EXT4-fs (loop4): 1 truncate cleaned up [ 123.946149][ T6518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.274'. [ 123.961910][ T6501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.962066][ T6501] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.005341][ T6501] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.086289][ T5752] usb 6-1: USB disconnect, device number 3 [ 124.371621][ T29] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 124.534503][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 124.565549][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.617827][ T29] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.624663][ T6536] loop1: detected capacity change from 0 to 8 [ 124.656776][ T29] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 124.684065][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.722715][ T29] usb 3-1: Product: syz [ 124.750454][ T29] usb 3-1: Manufacturer: syz [ 124.771413][ T29] usb 3-1: SerialNumber: syz [ 124.807501][ T6540] loop0: detected capacity change from 0 to 1024 [ 124.809946][ T29] usb 3-1: selecting invalid altsetting 1 [ 124.867627][ T29] usb 3-1: unit 6 not found! [ 124.944797][ T6540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.045785][ T6545] xt_hashlimit: overflow, try lower: 3/0 [ 125.075626][ T29] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 125.107652][ T6548] validate_nla: 46 callbacks suppressed [ 125.107674][ T6548] netlink: 'syz.1.301': attribute type 92 has an invalid length. [ 125.118162][ T6549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.289'. [ 125.127749][ T29] usb 3-1: USB disconnect, device number 5 [ 125.140102][ T6540] EXT4-fs warning (device loop0): ext4_rmdir:3189: inode #11: comm syz.0.286: empty directory 'file1' has too many links (111) [ 125.211122][ T5913] udevd[5913]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.297485][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.475857][ T6556] loop4: detected capacity change from 0 to 256 [ 125.542269][ T6556] FAT-fs (loop4): Directory bread(block 64) failed [ 125.588385][ T6556] FAT-fs (loop4): Directory bread(block 65) failed [ 125.622812][ T6556] FAT-fs (loop4): Directory bread(block 66) failed [ 125.651660][ T6556] FAT-fs (loop4): Directory bread(block 67) failed [ 125.686192][ T6556] FAT-fs (loop4): Directory bread(block 68) failed [ 125.704464][ T6562] loop5: detected capacity change from 0 to 16 [ 125.730634][ T6556] FAT-fs (loop4): Directory bread(block 69) failed [ 125.772692][ T6562] erofs (device loop5): mounted with root inode @ nid 36. [ 125.781060][ T6556] FAT-fs (loop4): Directory bread(block 70) failed [ 125.816061][ T6556] FAT-fs (loop4): Directory bread(block 71) failed [ 125.856745][ T6556] FAT-fs (loop4): Directory bread(block 72) failed [ 125.890352][ T6571] loop1: detected capacity change from 0 to 256 [ 125.900808][ T6556] FAT-fs (loop4): Directory bread(block 73) failed [ 125.931482][ T6571] exfat: Deprecated parameter 'namecase' [ 126.000827][ T6571] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001ff53, chksum : 0xa3a8d5f0, utbl_chksum : 0xe619d30d) [ 126.172155][ T6577] tmpfs: Bad value for 'mpol' [ 126.568911][ T6585] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 126.619120][ T6585] CIFS mount error: No usable UNC path provided in device string! [ 126.619120][ T6585] [ 126.659000][ T6585] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 126.729443][ T6595] netlink: 'syz.4.308': attribute type 32 has an invalid length. [ 126.975785][ T6602] loop1: detected capacity change from 0 to 64 [ 127.180669][ T6611] loop3: detected capacity change from 0 to 8 [ 127.268861][ T6611] SQUASHFS error: Unable to read inode 0xe3 [ 127.823016][ T6625] bond2: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 127.883239][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.321'. [ 127.916611][ T6625] bond2: entered promiscuous mode [ 127.934336][ T6637] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 127.950685][ T6625] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.965722][ T6639] openvswitch: netlink: Missing valid actions attribute. [ 128.002458][ T6639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.015815][ T6629] loop0: detected capacity change from 0 to 4096 [ 128.039446][ T6629] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 129.021502][ T29] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 129.155194][ T6679] openvswitch: netlink: IPv4 tunnel dst address is zero [ 129.212152][ T29] usb 3-1: Using ep0 maxpacket: 8 [ 129.252473][ T29] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 129.296272][ T29] usb 3-1: config 179 has no interface number 0 [ 129.332927][ T29] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 129.387020][ T29] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 129.417659][ T29] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 129.456274][ T29] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 129.512656][ T29] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 129.569000][ T29] usb 3-1: config 179 interface 65 has no altsetting 0 [ 129.613849][ T29] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 129.645593][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.688101][ T6697] loop0: detected capacity change from 0 to 64 [ 129.715488][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.344'. [ 129.724573][ T29] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input11 [ 129.803281][ T6697] syz.0.345: attempt to access beyond end of device [ 129.803281][ T6697] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 129.865982][ T6697] Buffer I/O error on dev loop0, logical block 134217734, async page read [ 130.064858][ T24] usb 3-1: USB disconnect, device number 6 [ 130.397003][ T6687] loop5: detected capacity change from 0 to 32768 [ 130.410207][ T6687] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.342 (6687) [ 130.437538][ T6687] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 130.447896][ T6687] BTRFS info (device loop5): using xxhash64 checksum algorithm [ 130.498462][ T6687] BTRFS info (device loop5): enabling ssd optimizations [ 130.507665][ T6687] BTRFS info (device loop5): turning on flush-on-commit [ 130.516173][ T6687] BTRFS info (device loop5): turning on async discard [ 130.523421][ T6687] BTRFS info (device loop5): enabling free space tree [ 130.534300][ T6687] BTRFS info (device loop5): force zlib compression, level 3 [ 130.543418][ T6687] BTRFS info (device loop5): max_inline set to 0 [ 130.576105][ T6687] BTRFS error: failed to open device for path p=RGXQe/QKP7iRŻ>?%I bADLIEm/H\OoIٯaM6o`4yu;i_ft_'js}ux2/ with flags 0x1: -2 [ 130.756770][ T5623] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 130.832132][ T6727] loop2: detected capacity change from 0 to 256 [ 130.947677][ T6727] FAT-fs (loop2): Directory bread(block 64) failed [ 130.947723][ T6727] FAT-fs (loop2): Directory bread(block 65) failed [ 130.947824][ T6727] FAT-fs (loop2): Directory bread(block 66) failed [ 130.947862][ T6727] FAT-fs (loop2): Directory bread(block 67) failed [ 130.947959][ T6727] FAT-fs (loop2): Directory bread(block 68) failed [ 130.947995][ T6727] FAT-fs (loop2): Directory bread(block 69) failed [ 130.948100][ T6727] FAT-fs (loop2): Directory bread(block 70) failed [ 130.948136][ T6727] FAT-fs (loop2): Directory bread(block 71) failed [ 130.948250][ T6727] FAT-fs (loop2): Directory bread(block 72) failed [ 130.948286][ T6727] FAT-fs (loop2): Directory bread(block 73) failed [ 131.091014][ T6726] loop1: detected capacity change from 0 to 4096 [ 131.111063][ T6726] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 131.689152][ T6725] loop0: detected capacity change from 0 to 32768 [ 131.725451][ T6725] JBD2: Ignoring recovery information on journal [ 131.785230][ T6725] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 131.916820][ T5625] ocfs2: Unmounting device (7,0) on (node local) [ 132.146400][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.156681][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.169072][ T1308] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 132.526401][ T6753] Illegal XDP return value 4294967262 on prog (id 15) dev N/A, expect packet loss! [ 132.671574][ T29] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 132.693133][ T6761] loop2: detected capacity change from 0 to 64 [ 132.757225][ T6761] syz.2.366: attempt to access beyond end of device [ 132.757225][ T6761] loop2: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 132.821551][ T29] usb 2-1: Using ep0 maxpacket: 8 [ 132.829119][ T6761] Buffer I/O error on dev loop2, logical block 1295, async page read [ 132.847065][ T29] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 132.869889][ T29] usb 2-1: config 179 has no interface number 0 [ 132.892656][ T29] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 132.935107][ T6761] syz.2.366: attempt to access beyond end of device [ 132.935107][ T6761] loop2: rw=0, sector=2590, nr_sectors = 2 limit=64 [ 132.956233][ T29] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 132.974531][ T6763] loop4: detected capacity change from 0 to 64 [ 132.999541][ T29] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 133.035180][ T6761] Buffer I/O error on dev loop2, logical block 1295, async page read [ 133.055773][ T29] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 133.076235][ T30] audit: type=1800 audit(1777625705.758:2): pid=6761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.366" name="file2" dev="loop2" ino=6 res=0 errno=0 [ 133.103195][ T29] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 133.118980][ T6761] Trying to free block not in datazone [ 133.138210][ T6761] minix_free_block (loop2:21): bit already cleared [ 133.157455][ T29] usb 2-1: config 179 interface 65 has no altsetting 0 [ 133.179306][ T29] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 133.222798][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.387075][ T29] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input12 [ 133.714059][ T5789] usb 2-1: USB disconnect, device number 5 [ 133.922551][ T5773] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 134.119257][ T5773] usb 3-1: Using ep0 maxpacket: 32 [ 134.145558][ T5773] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 134.145602][ T5773] usb 3-1: config 0 has no interface number 0 [ 134.145657][ T5773] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 134.145698][ T5773] usb 3-1: config 0 interface 83 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 134.153295][ T5773] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 134.153342][ T5773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.153379][ T5773] usb 3-1: Product: syz [ 134.153406][ T5773] usb 3-1: Manufacturer: syz [ 134.153434][ T5773] usb 3-1: SerialNumber: syz [ 134.177375][ T5773] usb 3-1: config 0 descriptor?? [ 134.200460][ T5773] redrat3 3-1:0.83: Couldn't find all endpoints [ 134.286220][ T6793] xt_hashlimit: overflow, try lower: 3/0 [ 134.420862][ T6792] loop5: detected capacity change from 0 to 4096 [ 134.447648][ T5789] usb 3-1: USB disconnect, device number 7 [ 134.468348][ T6792] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 134.492204][ T6795] loop1: detected capacity change from 0 to 256 [ 134.578579][ T6792] ntfs3(loop5): ino=9, mi_enum_attr [ 134.584387][ T6795] FAT-fs (loop1): Directory bread(block 64) failed [ 134.594642][ T6792] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 134.608777][ T6777] loop0: detected capacity change from 0 to 32768 [ 134.616911][ T6795] FAT-fs (loop1): Directory bread(block 65) failed [ 134.640948][ T6792] ntfs3(loop5): ino=9, mi_enum_attr [ 134.646768][ T6777] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.385 (6777) [ 134.654376][ T6795] FAT-fs (loop1): Directory bread(block 66) failed [ 134.685241][ T6792] ntfs3(loop5): ino=1a, mi_enum_attr [ 134.699668][ T6795] FAT-fs (loop1): Directory bread(block 67) failed [ 134.705455][ T6792] ntfs3(loop5): ino=1a, mi_enum_attr [ 134.729216][ T6777] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 134.733450][ T6795] FAT-fs (loop1): Directory bread(block 68) failed [ 134.745116][ T6792] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 134.771107][ T6795] FAT-fs (loop1): Directory bread(block 69) failed [ 134.789974][ T6777] BTRFS info (device loop0): using sha256 checksum algorithm [ 134.802190][ T6795] FAT-fs (loop1): Directory bread(block 70) failed [ 134.848500][ T6795] FAT-fs (loop1): Directory bread(block 71) failed [ 134.891853][ T6795] FAT-fs (loop1): Directory bread(block 72) failed [ 134.937525][ T6795] FAT-fs (loop1): Directory bread(block 73) failed [ 134.966724][ T6777] BTRFS info (device loop0): rebuilding free space tree [ 135.061522][ T6777] BTRFS info (device loop0): turning off barriers [ 135.086122][ T6777] BTRFS info (device loop0): turning on sync discard [ 135.113101][ T6777] BTRFS info (device loop0): enabling free space tree [ 135.138662][ T6777] BTRFS info (device loop0): force clearing of disk cache [ 135.169293][ T6777] BTRFS info (device loop0): enabling auto defrag [ 135.721493][ T5625] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 136.631848][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 136.708075][ T6853] loop2: detected capacity change from 0 to 256 [ 136.801824][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 136.830828][ T24] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 136.855165][ T24] usb 1-1: config 179 has no interface number 0 [ 136.870393][ T6853] FAT-fs (loop2): Directory bread(block 64) failed [ 136.888678][ T24] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 136.905159][ T6853] FAT-fs (loop2): Directory bread(block 65) failed [ 136.905321][ T6828] loop3: detected capacity change from 0 to 32768 [ 136.922631][ T6853] FAT-fs (loop2): Directory bread(block 66) failed [ 136.930628][ T24] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 136.964171][ T6828] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.391 (6828) [ 136.974361][ T6853] FAT-fs (loop2): Directory bread(block 67) failed [ 136.987252][ T24] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 136.992413][ T6861] loop1: detected capacity change from 0 to 8 [ 137.021798][ T6853] FAT-fs (loop2): Directory bread(block 68) failed [ 137.032754][ T6853] FAT-fs (loop2): Directory bread(block 69) failed [ 137.038604][ T24] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 137.089274][ T24] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 137.089500][ T6853] FAT-fs (loop2): Directory bread(block 70) failed [ 137.112004][ T6828] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 137.120642][ T6861] SQUASHFS error: Unable to read inode 0xe3 [ 137.136470][ T6828] BTRFS info (device loop3): using sha256 checksum algorithm [ 137.145048][ T24] usb 1-1: config 179 interface 65 has no altsetting 0 [ 137.173455][ T24] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 137.205368][ T6853] FAT-fs (loop2): Directory bread(block 71) failed [ 137.232351][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.234987][ T6853] FAT-fs (loop2): Directory bread(block 72) failed [ 137.254327][ T6853] FAT-fs (loop2): Directory bread(block 73) failed [ 137.363241][ T6876] kAFS: unable to lookup cell '.Sjˡ8' [ 137.415654][ T6828] BTRFS info (device loop3): enabling ssd optimizations [ 137.441808][ T6828] BTRFS info (device loop3): turning on async discard [ 137.448068][ T24] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input13 [ 137.467712][ T6828] BTRFS info (device loop3): enabling free space tree [ 137.581019][ T24] usb 1-1: USB disconnect, device number 6 [ 137.847329][ T5621] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 138.466230][ T6902] AppArmor: change_hat: Invalid input '0' [ 138.663805][ T6908] loop4: detected capacity change from 0 to 64 [ 138.707484][ T6906] loop3: detected capacity change from 0 to 1024 [ 138.764541][ T6906] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 138.803179][ T6908] syz.4.423: attempt to access beyond end of device [ 138.803179][ T6908] loop4: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 138.821735][ T6906] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 138.854799][ T6916] loop0: detected capacity change from 0 to 256 [ 138.870294][ T6908] Buffer I/O error on dev loop4, logical block 134217734, async page read [ 138.954689][ T6916] FAT-fs (loop0): Directory bread(block 64) failed [ 139.041540][ T6916] FAT-fs (loop0): Directory bread(block 65) failed [ 139.057040][ T6916] FAT-fs (loop0): Directory bread(block 66) failed [ 139.083608][ T6916] FAT-fs (loop0): Directory bread(block 67) failed [ 139.121791][ T6916] FAT-fs (loop0): Directory bread(block 68) failed [ 139.158430][ T6916] FAT-fs (loop0): Directory bread(block 69) failed [ 139.191768][ T6916] FAT-fs (loop0): Directory bread(block 70) failed [ 139.212164][ T6916] FAT-fs (loop0): Directory bread(block 71) failed [ 139.236326][ T6925] genirq: Flags mismatch irq 8. 00200001 (pcmmio) vs. 00200001 (rtc0) [ 139.236720][ T6916] FAT-fs (loop0): Directory bread(block 72) failed [ 139.295923][ T6916] FAT-fs (loop0): Directory bread(block 73) failed [ 139.369673][ T6906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.582353][ T5752] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 139.777144][ T5752] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 139.816146][ T5752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.840527][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.861082][ T5752] usb 5-1: Product: syz [ 139.891163][ T5752] usb 5-1: Manufacturer: syz [ 139.922316][ T5752] usb 5-1: SerialNumber: syz [ 139.985522][ T5752] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 140.151935][ T5773] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 140.663713][ T6953] binder: BC_ACQUIRE_RESULT not supported [ 140.685064][ T6953] binder: 6950:6953 ioctl c0306201 200000000540 returned -22 [ 140.922921][ T6958] xt_cgroup: invalid path, errno=-2 [ 141.341755][ T5773] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 141.372578][ T5773] ath9k_htc: Failed to initialize the device [ 141.490067][ T5773] usb 5-1: ath9k_htc: USB layer deinitialized [ 141.561453][ T24] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 141.735158][ T24] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 141.766764][ T5789] usb 5-1: USB disconnect, device number 4 [ 141.775978][ T24] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.809042][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 141.828173][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.882133][ T24] hub 1-1:4.0: USB hub found [ 142.107113][ T24] hub 1-1:4.0: 4 ports detected [ 142.121076][ T24] usb 1-1: selecting invalid altsetting 1 [ 142.146071][ T24] hub 1-1:4.0: Using single TT (err -22) [ 142.165763][ T24] hub 1-1:4.0: insufficient power available to use all downstream ports [ 142.311436][ T24] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 142.341078][ T24] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 142.414173][ T24] usb 1-1: USB disconnect, device number 7 [ 142.431695][ T5772] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 142.583211][ T7005] netlink: 512 bytes leftover after parsing attributes in process `syz.2.468'. [ 142.628709][ T5772] usb 2-1: unable to get BOS descriptor or descriptor too short [ 142.658221][ T5772] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.688332][ T5772] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.727413][ T5772] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 142.748843][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.772697][ T5772] usb 2-1: Product: syz [ 142.787049][ T5772] usb 2-1: Manufacturer: syz [ 142.797949][ T5772] usb 2-1: SerialNumber: syz [ 142.852724][ T5772] usb 2-1: selecting invalid altsetting 1 [ 142.879047][ T5772] usb 2-1: unit 6 not found! [ 143.106091][ T7013] loop3: detected capacity change from 0 to 256 [ 143.150080][ T5772] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 143.194043][ T7017] loop0: detected capacity change from 0 to 256 [ 143.208335][ T7015] loop2: detected capacity change from 0 to 128 [ 143.215159][ T5772] usb 2-1: USB disconnect, device number 6 [ 143.227779][ T7017] exfat: Deprecated parameter 'namecase' [ 143.229175][ T7013] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 143.250404][ T7017] exfat: Deprecated parameter 'namecase' [ 143.306461][ T7015] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.323443][ T7003] loop4: detected capacity change from 0 to 32768 [ 143.337297][ T7015] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.358490][ T7017] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 143.377563][ T7013] exFAT-fs (loop3): start_clu is invalid cluster(0x0) [ 143.384867][ T7003] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.467 (7003) [ 143.425784][ T5913] udevd[5913]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.550336][ T7003] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 143.602105][ T7003] BTRFS info (device loop4): using sha256 checksum algorithm [ 143.688250][ T5622] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.865187][ T7003] BTRFS info (device loop4): enabling ssd optimizations [ 143.903530][ T7003] BTRFS info (device loop4): turning on async discard [ 143.916813][ T7003] BTRFS info (device loop4): enabling free space tree [ 144.223060][ T5626] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 144.804853][ T7066] loop5: detected capacity change from 0 to 256 [ 144.932512][ T7066] FAT-fs (loop5): Directory bread(block 64) failed [ 144.959722][ T7066] FAT-fs (loop5): Directory bread(block 65) failed [ 145.005043][ T7066] FAT-fs (loop5): Directory bread(block 66) failed [ 145.063773][ T7066] FAT-fs (loop5): Directory bread(block 67) failed [ 145.110190][ T7066] FAT-fs (loop5): Directory bread(block 68) failed [ 145.139180][ T7066] FAT-fs (loop5): Directory bread(block 69) failed [ 145.166684][ T7066] FAT-fs (loop5): Directory bread(block 70) failed [ 145.209304][ T7066] FAT-fs (loop5): Directory bread(block 71) failed [ 145.209435][ T7066] FAT-fs (loop5): Directory bread(block 72) failed [ 145.209469][ T7066] FAT-fs (loop5): Directory bread(block 73) failed [ 146.198396][ T7108] loop3: detected capacity change from 0 to 1764 [ 146.394675][ T7115] netlink: 36 bytes leftover after parsing attributes in process `syz.4.512'. [ 146.720740][ T7131] loop5: detected capacity change from 0 to 256 [ 146.742841][ T7131] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 146.869711][ T7137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.522'. [ 146.889855][ T7139] netlink: 20 bytes leftover after parsing attributes in process `syz.5.524'. [ 146.904800][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.524'. [ 146.924743][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.522'. [ 147.168821][ T7145] netlink: 16 bytes leftover after parsing attributes in process `syz.5.526'. [ 147.208852][ T7145] netlink: 24 bytes leftover after parsing attributes in process `syz.5.526'. [ 147.418148][ T7145] bond2: Removing last arp target with arp_interval on [ 147.479327][ T7158] process 'syz.0.532' launched './file0' with NULL argv: empty string added [ 147.497370][ T7145] bond2: entered allmulticast mode [ 147.549795][ T7145] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.581606][ T5752] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 147.776331][ T5752] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 147.813953][ T5752] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.824643][ T7162] loop1: detected capacity change from 0 to 512 [ 147.862862][ T5752] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 147.910898][ T5752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.995796][ T5752] hub 3-1:4.0: USB hub found [ 148.191023][ T5752] hub 3-1:4.0: 4 ports detected [ 148.207475][ T5752] usb 3-1: selecting invalid altsetting 1 [ 148.231341][ T5752] hub 3-1:4.0: Using single TT (err -22) [ 148.258225][ T5752] hub 3-1:4.0: insufficient power available to use all downstream ports [ 148.406017][ T5752] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 148.436928][ T5752] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 148.503719][ T5752] usb 3-1: USB disconnect, device number 8 [ 148.556899][ T5789] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 148.765797][ T5789] usb 2-1: Using ep0 maxpacket: 8 [ 148.799455][ T5789] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 148.835693][ T5789] usb 2-1: config 0 interface 0 has no altsetting 0 [ 148.863354][ T5789] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 148.882975][ T5789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.901820][ T5789] usb 2-1: Product: syz [ 148.906193][ T5789] usb 2-1: Manufacturer: syz [ 148.914200][ T5789] usb 2-1: SerialNumber: syz [ 148.928694][ T5789] usb 2-1: config 0 descriptor?? [ 148.962242][ T5789] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 149.021160][ T7188] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 149.195889][ T5789] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 149.225028][ T5789] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 149.330130][ T7170] loop5: detected capacity change from 0 to 32768 [ 149.374506][ T7170] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.537 (7170) [ 149.482892][ T7170] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 149.485413][ T29] usb 2-1: USB disconnect, device number 7 [ 149.516825][ T7170] BTRFS info (device loop5): using sha256 checksum algorithm [ 149.654672][ T7170] BTRFS info (device loop5): enabling ssd optimizations [ 149.672591][ T7170] BTRFS info (device loop5): turning on async discard [ 149.689724][ T7170] BTRFS info (device loop5): enabling free space tree [ 149.975560][ T5623] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.117684][ T7221] loop2: detected capacity change from 0 to 4096 [ 150.152647][ T7221] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 150.204758][ T7221] ntfs3(loop2): ino=9, mi_enum_attr [ 150.216651][ T7221] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 150.258899][ T7221] ntfs3(loop2): ino=9, mi_enum_attr [ 150.283999][ T7221] ntfs3(loop2): ino=1a, mi_enum_attr [ 150.317197][ T7221] ntfs3(loop2): ino=1a, mi_enum_attr [ 150.338200][ T7221] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 150.681205][ T7218] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 150.722067][ T7218] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 150.750296][ T7229] loop1: detected capacity change from 0 to 4096 [ 150.864029][ T7192] loop3: detected capacity change from 0 to 32768 [ 150.876095][ T7218] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 150.938251][ T7229] ntfs3(loop1): Failed to load $Extend (-22). [ 150.943777][ T7218] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 150.975151][ T7229] ntfs3(loop1): Failed to initialize $Extend. [ 150.975880][ T7218] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 151.031891][ T7192] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 151.135003][ T7218] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 151.165555][ T7229] ntfs3(loop1): ino=5, "/" indx_read_ra [ 151.240820][ T7192] XFS (loop3): Ending clean mount [ 151.288615][ T7218] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 151.323946][ T7218] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 151.416243][ T7218] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 151.494480][ T7218] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 151.543143][ T7218] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 151.551178][ T7192] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 151.612307][ T7218] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 151.653957][ T7257] netlink: 28 bytes leftover after parsing attributes in process `syz.1.569'. [ 151.677299][ T7218] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 151.680078][ T7257] netlink: 28 bytes leftover after parsing attributes in process `syz.1.569'. [ 151.683675][ T7218] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 151.752180][ T7218] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 151.818424][ T7263] veth0_vlan: entered allmulticast mode [ 151.818608][ T7218] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 151.865584][ T5621] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 151.872646][ T7218] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 151.919176][ T7218] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 152.073084][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.202028][ T5752] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 152.385202][ T5752] usb 6-1: unable to get BOS descriptor or descriptor too short [ 152.416520][ T7272] netlink: 'syz.0.589': attribute type 1 has an invalid length. [ 152.417119][ T5752] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.476786][ T5752] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.477621][ T7276] bond0: Error: Cannot enslave bond to itself. [ 152.500740][ T5752] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 152.521537][ T5752] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.539941][ T5752] usb 6-1: Product: syz [ 152.567124][ T5752] usb 6-1: Manufacturer: syz [ 152.590547][ T5752] usb 6-1: SerialNumber: syz [ 152.659570][ T5752] usb 6-1: selecting invalid altsetting 1 [ 152.702371][ T5752] usb 6-1: unit 6 not found! [ 152.941457][ T5635] Bluetooth: hci0: command 0x0c1a tx timeout [ 152.986346][ T5752] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 153.016591][ T5752] usb 6-1: USB disconnect, device number 4 [ 153.096714][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'. [ 153.121236][ T5913] udevd[5913]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.352581][ T5635] Bluetooth: hci4: command 0x0c1a tx timeout [ 153.502884][ T5635] Bluetooth: hci5: command 0x0c1a tx timeout [ 153.741666][ T5635] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.759190][ T7274] loop1: detected capacity change from 0 to 32768 [ 153.835568][ T7274] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.577 (7274) [ 153.901928][ T5635] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.914242][ T7274] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 153.923701][ T7312] netlink: 'syz.4.596': attribute type 5 has an invalid length. [ 153.943662][ T7312] ip6erspan0: entered promiscuous mode [ 153.956809][ T7274] BTRFS info (device loop1): using sha256 checksum algorithm [ 153.986492][ T7313] loop0: detected capacity change from 0 to 16 [ 154.020699][ T7313] erofs (device loop0): mounted with root inode @ nid 36. [ 154.119122][ T7319] loop3: detected capacity change from 0 to 4096 [ 154.141718][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout [ 154.211995][ T7274] BTRFS info (device loop1): rebuilding free space tree [ 154.310041][ T7337] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.366974][ T7340] netlink: 'syz.4.602': attribute type 6 has an invalid length. [ 154.383306][ T7274] BTRFS info (device loop1): turning off barriers [ 154.402186][ T7274] BTRFS info (device loop1): turning on sync discard [ 154.411907][ T7274] BTRFS info (device loop1): enabling free space tree [ 154.430804][ T7274] BTRFS info (device loop1): force clearing of disk cache [ 154.461717][ T7274] BTRFS info (device loop1): enabling auto defrag [ 154.604289][ T7345] xt_hashlimit: max too large, truncated to 1048576 [ 154.876503][ T5624] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 155.021865][ T5635] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.132404][ T7359] loop2: detected capacity change from 0 to 512 [ 155.231022][ T7359] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 155.245656][ T7359] EXT4-fs (loop2): orphan cleanup on readonly fs [ 155.310859][ T7359] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 155.387729][ T7359] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 155.421575][ T5635] Bluetooth: hci4: command 0x0c1a tx timeout [ 155.448138][ T7359] EXT4-fs error (device loop2): ext4_acquire_dquot:7032: comm syz.2.613: Failed to acquire dquot type 1 [ 155.492912][ T7361] loop3: detected capacity change from 0 to 4096 [ 155.518635][ T7359] loop2: lost filesystem error report for type 5 error -5 [ 155.521282][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 155.535694][ C0] EXT4-fs (loop2): initial error at time 1777625728: ext4_acquire_dquot:7032 [ 155.544576][ C0] EXT4-fs (loop2): last error at time 1777625728: ext4_acquire_dquot:7032 [ 155.582606][ T5635] Bluetooth: hci5: command 0x0c1a tx timeout [ 155.628458][ T7359] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.613: bg 0: block 40: padding at end of block bitmap is not set [ 155.665812][ T7361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.737100][ T30] audit: type=1326 audit(1777625728.418:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.1.618" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cff9cdd9 code=0x7ffc0000 [ 155.775162][ T7359] loop2: lost filesystem error report for type 5 error -117 [ 155.777672][ T7359] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 155.832410][ T5635] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.861713][ T7359] loop2: lost filesystem error report for type 5 error -117 [ 155.869250][ T7359] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #16: comm syz.2.613: data will be lost [ 155.906463][ T30] audit: type=1326 audit(1777625728.458:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.1.618" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cff9cdd9 code=0x7ffc0000 [ 155.948637][ T7359] EXT4-fs (loop2): 1 truncate cleaned up [ 155.981515][ T5635] Bluetooth: hci3: command 0x0c1a tx timeout [ 156.069362][ T7359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 156.106741][ T30] audit: type=1326 audit(1777625728.458:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.1.618" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f85cff9cdd9 code=0x7ffc0000 [ 156.123422][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.221821][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout [ 156.264315][ T30] audit: type=1326 audit(1777625728.458:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.1.618" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cff9cdd9 code=0x7ffc0000 [ 156.380670][ T30] audit: type=1326 audit(1777625728.458:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.1.618" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cff9cdd9 code=0x7ffc0000 [ 156.387738][ T7359] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.613: bad symlink. [ 156.760231][ T5622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.004198][ T7404] loop2: detected capacity change from 0 to 64 [ 157.087085][ T7404] syz.2.630: attempt to access beyond end of device [ 157.087085][ T7404] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 157.101834][ T5635] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.133203][ T7404] Buffer I/O error on dev loop2, logical block 512, async page read [ 157.171765][ T7404] syz.2.630: attempt to access beyond end of device [ 157.171765][ T7404] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 157.211446][ T7404] Buffer I/O error on dev loop2, logical block 56576, async page read [ 157.294517][ T7408] syz_tun: entered promiscuous mode [ 157.502737][ T5635] Bluetooth: hci4: command 0x0c1a tx timeout [ 157.565496][ T7390] loop4: detected capacity change from 0 to 32768 [ 157.578044][ T7390] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.624 (7390) [ 157.620048][ T7414] loop3: detected capacity change from 0 to 256 [ 157.659995][ T7390] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 157.661647][ T5635] Bluetooth: hci5: command 0x0c1a tx timeout [ 157.682460][ T7390] BTRFS info (device loop4): using sha256 checksum algorithm [ 157.747905][ T7417] loop1: detected capacity change from 0 to 512 [ 157.841813][ T7414] FAT-fs (loop3): Directory bread(block 64) failed [ 157.879453][ T7414] FAT-fs (loop3): Directory bread(block 65) failed [ 157.887122][ T7414] FAT-fs (loop3): Directory bread(block 66) failed [ 157.893726][ T7414] FAT-fs (loop3): Directory bread(block 67) failed [ 157.900464][ T7414] FAT-fs (loop3): Directory bread(block 68) failed [ 157.909308][ T5635] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.916150][ T7414] FAT-fs (loop3): Directory bread(block 69) failed [ 157.916403][ T30] audit: type=1400 audit(1777625730.598:8): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7429 comm="syz.5.641" [ 157.923231][ T7414] FAT-fs (loop3): Directory bread(block 70) failed [ 157.948433][ T7414] FAT-fs (loop3): Directory bread(block 71) failed [ 157.949232][ T7417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.955129][ T7414] FAT-fs (loop3): Directory bread(block 72) failed [ 157.976283][ T7414] FAT-fs (loop3): Directory bread(block 73) failed [ 158.001082][ T7417] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.061551][ T5635] Bluetooth: hci3: command 0x0c1a tx timeout [ 158.075939][ T7436] xt_TPROXY: Can be used only with -p tcp or -p udp [ 158.078350][ T7414] syz.3.637: attempt to access beyond end of device [ 158.078350][ T7414] loop3: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 158.097259][ T7414] syz.3.637: attempt to access beyond end of device [ 158.097259][ T7414] loop3: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 158.109349][ T7390] BTRFS info (device loop4): rebuilding free space tree [ 158.112315][ T30] audit: type=1800 audit(1777625730.798:9): pid=7414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.637" name="file0" dev="loop3" ino=1048625 res=0 errno=0 [ 158.184942][ T7417] EXT4-fs error (device loop1): ext4_xattr_block_list:766: inode #15: comm syz.1.638: corrupted xattr block 13: invalid checksum [ 158.222462][ T7390] BTRFS info (device loop4): turning off barriers [ 158.245590][ T7390] BTRFS info (device loop4): turning on sync discard [ 158.277131][ T7390] BTRFS info (device loop4): enabling free space tree [ 158.310648][ T7390] BTRFS info (device loop4): force clearing of disk cache [ 158.347803][ T7390] BTRFS info (device loop4): enabling auto defrag [ 158.485672][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.870823][ T7451] loop3: detected capacity change from 0 to 2048 [ 158.929122][ T5626] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 158.939069][ T7451] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.954709][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.649'. [ 159.093323][ T30] audit: type=1800 audit(1777625731.778:10): pid=7451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.647" name="file1" dev="loop3" ino=1367 res=0 errno=0 [ 159.893826][ T7471] loop5: detected capacity change from 0 to 128 [ 160.726417][ T7500] netlink: 20 bytes leftover after parsing attributes in process `syz.4.670'. [ 161.536163][ T7525] veth0_vlan: entered allmulticast mode [ 161.804901][ T7532] loop0: detected capacity change from 0 to 512 [ 161.813534][ T7532] EXT4-fs: Ignoring removed oldalloc option [ 161.853359][ T5789] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 161.915768][ T7532] EXT4-fs error (device loop0): ext4_iget_extra_inode:5127: inode #15: comm syz.0.685: corrupted in-inode xattr: invalid ea_ino [ 161.976114][ T7532] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 161.976465][ T7540] loop5: detected capacity change from 0 to 256 [ 162.001344][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 162.007820][ C0] EXT4-fs (loop0): initial error at time 1777625734: ext4_iget_extra_inode:5127: inode 15 [ 162.017855][ C0] EXT4-fs (loop0): last error at time 1777625734: ext4_iget_extra_inode:5127: inode 15 [ 162.031982][ T5789] usb 4-1: Using ep0 maxpacket: 8 [ 162.051450][ T7532] EXT4-fs (loop0): Remounting filesystem read-only [ 162.066705][ T5789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 162.075162][ T7532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.079953][ T5789] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 162.131001][ T7540] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 162.174688][ T5789] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 162.193069][ T5789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.228534][ T5789] usb 4-1: Product: syz [ 162.233016][ T5789] usb 4-1: Manufacturer: syz [ 162.238235][ T7540] exFAT-fs (loop5): valid_size(150994954) is greater than size(10) [ 162.247747][ T5789] usb 4-1: SerialNumber: syz [ 162.262843][ T5789] usb 4-1: config 0 descriptor?? [ 162.331789][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.586719][ T7552] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 162.831926][ T5772] usb 4-1: USB disconnect, device number 3 [ 163.033501][ T7544] loop1: detected capacity change from 0 to 32768 [ 163.076918][ T7544] JBD2: Ignoring recovery information on journal [ 163.158744][ T7564] netlink: 16 bytes leftover after parsing attributes in process `syz.5.698'. [ 163.224753][ T7544] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 163.288768][ T7547] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 163.317928][ T7547] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 163.336712][ T7547] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 163.344833][ T7547] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 163.351181][ T7547] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 163.358503][ T7547] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 163.484220][ T5624] ocfs2: Unmounting device (7,1) on (node local) [ 163.947118][ T7581] trusted_key: encrypted_key: hex blob is missing [ 164.232811][ T5772] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 164.427598][ T5772] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 164.458897][ T5772] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 164.506521][ T5772] usb 1-1: config 220 has no interface number 2 [ 164.541540][ T5635] Bluetooth: hci2: command 0x0c1a tx timeout [ 164.551863][ T5772] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 164.586400][ T5772] usb 1-1: config 220 interface 0 has no altsetting 0 [ 164.593746][ T5772] usb 1-1: config 220 interface 76 has no altsetting 0 [ 164.600722][ T5772] usb 1-1: config 220 interface 1 has no altsetting 0 [ 164.622755][ T5772] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 164.640442][ T5772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.658548][ T5772] usb 1-1: Product: syz [ 164.676823][ T5772] usb 1-1: Manufacturer: syz [ 164.704168][ T5772] usb 1-1: SerialNumber: syz [ 164.994594][ T5772] usb 1-1: selecting invalid altsetting 0 [ 165.051943][ T5772] usb 1-1: selecting invalid altsetting 0 [ 165.082151][ T5772] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 165.091535][ T5772] uvcvideo 1-1:220.0: No valid video chain found. [ 165.177569][ T5772] usb 1-1: selecting invalid altsetting 0 [ 165.199614][ T5772] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 165.248604][ T5772] usb 1-1: USB disconnect, device number 8 [ 165.266015][ T7623] loop4: detected capacity change from 0 to 2048 [ 165.306019][ T7623] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.335662][ T30] audit: type=1800 audit(1777625738.018:11): pid=7623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.730" name="file1" dev="loop4" ino=1367 res=0 errno=0 [ 165.365383][ T5635] Bluetooth: hci4: command 0x0c1a tx timeout [ 165.371519][ T4938] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.422515][ T5635] Bluetooth: hci3: command 0x0c1a tx timeout [ 165.429071][ T4938] Bluetooth: hci1: command 0x0c1a tx timeout [ 165.431350][ T5627] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 165.436945][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 165.644336][ T5627] usb 6-1: Using ep0 maxpacket: 32 [ 165.671138][ T5627] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 165.706933][ T5627] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.728712][ T7639] loop4: detected capacity change from 0 to 64 [ 165.743564][ T5627] usb 6-1: config 0 has no interface number 0 [ 165.780039][ T5627] usb 6-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 165.827795][ T5627] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 165.870961][ T5627] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.902986][ T7647] loop2: detected capacity change from 0 to 1024 [ 165.909473][ T5627] usb 6-1: Product: syz [ 165.918825][ T5627] usb 6-1: Manufacturer: syz [ 165.932008][ T5627] usb 6-1: SerialNumber: syz [ 165.979316][ T5627] usb 6-1: config 0 descriptor?? [ 165.986190][ T7647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 166.047185][ T5627] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.119/input/input14 [ 166.137075][ T7648] loop1: detected capacity change from 0 to 4096 [ 166.255625][ T5622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 166.287247][ T7648] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 166.336146][ T7648] ntfs3(loop1): Failed to load $Extend (-22). [ 166.353518][ T7648] ntfs3(loop1): Failed to initialize $Extend. [ 166.380785][ T5627] usb 6-1: USB disconnect, device number 5 [ 166.416528][ T7648] ntfs3(loop1): ino=5, "/" indx_read_ra [ 166.576164][ T7664] loop2: detected capacity change from 0 to 2048 [ 166.597169][ T5624] ntfs3(loop1): ino=9, ntfs_sync_fs failed, -22. [ 166.604574][ T5789] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 166.672424][ T7664] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.802777][ T5789] usb 4-1: Using ep0 maxpacket: 16 [ 166.826748][ T30] audit: type=1800 audit(1777625739.508:12): pid=7664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.747" name="file1" dev="loop2" ino=1367 res=0 errno=0 [ 166.838964][ T5789] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 166.927392][ T7670] netlink: 'syz.1.750': attribute type 2 has an invalid length. [ 166.953750][ T5789] usb 4-1: config 0 has no interface number 0 [ 166.986491][ T5789] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 166.999183][ T7670] netlink: 'syz.1.750': attribute type 1 has an invalid length. [ 167.054372][ T5789] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 167.088710][ T5789] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 167.140078][ T5789] usb 4-1: Product: syz [ 167.160710][ T5789] usb 4-1: SerialNumber: syz [ 167.186504][ T5789] usb 4-1: config 0 descriptor?? [ 167.235608][ T5789] cm109 4-1:0.8: invalid payload size 208, expected 4 [ 167.295927][ T5789] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input15 [ 167.513248][ T7675] bond3: option arp_validate: invalid value (2048) [ 167.547036][ T7675] bond3 (unregistering): Released all slaves [ 167.676488][ C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 167.684075][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.694633][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.702737][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.712799][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.721101][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.729233][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.740116][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.749819][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.757457][ T5789] usb 4-1: USB disconnect, device number 4 [ 167.763567][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 167.763606][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 167.804907][ T5789] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 168.132730][ T7676] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 168.155252][ T7676] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 168.182937][ T7672] loop4: detected capacity change from 0 to 32768 [ 168.193977][ T7676] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 168.215831][ T7676] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 168.224027][ T7672] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.751 (7672) [ 168.243954][ T7676] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 168.250612][ T7676] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 168.267751][ T7672] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.287685][ T7672] BTRFS info (device loop4): using sha256 checksum algorithm [ 168.471196][ T7672] BTRFS info (device loop4): enabling ssd optimizations [ 168.492955][ T7672] BTRFS info (device loop4): turning on async discard [ 168.501423][ T5772] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 168.515979][ T7672] BTRFS info (device loop4): enabling free space tree [ 168.680756][ T7720] netlink: 40 bytes leftover after parsing attributes in process `syz.3.766'. [ 168.712824][ T7721] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 168.714123][ T5772] usb 3-1: Using ep0 maxpacket: 16 [ 168.763708][ T5772] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 168.805761][ T5772] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 168.840982][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.867559][ T5626] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 168.894314][ T5772] usb 3-1: Product: syz [ 168.906877][ T5772] usb 3-1: Manufacturer: syz [ 168.927632][ T5772] usb 3-1: SerialNumber: syz [ 168.965138][ T5772] r8152-cfgselector 3-1: Unknown version 0x0000 [ 168.997383][ T5772] r8152-cfgselector 3-1: config 0 descriptor?? [ 169.421755][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 169.607516][ T5789] r8152-cfgselector 3-1: USB disconnect, device number 9 [ 169.991841][ T7756] netlink: 16 bytes leftover after parsing attributes in process `syz.4.782'. [ 170.132932][ T7758] tmpfs: Bad value for 'mpol' [ 170.221681][ T50] Bluetooth: hci5: command 0x0c1a tx timeout [ 170.227767][ T4938] Bluetooth: hci4: command 0x0c1a tx timeout [ 170.228707][ T5635] Bluetooth: hci0: command 0x0c1a tx timeout [ 170.302654][ T5635] Bluetooth: hci3: command 0x0c1a tx timeout [ 170.302669][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.601811][ T7771] ip6t_srh: unknown srh match flags 4000 [ 170.865595][ T7780] netlink: 29868 bytes leftover after parsing attributes in process `syz.4.795'. [ 171.434682][ T7800] loop4: detected capacity change from 0 to 512 [ 171.465485][ T7800] EXT4-fs: Ignoring removed orlov option [ 171.482949][ T7800] EXT4-fs: Ignoring removed i_version option [ 171.521439][ T7800] EXT4-fs: inline encryption not supported [ 171.574665][ T7800] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e854e01d, mo2=0003] [ 171.645056][ T7808] loop2: detected capacity change from 0 to 512 [ 171.652683][ T7808] EXT4-fs: Ignoring removed oldalloc option [ 171.654554][ T7800] System zones: [ 171.676340][ T7808] EXT4-fs error (device loop2): ext4_iget_extra_inode:5127: inode #15: comm syz.2.810: corrupted in-inode xattr: invalid ea_ino [ 171.688227][ T7800] 1-12 [ 171.727348][ T7800] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.804: inode has both inline data and extents flags [ 171.749749][ T7808] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 171.751273][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 171.766909][ C0] EXT4-fs (loop2): initial error at time 1777625744: ext4_iget_extra_inode:5127: inode 15 [ 171.776889][ C0] EXT4-fs (loop2): last error at time 1777625744: ext4_iget_extra_inode:5127: inode 15 [ 171.794529][ T7800] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 171.801276][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 171.810570][ T7808] EXT4-fs (loop2): Remounting filesystem read-only [ 171.817649][ C1] EXT4-fs (loop4): initial error at time 1777625744: ext4_orphan_get:1397: inode 15 [ 171.832891][ C1] EXT4-fs (loop4): last error at time 1777625744: ext4_orphan_get:1397: inode 15 [ 171.839979][ T7808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.859553][ T7800] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.804: couldn't read orphan inode 15 (err -117) [ 171.894620][ T7812] tmpfs: Bad value for 'mpol' [ 171.912138][ T7800] loop4: lost filesystem error report for type 5 error -117 [ 171.956014][ T7800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.058959][ T5622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.214342][ T7820] netlink: 148 bytes leftover after parsing attributes in process `syz.3.814'. [ 172.286965][ T7822] netlink: 'syz.2.812': attribute type 1 has an invalid length. [ 172.305929][ T5626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.324850][ T7822] netlink: 216 bytes leftover after parsing attributes in process `syz.2.812'. [ 172.545370][ T7827] netlink: 24 bytes leftover after parsing attributes in process `syz.3.817'. [ 172.906620][ T7801] loop1: detected capacity change from 0 to 32768 [ 172.976381][ T7801] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 173.108885][ T7801] XFS (loop1): Ending clean mount [ 173.256151][ T7801] XFS (loop1): Quotacheck needed: Please wait. [ 173.308254][ T7854] loop4: detected capacity change from 0 to 2048 [ 173.355239][ T7854] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.373382][ T7816] loop5: detected capacity change from 0 to 32768 [ 173.407208][ T7801] XFS (loop1): Quotacheck: Done. [ 173.445544][ T7860] capability: warning: `syz.0.828' uses deprecated v2 capabilities in a way that may be insecure [ 173.454673][ T7854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.521180][ T7816] JBD2: Ignoring recovery information on journal [ 173.584629][ T7864] loop3: detected capacity change from 0 to 4096 [ 173.589594][ T5624] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 173.603905][ T29] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 173.606921][ T7864] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 173.621063][ T7864] UDF-fs: Scanning with blocksize 512 failed [ 173.657391][ T7864] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.703439][ T5626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.729328][ T7816] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 173.782700][ T7864] UDF-fs: error (device loop3): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 173.836374][ T29] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 173.875529][ T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.925434][ T29] usb 3-1: config 0 has no interface number 0 [ 173.943014][ T29] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 173.988070][ T29] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 174.023136][ T29] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.088625][ T29] usb 3-1: config 0 interface 52 has no altsetting 0 [ 174.099474][ T5623] ocfs2: Unmounting device (7,5) on (node local) [ 174.135371][ T29] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 174.194603][ T29] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 174.238268][ T29] usb 3-1: Manufacturer: syz [ 174.286055][ T29] usb 3-1: config 0 descriptor?? [ 174.327204][ T29] hub 3-1:0.52: bad descriptor, ignoring hub [ 174.353912][ T29] hub 3-1:0.52: probe with driver hub failed with error -5 [ 174.602656][ T29] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 174.651009][ T29] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -5 [ 174.825884][ T7888] ubi31: attaching mtd0 [ 174.881418][ T5627] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 174.956350][ T7888] ubi31: scanning is finished [ 174.979344][ T7888] ubi31: empty MTD device detected [ 174.979346][ T5772] usb 3-1: USB disconnect, device number 10 [ 175.061555][ T5627] usb 5-1: Using ep0 maxpacket: 8 [ 175.085493][ T5627] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 175.100235][ T5627] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 175.117870][ T5627] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 175.135342][ T5627] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.155326][ T5627] usb 5-1: Product: syz [ 175.169060][ T5627] usb 5-1: Manufacturer: syz [ 175.199479][ T5627] usb 5-1: SerialNumber: syz [ 175.227658][ T5627] usb 5-1: config 0 descriptor?? [ 175.396368][ T7888] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 175.418301][ T7904] tmpfs: Bad value for 'mpol' [ 175.428739][ T7888] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 175.463425][ T7888] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 175.488365][ T7888] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 175.522330][ T7888] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 175.564550][ T7888] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 175.633991][ T7888] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3439297566 [ 175.663997][ T7888] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 175.736224][ T7903] ubi31: background thread "ubi_bgt31d" started, PID 7903 [ 175.758878][ T24] usb 5-1: USB disconnect, device number 5 [ 176.519494][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.860'. [ 176.604318][ T5789] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 176.791965][ T5789] usb 4-1: Using ep0 maxpacket: 16 [ 176.819424][ T5789] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 176.864130][ T5789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 176.901971][ T5789] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 176.940544][ T5789] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 176.965333][ T5789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.997951][ T5789] usb 4-1: Product: syz [ 177.026213][ T5789] usb 4-1: Manufacturer: syz [ 177.045946][ T5789] usb 4-1: SerialNumber: syz [ 177.077626][ T5789] usb 4-1: config 0 descriptor?? [ 177.095304][ T7929] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 177.113518][ T5789] mceusb 4-1:0.0: mceusb_dev_probe: device setup failed! [ 177.137167][ T5789] mceusb 4-1:0.0: probe with driver mceusb failed with error -12 [ 177.157276][ T7951] MPI: mpi too large (124808 bits) [ 177.200844][ T7954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.317655][ T5789] usb 4-1: USB disconnect, device number 5 [ 177.370005][ T7955] loop5: detected capacity change from 0 to 4096 [ 177.497015][ T7955] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 177.524678][ T7955] ntfs3(loop5): Failed to load $Extend (-22). [ 177.549498][ T7955] ntfs3(loop5): Failed to initialize $Extend. [ 177.641223][ T5635] Bluetooth: hci0: unexpected event for opcode 0x0c1b [ 177.658739][ T7955] ntfs3(loop5): ino=5, "/" indx_read_ra [ 177.699736][ T7961] bond3: option arp_validate: invalid value (2048) [ 177.752819][ T7968] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 177.754727][ T7961] bond3 (unregistering): Released all slaves [ 177.822401][ T5623] ntfs3(loop5): ino=9, ntfs_sync_fs failed, -22. [ 178.228021][ T7982] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.884' sets config #0 [ 178.415877][ T7986] loop5: detected capacity change from 0 to 1024 [ 178.515568][ T7986] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 178.663859][ T5623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 178.784972][ T7999] loop2: detected capacity change from 0 to 4096 [ 178.868314][ T7999] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 178.892959][ T7999] UDF-fs: Scanning with blocksize 512 failed [ 179.017002][ T7999] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.168635][ T7999] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328) [ 179.201014][ T8015] loop4: detected capacity change from 0 to 256 [ 179.245084][ T8015] exfat: Deprecated parameter 'utf8' [ 179.276288][ T8015] exfat: Deprecated parameter 'namecase' [ 179.297524][ T8015] exfat: Deprecated parameter 'namecase' [ 179.319667][ T8015] exfat: Deprecated parameter 'utf8' [ 179.465684][ T8015] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 179.550459][ T8015] exFAT-fs (loop4): failed to test first cluster bit of root dir(5) [ 179.969318][ T8032] loop1: detected capacity change from 0 to 1764 [ 180.094168][ T8040] loop4: detected capacity change from 0 to 1764 [ 180.131167][ T8032] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 180.260292][ T8046] netlink: 'syz.3.914': attribute type 2 has an invalid length. [ 180.301496][ T8046] netlink: 'syz.3.914': attribute type 1 has an invalid length. [ 180.379589][ T8046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.914'. [ 181.071816][ T8074] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 181.092373][ T5752] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 181.118418][ T8076] loop3: detected capacity change from 0 to 1024 [ 181.279215][ T8072] bond2: option arp_validate: invalid value (2048) [ 181.301695][ T5752] usb 5-1: Using ep0 maxpacket: 8 [ 181.314192][ T5752] usb 5-1: unable to get BOS descriptor or descriptor too short [ 181.344876][ T5752] usb 5-1: config 6 has an invalid interface number: 4 but max is 1 [ 181.361078][ T8072] bond2 (unregistering): Released all slaves [ 181.369922][ T5752] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 181.393675][ T8083] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 181.413745][ T5752] usb 5-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 181.450610][ T5752] usb 5-1: config 6 has no interface number 0 [ 181.479668][ T5752] usb 5-1: New USB device found, idVendor=1235, idProduct=0001, bcdDevice= 6.d0 [ 181.529113][ T5752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.554425][ T8086] veth0_vlan: entered allmulticast mode [ 181.559051][ T5752] usb 5-1: Product: syz [ 181.580901][ T5752] usb 5-1: Manufacturer: syz [ 181.600233][ T5752] usb 5-1: SerialNumber: syz [ 181.909075][ T5752] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 182.143484][ T8094] loop2: detected capacity change from 0 to 4096 [ 182.220139][ T8094] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 182.244859][ T8094] ntfs3(loop2): Failed to load $Extend (-22). [ 182.255497][ T8094] ntfs3(loop2): Failed to initialize $Extend. [ 182.300555][ T5752] usb 5-1: USB disconnect, device number 6 [ 182.376267][ T8094] ntfs3(loop2): ino=5, "/" indx_read_ra [ 182.562165][ T5622] ntfs3(loop2): ino=9, ntfs_sync_fs failed, -22. [ 182.874605][ T6046] udevd[6046]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:6.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.154663][ T8130] loop5: detected capacity change from 0 to 2048 [ 183.196640][ T8130] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 183.248816][ T8130] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.362271][ T30] audit: type=1326 audit(1777625756.048:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.2.961" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb77d9cdd9 code=0x7ffc0000 [ 183.477887][ T30] audit: type=1326 audit(1777625756.088:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.2.961" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb77d9cdd9 code=0x7ffc0000 [ 183.490641][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.962'. [ 183.617380][ T30] audit: type=1326 audit(1777625756.088:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.2.961" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb77d9cdd9 code=0x7ffc0000 [ 183.770956][ T30] audit: type=1326 audit(1777625756.088:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.2.961" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fbb77d9cdd9 code=0x7ffc0000 [ 183.941638][ T30] audit: type=1326 audit(1777625756.088:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.2.961" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb77d9cdd9 code=0x7ffc0000 [ 184.005794][ T30] audit: type=1326 audit(1777625756.088:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.2.961" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb77d9cdd9 code=0x7ffc0000 [ 184.037773][ T8159] loop0: detected capacity change from 0 to 256 [ 184.045748][ T8159] exfat: Deprecated parameter 'namecase' [ 184.052916][ T30] audit: type=1326 audit(1777625756.088:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.2.961" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb77d9cdd9 code=0x7ffc0000 [ 184.123086][ T5789] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 184.136481][ T8159] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 184.168745][ T30] audit: type=1326 audit(1777625756.088:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.2.961" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbb77d9cdd9 code=0x7ffc0000 [ 184.246311][ T30] audit: type=1326 audit(1777625756.088:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8141 comm="syz.2.961" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbb77d9cdd9 code=0x7ffc0000 [ 184.317521][ T5789] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 184.360752][ T5789] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 184.387876][ T8168] loop2: detected capacity change from 0 to 164 [ 184.429657][ T5789] usb 6-1: config 220 has no interface number 2 [ 184.455083][ T5789] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 184.464608][ T8168] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 184.481131][ T8170] loop3: detected capacity change from 0 to 256 [ 184.522264][ T5789] usb 6-1: config 220 interface 0 has no altsetting 0 [ 184.555491][ T5789] usb 6-1: config 220 interface 76 has no altsetting 0 [ 184.588007][ T5789] usb 6-1: config 220 interface 1 has no altsetting 0 [ 184.619757][ T5789] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 184.655834][ T8170] FAT-fs (loop3): Directory bread(block 64) failed [ 184.670522][ T5789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.687847][ T8170] FAT-fs (loop3): Directory bread(block 65) failed [ 184.715217][ T5789] usb 6-1: Product: syz [ 184.728710][ T5789] usb 6-1: Manufacturer: syz [ 184.742458][ T8170] FAT-fs (loop3): Directory bread(block 66) failed [ 184.755769][ T5789] usb 6-1: SerialNumber: syz [ 184.799228][ T8170] FAT-fs (loop3): Directory bread(block 67) failed [ 184.821689][ T8170] FAT-fs (loop3): Directory bread(block 68) failed [ 184.848083][ T8170] FAT-fs (loop3): Directory bread(block 69) failed [ 184.880705][ T8170] FAT-fs (loop3): Directory bread(block 70) failed [ 184.922965][ T8176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.978'. [ 184.934635][ T8170] FAT-fs (loop3): Directory bread(block 71) failed [ 184.964561][ T8170] FAT-fs (loop3): Directory bread(block 72) failed [ 184.992354][ T8170] FAT-fs (loop3): Directory bread(block 73) failed [ 185.067089][ T8178] openvswitch: netlink: Message has -2 unknown bytes. [ 185.083482][ T5789] usb 6-1: selecting invalid altsetting 0 [ 185.120660][ T5789] usb 6-1: selecting invalid altsetting 0 [ 185.171308][ T5789] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 185.192586][ T5789] uvcvideo 6-1:220.0: No valid video chain found. [ 185.246179][ T5789] usb 6-1: selecting invalid altsetting 0 [ 185.278428][ T5789] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 185.333004][ T5789] usb 6-1: USB disconnect, device number 6 [ 185.459439][ T8187] netlink: 'syz.1.984': attribute type 3 has an invalid length. [ 185.495253][ T8187] netlink: 224 bytes leftover after parsing attributes in process `syz.1.984'. [ 185.562374][ T5752] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 185.661730][ T5772] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 185.690971][ T8166] loop4: detected capacity change from 0 to 32768 [ 185.710378][ T8166] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.973 (8166) [ 185.752907][ T8166] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 185.773280][ T5752] usb 3-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 185.786462][ T8166] BTRFS info (device loop4): using sha256 checksum algorithm [ 185.801945][ T5752] usb 3-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 185.813362][ T5752] usb 3-1: Product: syz [ 185.846109][ T5772] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 185.859764][ T5752] usb 3-1: Manufacturer: syz [ 185.890648][ T5772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.909081][ T5752] usb 3-1: SerialNumber: syz [ 185.958666][ T5772] usb 1-1: Product: syz [ 185.964512][ T5752] usb 3-1: config 0 descriptor?? [ 185.985976][ T5772] usb 1-1: Manufacturer: syz [ 186.011093][ T5772] usb 1-1: SerialNumber: syz [ 186.042993][ T8166] BTRFS info (device loop4): enabling ssd optimizations [ 186.069547][ T5772] usb 1-1: config 0 descriptor?? [ 186.077888][ T8166] BTRFS info (device loop4): turning on async discard [ 186.094028][ T8166] BTRFS info (device loop4): enabling free space tree [ 186.112908][ T5752] usb 3-1: selecting invalid altsetting 1 [ 186.121946][ T5752] comedi comedi5: could not switch to alternate setting 1 [ 186.146919][ T5752] usbduxfast 3-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 186.190222][ T8217] loop1: detected capacity change from 0 to 512 [ 186.249394][ T8217] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 186.332977][ T5752] usb 3-1: USB disconnect, device number 11 [ 186.333846][ T8217] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 186.345640][ T5772] int51x1 1-1:0.0: probe with driver int51x1 failed with error -22 [ 186.401788][ T5626] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 186.429083][ T8217] EXT4-fs error (device loop1): ext4_validate_block_bitmap:440: comm syz.1.988: bg 0: block 248: padding at end of block bitmap is not set [ 186.444367][ T8224] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 186.474664][ T8217] loop1: lost filesystem error report for type 5 error -117 [ 186.475365][ T8217] Quota error (device loop1): write_blk: dquota write failed [ 186.482865][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 186.482899][ C0] EXT4-fs (loop1): last error at time 1777625759: ext4_validate_block_bitmap:440 [ 186.519850][ T8217] EXT4-fs error (device loop1): ext4_acquire_dquot:7032: comm syz.1.988: Failed to acquire dquot type 1 [ 186.599818][ T8217] loop1: lost filesystem error report for type 5 error -28 [ 186.616545][ T24] usb 1-1: USB disconnect, device number 9 [ 186.635096][ T8217] EXT4-fs (loop1): 1 truncate cleaned up [ 186.715376][ T8217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 186.988735][ T8232] PM: Enabling pm_trace changes system date and time during resume. [ 186.988735][ T8232] PM: Correct system time has to be restored manually after resume. [ 187.106121][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 187.485408][ T8246] loop3: detected capacity change from 0 to 512 [ 187.536764][ T8249] loop0: detected capacity change from 0 to 512 [ 187.575303][ T8246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.629267][ T8249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.644759][ T8246] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.675273][ T8256] ubi: mtd0 is already attached to ubi31 [ 187.731449][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 187.917293][ T24] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 187.949814][ T24] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 187.972988][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.004034][ T24] usb 5-1: config 220 has no interface number 2 [ 188.045398][ T24] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 188.106202][ T24] usb 5-1: config 220 interface 0 has no altsetting 0 [ 188.120640][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.154340][ T24] usb 5-1: config 220 interface 76 has no altsetting 0 [ 188.169537][ T24] usb 5-1: config 220 interface 1 has no altsetting 0 [ 188.181597][ T8261] loop5: detected capacity change from 0 to 4096 [ 188.225373][ T24] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 188.268109][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.314154][ T24] usb 5-1: Product: syz [ 188.334447][ T24] usb 5-1: Manufacturer: syz [ 188.364877][ T24] usb 5-1: SerialNumber: syz [ 188.375815][ T8261] ntfs3(loop5): ino=19, mi_enum_attr [ 188.412610][ T8261] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 188.683016][ T24] usb 5-1: selecting invalid altsetting 0 [ 188.714190][ T24] usb 5-1: selecting invalid altsetting 0 [ 188.735362][ T24] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 188.758615][ T24] uvcvideo 5-1:220.0: No valid video chain found. [ 188.864181][ T24] usb 5-1: selecting invalid altsetting 0 [ 188.887181][ T24] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 188.933298][ T24] usb 5-1: USB disconnect, device number 7 [ 189.242179][ T8290] loop1: detected capacity change from 0 to 1024 [ 189.435084][ T8290] hfsplus: keylen 65060 too large [ 189.461586][ T8290] hfsplus: xattr search failed [ 189.737555][ T8302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1028'. [ 189.761651][ T8304] capability: warning: `syz.0.1029' uses 32-bit capabilities (legacy support in use) [ 189.930122][ T8309] loop4: detected capacity change from 0 to 16 [ 189.985448][ T8309] erofs (device loop4): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 190.016213][ T8309] erofs (device loop4): mounted with root inode @ nid 36. [ 190.108221][ T8309] erofs (device loop4): corrupted dir block 1 @ nid 36 [ 190.321756][ T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 190.409052][ T8286] loop2: detected capacity change from 0 to 32768 [ 190.421894][ T8286] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1020 (8286) [ 190.482891][ T8286] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 190.514979][ T8286] BTRFS info (device loop2): using sha256 checksum algorithm [ 190.526198][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 190.578309][ T24] usb 4-1: New USB device found, idVendor=04b4, idProduct=9320, bcdDevice= 0.40 [ 190.630941][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.678351][ T8327] loop4: detected capacity change from 0 to 1024 [ 190.698120][ T24] usb 4-1: Product: syz [ 190.706071][ T8286] BTRFS info (device loop2): enabling ssd optimizations [ 190.719148][ T24] usb 4-1: Manufacturer: syz [ 190.719383][ T8343] xt_TPROXY: Can be used only with -p tcp or -p udp [ 190.734196][ T8286] BTRFS info (device loop2): turning on async discard [ 190.751661][ T8286] BTRFS info (device loop2): enabling free space tree [ 190.754231][ T24] usb 4-1: SerialNumber: syz [ 190.812701][ T8327] hfsplus: failed to load attributes file [ 190.881739][ T24] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 190.968677][ T5622] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 191.275607][ T24] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 191.388638][ T24] snd-usb-hiface 4-1:1.0: probe with driver snd-usb-hiface failed with error -22 [ 191.539134][ T24] usb 4-1: can't set first interface for hiFace device. [ 191.579738][ T24] snd-usb-hiface 4-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 191.606202][ T8358] loop0: detected capacity change from 0 to 256 [ 191.639569][ T8358] exfat: Deprecated parameter 'namecase' [ 191.654247][ T24] usb 4-1: can't set first interface for hiFace device. [ 191.689500][ T24] snd-usb-hiface 4-1:1.2: probe with driver snd-usb-hiface failed with error -5 [ 191.732728][ T8358] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0cee8ef, utbl_chksum : 0xe619d30d) [ 191.754190][ T24] usb 4-1: USB disconnect, device number 6 [ 191.892959][ T8323] loop5: detected capacity change from 0 to 32768 [ 191.927025][ T8365] netlink: 'syz.4.1052': attribute type 21 has an invalid length. [ 191.940251][ T8323] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1038 (8323) [ 191.962038][ T8365] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1052'. [ 192.018166][ T8365] netlink: 'syz.4.1052': attribute type 5 has an invalid length. [ 192.039100][ T8323] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 192.078940][ T5913] udevd[5913]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.080883][ T8365] netlink: 'syz.4.1052': attribute type 6 has an invalid length. [ 192.112564][ T8323] BTRFS info (device loop5): using sha256 checksum algorithm [ 192.191713][ T8365] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1052'. [ 192.332401][ T8384] loop2: detected capacity change from 0 to 1764 [ 192.380683][ T8323] BTRFS info (device loop5): rebuilding free space tree [ 192.388434][ T8368] loop1: detected capacity change from 0 to 4096 [ 192.519129][ T8368] ntfs3(loop1): ino=19, mi_enum_attr [ 192.529560][ T8323] BTRFS info (device loop5): enabling ssd optimizations [ 192.549938][ T8368] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 192.567987][ T8323] BTRFS info (device loop5): enabling free space tree [ 192.621237][ T8323] BTRFS info (device loop5): force clearing of disk cache [ 192.666379][ T8323] BTRFS info (device loop5): enabling auto defrag [ 192.705341][ T8323] BTRFS info (device loop5): max_inline set to 0 [ 192.789813][ T8393] loop3: detected capacity change from 0 to 2048 [ 192.884027][ T8394] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 193.020586][ T8393] syz.3.1058: attempt to access beyond end of device [ 193.020586][ T8393] loop3: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 193.042927][ T8393] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 193.106800][ T8393] syz.3.1058: attempt to access beyond end of device [ 193.106800][ T8393] loop3: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 193.232730][ T8393] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 193.308910][ T8393] syz.3.1058: attempt to access beyond end of device [ 193.308910][ T8393] loop3: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 193.310037][ T5623] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 193.352595][ T8402] loop0: detected capacity change from 0 to 512 [ 193.398447][ T8393] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 193.421829][ T8393] syz.3.1058: attempt to access beyond end of device [ 193.421829][ T8393] loop3: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 193.481444][ T8393] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 193.490232][ T8393] syz.3.1058: attempt to access beyond end of device [ 193.490232][ T8393] loop3: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 193.515110][ T8402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.530118][ T8393] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 193.553353][ T8402] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.592987][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.601408][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.634444][ T8393] syz.3.1058: attempt to access beyond end of device [ 193.634444][ T8393] loop3: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 193.755059][ T8393] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 193.795828][ T8402] EXT4-fs error (device loop0): ext4_empty_dir:3082: inode #12: comm syz.0.1062: invalid size [ 193.804835][ T8393] syz.3.1058: attempt to access beyond end of device [ 193.804835][ T8393] loop3: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 193.848887][ T8402] EXT4-fs (loop0): Remounting filesystem read-only [ 193.853484][ T8409] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.892064][ T8393] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 193.902489][ T8409] EXT4-fs error (device loop4): ext4_get_first_dir_block:3560: inode #11: comm syz.4.1065: directory missing '..' [ 193.930971][ T8393] syz.3.1058: attempt to access beyond end of device [ 193.930971][ T8393] loop3: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 193.970089][ T8393] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 193.983075][ T8393] syz.3.1058: attempt to access beyond end of device [ 193.983075][ T8393] loop3: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 194.068488][ T8393] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 194.109501][ T8393] syz.3.1058: attempt to access beyond end of device [ 194.109501][ T8393] loop3: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 194.178143][ T5626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.197970][ T5625] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.208127][ T36] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 194.215798][ T8393] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 194.259318][ T8393] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 194.276146][ T36] __quota_error: 1 callbacks suppressed [ 194.284860][ T8393] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 194.298055][ T8393] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 194.311900][ T36] Quota error (device loop0): write_blk: dquota write failed [ 194.331731][ T8393] NILFS (loop3): I/O error reading b-tree node block (ino=16, blocknr=15) [ 194.341607][ T36] Quota error (device loop0): free_dqentry: Can't write quota data block 5 [ 194.369749][ T30] audit: type=1800 audit(1777625767.048:22): pid=8393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1058" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 194.393695][ T36] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 194.430673][ T36] Quota error (device loop0): write_blk: dquota write failed [ 194.467489][ T36] Quota error (device loop0): free_dqentry: Can't write quota data block 5 [ 194.755587][ T8427] set_capacity_and_notify: 1 callbacks suppressed [ 194.755613][ T8427] loop2: detected capacity change from 0 to 4096 [ 194.905225][ T8427] ntfs3(loop2): ino=19, mi_enum_attr [ 194.927534][ T8427] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 195.434224][ T8452] loop2: detected capacity change from 0 to 1024 [ 195.494727][ T8452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.544622][ T8459] CIFS mount error: No usable UNC path provided in device string! [ 195.544622][ T8459] [ 195.661631][ T8459] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 195.688697][ T8452] EXT4-fs error (device loop2): ext4_get_first_dir_block:3560: inode #11: comm syz.2.1082: directory missing '..' [ 195.947416][ T5622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.209639][ T8443] loop4: detected capacity change from 0 to 32768 [ 196.295016][ T8443] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 196.456186][ T8443] XFS (loop4): Ending clean mount [ 196.570278][ T8443] XFS (loop4): Quotacheck needed: Please wait. [ 196.615159][ T8446] loop3: detected capacity change from 0 to 32768 [ 196.740104][ T8443] XFS (loop4): Quotacheck: Done. [ 196.829168][ T5626] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 197.046265][ T8497] trusted_key: encrypted_key: insufficient parameters specified [ 197.067730][ T8499] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 198.093701][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 198.103693][ T8519] netlink: 'syz.5.1112': attribute type 9 has an invalid length. [ 198.273859][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 198.298883][ T24] usb 3-1: config 0 has an invalid interface number: 37 but max is 1 [ 198.337098][ T24] usb 3-1: config 0 has no interface number 1 [ 198.360394][ T8493] loop0: detected capacity change from 0 to 32768 [ 198.369067][ T8525] loop3: detected capacity change from 0 to 1024 [ 198.378116][ T24] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 198.409160][ T24] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 198.417466][ T24] usb 3-1: Product: syz [ 198.424529][ T24] usb 3-1: Manufacturer: syz [ 198.429220][ T24] usb 3-1: SerialNumber: syz [ 198.445576][ T8525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.463966][ T24] usb 3-1: config 0 descriptor?? [ 198.497992][ T8493] find_entry called with index >= next_index [ 198.550771][ T8493] find_entry called with index >= next_index [ 198.571928][ T8493] find_entry called with index >= next_index [ 198.590852][ T8493] find_entry called with index >= next_index [ 198.593164][ T8525] EXT4-fs error (device loop3): ext4_get_first_dir_block:3560: inode #11: comm syz.3.1103: directory missing '..' [ 198.599153][ T8493] find_entry called with index >= next_index [ 198.633066][ T8493] add_index: next_index = 0. Resetting! [ 198.647778][ T8493] find_entry called with index >= next_index [ 198.666556][ T8493] find_entry called with index >= next_index [ 198.678852][ T8534] loop4: detected capacity change from 0 to 256 [ 198.702093][ T8493] find_entry called with index >= next_index [ 198.709074][ T24] qcserial 3-1:0.37: Qualcomm USB modem converter detected [ 198.720841][ T8534] exfat: Deprecated parameter 'namecase' [ 198.735170][ T8493] find_entry called with index >= next_index [ 198.810372][ T8534] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0cee8ef, utbl_chksum : 0xe619d30d) [ 198.854120][ T5621] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.935346][ T24] usb 3-1: USB disconnect, device number 12 [ 199.009874][ T24] qcserial 3-1:0.37: device disconnected [ 199.398854][ T8548] IPv6: sit1: Disabled Multicast RS [ 200.119846][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1136'. [ 200.394028][ T8578] netlink: 'syz.1.1139': attribute type 9 has an invalid length. [ 200.544382][ T8586] loop0: detected capacity change from 0 to 64 [ 200.677527][ T8582] bond3 (unregistering): Released all slaves [ 200.914865][ T8593] loop4: detected capacity change from 0 to 256 [ 200.962878][ T8593] exfat: Deprecated parameter 'utf8' [ 201.022190][ T8593] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d) [ 201.247349][ T8601] loop2: detected capacity change from 0 to 512 [ 201.322737][ T8601] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 201.415263][ T8601] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 201.474983][ T8601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.596631][ T8601] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 201.688379][ T8556] infiniband syz2: set active [ 201.711247][ T8556] infiniband syz2: added ipvlan1 [ 201.784907][ T5622] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.864898][ T8556] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 201.911241][ T8556] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 201.947006][ T8556] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 202.112518][ T8623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1160'. [ 202.229535][ T8556] RDS/IB: syz2: added [ 202.246463][ T8556] smc: adding ib device syz2 with port count 1 [ 202.268709][ T8556] smc: ib device syz2 port 1 has no pnetid [ 202.329483][ T8607] loop5: detected capacity change from 0 to 32768 [ 202.402640][ T8607] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 202.460387][ T8644] Scaler: ================= START STATUS ================= [ 202.471490][ T8642] loop1: detected capacity change from 0 to 1024 [ 202.481138][ T8644] Scaler: ================== END STATUS ================== [ 202.574747][ T1982] I/O error, dev loop2, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 202.623010][ T8607] XFS (loop5): Ending clean mount [ 202.695447][ T8642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.764702][ T8607] XFS (loop5): Quotacheck needed: Please wait. [ 202.854115][ T8642] EXT4-fs error (device loop1): ext4_get_first_dir_block:3560: inode #11: comm syz.1.1166: directory missing '..' [ 202.888841][ T8652] erspan1: entered allmulticast mode [ 203.044118][ T8607] XFS (loop5): Quotacheck: Done. [ 203.137008][ T5624] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.243468][ T5623] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 203.274841][ T8659] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 203.281584][ T8659] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 203.344376][ T8659] vhci_hcd vhci_hcd.0: Device attached [ 203.562066][ T5752] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 203.579368][ T5789] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 203.761676][ T5752] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 203.790639][ T5752] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.832233][ T5752] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.873991][ T5752] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 203.900634][ T5752] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 203.970697][ T5752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.011119][ T5752] usb 5-1: config 0 descriptor?? [ 204.272697][ T5752] usbhid 5-1:0.0: can't add hid device: -71 [ 204.279369][ T8664] vhci_hcd: connection reset by peer [ 204.304088][ T5752] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 204.334341][ T3305] vhci_hcd vhci_hcd.4: stop threads [ 204.342961][ T8686] loop0: detected capacity change from 0 to 4096 [ 204.360588][ T5752] usb 5-1: USB disconnect, device number 8 [ 204.366219][ T3305] vhci_hcd vhci_hcd.4: release socket [ 204.388725][ T3305] vhci_hcd vhci_hcd.4: disconnect device [ 204.396820][ T8686] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 204.503441][ T8686] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 204.531942][ T8686] ntfs3(loop0): ino=19, mi_enum_attr [ 204.572777][ T8690] loop5: detected capacity change from 0 to 4096 [ 204.598274][ T8690] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 204.703655][ T8690] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 204.733841][ T8690] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 204.856625][ T8690] ntfs3(loop5): ino=1e, mi_enum_attr [ 204.862417][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1186'. [ 204.891644][ T8690] ntfs3(loop5): ino=1e, mi_enum_attr [ 204.947729][ T8690] ntfs3(loop5): ino=1e, mi_enum_attr [ 205.192842][ T36] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22. [ 205.236427][ T5623] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 205.258695][ T5623] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 205.303345][ T5623] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 205.479632][ T8688] loop1: detected capacity change from 0 to 32768 [ 205.515090][ T8688] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1183 (8688) [ 205.577126][ T8688] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 205.626492][ T8688] BTRFS info (device loop1): using sha256 checksum algorithm [ 205.845243][ T8688] BTRFS info (device loop1): enabling ssd optimizations [ 205.899662][ T8688] BTRFS info (device loop1): turning on async discard [ 205.931178][ T8688] BTRFS info (device loop1): enabling free space tree [ 206.185183][ T5624] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.207338][ T8730] loop0: detected capacity change from 0 to 4096 [ 206.372148][ T8737] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.446363][ T8730] NILFS error (device loop0): nilfs_find_entry: dir 2 size 2147487744 exceeds block count 1 [ 206.554985][ T8730] Remounting filesystem read-only [ 206.714835][ T8744] loop5: detected capacity change from 0 to 64 [ 206.790277][ T5625] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 207.106762][ T8704] loop4: detected capacity change from 0 to 32768 [ 207.140464][ T5635] Bluetooth: hci2: unexpected event for opcode 0x0c22 [ 207.154720][ T8704] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1192 (8704) [ 207.247360][ T5772] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 207.279302][ T8704] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 207.309412][ T8704] BTRFS info (device loop4): using sha256 checksum algorithm [ 207.433185][ T5772] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 207.447759][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.467660][ T5772] usb 3-1: Product: syz [ 207.475309][ T5772] usb 3-1: Manufacturer: syz [ 207.487432][ T5772] usb 3-1: SerialNumber: syz [ 207.488750][ T8704] BTRFS info (device loop4): enabling ssd optimizations [ 207.512902][ T5772] usb 3-1: config 0 descriptor?? [ 207.518348][ T5627] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 207.553919][ T8704] BTRFS info (device loop4): turning on async discard [ 207.568097][ T5772] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 013 [ 207.596089][ T8704] BTRFS info (device loop4): enabling free space tree [ 207.678336][ T5627] usb 6-1: Using ep0 maxpacket: 32 [ 207.719703][ T5627] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 207.757495][ T5627] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 207.791974][ T5627] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.839962][ T5627] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 207.858200][ T5626] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 207.882644][ T5627] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 207.895424][ T5627] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.905514][ T5627] usb 6-1: Product: syz [ 207.929571][ T5627] usb 6-1: Manufacturer: syz [ 207.949058][ T5627] usb 6-1: SerialNumber: syz [ 207.956173][ T5772] (null): failure reading functionality [ 208.006735][ T5772] i2c i2c-1: failure reading functionality [ 208.016646][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 208.102656][ T5627] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input18 [ 208.120095][ T5772] i2c i2c-1: connected i2c-tiny-usb device [ 208.165373][ T5772] usb 3-1: USB disconnect, device number 13 [ 208.268621][ T5627] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 208.292084][ T5627] (id 0x00) [ 208.467015][ T5627] rc_core: IR keymap rc-imon-pad not found [ 208.486209][ T5627] Registered IR keymap rc-empty [ 208.516904][ T5627] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 208.530117][ T5627] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 208.569911][ T5627] imon:send_packet: packet tx failed (-71) [ 208.617510][ T5627] imon 6-1:155.0: remote input dev register failed [ 208.634473][ T5627] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 208.697173][ T5789] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 208.814497][ T5627] imon 6-1:155.0: unable to initialize intf0, err 0 [ 208.866497][ T5627] imon:imon_probe: failed to initialize context! [ 208.892277][ T5627] imon 6-1:155.0: unable to register, err -19 [ 208.973933][ T5627] usb 6-1: USB disconnect, device number 7 [ 209.024338][ T8779] loop0: detected capacity change from 0 to 32768 [ 209.055613][ T8779] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1213 (8779) [ 209.183510][ T8779] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 209.235074][ T8779] BTRFS info (device loop0): using sha256 checksum algorithm [ 209.322075][ T8803] loop5: detected capacity change from 0 to 1024 [ 209.424768][ T8779] BTRFS info (device loop0): enabling ssd optimizations [ 209.491990][ T8779] BTRFS info (device loop0): turning on async discard [ 209.522490][ T8803] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.568768][ T8779] BTRFS info (device loop0): enabling free space tree [ 209.664220][ T8803] EXT4-fs error (device loop5): ext4_get_first_dir_block:3560: inode #11: comm syz.5.1223: directory missing '..' [ 209.931455][ T5625] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 209.987682][ T5623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.851302][ T8849] dlm: no locking on control device [ 211.258203][ T8826] loop4: detected capacity change from 0 to 32768 [ 211.348610][ T8826] ERROR: (device loop4): dtSearch: stack overrun! [ 211.348610][ T8826] [ 211.393898][ T8826] ERROR: (device loop4): remounting filesystem as read-only [ 211.425376][ T5627] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 211.450562][ T8826] btstack dump: [ 211.469793][ T8826] bn = 0, index = 4 [ 211.484078][ T8826] bn = 0, index = 4 [ 211.525040][ T8826] bn = 0, index = 4 [ 211.541528][ T8826] bn = 0, index = 4 [ 211.560074][ T8826] bn = 0, index = 4 [ 211.570657][ T8826] bn = 0, index = 4 [ 211.588546][ T8826] bn = 0, index = 4 [ 211.598549][ T8826] bn = 0, index = 0 [ 211.611906][ T5627] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 211.639164][ T8826] jfs_lookup: dtSearch returned -5 [ 211.652345][ T5627] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.689452][ T5627] usb 2-1: Product: syz [ 211.711987][ T5627] usb 2-1: Manufacturer: syz [ 211.729973][ T5627] usb 2-1: SerialNumber: syz [ 211.776048][ T5627] usb 2-1: config 0 descriptor?? [ 211.898335][ T5635] Bluetooth: hci6: urb ffff88807d17f800 submission failed (2) [ 211.948269][ T8867] loop4: detected capacity change from 0 to 256 [ 211.987707][ T8867] exfat: Deprecated parameter 'utf8' [ 212.004949][ T8867] exfat: Deprecated parameter 'namecase' [ 212.037524][ T8867] exfat: Deprecated parameter 'namecase' [ 212.060573][ T8867] exfat: Deprecated parameter 'utf8' [ 212.104339][ T8867] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 212.105330][ T5627] usb 2-1: USB disconnect, device number 8 [ 212.152748][ T8867] exFAT-fs (loop4): failed to test first cluster bit of root dir(5) [ 212.369394][ T8853] loop5: detected capacity change from 0 to 32768 [ 213.123960][ T8863] loop0: detected capacity change from 0 to 32768 [ 213.270649][ T8863] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 213.435852][ T8863] XFS (loop0): Ending clean mount [ 213.439746][ T8905] loop5: detected capacity change from 0 to 256 [ 213.504054][ T8905] FAT-fs (loop5): error, clusters badly computed (0 != 128) [ 213.508042][ T8863] XFS (loop0): Quotacheck needed: Please wait. [ 213.573349][ T8905] FAT-fs (loop5): Filesystem has been set read-only [ 213.616573][ T8905] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 213.689612][ T8863] XFS (loop0): Quotacheck: Done. [ 213.996358][ T5625] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 214.114553][ T8918] xt_nfacct: accounting object `syz0' does not exist [ 214.198574][ T8921] netlink: 'syz.5.1269': attribute type 2 has an invalid length. [ 214.243683][ T8921] netlink: 'syz.5.1269': attribute type 1 has an invalid length. [ 214.280269][ T8921] netlink: 'syz.5.1269': attribute type 1 has an invalid length. [ 214.665070][ T8927] loop1: detected capacity change from 0 to 4096 [ 214.705099][ T8927] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 214.892798][ T8927] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 214.912217][ T8941] ipt_rpfilter: unknown options [ 214.924664][ T8927] ntfs3(loop1): ino=19, mi_enum_attr [ 215.202200][ T8952] loop3: detected capacity change from 0 to 256 [ 215.247578][ T8952] exfat: Deprecated parameter 'utf8' [ 215.269290][ T8952] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 215.318912][ T8952] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 215.390593][ T8955] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1288'. [ 215.585315][ T8958] loop2: detected capacity change from 0 to 2048 [ 215.698045][ T8958] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.795758][ T8958] UDF-fs: unknown compression code (0) [ 216.159476][ T8969] loop0: detected capacity change from 0 to 4096 [ 216.359488][ T8969] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 216.413185][ T8969] ntfs3(loop0): Failed to load $Extend (-22). [ 216.452558][ T8969] ntfs3(loop0): Failed to initialize $Extend. [ 216.466962][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.677812][ T8980] loop4: detected capacity change from 0 to 4096 [ 216.801717][ T8980] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 216.889458][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.895392][ T8980] ntfs3(loop4): Failed to load $Extend (-22). [ 216.913493][ T8985] loop5: detected capacity change from 0 to 4096 [ 216.948896][ T8985] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 216.959861][ T8980] ntfs3(loop4): Failed to initialize $Extend. [ 217.062708][ T8985] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 217.095624][ T8985] ntfs3(loop5): ino=19, mi_enum_attr [ 217.224886][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.537284][ T12] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.702079][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 217.881565][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.903324][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.913642][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 217.919088][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.929798][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.939870][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.950398][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 217.977619][ T24] usb 3-1: config 6 has an invalid interface number: 57 but max is 0 [ 217.985865][ T24] usb 3-1: config 6 has no interface number 0 [ 217.992112][ T29] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 218.000156][ T24] usb 3-1: config 6 interface 57 has no altsetting 0 [ 218.013354][ T24] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=67.16 [ 218.031994][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.047773][ T24] usb 3-1: Product: syz [ 218.056585][ T24] usb 3-1: Manufacturer: syz [ 218.061393][ T24] usb 3-1: SerialNumber: syz [ 218.118978][ T9011] loop1: detected capacity change from 0 to 16 [ 218.147838][ T9011] erofs (device loop1): mounted with root inode @ nid 36. [ 218.164779][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 218.193181][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 218.224840][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 218.261777][ T29] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 218.315233][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 218.332608][ T24] legousbtower 3-1:6.57: interrupt endpoints not found [ 218.396959][ T29] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 218.408033][ T24] usb 3-1: USB disconnect, device number 14 [ 218.447828][ T29] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 218.491537][ T12] bridge_slave_1: left allmulticast mode [ 218.499133][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.548051][ T12] bridge_slave_1: left promiscuous mode [ 218.566920][ T29] usb 1-1: config 0 descriptor?? [ 218.588965][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.597292][ T9000] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 218.755607][ T12] bridge_slave_0: left allmulticast mode [ 218.784482][ T12] bridge_slave_0: left promiscuous mode [ 218.795913][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.956540][ C1] Bluetooth: hci6: Unexpected continuation: 1 bytes [ 219.216115][ T50] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 219.224480][ T5789] usb 1-1: USB disconnect, device number 10 [ 219.339988][ T9036] loop5: detected capacity change from 0 to 512 [ 219.380226][ T9036] EXT4-fs: Ignoring removed nobh option [ 219.434533][ T9036] EXT4-fs error (device loop5): ext4_iget_extra_inode:5127: inode #15: comm syz.5.1321: corrupted in-inode xattr: overlapping e_value [ 219.460803][ T9036] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 219.461144][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 219.476748][ C1] EXT4-fs (loop5): initial error at time 1777626048: ext4_iget_extra_inode:5127: inode 15 [ 219.486735][ C1] EXT4-fs (loop5): last error at time 1777626048: ext4_iget_extra_inode:5127: inode 15 [ 219.526303][ T9036] EXT4-fs error (device loop5): ext4_orphan_get:1400: comm syz.5.1321: couldn't read orphan inode 15 (err -117) [ 219.556825][ T9036] loop5: lost filesystem error report for type 5 error -117 [ 219.563251][ T9036] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.834731][ T5623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.060995][ T50] Bluetooth: hci5: command tx timeout [ 220.226091][ T9063] loop4: detected capacity change from 0 to 2048 [ 220.295022][ T9065] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 220.355096][ T9063] bio_check_eod: 4 callbacks suppressed [ 220.355120][ T9063] syz.4.1329: attempt to access beyond end of device [ 220.355120][ T9063] loop4: rw=0, sector=2198922592328, nr_sectors = 2 limit=2048 [ 220.438603][ T9063] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=1) [ 220.614229][ T9072] loop5: detected capacity change from 0 to 164 [ 220.625704][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.669946][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.695190][ T12] bond0 (unregistering): Released all slaves [ 220.705263][ T9071] loop0: detected capacity change from 0 to 4096 [ 220.717661][ T9072] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 220.769914][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 221.202926][ T9071] ntfs3(loop0): ino=21, The size of extended attributes must not exceed 64KiB [ 221.384900][ T9090] netlink: 'syz.2.1340': attribute type 4 has an invalid length. [ 221.433504][ T9090] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1340'. [ 222.130031][ T50] Bluetooth: hci5: command tx timeout [ 222.612103][ T5752] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 222.789418][ T5752] usb 1-1: unable to get BOS descriptor or descriptor too short [ 222.824237][ T5752] usb 1-1: not running at top speed; connect to a high speed hub [ 222.862835][ T5752] usb 1-1: config 197 has an invalid interface number: 211 but max is 0 [ 222.891274][ T5752] usb 1-1: config 197 has no interface number 0 [ 222.924420][ T5752] usb 1-1: config 197 interface 211 has no altsetting 0 [ 222.963172][ T5752] usb 1-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=3f.c6 [ 223.007365][ T5752] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.030062][ T5752] usb 1-1: Product: syz [ 223.048903][ T5752] usb 1-1: Manufacturer: syz [ 223.071293][ T5752] usb 1-1: SerialNumber: syz [ 223.102146][ T9143] loop4: detected capacity change from 0 to 2048 [ 223.138670][ T9143] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 223.228859][ T9146] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 223.322746][ T9143] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 147 [ 223.356313][ T9143] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15) [ 223.402991][ T5752] upd78f0730 1-1:197.211: upd78f0730 converter detected [ 223.435291][ T9143] Remounting filesystem read-only [ 223.452419][ T9143] NILFS (loop4): error -5 truncating bmap (ino=15) [ 223.477913][ T9143] syz.4.1359: attempt to access beyond end of device [ 223.477913][ T9143] loop4: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 223.504846][ T9143] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=1) [ 223.517542][ T5752] usb 1-1: upd78f0730 converter now attached to ttyUSB0 [ 223.607964][ T5752] usb 1-1: USB disconnect, device number 11 [ 223.614396][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 223.643568][ T5626] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 223.694787][ T5752] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 223.756443][ T5752] upd78f0730 1-1:197.211: device disconnected [ 223.767827][ T12] hsr_slave_0: left promiscuous mode [ 223.791667][ T12] hsr_slave_1: left promiscuous mode [ 223.812164][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.830144][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.864601][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.893814][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.035593][ T12] veth1_macvtap: left promiscuous mode [ 224.067044][ T12] veth0_macvtap: left promiscuous mode [ 224.121641][ T12] veth1_vlan: left promiscuous mode [ 224.158405][ T12] veth0_vlan: left promiscuous mode [ 224.209081][ T50] Bluetooth: hci5: command tx timeout [ 224.274612][ T9155] loop4: detected capacity change from 0 to 4096 [ 224.356606][ T9155] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 224.496241][ T9155] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 224.544496][ T9155] ntfs3(loop4): ino=19, mi_enum_attr [ 224.832591][ T9171] xt_l2tp: unknown flags: 10 [ 225.200318][ T9182] netlink: 'syz.2.1377': attribute type 1 has an invalid length. [ 225.225996][ T9182] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1377'. [ 225.226416][ T89] smc: removing ib device syz2 [ 225.342189][ T9184] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.941265][ T12] team0 (unregistering): Port device team_slave_1 removed [ 226.012377][ T12] team0 (unregistering): Port device team_slave_0 removed [ 226.297940][ T50] Bluetooth: hci5: command tx timeout [ 226.313446][ T9215] i2c i2c-0: Invalid block write size 34 [ 226.340335][ T5627] syz2: Port: 1 Link DOWN [ 226.502360][ T9200] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 226.544470][ T9200] bond3 (unregistering): Released all slaves [ 226.639676][ T5752] ================================================================== [ 226.647779][ T5752] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x190/0x1c0 [ 226.656669][ T5752] Read of size 8 at addr ffff88807ead82f0 by task kworker/0:4/5752 [ 226.664734][ T5752] [ 226.667054][ T5752] CPU: 0 UID: 0 PID: 5752 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 226.667094][ T5752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 226.667118][ T5752] Workqueue: events smc_ib_port_event_work [ 226.667168][ T5752] Call Trace: [ 226.667179][ T5752] [ 226.667191][ T5752] dump_stack_lvl+0x100/0x190 [ 226.667228][ T5752] print_report+0x13d/0x4b0 [ 226.667277][ T5752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.667322][ T5752] ? __virt_addr_valid+0x239/0x430 [ 226.667358][ T5752] ? __ethtool_get_link_ksettings+0x190/0x1c0 [ 226.667413][ T5752] kasan_report+0xdf/0x1d0 [ 226.667464][ T5752] ? __ethtool_get_link_ksettings+0x190/0x1c0 [ 226.667526][ T5752] __ethtool_get_link_ksettings+0x190/0x1c0 [ 226.667587][ T5752] __ethtool_get_link_ksettings+0x144/0x1c0 [ 226.667647][ T5752] ib_get_eth_speed+0x13a/0xb40 [ 226.667685][ T5752] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 226.667731][ T5752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.667776][ T5752] ? do_raw_spin_unlock+0x145/0x1e0 [ 226.667834][ T5752] rxe_query_port+0x12a/0x330 [ 226.667887][ T5752] ib_query_port+0x445/0x8b0 [ 226.667925][ T5752] smc_ib_port_event_work+0x14c/0xbd0 [ 226.667976][ T5752] ? smc_ib_port_event_work+0x54/0xbd0 [ 226.668023][ T5752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.668070][ T5752] process_one_work+0xa0e/0x1980 [ 226.668123][ T5752] ? __pfx_process_one_work+0x10/0x10 [ 226.668163][ T5752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.668211][ T5752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.668256][ T5752] worker_thread+0x5ef/0xe50 [ 226.668306][ T5752] ? __pfx_worker_thread+0x10/0x10 [ 226.668348][ T5752] ? kthread+0x13a/0x450 [ 226.668382][ T5752] ? __pfx_worker_thread+0x10/0x10 [ 226.668421][ T5752] kthread+0x370/0x450 [ 226.668456][ T5752] ? __pfx_kthread+0x10/0x10 [ 226.668493][ T5752] ret_from_fork+0x72b/0xd50 [ 226.668533][ T5752] ? __pfx_ret_from_fork+0x10/0x10 [ 226.668573][ T5752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.668614][ T5752] ? __switch_to+0x800/0x1100 [ 226.668662][ T5752] ? __switch_to_asm+0x39/0x70 [ 226.668707][ T5752] ? __pfx_kthread+0x10/0x10 [ 226.668744][ T5752] ret_from_fork_asm+0x1a/0x30 [ 226.668801][ T5752] [ 226.668812][ T5752] [ 226.882922][ T5752] Allocated by task 5621: [ 226.887240][ T5752] kasan_save_stack+0x30/0x50 [ 226.891941][ T5752] kasan_save_track+0x14/0x30 [ 226.896633][ T5752] __kasan_kmalloc+0xaa/0xb0 [ 226.901233][ T5752] __kvmalloc_node_noprof+0x360/0xa00 [ 226.906708][ T5752] alloc_netdev_mqs+0xd7/0x1560 [ 226.911558][ T5752] rtnl_create_link+0xc13/0xf80 [ 226.916410][ T5752] rtnl_newlink+0x13bd/0x2380 [ 226.921084][ T5752] rtnetlink_rcv_msg+0x95e/0xe90 [ 226.926023][ T5752] netlink_rcv_skb+0x159/0x420 [ 226.930799][ T5752] netlink_unicast+0x585/0x850 [ 226.935599][ T5752] netlink_sendmsg+0x8b0/0xda0 [ 226.940421][ T5752] __sys_sendto+0x468/0x4b0 [ 226.944947][ T5752] __x64_sys_sendto+0xe0/0x1c0 [ 226.949738][ T5752] do_syscall_64+0x10b/0xf80 [ 226.954344][ T5752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.960244][ T5752] [ 226.962561][ T5752] Freed by task 12: [ 226.966356][ T5752] kasan_save_stack+0x30/0x50 [ 226.971051][ T5752] kasan_save_track+0x14/0x30 [ 226.975744][ T5752] kasan_save_free_info+0x3b/0x70 [ 226.980780][ T5752] __kasan_slab_free+0x5f/0x80 [ 226.985560][ T5752] kfree+0x223/0x6c0 [ 226.989457][ T5752] device_release+0xd2/0x270 [ 226.994099][ T5752] kobject_put+0x1f7/0x640 [ 226.998537][ T5752] netdev_run_todo+0x80f/0x12b0 [ 227.003392][ T5752] default_device_exit_batch+0x94b/0xc60 [ 227.009029][ T5752] ops_undo_list+0x363/0xab0 [ 227.013624][ T5752] cleanup_net+0x499/0x920 [ 227.018053][ T5752] process_one_work+0xa0e/0x1980 [ 227.023024][ T5752] worker_thread+0x5ef/0xe50 [ 227.027628][ T5752] kthread+0x370/0x450 [ 227.031705][ T5752] ret_from_fork+0x72b/0xd50 [ 227.036304][ T5752] ret_from_fork_asm+0x1a/0x30 [ 227.041092][ T5752] [ 227.043407][ T5752] The buggy address belongs to the object at ffff88807ead8000 [ 227.043407][ T5752] which belongs to the cache kmalloc-cg-4k of size 4096 [ 227.057723][ T5752] The buggy address is located 752 bytes inside of [ 227.057723][ T5752] freed 4096-byte region [ffff88807ead8000, ffff88807ead9000) [ 227.071610][ T5752] [ 227.073925][ T5752] The buggy address belongs to the physical page: [ 227.080332][ T5752] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ead8 [ 227.089098][ T5752] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 227.097606][ T5752] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 227.105170][ T5752] page_type: f5(slab) [ 227.109158][ T5752] raw: 00fff00000000040 ffff88813fe4a500 dead000000000100 dead000000000122 [ 227.117771][ T5752] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 227.126382][ T5752] head: 00fff00000000040 ffff88813fe4a500 dead000000000100 dead000000000122 [ 227.135169][ T5752] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 227.143852][ T5752] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 227.152533][ T5752] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 227.161202][ T5752] page dumped because: kasan: bad access detected [ 227.167611][ T5752] page_owner tracks the page as allocated [ 227.173317][ T5752] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5621, tgid 5621 (syz-executor), ts 91193782069, free_ts 91174217799 [ 227.196447][ T5752] post_alloc_hook+0x153/0x170 [ 227.201236][ T5752] get_page_from_freelist+0x11a6/0x33b0 [ 227.206798][ T5752] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 227.212701][ T5752] new_slab+0xa6/0x6c0 [ 227.216787][ T5752] refill_objects+0x277/0x420 [ 227.221496][ T5752] __pcs_replace_empty_main+0x375/0x650 [ 227.227069][ T5752] __kvmalloc_node_noprof+0x7da/0xa00 [ 227.232466][ T5752] alloc_netdev_mqs+0xd7/0x1560 [ 227.237332][ T5752] rtnl_create_link+0xc13/0xf80 [ 227.242195][ T5752] rtnl_newlink+0x13bd/0x2380 [ 227.246878][ T5752] rtnetlink_rcv_msg+0x95e/0xe90 [ 227.251835][ T5752] netlink_rcv_skb+0x159/0x420 [ 227.256641][ T5752] netlink_unicast+0x585/0x850 [ 227.261430][ T5752] netlink_sendmsg+0x8b0/0xda0 [ 227.266213][ T5752] __sys_sendto+0x468/0x4b0 [ 227.270737][ T5752] __x64_sys_sendto+0xe0/0x1c0 [ 227.275528][ T5752] page last free pid 5623 tgid 5623 stack trace: [ 227.281849][ T5752] __free_frozen_pages+0x747/0x1040 [ 227.287063][ T5752] qlist_free_all+0x47/0xf0 [ 227.291581][ T5752] kasan_quarantine_reduce+0x1a0/0x1f0 [ 227.297059][ T5752] __kasan_slab_alloc+0x69/0x90 [ 227.301928][ T5752] __kmalloc_cache_noprof+0x243/0x6f0 [ 227.307308][ T5752] kset_create_and_add+0x4d/0x190 [ 227.312357][ T5752] netdev_register_kobject+0x1ef/0x3d0 [ 227.317830][ T5752] register_netdevice+0x151c/0x24b0 [ 227.323034][ T5752] veth_newlink+0x44a/0xa00 [ 227.327543][ T5752] rtnl_newlink+0x1499/0x2380 [ 227.332223][ T5752] rtnetlink_rcv_msg+0x95e/0xe90 [ 227.337166][ T5752] netlink_rcv_skb+0x159/0x420 [ 227.341949][ T5752] netlink_unicast+0x585/0x850 [ 227.346727][ T5752] netlink_sendmsg+0x8b0/0xda0 [ 227.351507][ T5752] __sys_sendto+0x468/0x4b0 [ 227.356032][ T5752] __x64_sys_sendto+0xe0/0x1c0 [ 227.360827][ T5752] [ 227.363142][ T5752] Memory state around the buggy address: [ 227.368763][ T5752] ffff88807ead8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.376833][ T5752] ffff88807ead8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.384899][ T5752] >ffff88807ead8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.392965][ T5752] ^ [ 227.400683][ T5752] ffff88807ead8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.408743][ T5752] ffff88807ead8380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.416797][ T5752] ================================================================== [ 227.562881][ T5752] Disabling lock debugging due to kernel taint [ 227.581547][ T5752] ================================================================== [ 227.589677][ T5752] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0xa4/0x1c0 [ 227.598491][ T5752] Read of size 8 at addr ffff88807ead80a8 by task kworker/0:4/5752 [ 227.606402][ T5752] [ 227.608726][ T5752] CPU: 0 UID: 0 PID: 5752 Comm: kworker/0:4 Tainted: G B syzkaller #0 PREEMPT(full) [ 227.608766][ T5752] Tainted: [B]=BAD_PAGE [ 227.608776][ T5752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 227.608795][ T5752] Workqueue: events smc_ib_port_event_work [ 227.608837][ T5752] Call Trace: [ 227.608847][ T5752] [ 227.608858][ T5752] dump_stack_lvl+0x100/0x190 [ 227.608888][ T5752] print_report+0x13d/0x4b0 [ 227.608929][ T5752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.608963][ T5752] ? __virt_addr_valid+0x239/0x430 [ 227.608992][ T5752] ? __ethtool_get_link_ksettings+0xa4/0x1c0 [ 227.609042][ T5752] kasan_report+0xdf/0x1d0 [ 227.609084][ T5752] ? __ethtool_get_link_ksettings+0xa4/0x1c0 [ 227.609133][ T5752] kasan_check_range+0x10f/0x1e0 [ 227.609159][ T5752] __ethtool_get_link_ksettings+0xa4/0x1c0 [ 227.609205][ T5752] __ethtool_get_link_ksettings+0x144/0x1c0 [ 227.609251][ T5752] ib_get_eth_speed+0x13a/0xb40 [ 227.609279][ T5752] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 227.609315][ T5752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.609349][ T5752] ? do_raw_spin_unlock+0x145/0x1e0 [ 227.609392][ T5752] rxe_query_port+0x12a/0x330 [ 227.609430][ T5752] ib_query_port+0x445/0x8b0 [ 227.609462][ T5752] smc_ib_port_event_work+0x14c/0xbd0 [ 227.609517][ T5752] ? smc_ib_port_event_work+0x54/0xbd0 [ 227.609558][ T5752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.609596][ T5752] process_one_work+0xa0e/0x1980 [ 227.609637][ T5752] ? __pfx_process_one_work+0x10/0x10 [ 227.609670][ T5752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.609709][ T5752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.609745][ T5752] worker_thread+0x5ef/0xe50 [ 227.609783][ T5752] ? __pfx_worker_thread+0x10/0x10 [ 227.609817][ T5752] ? kthread+0x13a/0x450 [ 227.609845][ T5752] ? __pfx_worker_thread+0x10/0x10 [ 227.609878][ T5752] kthread+0x370/0x450 [ 227.609906][ T5752] ? __pfx_kthread+0x10/0x10 [ 227.609937][ T5752] ret_from_fork+0x72b/0xd50 [ 227.609970][ T5752] ? __pfx_ret_from_fork+0x10/0x10 [ 227.610003][ T5752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.610041][ T5752] ? __switch_to+0x800/0x1100 [ 227.610080][ T5752] ? __switch_to_asm+0x39/0x70 [ 227.610117][ T5752] ? __pfx_kthread+0x10/0x10 [ 227.610148][ T5752] ret_from_fork_asm+0x1a/0x30 [ 227.610194][ T5752] [ 227.610203][ T5752] [ 227.834839][ T5752] Allocated by task 5621: [ 227.839164][ T5752] kasan_save_stack+0x30/0x50 [ 227.843863][ T5752] kasan_save_track+0x14/0x30 [ 227.848545][ T5752] __kasan_kmalloc+0xaa/0xb0 [ 227.853140][ T5752] __kvmalloc_node_noprof+0x360/0xa00 [ 227.858520][ T5752] alloc_netdev_mqs+0xd7/0x1560 [ 227.863373][ T5752] rtnl_create_link+0xc13/0xf80 [ 227.868241][ T5752] rtnl_newlink+0x13bd/0x2380 [ 227.872928][ T5752] rtnetlink_rcv_msg+0x95e/0xe90 [ 227.877861][ T5752] netlink_rcv_skb+0x159/0x420 [ 227.882631][ T5752] netlink_unicast+0x585/0x850 [ 227.887411][ T5752] netlink_sendmsg+0x8b0/0xda0 [ 227.892193][ T5752] __sys_sendto+0x468/0x4b0 [ 227.896711][ T5752] __x64_sys_sendto+0xe0/0x1c0 [ 227.901504][ T5752] do_syscall_64+0x10b/0xf80 [ 227.906098][ T5752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.911990][ T5752] [ 227.914298][ T5752] Freed by task 12: [ 227.918090][ T5752] kasan_save_stack+0x30/0x50 [ 227.922775][ T5752] kasan_save_track+0x14/0x30 [ 227.927467][ T5752] kasan_save_free_info+0x3b/0x70 [ 227.932509][ T5752] __kasan_slab_free+0x5f/0x80 [ 227.937290][ T5752] kfree+0x223/0x6c0 [ 227.941211][ T5752] device_release+0xd2/0x270 [ 227.945821][ T5752] kobject_put+0x1f7/0x640 [ 227.950250][ T5752] netdev_run_todo+0x80f/0x12b0 [ 227.955101][ T5752] default_device_exit_batch+0x94b/0xc60 [ 227.960737][ T5752] ops_undo_list+0x363/0xab0 [ 227.965324][ T5752] cleanup_net+0x499/0x920 [ 227.969739][ T5752] process_one_work+0xa0e/0x1980 [ 227.974676][ T5752] worker_thread+0x5ef/0xe50 [ 227.979269][ T5752] kthread+0x370/0x450 [ 227.983342][ T5752] ret_from_fork+0x72b/0xd50 [ 227.987983][ T5752] ret_from_fork_asm+0x1a/0x30 [ 227.992765][ T5752] [ 227.995074][ T5752] The buggy address belongs to the object at ffff88807ead8000 [ 227.995074][ T5752] which belongs to the cache kmalloc-cg-4k of size 4096 [ 228.009409][ T5752] The buggy address is located 168 bytes inside of [ 228.009409][ T5752] freed 4096-byte region [ffff88807ead8000, ffff88807ead9000) [ 228.023293][ T5752] [ 228.025605][ T5752] The buggy address belongs to the physical page: [ 228.032006][ T5752] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ead8 [ 228.040770][ T5752] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 228.049264][ T5752] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 228.056802][ T5752] page_type: f5(slab) [ 228.060788][ T5752] raw: 00fff00000000040 ffff88813fe4a500 dead000000000100 dead000000000122 [ 228.069377][ T5752] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 228.077967][ T5752] head: 00fff00000000040 ffff88813fe4a500 dead000000000100 dead000000000122 [ 228.086652][ T5752] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 228.095325][ T5752] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 228.104010][ T5752] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 228.112672][ T5752] page dumped because: kasan: bad access detected [ 228.119083][ T5752] page_owner tracks the page as allocated [ 228.124794][ T5752] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5621, tgid 5621 (syz-executor), ts 91193782069, free_ts 91174217799 [ 228.147904][ T5752] post_alloc_hook+0x153/0x170 [ 228.152676][ T5752] get_page_from_freelist+0x11a6/0x33b0 [ 228.158225][ T5752] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 228.164123][ T5752] new_slab+0xa6/0x6c0 [ 228.168191][ T5752] refill_objects+0x277/0x420 [ 228.172866][ T5752] __pcs_replace_empty_main+0x375/0x650 [ 228.178429][ T5752] __kvmalloc_node_noprof+0x7da/0xa00 [ 228.183844][ T5752] alloc_netdev_mqs+0xd7/0x1560 [ 228.188693][ T5752] rtnl_create_link+0xc13/0xf80 [ 228.193544][ T5752] rtnl_newlink+0x13bd/0x2380 [ 228.198218][ T5752] rtnetlink_rcv_msg+0x95e/0xe90 [ 228.203154][ T5752] netlink_rcv_skb+0x159/0x420 [ 228.207949][ T5752] netlink_unicast+0x585/0x850 [ 228.212729][ T5752] netlink_sendmsg+0x8b0/0xda0 [ 228.217496][ T5752] __sys_sendto+0x468/0x4b0 [ 228.222010][ T5752] __x64_sys_sendto+0xe0/0x1c0 [ 228.226832][ T5752] page last free pid 5623 tgid 5623 stack trace: [ 228.233159][ T5752] __free_frozen_pages+0x747/0x1040 [ 228.238360][ T5752] qlist_free_all+0x47/0xf0 [ 228.242868][ T5752] kasan_quarantine_reduce+0x1a0/0x1f0 [ 228.248338][ T5752] __kasan_slab_alloc+0x69/0x90 [ 228.253204][ T5752] __kmalloc_cache_noprof+0x243/0x6f0 [ 228.258610][ T5752] kset_create_and_add+0x4d/0x190 [ 228.263653][ T5752] netdev_register_kobject+0x1ef/0x3d0 [ 228.269125][ T5752] register_netdevice+0x151c/0x24b0 [ 228.274343][ T5752] veth_newlink+0x44a/0xa00 [ 228.278848][ T5752] rtnl_newlink+0x1499/0x2380 [ 228.283527][ T5752] rtnetlink_rcv_msg+0x95e/0xe90 [ 228.288466][ T5752] netlink_rcv_skb+0x159/0x420 [ 228.293242][ T5752] netlink_unicast+0x585/0x850 [ 228.298021][ T5752] netlink_sendmsg+0x8b0/0xda0 [ 228.302841][ T5752] __sys_sendto+0x468/0x4b0 [ 228.307381][ T5752] __x64_sys_sendto+0xe0/0x1c0 [ 228.312164][ T5752] [ 228.314474][ T5752] Memory state around the buggy address: [ 228.320091][ T5752] ffff88807ead7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 228.328323][ T5752] ffff88807ead8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.336378][ T5752] >ffff88807ead8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.344432][ T5752] ^ [ 228.349796][ T5752] ffff88807ead8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.357858][ T5752] ffff88807ead8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.365909][ T5752] ================================================================== [ 228.379398][ T5752] ================================================================== [ 228.387503][ T5752] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x19d/0x1c0 [ 228.396408][ T5752] Read of size 8 at addr ffff88807ead80a8 by task kworker/0:4/5752 [ 228.404306][ T5752] [ 228.406634][ T5752] CPU: 0 UID: 0 PID: 5752 Comm: kworker/0:4 Tainted: G B syzkaller #0 PREEMPT(full) [ 228.406684][ T5752] Tainted: [B]=BAD_PAGE [ 228.406693][ T5752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 228.406713][ T5752] Workqueue: events smc_ib_port_event_work [ 228.406754][ T5752] Call Trace: [ 228.406765][ T5752] [ 228.406775][ T5752] dump_stack_lvl+0x100/0x190 [ 228.406805][ T5752] print_report+0x13d/0x4b0 [ 228.406846][ T5752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.406879][ T5752] ? __virt_addr_valid+0x239/0x430 [ 228.406909][ T5752] ? __ethtool_get_link_ksettings+0x19d/0x1c0 [ 228.406963][ T5752] kasan_report+0xdf/0x1d0 [ 228.407008][ T5752] ? __ethtool_get_link_ksettings+0x19d/0x1c0 [ 228.407062][ T5752] __ethtool_get_link_ksettings+0x19d/0x1c0 [ 228.407109][ T5752] __ethtool_get_link_ksettings+0x144/0x1c0 [ 228.407170][ T5752] ib_get_eth_speed+0x13a/0xb40 [ 228.407206][ T5752] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 228.407241][ T5752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.407275][ T5752] ? do_raw_spin_unlock+0x145/0x1e0 [ 228.407323][ T5752] rxe_query_port+0x12a/0x330 [ 228.407361][ T5752] ib_query_port+0x445/0x8b0 [ 228.407390][ T5752] smc_ib_port_event_work+0x14c/0xbd0 [ 228.407430][ T5752] ? smc_ib_port_event_work+0x54/0xbd0 [ 228.407469][ T5752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.407517][ T5752] process_one_work+0xa0e/0x1980 [ 228.407572][ T5752] ? __pfx_process_one_work+0x10/0x10 [ 228.407615][ T5752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.407666][ T5752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.407714][ T5752] worker_thread+0x5ef/0xe50 [ 228.407764][ T5752] ? __pfx_worker_thread+0x10/0x10 [ 228.407808][ T5752] ? kthread+0x13a/0x450 [ 228.407844][ T5752] ? __pfx_worker_thread+0x10/0x10 [ 228.407888][ T5752] kthread+0x370/0x450 [ 228.407926][ T5752] ? __pfx_kthread+0x10/0x10 [ 228.407967][ T5752] ret_from_fork+0x72b/0xd50 [ 228.408009][ T5752] ? __pfx_ret_from_fork+0x10/0x10 [ 228.408052][ T5752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.408095][ T5752] ? __switch_to+0x800/0x1100 [ 228.408147][ T5752] ? __switch_to_asm+0x39/0x70 [ 228.408197][ T5752] ? __pfx_kthread+0x10/0x10 [ 228.408239][ T5752] ret_from_fork_asm+0x1a/0x30 [ 228.408304][ T5752] [ 228.408314][ T5752] [ 228.628324][ T5752] Allocated by task 5621: [ 228.632643][ T5752] kasan_save_stack+0x30/0x50 [ 228.637334][ T5752] kasan_save_track+0x14/0x30 [ 228.642085][ T5752] __kasan_kmalloc+0xaa/0xb0 [ 228.646679][ T5752] __kvmalloc_node_noprof+0x360/0xa00 [ 228.652064][ T5752] alloc_netdev_mqs+0xd7/0x1560 [ 228.656934][ T5752] rtnl_create_link+0xc13/0xf80 [ 228.661784][ T5752] rtnl_newlink+0x13bd/0x2380 [ 228.666461][ T5752] rtnetlink_rcv_msg+0x95e/0xe90 [ 228.671407][ T5752] netlink_rcv_skb+0x159/0x420 [ 228.676180][ T5752] netlink_unicast+0x585/0x850 [ 228.680951][ T5752] netlink_sendmsg+0x8b0/0xda0 [ 228.685733][ T5752] __sys_sendto+0x468/0x4b0 [ 228.690247][ T5752] __x64_sys_sendto+0xe0/0x1c0 [ 228.695067][ T5752] do_syscall_64+0x10b/0xf80 [ 228.699686][ T5752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.705578][ T5752] [ 228.707886][ T5752] Freed by task 12: [ 228.711680][ T5752] kasan_save_stack+0x30/0x50 [ 228.716367][ T5752] kasan_save_track+0x14/0x30 [ 228.721072][ T5752] kasan_save_free_info+0x3b/0x70 [ 228.726097][ T5752] __kasan_slab_free+0x5f/0x80 [ 228.730894][ T5752] kfree+0x223/0x6c0 [ 228.734785][ T5752] device_release+0xd2/0x270 [ 228.739384][ T5752] kobject_put+0x1f7/0x640 [ 228.743811][ T5752] netdev_run_todo+0x80f/0x12b0 [ 228.748680][ T5752] default_device_exit_batch+0x94b/0xc60 [ 228.754314][ T5752] ops_undo_list+0x363/0xab0 [ 228.758900][ T5752] cleanup_net+0x499/0x920 [ 228.763316][ T5752] process_one_work+0xa0e/0x1980 [ 228.768257][ T5752] worker_thread+0x5ef/0xe50 [ 228.772850][ T5752] kthread+0x370/0x450 [ 228.777006][ T5752] ret_from_fork+0x72b/0xd50 [ 228.781629][ T5752] ret_from_fork_asm+0x1a/0x30 [ 228.786493][ T5752] [ 228.788813][ T5752] The buggy address belongs to the object at ffff88807ead8000 [ 228.788813][ T5752] which belongs to the cache kmalloc-cg-4k of size 4096 [ 228.803137][ T5752] The buggy address is located 168 bytes inside of [ 228.803137][ T5752] freed 4096-byte region [ffff88807ead8000, ffff88807ead9000) [ 228.817025][ T5752] [ 228.819365][ T5752] The buggy address belongs to the physical page: [ 228.825772][ T5752] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ead8 [ 228.834532][ T5752] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 228.843024][ T5752] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 228.850567][ T5752] page_type: f5(slab) [ 228.854546][ T5752] raw: 00fff00000000040 ffff88813fe4a500 dead000000000100 dead000000000122 [ 228.863128][ T5752] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 228.871713][ T5752] head: 00fff00000000040 ffff88813fe4a500 dead000000000100 dead000000000122 [ 228.880396][ T5752] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 228.889069][ T5752] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 228.897773][ T5752] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 228.906435][ T5752] page dumped because: kasan: bad access detected [ 228.912838][ T5752] page_owner tracks the page as allocated [ 228.918539][ T5752] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5621, tgid 5621 (syz-executor), ts 91193782069, free_ts 91174217799 [ 228.941653][ T5752] post_alloc_hook+0x153/0x170 [ 228.946425][ T5752] get_page_from_freelist+0x11a6/0x33b0 [ 228.951978][ T5752] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 228.957881][ T5752] new_slab+0xa6/0x6c0 [ 228.961947][ T5752] refill_objects+0x277/0x420 [ 228.966630][ T5752] __pcs_replace_empty_main+0x375/0x650 [ 228.972183][ T5752] __kvmalloc_node_noprof+0x7da/0xa00 [ 228.977589][ T5752] alloc_netdev_mqs+0xd7/0x1560 [ 228.982455][ T5752] rtnl_create_link+0xc13/0xf80 [ 228.987302][ T5752] rtnl_newlink+0x13bd/0x2380 [ 228.991974][ T5752] rtnetlink_rcv_msg+0x95e/0xe90 [ 228.996935][ T5752] netlink_rcv_skb+0x159/0x420 [ 229.001714][ T5752] netlink_unicast+0x585/0x850 [ 229.006482][ T5752] netlink_sendmsg+0x8b0/0xda0 [ 229.011254][ T5752] __sys_sendto+0x468/0x4b0 [ 229.015776][ T5752] __x64_sys_sendto+0xe0/0x1c0 [ 229.020560][ T5752] page last free pid 5623 tgid 5623 stack trace: [ 229.026886][ T5752] __free_frozen_pages+0x747/0x1040 [ 229.032109][ T5752] qlist_free_all+0x47/0xf0 [ 229.036622][ T5752] kasan_quarantine_reduce+0x1a0/0x1f0 [ 229.042103][ T5752] __kasan_slab_alloc+0x69/0x90 [ 229.046961][ T5752] __kmalloc_cache_noprof+0x243/0x6f0 [ 229.052334][ T5752] kset_create_and_add+0x4d/0x190 [ 229.057373][ T5752] netdev_register_kobject+0x1ef/0x3d0 [ 229.062837][ T5752] register_netdevice+0x151c/0x24b0 [ 229.068036][ T5752] veth_newlink+0x44a/0xa00 [ 229.072542][ T5752] rtnl_newlink+0x1499/0x2380 [ 229.077227][ T5752] rtnetlink_rcv_msg+0x95e/0xe90 [ 229.082162][ T5752] netlink_rcv_skb+0x159/0x420 [ 229.086945][ T5752] netlink_unicast+0x585/0x850 [ 229.091733][ T5752] netlink_sendmsg+0x8b0/0xda0 [ 229.096514][ T5752] __sys_sendto+0x468/0x4b0 [ 229.101039][ T5752] __x64_sys_sendto+0xe0/0x1c0 [ 229.105827][ T5752] [ 229.108141][ T5752] Memory state around the buggy address: [ 229.113761][ T5752] ffff88807ead7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 229.121820][ T5752] ffff88807ead8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.129885][ T5752] >ffff88807ead8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.137945][ T5752] ^ [ 229.143312][ T5752] ffff88807ead8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.151369][ T5752] ffff88807ead8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.159423][ T5752] ================================================================== [ 229.173529][ T5752] ================================================================== [ 229.181611][ T5752] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x1b1/0x1c0 [ 229.190496][ T5752] Read of size 8 at addr ffff88807ead82f0 by task kworker/0:4/5752 [ 229.198394][ T5752] [ 229.200722][ T5752] CPU: 0 UID: 0 PID: 5752 Comm: kworker/0:4 Tainted: G B syzkaller #0 PREEMPT(full) [ 229.200772][ T5752] Tainted: [B]=BAD_PAGE [ 229.200784][ T5752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 229.200807][ T5752] Workqueue: events smc_ib_port_event_work [ 229.200857][ T5752] Call Trace: [ 229.200868][ T5752] [ 229.200881][ T5752] dump_stack_lvl+0x100/0x190 [ 229.200917][ T5752] print_report+0x13d/0x4b0 [ 229.200967][ T5752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.201008][ T5752] ? __virt_addr_valid+0x239/0x430 [ 229.201043][ T5752] ? __ethtool_get_link_ksettings+0x1b1/0x1c0 [ 229.201099][ T5752] kasan_report+0xdf/0x1d0 [ 229.201150][ T5752] ? __ethtool_get_link_ksettings+0x1b1/0x1c0 [ 229.201210][ T5752] __ethtool_get_link_ksettings+0x1b1/0x1c0 [ 229.201266][ T5752] __ethtool_get_link_ksettings+0x144/0x1c0 [ 229.201326][ T5752] ib_get_eth_speed+0x13a/0xb40 [ 229.201361][ T5752] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 229.201402][ T5752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.201442][ T5752] ? do_raw_spin_unlock+0x145/0x1e0 [ 229.201494][ T5752] rxe_query_port+0x12a/0x330 [ 229.201541][ T5752] ib_query_port+0x445/0x8b0 [ 229.201576][ T5752] smc_ib_port_event_work+0x14c/0xbd0 [ 229.201624][ T5752] ? smc_ib_port_event_work+0x54/0xbd0 [ 229.201672][ T5752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.201718][ T5752] process_one_work+0xa0e/0x1980 [ 229.201768][ T5752] ? __pfx_process_one_work+0x10/0x10 [ 229.201808][ T5752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.201855][ T5752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.201899][ T5752] worker_thread+0x5ef/0xe50 [ 229.201944][ T5752] ? __pfx_worker_thread+0x10/0x10 [ 229.201985][ T5752] ? kthread+0x13a/0x450 [ 229.202020][ T5752] ? __pfx_worker_thread+0x10/0x10 [ 229.202060][ T5752] kthread+0x370/0x450 [ 229.202094][ T5752] ? __pfx_kthread+0x10/0x10 [ 229.202131][ T5752] ret_from_fork+0x72b/0xd50 [ 229.202171][ T5752] ? __pfx_ret_from_fork+0x10/0x10 [ 229.202211][ T5752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.202251][ T5752] ? __switch_to+0x800/0x1100 [ 229.202302][ T5752] ? __switch_to_asm+0x39/0x70 [ 229.202347][ T5752] ? __pfx_kthread+0x10/0x10 [ 229.202384][ T5752] ret_from_fork_asm+0x1a/0x30 [ 229.202440][ T5752] [ 229.202451][ T5752] [ 229.422318][ T5752] Allocated by task 5621: [ 229.426639][ T5752] kasan_save_stack+0x30/0x50 [ 229.431344][ T5752] kasan_save_track+0x14/0x30 [ 229.436048][ T5752] __kasan_kmalloc+0xaa/0xb0 [ 229.440653][ T5752] __kvmalloc_node_noprof+0x360/0xa00 [ 229.446043][ T5752] alloc_netdev_mqs+0xd7/0x1560 [ 229.450895][ T5752] rtnl_create_link+0xc13/0xf80 [ 229.455746][ T5752] rtnl_newlink+0x13bd/0x2380 [ 229.460487][ T5752] rtnetlink_rcv_msg+0x95e/0xe90 [ 229.465427][ T5752] netlink_rcv_skb+0x159/0x420 [ 229.470203][ T5752] netlink_unicast+0x585/0x850 [ 229.474980][ T5752] netlink_sendmsg+0x8b0/0xda0 [ 229.479776][ T5752] __sys_sendto+0x468/0x4b0 [ 229.484302][ T5752] __x64_sys_sendto+0xe0/0x1c0 [ 229.489084][ T5752] do_syscall_64+0x10b/0xf80 [ 229.493687][ T5752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.499585][ T5752] [ 229.501898][ T5752] Freed by task 12: [ 229.505691][ T5752] kasan_save_stack+0x30/0x50 [ 229.510409][ T5752] kasan_save_track+0x14/0x30 [ 229.515097][ T5752] kasan_save_free_info+0x3b/0x70 [ 229.520126][ T5752] __kasan_slab_free+0x5f/0x80 [ 229.524902][ T5752] kfree+0x223/0x6c0 [ 229.528800][ T5752] device_release+0xd2/0x270 [ 229.533412][ T5752] kobject_put+0x1f7/0x640 [ 229.537855][ T5752] netdev_run_todo+0x80f/0x12b0 [ 229.542709][ T5752] default_device_exit_batch+0x94b/0xc60 [ 229.548347][ T5752] ops_undo_list+0x363/0xab0 [ 229.552938][ T5752] cleanup_net+0x499/0x920 [ 229.557361][ T5752] process_one_work+0xa0e/0x1980 [ 229.562310][ T5752] worker_thread+0x5ef/0xe50 [ 229.567085][ T5752] kthread+0x370/0x450 [ 229.571159][ T5752] ret_from_fork+0x72b/0xd50 [ 229.575756][ T5752] ret_from_fork_asm+0x1a/0x30 [ 229.580539][ T5752] [ 229.582852][ T5752] The buggy address belongs to the object at ffff88807ead8000 [ 229.582852][ T5752] which belongs to the cache kmalloc-cg-4k of size 4096 [ 229.597161][ T5752] The buggy address is located 752 bytes inside of [ 229.597161][ T5752] freed 4096-byte region [ffff88807ead8000, ffff88807ead9000) [ 229.611046][ T5752] [ 229.613359][ T5752] The buggy address belongs to the physical page: [ 229.619759][ T5752] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ead8 [ 229.628518][ T5752] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 229.637018][ T5752] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 229.644565][ T5752] page_type: f5(slab) [ 229.648545][ T5752] raw: 00fff00000000040 ffff88813fe4a500 dead000000000100 dead000000000122 [ 229.657133][ T5752] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 229.665719][ T5752] head: 00fff00000000040 ffff88813fe4a500 dead000000000100 dead000000000122 [ 229.674391][ T5752] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 229.683067][ T5752] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 229.691740][ T5752] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 229.700402][ T5752] page dumped because: kasan: bad access detected [ 229.706805][ T5752] page_owner tracks the page as allocated [ 229.712510][ T5752] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5621, tgid 5621 (syz-executor), ts 91193782069, free_ts 91174217799 [ 229.735633][ T5752] post_alloc_hook+0x153/0x170 [ 229.740418][ T5752] get_page_from_freelist+0x11a6/0x33b0 [ 229.745979][ T5752] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 229.751884][ T5752] new_slab+0xa6/0x6c0 [ 229.755956][ T5752] refill_objects+0x277/0x420 [ 229.760645][ T5752] __pcs_replace_empty_main+0x375/0x650 [ 229.766199][ T5752] __kvmalloc_node_noprof+0x7da/0xa00 [ 229.771585][ T5752] alloc_netdev_mqs+0xd7/0x1560 [ 229.776434][ T5752] rtnl_create_link+0xc13/0xf80 [ 229.781289][ T5752] rtnl_newlink+0x13bd/0x2380 [ 229.785969][ T5752] rtnetlink_rcv_msg+0x95e/0xe90 [ 229.790907][ T5752] netlink_rcv_skb+0x159/0x420 [ 229.795681][ T5752] netlink_unicast+0x585/0x850 [ 229.800455][ T5752] netlink_sendmsg+0x8b0/0xda0 [ 229.805233][ T5752] __sys_sendto+0x468/0x4b0 [ 229.809757][ T5752] __x64_sys_sendto+0xe0/0x1c0 [ 229.814541][ T5752] page last free pid 5623 tgid 5623 stack trace: [ 229.820864][ T5752] __free_frozen_pages+0x747/0x1040 [ 229.826069][ T5752] qlist_free_all+0x47/0xf0 [ 229.830581][ T5752] kasan_quarantine_reduce+0x1a0/0x1f0 [ 229.836051][ T5752] __kasan_slab_alloc+0x69/0x90 [ 229.840917][ T5752] __kmalloc_cache_noprof+0x243/0x6f0 [ 229.846303][ T5752] kset_create_and_add+0x4d/0x190 [ 229.851356][ T5752] netdev_register_kobject+0x1ef/0x3d0 [ 229.856827][ T5752] register_netdevice+0x151c/0x24b0 [ 229.862029][ T5752] veth_newlink+0x44a/0xa00 [ 229.866534][ T5752] rtnl_newlink+0x1499/0x2380 [ 229.871211][ T5752] rtnetlink_rcv_msg+0x95e/0xe90 [ 229.876154][ T5752] netlink_rcv_skb+0x159/0x420 [ 229.880932][ T5752] netlink_unicast+0x585/0x850 [ 229.885705][ T5752] netlink_sendmsg+0x8b0/0xda0 [ 229.890479][ T5752] __sys_sendto+0x468/0x4b0 [ 229.895003][ T5752] __x64_sys_sendto+0xe0/0x1c0 [ 229.899797][ T5752] [ 229.902112][ T5752] Memory state around the buggy address: [ 229.907731][ T5752] ffff88807ead8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.915787][ T5752] ffff88807ead8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.923843][ T5752] >ffff88807ead8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.931896][ T5752] ^ [ 229.939602][ T5752] ffff88807ead8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.947692][ T5752] ffff88807ead8380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.955774][ T5752] ================================================================== [ 230.068691][ T89] smbdirect: ib_dev[syz2] removed [ 230.486640][ T9005] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.505857][ T9005] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.521587][ T9005] bridge_slave_0: entered allmulticast mode [ 230.531226][ T9005] bridge_slave_0: entered promiscuous mode [ 230.561714][ T9005] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.576943][ T9005] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.600639][ T9005] bridge_slave_1: entered allmulticast mode [ 230.638708][ T9005] bridge_slave_1: entered promiscuous mode [ 230.647397][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 230.704811][ T9005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.723390][ T9005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.804013][ T9005] team0: Port device team_slave_0 added [ 230.813743][ T9005] team0: Port device team_slave_1 added [ 230.921662][ T9005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.936822][ T9005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.974405][ T9005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.998017][ T9005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.012363][ T9005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.060756][ T9005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.102552][ T9005] hsr_slave_0: entered promiscuous mode [ 231.108953][ T9005] hsr_slave_1: entered promiscuous mode [ 231.114957][ T9005] debugfs: 'hsr0' already exists in 'hsr' [ 231.122170][ T9005] Cannot create hsr debugfs directory [ 231.262014][ T9005] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 231.271646][ T9005] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 231.281262][ T9005] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 231.291181][ T9005] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 231.299213][ T9005] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 231.309125][ T9005] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 231.317196][ T9005] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 231.328242][ T9005] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 231.403876][ T9005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.422831][ T9005] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.434616][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.441717][ T3305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.457223][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4 [ 231.471412][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.478565][ T3305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.526653][ T9005] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.852420][ T9005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.044500][ T9005] veth0_vlan: entered promiscuous mode [ 232.055031][ T9005] veth1_vlan: entered promiscuous mode [ 232.080164][ T9005] veth0_macvtap: entered promiscuous mode [ 232.091627][ T9005] veth1_macvtap: entered promiscuous mode [ 232.111219][ T9005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.122544][ T9005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.143247][ T3305] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.152682][ T3305] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.162926][ T3305] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.172090][ T3305] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.217309][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.230509][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.249313][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.257200][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50